@attested-intelligence/aga-mcp-server 0.1.1 → 2.0.0

package/dist/crypto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/dist/crypto/index.js

@@ -1,6 +1,7 @@
-export * from './types.js';
-export * from './hash.js';
-export * from './sign.js';
-export * from './salt.js';
-export * from './merkle.js';
+export { sha256Bytes, sha256Str, blake2b256, sha256Cat, sha256HexCat } from './hash.js';
+export { generateKeyPair, sign, signStr, verify, verifyStr, sigToB64, b64ToSig, pkToHex, hexToPk } from './sign.js';
+export { generateSalt, saltedCommitment, verifySaltedCommitment } from './salt.js';
+export { buildMerkleTree, inclusionProof, verifyProof } from './merkle.js';
+export { canonicalize, deepSortKeys } from './canonicalize.js';
+export { keyFingerprint, isKeyValid, rotateKeyPair } from './keys.js';
 //# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/dist/crypto/keys.d.ts

@@ -0,0 +1,10 @@
+import { pkToHex, hexToPk } from './sign.js';
+import type { KeyPair } from '../types.js';
+/** SHA-256 fingerprint of a public key (first 16 hex chars). */
+export declare function keyFingerprint(pk: Uint8Array): string;
+/** Check if a hex-encoded public key is valid (64 hex chars for Ed25519). */
+export declare function isKeyValid(hexKey: string): boolean;
+/** Rotate a keypair - returns new keypair. Old keypair should be revoked. */
+export declare function rotateKeyPair(): KeyPair;
+export { pkToHex, hexToPk };
+//# sourceMappingURL=keys.d.ts.map

package/dist/crypto/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/crypto/keys.ts"],"names":[],"mappings":"AAIA,OAAO,EAAmB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAW,MAAM,aAAa,CAAC;AAEpD,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/crypto/keys.js

@@ -0,0 +1,19 @@
+/**
+ * Key utilities: fingerprints, hex encoding, validation.
+ */
+import { sha256Str } from './hash.js';
+import { generateKeyPair, pkToHex, hexToPk } from './sign.js';
+/** SHA-256 fingerprint of a public key (first 16 hex chars). */
+export function keyFingerprint(pk) {
+    return sha256Str(pkToHex(pk)).slice(0, 16);
+}
+/** Check if a hex-encoded public key is valid (64 hex chars for Ed25519). */
+export function isKeyValid(hexKey) {
+    return /^[0-9a-f]{64}$/.test(hexKey);
+}
+/** Rotate a keypair - returns new keypair. Old keypair should be revoked. */
+export function rotateKeyPair() {
+    return generateKeyPair();
+}
+export { pkToHex, hexToPk };
+//# sourceMappingURL=keys.js.map

package/dist/crypto/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/crypto/keys.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG9D,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,OAAO,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa;IAC3B,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -5,7 +5,7 @@ async function main() {
     const server = await createAGAServer();
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    console.error('AGA MCP Server running on stdio');
+    console.error('AGA MCP Server v2.0.0 running on stdio');
 }
 main().catch(e => { console.error('Fatal:', e); process.exit(1); });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC1D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/middleware/governance.d.ts

@@ -1,15 +1,9 @@
 /**
- * Governance Middleware — wraps every MCP tool handler.
+ * Governance Middleware: wraps every MCP tool handler.
  *
  * NCCoE filing Section 4: "The portal operates as a Policy Enforcement Point (PEP)...
  * Every tool invocation, API call, actuator command, and data access passes through
  * the portal, which evaluates it against the sealed artifact's enforcement parameters."
- *
- * Behavior:
- * - TERMINATED state → reject all governed tools
- * - PHANTOM_QUARANTINE → capture tool call as forensic input, reject
- * - ACTIVE_MONITORING → allow, log to chain
- * - Ungoverned tools (get_server_info, get_portal_state, list_claims) → always allow
  */
 import type { Portal } from '../core/portal.js';
 import type { QuarantineState } from '../core/types.js';

package/dist/middleware/governance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../../src/middleware/governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAI/D,MAAM,MAAM,UAAU,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAapE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE;IAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,EAC/C,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,iBAAiB,IAIT,CAAC,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,KAAG,WAAW,CAAC,CAAC,CAAC,CAoDxE"}
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../../src/middleware/governance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAI/D,MAAM,MAAM,UAAU,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAYpE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE;IAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,EAC/C,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,iBAAiB,IAIT,CAAC,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,KAAG,WAAW,CAAC,CAAC,CAAC,CA8CxE"}

