@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/memory-audit-chain.js

@@ -0,0 +1,400 @@
+"use strict";
+/**
+ * MemoryAuditChain -- Cryptographic continuity chain for cross-session memory.
+ *
+ * Every mutation to cross-session memory for an (orgId, agentId) namespace
+ * produces a SHA-256 chain link bound to the prior state. Tampering with the
+ * underlying store between sessions breaks the chain and fires a
+ * MEMORY_CHAIN_TAMPERED audit event at severity ERROR.
+ *
+ * Design -- Merkle-like state commitment per (orgId, agentId):
+ *
+ *   nextStateHash = sha256(prevStateHash || operationHash || currentStateHash)
+ *
+ * Where:
+ *   operationHash    = sha256(canonicalize({ kind, key, valueHash, scope,
+ *                                           packBinding (sorted), seq, timestampNs }))
+ *   currentStateHash = sha256(canonicalize(sortedStateEntries))
+ *   sortedStateEntries = sorted-by-key list of { key, valueHash, scope, packBinding }
+ *   valueHash        = sha256(JSON.stringify(value)) -- raw values NEVER emitted.
+ *
+ * Canonicalization rules (see canonicalizeJson):
+ *   Object keys sorted lexicographically; arrays preserve element order;
+ *   applied recursively. A third-party auditor can reproduce by applying the
+ *   same sort-keys-and-stringify over the structured data.
+ *
+ * Attack model:
+ *   External tampering: a DB write outside the API inserts a rogue entry.
+ *     Detection: the next recordOperation recomputes currentState and finds
+ *     the rogue entry; stateHash diverges from the chain.
+ *   Replay attack: attacker replays a stale link (seq N) after the chain
+ *     is at seq M > N. isReplay() check rejects seq !== M+1.
+ *   Forgery: fabricated chain link without correct prevStateHash causes
+ *     hash divergence at the next legitimate operation.
+ *   Genesis spoofing: attacker fabricates a genesis for a different agentId.
+ *     genesis = sha256('memory-chain-genesis-' + orgId + ':' + agentId),
+ *     so a wrong agentId produces a wrong genesis and verification fails
+ *     at the first real operation.
+ *
+ * Compliance bindings:
+ *   HIPAA 164.312(c)(1): integrity controls for PHI in cross-session memory
+ *   SOC 2 CC7.2: monitoring system components for tampering
+ *   EU AI Act Art. 12: record-keeping requirements
+ *   ISO 42001 A.9.1: AI system monitoring
+ *
+ * Storage:
+ *   Chain links are stored as MEMORY_CHAIN_LINK audit events through the
+ *   provided AuditSink. No new storage tier required -- the same Splunk HEC /
+ *   Syslog RFC 5424 destinations used for governance events accept these.
+ *
+ * @connexum/ai-governance P3-T1
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmptyPackBindingError = exports.MemoryAuditChain = void 0;
+exports.canonicalizeJson = canonicalizeJson;
+const crypto = __importStar(require("crypto"));
+// ---------------------------------------------------------------------------
+// Canonicalization helpers
+// ---------------------------------------------------------------------------
+/**
+ * Sort all keys of an object recursively, then serialize to JSON.
+ * Ensures determinism across key insertion order.
+ *
+ * Rules:
+ *   1. Object keys are sorted lexicographically (Unicode code point order).
+ *   2. Arrays preserve element order (element order is semantically meaningful).
+ *   3. null / primitives serialise as standard JSON.
+ *   4. Canonicalization applied recursively to nested objects.
+ *
+ * A third-party auditor can reproduce:
+ *   (1) Parse the stored canonical string back to JSON.
+ *   (2) Apply this function to reserialise with sorted keys.
+ *   (3) SHA-256 hash the result.
