@attested-intelligence/aga-mcp-server 2.2.0 → 2.2.1

package/src/core/identity.ts

@@ -1,62 +0,0 @@
-/**
- * Identity and Key Lifecycle.
- *
- * Non-biometric cryptographic identity: agent identity derived from
- * cryptographic key pair bound to append-only attestation history in
- * continuity chain. Authority from valid signature history, not biometric traits.
- *
- * Functions:
- * - keyFingerprint: re-exported from crypto/sign.ts for convenience
- * - isKeyValid: check key TTL expiry
- * - rotateKeyPair: generate new key pair for rotation
- * - recordKeyRotation: append KEY_ROTATION event to chain
- */
-import { generateKeyPair, keyFingerprint, pkToHex } from '../crypto/sign.js';
-import { isExpired } from '../utils/timestamp.js';
-import { appendEvent } from './chain.js';
-import type { KeyPair } from '../crypto/types.js';
-import type { ContinuityEvent, KeyRotationRecord } from './types.js';
-
-// Re-export keyFingerprint for identity module consumers (NCCoE §2)
-export { keyFingerprint } from '../crypto/sign.js';
-
-/**
- * Check whether a key is still valid given its issuance time and TTL.
- * NCCoE §2: non-biometric identity validity check.
- */
-export function isKeyValid(issuedAt: string, ttlSeconds: number): boolean {
-  return !isExpired(issuedAt, ttlSeconds);
-}
-
-/**
- * Generate a new key pair for rotation, returning both old and new for
- * a transition period defined by policy. NCCoE §3: key rotation.
- */
-export function rotateKeyPair(currentKeyPair: KeyPair): { oldKeyPair: KeyPair; newKeyPair: KeyPair } {
-  const newKeyPair = generateKeyPair();
-  return { oldKeyPair: currentKeyPair, newKeyPair };
-}
-
-/**
- * Record a key rotation event on the continuity chain.
- * NCCoE §3: "Key rotation is handled by including both old and new public keys
- * during a transition period defined by policy."
- */
-export function recordKeyRotation(
-  prevEvent: ContinuityEvent,
-  keypairType: string,
-  oldPublicKeyHex: string,
-  newPublicKeyHex: string,
-  reason: string,
-  signingKeyPair: KeyPair,
-): ContinuityEvent {
-  const payload: KeyRotationRecord = {
-    keypair_type: keypairType,
-    old_public_key: oldPublicKeyHex,
-    new_public_key: newPublicKeyHex,
-    reason,
-    rotation_timestamp: new Date().toISOString(),
-    chain_sequence: prevEvent.sequence_number + 1,
-  };
-  return appendEvent('KEY_ROTATION', payload, prevEvent, signingKeyPair);
-}

package/src/core/index.ts

@@ -1,14 +0,0 @@
-export * from './types.js';
-export * from './subject.js';
-export * from './attestation.js';
-export * from './artifact.js';
-export * from './receipt.js';
-export * from './chain.js';
-export * from './portal.js';
-export * from './quarantine.js';
-export * from './checkpoint.js';
-export * from './bundle.js';
-export * from './disclosure.js';
-export * from './behavioral.js';
-export * from './delegation.js';
-export * from './identity.js';