package/dist/middleware/governance.js

@@ -2,14 +2,13 @@ import { captureInput } from '../core/quarantine.js';
 import { sha256Str } from '../crypto/hash.js';
 import { canonicalize } from '../utils/canonical.js';
 const UNGOVERNED_TOOLS = new Set([
-    'get_server_info',
-    'get_portal_state',
-    'get_receipts',
-    'get_chain_events',
-    'list_claims',
-    'init_chain', // must work before attestation
-    'attest_subject', // creates the governance relationship
-    'verify_chain', // read-only verification
+    // V1 names (backward compat)
+    'get_server_info', 'get_portal_state', 'get_receipts', 'get_chain_events',
+    'list_claims', 'init_chain', 'attest_subject', 'verify_chain',
+    // V2 names
+    'aga_server_info', 'aga_get_portal_state', 'aga_init_chain', 'aga_create_artifact',
+    'aga_verify_artifact', 'aga_verify_bundle', 'aga_get_chain', 'aga_quarantine_status',
+    'aga_set_verification_tier', 'aga_demonstrate_lifecycle', 'aga_measure_behavior',
 ]);
 export function createGovernanceWrapper(portal, quarantine, toolName, behavioralMonitor) {
     const isGoverned = !UNGOVERNED_TOOLS.has(toolName);
@@ -20,21 +19,17 @@ export function createGovernanceWrapper(portal, quarantine, toolName, behavioral
             const j = (x) => ({
                 content: [{ type: 'text', text: JSON.stringify(x, null, 2) }]
             });
-            // TERMINATED → reject everything
-            if (portal.state === 'TERMINATED') {
+            if (portal.state === 'TERMINATED' || portal.state === 'SAFE_STATE') {
                 return j({
                     success: false,
-                    error: 'GOVERNANCE_BLOCKED: Portal is terminated. Agent governance has been revoked. Re-attestation required.',
+                    error: `GOVERNANCE_BLOCKED: Portal is ${portal.state.toLowerCase()}. Agent governance has been revoked. Re-attestation required.`,
                     portal_state: portal.state,
                     tool: toolName,
                 });
             }
-            // PHANTOM_QUARANTINE → capture as forensic input, reject
             if (portal.state === 'PHANTOM_QUARANTINE' && quarantine.current?.active) {
                 captureInput(quarantine.current, `tool_call:${toolName}`, {
-                    tool: toolName,
-                    args,
-                    timestamp: new Date().toISOString(),
+                    tool: toolName, args, timestamp: new Date().toISOString(),
                 });
                 return j({
                     success: false,
@@ -44,16 +39,14 @@ export function createGovernanceWrapper(portal, quarantine, toolName, behavioral
                     forensic_capture: true,
                 });
             }
-            // INITIALIZATION or ARTIFACT_VERIFICATION → not yet governed
             if (portal.state === 'INITIALIZATION' || portal.state === 'ARTIFACT_VERIFICATION') {
                 return j({
                     success: false,
-                    error: 'GOVERNANCE_NOT_READY: No active policy artifact. Call attest_subject first.',
+                    error: 'GOVERNANCE_NOT_READY: No active policy artifact. Call aga_create_artifact first.',
                     portal_state: portal.state,
                     tool: toolName,
                 });
             }
-            // ACTIVE_MONITORING or DRIFT_DETECTED → record + allow through
             if (behavioralMonitor) {
                 const argsHash = sha256Str(canonicalize(args));
                 behavioralMonitor.recordInvocation(toolName, argsHash);

package/dist/middleware/governance.js.map

@@ -1 +1 @@
-{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/middleware/governance.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAKrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,YAAY,EAAS,+BAA+B;IACpD,gBAAgB,EAAK,sCAAsC;IAC3D,cAAc,EAAO,yBAAyB;CAC/C,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,UAA+C,EAC/C,QAAgB,EAChB,iBAAqC;IAErC,MAAM,UAAU,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEnD,OAAO,SAAS,WAAW,CAAI,OAAuB;QACpD,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC;QAEhC,OAAO,KAAK,EAAE,IAAO,EAAuB,EAAE;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAU,EAAc,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YAEH,iCAAiC;YACjC,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uGAAuG;oBAC9G,YAAY,EAAE,MAAM,CAAC,KAAK;oBAC1B,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;YAED,yDAAyD;YACzD,IAAI,MAAM,CAAC,KAAK,KAAK,oBAAoB,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACxE,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,QAAQ,EAAE,EAAE;oBACxD,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mIAAmI;oBAC1I,YAAY,EAAE,MAAM,CAAC,KAAK;oBAC1B,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,6DAA6D;YAC7D,IAAI,MAAM,CAAC,KAAK,KAAK,gBAAgB,IAAI,MAAM,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBAClF,OAAO,CAAC,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,6EAA6E;oBACpF,YAAY,EAAE,MAAM,CAAC,KAAK;oBAC1B,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;YAED,+DAA+D;YAC/D,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/C,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/middleware/governance.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAKrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,6BAA6B;IAC7B,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB;IACzE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc;IAC7D,WAAW;IACX,iBAAiB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,qBAAqB;IAClF,qBAAqB,EAAE,mBAAmB,EAAE,eAAe,EAAE,uBAAuB;IACpF,2BAA2B,EAAE,2BAA2B,EAAE,sBAAsB;CACjF,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,UAA+C,EAC/C,QAAgB,EAChB,iBAAqC;IAErC,MAAM,UAAU,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEnD,OAAO,SAAS,WAAW,CAAI,OAAuB;QACpD,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC;QAEhC,OAAO,KAAK,EAAE,IAAO,EAAuB,EAAE;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAU,EAAc,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACnE,OAAO,CAAC,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,iCAAiC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,+DAA+D;oBACjI,YAAY,EAAE,MAAM,CAAC,KAAK;oBAC1B,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,KAAK,oBAAoB,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACxE,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,QAAQ,EAAE,EAAE;oBACxD,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC1D,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mIAAmI;oBAC1I,YAAY,EAAE,MAAM,CAAC,KAAK;oBAC1B,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,KAAK,gBAAgB,IAAI,MAAM,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBAClF,OAAO,CAAC,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,kFAAkF;oBACzF,YAAY,EAAE,MAAM,CAAC,KAAK;oBAC1B,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;YAED,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/C,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/prompts/drift-analysis.d.ts

