@onchaindiligence/agent-evidence 0.1.0

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@onchaindiligence/agent-evidence",
+  "version": "0.1.0",
+  "description": "Deterministic Agent Evidence v0 construction, DSSE sealing, and offline tri-state verification for Node.js",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "schemas",
+    "conformance",
+    "examples",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "sync-assets": "node scripts/sync-assets.mjs",
+    "check:assets": "node scripts/sync-assets.mjs --check",
+    "clean": "node scripts/clean.mjs",
+    "build": "npm run check:assets && npm run clean && tsc -p tsconfig.json",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "test:external": "npm run build && node test/external-consumer.mjs",
+    "test:cross-language": "npm run build && node test/cross-language.mjs",
+    "prepack": "npm run build"
+  },
+  "keywords": [
+    "agent-evidence",
+    "dsse",
+    "provenance",
+    "offline-verification",
+    "ed25519"
+  ],
+  "author": "OnChainDiligence",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Qazza1/onchaindiligence.git",
+    "directory": "packages/agent-evidence"
+  },
+  "homepage": "https://github.com/Qazza1/onchaindiligence/tree/main/packages/agent-evidence#readme",
+  "bugs": {
+    "url": "https://github.com/Qazza1/onchaindiligence/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "dependencies": {
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}

package/schemas/attestation-key.schema.json

@@ -0,0 +1,88 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://onchaindiligence.com/schemas/agent-evidence/v0/attestation-key.schema.json",
+  "title": "Agent Evidence v0 trusted Ed25519 key record",
+  "type": "object",
+  "required": ["key_id", "algorithm", "public_key_pem", "status", "valid_from", "valid_until", "status_changed_at"],
+  "properties": {
+    "key_id": { "type": "string", "pattern": "^ed25519-[A-Za-z0-9_-]{16}$" },
+    "algorithm": { "const": "ed25519" },
+    "public_key_pem": {
+      "type": "string",
+      "pattern": "^-----BEGIN PUBLIC KEY-----\\n[A-Za-z0-9+/=\\n]+-----END PUBLIC KEY-----\\n?$",
+      "maxLength": 4096
+    },
+    "status": { "enum": ["active", "retired", "revoked", "compromised"] },
+    "valid_from": {
+      "anyOf": [
+        { "$ref": "common.schema.json#/$defs/timestamp" },
+        { "type": "null" }
+      ]
+    },
+    "valid_until": {
+      "anyOf": [
+        { "$ref": "common.schema.json#/$defs/timestamp" },
+        { "type": "null" }
+      ]
+    },
+    "status_changed_at": {
+      "anyOf": [
+        { "$ref": "common.schema.json#/$defs/timestamp" },
+        { "type": "null" }
+      ]
+    },
+    "status_reason": { "type": "string", "minLength": 1, "maxLength": 4096 },
+    "replacement_key_id": {
+      "anyOf": [
+        { "type": "string", "pattern": "^ed25519-[A-Za-z0-9_-]{16}$" },
+        { "type": "null" }
+      ]
+    },
+    "compromised_at": {
+      "anyOf": [
+        { "$ref": "common.schema.json#/$defs/timestamp" },
+        { "type": "null" }
+      ]
+    }
+  },
+  "allOf": [
+    {
+      "if": { "type": "object", "properties": { "status": { "const": "active" } }, "required": ["status"] },
+      "then": { "type": "object", "properties": { "valid_until": { "type": "null" } } }
+    },
+    {
+      "if": { "type": "object", "properties": { "status": { "const": "retired" } }, "required": ["status"] },
+      "then": {
+        "type": "object",
+        "properties": {
+          "valid_from": { "$ref": "common.schema.json#/$defs/timestamp" },
+          "valid_until": { "$ref": "common.schema.json#/$defs/timestamp" },
+          "status_changed_at": { "$ref": "common.schema.json#/$defs/timestamp" }
+        }
+      }
+    },
+    {
+      "if": { "type": "object", "properties": { "status": { "const": "compromised" } }, "required": ["status"] },
+      "then": {
+        "type": "object",
+        "required": ["compromised_at"],
+        "properties": {
+          "compromised_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+          "status_changed_at": { "$ref": "common.schema.json#/$defs/timestamp" }
+        }
+      }
+    },
+    {
+      "if": { "type": "object", "properties": { "status": { "const": "revoked" } }, "required": ["status"] },
+      "then": {
+        "type": "object",
+        "required": ["status_reason"],
+        "properties": {
+          "status_reason": { "type": "string", "minLength": 1, "maxLength": 4096 },
+          "status_changed_at": { "$ref": "common.schema.json#/$defs/timestamp" }
+        }
+      }
+    }
+  ],
+  "additionalProperties": false
+}

