@mnemom/agent-integrity-protocol 0.1.6 → 0.2.0

package/dist/index.cjs

@@ -1,6 +1,29 @@
 'use strict';
 
 var crypto = require('crypto');
+var ed = require('@noble/ed25519');
+var sha2_js = require('@noble/hashes/sha2.js');
+var utils_js = require('@noble/hashes/utils.js');
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var ed__namespace = /*#__PURE__*/_interopNamespace(ed);
 
 // src/window/state.ts
 function createWindowState(sessionId) {
@@ -91,6 +114,16 @@ var DEFAULT_CONSCIENCE_VALUES = [
     content: "Risk of agreeing with the user to avoid conflict rather than providing honest assessment"
   }
 ];
+var EU_COMPLIANCE_WINDOW_CONFIG = {
+  max_size: 10,
+  mode: "sliding",
+  session_boundary: "reset",
+  max_age_seconds: 7200
+};
+var EU_COMPLIANCE_FAILURE_POLICY = {
+  mode: "fail_closed",
+  analysis_timeout_ms: 15e3
+};
 var CHECKPOINT_ID_PREFIX = "ic-";
 var DRIFT_ALERT_ID_PREFIX = "ida-";
 var REGISTRATION_ID_PREFIX = "reg-";
@@ -1447,6 +1480,7 @@ async function callAnalysisLLM(llmConfig, system, user, timeoutMs) {
   const controller = new AbortController();
   const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
   try {
+    const systemPayload = llmConfig.enable_prompt_caching ? [{ type: "text", text: system, cache_control: { type: "ephemeral" } }] : system;
     const response = await fetch(`${llmConfig.base_url}/v1/messages`, {
       method: "POST",
       headers: {
@@ -1457,7 +1491,7 @@ async function callAnalysisLLM(llmConfig, system, user, timeoutMs) {
       body: JSON.stringify({
         model: llmConfig.model,
         max_tokens: llmConfig.max_tokens,
-        system,
+        system: systemPayload,
         messages: [{ role: "user", content: user }]
       }),
       signal: controller.signal
@@ -1539,6 +1573,99 @@ function constantTimeEqual(a, b) {
   }
   return result === 0;
 }
+function base64ToUint8(b64) {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+}
+var encoder = new TextEncoder();
+function sha256Hex(input) {
+  const hash = sha2_js.sha256(encoder.encode(input));
+  return utils_js.bytesToHex(hash);
+}
+function computeNodeHash(left, right) {
+  return sha256Hex(left + right);
+}
+async function verifySignature2(certificate, publicKey) {
+  try {
+    const signatureBytes = base64ToUint8(certificate.proofs.signature.value);
+    const messageBytes = encoder.encode(certificate.proofs.signature.signed_payload);
+    const valid = await ed__namespace.verifyAsync(signatureBytes, messageBytes, publicKey);
+    return {
+      valid,
+      details: valid ? "Ed25519 signature verified successfully" : "Ed25519 signature verification failed"
+    };
+  } catch (err) {
+    return {
+      valid: false,
+      details: `Signature verification error: ${err instanceof Error ? err.message : "unknown"}`
+    };
+  }
+}
+function verifyChain(certificate) {
+  try {
+    const chain = certificate.proofs.chain;
+    if (!chain || !chain.chain_hash) {
+      return { valid: false, details: "No chain proof data in certificate" };
+    }
+    const preimage = `${chain.prev_chain_hash || "genesis"}|${certificate.subject.checkpoint_id}|${certificate.claims.verdict}|${certificate.input_commitments.thinking_block_hash}|${certificate.input_commitments.combined_commitment}|${certificate.issued_at}`;
+    const recomputed = sha256Hex(preimage);
+    const valid = recomputed === chain.chain_hash;
+    return {
+      valid,
+      details: valid ? "Chain hash verified successfully" : "Recomputed chain hash does not match certificate"
+    };
+  } catch (err) {
+    return {
+      valid: false,
+      details: `Chain verification error: ${err instanceof Error ? err.message : "unknown"}`
+    };
+  }
+}
+function verifyMerkle(certificate, expectedRoot) {
+  const merkle = certificate.proofs.merkle;
+  if (!merkle) {
+    return null;
+  }
+  try {
+    const root = expectedRoot ?? merkle.root;
+    let current = merkle.leaf_hash;
+    for (const sibling of merkle.inclusion_proof) {
+      if (sibling.position === "left") {
+        current = computeNodeHash(sibling.hash, current);
+      } else {
+        current = computeNodeHash(current, sibling.hash);
+      }
+    }
+    const valid = current === root;
+    return {
+      valid,
+      details: valid ? "Merkle inclusion proof verified successfully" : "Merkle inclusion proof verification failed \u2014 computed root does not match"
+    };
+  } catch (err) {
+    return {
+      valid: false,
+      details: `Merkle verification error: ${err instanceof Error ? err.message : "unknown"}`
+    };
+  }
+}
+async function verifyCertificate(certificate, publicKey, merkleRoot) {
+  const signatureResult = await verifySignature2(certificate, publicKey);
+  const chainResult = verifyChain(certificate);
+  const merkleResult = verifyMerkle(certificate, merkleRoot);
+  const valid = signatureResult.valid && chainResult.valid && (merkleResult === null || merkleResult.valid);
+  return {
+    valid,
+    checks: {
+      signature: signatureResult,
+      chain: chainResult,
+      merkle: merkleResult
+    }
+  };
+}
 
 exports.AIP_CONTENT_TYPE = AIP_CONTENT_TYPE;
 exports.AIP_SIGNATURE_HEADER = AIP_SIGNATURE_HEADER;
@@ -1560,6 +1687,8 @@ exports.DEFAULT_WINDOW_MAX_SIZE = DEFAULT_WINDOW_MAX_SIZE;
 exports.DRIFT_ALERT_ID_PREFIX = DRIFT_ALERT_ID_PREFIX;
 exports.DRIFT_SEVERITY_LOW_THRESHOLD = DRIFT_SEVERITY_LOW_THRESHOLD;
 exports.DRIFT_SEVERITY_MEDIUM_THRESHOLD = DRIFT_SEVERITY_MEDIUM_THRESHOLD;
+exports.EU_COMPLIANCE_FAILURE_POLICY = EU_COMPLIANCE_FAILURE_POLICY;
+exports.EU_COMPLIANCE_WINDOW_CONFIG = EU_COMPLIANCE_WINDOW_CONFIG;
 exports.FallbackAdapter = FallbackAdapter;
 exports.GoogleAdapter = GoogleAdapter;
 exports.MAX_EVIDENCE_LENGTH = MAX_EVIDENCE_LENGTH;
@@ -1585,6 +1714,7 @@ exports.mapVerdictToProceed = mapVerdictToProceed;
 exports.signPayload = signPayload;
 exports.summarizeCard = summarizeCard;
 exports.validateAgreement = validateAgreement;
+exports.verifyCertificate = verifyCertificate;
 exports.verifySignature = verifySignature;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map