@mnemom/agent-integrity-protocol 0.2.1 → 0.4.1

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var crypto = require('crypto');
+var crypto$1 = require('crypto');
 var ed = require('@noble/ed25519');
 var sha2_js = require('@noble/hashes/sha2.js');
 var utils_js = require('@noble/hashes/utils.js');
@@ -42,7 +42,7 @@ function createWindowState(sessionId) {
 }
 
 // src/constants.ts
-var AIP_VERSION = "0.1.0";
+var AIP_VERSION = "0.4.0";
 var ALGORITHM_VERSION = "1.0.0";
 var DEFAULT_SUSTAINED_CHECKS_THRESHOLD = 3;
 var DRIFT_SEVERITY_LOW_THRESHOLD = 0.7;
@@ -1183,11 +1183,27 @@ function validateConscienceContext(value) {
     consultation_depth: ctx.consultation_depth
   };
 }
+function extractFirstJsonObject(text) {
+  let depth = 0;
+  let start = -1;
+  for (let i = 0; i < text.length; i++) {
+    if (text[i] === "{") {
+      if (depth === 0) start = i;
+      depth++;
+    } else if (text[i] === "}") {
+      depth--;
+      if (depth === 0 && start !== -1) {
+        return text.slice(start, i + 1);
+      }
+    }
+  }
+  return null;
+}
 function checkIntegrity(input) {
   let jsonText = input.analysisResponse;
-  const jsonMatch = jsonText.match(/\{[\s\S]*\}/);
-  if (jsonMatch) {
-    jsonText = jsonMatch[0];
+  const extracted = extractFirstJsonObject(jsonText);
+  if (extracted) {
+    jsonText = extracted;
   }
   jsonText = jsonText.replace(/,\s*([}\]])/g, "$1");
   let parsed;
@@ -1209,7 +1225,23 @@ function checkIntegrity(input) {
   const conscienceContext = validateConscienceContext(
     parsed.conscience_context
   );
-  const checkpointId = `${CHECKPOINT_ID_PREFIX}${crypto.randomUUID()}`;
+  const crossValidationWarnings = [];
+  if (verdict === "clear") {
+    const criticalOrHigh = concerns.filter(
+      (c) => c.severity === "critical" || c.severity === "high"
+    );
+    if (criticalOrHigh.length > 0) {
+      const maxSeverity = criticalOrHigh.some((c) => c.severity === "critical") ? "critical" : "high";
+      crossValidationWarnings.push(
+        `Verdict is "clear" but ${criticalOrHigh.length} concern(s) have severity "${maxSeverity}". This may indicate an inconsistent analysis result.`
+      );
+    }
+  } else if (verdict === "boundary_violation" && concerns.length === 0) {
+    crossValidationWarnings.push(
+      `Verdict is "boundary_violation" but concerns array is empty. Expected at least one concern for a boundary violation.`
+    );
+  }
+  const checkpointId = `${CHECKPOINT_ID_PREFIX}${crypto$1.randomUUID()}`;
   const analysisMetadata = {
     analysis_model: input.analysisModel,
     analysis_duration_ms: input.analysisDurationMs,
@@ -1236,7 +1268,8 @@ function checkIntegrity(input) {
       window_size: input.windowPosition.window_size
     },
     analysis_metadata: analysisMetadata,
-    linked_trace_id: input.linkedTraceId ?? null
+    linked_trace_id: input.linkedTraceId ?? null,
+    ...crossValidationWarnings.length > 0 ? { cross_validation_warnings: crossValidationWarnings } : {}
   };
 }
 function mapVerdictToAction(verdict, concerns) {
@@ -1266,7 +1299,7 @@ function buildSignal(checkpoint, windowSummary) {
   };
 }
 function hashThinkingBlock(content) {
-  return crypto.createHash("sha256").update(content).digest("hex");
+  return crypto$1.createHash("sha256").update(content).digest("hex");
 }
 function createDriftState() {
   return {
@@ -1296,7 +1329,9 @@ function detectIntegrityDrift(state, checkpoint, windowCheckpoints, threshold) {
   for (const concern of checkpoint.concerns) {
     newState.streakCategories.push(concern.category);
   }
-  if (newState.sustainedNonclear >= effectiveThreshold && !newState.alertFired) {
+  const REALERT_INTERVAL = 5;
+  const shouldAlert = newState.sustainedNonclear >= effectiveThreshold && (!newState.alertFired || (newState.sustainedNonclear - effectiveThreshold) % REALERT_INTERVAL === 0);
+  if (shouldAlert) {
     newState.alertFired = true;
     const clearCount = windowCheckpoints.filter(
       (cp) => cp.verdict === "clear"
@@ -1313,7 +1348,7 @@ function detectIntegrityDrift(state, checkpoint, windowCheckpoints, threshold) {
     }
     const direction = inferDriftDirection(newState.streakCategories);
     const alert = {
-      alert_id: `${DRIFT_ALERT_ID_PREFIX}${crypto.randomUUID()}`,
+      alert_id: `${DRIFT_ALERT_ID_PREFIX}${crypto$1.randomUUID()}`,
       agent_id: checkpoint.agent_id,
       session_id: checkpoint.session_id,
       checkpoint_ids: [...newState.streakCheckpointIds],
