@connexum/ai-governance 1.0.0-beta.11

package/dist/security/encryption-layer.js

@@ -0,0 +1,374 @@
+"use strict";
+/**
+ * EncryptionLayer -- AES-256-GCM encryption for data at rest.
+ *
+ * AIAG-014 STATUS: Sole owner of at-rest AES-256-GCM. EncryptedStorage
+ * delegates here; no other module should call `crypto.createCipheriv`
+ * directly. Two formats coexist:
+ *
+ *   V2 (current, preferred): uses KeyManager for key material. HKDF
+ *   derivation with a random persisted salt (AIAG-016). Format:
+ *     CONNEXUM-ENC-V2 | keyVersion(4B) | iv(12B) | tag(16B) | ciphertext
+ *
+ *   V1 (deprecated, read-only after V2 migration complete): passphrase
+ *   + PBKDF2 (100k iterations) + per-file random salt. Format:
+ *     CONNEXUM-ENC-V1 | salt(32B) | iv(12B) | tag(16B) | ciphertext
+ *
+ * New code MUST pass `keyManager` so V2 is selected. V1 remains only
+ * so callers without KeyManager (test fixtures, legacy file reads)
+ * continue to work until the ecosystem finishes migrating.
+ *
+ * Encrypts audit logs, session state, memory files, and any
+ * governance data before writing to disk. Decrypts on read.
+ *
+ * Required by:
+ *   - HIPAA 164.312(a)(2)(iv): Encryption and decryption
+ *   - GDPR Art. 32: Security of processing
+ *   - PCI DSS Req 3: Protect stored data
+ *   - SOC 2 CC6.1: Logical and physical access
+ *   - ISO 27001 8.24: Use of cryptography
+ *
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionLayer = void 0;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const MAGIC_HEADER = Buffer.from('CONNEXUM-ENC-V1\0');
+const MAGIC_HEADER_V2 = Buffer.from('CONNEXUM-ENC-V2\0');
+// Pre-AIAG-014 legacy formats produced by the old EncryptedStorage.
+// Kept read-only for backwards compatibility; all new writes go through
+// MAGIC_HEADER / MAGIC_HEADER_V2.
+const LEGACY_CXENC1 = Buffer.from('CXENC1'); // passphrase + PBKDF2
+const LEGACY_CXENC2 = Buffer.from('CXENC2'); // KeyManager version
+const SALT_LENGTH = 32;
+const IV_LENGTH = 12;
+const TAG_LENGTH = 16;
+const KEY_LENGTH = 32; // 256 bits
+const KEY_VERSION_LENGTH = 4; // uint32 for key version
+const PBKDF2_ITERATIONS = 100000;
+class EncryptionLayer {
+    passphrase;
+    iterations;
+    logDir;
+    keyManager;
+    constructor(config) {
+        if (!config.passphrase || config.passphrase.length < 16) {
+            throw new Error('Passphrase must be at least 16 characters');
+        }
+        this.passphrase = config.passphrase;
+        this.iterations = config.iterations ?? PBKDF2_ITERATIONS;
+        this.logDir = config.logDir || null;
+        this.keyManager = config.keyManager;
+        if (this.logDir && !fs.existsSync(this.logDir)) {
+            fs.mkdirSync(this.logDir, { recursive: true });
+        }
+    }
+    /**
+     * Encrypt a buffer using AES-256-GCM.
+     * Uses KeyManager (V2) when available, falls back to passphrase (V1).