@@ -0,0 +1,13 @@
+export declare const DRIFT_ANALYSIS_PROMPT: {
+    name: string;
+    description: string;
+    arguments: {
+        name: string;
+        description: string;
+        required: boolean;
+    }[];
+    template: (args: {
+        drift_type?: string;
+    }) => string;
+};
+//# sourceMappingURL=drift-analysis.d.ts.map

package/dist/prompts/drift-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-analysis.d.ts","sourceRoot":"","sources":["../../src/prompts/drift-analysis.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB;;;;;;;;qBAMf;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CAmCzC,CAAC"}

package/dist/prompts/drift-analysis.js

@@ -0,0 +1,43 @@
+export const DRIFT_ANALYSIS_PROMPT = {
+    name: 'drift-analysis',
+    description: 'Analyze drift events and recommend remediation',
+    arguments: [
+        { name: 'drift_type', description: 'Type of drift: binary, behavioral, or both', required: false },
+    ],
+    template: (args) => `# Drift Event Analysis
+
+Analyze drift events in the current AGA session for type: ${args.drift_type ?? 'both'}
+
+## Investigation Steps
+
+1. Call \`aga_get_chain\` to retrieve all chain events
+2. Filter for INTERACTION_RECEIPT events where drift_detected=true
+3. Filter for BEHAVIORAL_DRIFT events
+4. Call \`aga_measure_behavior\` for current behavioral state
+5. Call \`aga_get_portal_state\` for enforcement status
+
+## Analysis Framework
+
+For each drift event, determine:
+- **Root Cause:** Binary modification, prompt injection, configuration change, behavioral anomaly
+- **Severity:** Based on enforcement action taken (TERMINATE > QUARANTINE > ALERT_ONLY)
+- **Timeline:** When drift was first detected, how many measurements before detection
+- **Impact:** Which measurements were affected, what enforcement was applied
+
+## Remediation Recommendations
+
+Based on the drift analysis:
+- If binary drift → Recommend re-attestation with updated subject
+- If behavioral drift → Recommend baseline adjustment or investigation
+- If both → Recommend full security review and incident response
+
+## Output Format
+
+Produce a structured drift analysis report with:
+1. Drift event timeline
+2. Root cause assessment
+3. Severity classification
+4. Remediation steps
+5. Prevention recommendations`,
+};
+//# sourceMappingURL=drift-analysis.js.map

package/dist/prompts/drift-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-analysis.js","sourceRoot":"","sources":["../../src/prompts/drift-analysis.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,gDAAgD;IAC7D,SAAS,EAAE;QACT,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,4CAA4C,EAAE,QAAQ,EAAE,KAAK,EAAE;KACnG;IACD,QAAQ,EAAE,CAAC,IAA6B,EAAE,EAAE,CAAC;;4DAEa,IAAI,CAAC,UAAU,IAAI,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAgCvD;CAC7B,CAAC"}

package/dist/prompts/governance-report.d.ts

@@ -0,0 +1,7 @@
+export declare const GOVERNANCE_REPORT_PROMPT: {
+    name: string;
+    description: string;
+    arguments: never[];
+    template: () => string;
+};
+//# sourceMappingURL=governance-report.d.ts.map

package/dist/prompts/governance-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-report.d.ts","sourceRoot":"","sources":["../../src/prompts/governance-report.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB;;;;;CAwBpC,CAAC"}

package/dist/prompts/governance-report.js

@@ -0,0 +1,26 @@
+export const GOVERNANCE_REPORT_PROMPT = {
+    name: 'governance-report',
+    description: 'Generate a session governance summary report',
+    arguments: [],
+    template: () => `# Session Governance Summary Report
+
+Generate a comprehensive governance report for the current AGA session:
+
+1. Call \`aga_server_info\` for server identity and key information
+2. Call \`aga_get_portal_state\` for current enforcement status
+3. Call \`aga_get_chain\` with verify=true for chain integrity
+4. Call \`aga_measure_behavior\` for behavioral analysis
+5. Call \`aga_quarantine_status\` for quarantine state
+
+Then produce a report with:
+- **Session Identity:** Server keys, verification tier, uptime
+- **Governance State:** Portal state, artifact status, TTL remaining
+- **Chain Integrity:** Event count, verification status, any breaks
+- **Behavioral Analysis:** Violations detected, behavioral hash
+- **Quarantine Status:** Active/inactive, forensic captures
+- **Measurement Summary:** Total measurements, drift events
+- **Compliance Status:** NIST/NCCoE alignment assessment
+
+Format as a structured markdown report suitable for audit documentation.`,
+};
+//# sourceMappingURL=governance-report.js.map

package/dist/prompts/governance-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-report.js","sourceRoot":"","sources":["../../src/prompts/governance-report.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,8CAA8C;IAC3D,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,GAAG,EAAE,CAAC;;;;;;;;;;;;;;;;;;;yEAmBuD;CACxE,CAAC"}

package/dist/prompts/nccoe-demo.d.ts

@@ -0,0 +1,14 @@
+export declare const NCCOE_DEMO_PROMPT: {
+    name: string;
+    description: string;
+    arguments: {
+        name: string;
+        description: string;
+        required: boolean;
+    }[];
+    template: (args: {
+        agent_code?: string;
+        include_behavioral?: string;
+    }) => string;
+};
+//# sourceMappingURL=nccoe-demo.d.ts.map

