@mnemom/mnemom 0.17.36 → 0.17.38-next.0

package/node_modules/@mnemom/aip-verifier/dist/index.d.ts

@@ -1,330 +0,0 @@
-import { S as SignedStatement, R as RecordBundle, a as RecordJwks, b as RecordVerificationResult, c as StatementVerificationResult } from './claim-lint-CVITIRcU.js';
-export { B as BUNDLE_TYP, C as CARD_LINE_CLASSES, d as CARD_SURFACES, e as CLAIM_CLASSES, f as CLAIM_TABLE, g as CardLineClass, h as CheckpointCitation, i as ClaimClass, j as ClaimField, k as ClaimTableEntry, l as ConductRecordStatement, E as ESTIMATE_FORBIDDEN_SURFACES, F as FLAGS, m as Flag, G as GOAL_MODES, n as GoalMode, L as LINE_KEY_FIELDS, o as LINT_RULES, p as LintResult, q as LintRule, r as LintViolation, M as MODES, s as MODE_VERBS, t as Mode, O as OutcomeStatement, P as PROTECTION_VERDICTS, u as PRRecordStatement, v as ProtectionVerdict, w as REASONS, x as Reason, y as RecordJwk, z as RecordShareCardLine, A as RenderedLine, D as Rendering, H as STATEMENT_TYPES, I as SURFACES, J as ShareCardStatement, K as SignedStatementBase, N as StatementFlag, Q as StatementGoalBlock, T as StatementLine, U as StatementProtectionAct, V as StatementTyp, W as Surface, X as attachLineContext, Y as fieldForLineKey, Z as isClaimField, _ as lintRendering, $ as lintRenderings, a0 as protectionVerb } from './claim-lint-CVITIRcU.js';
-
-/**
- * Certificate and proof types for AIP integrity verification.
- *
- * These types describe the structure of an integrity certificate
- * produced by the AIP attestation pipeline, and the result of
- * verifying one offline.
- */
-/** A single concern identified during integrity analysis. */
-interface CertificateConcern {
-    category: string;
-    severity: string;
-    description: string;
-}
-/** Subject of the integrity certificate — identifies what was analyzed. */
-interface CertificateSubject {
-    checkpoint_id: string;
-    agent_id: string;
-    session_id: string;
-    card_id: string;
-}
-/** Claims made by the integrity analysis. */
-interface CertificateClaims {
-    verdict: string;
-    concerns: CertificateConcern[];
-    confidence: number;
-    reasoning_summary: string;
-    analysis_model: string;
-    analysis_duration_ms: number;
-}
-/** Cryptographic commitments over the analysis inputs. */
-interface InputCommitments {
-    thinking_block_hash: string;
-    card_hash: string;
-    values_hash: string;
-    context_hash: string;
-    model_version: string;
-    combined_commitment: string;
-}
-/** Ed25519 signature proof. */
-interface SignatureProof {
-    algorithm: "Ed25519";
-    key_id: string;
-    value: string;
-    signed_payload: string;
-}
-/** Hash-chain position proof. */
-interface ChainProof {
-    chain_hash: string;
-    prev_chain_hash: string | null;
-    position: number;
-}
-/** A single sibling node in a Merkle inclusion proof. */
-interface MerkleSibling {
-    hash: string;
-    position: "left" | "right";
-}
-/** Merkle tree inclusion proof. */
-interface MerkleProof {
-    leaf_hash: string;
-    leaf_index: number;
-    root: string;
-    tree_size: number;
-    inclusion_proof: MerkleSibling[];
-}
-/** Zero-knowledge verdict derivation proof (SP1 STARK). */
-interface VerdictDerivationProof {
-    method: "SP1-STARK" | "RISC-Zero-STARK";
-    image_id: string;
-    receipt: string;
-    journal: string;
-    verified_at: string;
-}
-/** All cryptographic proofs attached to a certificate. */
-interface CertificateProofs {
-    signature: SignatureProof;
-    chain: ChainProof;
-    merkle: MerkleProof | null;
-    verdict_derivation: VerdictDerivationProof | null;
-}
-/** Verification endpoint URLs (informational, not used offline). */
-interface VerificationEndpoints {
-    keys_url: string;
-    certificate_url: string;
-    verify_url: string;
-}
-/**
- * An AIP Integrity Certificate.
- *
- * Produced by the attestation pipeline and cryptographically bound
- * to the integrity checkpoint it attests.
- */
-interface IntegrityCertificate {
-    "@context": "https://mnemom.ai/aip/v1";
-    type: "IntegrityCertificate";
-    version: "1.0.0";
-    certificate_id: string;
-    issued_at: string;
-    subject: CertificateSubject;
-    claims: CertificateClaims;
-    input_commitments: InputCommitments;
-    proofs: CertificateProofs;
-    verification: VerificationEndpoints;
-}
-/** Result of a single verification check. */
-interface CheckResult {
-    valid: boolean;
-    details: string;
-}
-/** Aggregated result of verifying an integrity certificate. */
-interface VerificationResult {
-    valid: boolean;
-    checks: {
-        signature: CheckResult;
-        chain: CheckResult;
-        merkle: CheckResult | null;
-        verdict_derivation: CheckResult | null;
-    };
-    certificate_id: string;
-    verified_at: string;
-}
-/** Options for the certificate verifier. */
-interface VerifierOptions {
-    /** Ed25519 public key as hex string or Uint8Array. */
-    publicKey: string | Uint8Array;
-    /** Expected Merkle root (hex). If provided, Merkle proof is verified against it. */
-    merkleRoot?: string;
-    /** Expected SP1 image ID (hex). If provided, verdict derivation proof is checked against it. */
-    verdictDerivationImageId?: string;
-}
-
-/**
- * Main certificate verification logic.