+     */
+    encrypt(plaintext) {
+        if (this.keyManager) {
+            // V2: Use KeyManager for key material
+            const { key, version } = this.keyManager.getCurrentKey();
+            const iv = crypto.randomBytes(IV_LENGTH);
+            const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+            const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+            const tag = cipher.getAuthTag();
+            const versionBuf = Buffer.alloc(KEY_VERSION_LENGTH);
+            versionBuf.writeUInt32BE(version, 0);
+            // V2 Format: HEADER_V2 | keyVersion(4B) | IV | TAG | CIPHERTEXT
+            return Buffer.concat([MAGIC_HEADER_V2, versionBuf, iv, tag, encrypted]);
+        }
+        // V1: Legacy passphrase-based
+        const salt = crypto.randomBytes(SALT_LENGTH);
+        const iv = crypto.randomBytes(IV_LENGTH);
+        const key = this.deriveKey(salt);
+        const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+        const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        // V1 Format: HEADER | SALT | IV | TAG | CIPHERTEXT
+        return Buffer.concat([MAGIC_HEADER, salt, iv, tag, encrypted]);
+    }
+    /**
+     * Decrypt a buffer. Handles:
+     *   - CONNEXUM-ENC-V2 (current, KeyManager-backed)
+     *   - CONNEXUM-ENC-V1 (current, passphrase + PBKDF2)
+     *   - CXENC2 (legacy, KeyManager-backed; pre-AIAG-014)
+     *   - CXENC1 (legacy, passphrase + PBKDF2; pre-AIAG-014)
+     */
+    decrypt(data) {
+        try {
+            // Legacy CXENC2 (KeyManager)
+            if (data.length >= LEGACY_CXENC2.length && data.subarray(0, LEGACY_CXENC2.length).equals(LEGACY_CXENC2)) {
+                if (!this.keyManager) {
+                    return { success: false, content: Buffer.alloc(0), error: 'CXENC2 (legacy) requires KeyManager for decryption' };
+                }
+                let offset = LEGACY_CXENC2.length;
+                const keyVersion = data.readUInt32BE(offset);
+                offset += KEY_VERSION_LENGTH;
+                const iv = data.subarray(offset, offset + IV_LENGTH);
+                offset += IV_LENGTH;
+                const tag = data.subarray(offset, offset + TAG_LENGTH);
+                offset += TAG_LENGTH;
+                const ciphertext = data.subarray(offset);
+                const keyData = this.keyManager.getKeyByVersion(keyVersion);
+                if (!keyData) {
+                    return { success: false, content: Buffer.alloc(0), error: `Key version ${keyVersion} not found (legacy CXENC2)` };
+                }
+                const decipher = crypto.createDecipheriv('aes-256-gcm', keyData.key, iv);
+                decipher.setAuthTag(tag);
+                const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+                return { success: true, content: decrypted };
+            }
+            // Legacy CXENC1 (passphrase + PBKDF2)
+            if (data.length >= LEGACY_CXENC1.length && data.subarray(0, LEGACY_CXENC1.length).equals(LEGACY_CXENC1)) {
+                let offset = LEGACY_CXENC1.length;
+                const salt = data.subarray(offset, offset + SALT_LENGTH);
+                offset += SALT_LENGTH;
+                const iv = data.subarray(offset, offset + IV_LENGTH);
+                offset += IV_LENGTH;
+                const tag = data.subarray(offset, offset + TAG_LENGTH);
+                offset += TAG_LENGTH;
+                const ciphertext = data.subarray(offset);
+                const key = this.deriveKey(salt);
+                const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+                decipher.setAuthTag(tag);
+                const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+                return { success: true, content: decrypted };
+            }
+            // Check for V2 format first
+            if (data.length >= MAGIC_HEADER_V2.length && data.subarray(0, MAGIC_HEADER_V2.length).equals(MAGIC_HEADER_V2)) {
+                if (!this.keyManager) {
+                    return { success: false, content: Buffer.alloc(0), error: 'V2 encrypted data requires KeyManager for decryption' };
+                }
+                let offset = MAGIC_HEADER_V2.length;
+                const keyVersion = data.readUInt32BE(offset);
+                offset += KEY_VERSION_LENGTH;
+                const iv = data.subarray(offset, offset + IV_LENGTH);
+                offset += IV_LENGTH;
+                const tag = data.subarray(offset, offset + TAG_LENGTH);
+                offset += TAG_LENGTH;
+                const ciphertext = data.subarray(offset);
+                const keyData = this.keyManager.getKeyByVersion(keyVersion);
+                if (!keyData) {
+                    return { success: false, content: Buffer.alloc(0), error: `Key version ${keyVersion} not found` };
+                }
+                const decipher = crypto.createDecipheriv('aes-256-gcm', keyData.key, iv);
+                decipher.setAuthTag(tag);
+                const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+                return { success: true, content: decrypted };
+            }
+            // V1 format
+            if (data.length < MAGIC_HEADER.length + SALT_LENGTH + IV_LENGTH + TAG_LENGTH) {
+                return { success: false, content: Buffer.alloc(0), error: 'Data too short for encrypted format' };
+            }
+            const header = data.subarray(0, MAGIC_HEADER.length);
+            if (!header.equals(MAGIC_HEADER)) {
+                return { success: false, content: Buffer.alloc(0), error: 'Not an encrypted file (missing header)' };
+            }
+            let offset = MAGIC_HEADER.length;
+            const salt = data.subarray(offset, offset + SALT_LENGTH);
+            offset += SALT_LENGTH;
+            const iv = data.subarray(offset, offset + IV_LENGTH);
+            offset += IV_LENGTH;
+            const tag = data.subarray(offset, offset + TAG_LENGTH);
+            offset += TAG_LENGTH;
+            const ciphertext = data.subarray(offset);
+            const key = this.deriveKey(salt);
+            const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+            decipher.setAuthTag(tag);
+            const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+            return { success: true, content: decrypted };
+        }
+        catch (err) {
+            return { success: false, content: Buffer.alloc(0), error: `Decryption failed: ${err.message}` };
+        }
+    }
+    /**
+     * Encrypt a string and return as a buffer.
