@attested-intelligence/aga-mcp-server 0.1.0

package/README.md

@@ -0,0 +1,42 @@
+# @attested-intelligence/aga-mcp-server
+
+MCP server implementing the Attested Governance Artifact (AGA) protocol.
+
+**Patent Pending:** USPTO Application No. 19/433,835
+**Referenced in:** NIST-2025-0035, NCCoE AI Agent Identity and Authorization
+
+## What It Does
+
+This server acts as a **Portal** (enforcement boundary) for AI agents. Every tool call is attested, measured, and logged to a tamper-evident continuity chain.
+
+| MCP Tool | Patent Claim | Description |
+|---|---|---|
+| `attest_subject` | 1a-1d | Attest and seal a policy artifact |
+| `measure_integrity` | 1e-1g | Measure, compare, enforce, receipt |
+| `revoke_artifact` | NCCoE 3b | Mid-session artifact revocation |
+| `request_claim` | 2 | Privacy-preserving disclosure |
+| `init_chain` | 3a | Initialize continuity chain |
+| `verify_chain` | 3c | Verify chain integrity |
+| `create_checkpoint` | 3d-3f | Merkle tree + anchor |
+| `generate_evidence_bundle` | 9 | Offline-verifiable package |
+| `delegate_to_subagent` | NCCoE | Constrained sub-agent delegation |
+| `measure_behavior` | NIST-2025-0035 | Behavioral drift detection |
+| `get_portal_state` | — | Current enforcement status |
+| `get_receipts` | — | Signed measurement receipts |
+| `get_chain_events` | — | Continuity chain events |
+
+## Quick Start
+
+npm install && npm run build && npm run demo
+
+## Connect to Claude Desktop
+
+Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
+{
+  "mcpServers": {
+    "aga": { "command": "node", "args": ["/path/to/dist/index.js"] }
+  }
+}
+
+## License
+MIT — NeuroCrypt / Attested Intelligence Holdings LLC

package/dist/core/artifact.d.ts

@@ -0,0 +1,19 @@
+import type { KeyPair, HashHex } from '../crypto/types.js';
+import type { PolicyArtifact, SubjectIdentifier, EnforcementParams, DisclosurePolicy, EvidenceCommitmentRecord } from './types.js';
+export interface ArtifactInput {
+    subject_identifier: SubjectIdentifier;
+    policy_reference: HashHex;
+    policy_version: number;
+    sealed_hash: HashHex;
+    seal_salt: string;
+    enforcement_parameters: EnforcementParams;
+    disclosure_policy: DisclosurePolicy;
+    evidence_commitments: EvidenceCommitmentRecord[];
+    issuer_keypair: KeyPair;
+    effective_timestamp?: string;
+    expiration_timestamp?: string | null;
+}
+export declare function generateArtifact(input: ArtifactInput): PolicyArtifact;
+export declare function hashArtifact(a: PolicyArtifact): HashHex;
+export declare function verifyArtifactSignature(a: PolicyArtifact, issuerPkHex: string): boolean;
+//# sourceMappingURL=artifact.d.ts.map

package/dist/core/artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/core/artifact.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEnI,MAAM,WAAW,aAAa;IAC5B,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,iBAAiB,CAAC;IAC1C,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC;IACjD,cAAc,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CAerE;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAuC;AAE/F,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAGvF"}

