@attested-intelligence/aga-mcp-server 2.0.1 → 2.2.0

package/dist/tools/delegate-subagent.d.ts

@@ -1,18 +0,0 @@
-import type { ServerContext } from '../context.js';
-export interface DelegateSubagentArgs {
-    sub_agent_id?: string;
-    permitted_tools?: string[];
-    ttl_seconds?: number;
-    delegation_reason?: string;
-    enforcement_triggers?: string[];
-    measurement_types?: string[];
-    requested_ttl_seconds?: number;
-    delegation_purpose?: string;
-}
-export declare function handleDelegateSubagent(args: DelegateSubagentArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=delegate-subagent.d.ts.map

package/dist/tools/delegate-subagent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delegate-subagent.d.ts","sourceRoot":"","sources":["../../src/tools/delegate-subagent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,MAAM,WAAW,oBAAoB;IAEnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,aAAa;;;;;GAmD1F"}

package/dist/tools/delegate-subagent.js

@@ -1,50 +0,0 @@
-import { deriveArtifact } from '../core/delegation.js';
-import { utcNow } from '../utils/timestamp.js';
-export async function handleDelegateSubagent(args, ctx) {
-    if (!ctx.portal.artifact)
-        return ctx.error('No artifact loaded. Call aga_create_artifact first.');
-    // Resolve parameters (support both V1 and V2 naming)
-    const triggers = args.enforcement_triggers
-        ?? ctx.portal.artifact.enforcement_parameters.enforcement_triggers.map(String);
-    const types = args.measurement_types
-        ?? ctx.portal.artifact.enforcement_parameters.measurement_types.map(String);
-    const ttl = args.ttl_seconds ?? args.requested_ttl_seconds ?? 1800;
-    const purpose = args.delegation_reason ?? args.delegation_purpose ?? 'Sub-agent delegation';
-    const subAgentId = args.sub_agent_id ?? 'sub-agent';
-    // If permitted_tools provided, validate against behavioral baseline
-    const permittedTools = args.permitted_tools;
-    const result = deriveArtifact(ctx.portal.artifact, {
-        enforcement_triggers: triggers,
-        measurement_types: types,
-        requested_ttl_seconds: ttl,
-        delegation_purpose: purpose,
-    }, ctx.issuerKP);
-    if (result.success && result.child_artifact_hash && result.effective_ttl_seconds !== undefined && result.scope_reduction) {
-        const record = {
-            parent_artifact_hash: result.parent_artifact_hash,
-            child_artifact_hash: result.child_artifact_hash,
-            effective_ttl_seconds: result.effective_ttl_seconds,
-            scope_reduction: result.scope_reduction,
-            purpose,
-            timestamp: utcNow(),
-        };
-        ctx.delegations.push(record);
-        await ctx.appendToChain('DELEGATION', {
-            type: 'DELEGATION',
-            sub_agent_id: subAgentId,
-            parent_artifact_hash: result.parent_artifact_hash,
-            child_artifact_hash: result.child_artifact_hash,
-            effective_ttl: result.effective_ttl_seconds,
-            scope_reduction: result.scope_reduction,
-            permitted_tools: permittedTools,
-            purpose,
-        });
-    }
-    return ctx.json({
-        ...result,
-        sub_agent_id: subAgentId,
-        scope_diminished: result.success ? true : undefined,
-        permitted_tools: permittedTools,
-    });
-}
-//# sourceMappingURL=delegate-subagent.js.map

package/dist/tools/delegate-subagent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delegate-subagent.js","sourceRoot":"","sources":["../../src/tools/delegate-subagent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAkB/C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAA0B,EAAE,GAAkB;IACzF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAElG,qDAAqD;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB;WACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB;WAC/B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,kBAAkB,IAAI,sBAAsB,CAAC;IAC5F,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC;IAEpD,oEAAoE;IACpE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC;IAE5C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;QACjD,oBAAoB,EAAE,QAA+B;QACrD,iBAAiB,EAAE,KAA0B;QAC7C,qBAAqB,EAAE,GAAG;QAC1B,kBAAkB,EAAE,OAAO;KAC5B,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEjB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QACzH,MAAM,MAAM,GAAqB;YAC/B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,OAAO;YACP,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC;QACF,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7B,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE;YACpC,IAAI,EAAE,YAAY;YAClB,YAAY,EAAE,UAAU;YACxB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,aAAa,EAAE,MAAM,CAAC,qBAAqB;YAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,eAAe,EAAE,cAAc;YAC/B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,GAAG,MAAM;QACT,YAAY,EAAE,UAAU;QACxB,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACnD,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/disclose-claim.d.ts