+     */
+    encryptString(plaintext) {
+        return this.encrypt(Buffer.from(plaintext, 'utf-8'));
+    }
+    /**
+     * Decrypt a buffer and return as a string.
+     */
+    decryptString(data) {
+        const result = this.decrypt(data);
+        if (!result.success)
+            return null;
+        return result.content.toString('utf-8');
+    }
+    /**
+     * Encrypt a file in place. Creates .bak backup first.
+     */
+    encryptFile(filePath) {
+        try {
+            if (!fs.existsSync(filePath)) {
+                return { success: false, path: filePath, originalSize: 0, encryptedSize: 0, error: 'File not found' };
+            }
+            const plaintext = fs.readFileSync(filePath);
+            // Don't double-encrypt
+            if (this.isEncrypted(plaintext)) {
+                return { success: true, path: filePath, originalSize: plaintext.length, encryptedSize: plaintext.length, error: 'Already encrypted' };
+            }
+            // Backup
+            fs.copyFileSync(filePath, filePath + '.bak');
+            const encrypted = this.encrypt(plaintext);
+            fs.writeFileSync(filePath, encrypted);
+            this.logOperation('encrypt', filePath, plaintext.length, encrypted.length);
+            return { success: true, path: filePath, originalSize: plaintext.length, encryptedSize: encrypted.length };
+        }
+        catch (err) {
+            return { success: false, path: filePath, originalSize: 0, encryptedSize: 0, error: err.message };
+        }
+    }
+    /**
+     * Decrypt a file in place.
+     */
+    decryptFile(filePath) {
+        try {
+            if (!fs.existsSync(filePath)) {
+                return { success: false, path: filePath, originalSize: 0, encryptedSize: 0, error: 'File not found' };
+            }
+            const encrypted = fs.readFileSync(filePath);
+            if (!this.isEncrypted(encrypted)) {
+                return { success: true, path: filePath, originalSize: encrypted.length, encryptedSize: encrypted.length, error: 'Not encrypted' };
+            }
+            const result = this.decrypt(encrypted);
+            if (!result.success) {
+                return { success: false, path: filePath, originalSize: encrypted.length, encryptedSize: 0, error: result.error };
+            }
+            fs.writeFileSync(filePath, result.content);
+            this.logOperation('decrypt', filePath, encrypted.length, result.content.length);
+            return { success: true, path: filePath, originalSize: encrypted.length, encryptedSize: result.content.length };
+        }
+        catch (err) {
+            return { success: false, path: filePath, originalSize: 0, encryptedSize: 0, error: err.message };
+        }
+    }
+    /**
+     * Check if a buffer is encrypted with our format (V1 or V2).
+     */
+    isEncrypted(data) {
+        if (data.length < LEGACY_CXENC1.length)
+            return false;
+        return (data.subarray(0, MAGIC_HEADER.length).equals(MAGIC_HEADER) ||
+            data.subarray(0, MAGIC_HEADER_V2.length).equals(MAGIC_HEADER_V2) ||
+            data.subarray(0, LEGACY_CXENC1.length).equals(LEGACY_CXENC1) ||
+            data.subarray(0, LEGACY_CXENC2.length).equals(LEGACY_CXENC2));
+    }
+    /**
+     * Check if a file on disk is encrypted (V1 or V2).