package/dist/prompts/nccoe-demo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nccoe-demo.d.ts","sourceRoot":"","sources":["../../src/prompts/nccoe-demo.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;;;;;;;;qBAOX;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE;CAuCtE,CAAC"}

package/dist/prompts/nccoe-demo.js

@@ -0,0 +1,48 @@
+export const NCCOE_DEMO_PROMPT = {
+    name: 'nccoe-demo',
+    description: 'NCCoE AI Agent Identity and Authorization - Full 4-phase demo with behavioral drift detection',
+    arguments: [
+        { name: 'agent_code', description: 'The agent source code to attest', required: false },
+        { name: 'include_behavioral', description: 'Include behavioral drift detection phase', required: false },
+    ],
+    template: (args) => `# NCCoE Lab Demo - AGA Protocol Full Lifecycle
+
+Execute the following phases using the AGA MCP Server tools:
+
+## Phase 1: Attestation and Identity Binding
+1. Call \`aga_init_chain\` to initialize the continuity chain
+2. Call \`aga_create_artifact\` with subject content: "${args.agent_code ?? 'def monitor(): return sensors.read_all()'}"
+   - Include metadata: filename="scada_agent.py", version="2.1.0", author="engineering"
+${args.include_behavioral === 'true' ? `   - Include behavioral_baseline: permitted_tools=["aga_measure_subject","aga_get_portal_state"], rate_limits={"aga_measure_subject":10}, forbidden_sequences=[["read_secret","send_email"]], window_ms=60000` : ''}
+3. Verify the portal state is ACTIVE_MONITORING
+
+## Phase 2: Authorized Operation
+4. Call \`aga_measure_subject\` with the SAME content - expect match=true
+5. Call \`aga_measure_subject\` again - expect match=true, receipt generated
+6. Verify both receipts show drift_detected=false
+
+## Phase 3: Simulated Prompt Injection
+7. Call \`aga_measure_subject\` with MODIFIED content: "def monitor(): return attacker.exfiltrate(sensors.read_all())"
+   - Expect match=false, drift_detected=true
+   - Expect enforcement_action=QUARANTINE
+8. Check portal state - should be PHANTOM_QUARANTINE
+9. Call \`aga_quarantine_status\` to see forensic capture state
+
+## Phase 3b: Mid-Session Revocation
+10. Call \`aga_revoke_artifact\` with the sealed hash and reason "Compromise detected"
+11. Verify portal state is TERMINATED
+
+${args.include_behavioral === 'true' ? `## Phase 3c: Behavioral Drift Detection
+12. Call \`aga_measure_behavior\` to check for tool pattern violations
+13. Review violations (unauthorized tools, rate limits, forbidden sequences)
+` : ''}
+
+## Phase 4: Offline Audit
+${args.include_behavioral === 'true' ? '14' : '12'}. Call \`aga_get_chain\` with verify=true to verify chain integrity
+${args.include_behavioral === 'true' ? '15' : '13'}. Call \`aga_export_bundle\` to generate evidence bundle (need checkpoint first)
+${args.include_behavioral === 'true' ? '16' : '14'}. Call \`aga_verify_bundle\` with the bundle and issuer public key
+
+All operations should produce signed receipts and chain events.
+Each step maps to specific patent claims (see aga://resources/patent-claims).`,
+};
+//# sourceMappingURL=nccoe-demo.js.map

package/dist/prompts/nccoe-demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nccoe-demo.js","sourceRoot":"","sources":["../../src/prompts/nccoe-demo.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,+FAA+F;IAC5G,SAAS,EAAE;QACT,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,iCAAiC,EAAE,QAAQ,EAAE,KAAK,EAAE;QACvF,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,0CAA0C,EAAE,QAAQ,EAAE,KAAK,EAAE;KACzG;IACD,QAAQ,EAAE,CAAC,IAA0D,EAAE,EAAE,CAAC;;;;;;yDAMnB,IAAI,CAAC,UAAU,IAAI,0CAA0C;;EAEpH,IAAI,CAAC,kBAAkB,KAAK,MAAM,CAAC,CAAC,CAAC,+MAA+M,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;EAmBzP,IAAI,CAAC,kBAAkB,KAAK,MAAM,CAAC,CAAC,CAAC;;;CAGtC,CAAC,CAAC,CAAC,EAAE;;;EAGJ,IAAI,CAAC,kBAAkB,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;EAChD,IAAI,CAAC,kBAAkB,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;EAChD,IAAI,CAAC,kBAAkB,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;;;8EAG4B;CAC7E,CAAC"}