package/dist/core/artifact.js

@@ -0,0 +1,27 @@
+import { signStr, sigToB64, b64ToSig, pkToHex, hexToPk, verifyStr } from '../crypto/sign.js';
+import { sha256Str } from '../crypto/hash.js';
+import { canonicalize } from '../utils/canonical.js';
+import { utcNow } from '../utils/timestamp.js';
+import { SCHEMA_VERSION, PROTOCOL_VERSION } from '../utils/constants.js';
+export function generateArtifact(input) {
+    const now = utcNow();
+    const unsigned = {
+        schema_version: SCHEMA_VERSION, protocol_version: PROTOCOL_VERSION,
+        subject_identifier: input.subject_identifier, policy_reference: input.policy_reference,
+        policy_version: input.policy_version, sealed_hash: input.sealed_hash,
+        seal_salt: input.seal_salt, issued_timestamp: now,
+        effective_timestamp: input.effective_timestamp ?? now,
+        expiration_timestamp: input.expiration_timestamp ?? null,
+        issuer_identifier: pkToHex(input.issuer_keypair.publicKey),
+        enforcement_parameters: input.enforcement_parameters,
+        disclosure_policy: input.disclosure_policy,
+        evidence_commitments: input.evidence_commitments,
+    };
+    return { ...unsigned, signature: sigToB64(signStr(canonicalize(unsigned), input.issuer_keypair.secretKey)) };
+}
+export function hashArtifact(a) { return sha256Str(canonicalize(a)); }
+export function verifyArtifactSignature(a, issuerPkHex) {
+    const { signature, ...unsigned } = a;
+    return verifyStr(b64ToSig(signature), canonicalize(unsigned), hexToPk(issuerPkHex));
+}
+//# sourceMappingURL=artifact.js.map

package/dist/core/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/core/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAkBzE,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IACnD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAsC;QAClD,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB;QAClE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACtF,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;QACpE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG;QACjD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,GAAG;QACrD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,IAAI,IAAI;QACxD,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;QAC1D,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAiB,IAAa,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,MAAM,UAAU,uBAAuB,CAAC,CAAiB,EAAE,WAAmB;IAC5E,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/core/attestation.d.ts

@@ -0,0 +1,19 @@
+import type { SubjectIdentifier, EvidenceCommitmentRecord } from './types.js';
+import type { HashHex, SaltHex } from '../crypto/types.js';
+export interface AttestationInput {
+    subject_identifier: SubjectIdentifier;
+    policy_reference: HashHex;
+    evidence_items: Array<{
+        label: string;
+        content: string;
+    }>;
+}
+export interface AttestationResult {
+    success: boolean;
+    sealed_hash: HashHex | null;
+    seal_salt: SaltHex | null;
+    evidence_commitments: EvidenceCommitmentRecord[];
+    rejection_reason: string | null;
+}
+export declare function performAttestation(input: AttestationInput): AttestationResult;
+//# sourceMappingURL=attestation.d.ts.map

package/dist/core/attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.d.ts","sourceRoot":"","sources":["../../src/core/attestation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,wBAAwB,EAAE,CAAC;IACjD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAa7E"}

package/dist/core/attestation.js

@@ -0,0 +1,12 @@
+import { saltedCommitment, generateSalt } from '../crypto/salt.js';
+import { sha256HexCat } from '../crypto/hash.js';
+export function performAttestation(input) {
+    const evidence_commitments = input.evidence_items.map(item => {
+        const { commitment, salt } = saltedCommitment(item.content);
+        return { commitment, salt, label: item.label };
+    });
+    const seal_salt = generateSalt();
+    const sealed_hash = sha256HexCat(input.subject_identifier.bytes_hash, input.subject_identifier.metadata_hash, input.policy_reference, seal_salt);
+    return { success: true, sealed_hash, seal_salt, evidence_commitments, rejection_reason: null };
+}
+//# sourceMappingURL=attestation.js.map

package/dist/core/attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.js","sourceRoot":"","sources":["../../src/core/attestation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAkBjD,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,oBAAoB,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC3D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,YAAY,CAC9B,KAAK,CAAC,kBAAkB,CAAC,UAAU,EACnC,KAAK,CAAC,kBAAkB,CAAC,aAAa,EACtC,KAAK,CAAC,gBAAgB,EACtB,SAAS,CACV,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AACjG,CAAC"}

