@connexum/ai-governance 1.0.0-beta.11

package/dist/esm/governance/self-registration-hook.test.js

@@ -0,0 +1,114 @@
+/**
+ * RED-GREEN tests for F-NEW-PRODUCT-AGENT-SELF-REGISTRATION (W2.2).
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-AGENT-SELF-REGISTRATION
+ */
+import { describe, it } from 'node:test';
+import * as assert from 'node:assert/strict';
+import { SelfRegistrationHook } from './self-registration-hook.js';
+import { createActionContext } from '../adapters/index.js';
+function action(toolName, agentName = 'agent-a', orgId = 'org-x') {
+    return createActionContext(toolName, {}, { name: agentName, orgId });
+}
+describe('F-NEW-PRODUCT-AGENT-SELF-REGISTRATION (W2.2)', () => {
+    it('first observe emits AGENT_REGISTERED with the initial tool', () => {
+        const events = [];
+        const hook = new SelfRegistrationHook({ sink: (e) => events.push(e) });
+        hook.observe(action('Bash'));
+        assert.equal(events.length, 1);
+        assert.equal(events[0].kind, 'AGENT_REGISTERED');
+        assert.equal(events[0].agentId, 'agent-a');
+        assert.equal(events[0].orgId, 'org-x');
+        assert.equal(events[0].tool, 'Bash');
+        assert.deepEqual(events[0].manifest.tools, ['Bash']);
+    });
+    it('observing the same tool twice is idempotent (no second event)', () => {
+        const events = [];
+        const hook = new SelfRegistrationHook({ sink: (e) => events.push(e) });
+        hook.observe(action('Bash'));
+        hook.observe(action('Bash'));
+        assert.equal(events.length, 1);
+    });
+    it('observing a NEW tool on a known agent emits AGENT_TOOL_OBSERVED', () => {
+        const events = [];
+        const hook = new SelfRegistrationHook({ sink: (e) => events.push(e) });
+        hook.observe(action('Bash'));
+        hook.observe(action('WebFetch'));
+        assert.equal(events.length, 2);
+        assert.equal(events[1].kind, 'AGENT_TOOL_OBSERVED');
+        assert.equal(events[1].tool, 'WebFetch');
+        assert.deepEqual(events[1].manifest.tools.sort(), ['Bash', 'WebFetch']);
+    });
+    it('per-org isolation: two orgs with same agentName are separate registrations', () => {
+        const events = [];
+        const hook = new SelfRegistrationHook({ sink: (e) => events.push(e) });
+        hook.observe(action('Bash', 'agent-a', 'org-1'));
+        hook.observe(action('Bash', 'agent-a', 'org-2'));
+        assert.equal(events.length, 2);
+        assert.equal(events[0].orgId, 'org-1');
+        assert.equal(events[1].orgId, 'org-2');
+        assert.equal(events[0].kind, 'AGENT_REGISTERED');
+        assert.equal(events[1].kind, 'AGENT_REGISTERED');
+    });
+    it('listManifests returns all registered agents', () => {
+        const hook = new SelfRegistrationHook();
+        hook.observe(action('Bash', 'a'));
+        hook.observe(action('WebFetch', 'a'));
+        hook.observe(action('Read', 'b'));
+        const manifests = hook.listManifests();
+        assert.equal(manifests.length, 2);
+        const names = manifests.map((m) => m.agentId).sort();
+        assert.deepEqual(names, ['a', 'b']);
+    });
+    it('getManifest returns the latest snapshot for a known agent', () => {
+        const hook = new SelfRegistrationHook();
+        hook.observe(action('Bash'));
+        hook.observe(action('WebFetch'));
+        const m = hook.getManifest('org-x', 'agent-a');
+        assert.ok(m);
+        assert.deepEqual(m?.tools.sort(), ['Bash', 'WebFetch']);
+    });
+    it('markHookWired flips the right hook flag', () => {
+        const hook = new SelfRegistrationHook();
+        hook.observe(action('Bash'));
+        hook.markHookWired('org-x', 'agent-a', 'postToolUse');
+        const m = hook.getManifest('org-x', 'agent-a');
+        assert.equal(m?.hooks?.preToolUse, true, 'preToolUse stays true (observe came in via the hook)');
+        assert.equal(m?.hooks?.postToolUse, true);
+        assert.equal(m?.hooks?.postResponse, false);
+    });