package/dist/resources/crypto-primitives.d.ts

@@ -0,0 +1,3 @@
+export declare const CRYPTO_PRIMITIVES_DOC = "# AGA Cryptographic Primitives\n\n## Ed25519 Digital Signatures\n- Library: @noble/ed25519 v2.1.0\n- Key size: 256-bit (32 bytes)\n- Signature size: 512-bit (64 bytes)\n- Used for: Artifact signing, receipt signing, chain event signing\n\n## SHA-256 Hashing\n- Library: @noble/hashes v1.7.0\n- Output: 256-bit (64 hex characters)\n- Used for: Sealed hash, leaf hash, payload hash, subject identity\n\n## Sealed Hash Construction\n```\nsealed_hash = SHA-256(bytes_hash || metadata_hash || policy_reference || seal_salt)\n```\n- No delimiters between fields (raw hex concatenation)\n- Patent Section D specification\n\n## Leaf Hash Construction (Claim 3c)\n```\nleaf_hash = SHA-256(\n  schema_version || \"||\" || protocol_version || \"||\" ||\n  event_type || \"||\" || event_id || \"||\" ||\n  sequence_number || \"||\" || timestamp || \"||\" ||\n  previous_leaf_hash\n)\n```\n- **Payload EXCLUDED** - privacy innovation\n- Chain integrity verifiable without revealing event contents\n\n## Salted Commitments\n```\ncommitment = SHA-256(content_bytes || salt_bytes)\n```\n- Salt: 128-bit (16 bytes, 32 hex chars) CSPRNG\n- Enables selective disclosure\n\n## Merkle Trees\n- Binary tree over leaf hashes\n- Internal nodes: SHA-256(left || right)\n- Odd leaf count: last leaf duplicated\n- Inclusion proofs: array of {hash, direction} pairs\n\n## Canonical Serialization\n- RFC 8785 aligned\n- Sorted keys, no whitespace\n- Used before signing any object\n";
+export declare const CRYPTO_PRIMITIVES_URI = "aga://crypto-primitives";
+//# sourceMappingURL=crypto-primitives.d.ts.map

package/dist/resources/crypto-primitives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-primitives.d.ts","sourceRoot":"","sources":["../../src/resources/crypto-primitives.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,k7CAiDjC,CAAC;AAEF,eAAO,MAAM,qBAAqB,4BAA4B,CAAC"}

package/dist/resources/crypto-primitives.js

@@ -0,0 +1,52 @@
+export const CRYPTO_PRIMITIVES_DOC = `# AGA Cryptographic Primitives
+
+## Ed25519 Digital Signatures
+- Library: @noble/ed25519 v2.1.0
+- Key size: 256-bit (32 bytes)
+- Signature size: 512-bit (64 bytes)
+- Used for: Artifact signing, receipt signing, chain event signing
+
+## SHA-256 Hashing
+- Library: @noble/hashes v1.7.0
+- Output: 256-bit (64 hex characters)
+- Used for: Sealed hash, leaf hash, payload hash, subject identity
+
+## Sealed Hash Construction
+\`\`\`
+sealed_hash = SHA-256(bytes_hash || metadata_hash || policy_reference || seal_salt)
+\`\`\`
+- No delimiters between fields (raw hex concatenation)
+- Patent Section D specification
+
+## Leaf Hash Construction (Claim 3c)
+\`\`\`
+leaf_hash = SHA-256(
+  schema_version || "||" || protocol_version || "||" ||
+  event_type || "||" || event_id || "||" ||
+  sequence_number || "||" || timestamp || "||" ||
+  previous_leaf_hash
+)
+\`\`\`
+- **Payload EXCLUDED** - privacy innovation
+- Chain integrity verifiable without revealing event contents
+
+## Salted Commitments
+\`\`\`
+commitment = SHA-256(content_bytes || salt_bytes)
+\`\`\`
+- Salt: 128-bit (16 bytes, 32 hex chars) CSPRNG
+- Enables selective disclosure
+
+## Merkle Trees
+- Binary tree over leaf hashes
+- Internal nodes: SHA-256(left || right)
+- Odd leaf count: last leaf duplicated
+- Inclusion proofs: array of {hash, direction} pairs
+
+## Canonical Serialization
+- RFC 8785 aligned
+- Sorted keys, no whitespace
+- Used before signing any object
+`;
+export const CRYPTO_PRIMITIVES_URI = 'aga://crypto-primitives';
+//# sourceMappingURL=crypto-primitives.js.map

package/dist/resources/crypto-primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-primitives.js","sourceRoot":"","sources":["../../src/resources/crypto-primitives.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiDpC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC"}

package/dist/resources/patent-claims.d.ts

@@ -0,0 +1,3 @@
+export declare const PATENT_CLAIMS_DOC = "# USPTO Application No. 19/433,835 - Patent Claims Mapped to Tools\n\n## Claim 1: Subject Attestation and Measurement\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 1(a) | Receive subject for attestation | aga_create_artifact |\n| 1(b) | Generate subject identifier (bytes_hash + metadata_hash) | aga_create_artifact |\n| 1(c) | Perform attestation (sealed_hash generation) | aga_create_artifact |\n| 1(d) | Generate policy artifact with signature | aga_create_artifact |\n| 1(e) | Portal accepts artifact, begins monitoring | aga_measure_subject |\n| 1(f) | Compare current state to sealed reference | aga_measure_subject |\n| 1(g) | Enforce on drift, generate signed receipt | aga_measure_subject |\n\n## Claim 2: Privacy-Preserving Disclosure\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 2 | Sensitivity-based claim disclosure | aga_disclose_claim |\n| 2-sub | Auto-substitution when sensitivity denied | aga_disclose_claim |\n\n## Claim 3: Continuity Chain\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 3(a) | Genesis event creation | aga_init_chain |\n| 3(b) | Event appending (auto on every operation) | All tools |\n| 3(c) | Leaf hash excludes payload (privacy innovation) | aga_get_chain |\n| 3(d-f) | Merkle checkpoint anchoring | aga_export_bundle |\n\n## Claim 5: Quarantine\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 5 | Phantom execution on drift | aga_quarantine_status |\n\n## Claim 6: TTL Expiration\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 6 | Fail-closed on TTL expiry | aga_measure_subject |\n\n## Claim 9: Evidence Bundle\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 9 | Offline-verifiable evidence bundle | aga_export_bundle |\n\n## Claim 10: Pinned Key\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 10 | Portal pins issuer public key | aga_create_artifact |\n\n## Claim 11: Phantom Execution\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 11 | Forensic input capture during quarantine | aga_quarantine_status |\n\n## Claim 12: Graceful Degradation\n| Sub-claim | Description | Tool |\n|-----------|-------------|------|\n| 12 | TTL + fail-closed termination | aga_measure_subject |\n\n## Additional (NCCoE Filing)\n| Feature | Description | Tool |\n|---------|-------------|------|\n| Mid-session revocation | NCCoE Phase 3b | aga_revoke_artifact |\n| Behavioral drift | NIST-2025-0035 | aga_measure_behavior |\n| Constrained delegation | NCCoE constrained sub-mandates | aga_delegate_subagent |\n| Key rotation | Key lifecycle management | aga_rotate_keys |\n";
+export declare const PATENT_CLAIMS_URI = "aga://patent-claims";
+//# sourceMappingURL=patent-claims.d.ts.map