package/dist/core/behavioral.d.ts

@@ -0,0 +1,45 @@
+import type { HashHex } from '../crypto/types.js';
+export interface ToolInvocation {
+    tool_name: string;
+    timestamp: string;
+    args_hash: HashHex;
+}
+export interface BehavioralBaseline {
+    /** Allowed tools in this policy context */
+    permitted_tools: string[];
+    /** Maximum invocations per tool per measurement window */
+    rate_limits: Record<string, number>;
+    /** Forbidden tool sequences (e.g., read_secret then send_email) */
+    forbidden_sequences: string[][];
+    /** Measurement window in milliseconds */
+    window_ms: number;
+}
+export interface BehavioralMeasurement {
+    window_start: string;
+    window_end: string;
+    invocations: ToolInvocation[];
+    violations: BehavioralViolation[];
+    behavioral_hash: HashHex;
+    drift_detected: boolean;
+}
+export type BehavioralViolation = {
+    type: 'UNAUTHORIZED_TOOL';
+    tool: string;
+} | {
+    type: 'RATE_EXCEEDED';
+    tool: string;
+    count: number;
+    limit: number;
+} | {
+    type: 'FORBIDDEN_SEQUENCE';
+    sequence: string[];
+};
+export declare class BehavioralMonitor {
+    private invocations;
+    private baseline;
+    setBaseline(baseline: BehavioralBaseline): void;
+    recordInvocation(toolName: string, argsHash: HashHex): void;
+    measure(): BehavioralMeasurement;
+    reset(): void;
+}
+//# sourceMappingURL=behavioral.d.ts.map

package/dist/core/behavioral.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavioral.d.ts","sourceRoot":"","sources":["../../src/core/behavioral.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,2CAA2C;IAC3C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mEAAmE;IACnE,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC;IAChC,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEvD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,QAAQ,CAAmC;IAEnD,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAI/C,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI;IAQ3D,OAAO,IAAI,qBAAqB;IA0DhC,KAAK,IAAI,IAAI;CAGd"}

package/dist/core/behavioral.js

@@ -0,0 +1,88 @@
+/**
+ * Behavioral Drift Detection.
+ * NIST-2025-0035: "Governance mechanisms must measure behavioral outputs
+ * and decision patterns in addition to static artifacts."
+ *
+ * Tracks tool invocation patterns and compares against a behavioral
+ * baseline sealed in the policy artifact.
+ */
+import { sha256Str } from '../crypto/hash.js';
+export class BehavioralMonitor {
+    invocations = [];
+    baseline = null;
+    setBaseline(baseline) {
+        this.baseline = baseline;
+    }
+    recordInvocation(toolName, argsHash) {
+        this.invocations.push({
+            tool_name: toolName,
+            timestamp: new Date().toISOString(),
+            args_hash: argsHash,
+        });
+    }
+    measure() {
+        if (!this.baseline) {
+            return {
+                window_start: '', window_end: '', invocations: [],
+                violations: [], behavioral_hash: sha256Str('no-baseline'),
+                drift_detected: false,
+            };
+        }
+        const now = Date.now();
+        const windowStart = now - this.baseline.window_ms;
+        const windowInvocations = this.invocations.filter(i => Date.parse(i.timestamp) >= windowStart);
+        const violations = [];
+        // Check unauthorized tools
+        for (const inv of windowInvocations) {
+            if (!this.baseline.permitted_tools.includes(inv.tool_name)) {
+                violations.push({ type: 'UNAUTHORIZED_TOOL', tool: inv.tool_name });
+            }
+        }
+        // Check rate limits
+        const counts = {};
+        for (const inv of windowInvocations) {
+            counts[inv.tool_name] = (counts[inv.tool_name] ?? 0) + 1;
+        }
+        for (const [tool, count] of Object.entries(counts)) {
+            const limit = this.baseline.rate_limits[tool];
+            if (limit !== undefined && count > limit) {
+                violations.push({ type: 'RATE_EXCEEDED', tool, count, limit });
+            }
+        }
+        // Check forbidden sequences
+        const toolSequence = windowInvocations.map(i => i.tool_name);
+        for (const forbidden of this.baseline.forbidden_sequences) {
+            if (containsSubsequence(toolSequence, forbidden)) {
+                violations.push({ type: 'FORBIDDEN_SEQUENCE', sequence: forbidden });
+            }
+        }
+        // Compute behavioral hash (pattern fingerprint)
+        const pattern = windowInvocations.map(i => i.tool_name).join('|');
+        const behavioral_hash = sha256Str(pattern);
+        return {
+            window_start: new Date(windowStart).toISOString(),
+            window_end: new Date(now).toISOString(),
+            invocations: windowInvocations,
+            violations,
+            behavioral_hash,
+            drift_detected: violations.length > 0,
+        };
+    }
+    reset() {
+        this.invocations = [];
+    }
+}
+function containsSubsequence(haystack, needle) {
+    if (needle.length === 0)
+        return true;
+    let ni = 0;
+    for (const h of haystack) {
+        if (h === needle[ni]) {
+            ni++;
+            if (ni === needle.length)
+                return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=behavioral.js.map