+    it('defaultLlmProvider is baked into observed manifests', () => {
+        const hook = new SelfRegistrationHook({ defaultLlmProvider: 'connexum-proxy/anthropic' });
+        hook.observe(action('Bash'));
+        const m = hook.getManifest('org-x', 'agent-a');
+        assert.equal(m?.llmProvider, 'connexum-proxy/anthropic');
+    });
+    it('downstream: observed manifest feeds autoGenerateCompanyPack', async () => {
+        const hook = new SelfRegistrationHook();
+        hook.observe(action('Bash'));
+        hook.observe(action('WebFetch'));
+        const manifest = hook.getManifest('org-x', 'agent-a');
+        const { autoGenerateCompanyPack } = await import('./auto-pack-generator.js');
+        const result = autoGenerateCompanyPack(manifest, { acceptAllSuggestedRules: true });
+        // Lethal trifecta -- A01 CRIT finding expected
+        assert.ok(result.scanReport.findings.some((f) => f.risk.startsWith('A01')), 'A01 prompt injection detected on Bash+WebFetch agent');
+    });
+    it('clear() resets state', () => {
+        const hook = new SelfRegistrationHook();
+        hook.observe(action('Bash'));
+        hook.clear();
+        assert.equal(hook.listManifests().length, 0);
+        assert.equal(hook.getManifest('org-x', 'agent-a'), undefined);
+    });
+    it('unknown orgId / agentName falls back gracefully', () => {
+        const hook = new SelfRegistrationHook();
+        // ActionContext with no agent / orgId set
+        const ac = createActionContext('Bash', {}, { name: 'fallback-test', orgId: undefined });
+        delete ac.orgId;
+        delete ac.agent.orgId;
+        hook.observe(ac);
+        const all = hook.listManifests();
+        assert.equal(all.length, 1);
+    });
+});
+//# sourceMappingURL=self-registration-hook.test.js.map

package/dist/esm/governance/self-registration-hook.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-registration-hook.test.js","sourceRoot":"","sources":["../../../src/governance/self-registration-hook.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAA8B,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,SAAS,MAAM,CAAC,QAAgB,EAAE,SAAS,GAAG,SAAS,EAAE,KAAK,GAAG,OAAO;IACtE,OAAO,mBAAmB,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7B,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,sDAAsD,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7B,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAE,CAAC;QACvD,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpF,+CAA+C;QAC/C,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAChE,sDAAsD,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,0CAA0C;QAC1C,MAAM,EAAE,GAAG,mBAAmB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACxF,OAAQ,EAAU,CAAC,KAAK,CAAC;QACzB,OAAQ,EAAE,CAAC,KAAa,CAAC,KAAK,CAAC;QAE/B,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/governance/session-persistence.js

@@ -0,0 +1,339 @@
+/**
+ * SessionPersistence -- Save/restore agent state across sessions.
+ *
+ * Handles session start recovery, pre-compact state dumps,
+ * and session end summaries. Ensures zero context loss during
+ * compaction or session boundaries.
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as crypto from 'crypto';
+export class SessionPersistence {
+    config;
+    currentState = null;
+    encryption;
+    constructor(config) {
+        this.config = {
+            stateDir: config.stateDir,
+            agentName: config.agentName,
+            dailyLogDir: config.dailyLogDir || path.join(config.stateDir, 'daily-logs'),
+            maxStates: config.maxStates ?? 10,
+        };
+        this.encryption = config.encryption;
+        this.ensureDirectories();
+    }
+    ensureDirectories() {
+        for (const dir of [this.config.stateDir, this.config.dailyLogDir]) {
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+        }
+    }
+    /**
+     * Start a new session. Checks for interrupted work from previous session.
+     * Returns the previous state if one exists (for recovery).
