feat: project native persona authorization status

2026-08-12 06:29:51 +08:00 · 2026-08-12 06:29:51 +08:00 · 8f18c3fba3
commit 8f18c3fba3
parent 584f38b478
38 changed files with 268 additions and 40 deletions
--- a/product-source/hololake-platform/src/lib/locales/be-BY.json
+++ b/product-source/hololake-platform/src/lib/locales/be-BY.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/be-Latn.json
+++ b/product-source/hololake-platform/src/lib/locales/be-Latn.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/de-DE.json
+++ b/product-source/hololake-platform/src/lib/locales/de-DE.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/en.json
+++ b/product-source/hololake-platform/src/lib/locales/en.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/es-419.json
+++ b/product-source/hololake-platform/src/lib/locales/es-419.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/es-ES.json
+++ b/product-source/hololake-platform/src/lib/locales/es-ES.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/fr-FR.json
+++ b/product-source/hololake-platform/src/lib/locales/fr-FR.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/id-ID.json
+++ b/product-source/hololake-platform/src/lib/locales/id-ID.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/it-IT.json
+++ b/product-source/hololake-platform/src/lib/locales/it-IT.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/ja-JP.json
+++ b/product-source/hololake-platform/src/lib/locales/ja-JP.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/ko-KR.json
+++ b/product-source/hololake-platform/src/lib/locales/ko-KR.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/pl-PL.json
+++ b/product-source/hololake-platform/src/lib/locales/pl-PL.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/pt-BR.json
+++ b/product-source/hololake-platform/src/lib/locales/pt-BR.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/pt-PT.json
+++ b/product-source/hololake-platform/src/lib/locales/pt-PT.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/ru-RU.json
+++ b/product-source/hololake-platform/src/lib/locales/ru-RU.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/sk-SK.json
+++ b/product-source/hololake-platform/src/lib/locales/sk-SK.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/sv-SE.json
+++ b/product-source/hololake-platform/src/lib/locales/sv-SE.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/uk-UA.json
+++ b/product-source/hololake-platform/src/lib/locales/uk-UA.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/vi.json
+++ b/product-source/hololake-platform/src/lib/locales/vi.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/locales/zh-CN.json
+++ b/product-source/hololake-platform/src/lib/locales/zh-CN.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git 证据",
  "hololake.personaRuntime.eventChain": "事件链头",
  "hololake.personaRuntime.attribution": "人类责任主体",
-  "hololake.personaRuntime.readOnly": "只读投影 · 不触发执行动作"
+  "hololake.personaRuntime.readOnly": "只读投影 · 不触发执行动作",
+  "hololake.personaAuthorization.systemDirect": "系统直连 · 当前没有可信授权签名方",
+  "hololake.personaAuthorization.unavailable": "授权状态不可核验 · 保持系统直连"
 }
--- a/product-source/hololake-platform/src/lib/locales/zh-TW.json
+++ b/product-source/hololake-platform/src/lib/locales/zh-TW.json
@ -1169,5 +1169,7 @@
  "hololake.personaRuntime.gitHead": "Git evidence",
  "hololake.personaRuntime.eventChain": "Event chain head",
  "hololake.personaRuntime.attribution": "Human responsibility",
-  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action"
+  "hololake.personaRuntime.readOnly": "Read-only projection · no execution action",
+  "hololake.personaAuthorization.systemDirect": "System direct · no trusted authorization signer is registered",
+  "hololake.personaAuthorization.unavailable": "Authorization status unverifiable · remaining system direct"
 }
--- a/product-source/hololake-platform/src/lib/personaControlAuthorization.ts
+++ b/product-source/hololake-platform/src/lib/personaControlAuthorization.ts
@ -39,6 +39,22 @@ export type NativePersonaControlAuthorizationVerification = {
  authorizationEnabled: true
 }

+export type PersonaControlAuthorizationStatus =
+  | {
+    phase: 'system_direct'
+    reason: 'NO_TRUSTED_SIGNER'
+    sourceCommit: string
+    signerCount: 0
+    authorizationEnabled: false
+  }
+  | {
+    phase: 'unavailable'
+    reason: string
+    sourceCommit: null
+    signerCount: 0
+    authorizationEnabled: false
+  }
+
 function isRecord(value: unknown): value is Record<string, unknown> {
  return typeof value === 'object' && value !== null && !Array.isArray(value)
 }
@ -62,3 +78,58 @@ export function hasPersonaPrimaryControlAuthorization(
    && typeof signerId === 'string'
    && /^[A-Z0-9][A-Z0-9._:@-]{1,159}$/.test(signerId)
 }
+
+/**
+ * Projects only the currently published empty-trust registry state. A future
+ * non-empty registry is not interpreted here because signer presence alone is
+ * never persona-control authorization.