@@ -1348,7 +1383,9 @@ function inferDriftDirection(categories) {
       prompt_injection: "injection_pattern",
       value_misalignment: "value_erosion",
       autonomy_violation: "autonomy_creep",
-      deceptive_reasoning: "deception_pattern"
+      deceptive_reasoning: "deception_pattern",
+      reasoning_corruption: "reasoning_degradation",
+      undeclared_intent: "intent_drift"
     };
     return CATEGORY_TO_DIRECTION[maxCategory] ?? "unknown";
   }
@@ -1381,7 +1418,7 @@ function createClient(config) {
       const adapter = provider ? registry.get(provider) : registry.detectFromUrl(config.analysis_llm.base_url);
       const thinking = adapter.extractThinking(responseBody) ?? adapter.extractThinkingFromStream(responseBody);
       if (!thinking) {
-        return buildSyntheticSignal(config, window, "clear");
+        return buildSyntheticSignal(config, window, "clear", void 0, void 0, "no_thinking_block");
       }
       const thinkingTokens = Math.ceil(thinking.content.length / 4);
       const minTokens = config.min_evidence_tokens ?? DEFAULT_MIN_EVIDENCE_TOKENS;
@@ -1391,7 +1428,8 @@ function createClient(config) {
           window,
           "clear",
           `Thinking block below minimum evidence threshold (${thinkingTokens} tokens < ${minTokens})`,
-          thinkingTokens
+          thinkingTokens,
+          "below_evidence_threshold"
         );
       }
       const prompt = buildConsciencePrompt({
@@ -1417,9 +1455,9 @@ function createClient(config) {
           );
         }
         if (failureMode === "fail_closed") {
-          return buildSyntheticSignal(config, window, "boundary_violation");
+          return buildSyntheticSignal(config, window, "boundary_violation", void 0, void 0, "analysis_failed");
         }
-        return buildSyntheticSignal(config, window, "clear");
+        return buildSyntheticSignal(config, window, "clear", void 0, void 0, "analysis_failed");
       }
       const analysisDurationMs = Date.now() - startTime;
       const thinkingHash = hashThinkingBlock(thinking.content);
@@ -1480,7 +1518,10 @@ function createClient(config) {
 function generateSessionId(cardId) {
   const hash = cardId.slice(0, 8);
   const hourBucket = Math.floor(Date.now() / 36e5);
-  return `sess-${hash}-${hourBucket}`;
+  const randomBytes = new Uint8Array(2);
+  crypto.getRandomValues(randomBytes);
+  const randomHex = Array.from(randomBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `sess-${hash}-${hourBucket}-${randomHex}`;
 }
 async function callAnalysisLLM(llmConfig, system, user, timeoutMs) {
   const controller = new AbortController();
@@ -1521,7 +1562,7 @@ async function callAnalysisLLM(llmConfig, system, user, timeoutMs) {
     clearTimeout(timeoutId);
   }
 }
-function buildSyntheticSignal(config, window, verdict, customReasoning, thinkingTokensOriginal) {
+function buildSyntheticSignal(config, window, verdict, customReasoning, thinkingTokensOriginal, syntheticReason) {
   const summary = window.getSummary();
   return {
     checkpoint: {
@@ -1555,7 +1596,9 @@ function buildSyntheticSignal(config, window, verdict, customReasoning, thinking
         truncated: false,
         extraction_confidence: 0
       },
-      linked_trace_id: null
+      linked_trace_id: null,
+      synthetic: true,
+      synthetic_reason: syntheticReason ?? "no_thinking_block"
     },
     proceed: verdict === "clear",
     recommended_action: verdict === "clear" ? "continue" : "deny_and_escalate",
@@ -1563,7 +1606,7 @@ function buildSyntheticSignal(config, window, verdict, customReasoning, thinking
   };
 }
 function signPayload(secret, payload) {
-  const hmac = crypto.createHmac("sha256", secret);
+  const hmac = crypto$1.createHmac("sha256", secret);
   hmac.update(payload);
   return `sha256=${hmac.digest("hex")}`;
 }
@@ -1572,11 +1615,14 @@ function verifySignature(secret, payload, signature) {
   return constantTimeEqual(expected, signature);
 }
 function constantTimeEqual(a, b) {
-  if (a.length !== b.length) return false;
+  const maxLen = Math.max(a.length, b.length);
+  const aPadded = a.padEnd(maxLen, "\0");
+  const bPadded = b.padEnd(maxLen, "\0");
   let result = 0;
-  for (let i = 0; i < a.length; i++) {
-    result |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  for (let i = 0; i < maxLen; i++) {
+    result |= aPadded.charCodeAt(i) ^ bPadded.charCodeAt(i);
   }
+  result |= a.length ^ b.length;
   return result === 0;
 }
 function base64ToUint8(b64) {