+     */
+    startSession() {
+        const sessionId = `${this.config.agentName}-${Date.now()}-${crypto.randomBytes(4).toString('hex')}`;
+        const previousState = this.loadLatestState();
+        let interrupted = false;
+        if (previousState) {
+            // Check if the previous session ended cleanly
+            const hasActiveTasks = previousState.activeTasks.some(t => t.status === 'in_progress');
+            const hasPendingDecisions = previousState.pendingDecisions.length > 0;
+            interrupted = hasActiveTasks || hasPendingDecisions;
+        }
+        this.currentState = {
+            sessionId,
+            agentName: this.config.agentName,
+            startedAt: new Date().toISOString(),
+            lastSavedAt: new Date().toISOString(),
+            activeTasks: [],
+            modifiedFiles: [],
+            pendingDecisions: [],
+            tokenUsage: { input: 0, output: 0, cost: 0 },
+            customState: {},
+            integrity: '',
+        };
+        // If recovering from interrupted session, carry forward incomplete work
+        if (interrupted && previousState) {
+            this.currentState.activeTasks = previousState.activeTasks.filter(t => t.status === 'in_progress' || t.status === 'blocked' || t.status === 'waiting');
+            this.currentState.pendingDecisions = previousState.pendingDecisions;
+        }
+        return { sessionId, previousState, interrupted };
+    }
+    /**
+     * Save current session state to disk. Call before compaction or periodically.
+     */
+    saveState(updates) {
+        if (!this.currentState) {
+            throw new Error('No active session. Call startSession() first.');
+        }
+        if (updates) {
+            if (updates.activeTasks)
+                this.currentState.activeTasks = updates.activeTasks;
+            if (updates.modifiedFiles)
+                this.currentState.modifiedFiles = updates.modifiedFiles;
+            if (updates.pendingDecisions)
+                this.currentState.pendingDecisions = updates.pendingDecisions;
+            if (updates.tokenUsage)
+                this.currentState.tokenUsage = updates.tokenUsage;
+            if (updates.customState) {
+                this.currentState.customState = {
+                    ...this.currentState.customState,
+                    ...updates.customState,
+                };
+            }
+        }
+        this.currentState.lastSavedAt = new Date().toISOString();
+        this.currentState.integrity = this.computeIntegrity(this.currentState);
+        const filePath = this.stateFilePath(this.currentState.sessionId);
+        const data = JSON.stringify(this.currentState, null, 2);
+        // T-033: Encrypt session state at rest if encryption is configured
+        if (this.encryption) {
+            this.encryption.writeEncrypted(filePath, data);
+        }
+        else {
+            fs.writeFileSync(filePath, data);
+        }
+        this.pruneOldStates();
+    }
+    /**
+     * Record a file modification in the current session.
+     */
+    recordFileModification(filePath) {
+        if (!this.currentState)
+            return;
+        if (!this.currentState.modifiedFiles.includes(filePath)) {
+            this.currentState.modifiedFiles.push(filePath);
+        }
+    }
+    /**
+     * Record token usage.
+     */
+    recordTokenUsage(input, output, cost) {
+        if (!this.currentState)
+            return;
+        this.currentState.tokenUsage.input += input;
+        this.currentState.tokenUsage.output += output;
+        this.currentState.tokenUsage.cost += cost;
+    }
+    /**
+     * Add or update a task in the current session.
+     */
+    updateTask(task) {
+        if (!this.currentState)
+            return;
+        const idx = this.currentState.activeTasks.findIndex(t => t.id === task.id);
+        if (idx >= 0) {
+            this.currentState.activeTasks[idx] = task;
+        }
+        else {
+            this.currentState.activeTasks.push(task);
+        }
+    }
+    /**
+     * Remove a completed task.
+     */
+    completeTask(taskId) {
+        if (!this.currentState)
+            return undefined;
+        const idx = this.currentState.activeTasks.findIndex(t => t.id === taskId);
+        if (idx >= 0) {
+            const [task] = this.currentState.activeTasks.splice(idx, 1);
+            return task;
+        }
+        return undefined;
+    }
+    /**
+     * Pre-compact dump: saves full state + writes daily log entry.
+     * Called by pre-compact hook before context compaction.