+ */
+export function parsePersonaControlAuthorizationStatus(
+  receipt: unknown,
+): PersonaControlAuthorizationStatus {
+  if (!isRecord(receipt) || Object.keys(receipt).length !== 5) {
+    return unavailableStatus('REGISTRY_RECEIPT_INVALID')
+  }
+  const sourceCommit = Reflect.get(receipt, 'sourceCommit')
+  if (
+    exactString(receipt, 'status', 'CURRENT_EMPTY')
+    && Reflect.get(receipt, 'reason') === null
+    && typeof sourceCommit === 'string'
+    && /^[a-f0-9]{40}([a-f0-9]{24})?$/.test(sourceCommit)
+    && Reflect.get(receipt, 'signerCount') === 0
+    && Reflect.get(receipt, 'authorizationEnabled') === false
+  ) {
+    return {
+      phase: 'system_direct',
+      reason: 'NO_TRUSTED_SIGNER',
+      sourceCommit,
+      signerCount: 0,
+      authorizationEnabled: false,
+    }
+  }
+  const reason = Reflect.get(receipt, 'reason')
+  return unavailableStatus(typeof reason === 'string' && reason ? reason : 'REGISTRY_RECEIPT_INVALID')
+}
+
+function unavailableStatus(reason: string): PersonaControlAuthorizationStatus {
+  return {
+    phase: 'unavailable',
+    reason,
+    sourceCommit: null,
+    signerCount: 0,
+    authorizationEnabled: false,
+  }
+}
+
+export async function loadPersonaControlAuthorizationStatus(): Promise<PersonaControlAuthorizationStatus> {
+  try {
+    const receipt = isTauri()
+      ? await invoke<unknown>('load_persona_control_authorization_registry')
+      : await mockInvoke<unknown>('load_persona_control_authorization_registry')
+    return parsePersonaControlAuthorizationStatus(receipt)
+  } catch {
+    return unavailableStatus('REGISTRY_UNAVAILABLE')
+  }
+}
+import { invoke } from '@tauri-apps/api/core'
+import { isTauri, mockInvoke } from '../mock-tauri'
--- a/product-source/hololake-platform/src/lib/personaControlAuthorizationStatus.test.ts
+++ b/product-source/hololake-platform/src/lib/personaControlAuthorizationStatus.test.ts
@ -0,0 +1,53 @@
+import { describe, expect, it } from 'vitest'
+import { parsePersonaControlAuthorizationStatus } from './personaControlAuthorization'
+
+const currentEmpty = {
+  status: 'CURRENT_EMPTY',
+  reason: null,
+  sourceCommit: 'a'.repeat(40),
+  signerCount: 0,
+  authorizationEnabled: false,
+}
+
+describe('persona-control authorization status projection', () => {
+  it('projects only the exact native empty-trust receipt as system-direct', () => {
+    expect(parsePersonaControlAuthorizationStatus(currentEmpty)).toEqual({
+      phase: 'system_direct',
+      reason: 'NO_TRUSTED_SIGNER',
+      sourceCommit: 'a'.repeat(40),
+      signerCount: 0,
+      authorizationEnabled: false,
+    })
+  })
+
+  it.each([
+    ['extra field', { ...currentEmpty, trusted: true }],
+    ['non-empty registry', { ...currentEmpty, status: 'CURRENT', signerCount: 1 }],
+    ['authorization enabled', { ...currentEmpty, authorizationEnabled: true }],
+    ['invalid commit', { ...currentEmpty, sourceCommit: 'main' }],
+  ])('fails closed for %s', (_label, receipt) => {
+    expect(parsePersonaControlAuthorizationStatus(receipt)).toEqual({
+      phase: 'unavailable',
+      reason: 'REGISTRY_RECEIPT_INVALID',
+      sourceCommit: null,
+      signerCount: 0,
+      authorizationEnabled: false,
+    })
+  })
+
+  it('preserves a bounded native unavailable reason without creating authority', () => {
+    expect(parsePersonaControlAuthorizationStatus({
+      status: 'UNAVAILABLE',
+      reason: 'ANCHOR_FETCH_FAILED',
+      sourceCommit: null,
+      signerCount: 0,
+      authorizationEnabled: false,
+    })).toEqual({
+      phase: 'unavailable',
+      reason: 'ANCHOR_FETCH_FAILED',
+      sourceCommit: null,
+      signerCount: 0,
+      authorizationEnabled: false,
+    })
+  })
+})