+ */
+function canonicalizeJson(value) {
+    if (value === null || value === undefined)
+        return JSON.stringify(value);
+    if (typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        return '[' + value.map((v) => canonicalizeJson(v)).join(',') + ']';
+    }
+    const obj = value;
+    const sortedKeys = Object.keys(obj).sort();
+    const pairs = sortedKeys.map((k) => JSON.stringify(k) + ':' + canonicalizeJson(obj[k]));
+    return '{' + pairs.join(',') + '}';
+}
+function sha256hex(data) {
+    return crypto.createHash('sha256').update(data, 'utf8').digest('hex');
+}
+// ---------------------------------------------------------------------------
+// Replay state for verifyChain
+// ---------------------------------------------------------------------------
+class ReplayState {
+    entries = new Map();
+    snapshot() {
+        return [...this.entries.values()].sort((a, b) => a.key.localeCompare(b.key));
+    }
+    apply(link) {
+        if (link.kind === 'set') {
+            this.entries.set(link.key, {
+                key: link.key,
+                valueHash: link.valueHash,
+                scope: link.scope,
+                packBinding: [...link.packBinding],
+            });
+        }
+        else {
+            this.entries.delete(link.key);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// MemoryAuditChain
+// ---------------------------------------------------------------------------
+class MemoryAuditChain {
+    cfg;
+    sink;
+    chains = new Map();
+    constructor(config = {}, sink) {
+        this.cfg = {
+            verifyOnRead: config.verifyOnRead ?? 'sample',
+            sampleRate: config.sampleRate ?? 0.1,
+            verifyOnStartup: config.verifyOnStartup ?? true,
+            rng: config.rng ?? Math.random.bind(Math),
+        };
+        this.sink = sink ?? (() => undefined);
+    }
+    // -------------------------------------------------------------------------
+    // Genesis hash
+    // -------------------------------------------------------------------------
+    /**
+     * Genesis hash is a pure function of (orgId, agentId).
+     * An attacker who fabricates a genesis using a different agentId will
+     * produce a different genesis, causing verification failure at the first
+     * real operation.
+     */
+    getGenesisHash(orgId, agentId) {
+        return sha256hex('memory-chain-genesis-' + orgId + ':' + agentId);
+    }
+    // -------------------------------------------------------------------------
+    // Current state hash
+    // -------------------------------------------------------------------------
+    getCurrentStateHash(orgId, agentId) {
+        const chain = this.chains.get(this.chainKey(orgId, agentId));
+        if (!chain || chain.links.length === 0) {
+            return this.getGenesisHash(orgId, agentId);
+        }
+        return chain.links[chain.links.length - 1].stateHash;
+    }
+    // -------------------------------------------------------------------------
+    // recordOperation
+    // -------------------------------------------------------------------------
+    /**
+     * Record a mutation to cross-session memory and emit a chain link.
+     *
+     * Must be called by CrossSessionMemoryStore on every write and delete.
+     *
+     * MANDATORY: packBinding must be non-empty.
+     * Raw values NEVER appear in any audit payload; only valueHash is stored.
+     *
+     * Returns the new state hash.
+     */
+    recordOperation(orgId, agentId, op) {
+        if (!op.packBinding || op.packBinding.length === 0) {
+            throw new EmptyPackBindingError(op.key, orgId, agentId);
+        }
+        const k = this.chainKey(orgId, agentId);
+        if (!this.chains.has(k)) {
+            this.chains.set(k, { links: [], state: new Map() });
+        }
+        const chain = this.chains.get(k);
+        const prevStateHash = chain.links.length > 0
+            ? chain.links[chain.links.length - 1].stateHash
+            : this.getGenesisHash(orgId, agentId);
+        const seq = chain.links.length + 1;
+        // valueHash: sha256 of raw value. Raw value NEVER stored or emitted.
+        const valueHash = op.kind === 'set' && op.value !== undefined
+            ? sha256hex(JSON.stringify(op.value))
+            : '';
+        // Apply mutation to live state snapshot (no raw values stored here).