+     */
+    preCompactDump() {
+        if (!this.currentState) {
+            throw new Error('No active session. Call startSession() first.');
+        }
+        // Save current state
+        this.saveState();
+        // Write daily log entry
+        const today = new Date().toISOString().split('T')[0];
+        const logFile = path.join(this.config.dailyLogDir, `${today}.jsonl`);
+        const logEntry = {
+            type: 'pre-compact',
+            sessionId: this.currentState.sessionId,
+            agent: this.config.agentName,
+            timestamp: new Date().toISOString(),
+            activeTasks: this.currentState.activeTasks.length,
+            modifiedFiles: this.currentState.modifiedFiles.length,
+            pendingDecisions: this.currentState.pendingDecisions.length,
+            tokenUsage: this.currentState.tokenUsage,
+        };
+        fs.appendFileSync(logFile, JSON.stringify(logEntry) + '\n');
+        return this.stateFilePath(this.currentState.sessionId);
+    }
+    /**
+     * End session: generate summary, write final state + daily log.
+     */
+    endSession(summary) {
+        if (!this.currentState) {
+            throw new Error('No active session. Call startSession() first.');
+        }
+        const startTime = new Date(this.currentState.startedAt).getTime();
+        const endTime = Date.now();
+        const durationMs = endTime - startTime;
+        const hours = Math.floor(durationMs / 3600000);
+        const minutes = Math.floor((durationMs % 3600000) / 60000);
+        const duration = hours > 0 ? `${hours}h ${minutes}m` : `${minutes}m`;
+        const sessionSummary = {
+            sessionId: this.currentState.sessionId,
+            agentName: this.config.agentName,
+            duration,
+            tasksCompleted: 0, // caller can update via customState
+            tasksRemaining: this.currentState.activeTasks.length,
+            filesModified: [...this.currentState.modifiedFiles],
+            tokenUsage: { ...this.currentState.tokenUsage },
+            decisionsResolved: 0,
+            decisionsPending: this.currentState.pendingDecisions.length,
+            summary,
+        };
+        // Write final state
+        this.saveState();
+        // Write session summary to daily log
+        const today = new Date().toISOString().split('T')[0];
+        const logFile = path.join(this.config.dailyLogDir, `${today}.jsonl`);
+        const logEntry = {
+            type: 'session-end',
+            ...sessionSummary,
+            timestamp: new Date().toISOString(),
+        };
+        fs.appendFileSync(logFile, JSON.stringify(logEntry) + '\n');
+        this.currentState = null;
+        return sessionSummary;
+    }
+    /**
+     * Load the most recent session state from disk.
+     */
+    loadLatestState() {
+        const stateFiles = this.listStateFiles();
+        if (stateFiles.length === 0)
+            return null;
+        // Sort by mtime descending
+        const latest = stateFiles.sort((a, b) => {
+            const astat = fs.statSync(a);
+            const bstat = fs.statSync(b);
+            return bstat.mtimeMs - astat.mtimeMs;
+        })[0];
+        return this.loadAndVerifyState(latest);
+    }
+    /**
+     * Search past session logs by keyword.
+     */
+    searchSessionLogs(query, maxResults = 20) {
+        const results = [];
+        const logDir = this.config.dailyLogDir;
+        if (!fs.existsSync(logDir))
+            return results;
+        const logFiles = fs.readdirSync(logDir)
+            .filter(f => f.endsWith('.jsonl'))
+            .sort()
+            .reverse();
+        const lowerQuery = query.toLowerCase();
+        for (const file of logFiles) {
+            if (results.length >= maxResults)
+                break;
+            const date = file.replace('.jsonl', '');
+            const lines = fs.readFileSync(path.join(logDir, file), 'utf-8')
+                .split('\n')
+                .filter(Boolean);
+            for (const line of lines) {
+                if (results.length >= maxResults)
+                    break;
+                if (line.toLowerCase().includes(lowerQuery)) {
+                    try {
+                        results.push({ date, entry: JSON.parse(line) });
+                    }
+                    catch {
+                        // skip malformed lines
+                    }
+                }
+            }
+        }
+        return results;
+    }
+    /**
+     * Get session metrics for the current session.