+     */
+    isFileEncrypted(filePath) {
+        if (!fs.existsSync(filePath))
+            return false;
+        const fd = fs.openSync(filePath, 'r');
+        const header = Buffer.alloc(MAGIC_HEADER_V2.length);
+        fs.readSync(fd, header, 0, MAGIC_HEADER_V2.length, 0);
+        fs.closeSync(fd);
+        return header.equals(MAGIC_HEADER) || header.equals(MAGIC_HEADER_V2);
+    }
+    /**
+     * Read an encrypted file, decrypt, and return content as string.
+     * If file is not encrypted, returns content as-is.
+     */
+    readEncrypted(filePath) {
+        if (!fs.existsSync(filePath))
+            return null;
+        const data = fs.readFileSync(filePath);
+        if (this.isEncrypted(data)) {
+            return this.decryptString(data);
+        }
+        return data.toString('utf-8');
+    }
+    /**
+     * Write content encrypted to a file.
+     */
+    writeEncrypted(filePath, content) {
+        const dir = path.dirname(filePath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        const encrypted = this.encryptString(content);
+        fs.writeFileSync(filePath, encrypted);
+    }
+    /**
+     * Append to an encrypted JSONL file.
+     * Reads existing content, decrypts, appends line, re-encrypts.
+     */
+    appendEncryptedJsonl(filePath, entry) {
+        let existing = '';
+        if (fs.existsSync(filePath)) {
+            const data = fs.readFileSync(filePath);
+            if (this.isEncrypted(data)) {
+                existing = this.decryptString(data) || '';
+            }
+            else {
+                existing = data.toString('utf-8');
+            }
+        }
+        const updated = existing + JSON.stringify(entry) + '\n';
+        this.writeEncrypted(filePath, updated);
+    }
+    deriveKey(salt) {
+        return crypto.pbkdf2Sync(this.passphrase, salt, this.iterations, KEY_LENGTH, 'sha256');
+    }
+    logOperation(operation, filePath, originalSize, resultSize) {
+        if (!this.logDir)
+            return;
+        const logFile = path.join(this.logDir, `encryption-${new Date().toISOString().split('T')[0]}.jsonl`);
+        const entry = {
+            timestamp: new Date().toISOString(),
+            operation,
+            file: filePath,
+            originalSize,
+            resultSize,
+        };
+        try {
+            fs.appendFileSync(logFile, JSON.stringify(entry) + '\n');
+        }
+        catch {
+            // Log failure is non-critical for encryption operations
+        }
+    }
+}
+exports.EncryptionLayer = EncryptionLayer;
+//# sourceMappingURL=encryption-layer.js.map

package/dist/security/encryption-layer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-layer.js","sourceRoot":"","sources":["../../src/security/encryption-layer.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAG7B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AACtD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AACzD,oEAAoE;AACpE,wEAAwE;AACxE,kCAAkC;AAClC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,sBAAsB;AACpE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,qBAAqB;AACnE,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,WAAW;AAClC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC,yBAAyB;AACvD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AA2BjC,MAAa,eAAe;IAClB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,MAAM,CAAgB;IACtB,UAAU,CAAc;IAEhC,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,iBAAiB,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAEpC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAiB;QACvB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,sCAAsC;YACtC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YACzD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEhC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACpD,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAErC,gEAAgE;YAChE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,8BAA8B;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,mDAAmD;QACnD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC;YACH,6BAA6B;YAC7B,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;gBACnH,CAAC;gBACD,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;gBAClC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,IAAI,kBAAkB,CAAC;gBAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;gBACrD,MAAM,IAAI,SAAS,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC;gBACvD,MAAM,IAAI,UAAU,CAAC;gBACrB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,UAAU,4BAA4B,EAAE,CAAC;gBACpH,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,CAAC;YAED,sCAAsC;YACtC,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxG,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;gBAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;gBACzD,MAAM,IAAI,WAAW,CAAC;gBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;gBACrD,MAAM,IAAI,SAAS,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC;gBACvD,MAAM,IAAI,UAAU,CAAC;gBACrB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACjE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,CAAC;YAED,4BAA4B;YAC5B,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC9G,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;gBACrH,CAAC;gBAED,IAAI,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;gBACpC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,IAAI,kBAAkB,CAAC;gBAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;gBACrD,MAAM,IAAI,SAAS,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC;gBACvD,MAAM,IAAI,UAAU,CAAC;gBACrB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,UAAU,YAAY,EAAE,CAAC;gBACpG,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,CAAC;YAED,YAAY;YACZ,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,EAAE,CAAC;gBAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;YACpG,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;YACvG,CAAC;YAED,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;YACzD,MAAM,IAAI,WAAW,CAAC;YACtB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;YACrD,MAAM,IAAI,SAAS,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC;YACvD,MAAM,IAAI,UAAU,CAAC;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACjE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAAY;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YACxG,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAE5C,uBAAuB;YACvB,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACxI,CAAC;YAED,SAAS;YACT,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC;YAE7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC1C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAEtC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAE3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC5G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QAC9G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YACxG,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAE5C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;YACpI,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACnH,CAAC;YAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAE3C,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEhF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QAC9G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;YAC5D,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB;QAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACpD,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,QAAgB;QAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB,EAAE,OAAe;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,QAAgB,EAAE,KAA8B;QACnE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QACxD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzF,CAAC;IAEO,YAAY,CAAC,SAAiB,EAAE,QAAgB,EAAE,YAAoB,EAAE,UAAkB;QAChG,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;YACT,IAAI,EAAE,QAAQ;YACd,YAAY;YACZ,UAAU;SACX,CAAC;QACF,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;CACF;AAnUD,0CAmUC"}

package/dist/security/external-cross-check.d.ts

@@ -0,0 +1,206 @@
+/**
+ * ExternalCrossCheckEnforcer -- Opt-in external verification gate for self-reflection outcomes.