package/src/core/portal.ts

@@ -1,117 +0,0 @@
-/**
- * Portal (Sentinel) - Runtime Enforcement Boundary. Ref 150, 270-280.
- * V3: TTL + revocation checked every measurement. Fail-closed semantics.
- * Aligned with NCCoE filing Sections 3-4 and NIST-2025-0035.
- */
-import { sha256Bytes, sha256Str } from '../crypto/hash.js';
-import { b64ToSig, hexToPk, verifyStr } from '../crypto/sign.js';
-import { canonicalize } from '../utils/canonical.js';
-import { isWithinPeriod, isExpired, utcNow } from '../utils/timestamp.js';
-import type { PolicyArtifact, PortalState, EnforcementAction, SubjectMetadata } from './types.js';
-import type { HashHex } from '../crypto/types.js';
-
-export interface MeasurementResult {
-  match: boolean;
-  currentBytesHash: HashHex;
-  currentMetaHash: HashHex;
-  expectedBytesHash: HashHex;
-  expectedMetaHash: HashHex;
-  ttl_ok: boolean;
-  revoked: boolean;
-  degraded?: boolean;
-}
-
-/** Degradation event record for the continuity chain. */
-export interface DegradationEvent {
-  reason: string;
-  timestamp: string;
-  artifact_reference: HashHex;
-  previous_state: string;
-}
-
-export class Portal {
-  state: PortalState = 'INITIALIZATION';
-  artifact: PolicyArtifact | null = null;
-  sequenceCounter = 0;
-  lastLeafHash: HashHex | null = null;
-  revocations: Set<string> = new Set();
-  degradationLog: DegradationEvent[] = [];
-
-  loadArtifact(artifact: PolicyArtifact, pinnedPkHex: string): { ok: boolean; error?: string } {
-    this.state = 'ARTIFACT_VERIFICATION';
-    const { signature, ...unsigned } = artifact;
-    if (!verifyStr(b64ToSig(signature), canonicalize(unsigned), hexToPk(pinnedPkHex))) {
-      this.state = 'TERMINATED'; return { ok: false, error: 'Signature verification failed' };
-    }
-    if (!isWithinPeriod(utcNow(), artifact.effective_timestamp, artifact.expiration_timestamp)) {
-      this.state = 'TERMINATED'; return { ok: false, error: 'Artifact outside effective period' };
-    }
-    if (this.revocations.has(artifact.sealed_hash)) {
-      this.state = 'TERMINATED'; return { ok: false, error: 'Artifact has been revoked' };
-    }
-    this.artifact = artifact;
-    this.state = 'ACTIVE_MONITORING';
-    return { ok: true };
-  }
-
-  measure(subjectBytes: Uint8Array, meta: SubjectMetadata): MeasurementResult {
-    if (!this.artifact) throw new Error('No artifact loaded');
-    if (this.state === 'TERMINATED') throw new Error('Portal is terminated');
-    // SAFE_STATE allows continued measurement for logging
-    const empty = { currentBytesHash: '', currentMetaHash: '',
-      expectedBytesHash: this.artifact.subject_identifier.bytes_hash,
-      expectedMetaHash: this.artifact.subject_identifier.metadata_hash };
-
-    // Graceful degradation: TTL expiry -> SAFE_STATE + DEGRADATION event + continued logging
-    const ttl_ok = !isExpired(this.artifact.issued_timestamp, this.artifact.enforcement_parameters.ttl_seconds);
-    if (!ttl_ok) {
-      const prevState = this.state;
-      this.state = 'SAFE_STATE';
-      this.degradationLog.push({
-        reason: 'TTL_EXPIRED',
-        timestamp: utcNow(),
-        artifact_reference: this.artifact.sealed_hash,
-        previous_state: prevState,
-      });
-      return { match: false, ttl_ok: false, revoked: false, degraded: true, ...empty };
-    }
-
-    // Fail-closed: revocation check
-    if (this.revocations.has(this.artifact.sealed_hash)) {
-      this.state = 'TERMINATED'; return { match: false, ttl_ok: true, revoked: true, ...empty };
-    }
-
-    const currentBytesHash = sha256Bytes(subjectBytes);
-    const currentMetaHash = sha256Str(canonicalize(meta));
-    const match = currentBytesHash === this.artifact.subject_identifier.bytes_hash &&
-                  currentMetaHash === this.artifact.subject_identifier.metadata_hash;
-
-    if (!match && this.state === 'ACTIVE_MONITORING') this.state = 'DRIFT_DETECTED';
-    return { match, currentBytesHash, currentMetaHash,
-      expectedBytesHash: this.artifact.subject_identifier.bytes_hash,
-      expectedMetaHash: this.artifact.subject_identifier.metadata_hash,
-      ttl_ok: true, revoked: false };
-  }
-
-  enforce(action: EnforcementAction): void {
-    if (this.state !== 'DRIFT_DETECTED') throw new Error(`Cannot enforce in state ${this.state}`);
-    switch (action) {
-      case 'TERMINATE': case 'SAFE_STATE': this.state = 'TERMINATED'; break;
-      case 'QUARANTINE': this.state = 'PHANTOM_QUARANTINE'; break;
-      case 'ALERT_ONLY': this.state = 'ACTIVE_MONITORING'; break;
-      default: break;
-    }
-  }
-
-  revoke(sealedHash: string): void {
-    this.revocations.add(sealedHash);
-    if (this.artifact?.sealed_hash === sealedHash) this.state = 'TERMINATED';
-  }
-
-  isRevoked(sealedHash: string): boolean { return this.revocations.has(sealedHash); }
-
-  reset(): void {
-    this.state = 'INITIALIZATION'; this.artifact = null;
-    this.sequenceCounter = 0; this.lastLeafHash = null;
-  }
-}

