@attested-intelligence/aga-mcp-server 2.0.1 → 2.1.0

package/dist/proxy/stdio-bridge.js

@@ -0,0 +1,142 @@
+/**
+ * AGA Governance Proxy - Stdio Bridge
+ * Spawns a downstream MCP server as a child process and manages
+ * JSON-RPC message framing over stdin/stdout.
+ *
+ * Patent: USPTO App. No. 19/433,835
+ * Copyright (c) 2026 Attested Intelligence Holdings LLC
+ * SPDX-License-Identifier: MIT
+ */
+import { spawn } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+/**
+ * Bridges JSON-RPC messages to/from a child process via stdio.
+ * Handles newline-delimited JSON framing.
+ */
+export class StdioBridge extends EventEmitter {
+    options;
+    child = null;
+    buffer = '';
+    pendingRequests = new Map();
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    async start() {
+        const { command, args = [], env, cwd } = this.options;
+        this.child = spawn(command, args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: { ...process.env, ...env },
+            cwd,
+            shell: process.platform === 'win32',
+        });
+        this.child.stdout.on('data', (chunk) => {
+            this.buffer += chunk.toString();
+            this.processBuffer();
+        });
+        this.child.stderr.on('data', (chunk) => {
+            // Log downstream stderr but don't treat as JSON-RPC
+            process.stderr.write(`[downstream] ${chunk.toString()}`);
+        });
+        this.child.on('exit', (code, signal) => {
+            this.emit('exit', code, signal);
+            this.rejectAllPending(new Error(`Downstream process exited: code=${code} signal=${signal}`));
+        });
+        this.child.on('error', (err) => {
+            this.emit('error', err);
+            this.rejectAllPending(err);
+        });
+    }
+    processBuffer() {
+        const lines = this.buffer.split('\n');
+        // Keep the last (possibly incomplete) line in the buffer
+        this.buffer = lines.pop() || '';
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            try {
+                const msg = JSON.parse(trimmed);
+                this.handleMessage(msg);
+            }
+            catch {
+                // Not valid JSON - skip
+            }
+        }
+    }
+    handleMessage(msg) {
+        // If it has an id and either result or error, it's a response
+        if ('id' in msg && ('result' in msg || 'error' in msg)) {
+            const id = msg.id;
+            const pending = this.pendingRequests.get(id);
+            if (pending) {
+                clearTimeout(pending.timer);
+                this.pendingRequests.delete(id);
+                pending.resolve(msg);
+            }
+            return;
+        }
+        // Notifications from downstream (no id, or has method) - emit for proxy to handle
+        this.emit('notification', msg);
+    }
+    /**
+     * Send a JSON-RPC request to the downstream server and wait for a response.
+     */
+    async send(message, timeoutMs = 30_000) {
+        if (!this.child?.stdin?.writable) {
+            throw new Error('Downstream process not running');
+        }
+        const id = message.id;
+        // Notifications (no id) - fire and forget
+        if (id === undefined || id === null) {
+            this.child.stdin.write(JSON.stringify(message) + '\n');
+            return { jsonrpc: '2.0', result: null, id: null };
+        }
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pendingRequests.delete(id);
+                reject(new Error(`Timeout waiting for response to request ${id}`));
+            }, timeoutMs);
+            this.pendingRequests.set(id, { resolve, reject, timer });
+            this.child.stdin.write(JSON.stringify(message) + '\n');
+        });
+    }
+    /**
+     * Send a raw message without waiting for a response.
+     */
+    sendRaw(message) {
+        if (!this.child?.stdin?.writable) {
+            throw new Error('Downstream process not running');
+        }
+        this.child.stdin.write(JSON.stringify(message) + '\n');
+    }
+    async stop() {
+        this.rejectAllPending(new Error('Bridge stopped'));
+        if (this.child) {
+            this.child.kill('SIGTERM');
+            // Give it a moment, then force kill
+            await new Promise(resolve => {
+                const timer = setTimeout(() => {
+                    this.child?.kill('SIGKILL');
+                    resolve();
+                }, 3000);
+                this.child.on('exit', () => {
+                    clearTimeout(timer);
+                    resolve();
+                });
+            });
+            this.child = null;
+        }
+    }
+    get running() {
+        return this.child !== null && this.child.exitCode === null;
+    }
+    rejectAllPending(err) {
+        for (const [id, pending] of this.pendingRequests) {
+            clearTimeout(pending.timer);
+            pending.reject(err);
+        }
+        this.pendingRequests.clear();
+    }
+}
+//# sourceMappingURL=stdio-bridge.js.map