+        if (op.kind === 'set') {
+            chain.state.set(op.key, {
+                key: op.key,
+                valueHash,
+                scope: op.scope,
+                packBinding: [...op.packBinding],
+            });
+        }
+        else {
+            chain.state.delete(op.key);
+        }
+        // canonicalize(operation)
+        const opPayload = {
+            key: op.key,
+            kind: op.kind,
+            packBinding: [...op.packBinding].sort(),
+            scope: op.scope,
+            seq,
+            timestampNs: op.timestampNs,
+            valueHash,
+        };
+        const operationHash = sha256hex(canonicalizeJson(opPayload));
+        // canonicalize(currentState) -- sorted by key, no raw values
+        const stateSnapshot = [...chain.state.values()].sort((a, b) => a.key.localeCompare(b.key));
+        const currentStateHash = sha256hex(canonicalizeJson(stateSnapshot));
+        // nextStateHash = sha256(prevStateHash || operationHash || currentStateHash)
+        const nextStateHash = sha256hex(prevStateHash + operationHash + currentStateHash);
+        const link = {
+            type: 'MEMORY_CHAIN_LINK',
+            orgId,
+            agentId,
+            seq,
+            prevStateHash,
+            operationHash,
+            stateHash: nextStateHash,
+            timestamp: new Date().toISOString(),
+            packBinding: [...op.packBinding],
+            kind: op.kind,
+            key: op.key,
+            valueHash,
+            scope: op.scope,
+            timestampNs: op.timestampNs,
+        };
+        chain.links.push(link);
+        this.sink(link);
+        return nextStateHash;
+    }
+    // -------------------------------------------------------------------------
+    // verifyChain
+    // -------------------------------------------------------------------------
+    /**
+     * Replay all recorded links from genesis and recompute each stateHash.
+     * Any divergence indicates tampering.
+     *
+     * On tamper detection:
+     *   Emits MEMORY_CHAIN_TAMPERED event at severity ERROR.
+     *   Returns { valid: false, brokenAt: seq, expected, actual }.
+     *
+     * On success:
+     *   Returns { valid: true }.
+     */
+    verifyChain(orgId, agentId) {
+        const k = this.chainKey(orgId, agentId);
+        const chain = this.chains.get(k);
+        if (!chain || chain.links.length === 0) {
+            return { valid: true };
+        }
+        const replay = new ReplayState();
+        let prevStateHash = this.getGenesisHash(orgId, agentId);
+        for (const link of chain.links) {
+            // Recompute operationHash using all fields stored on the link.
+            const opPayload = {
+                key: link.key,
+                kind: link.kind,
+                packBinding: [...link.packBinding].sort(),
+                scope: link.scope,
+                seq: link.seq,
+                timestampNs: link.timestampNs,
+                valueHash: link.valueHash,
+            };
+            const recomputedOperationHash = sha256hex(canonicalizeJson(opPayload));
+            // Apply operation to replay state.
+            replay.apply(link);
+            // Recompute currentStateHash from the replay state after this operation.
+            const stateSnapshot = replay.snapshot();
+            const recomputedCurrentStateHash = sha256hex(canonicalizeJson(stateSnapshot));
+            // Recompute the full nextStateHash.
+            const recomputedNextStateHash = sha256hex(prevStateHash + recomputedOperationHash + recomputedCurrentStateHash);
+            if (recomputedNextStateHash !== link.stateHash) {
+                const tamperEvent = {
+                    type: 'MEMORY_CHAIN_TAMPERED',
+                    severity: 'ERROR',
+                    orgId,
+                    agentId,
+                    brokenAt: link.seq,
+                    expectedStateHash: recomputedNextStateHash,
+                    actualStateHash: link.stateHash,
+                    timestamp: new Date().toISOString(),
+                };
+                this.sink(tamperEvent);
+                return {
+                    valid: false,
+                    brokenAt: link.seq,
+                    expected: recomputedNextStateHash,
+                    actual: link.stateHash,
+                };
+            }
+            prevStateHash = link.stateHash;
+        }
+        return { valid: true };
+    }
+    // -------------------------------------------------------------------------
+    // Sampling
+    // -------------------------------------------------------------------------
+    /**
+     * Returns true if this read should trigger verifyChain().