+ *
+ * A self-reflecting agent (Tier 1, Agent Type Coverage Strategy) produces a reflection
+ * outcome (self-check verdict). This primitive bounds the trust placed in that single
+ * self-reflection by requiring an external cross-check before the cycle proceeds.
+ *
+ * ORTHOGONAL TO the SelfReflectionLoopDetector (anomaly-self-reflection.ts):
+ *   - LoopDetector: catches pathological loops (N consecutive regenerate triplets).
+ *   - ExternalCrossCheckEnforcer: limits trust in any single self-reflection outcome,
+ *     regardless of whether a loop exists.
+ *
+ * Two operating modes (operator-configured per agent):
+ *   'peer-agent'  -- Reflection outcome is forwarded to a designated peer agent
+ *                    (different model / different prompt). Peer returns a verdict.
+ *                    Accept -> cycle continues. Reject or inconclusive -> human queue.
+ *   'human-only'  -- Every reflection outcome creates a human approval queue entry.
+ *                    No peer agent is involved.
+ *
+ * Pen-test coverage:
+ *   PT-CROSS-CHECK-1: Peer-collusion detection via agreement-rate tracking.
+ *   PT-CROSS-CHECK-2: Tier-spoofing prevention via queue auth check.
+ *   PT-CROSS-CHECK-3: Cycle-replay prevention via terminated-cycle guard.
+ *
+ * Compliance bindings:
+ *   - EU AI Act Art. 14: Human oversight of high-risk AI outputs.
+ *   - HIPAA 164.308(a)(3): Workforce controls for access to PHI processing agents.
+ *   - SOC 2 CC1.4: Control environment -- independent verification of agent output.
+ *   - ISO 27001 A.6.1.1: Information security roles and responsibilities.
+ *   - NIST 800-53 AU-12: Audit record generation -- cross-check outcome logged.
+ *
+ * BUILD_PLAN V3 line 259: External cross-check option (second agent or human verifies
+ * reflection outcome via approval queue).
+ *
+ * @connexum/ai-governance
+ */
+import { AuditIntegrity } from '../audit/audit-integrity';
+import { ApprovalQueue } from '../governance/approval-queue';
+/** Approval-queue tier string for all entries created by this enforcer. */
+export declare const SELF_REFLECTION_CROSS_CHECK_TIER = "SELF_REFLECTION_CROSS_CHECK";
+export declare class CrossCheckConfigError extends Error {
+    constructor(message: string);
+}
+export declare class CycleAlreadyTerminatedError extends Error {
+    readonly cycleId: string;
+    constructor(cycleId: string, reason?: string);
+}
+export type CrossCheckMode = 'peer-agent' | 'human-only';
+export type PeerVerdict = 'accept' | 'reject' | 'inconclusive';
+export interface PeerAgentVerdictRequest {
+    agentId: string;
+    peerAgentId: string;
+    reflectionOutcome: ReflectionOutcome;
+}
+export interface PeerAgentVerdictResponse {
+    verdict: PeerVerdict;
+    confidence: number;
+    reasoning?: string;
+}
+/**
+ * Operator-supplied callback to invoke the peer agent.