package/dist/resources/patent-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patent-claims.d.ts","sourceRoot":"","sources":["../../src/resources/patent-claims.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,uqFAgE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,wBAAwB,CAAC"}

package/dist/resources/patent-claims.js

@@ -0,0 +1,67 @@
+export const PATENT_CLAIMS_DOC = `# USPTO Application No. 19/433,835 - Patent Claims Mapped to Tools
+
+## Claim 1: Subject Attestation and Measurement
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 1(a) | Receive subject for attestation | aga_create_artifact |
+| 1(b) | Generate subject identifier (bytes_hash + metadata_hash) | aga_create_artifact |
+| 1(c) | Perform attestation (sealed_hash generation) | aga_create_artifact |
+| 1(d) | Generate policy artifact with signature | aga_create_artifact |
+| 1(e) | Portal accepts artifact, begins monitoring | aga_measure_subject |
+| 1(f) | Compare current state to sealed reference | aga_measure_subject |
+| 1(g) | Enforce on drift, generate signed receipt | aga_measure_subject |
+
+## Claim 2: Privacy-Preserving Disclosure
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 2 | Sensitivity-based claim disclosure | aga_disclose_claim |
+| 2-sub | Auto-substitution when sensitivity denied | aga_disclose_claim |
+
+## Claim 3: Continuity Chain
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 3(a) | Genesis event creation | aga_init_chain |
+| 3(b) | Event appending (auto on every operation) | All tools |
+| 3(c) | Leaf hash excludes payload (privacy innovation) | aga_get_chain |
+| 3(d-f) | Merkle checkpoint anchoring | aga_export_bundle |
+
+## Claim 5: Quarantine
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 5 | Phantom execution on drift | aga_quarantine_status |
+
+## Claim 6: TTL Expiration
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 6 | Fail-closed on TTL expiry | aga_measure_subject |
+
+## Claim 9: Evidence Bundle
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 9 | Offline-verifiable evidence bundle | aga_export_bundle |
+
+## Claim 10: Pinned Key
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 10 | Portal pins issuer public key | aga_create_artifact |
+
+## Claim 11: Phantom Execution
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 11 | Forensic input capture during quarantine | aga_quarantine_status |
+
+## Claim 12: Graceful Degradation
+| Sub-claim | Description | Tool |
+|-----------|-------------|------|
+| 12 | TTL + fail-closed termination | aga_measure_subject |
+
+## Additional (NCCoE Filing)
+| Feature | Description | Tool |
+|---------|-------------|------|
+| Mid-session revocation | NCCoE Phase 3b | aga_revoke_artifact |
+| Behavioral drift | NIST-2025-0035 | aga_measure_behavior |
+| Constrained delegation | NCCoE constrained sub-mandates | aga_delegate_subagent |
+| Key rotation | Key lifecycle management | aga_rotate_keys |
+`;
+export const PATENT_CLAIMS_URI = 'aga://patent-claims';
+//# sourceMappingURL=patent-claims.js.map

package/dist/resources/patent-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patent-claims.js","sourceRoot":"","sources":["../../src/resources/patent-claims.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEhC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC"}

package/dist/resources/sample-bundle.d.ts

@@ -0,0 +1,6 @@
+export declare function generateSampleBundle(): {
+    bundle: string;
+    issuerPkHex: string;
+};
+export declare const SAMPLE_BUNDLE_URI = "aga://sample-bundle";
+//# sourceMappingURL=sample-bundle.d.ts.map

package/dist/resources/sample-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sample-bundle.d.ts","sourceRoot":"","sources":["../../src/resources/sample-bundle.ts"],"names":[],"mappings":"AAgBA,wBAAgB,oBAAoB,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CA8C9E;AAED,eAAO,MAAM,iBAAiB,wBAAwB,CAAC"}