+     * Caller is responsible for calling verifyChain when this returns true.
+     *
+     * Default policy 'sample' at 10%: bounds overhead on high-throughput read
+     * paths while still surfacing tampering within O(10) reads on average.
+     * For HIPAA deployments, set verifyOnRead: 'always'.
+     */
+    shouldVerifyOnRead() {
+        switch (this.cfg.verifyOnRead) {
+            case 'always': return true;
+            case 'never': return false;
+            case 'sample': return this.cfg.rng() < this.cfg.sampleRate;
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Replay attack detection
+    // -------------------------------------------------------------------------
+    /**
+     * Returns true if the given seq is a replay (already processed or
+     * out-of-expected-order) for this (orgId, agentId) chain.
+     *
+     * Expected next seq = current link count + 1.
+     * Anything else is a replay or injection attempt.
+     */
+    isReplay(orgId, agentId, seq) {
+        const k = this.chainKey(orgId, agentId);
+        const chain = this.chains.get(k);
+        const nextExpected = (chain?.links.length ?? 0) + 1;
+        return seq !== nextExpected;
+    }
+    // -------------------------------------------------------------------------
+    // Test / introspection helpers (prefixed _ -- not part of public API)
+    // -------------------------------------------------------------------------
+    /**
+     * Tamper a stored link's stateHash directly.
+     * Simulates an out-of-band write that corrupts the chain.
+     * Only for test use -- DO NOT call in production code.
+     */
+    _tamperLink(orgId, agentId, seq, newStateHash) {
+        const k = this.chainKey(orgId, agentId);
+        const chain = this.chains.get(k);
+        if (!chain)
+            return;
+        const link = chain.links.find((l) => l.seq === seq);
+        if (link)
+            link.stateHash = newStateHash;
+    }
+    /** Returns a copy of the chain links for a given (orgId, agentId). */
+    _getLinks(orgId, agentId) {
+        const k = this.chainKey(orgId, agentId);
+        return [...(this.chains.get(k)?.links ?? [])];
+    }
+    // -------------------------------------------------------------------------
+    // Private helpers
+    // -------------------------------------------------------------------------
+    chainKey(orgId, agentId) {
+        return orgId + ':' + agentId;
+    }
+}
+exports.MemoryAuditChain = MemoryAuditChain;
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+class EmptyPackBindingError extends Error {
+    constructor(key, orgId, agentId) {
+        super(`MemoryAuditChain.recordOperation: packBinding must be non-empty for key '${key}' ` +
+            `(orgId=${orgId}, agentId=${agentId}). Pack-binding is mandatory per governance policy.`);
+        this.name = 'EmptyPackBindingError';
+    }
+}
+exports.EmptyPackBindingError = EmptyPackBindingError;
+//# sourceMappingURL=memory-audit-chain.js.map

package/dist/governance/memory-audit-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-audit-chain.js","sourceRoot":"","sources":["../../src/governance/memory-audit-chain.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,4CAYC;AAjCD,+CAAiC;AAEjC,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAI,KAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpF,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC1D,CAAC;IACF,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAgHD,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,MAAM,WAAW;IACE,OAAO,GAAkC,IAAI,GAAG,EAAE,CAAC;IAEpE,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,IAAmF;QACvF,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAa,gBAAgB;IACV,GAAG,CAAmC;IACtC,IAAI,CAAY;IAChB,MAAM,GAAiC,IAAI,GAAG,EAAE,CAAC;IAElE,YAAY,SAAiC,EAAE,EAAE,IAAgB;QAC/D,IAAI,CAAC,GAAG,GAAG;YACT,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,QAAQ;YAC7C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;YACpC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC/C,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC1C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E;;;;;OAKG;IACH,cAAc,CAAC