package/src/core/quarantine.ts

@@ -1,16 +0,0 @@
-import { utcNow } from '../utils/timestamp.js';
-import type { QuarantineState } from './types.js';
-
-export function initQuarantine(): QuarantineState {
-  return { active: true, started_at: utcNow(), inputs_captured: 0, outputs_severed: true, forensic_buffer: [] };
-}
-
-export function captureInput(q: QuarantineState, inputType: string, data: unknown): void {
-  q.forensic_buffer.push({ timestamp: utcNow(), type: inputType, data });
-  q.inputs_captured++;
-}
-
-export function releaseQuarantine(q: QuarantineState): { duration_ms: number; total_captures: number } {
-  q.active = false;
-  return { duration_ms: q.started_at ? Date.now() - Date.parse(q.started_at) : 0, total_captures: q.inputs_captured };
-}

package/src/core/receipt.ts

@@ -1,33 +0,0 @@
-/** V3: measurement_type field. Receipts generated for EVERY measurement. */
-import { signStr, sigToB64 } from '../crypto/sign.js';
-import { canonicalize } from '../utils/canonical.js';
-import { utcNow } from '../utils/timestamp.js';
-import { uuid } from '../utils/uuid.js';
-import type { KeyPair, HashHex } from '../crypto/types.js';
-import type { SignedReceipt, SubjectIdentifier, EnforcementAction } from './types.js';
-
-export interface ReceiptInput {
-  subjectId: SubjectIdentifier;
-  artifactRef: HashHex;
-  currentHash: string;
-  sealedHash: string;
-  driftDetected: boolean;
-  driftDescription: string | null;
-  action: EnforcementAction | null;
-  measurementType: string;
-  seq: number;
-  prevLeaf: HashHex | null;
-  portalKP: KeyPair;
-}
-
-export function generateReceipt(input: ReceiptInput): SignedReceipt {
-  const unsigned = {
-    receipt_id: uuid(), subject_identifier: input.subjectId,
-    artifact_reference: input.artifactRef, current_hash: input.currentHash,
-    sealed_hash: input.sealedHash, drift_detected: input.driftDetected,
-    drift_description: input.driftDescription, enforcement_action: input.action,
-    measurement_type: input.measurementType, timestamp: utcNow(),
-    sequence_number: input.seq, previous_leaf_hash: input.prevLeaf,
-  };
-  return { ...unsigned, portal_signature: sigToB64(signStr(canonicalize(unsigned), input.portalKP.secretKey)) };
-}

package/src/core/subject.ts

@@ -1,11 +0,0 @@
-import { sha256Bytes, sha256Str } from '../crypto/hash.js';
-import { canonicalize } from '../utils/canonical.js';
-import type { SubjectIdentifier, SubjectMetadata } from './types.js';
-
-export function computeSubjectId(bytes: Uint8Array, meta: SubjectMetadata): SubjectIdentifier {
-  return { bytes_hash: sha256Bytes(bytes), metadata_hash: sha256Str(canonicalize(meta)) };
-}
-
-export function computeSubjectIdFromString(content: string, meta: SubjectMetadata): SubjectIdentifier {
-  return computeSubjectId(new TextEncoder().encode(content), meta);
-}