package/dist/resources/sample-bundle.js

@@ -0,0 +1,58 @@
+/**
+ * Sample Evidence Bundle: generates a real, cryptographically signed bundle.
+ * Can be verified with aga_verify_bundle.
+ */
+import { generateKeyPair, pkToHex } from '../crypto/sign.js';
+import { sha256Str } from '../crypto/hash.js';
+import { computeSubjectIdFromString } from '../core/subject.js';
+import { performAttestation } from '../core/attestation.js';
+import { generateArtifact, hashArtifact } from '../core/artifact.js';
+import { generateReceipt } from '../core/receipt.js';
+import { createGenesisEvent, appendEvent } from '../core/chain.js';
+import { createCheckpoint, eventInclusionProof } from '../core/checkpoint.js';
+import { generateBundle } from '../core/bundle.js';
+let cachedBundle = null;
+export function generateSampleBundle() {
+    if (cachedBundle)
+        return cachedBundle;
+    const issuerKP = generateKeyPair();
+    const portalKP = generateKeyPair();
+    const chainKP = generateKeyPair();
+    const content = 'def sample_agent(): return task.execute()';
+    const meta = { filename: 'sample_agent.py', version: '1.0.0' };
+    const subId = computeSubjectIdFromString(content, meta);
+    const policyRef = sha256Str('sample-policy');
+    const att = performAttestation({ subject_identifier: subId, policy_reference: policyRef, evidence_items: [] });
+    const artifact = generateArtifact({
+        subject_identifier: subId, policy_reference: policyRef, policy_version: 1,
+        sealed_hash: att.sealed_hash, seal_salt: att.seal_salt,
+        enforcement_parameters: {
+            measurement_cadence_ms: 1000, ttl_seconds: 3600,
+            enforcement_triggers: ['QUARANTINE', 'TERMINATE'],
+            re_attestation_required: true, measurement_types: ['EXECUTABLE_IMAGE'],
+        },
+        disclosure_policy: { claims_taxonomy: [], substitution_rules: [] },
+        evidence_commitments: att.evidence_commitments, issuer_keypair: issuerKP,
+    });
+    const artRef = hashArtifact(artifact);
+    const receipt = generateReceipt({
+        subjectId: subId, artifactRef: artRef,
+        currentHash: subId.bytes_hash, sealedHash: subId.bytes_hash,
+        driftDetected: false, driftDescription: null, action: null,
+        measurementType: 'EXECUTABLE_IMAGE', seq: 1, prevLeaf: null, portalKP,
+    });
+    const genesis = createGenesisEvent(chainKP, sha256Str('AGA-Spec'));
+    const e1 = appendEvent('POLICY_ISSUANCE', { artifact_hash: artRef }, genesis, chainKP);
+    const e2 = appendEvent('INTERACTION_RECEIPT', { receipt_id: receipt.receipt_id }, e1, chainKP);
+    const chain = [genesis, e1, e2];
+    const { checkpoint } = createCheckpoint(chain);
+    const proof = eventInclusionProof(chain, e1.sequence_number);
+    const bundle = generateBundle(artifact, [receipt], [proof], checkpoint, portalKP);
+    cachedBundle = {
+        bundle: JSON.stringify(bundle, null, 2),
+        issuerPkHex: pkToHex(issuerKP.publicKey),
+    };
+    return cachedBundle;
+}
+export const SAMPLE_BUNDLE_URI = 'aga://sample-bundle';
+//# sourceMappingURL=sample-bundle.js.map

package/dist/resources/sample-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sample-bundle.js","sourceRoot":"","sources":["../../src/resources/sample-bundle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAuB,MAAM,mBAAmB,CAAC;AAExE,IAAI,YAAY,GAAmD,IAAI,CAAC;AAExE,MAAM,UAAU,oBAAoB;IAClC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAElC,MAAM,OAAO,GAAG,2CAA2C,CAAC;IAC5D,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;IAE/G,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAChC,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACzE,WAAW,EAAE,GAAG,CAAC,WAAY,EAAE,SAAS,EAAE,GAAG,CAAC,SAAU;QACxD,sBAAsB,EAAE;YACtB,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;YAC/C,oBAAoB,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACjD,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;SACvE;QACD,iBAAiB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE;QAClE,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,cAAc,EAAE,QAAQ;KACzE,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM;QACrC,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC3D,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;QAC1D,eAAe,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ;KACtE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,EAAE,GAAG,WAAW,CAAC,iBAAiB,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACvF,MAAM,EAAE,GAAG,WAAW,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAElF,YAAY,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;KACzC,CAAC;IACF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC"}