@@ -1,14 +0,0 @@
-import type { ServerContext } from '../context.js';
-import type { DisclosureMode } from '../core/types.js';
-export interface DiscloseClaimArgs {
-    claim_id: string;
-    requester_id?: string;
-    mode?: DisclosureMode;
-}
-export declare function handleDiscloseClaim(args: DiscloseClaimArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=disclose-claim.d.ts.map

package/dist/tools/disclose-claim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclose-claim.d.ts","sourceRoot":"","sources":["../../src/tools/disclose-claim.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa;;;;;GAyBpF"}

package/dist/tools/disclose-claim.js

@@ -1,23 +0,0 @@
-import { processDisclosure } from '../core/disclosure.js';
-import { utcNow } from '../utils/timestamp.js';
-export async function handleDiscloseClaim(args, ctx) {
-    const latest = await ctx.storage.getLatestEvent();
-    const result = processDisclosure({
-        requested_claim_id: args.claim_id,
-        requester_id: args.requester_id ?? 'anonymous',
-        mode: args.mode ?? 'REVEAL_MIN',
-        timestamp: utcNow(),
-    }, ctx.defaultClaims, ctx.claimValues, 1, latest?.sequence_number ?? 0, ctx.portalKP);
-    if (result.substitution_receipt) {
-        await ctx.appendToChain('SUBSTITUTION', result.substitution_receipt);
-    }
-    else {
-        await ctx.appendToChain('DISCLOSURE', {
-            claim_id: args.claim_id,
-            mode: args.mode ?? 'REVEAL_MIN',
-            permitted: result.permitted,
-        });
-    }
-    return ctx.json({ success: true, ...result });
-}
-//# sourceMappingURL=disclose-claim.js.map

package/dist/tools/disclose-claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclose-claim.js","sourceRoot":"","sources":["../../src/tools/disclose-claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAU/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAuB,EAAE,GAAkB;IACnF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,iBAAiB,CAC9B;QACE,kBAAkB,EAAE,IAAI,CAAC,QAAQ;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,WAAW;QAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;QAC/B,SAAS,EAAE,MAAM,EAAE;KACpB,EACD,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,WAAW,EACf,CAAC,EACD,MAAM,EAAE,eAAe,IAAI,CAAC,EAC5B,GAAG,CAAC,QAAQ,CACb,CAAC;IACF,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChC,MAAM,GAAG,CAAC,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE;YACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/tools/export-bundle.d.ts

@@ -1,8 +0,0 @@
-import type { ServerContext } from '../context.js';
-export declare function handleExportBundle(_args: Record<string, never>, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=export-bundle.d.ts.map

package/dist/tools/export-bundle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"export-bundle.d.ts","sourceRoot":"","sources":["../../src/tools/export-bundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,aAAa;;;;;GAkBxF"}

package/dist/tools/export-bundle.js

@@ -1,25 +0,0 @@
-import { hashArtifact } from '../core/artifact.js';
-import { eventInclusionProof } from '../core/checkpoint.js';
-import { generateBundle } from '../core/bundle.js';
-export async function handleExportBundle(_args, ctx) {
-    const artifact = await ctx.storage.getLatestArtifact();
-    if (!artifact)
-        return ctx.error('No artifact');
-    const cp = await ctx.storage.getLatestCheckpoint();
-    if (!cp)
-        return ctx.error('No checkpoint. Call aga_create_checkpoint first.');
-    const receipts = await ctx.storage.getReceiptsByArtifact(hashArtifact(artifact));
-    const batchEvents = await ctx.storage.getEvents(cp.batch_start_sequence, cp.batch_end_sequence);
-    const proofs = receipts
-        .filter(r => r.sequence_number >= cp.batch_start_sequence && r.sequence_number <= cp.batch_end_sequence)
-        .map(r => eventInclusionProof(batchEvents, r.sequence_number));
-    const bundle = generateBundle(artifact, receipts, proofs, cp, ctx.portalKP);
-    return ctx.json({
-        success: true,
-        bundle,
-        offline_verifiable: true,
-        receipt_count: receipts.length,
-        proof_count: proofs.length,
-    });
-}
-//# sourceMappingURL=export-bundle.js.map

