@aqb-foundation/aqb-agent 1.0.1 → 1.0.3

package/test/pq.mjs

@@ -0,0 +1,37 @@
+// Real post-quantum crypto test: identity, digest signing, stealth KEM round trip.
+import { newIdentity, signDigest, verifyDigest, newKemIdentity, stealthFor, stealthCheck, PK_LEN, SIG_LEN } from "../pq/pq.mjs";
+import { stealth as clientStealth, cardHash } from "../client/aqb.mjs";
+import { keccak256, toUtf8Bytes } from "ethers";
+const hex = (b) => (b ? Buffer.from(b).toString("hex") : null);
+
+let fails = 0;
+const ok = (c, m) => { console.log((c ? "PASS " : "FAIL ") + m); if (!c) fails++; };
+
+const id = newIdentity();
+ok(id.publicKey.length === PK_LEN, `ML-DSA-65 pubkey is ${PK_LEN} bytes`);
+ok(id.keyHash === keccak256(id.publicKey), "keyHash commits the pubkey");
+
+const digest = keccak256(toUtf8Bytes("aqb-execute"));
+const blob = signDigest(id, digest);
+ok((blob.length - 2) / 2 === SIG_LEN + 1, "sig blob = scheme tag + 3309 bytes");
+ok(verifyDigest(id.publicKey, digest, blob), "real ML-DSA-65 signature verifies");
+ok(!verifyDigest(id.publicKey, keccak256(toUtf8Bytes("other")), blob), "wrong digest rejected");
+const impostor = newIdentity();
+ok(!verifyDigest(impostor.publicKey, digest, blob), "wrong key rejected");
+
+const kem = newKemIdentity();
+const s = stealthFor(kem.publicKey);
+ok(s.addr.length === 42, "stealth address derived");
+ok(hex(stealthCheck(kem, s.ephPubKey, s.viewTag, s.addr)) === hex(s.sharedSecret), "recipient decapsulates to same secret");
+ok(stealthCheck(newKemIdentity(), s.ephPubKey, s.viewTag, s.addr) === null, "stranger cannot claim stealth");
+ok(stealthCheck(kem, s.ephPubKey, "0x00", s.addr) === null, "view-tag mismatch filters announcement");
+const cs = clientStealth(s.ephPubKey, s.sharedSecret);
+ok(cs.addr === s.addr && cs.viewTag === s.viewTag, "client stealth matches pq.stealthFor");
+
+const card = { aqb: 1, name: "x", price: { unit: "AQB", amount: "2" }, tags: ["a", "b"] };
+const reordered = { tags: ["a", "b"], price: { amount: "2", unit: "AQB" }, name: "x", aqb: 1 };
+ok(cardHash(card) === cardHash(reordered), "cardHash is recursive key-order independent");
+ok(cardHash(card) !== keccak256(toUtf8Bytes(JSON.stringify(card, Object.keys(card).sort()))), "cardHash keeps nested keys");
+
+console.log(fails ? `PQ FAILED (${fails})` : "PQ OK");
+process.exit(fails ? 1 : 0);

package/test/smoke.mjs

@@ -0,0 +1,27 @@
+// Post-deploy invariant test. Run after deploy.mjs: node test/smoke.mjs
+import { JsonRpcProvider, Wallet, Contract } from "ethers";
+import fs from "node:fs";
+
+const d = JSON.parse(fs.readFileSync("deployment.json", "utf8"));
+const p = new JsonRpcProvider(process.env.RPC_URL);
+const w = new Wallet(process.env.PRIVATE_KEY, p);
+const t = new Contract(d.token, [
+  "function mint(uint256)", "function redeem(uint256)", "function totalSupply() view returns(uint256)",
+  "function collateralRatio() view returns(uint256)", "function MAX_SUPPLY() view returns(uint256)",
+  "function balanceOf(address) view returns(uint256)", "function setPool(address,bool)",
+], w);
+const r = new Contract(d.registry, ["function isAgent(address) view returns(bool)"], w);
+const usdc = new Contract(d.usdc, ["function balanceOf(address) view returns(uint256)"], w);
+
+const ok = (c, m) => { console.log((c ? "PASS " : "FAIL ") + m); if (!c) process.exitCode = 1; };
+
+ok((await r.isAgent(w.address)) === true, "deployer is agent");
+await (await t.mint(10_000_000n)).wait(); // 10 USDC
+ok((await t.collateralRatio()) === 10n ** 18n, "ratio == 1e18 after mint");
+await (await t.redeem(5n * 10n ** 18n)).wait();
+ok((await t.collateralRatio()) === 10n ** 18n, "ratio == 1e18 after redeem");
+ok((await t.totalSupply()) === 5n * 10n ** 18n, "supply == 5 AQB");
+ok((await usdc.balanceOf(d.token)) === 5_000_000n, "usdc reserves == 5");
+try { await (await t.mint(0n)).wait(); ok(false, "mint(0) reverts"); } catch { ok(true, "mint(0) reverts"); }
+ok((await t.MAX_SUPPLY()) === 900_000_000_000n * 10n ** 18n, "cap == 900e9");
+console.log(process.exitCode ? "SMOKE FAILED" : "SMOKE OK");

package/vendor/mldsa/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SKALE Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.