package/dist/resources/specification.d.ts

@@ -0,0 +1,3 @@
+export declare const PROTOCOL_SPECIFICATION = "# Attested Governance Artifact (AGA) Protocol Specification v2.0.0\n\n## Patent Reference\nUSPTO Application No. 19/433,835\n\n## NIST References\n- NIST-2025-0035: AI Agent Transparency and Accountability\n- NCCoE AI Agent Identity and Authorization\n\n## Protocol Overview\nThe AGA protocol provides cryptographic governance for autonomous AI systems through:\n1. **Sealed Hash Attestation** - SHA-256(bytes_hash || metadata_hash || policy_ref || seal_salt)\n2. **Continuity Chain** - Tamper-evident append-only event log with privacy-preserving leaf hashes\n3. **Portal State Machine** - Zero-trust Policy Enforcement Point (7 states, fail-closed)\n4. **Signed Receipts** - Ed25519-signed measurement receipt for EVERY measurement\n5. **Evidence Bundles** - Offline-verifiable packages with Merkle inclusion proofs\n\n## 10 Measurement Embodiments\n1. EXECUTABLE_IMAGE - Runtime binary or script content\n2. LOADED_MODULES - Dynamic libraries and plugins\n3. CONTAINER_IMAGE - Container image manifest hash\n4. CONFIG_MANIFEST - Configuration file integrity\n5. SBOM - Software Bill of Materials verification\n6. TEE_QUOTE - Trusted Execution Environment attestation\n7. MEMORY_REGIONS - Runtime memory layout verification\n8. CONTROL_FLOW - Execution path integrity\n9. FILE_SYSTEM_STATE - Filesystem integrity monitoring\n10. NETWORK_CONFIG - Network configuration baseline\n\n## 6 Portal States\n1. INITIALIZATION - Server started, no artifact loaded\n2. ARTIFACT_VERIFICATION - Verifying artifact signature and validity\n3. ACTIVE_MONITORING - Operational, measurements occurring\n4. DRIFT_DETECTED - Hash mismatch detected, enforcement pending\n5. PHANTOM_QUARANTINE - Forensic capture mode, outputs severed\n6. TERMINATED - Fail-closed, no recovery without re-attestation\n\nPlus SAFE_STATE for graceful degradation on revocation.\n\n## 7 Enforcement Actions\n1. QUARANTINE - Phantom execution with forensic capture\n2. TERMINATE - Immediate kill, fail-closed\n3. SAFE_STATE - Return-to-home / controlled shutdown\n4. NETWORK_ISOLATE - Sever network, continue local\n5. KEY_REVOKE - Invalidate cryptographic keys\n6. TOKEN_INVALIDATE - Revoke access tokens\n7. ALERT_ONLY - Log without enforcement (gradual deployment)\n\n## 3 Verification Tiers\n| Tier | Description | Trust Assumption |\n|------|-------------|-----------------|\n| Bronze | Cryptographic signatures only | Trust signing keys |\n| Silver | Signatures + continuity chain | Trust chain operator + keys |\n| Gold | Full verification with blockchain-anchored Merkle proofs | Minimal trust - external anchor |\n\n## 3 Disclosure Modes\n1. PROOF_ONLY - Returns boolean attestation without revealing the value\n2. REVEAL_MIN - Returns minimal representation (e.g., range instead of exact value)\n3. REVEAL_FULL - Returns the complete claim value\n\n## Leaf Hash Formula (Claim 3c - Privacy Innovation)\n```\nleaf_hash = SHA-256(\n  schema_version || \"||\" || protocol_version || \"||\" ||\n  event_type || \"||\" || event_id || \"||\" ||\n  sequence_number || \"||\" || timestamp || \"||\" ||\n  previous_leaf_hash\n)\n```\n**PAYLOAD IS EXCLUDED from the leaf hash.** This is the key patent innovation - chain integrity can be verified without revealing the contents of any event. Only the structural metadata participates in the hash. The payload is separately integrity-protected via event_signature.\n\n## SPIFFE/SPIRE Integration Point\nSPIRE handles node-to-workload identity (SVID); AGA handles workload-to-intent governance. SPIFFE provides transport-layer identity binding via SVIDs (SPIFFE Verifiable Identity Documents). AGA binds governance policy to the workload's operational intent, creating a complementary layer:\n- SPIFFE: \"This workload IS who it claims to be\" (identity)\n- AGA: \"This workload IS DOING what it was attested to do\" (governance)\n\n## Framework Alignment\n| Framework | AGA Alignment |\n|-----------|--------------|\n| NIST SP 800-53 | SI-7 (Software Integrity), AU-10 (Non-repudiation), SI-4 (Monitoring) |\n| NIST AI RMF | Govern \u2192 Policy Artifacts; Map \u2192 Subject ID; Measure \u2192 Portal + Receipts; Manage \u2192 Enforcement |\n| NIST SP 800-57 | Key management for Ed25519 signing keys |\n| NIST SSDF (SP 800-218) | Software supply chain integrity via sealed hash attestation |\n| NIST SP 800-207 (ZTA) | Zero Trust Architecture - portal as Policy Enforcement Point, never trust, always verify |\n| ISO 42001 | AI management system - governance artifacts as compliance evidence |\n| EU AI Act | High-risk AI system transparency via evidence bundles |\n\n## Cryptographic Primitives\n- **Hashing:** SHA-256 (primary), BLAKE2b-256 (secondary)\n- **Signing:** Ed25519 via @noble/ed25519\n- **Salts:** 128-bit CSPRNG via @noble/hashes/utils\n- **Merkle Trees:** SHA-256 binary tree with inclusion proofs\n- **Serialization:** RFC 8785 deterministic JSON (sorted keys)\n\n## Event Types (12)\nGENESIS, POLICY_ISSUANCE, INTERACTION_RECEIPT, REVOCATION, ATTESTATION,\nANCHOR_BATCH, DISCLOSURE, SUBSTITUTION, KEY_ROTATION, BEHAVIORAL_DRIFT,\nDELEGATION, RE_ATTESTATION\n\n## 4 Sensitivity Levels\n- S1_LOW - Can be revealed fully\n- S2_MODERATE - Can be revealed minimally or proved\n- S3_HIGH - Proof only, auto-substitutes to lower sensitivity\n- S4_CRITICAL - Maximum protection, proof only, cascading substitution\n";
+export declare const SPECIFICATION_URI = "aga://specification";
+//# sourceMappingURL=specification.d.ts.map

package/dist/resources/specification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specification.d.ts","sourceRoot":"","sources":["../../src/resources/specification.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,6tKAwGlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,wBAAwB,CAAC"}