package/dist/proxy/stdio-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-bridge.js","sourceRoot":"","sources":["../../src/proxy/stdio-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,YAAY;IASvB;IARZ,KAAK,GAAwB,IAAI,CAAC;IAClC,MAAM,GAAG,EAAE,CAAC;IACZ,eAAe,GAAG,IAAI,GAAG,EAI7B,CAAC;IAEL,YAAoB,OAA2B;QAC7C,KAAK,EAAE,CAAC;QADU,YAAO,GAAP,OAAO,CAAoB;IAE/C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEtD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAChC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE;YAC/B,GAAG;YACH,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC9C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC9C,oDAAoD;YACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,mCAAmC,IAAI,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,yDAAyD;QACzD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;gBAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,GAA4B;QAChD,8DAA8D;QAC9D,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAqB,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QAED,kFAAkF;QAClF,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAgC,EAAE,SAAS,GAAG,MAAM;QAC7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAiC,CAAC;QAErD,0CAA0C;QAC1C,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,KAAM,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,OAAgC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,oCAAoC;YACpC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC5B,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,IAAI,CAAC,KAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;oBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC7D,CAAC;IAEO,gBAAgB,CAAC,GAAU;QACjC,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACjD,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/proxy/types.d.ts

@@ -0,0 +1,36 @@
+/**
+ * AGA Governance Proxy - Types
+ * Adapted from aga-mcp-gateway/src/governance/types.ts
+ *
+ * Patent: USPTO App. No. 19/433,835
+ * Copyright (c) 2026 Attested Intelligence Holdings LLC
+ * SPDX-License-Identifier: MIT
+ */
+export interface ToolConstraint {
+    name: string;
+    allowed: boolean;
+    max_calls_per_minute?: number;
+    path_prefix?: string;
+    path_keys?: string[];
+    denied_patterns?: string[];
+}
+export interface ToolPolicy {
+    mode: 'allowlist' | 'denylist' | 'audit_only';
+    constraints: Record<string, ToolConstraint>;
+}
+export interface ToolCallDecision {
+    allowed: boolean;
+    reason: string;
+    tool_name: string;
+    policy_mode: string;
+}
+export interface ProxyConfig {
+    port: number;
+    upstream: string;
+    upstreamType: 'stdio' | 'http';
+    policy: ToolPolicy;
+    dataDir: string;
+}
+export declare const DEFAULT_PROXY_PORT = 18800;
+export declare const DEFAULT_DATA_DIR = ".aga-proxy";
+//# sourceMappingURL=types.d.ts.map

package/dist/proxy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AACxC,eAAO,MAAM,gBAAgB,eAAe,CAAC"}

package/dist/proxy/types.js

@@ -0,0 +1,11 @@
+/**
+ * AGA Governance Proxy - Types
+ * Adapted from aga-mcp-gateway/src/governance/types.ts
+ *
+ * Patent: USPTO App. No. 19/433,835
+ * Copyright (c) 2026 Attested Intelligence Holdings LLC
+ * SPDX-License-Identifier: MIT
+ */
+export const DEFAULT_PROXY_PORT = 18800;
+export const DEFAULT_DATA_DIR = '.aga-proxy';
+//# sourceMappingURL=types.js.map

package/dist/proxy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA+BH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC"}