+ * The enforcer does NOT ship a peer-agent runner; operators wire their own.
+ */
+export type PeerAgentVerdictCallback = (request: PeerAgentVerdictRequest) => Promise<PeerAgentVerdictResponse>;
+export interface ReflectionOutcome {
+    kind: 'self-check';
+    verdict: 'accept' | 'regenerate';
+    text?: string;
+}
+export interface CrossCheckConfig {
+    mode: CrossCheckMode;
+    /** Required when mode is 'peer-agent'. Must differ from agentId. */
+    peerAgentId?: string;
+    /**
+     * Compliance pack IDs governing this cross-check.
+     * Must be non-empty (pack-binding primacy invariant).
+     */
+    packBinding: string[];
+    /**
+     * Milliseconds to wait for the peer agent before treating as inconclusive.
+     * Default: 10_000.
+     */
+    peerTimeoutMs?: number;
+    /**
+     * Size of the rolling window for PT-CROSS-CHECK-1 collusion detection.
+     * Default: 20.
+     */
+    collusionWindow?: number;
+    /**
+     * Accept-rate fraction at or above which PEER_COLLUSION_SUSPECTED is emitted.
+     * Default: 1.0 (100% accepts).
+     */
+    collusionAcceptThreshold?: number;
+}
+/** Outcome of evaluateReflection. */
+export interface CrossCheckResult {
+    /**
+     * 'continue'   -- peer accepted; cycle may proceed.
+     * 'queued'     -- queued for human review (peer rejected / inconclusive / human-only mode).
+     * 'terminated' -- cycle was previously terminated; this call is a no-op guard.
+     */
+    status: 'continue' | 'queued' | 'terminated';
+    /** Approval queue entry ID when status is 'queued'. */
+    approvalId?: string;
+    /** Peer verdict when in peer-agent mode. */
+    peerVerdict?: PeerVerdict;
+    /** Whether collusion was suspected in this evaluation. */
+    collusionSuspected?: boolean;
+}
+/** Outcome of resumeFromApproval. */
+export interface ResumeResult {
+    status: 'continue' | 'terminated';
+}
+export declare class ExternalCrossCheckEnforcer {
+    private readonly peerCallback?;
+    private readonly auditIntegrity?;
+    private readonly approvalQueue;
+    /** Registry: `${orgId}::${agentId}` -> config */
+    private readonly configs;
+    /**
+     * Registry: approvalId -> { orgId, agentId, cycleId, packBinding }
+     * Used by resumeFromApproval to retrieve the cycle context.
+     */
+    private readonly pendingResumes;
+    /**
+     * Terminated cycles: `${orgId}::${agentId}::${cycleId}`
+     * Populated when resumeFromApproval returns 'terminated'.
+     * PT-CROSS-CHECK-3: guards against cycle replay under the same cycleId.
+     */
+    private readonly terminatedCycles;
+    /** Stale queue entries that were auto-resolved due to cycle replay. */
+    private readonly staleResolvedEntries;
+    private readonly collusionTracker;
+    constructor(opts: {
+        approvalQueue: ApprovalQueue;
+        peerCallback?: PeerAgentVerdictCallback;
+        auditIntegrity?: AuditIntegrity;
+    });
+    /**
+     * Register a cross-check rule for an agent.
+     *
+     * @throws {CrossCheckConfigError} if packBinding is empty.
+     * @throws {CrossCheckConfigError} if mode is 'peer-agent' and peerAgentId equals agentId.
+     * @throws {CrossCheckConfigError} if mode is 'peer-agent' and peerAgentId is not supplied.
+     */
+    configure(orgId: string, agentId: string, mode: CrossCheckMode, peerAgentId?: string, packBinding?: string[], opts?: {
+        peerTimeoutMs?: number;
+        collusionWindow?: number;
+        collusionAcceptThreshold?: number;
+    }): void;
+    /**
+     * Evaluate a self-reflection outcome.
+     *
+     * In 'peer-agent' mode:
+     *   - Invokes the PeerAgentVerdictCallback with a timeout.
+     *   - 'accept' -> emit SELF_REFLECTION_CROSS_CHECK_PASSED (NOTICE); returns { status: 'continue' }.
+     *   - 'reject' | 'inconclusive' -> emit SELF_REFLECTION_CROSS_CHECK_DISAGREEMENT (WARNING);
+     *     create SELF_REFLECTION_CROSS_CHECK queue entry; returns { status: 'queued', approvalId }.