+     */
+    getMetrics() {
+        if (!this.currentState)
+            return null;
+        const elapsed = Date.now() - new Date(this.currentState.startedAt).getTime();
+        const minutes = Math.floor(elapsed / 60000);
+        return {
+            tokenUsage: { ...this.currentState.tokenUsage },
+            filesModified: this.currentState.modifiedFiles.length,
+            activeTasks: this.currentState.activeTasks.length,
+            elapsed: `${minutes}m`,
+        };
+    }
+    /**
+     * Get the current state (read-only snapshot).
+     */
+    getCurrentState() {
+        return this.currentState ? { ...this.currentState } : null;
+    }
+    // --- Private helpers ---
+    stateFilePath(sessionId) {
+        return path.join(this.config.stateDir, `${sessionId}.json`);
+    }
+    listStateFiles() {
+        if (!fs.existsSync(this.config.stateDir))
+            return [];
+        return fs.readdirSync(this.config.stateDir)
+            .filter(f => f.endsWith('.json') && f.includes(this.config.agentName))
+            .map(f => path.join(this.config.stateDir, f));
+    }
+    loadAndVerifyState(filePath) {
+        try {
+            // T-033: Decrypt session state if encryption is configured
+            const raw = this.encryption
+                ? this.encryption.readEncrypted(filePath)
+                : fs.readFileSync(filePath, 'utf-8');
+            const state = JSON.parse(raw);
+            // Verify integrity
+            const expected = state.integrity;
+            const computed = this.computeIntegrity(state);
+            if (expected && expected !== computed) {
+                // Tampered state file - do not trust
+                return null;
+            }
+            return state;
+        }
+        catch {
+            return null;
+        }
+    }
+    computeIntegrity(state) {
+        const copy = { ...state, integrity: '' };
+        return crypto.createHash('sha256')
+            .update(JSON.stringify(copy))
+            .digest('hex');
+    }
+    pruneOldStates() {
+        const stateFiles = this.listStateFiles().sort((a, b) => {
+            const astat = fs.statSync(a);
+            const bstat = fs.statSync(b);
+            return bstat.mtimeMs - astat.mtimeMs;
+        });
+        // Remove excess state files
+        const excess = stateFiles.slice(this.config.maxStates);
+        for (const file of excess) {
+            try {
+                fs.unlinkSync(file);
+            }
+            catch { /* ignore */ }
+        }
+    }
+}
+//# sourceMappingURL=session-persistence.js.map

package/dist/esm/governance/session-persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-persistence.js","sourceRoot":"","sources":["../../../src/governance/session-persistence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAqEjC,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAA8F;IACpG,YAAY,GAAwB,IAAI,CAAC;IACzC,UAAU,CAAqB;IAEvC,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC3E,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;SAClC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB;QACvB,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpG,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,IAAI,aAAa,EAAE,CAAC;YAClB,8CAA8C;YAC9C,MAAM,cAAc,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAChC,CAAC;YACF,MAAM,mBAAmB,GAAG,aAAa,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;YACtE,WAAW,GAAG,cAAc,IAAI,mBAAmB,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,YAAY,GAAG;YAClB,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;YACjB,gBAAgB,EAAE,EAAE;YACpB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;YAC5C,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,EAAE;SACd,CAAC;QAEF,wEAAwE;QACxE,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAC9D,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CACpF,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;QACtE,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,OAA0H;QAClI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,WAAW;gBAAE,IAAI,CAAC,YAAY,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAC7E,IAAI,OAAO,CAAC,aAAa;gBAAE,IAAI,CAAC,YAAY,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YACnF,IAAI,OAAO,CAAC,gBAAgB;gBAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAC5F,IAAI,OAAO,CAAC,UAAU;gBAAE,IAAI,CAAC,YAAY,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC1E,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,IAAI,CAAC,YAAY,CAAC,WAAW,GAAG;oBAC9B,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW;oBAChC,GAAG,OAAO,CAAC,WAAW;iBACvB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,CAAC,YAAY,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAExD,mEAAmE;QACnE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