package/dist/proxy/verify.d.ts

@@ -0,0 +1,29 @@
+/**
+ * AGA Gateway Bundle Verifier
+ * Verifies Ed25519-SHA256-JCS evidence bundles.
+ * Uses ONLY @noble crypto - zero imports from ../core/ or ../crypto/.
+ *
+ * 5-step verification matching gateway, Python SDK, and browser verifier:
+ * 1. Algorithm check
+ * 2. Receipt signature verification
+ * 3. Chain integrity (previous_receipt_hash linkage)
+ * 4. Merkle inclusion proofs
+ * 5. Bundle consistency (leaf hashes match receipts)
+ *
+ * Patent: USPTO App. No. 19/433,835
+ * Copyright (c) 2026 Attested Intelligence Holdings LLC
+ * SPDX-License-Identifier: MIT
+ */
+export interface GatewayVerificationResult {
+    algorithm_valid: boolean;
+    receipt_signatures_valid: boolean;
+    chain_integrity_valid: boolean;
+    merkle_proofs_valid: boolean;
+    bundle_consistent: boolean;
+    overall_valid: boolean;
+    receipts_checked: number;
+    algorithm: string;
+    error?: string;
+}
+export declare function verifyGatewayBundle(bundleJson: string): Promise<GatewayVerificationResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/proxy/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/proxy/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiDH,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,wBAAwB,EAAE,OAAO,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA2HhG"}