package/schemas/bundle-payload.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://onchaindiligence.com/schemas/agent-evidence/v0/bundle-payload.schema.json",
+  "title": "Agent Evidence v0 signed bundle payload",
+  "type": "object",
+  "required": ["bundle_version", "bundle_id", "created_at", "run_id", "root_ids", "records", "extensions"],
+  "properties": {
+    "bundle_version": { "const": "onchaindiligence.agent-evidence.bundle.v0" },
+    "bundle_id": { "$ref": "common.schema.json#/$defs/contentId" },
+    "created_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+    "run_id": { "$ref": "common.schema.json#/$defs/contentId" },
+    "root_ids": {
+      "allOf": [
+        { "$ref": "common.schema.json#/$defs/idList" },
+        { "type": "array", "minItems": 1 }
+      ]
+    },
+    "records": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 10000,
+      "items": { "$ref": "record.schema.json" }
+    },
+    "extensions": {
+      "type": "object",
+      "propertyNames": { "type": "string", "format": "uri" },
+      "additionalProperties": true,
+      "maxProperties": 256
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/catalog.json

@@ -0,0 +1,20 @@
+{
+  "specification_id": "onchaindiligence.agent-evidence.v0",
+  "schema_dialect": "https://json-schema.org/draft/2020-12/schema",
+  "schemas": [
+    "common.schema.json",
+    "attestation-key.schema.json",
+    "dsse-envelope.schema.json",
+    "proof.schema.json",
+    "record.schema.json",
+    "bundle-payload.schema.json",
+    "portable-file.schema.json"
+  ],
+  "entry_points": {
+    "portable_file": "portable-file.schema.json",
+    "signed_payload": "bundle-payload.schema.json",
+    "record": "record.schema.json",
+    "proof": "proof.schema.json",
+    "trusted_key_record": "attestation-key.schema.json"
+  }
+}

package/schemas/common.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://onchaindiligence.com/schemas/agent-evidence/v0/common.schema.json",
+  "title": "Agent Evidence v0 common values",
+  "$defs": {
+    "timestamp": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$"
+    },
+    "contentId": {
+      "type": "string",
+      "pattern": "^sha256:[A-Za-z0-9_-]{43}$"
+    },
+    "sha256Digest": {
+      "type": "object",
+      "required": ["sha256"],
+      "properties": {
+        "sha256": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }
+      },
+      "additionalProperties": false
+    },
+    "decimalString": {
+      "type": "string",
+      "pattern": "^(0|[1-9][0-9]*)(\\.[0-9]+)?$"
+    },
+    "nonEmptyString": { "type": "string", "minLength": 1, "maxLength": 4096 },
+    "idList": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/contentId" },
+      "uniqueItems": true,
+      "maxItems": 10000
+    }
+  }
+}

package/schemas/dsse-envelope.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://onchaindiligence.com/schemas/agent-evidence/v0/dsse-envelope.schema.json",
+  "title": "DSSE v1 envelope",
+  "type": "object",
+  "required": ["payloadType", "payload", "signatures"],
+  "properties": {
+    "payloadType": { "type": "string", "minLength": 1, "maxLength": 1024 },
+    "payload": {
+      "type": "string",
+      "contentEncoding": "base64",
+      "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+    },
+    "signatures": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "required": ["keyid", "sig"],
+        "properties": {
+          "keyid": { "type": "string", "pattern": "^ed25519-[A-Za-z0-9_-]{16}$" },
+          "sig": {
+            "type": "string",
+            "contentEncoding": "base64",
+            "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/portable-file.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://onchaindiligence.com/schemas/agent-evidence/v0/portable-file.schema.json",
+  "title": "Agent Evidence v0 portable file",
+  "type": "object",
+  "required": ["media_type", "bundle_version", "envelope", "verification_material"],
+  "properties": {
+    "media_type": { "const": "application/vnd.onchaindiligence.agent-evidence+json" },
+    "bundle_version": { "const": "onchaindiligence.agent-evidence.bundle.v0" },
+    "envelope": {
+      "allOf": [
+        { "$ref": "dsse-envelope.schema.json" },
+        {
+          "type": "object",
+          "properties": {
+            "payloadType": { "const": "application/vnd.onchaindiligence.agent-evidence.bundle.v0+json" }
+          }
+        }
+      ]
+    },
+    "verification_material": {
+      "type": "object",
+      "required": ["keys", "registry_snapshots", "anchors"],
+      "properties": {
+        "keys": {
+          "type": "array",
+          "items": { "$ref": "attestation-key.schema.json" },
+          "maxItems": 1024
+        },
+        "registry_snapshots": {
+          "type": "array",
+          "maxItems": 64,
+          "items": {
+            "type": "object",
+            "required": ["media_type", "digest", "value"],
+            "properties": {
+              "media_type": { "type": "string", "minLength": 1, "maxLength": 1024 },
+              "digest": { "$ref": "common.schema.json#/$defs/sha256Digest" },
+              "value": {}
+            },
+            "additionalProperties": false
+          }
+        },
+        "anchors": {
+          "type": "array",
+          "maxItems": 256,
+          "items": {
+            "type": "object",
+            "required": ["anchor_type", "value"],
+            "properties": {
+              "anchor_type": { "type": "string", "minLength": 1, "maxLength": 256 },
+              "value": {}
+            },
+            "additionalProperties": false
+          }
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/proof.schema.json