+     *   - Peer timeout -> treated as 'inconclusive'.
+     *
+     * In 'human-only' mode:
+     *   - Always creates a queue entry; returns { status: 'queued', approvalId }.
+     *
+     * Reflection text is NEVER stored. Only its SHA-256 hash enters the audit chain.
+     *
+     * @throws {Error} if no config is registered for this agent.
+     * @throws {CycleAlreadyTerminatedError} if the cycle was already terminated.
+     */
+    evaluateReflection(orgId: string, agentId: string, cycleId: string, reflectionOutcome: ReflectionOutcome): Promise<CrossCheckResult>;
+    /**
+     * Called by the approval-queue resolver when a human resolves a
+     * SELF_REFLECTION_CROSS_CHECK queue entry.
+     *
+     * approved: true  -> { status: 'continue' }
+     * approved: false -> marks cycle as terminated, { status: 'terminated' }
+     *
+     * PT-CROSS-CHECK-3: once a cycle is terminated, any subsequent evaluateReflection
+     * call for the same cycleId throws CycleAlreadyTerminatedError.
+     *
+     * PT-CROSS-CHECK-2: this method does NOT bypass the approval-queue's auth check.
+     * The queue's resolve() method validates the resolvedBy identity and HMAC token
+     * before this is called. Self-approval is blocked at the queue layer.
+     *
+     * @throws {Error} if approvalId is not tracked by this enforcer.
+     */
+    resumeFromApproval(approvalId: string, approved: boolean, resolvedBy?: string): ResumeResult;
+    /**
+     * Auto-resolve any pending queue entries for a terminated cycleId as
+     * 'terminated_by_cycle_replay'. Called when a new cycle attempts to use
+     * a cycleId that was already terminated.
+     */
+    resolveStaleEntriesForCycle(orgId: string, agentId: string, cycleId: string): string[];
+    /** Whether a cross-check config is registered for this agent. */
+    isConfigured(orgId: string, agentId: string): boolean;
+    /** Whether a cycle is marked as terminated. */
+    isCycleTerminated(orgId: string, agentId: string, cycleId: string): boolean;
+    /** Expose the collusion tracker for testing PT-CROSS-CHECK-1. */
+    getPeerAgreementWindow(peerAgentId: string): boolean[];
+    private configKey;
+    private cycleKey;
+    private getConfig;
+    private invokePeer;
+    private createQueueEntry;
+    private emitAuditEvent;
+}
+//# sourceMappingURL=external-cross-check.d.ts.map

package/dist/security/external-cross-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-cross-check.d.ts","sourceRoot":"","sources":["../../src/security/external-cross-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAM7D,2EAA2E;AAC3E,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAqB9E,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAQ7C;AAMD,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,CAAC;AAEzD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,OAAO,EAAE,uBAAuB,KAC7B,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,QAAQ,GAAG,YAAY,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAQD,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC;IAC7C,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,qCAAqC;AACrC,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;CACnC;AAyDD,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAiB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAE9C,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IAEJ;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IAEtD,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA6B;IAElE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;gBAE5C,IAAI,EAAE;QAChB,aAAa,EAAE,aAAa,CAAC;QAC7B,YAAY,CAAC,EAAE,wBAAwB,CAAC;QACxC,cAAc,CAAC,EAAE,cAAc,CAAC;KACjC;IAeD;;;;;;OAMG;IACH,SAAS,CACP,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,cAAc,EACpB,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,GAAE,MAAM,EAAO,EAC1B,IAAI,GAAE;QACJ,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,wBAAwB,CAAC,EAAE,MAAM,CAAC;KAC9B,GACL,IAAI;IAyCP;;;;;;;;;;;;;;;;;OAiBG;IACG,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,OAAO,CAAC,gBAAgB,CAAC;IA+G5B;;;;;;;;;;;;;;;OAeG;IACH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,OAAO,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,YAAY;IAgDf;;;;OAIG;IACH,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAgCtF,iEAAiE;IACjE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAIrD,+CAA+C;IAC/C,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAI3E,iEAAiE;IACjE,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,EAAE;IAQtD,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,SAAS;YAWH,UAAU;IAgCxB,OAAO,CAAC,gBAAgB;IA6BxB,OAAO,CAAC,cAAc;CAkBvB"}