package/dist/core/behavioral.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavioral.js","sourceRoot":"","sources":["../../src/core/behavioral.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAkC9C,MAAM,OAAO,iBAAiB;IACpB,WAAW,GAAqB,EAAE,CAAC;IACnC,QAAQ,GAA8B,IAAI,CAAC;IAEnD,WAAW,CAAC,QAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,gBAAgB,CAAC,QAAgB,EAAE,QAAiB;QAClD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACpB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE;gBACjD,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,aAAa,CAAC;gBACzD,cAAc,EAAE,KAAK;aACtB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAC5C,CAAC;QAEF,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,2BAA2B;QAC3B,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBACzC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC1D,IAAI,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAE3C,OAAO;YACL,YAAY,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;YACjD,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACvC,WAAW,EAAE,iBAAiB;YAC9B,UAAU;YACV,eAAe;YACf,cAAc,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,QAAkB,EAAE,MAAgB;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,EAAE,EAAE,CAAC;YACL,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/bundle.d.ts

@@ -0,0 +1,13 @@
+import type { KeyPair, MerkleInclusionProof } from '../crypto/types.js';
+import type { EvidenceBundle, PolicyArtifact, SignedReceipt, CheckpointReference } from './types.js';
+export declare function generateBundle(artifact: PolicyArtifact, receipts: SignedReceipt[], proofs: MerkleInclusionProof[], checkpoint: CheckpointReference, kp: KeyPair): EvidenceBundle;
+export interface VerificationResult {
+    step1_artifact_sig: boolean;
+    step2_receipt_sigs: boolean;
+    step3_merkle_proofs: boolean;
+    step4_anchor: 'SKIPPED_OFFLINE' | boolean;
+    overall: boolean;
+    errors: string[];
+}
+export declare function verifyBundleOffline(bundle: EvidenceBundle, pinnedPkHex: string): VerificationResult;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/core/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/core/bundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAErG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,EAAE,EAAE,OAAO,GAAG,cAAc,CAGhL;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,OAAO,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAC;IACzD,mBAAmB,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,iBAAiB,GAAG,OAAO,CAAC;IACxE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAanG"}

package/dist/core/bundle.js

@@ -0,0 +1,31 @@
+import { signStr, sigToB64, b64ToSig, hexToPk, verifyStr, pkToHex } from '../crypto/sign.js';
+import { verifyProof } from '../crypto/merkle.js';
+import { canonicalize } from '../utils/canonical.js';
+export function generateBundle(artifact, receipts, proofs, checkpoint, kp) {
+    const unsigned = { artifact, receipts, merkle_proofs: proofs, checkpoint_reference: checkpoint, public_key: pkToHex(kp.publicKey) };
+    return { ...unsigned, bundle_signature: sigToB64(signStr(canonicalize(unsigned), kp.secretKey)) };
+}
+export function verifyBundleOffline(bundle, pinnedPkHex) {
+    const errors = [];
+    const { signature: aSig, ...aU } = bundle.artifact;
+    const s1 = verifyStr(b64ToSig(aSig), canonicalize(aU), hexToPk(pinnedPkHex));
+    if (!s1)
+        errors.push('Artifact signature failed');
+    let s2 = true;
+    for (const r of bundle.receipts) {
+        const { portal_signature, ...rU } = r;
+        if (!verifyStr(b64ToSig(portal_signature), canonicalize(rU), hexToPk(bundle.public_key))) {
+            s2 = false;
+            errors.push(`Receipt ${r.receipt_id} sig failed`);
+        }
+    }
+    let s3 = true;
+    for (const p of bundle.merkle_proofs) {
+        if (!verifyProof(p)) {
+            s3 = false;
+            errors.push(`Merkle proof failed leaf ${p.leafIndex}`);
+        }
+    }
+    return { step1_artifact_sig: s1, step2_receipt_sigs: s2, step3_merkle_proofs: s3, step4_anchor: 'SKIPPED_OFFLINE', overall: s1 && s2 && s3, errors };
+}
+//# sourceMappingURL=bundle.js.map

