@monoes/monomindcli 1.19.0 → 2.0.1

package/dist/src/consensus/vote-signer.js

@@ -1,88 +0,0 @@
-/**
- * VoteSigner (Task 36)
- *
- * HMAC-SHA256 signing and verification for consensus votes.
- */
-import { createHmac, timingSafeEqual } from 'crypto';
-/** Max depth for canonicalize() to prevent stack overflow on deeply nested objects. */
-const MAX_CANONICALIZE_DEPTH = 32;
-/** Cap string inputs to prevent OOM when hashing very long strings. */
-const MAX_INPUT_LEN = 1024;
-/** Cap votes array to prevent OOM in weightedTally. */
-const MAX_VOTES = 1000;
-/**
- * Derive a signing key from a swarmId and session secret using HMAC-SHA256.
- */
-export function deriveSigningKey(swarmId, sessionSecret) {
-    return createHmac('sha256', sessionSecret.slice(0, MAX_INPUT_LEN)).update(swarmId.slice(0, MAX_INPUT_LEN)).digest();
-}
-/**
- * Sign a vote, producing a hex-encoded HMAC-SHA256 signature.
- */
-function canonicalize(val, depth = 0) {
-    // Guard against deeply-nested objects that would overflow the call stack.
-    if (depth > MAX_CANONICALIZE_DEPTH)
-        return '"[MaxDepth]"';
-    if (val === null || typeof val !== 'object')
-        return JSON.stringify(val);
-    if (Array.isArray(val))
-        return '[' + val.map(item => canonicalize(item, depth + 1)).join(',') + ']';
-    const sorted = Object.keys(val).sort().map(k => JSON.stringify(k) + ':' + canonicalize(val[k], depth + 1));
-    return '{' + sorted.join(',') + '}';
-}
-export function signVote(agentId, vote, decisionId, key) {
-    // Cap string fields to prevent OOM when hashing attacker-supplied inputs.
-    const safeAgentId = agentId.slice(0, MAX_INPUT_LEN);
-    const safeDecisionId = decisionId.slice(0, MAX_INPUT_LEN);
-    const payload = JSON.stringify({ agentId: safeAgentId, vote: canonicalize(vote), decisionId: safeDecisionId });
-    return createHmac('sha256', key).update(payload).digest('hex');
-}
-/**
- * CP-WBFT: Compute confidence-weighted vote tally.
- *
- * Each agent's vote is scaled by its confidence score (derived from a probe query)
- * before tallying. Agents that fail the probe receive weight 0.
- * Tolerates up to 85.7% Byzantine fault rate across topologies.
- *
- * Source: https://arxiv.org/abs/2511.10400 (CP-WBFT — AAAI 2026)
- */
-export function weightedTally(votes) {
-    // Cap votes array to prevent OOM from an oversized input.
-    const safeVotes = votes.length > MAX_VOTES ? votes.slice(0, MAX_VOTES) : votes;
-    let weightedApproval = 0;
-    let weightedRejection = 0;
-    let totalWeight = 0;
-    for (const { vote, confidence } of safeVotes) {
-        const w = Math.max(0, Math.min(1, confidence)); // clamp to [0,1]
-        totalWeight += w;
-        if (vote) {
-            weightedApproval += w;
-        }
-        else {
-            weightedRejection += w;
-        }
-    }
-    return {
-        approved: safeVotes.filter(v => v.vote).length,
-        rejected: safeVotes.filter(v => !v.vote).length,
-        weightedApproval,
-        weightedRejection,
-        quorum: totalWeight > 0 && weightedApproval / totalWeight > 0.5,
-    };
-}
-/**
- * Verify a vote signature using constant-time comparison.
- * Returns true when the signature is valid.
- */
-export function verifyVote(agentId, vote, decisionId, signature, key) {
-    // Guard: odd-length or non-hex signature string causes Buffer.from to throw.
-    if (!/^[0-9a-fA-F]{64}$/.test(signature))
-        return false;
-    const expected = signVote(agentId, vote, decisionId, key);
-    const sigBuf = Buffer.from(signature, 'hex');
-    const expBuf = Buffer.from(expected, 'hex');
-    if (sigBuf.length !== expBuf.length)
-        return false;
-    return timingSafeEqual(sigBuf, expBuf);
-}
-//# sourceMappingURL=vote-signer.js.map

package/dist/src/consensus/vote-signer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vote-signer.js","sourceRoot":"","sources":["../../../src/consensus/vote-signer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAErD,uFAAuF;AACvF,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,uEAAuE;AACvE,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,uDAAuD;AACvD,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,aAAqB;IACrE,OAAO,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACtH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IAC3C,0EAA0E;IAC1E,IAAI,KAAK,GAAG,sBAAsB;QAAE,OAAO,cAAc,CAAC;IAC1D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAClD,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,YAAY,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAC5F,CAAC;IACF,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,IAAa,EACb,UAAkB,EAClB,GAAW;IAEX,0EAA0E;IAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/G,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAoE;IAEpE,0DAA0D;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/E,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,SAAS,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB;QACjE,WAAW,IAAI,CAAC,CAAC;QACjB,IAAI,IAAI,EAAE,CAAC;YACT,gBAAgB,IAAI,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,iBAAiB,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM;QAC9C,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM;QAC/C,gBAAgB;QAChB,iBAAiB;QACjB,MAAM,EAAE,WAAW,GAAG,CAAC,IAAI,gBAAgB,GAAG,WAAW,GAAG,GAAG;KAChE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,IAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,GAAW;IAEX,6EAA6E;IAC7E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC"}

package/dist/src/mcp-tools/workflow-tools.d.ts

@@ -1,8 +0,0 @@
-/**
- * Workflow MCP Tools for CLI
- *
- * Tool definitions for workflow automation and orchestration.
- */
-import { type MCPTool } from './types.js';
-export declare const workflowTools: MCPTool[];
-//# sourceMappingURL=workflow-tools.d.ts.map

package/dist/src/mcp-tools/workflow-tools.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"workflow-tools.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/workflow-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,KAAK,OAAO,EAAiB,MAAM,YAAY,CAAC;AAyGzD,eAAO,MAAM,aAAa,EAAE,OAAO,EA2rBlC,CAAC"}