- *
- * Given a trusted public key (and optionally a Merkle root), verifies
- * an AIP Integrity Certificate entirely offline.
- */
-
-/**
- * Verify an AIP Integrity Certificate offline.
- *
- * Performs four checks:
- *
- * 1. **Signature** — Ed25519 verification of the signed payload.
- * 2. **Chain** — Recomputes chain hash and compares with the certificate.
- * 3. **Merkle** — If the certificate carries a Merkle proof *and*
- *    `options.merkleRoot` is supplied, verifies the inclusion proof.
- *    Otherwise the check is skipped (returns `null`).
- * 4. **Verdict derivation** — If the certificate carries a verdict derivation
- *    proof, verifies structural integrity (journal fields match certificate
- *    claims). STARK receipt verification is deferred to server-side.
- *
- * @param certificate - The integrity certificate to verify.
- * @param options     - Public key and optional Merkle root.
- * @returns Verification result with per-check details.
- */
-declare function verifyCertificate(certificate: IntegrityCertificate, options: VerifierOptions): Promise<VerificationResult>;
-
-/**
- * Offline verification of record statements and bundles.
- *
- * `verify(statement | bundle, jwks)` is the one entry point the CLI, CI,
- * the PR check and the web pages all call. It never touches the network:
- * the caller hands it the published JWKS.
- *
- * Order of checks for one statement, fail-closed, same as the SDK's
- * `JwksClient.verify` (mnemom-platform `shared/sdk/src/jwks.ts`):
- *
- * 1. shape and `typ` (domain separation, T3)
- * 2. `alg`, exact-match `EdDSA`, before any key material is touched
- * 3. `signing_key_id` and `signature` present and well formed
- * 4. key lookup by `kid`; the key must be an Ed25519 OKP key with `alg: EdDSA`
- * 5. Ed25519 over `canonicalJson(statement minus signature)`
- * 6. per-type rules (share card line classes, verdict coverage)
- * 7. flags on cited checkpoints (T12), which never change `valid`
- */
-
-/**
- * The bytes a statement's signature covers: canonical JSON of the statement
- * with `signature` removed. Exported so a signer in another language can be
- * checked against it byte for byte.
- */
-declare function statementCommitment(statement: Record<string, unknown>): string;
-/** Lowercase sha256 hex of a statement's commitment: how statements link (T2). */
-declare function statementDigest(statement: Record<string, unknown>): string;
-/**
- * Verify one signed statement against the published JWKS.
- * Never throws and never calls the network.
- */
-declare function verifyStatement(statement: unknown, jwks: RecordJwks): Promise<StatementVerificationResult>;
-/**
- * Verify a statement or a whole bundle against the published JWKS.
- *
- * For a bundle every statement is verified on its own, then the links
- * between them are checked: a digest that names a statement in the bundle
- * must name one of the right type. A digest that names nothing in the
- * bundle is flagged, not failed, because a long session's earlier
- * statements may live outside the bundle (design, open questions).
- */
-declare function verify(input: SignedStatement | RecordBundle | unknown, jwks: RecordJwks): Promise<RecordVerificationResult>;
-
-/**
- * The render-estimate rule (criterion K4.4, design decision T8).
- *
- * The savings estimate stays off every rendering until the estimator gives a
- * conservative net lower bound. Today's estimator overstates: it uses median
- * benchmark savings, starts counting at 60k tokens, does not subtract μ, and
- * never shows a loss. `estimateQualifies` is the registry's rule written as a
- * pure function over the estimator's self-description, so a renderer and the
- * verifier reach the same answer. Even when it qualifies, the estimate never
- * appears on a PR comment or a share card.