package/dist/tools/export-bundle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"export-bundle.js","sourceRoot":"","sources":["../../src/tools/export-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA4B,EAAE,GAAkB;IACvF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;IACnD,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,oBAAoB,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,QAAQ;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,oBAAoB,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,kBAAkB,CAAC;SACvG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,IAAI;QACb,MAAM;QACN,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/full-lifecycle.d.ts

@@ -1,16 +0,0 @@
-import type { ServerContext } from '../context.js';
-export interface FullLifecycleArgs {
-    subject_content?: string;
-    subject_metadata?: Record<string, string>;
-    scenario?: string;
-    include_drift?: boolean;
-    include_revocation?: boolean;
-    include_behavioral?: boolean;
-}
-export declare function handleFullLifecycle(args: FullLifecycleArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=full-lifecycle.d.ts.map

package/dist/tools/full-lifecycle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"full-lifecycle.d.ts","sourceRoot":"","sources":["../../src/tools/full-lifecycle.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAaD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa;;;;;GA6GpF"}

package/dist/tools/full-lifecycle.js

@@ -1,121 +0,0 @@
-import { sha256Str } from '../crypto/hash.js';
-import { pkToHex } from '../crypto/sign.js';
-import { computeSubjectIdFromString } from '../core/subject.js';
-import { performAttestation } from '../core/attestation.js';
-import { generateArtifact, hashArtifact } from '../core/artifact.js';
-import { generateReceipt } from '../core/receipt.js';
-import { createCheckpoint, eventInclusionProof } from '../core/checkpoint.js';
-import { generateBundle, verifyBundleOffline } from '../core/bundle.js';
-import { initQuarantine, captureInput } from '../core/quarantine.js';
-const SCENARIOS = {
-    drone: {
-        content: 'def monitor(): return sensors.read_all()',
-        metadata: { filename: 'drone_agent.py', version: '2.1.0', author: 'engineering' },
-    },
-    scada: {
-        content: 'def control(): return actuators.safe_position()',
-        metadata: { filename: 'scada_controller.py', version: '1.0.0', author: 'ops' },
-    },
-};
-export async function handleFullLifecycle(args, ctx) {
-    const scenario = SCENARIOS[args.scenario ?? ''] ?? {
-        content: args.subject_content ?? 'def agent(): return task.execute()',
-        metadata: args.subject_metadata ?? { filename: 'lifecycle-test' },
-    };
-    const content = scenario.content;
-    const meta = scenario.metadata;
-    const includeDrift = args.include_drift !== false;
-    const includeRevocation = args.include_revocation !== false;
-    const includeBehavioral = args.include_behavioral !== false;
-    const phases = {};
-    // Phase 1: Attestation
-    const subId = computeSubjectIdFromString(content, meta);
-    const policyRef = sha256Str(JSON.stringify(ctx.defaultEnforcement));
-    const att = performAttestation({ subject_identifier: subId, policy_reference: policyRef, evidence_items: [] });
-    if (!att.success || !att.sealed_hash || !att.seal_salt)
-        return ctx.error('Attestation failed');
-    const artifact = generateArtifact({
-        subject_identifier: subId, policy_reference: policyRef, policy_version: 1,
-        sealed_hash: att.sealed_hash, seal_salt: att.seal_salt,
-        enforcement_parameters: { ...ctx.defaultEnforcement, enforcement_triggers: ['QUARANTINE', 'TERMINATE'] },
-        disclosure_policy: ctx.defaultClaims,
-        evidence_commitments: att.evidence_commitments, issuer_keypair: ctx.issuerKP,
-    });
-    await ctx.storage.storeArtifact(artifact);
-    ctx.portal.reset();
-    ctx.portal.loadArtifact(artifact, pkToHex(ctx.issuerKP.publicKey));
-    ctx.activeArtifact = artifact;
-    await ctx.appendToChain('POLICY_ISSUANCE', { artifact_hash: hashArtifact(artifact) });
-    phases.attestation = { success: true, artifact_hash: hashArtifact(artifact), portal_state: ctx.portal.state };
-    // Phase 2: Clean monitoring
