@nexart/ai-execution 0.8.0 → 0.9.0

package/dist/index.cjs

@@ -33,6 +33,7 @@ __export(src_exports, {
   CerAttestationError: () => CerAttestationError,
   CerVerificationError: () => CerVerificationError,
   CerVerifyCode: () => CerVerifyCode,
+  ReasonCode: () => ReasonCode,
   RunBuilder: () => RunBuilder,
   attest: () => attest,
   attestIfNeeded: () => attestIfNeeded,
@@ -65,6 +66,7 @@ __export(src_exports, {
   toCanonicalJson: () => toCanonicalJson,
   validateProfile: () => validateProfile,
   verify: () => verifyCer,
+  verifyAiCerBundleDetailed: () => verifyAiCerBundleDetailed,
   verifyAief: () => verifyAief,
   verifyBundleAttestation: () => verifyBundleAttestation,
   verifyCer: () => verifyCer,
@@ -459,7 +461,7 @@ function certifyDecision(params) {
     conversationId: params.conversationId,
     prevStepHash: params.prevStepHash
   });
-  return sealCer(snapshot, { meta: params.meta });
+  return sealCer(snapshot, { createdAt: params.createdAt, meta: params.meta });
 }
 
 // src/run.ts
@@ -2540,11 +2542,92 @@ async function certifyAndAttestRun(steps, options) {
     finalStepHash: runSummary.finalStepHash
   };
 }
+
+// src/cerProtocol.ts
+var ReasonCode = {
+  BUNDLE_HASH_MISMATCH: "BUNDLE_HASH_MISMATCH",
+  NODE_SIGNATURE_INVALID: "NODE_SIGNATURE_INVALID",
+  NODE_SIGNATURE_MISSING: "NODE_SIGNATURE_MISSING",
+  RECEIPT_HASH_MISMATCH: "RECEIPT_HASH_MISMATCH",
+  SCHEMA_VERSION_UNSUPPORTED: "SCHEMA_VERSION_UNSUPPORTED",
+  RECORD_NOT_FOUND: "RECORD_NOT_FOUND",
+  BUNDLE_CORRUPTED: "BUNDLE_CORRUPTED"
+};
+
+// src/verifyDetailed.ts
+function mapCerCodeToReasonCodes(cerCode) {
+  switch (cerCode) {
+    case CerVerifyCode.CERTIFICATE_HASH_MISMATCH:
+    case CerVerifyCode.SNAPSHOT_HASH_MISMATCH:
+    case CerVerifyCode.INPUT_HASH_MISMATCH:
+    case CerVerifyCode.OUTPUT_HASH_MISMATCH:
+      return [ReasonCode.BUNDLE_HASH_MISMATCH];
+    case CerVerifyCode.SCHEMA_ERROR:
+      return [ReasonCode.SCHEMA_VERSION_UNSUPPORTED];
+    case CerVerifyCode.CANONICALIZATION_ERROR:
+    case CerVerifyCode.UNKNOWN_ERROR:
+    case CerVerifyCode.INVALID_SHA256_FORMAT:
+      return [ReasonCode.BUNDLE_CORRUPTED];
+    case CerVerifyCode.ATTESTATION_INVALID_SIGNATURE:
+    case CerVerifyCode.ATTESTATION_KEY_FORMAT_UNSUPPORTED:
+    case CerVerifyCode.ATTESTATION_KEY_NOT_FOUND:
+      return [ReasonCode.NODE_SIGNATURE_INVALID];
+    case CerVerifyCode.ATTESTATION_MISSING:
+      return [ReasonCode.NODE_SIGNATURE_MISSING];
+    default:
+      return [];
+  }
+}
+function verifyAiCerBundleDetailed(bundle) {
+  const verifiedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const verifier = "@nexart/ai-execution";
+  if (!bundle || typeof bundle !== "object" || Array.isArray(bundle)) {
+    return {
+      status: "FAILED",
+      checks: { bundleIntegrity: "FAIL", nodeSignature: "SKIPPED", receiptConsistency: "SKIPPED" },
+      reasonCodes: [ReasonCode.BUNDLE_CORRUPTED],
+      certificateHash: "",
+      bundleType: "",
+      verifiedAt,
+      verifier
+    };
+  }
+  const b = bundle;
+  const bundleType = typeof b["bundleType"] === "string" ? b["bundleType"] : "";
+  const certificateHash = typeof b["certificateHash"] === "string" ? b["certificateHash"] : "";
+  if (bundleType !== "cer.ai.execution.v1") {
+    return {
+      status: "FAILED",
+      checks: { bundleIntegrity: "FAIL", nodeSignature: "SKIPPED", receiptConsistency: "SKIPPED" },
+      reasonCodes: [ReasonCode.SCHEMA_VERSION_UNSUPPORTED],
+      certificateHash,
+      bundleType,
+      verifiedAt,
+      verifier
+    };
+  }
+  const cerResult = verifyCer(bundle);
+  const bundleIntegrity = cerResult.ok ? "PASS" : "FAIL";
+  const attestationPresent = hasAttestation(bundle);
+  const nodeSignature = attestationPresent ? "PASS" : "SKIPPED";
+  const receiptConsistency = attestationPresent ? "PASS" : "SKIPPED";
+  const reasonCodes = cerResult.ok ? [] : mapCerCodeToReasonCodes(cerResult.code);
+  return {
+    status: cerResult.ok ? "VERIFIED" : "FAILED",
+    checks: { bundleIntegrity, nodeSignature, receiptConsistency },
+    reasonCodes,
+    certificateHash,
+    bundleType,
+    verifiedAt,
+    verifier
+  };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CerAttestationError,
   CerVerificationError,
   CerVerifyCode,
+  ReasonCode,
   RunBuilder,
   attest,
   attestIfNeeded,
@@ -2577,6 +2660,7 @@ async function certifyAndAttestRun(steps, options) {
   toCanonicalJson,
   validateProfile,
   verify,
+  verifyAiCerBundleDetailed,
   verifyAief,
   verifyBundleAttestation,
   verifyCer,