- */
-/** Tokens above which the gateway's context work is counted (the 200k line). */
-declare const ESTIMATE_COUNTING_FLOOR_TOKENS = 200000;
-interface EstimateDescription {
-    /** How the per-request saving is derived. Only a lower bound qualifies. */
-    method: "lower_bound" | "median" | "mean" | string;
-    /** Tokens from which the estimator starts counting. Must be at least the 200k line. */
-    counting_floor_tokens: number;
-    /** True when μ is subtracted from the gross saving. */
-    net_of_mu: boolean;
-    /** True when the estimator reports a loss as a negative figure rather than clamping at zero. */
-    reports_loss: boolean;
-    /** The net lower bound itself, in the same currency as model cost. */
-    net_lower_bound?: number;
-    [k: string]: unknown;
-}
-declare const ESTIMATE_DISQUALIFIERS: {
-    readonly not_an_object: "not_an_object";
-    readonly method_not_lower_bound: "method_not_lower_bound";
-    readonly counting_floor_below_200k: "counting_floor_below_200k";
-    readonly not_net_of_mu: "not_net_of_mu";
-    readonly never_shows_loss: "never_shows_loss";
-    readonly value_not_finite: "value_not_finite";
-};
-type EstimateDisqualifier = (typeof ESTIMATE_DISQUALIFIERS)[keyof typeof ESTIMATE_DISQUALIFIERS];
-interface EstimateQualification {
-    qualifies: boolean;
-    reasons: EstimateDisqualifier[];
-}
-/** The registry's `estimate_qualifies` rule: a conservative net lower bound. */
-declare function estimateQualifies(estimate: unknown): EstimateQualification;
-declare const RENDER_ESTIMATE_REASONS: {
-    readonly unknown_surface: "unknown_surface";
-    readonly surface_never_shows_estimate: "surface_never_shows_estimate";
-    readonly estimate_does_not_qualify: "estimate_does_not_qualify";
-};
-interface RenderEstimateDecision {
-    render: boolean;
-    reasons: string[];
-}
-/**
- * Whether a rendering on `surface` may show the estimate. False on a PR
- * comment or any card regardless of the estimate; otherwise the registry's
- * rule decides. A missing estimate never renders.
- */
-declare function shouldRenderEstimate(estimate: unknown, surface: unknown): RenderEstimateDecision;
-
-/**
- * Canonical JSON, byte-identical to mnemom-api `src/attestation/crypto.ts`
- * (`canonicalJson`): object keys sorted recursively, no whitespace, arrays
- * kept in order, primitives through `JSON.stringify`.
- *
- * Every signed record statement commits to this serialisation of the
- * statement minus its `signature` field, exactly the way
- * `AAP-TransparencyRoot/v1` does (mnemom-api `src/transparency/root_publisher.ts`).
- */
-declare function canonicalJson(value: unknown): string;
-
-/**
- * AAP-ShareCard/v1 — canonicalizer and offline verifier (MNE-9022).
- *
- * A share card is a signed set of numeric lines, each committing to the hash
- * of the signed statement it was derived from. Signing follows the
- * AAP-TransparencyRoot/v1 pattern (mnemom-api src/transparency/root_publisher.ts):
- * Ed25519 over canonical JSON (sorted keys, no whitespace) of the card MINUS
- * `signature`, with its own pinned `typ`. Renderers must display only the
- * `lines` returned by a successful verification.
- *
- * This module verifies only. It never handles private keys.
- */
-
-declare const SHARE_CARD_TYP = "AAP-ShareCard/v1";
-type ShareCardLineKind = "count" | "revert";
-interface ShareCardLine {
-    id: string;
-    kind: ShareCardLineKind;
-    label: string;
-    value: number;
-    statement_hash: string;
-}
-interface ShareCardStatementRef {
-    typ: string;
-    hash: string;
-}
-interface ShareCard {
-    typ: string;
-    card_id: string;
-    period: {
-        start: string;
-        end: string;
-    };
-    issued_at: string;
-    signing_key_id: string;
-    statements: ShareCardStatementRef[];
-    lines: ShareCardLine[];
-    /** base64url Ed25519 signature over canonicalJson(card minus signature). */
-    signature: string;
-}
-interface ShareCardVerification {
-    valid: boolean;
-    /** Empty unless `valid`. Renderers must show only these. */
-    lines: ShareCardLine[];
-    errors: string[];
-}
-/** The exact string that is signed: canonical JSON of the card minus `signature`. */
-declare function shareCardSigningInput(card: Record<string, unknown>): string;
-/** Structural validation (no signature check). Returns error strings. */
-declare function validateShareCardShape(card: unknown): string[];
-/**
- * Verify a share card offline against a trusted Ed25519 public key.
- * Fails closed: on any error `lines` is empty so nothing can be rendered.
- */
-declare function verifyShareCard(card: unknown, options: {
-    publicKey: string | Uint8Array;
-}): Promise<ShareCardVerification>;
-
-export { type CertificateClaims, type CertificateConcern, type CertificateProofs, type CertificateSubject, type ChainProof, type CheckResult, ESTIMATE_COUNTING_FLOOR_TOKENS, ESTIMATE_DISQUALIFIERS, type EstimateDescription, type EstimateDisqualifier, type EstimateQualification, type InputCommitments, type IntegrityCertificate, type MerkleProof, type MerkleSibling, RENDER_ESTIMATE_REASONS, RecordBundle, RecordJwks, RecordVerificationResult, type RenderEstimateDecision, SHARE_CARD_TYP, type ShareCard, type ShareCardLine, type ShareCardLineKind, type ShareCardStatementRef, type ShareCardVerification, type SignatureProof, SignedStatement, StatementVerificationResult, type VerdictDerivationProof, type VerificationEndpoints, type VerificationResult, type VerifierOptions, canonicalJson, estimateQualifies, shareCardSigningInput, shouldRenderEstimate, statementCommitment, statementDigest, validateShareCardShape, verify, verifyCertificate, verifyShareCard, verifyStatement };