package/dist/core/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/core/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAIrD,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,QAAyB,EAAE,MAA8B,EAAE,UAA+B,EAAE,EAAW;IAC9J,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACpI,OAAO,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAQD,MAAM,UAAU,mBAAmB,CAAC,MAAsB,EAAE,WAAmB;IAC7E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnD,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAClD,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAAC,EAAE,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,aAAa,CAAC,CAAC;QAAC,CAAC;IAC9J,CAAC;IACD,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,EAAE,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAAC,CAAC;IAAC,CAAC;IACtI,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;AACvJ,CAAC"}

package/dist/core/chain.d.ts

@@ -0,0 +1,13 @@
+import type { KeyPair, HashHex } from '../crypto/types.js';
+import type { ContinuityEvent, StructuralMetadata, EventType } from './types.js';
+/** Leaf hash from structural metadata ONLY. Payload EXCLUDED. Uses "||" delimiter. */
+export declare function computeLeafHash(m: StructuralMetadata): HashHex;
+export declare function computePayloadHash(payload: unknown): HashHex;
+export declare function createGenesisEvent(kp: KeyPair, specHash: HashHex): ContinuityEvent;
+export declare function appendEvent(type: EventType, payload: unknown, prev: ContinuityEvent, kp: KeyPair): ContinuityEvent;
+export declare function verifyChainIntegrity(events: ContinuityEvent[]): {
+    valid: boolean;
+    brokenAt: number | null;
+    error: string | null;
+};
+//# sourceMappingURL=chain.d.ts.map

package/dist/core/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../src/core/chain.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAkB,kBAAkB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEjG,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAK9D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE5D;AAqBD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,eAAe,CAMlF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,GAAG,eAAe,CAElH;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG;IAC/D,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/D,CAiBA"}

package/dist/core/chain.js

@@ -0,0 +1,63 @@
+import { sha256Str } from '../crypto/hash.js';
+import { signStr, sigToB64, pkToHex } from '../crypto/sign.js';
+import { canonicalize } from '../utils/canonical.js';
+import { utcNow } from '../utils/timestamp.js';
+import { uuid } from '../utils/uuid.js';
+import { SCHEMA_VERSION, PROTOCOL_VERSION, TAXONOMY_VERSION } from '../utils/constants.js';
+/** Leaf hash from structural metadata ONLY. Payload EXCLUDED. Uses "||" delimiter. */
+export function computeLeafHash(m) {
+    return sha256Str([
+        m.schema_version, m.protocol_version, m.event_type, m.event_id,
+        String(m.sequence_number), m.timestamp, m.previous_leaf_hash ?? 'NULL'
+    ].join('||'));
+}
+export function computePayloadHash(payload) {
+    return sha256Str(canonicalize(payload));
+}
+function buildEvent(type, payload, seq, prevLeaf, kp) {
+    const id = uuid(), ts = utcNow();
+    const meta = {
+        schema_version: SCHEMA_VERSION, protocol_version: PROTOCOL_VERSION,
+        event_type: type, event_id: id, sequence_number: seq,
+        timestamp: ts, previous_leaf_hash: prevLeaf,
+    };
+    const leafHash = computeLeafHash(meta);
+    const payloadHash = computePayloadHash(payload);
+    const sig = signStr(canonicalize({ ...meta, leaf_hash: leafHash, payload, payload_hash: payloadHash }), kp.secretKey);
+    return {
+        schema_version: SCHEMA_VERSION, protocol_version: PROTOCOL_VERSION,
+        event_type: type, event_id: id, sequence_number: seq,
+        timestamp: ts, previous_leaf_hash: prevLeaf,
+        leaf_hash: leafHash, payload, payload_hash: payloadHash,
+        event_signature: sigToB64(sig),
+    };
+}
+export function createGenesisEvent(kp, specHash) {
+    const payload = {
+        protocol_version: PROTOCOL_VERSION, taxonomy_version: TAXONOMY_VERSION,
+        root_fingerprint: pkToHex(kp.publicKey), specification_hash: specHash, marker: 'GENESIS',
+    };
+    return buildEvent('GENESIS', payload, 0, null, kp);
+}
+export function appendEvent(type, payload, prev, kp) {
+    return buildEvent(type, payload, prev.sequence_number + 1, prev.leaf_hash, kp);
+}
+export function verifyChainIntegrity(events) {
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        const meta = {
+            schema_version: e.schema_version, protocol_version: e.protocol_version,
+            event_type: e.event_type, event_id: e.event_id,
+            sequence_number: e.sequence_number, timestamp: e.timestamp,
+            previous_leaf_hash: e.previous_leaf_hash,
+        };
+        if (e.leaf_hash !== computeLeafHash(meta))
+            return { valid: false, brokenAt: e.sequence_number, error: `Leaf hash mismatch at seq ${e.sequence_number}` };
+        if (i > 0 && e.previous_leaf_hash !== events[i - 1].leaf_hash)
+            return { valid: false, brokenAt: e.sequence_number, error: `Chain linkage broken at seq ${e.sequence_number}` };
+        if (e.payload_hash !== computePayloadHash(e.payload))
+            return { valid: false, brokenAt: e.sequence_number, error: `Payload hash mismatch at seq ${e.sequence_number}` };
+    }
+    return { valid: true, brokenAt: null, error: null };
+}
+//# sourceMappingURL=chain.js.map