-    const result = ctx.portal.measure(new TextEncoder().encode(content), meta);
-    const artRef = hashArtifact(artifact);
-    const receipt = generateReceipt({
-        subjectId: subId, artifactRef: artRef,
-        currentHash: `${result.currentBytesHash}||${result.currentMetaHash}`,
-        sealedHash: `${result.expectedBytesHash}||${result.expectedMetaHash}`,
-        driftDetected: false, driftDescription: null, action: null,
-        measurementType: 'EXECUTABLE_IMAGE', seq: ctx.portal.sequenceCounter + 1,
-        prevLeaf: ctx.portal.lastLeafHash, portalKP: ctx.portalKP,
-    });
-    await ctx.storage.storeReceipt(receipt);
-    await ctx.appendToChain('INTERACTION_RECEIPT', { receipt_id: receipt.receipt_id });
-    phases.monitoring = { match: result.match, receipt_id: receipt.receipt_id };
-    // Phase 3: Drift detection
-    if (includeDrift) {
-        const injected = content.replace('return', 'return attacker.exfiltrate(') + ')';
-        const driftResult = ctx.portal.measure(new TextEncoder().encode(injected), meta);
-        ctx.portal.enforce('QUARANTINE');
-        ctx.quarantine = initQuarantine();
-        captureInput(ctx.quarantine, 'attacker_command', 'exfiltrate data');
-        const driftReceipt = generateReceipt({
-            subjectId: subId, artifactRef: artRef,
-            currentHash: `${driftResult.currentBytesHash}||${driftResult.currentMetaHash}`,
-            sealedHash: `${driftResult.expectedBytesHash}||${driftResult.expectedMetaHash}`,
-            driftDetected: true, driftDescription: 'Binary modification detected', action: 'QUARANTINE',
-            measurementType: 'EXECUTABLE_IMAGE', seq: ctx.portal.sequenceCounter + 1,
-            prevLeaf: ctx.portal.lastLeafHash, portalKP: ctx.portalKP,
-        });
-        await ctx.storage.storeReceipt(driftReceipt);
-        await ctx.appendToChain('INTERACTION_RECEIPT', { receipt_id: driftReceipt.receipt_id, drift_detected: true });
-        phases.drift_detection = { drift_detected: true, enforcement: 'QUARANTINE', portal_state: ctx.portal.state };
-    }
-    // Phase 3b: Behavioral drift
-    if (includeBehavioral) {
-        ctx.behavioralMonitor.setBaseline({
-            permitted_tools: ['survey', 'report'], rate_limits: { survey: 10 },
-            forbidden_sequences: [['exfiltrate', 'transmit_external']], window_ms: 60000,
-        });
-        ctx.behavioralMonitor.recordInvocation('exfiltrate', sha256Str('exfil'));
-        const bm = ctx.behavioralMonitor.measure();
-        if (bm.drift_detected) {
-            await ctx.appendToChain('BEHAVIORAL_DRIFT', { violations: bm.violations, behavioral_hash: bm.behavioral_hash });
-        }
-        phases.behavioral_drift = { drift_detected: bm.drift_detected, violations: bm.violations.length };
-    }
-    // Phase 3c: Revocation
-    if (includeRevocation) {
-        ctx.portal.revoke(artifact.sealed_hash);
-        await ctx.appendToChain('REVOCATION', { artifact_sealed_hash: artifact.sealed_hash, reason: 'Compromise detected' });
-        phases.revocation = { revoked: true, portal_state: ctx.portal.state };
-    }
-    // Phase 4: Evidence bundle
-    const allEvents = await ctx.storage.getAllEvents();
-    const { checkpoint } = createCheckpoint(allEvents);
-    await ctx.storage.storeCheckpoint(checkpoint);
-    await ctx.appendToChain('ANCHOR_BATCH', { merkle_root: checkpoint.merkle_root, leaf_count: allEvents.length });
-    const allReceipts = await ctx.storage.getAllReceipts();
-    const batchEvents = await ctx.storage.getEvents(checkpoint.batch_start_sequence, checkpoint.batch_end_sequence);
-    const proofs = batchEvents.length > 1 ? [eventInclusionProof(batchEvents, batchEvents[1].sequence_number)] : [];
-    const bundle = generateBundle(artifact, allReceipts, proofs, checkpoint, ctx.portalKP);
-    const verification = verifyBundleOffline(bundle, pkToHex(ctx.issuerKP.publicKey));
-    phases.evidence_bundle = { verification, receipt_count: allReceipts.length };
-    return ctx.json({
-        success: true,
-        scenario: args.scenario ?? 'default',
-        phases,
-        final_verdict: verification.overall ? 'PASS' : 'FAIL',
-        portal_state: ctx.portal.state,
-    });
-}
-//# sourceMappingURL=full-lifecycle.js.map