,KAAa,EAAE,OAAe;QAC3C,OAAO,SAAS,CAAC,uBAAuB,GAAG,KAAK,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,4EAA4E;IAC5E,qBAAqB;IACrB,4EAA4E;IAE5E,mBAAmB,CAAC,KAAa,EAAE,OAAe;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAE5E;;;;;;;;;OASG;IACH,eAAe,CACb,KAAa,EACb,OAAe,EACf,EAAmB;QAEnB,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;QAElC,MAAM,aAAa,GACjB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS;YAC/C,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAEnC,qEAAqE;QACrE,MAAM,SAAS,GACb,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;YACzC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QAET,qEAAqE;QACrE,IAAI,EAAE,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE;gBACtB,GAAG,EAAE,EAAE,CAAC,GAAG;gBACX,SAAS;gBACT,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG;YAChB,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;YACvC,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,GAAG;YACH,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,SAAS;SACV,CAAC;QACF,MAAM,aAAa,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;QAE7D,6DAA6D;QAC7D,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5D,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAC3B,CAAC;QACF,MAAM,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAEpE,6EAA6E;QAC7E,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,GAAG,aAAa,GAAG,gBAAgB,CAAC,CAAC;QAElF,MAAM,IAAI,GAAoB;YAC5B,IAAI,EAAE,mBAAmB;YACzB,KAAK;YACL,OAAO;YACP,GAAG;YACH,aAAa;YACb,aAAa;YACb,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;YAChC,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,SAAS;YACT,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;SAC5B,CAAC;QAEF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAE5E;;;;;;;;;;OAUG;IACH,WAAW,CAAC,KAAa,EAAE,OAAe;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,IAAI,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAExD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,+DAA+D;YAC/D,MAAM,SAAS,GAAG;gBAChB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;gBACzC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,MAAM,uBAAuB,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;YAEvE,mCAAmC;YACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEnB,yEAAyE;YACzE,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,0BAA0B,GAAG,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;YAE9E,oCAAoC;YACpC,MAAM,uBAAuB,GAAG,SAAS,CACvC,aAAa,GAAG,uBAAuB,GAAG,0BAA0B,CACrE,CAAC;YAEF,IAAI,uBAAuB,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,WAAW,GAA6B;oBAC5C,IAAI,EAAE,uBAAuB;oBAC7B,QAAQ,EAAE,OAAO;oBACjB,KAAK;oBACL,OAAO;oBACP,QAAQ,EAAE,IAAI,CAAC,GAAG;oBAClB,iBAAiB,EAAE,uBAAuB;oBAC1C,eAAe,EAAE,IAAI,CAAC,SAAS;oBAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACvB,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG;oBAClB,QAAQ,EAAE,uBAAuB;oBACjC,MAAM,EAAE,IAAI,CAAC,SAAS;iBACvB,CAAC;YACJ,CAAC;YAED,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAE5E;;;;;;;OAOG;IACH,kBAAkB;QAChB,QAAQ,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9B,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC;YAC3B,KAAK,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;YAC3B,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,0BAA0B;IAC1B,4EAA4E;IAE5E;;;;;;OAMG;IACH,QAAQ,CAAC,KAAa,EAAE,OAAe,EAAE,GAAW;QAClD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,GAAG,KAAK,YAAY,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAE5E;;;;OAIG;IACH,WAAW,CAAC,KAAa,EAAE,OAAe,EAAE,GAAW,EAAE,YAAoB;QAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACpD,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;IAC1C,CAAC;IAED,sEAAsE;IACtE,SAAS,CAAC,KAAa,EAAE,OAAe;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAEpE,QAAQ,CAAC,KAAa,EAAE,OAAe;QAC7C,OAAO,KAAK,GAAG,GAAG,GAAG,OAAO,CAAC;IAC/B,CAAC;CACF;AA1RD,4CA0RC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,GAAW,EAAE,KAAa,EAAE,OAAe;QACrD,KAAK,CACH,4EAA4E,GAAG,IAAI;YACjF,UAAU,KAAK,aAAa,OAAO,qDAAqD,CAC3F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AARD,sDAQC"}

package/dist/governance/memory-integrity.d.ts

@@ -0,0 +1,82 @@
+/**
+ * MemoryIntegrity -- Cryptographic verification for agent memory files.