package/dist/core/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../src/core/chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAI3F,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,CAAqB;IACnD,OAAO,SAAS,CAAC;QACf,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ;QAC9D,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,kBAAkB,IAAI,MAAM;KACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU,CAAC,IAAe,EAAE,OAAgB,EAAE,GAAW,EAAE,QAAwB,EAAE,EAAW;IACvG,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;IACjC,MAAM,IAAI,GAAuB;QAC/B,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB;QAClE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG;QACpD,SAAS,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ;KAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACtH,OAAO;QACL,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB;QAClE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG;QACpD,SAAS,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ;QAC3C,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW;QACvD,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAW,EAAE,QAAiB;IAC/D,MAAM,OAAO,GAAmB;QAC9B,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB;QACtE,gBAAgB,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS;KACzF,CAAC;IACF,OAAO,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,OAAgB,EAAE,IAAqB,EAAE,EAAW;IAC/F,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB;IAG5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAuB;YAC/B,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACtE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;YAC9C,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;YAC1D,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;SACzC,CAAC;QACF,IAAI,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;QAChH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,kBAAkB,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;QAClH,IAAI,CAAC,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,gCAAgC,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;IACrH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC"}

package/dist/core/checkpoint.d.ts

@@ -0,0 +1,8 @@
+import type { ContinuityEvent, CheckpointReference, AnchorBatchPayload } from './types.js';
+import type { MerkleInclusionProof } from '../crypto/types.js';
+export declare function createCheckpoint(events: ContinuityEvent[], anchorNetwork?: string): {
+    checkpoint: CheckpointReference;
+    payload: AnchorBatchPayload;
+};
+export declare function eventInclusionProof(events: ContinuityEvent[], targetSeq: number): MerkleInclusionProof;
+//# sourceMappingURL=checkpoint.d.ts.map

package/dist/core/checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../src/core/checkpoint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,aAAa,SAAU,GAAG;IAAE,UAAU,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CASrJ;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAItG"}

package/dist/core/checkpoint.js

@@ -0,0 +1,21 @@
+import { buildMerkleTree, inclusionProof } from '../crypto/merkle.js';
+import { utcNow } from '../utils/timestamp.js';
+import { uuid } from '../utils/uuid.js';
+export function createCheckpoint(events, anchorNetwork = 'local') {
+    if (!events.length)
+        throw new Error('No events to checkpoint');
+    const { root } = buildMerkleTree(events.map(e => e.leaf_hash));
+    const checkpoint = {
+        merkle_root: root, batch_start_sequence: events[0].sequence_number,
+        batch_end_sequence: events[events.length - 1].sequence_number,
+        anchor_network: anchorNetwork, transaction_id: `${anchorNetwork}:${uuid()}`, timestamp: utcNow(),
+    };
+    return { checkpoint, payload: { checkpoint_reference: checkpoint, leaf_count: events.length } };
+}
+export function eventInclusionProof(events, targetSeq) {
+    const idx = events.findIndex(e => e.sequence_number === targetSeq);
+    if (idx === -1)
+        throw new Error(`Sequence ${targetSeq} not in batch`);
+    return inclusionProof(events.map(e => e.leaf_hash), idx);
+}
+//# sourceMappingURL=checkpoint.js.map