@@ -0,0 +1,98 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://onchaindiligence.com/schemas/agent-evidence/v0/proof.schema.json",
+  "title": "Agent Evidence v0 source proof",
+  "oneOf": [
+    { "$ref": "#/$defs/dsseProof" },
+    { "$ref": "#/$defs/attestationV2Proof" },
+    { "$ref": "#/$defs/attestationV1Proof" },
+    { "$ref": "#/$defs/externalDigestProof" }
+  ],
+  "$defs": {
+    "dsseProof": {
+      "type": "object",
+      "required": ["proof_type", "statement_media_type", "envelope"],
+      "properties": {
+        "proof_type": { "const": "dsse-ed25519-v1" },
+        "statement_media_type": { "type": "string", "minLength": 1, "maxLength": 1024 },
+        "envelope": { "$ref": "dsse-envelope.schema.json" }
+      },
+      "additionalProperties": false
+    },
+    "v2Envelope": {
+      "type": "object",
+      "required": ["data", "attestation"],
+      "properties": {
+        "data": {},
+        "attestation": {
+          "type": "object",
+          "required": ["signed", "schema_version", "issuer", "purpose", "issued_at", "key_id", "algorithm", "canonicalization", "signature"],
+          "properties": {
+            "signed": { "const": true },
+            "schema_version": { "const": "onchaindiligence.attestation.v2" },
+            "issuer": { "type": "string", "format": "uri" },
+            "purpose": { "type": "string", "minLength": 1, "maxLength": 256 },
+            "issued_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+            "key_id": { "type": "string", "pattern": "^ed25519-[A-Za-z0-9_-]{16}$" },
+            "algorithm": { "const": "ed25519" },
+            "canonicalization": { "const": "RFC8785" },
+            "signature": { "type": "string", "pattern": "^[A-Za-z0-9_-]{86}$" },
+            "signing_input_hint": { "type": "string", "maxLength": 4096 }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "v1Envelope": {
+      "type": "object",
+      "required": ["data", "attestation"],
+      "properties": {
+        "data": {},
+        "attestation": {
+          "type": "object",
+          "required": ["signed", "issued_at", "key_id", "algorithm", "signature"],
+          "properties": {
+            "signed": { "const": true },
+            "issued_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+            "key_id": { "type": "string", "pattern": "^ed25519-[A-Za-z0-9_-]{16}$" },
+            "algorithm": { "const": "ed25519" },
+            "signature": { "type": "string", "pattern": "^[A-Za-z0-9_-]{86}$" },
+            "schema_version": false
+          },
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": false
+    },
+    "attestationV2Proof": {
+      "type": "object",
+      "required": ["proof_type", "envelope"],
+      "properties": {
+        "proof_type": { "const": "onchaindiligence-attestation-v2" },
+        "envelope": { "$ref": "#/$defs/v2Envelope" }
+      },
+      "additionalProperties": false
+    },
+    "attestationV1Proof": {
+      "type": "object",
+      "required": ["proof_type", "envelope"],
+      "properties": {
+        "proof_type": { "const": "onchaindiligence-attestation-v1" },
+        "envelope": { "$ref": "#/$defs/v1Envelope" }
+      },
+      "additionalProperties": false
+    },
+    "externalDigestProof": {
+      "type": "object",
+      "required": ["proof_type", "media_type", "digest"],
+      "properties": {
+        "proof_type": { "const": "external-digest" },
+        "media_type": { "type": "string", "minLength": 1, "maxLength": 1024 },
+        "digest": { "$ref": "common.schema.json#/$defs/sha256Digest" },
+        "reference": { "type": "string", "format": "uri", "maxLength": 8192 }
+      },
+      "additionalProperties": false
+    }
+  }
+}