+ *
+ * Every memory write gets a SHA-256 hash footer. Every read verifies
+ * the hash. Tampered files are flagged, backed up copies are restored.
+ * Addresses OWASP ASI06 (Memory Poisoning).
+ *
+ * @connexum/ai-governance
+ */
+export interface MemoryIntegrityConfig {
+    /** Directory containing memory files */
+    memoryDir: string;
+    /** Agent name for audit logging */
+    agentName: string;
+    /** Audit log path (JSONL) */
+    auditLogPath?: string;
+    /** File extensions to protect (default: ['.md']) */
+    protectedExtensions?: string[];
+    /** Hash algorithm (default: 'sha256') */
+    algorithm?: string;
+}
+export interface MemoryVerification {
+    file: string;
+    valid: boolean;
+    hasHash: boolean;
+    expectedHash?: string;
+    actualHash?: string;
+    restoredFromBackup: boolean;
+    error?: string;
+}
+export interface MemoryWriteResult {
+    file: string;
+    hash: string;
+    backupCreated: boolean;
+}
+export declare class MemoryIntegrity {
+    private config;
+    constructor(config: MemoryIntegrityConfig);
+    /**
+     * Write content to a memory file with integrity hash.
+     * Creates a backup of the previous version.
+     */
+    writeMemory(filePath: string, content: string): MemoryWriteResult;
+    /**
+     * Read a memory file and verify its integrity.
+     * Returns the content (without hash footer) if valid.
+     * Attempts restoration from backup if tampered.
+     */
+    readMemory(filePath: string): {
+        content: string;
+        verification: MemoryVerification;
+    };
+    /**
+     * Verify integrity of a single memory file.
+     */
+    verifyFile(filePath: string): MemoryVerification;
+    /**
+     * Verify all memory files in the memory directory.
+     */
+    verifyAll(): MemoryVerification[];
+    /**
+     * Add integrity hashes to all existing memory files that lack them.
+     * Non-destructive: only adds hash footer, doesn't change content.
+     */
+    retroHashAll(): MemoryWriteResult[];
+    /**
+     * Generate a manifest of all memory file hashes.
+     */
+    generateManifest(): Record<string, string>;
+    /**
+     * Verify manifest against current files. Returns list of mismatches.
+     */
+    verifyManifest(manifest: Record<string, string>): Array<{
+        file: string;
+        expected: string;
+        actual: string;
+    }>;
+    private resolveMemoryPath;
+    private listMemoryFiles;
+    private logEvent;
+}
+//# sourceMappingURL=memory-integrity.d.ts.map

package/dist/governance/memory-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-integrity.d.ts","sourceRoot":"","sources":["../../src/governance/memory-integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;CACxB;AAID,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAkC;gBAEpC,MAAM,EAAE,qBAAqB;IAUzC;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB;IAgCjE;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,kBAAkB,CAAA;KAAE;IA6BnF;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB;IA8EhD;;OAEG;IACH,SAAS,IAAI,kBAAkB,EAAE;IAajC;;;OAGG;IACH,YAAY,IAAI,iBAAiB,EAAE;IAkBnC;;OAEG;IACH,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiB1C;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAwB3G,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,eAAe;IAqBvB,OAAO,CAAC,QAAQ;CAgBjB"}