package/dist/core/checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/core/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAIxC,MAAM,UAAU,gBAAgB,CAAC,MAAyB,EAAE,aAAa,GAAG,OAAO;IACjF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAwB;QACtC,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe;QAClE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,eAAe;QAC7D,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,aAAa,IAAI,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KACjG,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAyB,EAAE,SAAiB;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC;IACnE,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,SAAS,eAAe,CAAC,CAAC;IACtE,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC"}

package/dist/core/delegation.d.ts

@@ -0,0 +1,37 @@
+import type { PolicyArtifact, EnforcementAction, MeasurementType } from './types.js';
+import type { KeyPair } from '../crypto/types.js';
+export interface DelegationRequest {
+    /** Subset of parent's enforcement triggers */
+    enforcement_triggers: EnforcementAction[];
+    /** Subset of parent's measurement types */
+    measurement_types: MeasurementType[];
+    /** Requested TTL in seconds (will be clamped to parent remaining) */
+    requested_ttl_seconds: number;
+    /** Description of the delegation purpose */
+    delegation_purpose: string;
+}
+export interface DelegationResult {
+    success: boolean;
+    child_artifact?: PolicyArtifact;
+    child_artifact_hash?: string;
+    parent_artifact_hash: string;
+    effective_ttl_seconds?: number;
+    scope_reduction?: {
+        triggers_removed: string[];
+        measurement_types_removed: string[];
+    };
+    error?: string;
+}
+/**
+ * Derive a constrained artifact from a parent artifact.
+ * Key rule: scope can only diminish, never expand.
+ */
+export declare function deriveArtifact(parentArtifact: PolicyArtifact, request: DelegationRequest, issuerKP: KeyPair): DelegationResult;
+/**
+ * Validate that a child artifact is a valid delegation of a parent.
+ */
+export declare function validateDelegation(parent: PolicyArtifact, child: PolicyArtifact): {
+    valid: boolean;
+    errors: string[];
+};
+//# sourceMappingURL=delegation.d.ts.map

package/dist/core/delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../src/core/delegation.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;IAC1C,2CAA2C;IAC3C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,qEAAqE;IACrE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,4CAA4C;IAC5C,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE;QAChB,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,yBAAyB,EAAE,MAAM,EAAE,CAAC;KACrC,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,OAAO,GAChB,gBAAgB,CAoElB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA0BtH"}