package/dist/proxy/verify.js

@@ -0,0 +1,183 @@
+/**
+ * AGA Gateway Bundle Verifier
+ * Verifies Ed25519-SHA256-JCS evidence bundles.
+ * Uses ONLY @noble crypto - zero imports from ../core/ or ../crypto/.
+ *
+ * 5-step verification matching gateway, Python SDK, and browser verifier:
+ * 1. Algorithm check
+ * 2. Receipt signature verification
+ * 3. Chain integrity (previous_receipt_hash linkage)
+ * 4. Merkle inclusion proofs
+ * 5. Bundle consistency (leaf hashes match receipts)
+ *
+ * Patent: USPTO App. No. 19/433,835
+ * Copyright (c) 2026 Attested Intelligence Holdings LLC
+ * SPDX-License-Identifier: MIT
+ */
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha512';
+import { sha256 } from '@noble/hashes/sha256';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
+// Ed25519 setup
+ed.etc.sha512Sync = (...m) => {
+    const total = m.reduce((n, a) => n + a.length, 0);
+    const buf = new Uint8Array(total);
+    let off = 0;
+    for (const a of m) {
+        buf.set(a, off);
+        off += a.length;
+    }
+    return sha512(buf);
+};
+const enc = new TextEncoder();
+// ── RFC 8785 Canonicalization ────────────────────────────────
+function deepSortKeys(obj) {
+    if (obj === null || obj === undefined || typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj))
+        return obj.map(deepSortKeys);
+    const sorted = {};
+    for (const key of Object.keys(obj).sort()) {
+        sorted[key] = deepSortKeys(obj[key]);
+    }
+    return sorted;
+}
+function canonicalize(obj) {
+    return JSON.stringify(deepSortKeys(obj));
+}
+function sha256Hex(data) {
+    return bytesToHex(sha256(enc.encode(data)));
+}
+function merkleNodeHash(leftHex, rightHex) {
+    const left = hexToBytes(leftHex);
+    const right = hexToBytes(rightHex);
+    const combined = new Uint8Array(left.length + right.length);
+    combined.set(left, 0);
+    combined.set(right, left.length);
+    return bytesToHex(sha256(combined));
+}
+// ── 5-step verification ─────────────────────────────────────
+export async function verifyGatewayBundle(bundleJson) {
+    let bundle;
+    try {
+        bundle = JSON.parse(bundleJson);
+    }
+    catch {
+        return {
+            algorithm_valid: false, receipt_signatures_valid: false,
+            chain_integrity_valid: false, merkle_proofs_valid: false,
+            bundle_consistent: false, overall_valid: false,
+            receipts_checked: 0, algorithm: '', error: 'Invalid JSON',
+        };
+    }
+    const result = {
+        algorithm_valid: false, receipt_signatures_valid: false,
+        chain_integrity_valid: false, merkle_proofs_valid: false,
+        bundle_consistent: false, overall_valid: false,
+        receipts_checked: bundle.receipts?.length ?? 0,
+        algorithm: bundle.algorithm ?? '',
+    };
+    // Step 1: Algorithm
+    if (bundle.algorithm !== 'Ed25519-SHA256-JCS') {
+        result.error = `unsupported algorithm: ${bundle.algorithm}`;
+        return result;
+    }
+    for (const r of bundle.receipts) {
+        if (r.algorithm !== 'Ed25519-SHA256-JCS') {
+            result.error = `receipt has wrong algorithm: ${r.algorithm}`;
+            return result;
+        }
+    }
+    result.algorithm_valid = true;
+    // Step 2: Receipt signatures
+    try {
+        for (const receipt of bundle.receipts) {
+            const { signature, ...unsigned } = receipt;
+            const canonical = canonicalize(unsigned);
+            const sig = hexToBytes(signature);
+            const pk = hexToBytes(receipt.public_key);
+            if (!ed.verify(sig, enc.encode(canonical), pk)) {
+                result.error = `Receipt ${receipt.receipt_id} signature failed`;
+                return result;
+            }
+        }
+        result.receipt_signatures_valid = true;
+    }
+    catch (e) {
+        result.error = `signature verification error: ${e}`;
+        return result;
+    }
+    // Step 3: Chain integrity
+    try {
+        const receipts = bundle.receipts;
+        if (receipts.length > 0 && receipts[0].previous_receipt_hash !== '') {
+            result.error = 'First receipt previous_receipt_hash must be empty';
+            return result;
+        }
+        for (let i = 1; i < receipts.length; i++) {
+            const expectedHash = sha256Hex(canonicalize(receipts[i - 1]));
+            if (receipts[i].previous_receipt_hash !== expectedHash) {
+                result.error = `Chain break at receipt ${i}`;
+                return result;
+            }
+        }
+        result.chain_integrity_valid = true;
+    }
+    catch (e) {
+        result.error = `chain integrity error: ${e}`;
+        return result;
+    }
+    // Step 4: Merkle proofs
+    try {
+        for (const proof of bundle.merkle_proofs) {
+            let currentHash = proof.leaf_hash;
+            for (let i = 0; i < proof.siblings.length; i++) {
+                if (proof.directions[i] === 'left') {
+                    currentHash = merkleNodeHash(proof.siblings[i], currentHash);
+                }
+                else {
+                    currentHash = merkleNodeHash(currentHash, proof.siblings[i]);
+                }
+            }
+            if (currentHash !== bundle.merkle_root) {
+                result.error = `Merkle proof failed for leaf ${proof.leaf_index}`;
+                return result;
+            }
+            if (proof.merkle_root !== bundle.merkle_root) {
+                result.error = `Proof root mismatch at leaf ${proof.leaf_index}`;
+                return result;
+            }
+        }
+        result.merkle_proofs_valid = true;
+    }
+    catch (e) {
+        result.error = `merkle proof error: ${e}`;
+        return result;
+    }
+    // Step 5: Bundle consistency
+    try {
+        if (bundle.merkle_proofs.length !== bundle.receipts.length) {
+            result.error = 'Proof count != receipt count';
+            return result;
+        }
+        for (let i = 0; i < bundle.receipts.length; i++) {
+            const leafHash = sha256Hex(canonicalize(bundle.receipts[i]));
+            if (bundle.merkle_proofs[i].leaf_hash !== leafHash) {
+                result.error = `Leaf hash mismatch at receipt ${i}`;
+                return result;
+            }
+            if (bundle.merkle_proofs[i].leaf_index !== i) {
+                result.error = `Leaf index mismatch at receipt ${i}`;
+                return result;
+            }
+        }
+        result.bundle_consistent = true;
+    }
+    catch (e) {
+        result.error = `consistency error: ${e}`;
+        return result;
+    }
+    result.overall_valid = true;
+    return result;
+}
+//# sourceMappingURL=verify.js.map