package/src/core/types.ts

@@ -1,285 +0,0 @@
-/**
- * V3: Aligned with NIST-2025-0035 and NCCoE AI Agent Identity filings.
-*/
-import type { HashHex, SignatureBase64, SaltHex, MerkleInclusionProof } from '../crypto/types.js';
-
-// ── Subject (100, 102, 104, 106, 126) ──────────────────────────
-
-export interface SubjectIdentifier {          // Ref 126
-  bytes_hash: HashHex;                        // Ref 104
-  metadata_hash: HashHex;                     // Ref 106
-}
-
-export interface SubjectMetadata {
-  filename?: string;
-  creation_timestamp?: string;
-  author?: string;
-  version?: string;
-  content_type?: string;
-  [key: string]: unknown;
-}
-
-// ── Enforcement (130–136, 162–168) ──────────────────────────────
-
-export type EnforcementAction =
-  | 'TERMINATE'           // Ref 162: immediate kill
-  | 'QUARANTINE'          // Ref 164: phantom execution
-  | 'NETWORK_ISOLATE'     // Ref 166: sever network, continue local
-  | 'SAFE_STATE'          // Ref 168: return-to-home / controlled shutdown
-  | 'KEY_REVOKE'          // invalidate crypto keys
-  | 'TOKEN_INVALIDATE'    // revoke access tokens
-  | 'ACTUATOR_DISCONNECT' // sever physical actuator connections
-  | 'ALERT_ONLY';         // log without enforcement (gradual deployment)
-
-export type MeasurementType =
-  | 'EXECUTABLE_IMAGE' | 'LOADED_MODULES' | 'CONTAINER_IMAGE'
-  | 'CONFIG_MANIFEST'  | 'SBOM'           | 'TEE_QUOTE'
-  | 'MEMORY_REGIONS'   | 'CONTROL_FLOW'   | 'FILE_SYSTEM_STATE'
-  | 'NETWORK_CONFIG';
-
-export interface EnforcementParams {           // Ref 130
-  measurement_cadence_ms: number;              // Ref 132
-  ttl_seconds: number;                         // Ref 134
-  enforcement_triggers: EnforcementAction[];   // Ref 136
-  re_attestation_required: boolean;
-  measurement_types: MeasurementType[];
-  behavioral_baseline?: BehavioralBaselineRef; // NCCoE §6: optional behavioral baseline reference
-}
-
-/** Inline behavioral baseline reference for EnforcementParams (NCCoE §6, CAISI §1a) */
-export interface BehavioralBaselineRef {
-  permitted_tools: string[];
-  forbidden_sequences: string[][];
-  rate_limits: Record<string, number>;
-}
-
-// ── Policy & Disclosure (112, 138–142) ──────────────────────────
-
-export type Sensitivity = 'S1_LOW' | 'S2_MODERATE' | 'S3_HIGH' | 'S4_CRITICAL';
-export type DisclosureMode = 'PROOF_ONLY' | 'REVEAL_MIN' | 'REVEAL_FULL';
-
-export interface ClaimRecord {                 // Ref 140
-  claim_id: string;
-  sensitivity: Sensitivity;
-  substitutes: string[];
-  inference_risks: string[];
-  permitted_modes: DisclosureMode[];
-}
-
-export interface SubstitutionRule {             // Ref 142
-  original_claim_id: string;
-  substitute_claim_id: string;
-  conditions: Record<string, unknown>;
-}
-
-export interface DisclosurePolicy {            // Ref 138
-  claims_taxonomy: ClaimRecord[];
-  substitution_rules: SubstitutionRule[];
-}
-
-// ── Evidence Commitment (114) ───────────────────────────────────
-
-export interface EvidenceCommitmentRecord {
-  commitment: HashHex;
-  salt: SaltHex;
-  label: string;
-}
-
-// ── Policy Artifact (120, 122, 124, 144) ────────────────────────
-