,QAAgB;QACrC,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAa,EAAE,MAAc,EAAE,IAAY;QAC1D,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAkB;QAC3B,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC1E,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,SAAS,EAAE,CAAC;QAEjB,wBAAwB;QACxB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS;YACtC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM;YACjD,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM;YACrD,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM;YAC3D,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;SACzC,CAAC;QACF,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAe;QACxB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC;QAErE,MAAM,cAAc,GAAmB;YACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS;YACtC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ;YACR,cAAc,EAAE,CAAC,EAAE,oCAAoC;YACvD,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM;YACpD,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YACnD,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;YAC/C,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM;YAC3D,OAAO;SACR,CAAC;QAEF,oBAAoB;QACpB,IAAI,CAAC,SAAS,EAAE,CAAC;QAEjB,qCAAqC;QACrC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,aAAa;YACnB,GAAG,cAAc;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,eAAe;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,2BAA2B;QAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAAa,EAAE,aAAqB,EAAE;QACtD,MAAM,OAAO,GAA4D,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAEvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC;QAE3C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACjC,IAAI,EAAE;aACN,OAAO,EAAE,CAAC;QAEb,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC;iBAC5D,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC,CAAC;YAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;oBAAE,MAAM;gBACxC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,uBAAuB;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;QAC5C,OAAO;YACL,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;YAC/C,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM;YACrD,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM;YACjD,OAAO,EAAE,GAAG,OAAO,GAAG;SACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAED,0BAA0B;IAElB,aAAa,CAAC,SAAiB;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IAC9D,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,kBAAkB,CAAC,QAAgB;QACzC,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU;gBACzB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACzC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvC,MAAM,KAAK,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE5C,mBAAmB;YACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACtC,qCAAqC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAmB;QAC1C,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;aAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEO,cAAc;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrD,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;CACF"}

package/dist/esm/governance/signed-manifest.js

@@ -0,0 +1,119 @@
+/**
+ * Signed Manifest Push (W2.x infrastructure of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Customer-side signs the discovered AgentManifest with their org private
+ * key. Server-side verifies the signature against the registered org
+ * public key before accepting the push. Honors Invariant 10 (push-only):
+ * we never reach into customer infrastructure, and we only accept pushes
+ * that cryptographically prove which org they came from.
+ *
+ * Signing scheme:
+ *   - Algorithm: Ed25519 (small keys, fast verify, deterministic, well-supported in node:crypto).
+ *   - Canonical JSON serialisation of the manifest payload (stable key
+ *     ordering) prevents signature mismatches due to JSON whitespace or
+ *     key-order differences across SDKs.
+ *   - Signature is base64url-encoded for transit.
+ *
+ * Replay protection:
+ *   - Payload carries `nonce` (random 16 bytes hex) + `issuedAt` (ISO 8601).
+ *   - Server-side verification checks issuedAt is within MAX_AGE_SECONDS
+ *     of "now". Replays older than that are rejected.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-AGENT-DISCOVERY-CLI (push transport)
+ */
+import * as crypto from 'node:crypto';
+/** Maximum age of a signed push, in seconds. 5 minutes by default. */
+export const DEFAULT_MAX_AGE_SECONDS = 300;
+export class ManifestSignatureError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'ManifestSignatureError';
+    }
+}
+/**
+ * Generate a new Ed25519 keypair. Customer runs this ONCE per org and
+ * uploads the public key to us; the private key stays on their side.