package/dist/tools/full-lifecycle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"full-lifecycle.js","sourceRoot":"","sources":["../../src/tools/full-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAYrE,MAAM,SAAS,GAA0E;IACvF,KAAK,EAAE;QACL,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE;KAClF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,iDAAiD;QAC1D,QAAQ,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KAC/E;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAuB,EAAE,GAAkB;IACnF,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI;QACjD,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,oCAAoC;QACrE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE;KAClE,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC;IAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,KAAK,KAAK,CAAC;IAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,KAAK,KAAK,CAAC;IAE5D,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,uBAAuB;IACvB,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/G,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAE/F,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAChC,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACzE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;QACtD,sBAAsB,EAAE,EAAE,GAAG,GAAG,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE;QACxG,iBAAiB,EAAE,GAAG,CAAC,aAAa;QACpC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ;KAC7E,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;IAC9B,MAAM,GAAG,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtF,MAAM,CAAC,WAAW,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAE9G,4BAA4B;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM;QACrC,WAAW,EAAE,GAAG,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,eAAe,EAAE;QACpE,UAAU,EAAE,GAAG,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,gBAAgB,EAAE;QACrE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;QAC1D,eAAe,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC;QACxE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;KAC1D,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,CAAC,aAAa,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAE5E,2BAA2B;IAC3B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,6BAA6B,CAAC,GAAG,GAAG,CAAC;QAChF,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACjC,GAAG,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;QAClC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,eAAe,CAAC;YACnC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM;YACrC,WAAW,EAAE,GAAG,WAAW,CAAC,gBAAgB,KAAK,WAAW,CAAC,eAAe,EAAE;YAC9E,UAAU,EAAE,GAAG,WAAW,CAAC,iBAAiB,KAAK,WAAW,CAAC,gBAAgB,EAAE;YAC/E,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,MAAM,EAAE,YAAY;YAC3F,eAAe,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC;YACxE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;SAC1D,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,GAAG,CAAC,aAAa,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,eAAe,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/G,CAAC;IAED,6BAA6B;IAC7B,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC;YAChC,eAAe,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAClE,mBAAmB,EAAE,CAAC,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK;SAC7E,CAAC,CAAC;QACH,GAAG,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,GAAG,CAAC,aAAa,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,CAAC,gBAAgB,GAAG,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;IACpG,CAAC;IAED,uBAAuB;IACvB,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,oBAAoB,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACrH,MAAM,CAAC,UAAU,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACxE,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACnD,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,GAAG,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAE/G,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,oBAAoB,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAChH,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChH,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,eAAe,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;IAE7E,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;QACpC,MAAM;QACN,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACrD,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;KAC/B,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/generate-receipt.d.ts

@@ -1,16 +0,0 @@
-import type { ServerContext } from '../context.js';
-export interface GenerateReceiptArgs {
-    subject_content?: string;
-    drift_detected?: boolean;
-    drift_description?: string;
-    measurement_type?: string;
-    action_type?: string;
-    action_detail?: string;
-}
-export declare function handleGenerateReceipt(args: GenerateReceiptArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=generate-receipt.d.ts.map

package/dist/tools/generate-receipt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-receipt.d.ts","sourceRoot":"","sources":["../../src/tools/generate-receipt.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,aAAa;;;;;GA6BxF"}