-export interface PolicyArtifact {              // Ref 122 (Weave Piece)
-  schema_version: string;
-  protocol_version: string;
-  subject_identifier: SubjectIdentifier;
-  policy_reference: HashHex;                   // Ref 128
-  policy_version: number;
-  sealed_hash: HashHex;                        // Ref 124
-  seal_salt: SaltHex;                          // stored for audit
-  issued_timestamp: string;
-  effective_timestamp: string;
-  expiration_timestamp: string | null;
-  issuer_identifier: string;
-  enforcement_parameters: EnforcementParams;
-  disclosure_policy: DisclosurePolicy;
-  evidence_commitments: EvidenceCommitmentRecord[];
-  signature: SignatureBase64;                  // Ref 144
-}
-
-// ── Receipts (170, 172) ─────────────────────────────────────────
-// V3: Generated for EVERY measurement, not just drift. Per NIST filing:
-// "each measurement generates a signed receipt - match or mismatch"
-
-export interface SignedReceipt {                // Ref 172
-  receipt_id: string;
-  subject_identifier: SubjectIdentifier;
-  artifact_reference: HashHex;
-  current_hash: string;
-  sealed_hash: string;
-  drift_detected: boolean;
-  drift_description: string | null;
-  enforcement_action: EnforcementAction | null;
-  measurement_type: string;                    // V3: which measurement was performed
-  timestamp: string;
-  sequence_number: number;
-  previous_leaf_hash: HashHex | null;
-  portal_signature: SignatureBase64;
-}
-
-// ── Continuity Chain (180–196) ──────────────────────────────────
-
-export type EventType =
-  | 'GENESIS'
-  | 'POLICY_ISSUANCE'
-  | 'INTERACTION_RECEIPT'
-  | 'REVOCATION'              // V3: mid-session revocation
-  | 'ATTESTATION'
-  | 'ANCHOR_BATCH'
-  | 'DISCLOSURE'
-  | 'SUBSTITUTION'
-  | 'KEY_ROTATION'            // V3: key lifecycle event
-  | 'BEHAVIORAL_DRIFT'        // NCCoE §6: behavioral pattern deviation
-  | 'DELEGATION'              // NCCoE §4: sub-agent delegation
-  | 'DEGRADATION'             // CAISI §4a: graceful degradation event
-  | 'RE_ATTESTATION';         // TTL re-attestation
-
-export interface GenesisPayload {
-  protocol_version: string;
-  taxonomy_version: string;
-  root_fingerprint: string;
-  specification_hash: HashHex;
-  marker: 'GENESIS';
-}
-
-export interface ContinuityEvent {             // Ref 184
-  schema_version: string;
-  protocol_version: string;
-  event_type: EventType;
-  event_id: string;
-  sequence_number: number;
-  timestamp: string;
-  previous_leaf_hash: HashHex | null;
-  leaf_hash: HashHex;                          // Ref 186
-  payload: unknown;                            // Ref 192
-  payload_hash: HashHex;                       // Ref 194
-  event_signature: SignatureBase64;            // Ref 196
-}
-
-export interface StructuralMetadata {          // Ref 190
-  schema_version: string;
-  protocol_version: string;
-  event_type: EventType;
-  event_id: string;
-  sequence_number: number;
-  timestamp: string;
-  previous_leaf_hash: HashHex | null;
-}
-
-// ── Checkpoints (200–214) ───────────────────────────────────────
-
-export interface CheckpointReference {
-  merkle_root: HashHex;
-  batch_start_sequence: number;
-  batch_end_sequence: number;