+ */
+export function generateOrgKeyPair() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
+    return { publicKey, privateKey };
+}
+/** Export public key as base64url DER for transit / dashboard storage. */
+export function exportPublicKey(publicKey) {
+    return publicKey.export({ format: 'der', type: 'spki' }).toString('base64url');
+}
+/** Import a previously-exported base64url DER public key. */
+export function importPublicKey(b64url) {
+    return crypto.createPublicKey({
+        key: Buffer.from(b64url, 'base64url'),
+        format: 'der',
+        type: 'spki',
+    });
+}
+/** Canonical JSON serialisation: stable key ordering, no extraneous whitespace. */
+function canonicalJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        return '[' + value.map((v) => canonicalJson(v)).join(',') + ']';
+    }
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return '{' + keys.map((k) => JSON.stringify(k) + ':' + canonicalJson(obj[k])).join(',') + '}';
+}
+export function signManifest(manifest, orgId, privateKey, options = {}) {
+    if (!orgId || orgId.trim() === '') {
+        throw new ManifestSignatureError('MALFORMED', 'orgId is required');
+    }
+    const issuedAt = new Date(options.nowMs ?? Date.now()).toISOString();
+    const nonce = crypto.randomBytes(16).toString('hex');
+    const payload = { orgId, manifest, nonce, issuedAt };
+    const canonical = canonicalJson(payload);
+    const sig = crypto.sign(null, Buffer.from(canonical, 'utf8'), privateKey);
+    return {
+        payload,
+        signature: sig.toString('base64url'),
+        alg: 'ed25519',
+    };
+}
+/**
+ * Verify a signed manifest against an org public key.
+ *
+ * Throws ManifestSignatureError on:
+ *   - bad signature (INVALID_SIGNATURE)
+ *   - payload older than max-age window (EXPIRED)
+ *   - malformed payload (MALFORMED)
+ *   - payload.orgId !== expectedOrgId (ORG_MISMATCH)
+ */
+export function verifySignedManifest(signed, publicKey, options) {
+    if (!signed.payload || !signed.signature || signed.alg !== 'ed25519') {
+        throw new ManifestSignatureError('MALFORMED', 'signed manifest missing payload / signature / alg');
+    }
+    if (signed.payload.orgId !== options.expectedOrgId) {
+        throw new ManifestSignatureError('ORG_MISMATCH', `expected orgId ${options.expectedOrgId} but payload carries ${signed.payload.orgId}`);
+    }
+    // Age check
+    const issuedAtMs = new Date(signed.payload.issuedAt).getTime();
+    if (Number.isNaN(issuedAtMs)) {
+        throw new ManifestSignatureError('MALFORMED', 'issuedAt is not a valid ISO timestamp');
+    }
+    const nowMs = options.nowMs ?? Date.now();
+    const maxAgeMs = (options.maxAgeSeconds ?? DEFAULT_MAX_AGE_SECONDS) * 1000;
+    if (nowMs - issuedAtMs > maxAgeMs) {
+        throw new ManifestSignatureError('EXPIRED', 'payload is older than max-age window');
+    }
+    if (issuedAtMs - nowMs > maxAgeMs) {
+        throw new ManifestSignatureError('MALFORMED', 'payload issuedAt is in the future beyond clock-skew tolerance');
+    }
+    // Signature check
+    const canonical = canonicalJson(signed.payload);
+    const sig = Buffer.from(signed.signature, 'base64url');
+    const ok = crypto.verify(null, Buffer.from(canonical, 'utf8'), publicKey, sig);
+    if (!ok) {
+        throw new ManifestSignatureError('INVALID_SIGNATURE', 'Ed25519 signature did not verify');
+    }
+    return signed.payload;
+}
+//# sourceMappingURL=signed-manifest.js.map

package/dist/esm/governance/signed-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-manifest.js","sourceRoot":"","sources":["../../../src/governance/signed-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAGtC,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAwB3C,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAiE;IAC9E,YAAY,IAAoC,EAAE,OAAe;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACrC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,QAAuB,EACvB,KAAa,EACb,UAA4B,EAC5B,UAA8B,EAAE;IAEhC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,OAAO,GAA0B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1E,OAAO;QACL,OAAO;QACP,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpC,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,SAA2B,EAC3B,OAAsB;IAEtB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,mDAAmD,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,sBAAsB,CAC9B,cAAc,EACd,kBAAkB,OAAO,CAAC,aAAa,wBAAwB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,YAAY;IACZ,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC,GAAG,IAAI,CAAC;IAC3E,IAAI,KAAK,GAAG,UAAU,GAAG,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,+DAA+D,CAAC,CAAC;IACjH,CAAC;IACD,kBAAkB;IAClB,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,sBAAsB,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}