package/dist/proxy/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/proxy/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE7D,gBAAgB;AAChB,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAE,EAAE;IACzC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,gEAAgE;AAEhE,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,GAA+B,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,QAAgB;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtC,CAAC;AAgBD,+DAA+D;AAE/D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK;YACvD,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK;YACxD,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;YAC9C,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA8B;QACxC,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK;QACvD,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK;QACxD,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;QAC9C,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;KAClC,CAAC;IAEF,oBAAoB;IACpB,IAAI,MAAM,CAAC,SAAS,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,CAAC,KAAK,GAAG,0BAA0B,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACzC,MAAM,CAAC,KAAK,GAAG,gCAAgC,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;IAE9B,6BAA6B;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;YAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,KAAK,GAAG,WAAW,OAAO,CAAC,UAAU,mBAAmB,CAAC;gBAChE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,iCAAiC,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,EAAE,CAAC;YACpE,MAAM,CAAC,KAAK,GAAG,mDAAmD,CAAC;YACnE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,YAAY,EAAE,CAAC;gBACvD,MAAM,CAAC,KAAK,GAAG,0BAA0B,CAAC,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,0BAA0B,CAAC,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBACnC,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBAC/D,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YACD,IAAI,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvC,MAAM,CAAC,KAAK,GAAG,gCAAgC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAClE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,CAAC,KAAK,GAAG,+BAA+B,KAAK,CAAC,UAAU,EAAE,CAAC;gBACjE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,uBAAuB,CAAC,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,CAAC,KAAK,GAAG,8BAA8B,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,CAAC,KAAK,GAAG,iCAAiC,CAAC,EAAE,CAAC;gBACpD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,KAAK,GAAG,kCAAkC,CAAC,EAAE,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,sBAAsB,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@attested-intelligence/aga-mcp-server",
-  "version": "2.0.1",
-  "description": "MCP server implementing the Attested Governance Artifact (AGA) protocol - cryptographic compliance enforcement for autonomous AI systems. 20 tools, 3 resources, 3 prompts.",
+  "version": "2.1.0",
+  "description": "MCP server and governance proxy implementing the Attested Governance Artifact (AGA) protocol - cryptographic compliance enforcement for autonomous AI systems. 20 tools, 3 resources, 3 prompts, governance proxy.",
   "author": "Attested Intelligence Holdings LLC",
   "license": "MIT",
   "type": "module",
@@ -13,7 +13,8 @@
     "LICENSE"
   ],
   "bin": {
-    "aga-mcp-server": "dist/index.js"
+    "aga-mcp-server": "dist/index.js",
+    "aga-proxy": "dist/proxy/index.js"
   },
   "scripts": {
     "build": "tsc",
@@ -25,6 +26,9 @@
     "test:core": "vitest run tests/core/",
     "test:tools": "vitest run tests/tools/",
     "test:integration": "vitest run tests/integration/",
+    "test:proxy": "vitest run tests/proxy/",
+    "proxy": "tsx src/proxy/index.ts",
+    "proxy:start": "tsx src/proxy/index.ts start",
     "demo": "tsx scripts/demo.ts",
     "benchmark": "tsx scripts/benchmark.ts",
     "lint": "tsc --noEmit",
@@ -34,6 +38,7 @@
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@noble/ed25519": "^2.1.0",
     "@noble/hashes": "^1.7.0",
+    "commander": "^14.0.3",
     "uuid": "^11.1.0",
     "zod": "^3.24.0"
   },