package/dist/tools/generate-receipt.js

@@ -1,31 +0,0 @@
-import { hashArtifact } from '../core/artifact.js';
-import { generateReceipt } from '../core/receipt.js';
-export async function handleGenerateReceipt(args, ctx) {
-    if (!ctx.portal.artifact)
-        return ctx.error('No artifact loaded.');
-    const artRef = hashArtifact(ctx.portal.artifact);
-    const mType = args.action_type ?? args.measurement_type ?? 'FILE_SYSTEM_STATE';
-    const driftDesc = args.action_detail ?? args.drift_description ?? null;
-    const receipt = generateReceipt({
-        subjectId: ctx.portal.artifact.subject_identifier,
-        artifactRef: artRef,
-        currentHash: args.subject_content ?? artRef,
-        sealedHash: ctx.portal.artifact.sealed_hash,
-        driftDetected: args.drift_detected ?? false,
-        driftDescription: driftDesc,
-        action: null,
-        measurementType: mType,
-        seq: ctx.portal.sequenceCounter + 1,
-        prevLeaf: ctx.portal.lastLeafHash,
-        portalKP: ctx.portalKP,
-    });
-    await ctx.storage.storeReceipt(receipt);
-    await ctx.appendToChain('INTERACTION_RECEIPT', {
-        receipt_id: receipt.receipt_id,
-        drift_detected: args.drift_detected ?? false,
-        action_type: args.action_type,
-        action_detail: args.action_detail,
-    });
-    return ctx.json({ success: true, receipt_id: receipt.receipt_id, receipt });
-}
-//# sourceMappingURL=generate-receipt.js.map

package/dist/tools/generate-receipt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-receipt.js","sourceRoot":"","sources":["../../src/tools/generate-receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAYrD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAyB,EAAE,GAAkB;IACvF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,IAAI,mBAAmB,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAEvE,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB;QACjD,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,eAAe,IAAI,MAAM;QAC3C,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW;QAC3C,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;QAC3C,gBAAgB,EAAE,SAAS;QAC3B,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,KAAK;QACtB,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC;QACnC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,CAAC,aAAa,CAAC,qBAAqB,EAAE;QAC7C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;QAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/tools/get-chain.d.ts

@@ -1,14 +0,0 @@
-import type { ServerContext } from '../context.js';
-export interface GetChainArgs {
-    start_seq?: number;
-    end_seq?: number;
-    verify?: boolean;
-    filter_type?: string;
-}
-export declare function handleGetChain(args: GetChainArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=get-chain.d.ts.map

package/dist/tools/get-chain.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-chain.d.ts","sourceRoot":"","sources":["../../src/tools/get-chain.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAYD,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa;;;;;GAqC1E"}

package/dist/tools/get-chain.js

@@ -1,45 +0,0 @@
-import { verifyChainIntegrity } from '../core/chain.js';
-const FILTER_MAP = {
-    behavioral: ['BEHAVIORAL_DRIFT'],
-    delegations: ['DELEGATION'],
-    receipts: ['INTERACTION_RECEIPT'],
-    revocations: ['REVOCATION'],
-    attestations: ['POLICY_ISSUANCE', 'RE_ATTESTATION', 'ATTESTATION'],
-    disclosure: ['DISCLOSURE', 'SUBSTITUTION'],
-    keys: ['KEY_ROTATION'],
-};
-export async function handleGetChain(args, ctx) {
-    let events = (args.start_seq !== undefined && args.end_seq !== undefined)
-        ? await ctx.storage.getEvents(args.start_seq, args.end_seq)
-        : await ctx.storage.getAllEvents();
-    // Apply filter_type
-    if (args.filter_type && args.filter_type !== 'all') {
-        const allowedTypes = FILTER_MAP[args.filter_type];
-        if (allowedTypes) {
-            events = events.filter(e => allowedTypes.includes(e.event_type));
-        }
-    }
-    const result = {
-        count: events.length,
-        events: events.map(e => ({
-            sequence_number: e.sequence_number,
-            event_type: e.event_type,
-            event_id: e.event_id,
-            timestamp: e.timestamp,
-            leaf_hash: e.leaf_hash.slice(0, 16) + '...',
-            previous_leaf_hash: e.previous_leaf_hash ? e.previous_leaf_hash.slice(0, 16) + '...' : null,
-            payload_hash: e.payload_hash.slice(0, 16) + '...',
-        })),
-    };
-    if (args.verify) {
-        const allEvents = await ctx.storage.getAllEvents();
-        const integrity = verifyChainIntegrity(allEvents);
-        result.chain_valid = integrity.valid;
-        result.broken_at = integrity.brokenAt;
-        result.verification_error = integrity.error;
-        result.leaf_hash_formula = 'SHA-256(schema_version || protocol_version || event_type || event_id || sequence_number || timestamp || previous_leaf_hash) - PAYLOAD EXCLUDED';
-        result.event_signature_covers = 'COMPLETE event including payload';
-    }
-    return ctx.json(result);
-}
-//# sourceMappingURL=get-chain.js.map