-  anchor_network: string;
-  transaction_id: string;
-  timestamp: string;
-}
-
-export interface AnchorBatchPayload {
-  checkpoint_reference: CheckpointReference;
-  leaf_count: number;
-}
-
-// ── Evidence Bundle (240–246) ───────────────────────────────────
-
-export interface EvidenceBundle {
-  artifact: PolicyArtifact;
-  receipts: SignedReceipt[];
-  merkle_proofs: MerkleInclusionProof[];
-  checkpoint_reference: CheckpointReference;
-  public_key: string;
-  bundle_signature: SignatureBase64;
-  verification_tier?: VerificationTier;         // CAISI §3b: Bronze/Silver/Gold tiering
-}
-
-// ── Disclosure (250–256) ────────────────────────────────────────
-
-export interface DisclosureRequest {
-  requested_claim_id: string;
-  requester_id: string;
-  mode: DisclosureMode;
-  timestamp: string;
-}
-
-export interface SubstitutionReceipt {
-  receipt_id: string;
-  original_claim_id: string;
-  substitute_claim_id: string | null;
-  policy_version: number;
-  reason_code: string;
-  timestamp: string;
-  chain_sequence_ref: number;
-  signature: SignatureBase64;
-}
-
-// ── Portal State Machine (150, 270–280) ─────────────────────────
-
-export type PortalState =
-  | 'INITIALIZATION'         // Ref 270
-  | 'ARTIFACT_VERIFICATION'  // Ref 272
-  | 'ACTIVE_MONITORING'      // Ref 274
-  | 'DRIFT_DETECTED'         // Ref 276
-  | 'PHANTOM_QUARANTINE'     // Ref 278
-  | 'SAFE_STATE'             // Graceful degradation (TTL expiry)
-  | 'TERMINATED';            // Ref 280
-
-export type VerificationTier = 'BRONZE' | 'SILVER' | 'GOLD';
-
-// ── Revocation (V3) ────────────────────────────────────────────
-// Per NCCoE filing Phase 3b: "An administrator pushes a REVOCATION event
-// to the continuity chain, invalidating the agent's active policy artifact."
-
-export interface RevocationRecord {
-  artifact_sealed_hash: HashHex;
-  reason: string;
-  revoked_by: string;                         // issuer pk hex
-  timestamp: string;
-}
-
-// ── Quarantine (220–230) ────────────────────────────────────────
-
-export interface QuarantineState {
-  active: boolean;
-  started_at: string | null;
-  inputs_captured: number;
-  outputs_severed: boolean;
-  forensic_buffer: Array<{ timestamp: string; type: string; data: unknown }>;
-  forensic_receipts?: string[];  // Receipt IDs from forensic capture
-}
-
-// ── Delegation (NCCoE §4) ──────────────────────────────────────
-
-export interface DelegationRecord {
-  sub_agent_id: string;
-  parent_artifact_reference: HashHex;
-  child_artifact: PolicyArtifact;
-  permitted_tools: string[];
-  ttl_seconds: number;
-  delegation_timestamp: string;
-  chain_sequence: number;
-}
-
-// ── Key Lifecycle ──────────────────────────────────────────────
-
-export interface KeyRotationRecord {
-  keypair_type: string;            // e.g. 'issuer', 'portal', 'chain'
-  old_public_key: string;
-  new_public_key: string;
-  reason: string;
-  rotation_timestamp: string;
-  chain_sequence: number;
-}
-
-// ── Sensitivity Level Aliases ────────────────────────────────────
-// Existing Sensitivity type uses S1_LOW etc. These aliases map to the short forms.
-export type SensitivityLevel = 'S1' | 'S2' | 'S3' | 'S4';