package/dist/core/delegation.js

@@ -0,0 +1,104 @@
+/**
+ * Constrained Sub-Agent Delegation.
+ * NCCoE filing: "Scope can only diminish through delegation, never expand."
+ *
+ * Primary agent's portal issues a derived artifact to secondary agent:
+ * - TTL <= parent's remaining TTL
+ * - Scope can only diminish, never expand
+ * - Secondary's genesis links to parent's chain
+ */
+import { generateArtifact, hashArtifact } from './artifact.js';
+import { isExpired } from '../utils/timestamp.js';
+/**
+ * Derive a constrained artifact from a parent artifact.
+ * Key rule: scope can only diminish, never expand.
+ */
+export function deriveArtifact(parentArtifact, request, issuerKP) {
+    const parentHash = hashArtifact(parentArtifact);
+    // Validate parent is not expired
+    if (isExpired(parentArtifact.issued_timestamp, parentArtifact.enforcement_parameters.ttl_seconds)) {
+        return { success: false, parent_artifact_hash: parentHash, error: 'Parent artifact TTL has expired' };
+    }
+    // Calculate parent remaining TTL
+    const parentIssuedMs = Date.parse(parentArtifact.issued_timestamp);
+    const parentExpiresMs = parentIssuedMs + (parentArtifact.enforcement_parameters.ttl_seconds * 1000);
+    const remainingMs = parentExpiresMs - Date.now();
+    const remainingSeconds = Math.max(0, Math.floor(remainingMs / 1000));
+    // Clamp child TTL to parent remaining
+    const effectiveTTL = Math.min(request.requested_ttl_seconds, remainingSeconds);
+    if (effectiveTTL <= 0) {
+        return { success: false, parent_artifact_hash: parentHash, error: 'No remaining TTL to delegate' };
+    }
+    // Validate triggers are subset of parent
+    const parentTriggers = new Set(parentArtifact.enforcement_parameters.enforcement_triggers);
+    const invalidTriggers = request.enforcement_triggers.filter(t => !parentTriggers.has(t));
+    if (invalidTriggers.length > 0) {
+        return { success: false, parent_artifact_hash: parentHash, error: `Cannot expand scope: triggers [${invalidTriggers.join(', ')}] not in parent` };
+    }
+    // Validate measurement types are subset of parent
+    const parentTypes = new Set(parentArtifact.enforcement_parameters.measurement_types);
+    const invalidTypes = request.measurement_types.filter(t => !parentTypes.has(t));
+    if (invalidTypes.length > 0) {
+        return { success: false, parent_artifact_hash: parentHash, error: `Cannot expand scope: measurement types [${invalidTypes.join(', ')}] not in parent` };
+    }
+    // Build constrained child artifact
+    const childArtifact = generateArtifact({
+        subject_identifier: parentArtifact.subject_identifier,
+        policy_reference: parentArtifact.policy_reference,
+        policy_version: parentArtifact.policy_version,
+        sealed_hash: parentArtifact.sealed_hash,
+        seal_salt: parentArtifact.seal_salt,
+        enforcement_parameters: {
+            measurement_cadence_ms: parentArtifact.enforcement_parameters.measurement_cadence_ms,
+            ttl_seconds: effectiveTTL,
+            enforcement_triggers: request.enforcement_triggers,
+            re_attestation_required: parentArtifact.enforcement_parameters.re_attestation_required,
+            measurement_types: request.measurement_types,
+        },
+        disclosure_policy: parentArtifact.disclosure_policy, // cannot expand
+        evidence_commitments: parentArtifact.evidence_commitments,
+        issuer_keypair: issuerKP,
+    });
+    // Track scope reduction
+    const triggersRemoved = [...parentTriggers].filter(t => !request.enforcement_triggers.includes(t));
+    const typesRemoved = [...parentTypes].filter(t => !request.measurement_types.includes(t));
+    return {
+        success: true,
+        child_artifact: childArtifact,
+        child_artifact_hash: hashArtifact(childArtifact),
+        parent_artifact_hash: parentHash,
+        effective_ttl_seconds: effectiveTTL,
+        scope_reduction: {
+            triggers_removed: triggersRemoved,
+            measurement_types_removed: typesRemoved,
+        },
+    };
+}
+/**
+ * Validate that a child artifact is a valid delegation of a parent.
+ */
+export function validateDelegation(parent, child) {
+    const errors = [];
+    // TTL must be <= parent TTL
+    if (child.enforcement_parameters.ttl_seconds > parent.enforcement_parameters.ttl_seconds) {
+        errors.push(`Child TTL (${child.enforcement_parameters.ttl_seconds}s) exceeds parent (${parent.enforcement_parameters.ttl_seconds}s)`);
+    }
+    // Triggers must be subset
+    const pTriggers = new Set(parent.enforcement_parameters.enforcement_triggers);
+    for (const t of child.enforcement_parameters.enforcement_triggers) {
+        if (!pTriggers.has(t))
+            errors.push(`Child trigger '${t}' not in parent scope`);
+    }
+    // Measurement types must be subset
+    const pTypes = new Set(parent.enforcement_parameters.measurement_types);
+    for (const t of child.enforcement_parameters.measurement_types) {
+        if (!pTypes.has(t))
+            errors.push(`Child measurement type '${t}' not in parent scope`);
+    }
+    // Subject must match
+    if (child.subject_identifier.bytes_hash !== parent.subject_identifier.bytes_hash) {
+        errors.push('Child subject bytes_hash does not match parent');
+    }
+    return { valid: errors.length === 0, errors };
+}
+//# sourceMappingURL=delegation.js.map