package/dist/tools/get-chain.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-chain.js","sourceRoot":"","sources":["../../src/tools/get-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAUxD,MAAM,UAAU,GAA6B;IAC3C,UAAU,EAAE,CAAC,kBAAkB,CAAC;IAChC,WAAW,EAAE,CAAC,YAAY,CAAC;IAC3B,QAAQ,EAAE,CAAC,qBAAqB,CAAC;IACjC,WAAW,EAAE,CAAC,YAAY,CAAC;IAC3B,YAAY,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,CAAC;IAClE,UAAU,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;IAC1C,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAkB,EAAE,GAAkB;IACzE,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;QACvE,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;QAC3D,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IAErC,oBAAoB;IACpB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACnD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YAC3C,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;YAC3F,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;SAClD,CAAC,CAAC;KACJ,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC;QACrC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC;QACtC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC;QAC5C,MAAM,CAAC,iBAAiB,GAAG,gJAAgJ,CAAC;QAC5K,MAAM,CAAC,sBAAsB,GAAG,kCAAkC,CAAC;IACrE,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC"}

package/dist/tools/get-portal-state.d.ts

@@ -1,8 +0,0 @@
-import type { ServerContext } from '../context.js';
-export declare function handleGetPortalState(_args: Record<string, never>, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=get-portal-state.d.ts.map

package/dist/tools/get-portal-state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-portal-state.d.ts","sourceRoot":"","sources":["../../src/tools/get-portal-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,aAAa;;;;;GAa1F"}

package/dist/tools/get-portal-state.js

@@ -1,15 +0,0 @@
-export async function handleGetPortalState(_args, ctx) {
-    return ctx.json({
-        state: ctx.portal.state,
-        artifact_loaded: !!ctx.portal.artifact,
-        sealed_hash: ctx.portal.artifact?.sealed_hash ?? null,
-        ttl_seconds: ctx.portal.artifact?.enforcement_parameters.ttl_seconds ?? null,
-        issued_at: ctx.portal.artifact?.issued_timestamp ?? null,
-        enforcement_triggers: ctx.portal.artifact?.enforcement_parameters.enforcement_triggers ?? [],
-        sequence_counter: ctx.portal.sequenceCounter,
-        quarantine_active: ctx.quarantine?.active ?? false,
-        verification_tier: ctx.verificationTier,
-        measurement_count: ctx.measurementCount,
-    });
-}
-//# sourceMappingURL=get-portal-state.js.map

package/dist/tools/get-portal-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-portal-state.js","sourceRoot":"","sources":["../../src/tools/get-portal-state.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAA4B,EAAE,GAAkB;IACzF,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;QACtC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI;QACrD,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,WAAW,IAAI,IAAI;QAC5E,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI;QACxD,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,oBAAoB,IAAI,EAAE;QAC5F,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe;QAC5C,iBAAiB,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,KAAK;QAClD,iBAAiB,EAAE,GAAG,CAAC,gBAAgB;QACvC,iBAAiB,EAAE,GAAG,CAAC,gBAAgB;KACxC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/init-chain.d.ts