package/src/crypto/hash.ts

@@ -1,33 +0,0 @@
-import { sha256 } from '@noble/hashes/sha256';
-import { blake2b } from '@noble/hashes/blake2b';
-import { bytesToHex } from '@noble/hashes/utils';
-import type { HashHex } from './types.js';
-
-const enc = new TextEncoder();
-
-export function sha256Bytes(data: Uint8Array): HashHex {
-  return bytesToHex(sha256(data));
-}
-
-export function sha256Str(data: string): HashHex {
-  return sha256Bytes(enc.encode(data));
-}
-
-export function blake2b256(data: Uint8Array): HashHex {
-  return bytesToHex(blake2b(data, { dkLen: 32 }));
-}
-
-/** Concatenate inputs (NO delimiter) and SHA-256. No delimiters per protocol spec. */
-export function sha256Cat(...parts: (Uint8Array | string)[]): HashHex {
-  const bufs = parts.map(p => typeof p === 'string' ? enc.encode(p) : p);
-  const total = bufs.reduce((n, b) => n + b.length, 0);
-  const combined = new Uint8Array(total);
-  let off = 0;
-  for (const b of bufs) { combined.set(b, off); off += b.length; }
-  return sha256Bytes(combined);
-}
-
-/** Concatenate hex strings as text (no decode) and hash. For sealed_hash computation. */
-export function sha256HexCat(...hexes: string[]): HashHex {
-  return sha256Str(hexes.join(''));
-}

package/src/crypto/index.ts

@@ -1,5 +0,0 @@
-export * from './types.js';
-export * from './hash.js';
-export * from './sign.js';
-export * from './salt.js';
-export * from './merkle.js';

package/src/crypto/merkle.ts

@@ -1,43 +0,0 @@
-import { sha256Str } from './hash.js';
-import type { HashHex, MerkleInclusionProof } from './types.js';
-
-function pair(l: HashHex, r: HashHex): HashHex { return sha256Str(l + r); }
-
-export function buildMerkleTree(leaves: HashHex[]): { root: HashHex; layers: HashHex[][] } {
-  if (!leaves.length) throw new Error('Empty leaf set');
-  if (leaves.length === 1) return { root: leaves[0], layers: [leaves] };
-  const layers: HashHex[][] = [[...leaves]];
-  let cur = leaves;
-  while (cur.length > 1) {
-    const next: HashHex[] = [];
-    for (let i = 0; i < cur.length; i += 2) {
-      next.push(pair(cur[i], i + 1 < cur.length ? cur[i + 1] : cur[i]));
-    }
-    layers.push(next);
-    cur = next;
-  }
-  return { root: cur[0], layers };
-}
-
-export function inclusionProof(leaves: HashHex[], idx: number): MerkleInclusionProof {
-  if (idx < 0 || idx >= leaves.length) throw new RangeError(`Index ${idx} out of [0,${leaves.length})`);
-  const { root, layers } = buildMerkleTree(leaves);
-  const siblings: MerkleInclusionProof['siblings'] = [];
-  let ci = idx;
-  for (let L = 0; L < layers.length - 1; L++) {
-    const layer = layers[L];
-    const isRight = ci % 2 === 1;
-    const si = isRight ? ci - 1 : (ci + 1 < layer.length ? ci + 1 : ci);
-    siblings.push({ hash: layer[si], position: isRight ? 'left' : 'right' });
-    ci = Math.floor(ci / 2);
-  }
-  return { leafHash: leaves[idx], leafIndex: idx, siblings, root };
-}
-
-export function verifyProof(proof: MerkleInclusionProof): boolean {
-  let h = proof.leafHash;
-  for (const s of proof.siblings) {
-    h = s.position === 'left' ? pair(s.hash, h) : pair(h, s.hash);
-  }
-  return h === proof.root;
-}

package/src/crypto/salt.ts

@@ -1,18 +0,0 @@
-import { randomBytes } from 'node:crypto';
-import { bytesToHex } from '@noble/hashes/utils';
-import { sha256Cat } from './hash.js';
-import type { SaltHex, SaltedCommitment, HashHex } from './types.js';
-
-const enc = new TextEncoder();
-
-export function generateSalt(): SaltHex { return bytesToHex(randomBytes(16)); }
-
-export function saltedCommitment(content: Uint8Array | string, salt?: SaltHex): SaltedCommitment {
-  const s = salt ?? generateSalt();
-  const c = typeof content === 'string' ? enc.encode(content) : content;
-  return { commitment: sha256Cat(c, s), salt: s };
-}
-
-export function verifySaltedCommitment(content: Uint8Array | string, salt: SaltHex, expected: HashHex): boolean {
-  return saltedCommitment(content, salt).commitment === expected;
-}