@@ -1,10 +0,0 @@
-import type { ServerContext } from '../context.js';
-export declare function handleInitChain(args: {
-    specification_hash?: string;
-}, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=init-chain.d.ts.map

package/dist/tools/init-chain.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-chain.d.ts","sourceRoot":"","sources":["../../src/tools/init-chain.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,aAAa;;;;;GAQ9F"}

package/dist/tools/init-chain.js

@@ -1,13 +0,0 @@
-import { sha256Str } from '../crypto/hash.js';
-import { createGenesisEvent } from '../core/chain.js';
-export async function handleInitChain(args, ctx) {
-    if (ctx.chainInitialized)
-        return ctx.error('Chain already initialized');
-    const genesis = createGenesisEvent(ctx.chainKP, args.specification_hash ?? sha256Str('AGA Protocol Specification v2.0.0'));
-    await ctx.storage.storeEvent(genesis);
-    ctx.chainInitialized = true;
-    ctx.portal.sequenceCounter = 0;
-    ctx.portal.lastLeafHash = genesis.leaf_hash;
-    return ctx.json({ success: true, genesis_event_id: genesis.event_id, genesis_leaf_hash: genesis.leaf_hash });
-}
-//# sourceMappingURL=init-chain.js.map

package/dist/tools/init-chain.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-chain.js","sourceRoot":"","sources":["../../src/tools/init-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqC,EAAE,GAAkB;IAC7F,IAAI,GAAG,CAAC,gBAAgB;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC3H,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IAC/B,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;AAC/G,CAAC"}

package/dist/tools/measure-behavior.d.ts

@@ -1,12 +0,0 @@
-import type { ServerContext } from '../context.js';
-export interface MeasureBehaviorArgs {
-    tool_name?: string;
-    record_only?: boolean;
-}
-export declare function handleMeasureBehavior(args: MeasureBehaviorArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=measure-behavior.d.ts.map

package/dist/tools/measure-behavior.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"measure-behavior.d.ts","sourceRoot":"","sources":["../../src/tools/measure-behavior.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,aAAa;;;;;GA4BxF"}

package/dist/tools/measure-behavior.js

@@ -1,29 +0,0 @@
-import { sha256Str } from '../crypto/hash.js';
-export async function handleMeasureBehavior(args, ctx) {
-    // If a tool_name is provided, record the invocation first
-    if (args.tool_name) {
-        ctx.behavioralMonitor.recordInvocation(args.tool_name, sha256Str(args.tool_name));
-    }
-    // If record_only, just acknowledge the recording
-    if (args.record_only) {
-        return ctx.json({
-            success: true,
-            recorded: args.tool_name,
-            record_only: true,
-        });
-    }
-    // Measure behavioral patterns
-    const measurement = ctx.behavioralMonitor.measure();
-    if (measurement.drift_detected) {
-        await ctx.appendToChain('BEHAVIORAL_DRIFT', {
-            violations: measurement.violations,
-            behavioral_hash: measurement.behavioral_hash,
-        });
-    }
-    return ctx.json({
-        success: true,
-        ...measurement,
-        violation_count: measurement.violations.length,
-    });
-}
-//# sourceMappingURL=measure-behavior.js.map

package/dist/tools/measure-behavior.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"measure-behavior.js","sourceRoot":"","sources":["../../src/tools/measure-behavior.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAQ9C,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAyB,EAAE,GAAkB;IACvF,0DAA0D;IAC1D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,GAAG,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,iDAAiD;IACjD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,GAAG,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,MAAM,WAAW,GAAG,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,CAAC,aAAa,CAAC,kBAAkB,EAAE;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,eAAe,EAAE,WAAW,CAAC,eAAe;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,IAAI;QACb,GAAG,WAAW;QACd,eAAe,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/measure-subject.d.ts

@@ -1,15 +0,0 @@
-import type { ServerContext } from '../context.js';
-import type { SubjectMetadata } from '../core/types.js';
-export interface MeasureSubjectArgs {
-    subject_content?: string;
-    subject_bytes_hash?: string;
-    subject_metadata_hash?: string;
-    subject_metadata?: SubjectMetadata;
-}
-export declare function handleMeasureSubject(args: MeasureSubjectArgs, ctx: ServerContext): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-}>;
-//# sourceMappingURL=measure-subject.d.ts.map

package/dist/tools/measure-subject.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"measure-subject.d.ts","sourceRoot":"","sources":["../../src/tools/measure-subject.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,kBAAkB,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,eAAe,CAAC;CACpC;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,aAAa;;;;;GA0GtF"}