@tenova/swt3-mcp 0.1.0 → 0.5.1

package/dist/tools/skill.d.ts

@@ -0,0 +1,33 @@
+/**
+ * SWT3 MCP Server: skill attestation tools.
+ *
+ * attest_skill_manifest (AI-SKILL.1): Attest active skills/tools/plugins.
+ * attest_memory_context (AI-SKILL.2): Attest memory sources influencing decisions.
+ */
+import type { McpConfig } from "../config.js";
+import type { AxiomClient } from "../client.js";
+interface SkillManifestArgs {
+    skills: Array<{
+        name: string;
+        version?: string;
+        hash?: string;
+    }>;
+    expected_manifest_hash?: string;
+    agent_id?: string;
+    cycle_id?: string;
+    clearing_level?: 0 | 1 | 2 | 3;
+}
+export declare function handleAttestSkillManifest(args: SkillManifestArgs, config: McpConfig, client: AxiomClient): Promise<string>;
+interface MemoryContextArgs {
+    memory_sources: Array<{
+        type: string;
+        id?: string;
+        hash?: string;
+    }>;
+    agent_id?: string;
+    cycle_id?: string;
+    clearing_level?: 0 | 1 | 2 | 3;
+}
+export declare function handleAttestMemoryContext(args: MemoryContextArgs, config: McpConfig, client: AxiomClient): Promise<string>;
+export {};
+//# sourceMappingURL=skill.d.ts.map

package/dist/tools/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../../src/tools/skill.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,cAAc,CAAC;AAUhE,UAAU,iBAAiB;IACzB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAChC;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAuFjB;AAID,UAAU,iBAAiB;IACzB,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAChC;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAgFjB"}

package/dist/tools/skill.js

@@ -0,0 +1,168 @@
+/**
+ * SWT3 MCP Server: skill attestation tools.
+ *
+ * attest_skill_manifest (AI-SKILL.1): Attest active skills/tools/plugins.
+ * attest_memory_context (AI-SKILL.2): Attest memory sources influencing decisions.
+ */
+import { mintFingerprint, sha256Truncated, timestampMs, signPayload, } from "../fingerprint.js";
+export async function handleAttestSkillManifest(args, config, client) {
+    const procedureId = "AI-SKILL.1";
+    const clearingLevel = args.clearing_level ?? config.clearingLevel;
+    // Compute manifest hash from sorted skill hashes
+    const skillHashes = args.skills
+        .map((s) => s.hash || sha256Truncated(s.name))
+        .sort();
+    const computedManifest = sha256Truncated(skillHashes.join(":"));
+    const match = args.expected_manifest_hash
+        ? computedManifest === args.expected_manifest_hash
+        : true;
+    const factorA = args.skills.length;
+    const factorB = match ? 1 : 0;
+    const factorC = 0;
+    const verdict = match ? "PASS" : "FAIL";
+    const [ts, epoch] = timestampMs();
+    const fp = mintFingerprint(config.tenantId, procedureId, factorA, factorB, factorC, ts);
+    const payload = {
+        procedure_id: procedureId,
+        factor_a: factorA,
+        factor_b: factorB,
+        factor_c: factorC,
+        clearing_level: clearingLevel,
+        anchor_fingerprint: fp,
+        anchor_epoch: epoch,
+        fingerprint_timestamp_ms: ts,
+    };
+    if (clearingLevel <= 1) {
+        payload.ai_model_id = "skill-manifest";
+        payload.ai_context = {
+            provider: "skill-manifest",
+            skills: args.skills,
+            manifest_hash: computedManifest,
+        };
+    }
+    else if (clearingLevel === 2) {
+        payload.ai_model_id = "skill-manifest";
+    }
+    else {
+        payload.ai_model_id = sha256Truncated("skill-manifest");
+    }
+    payload.witness_source = "mcp";
+    const agentId = args.agent_id || config.agentId;
+    if (agentId)
+        payload.agent_id = agentId;
+    if (args.cycle_id)
+        payload.cycle_id = args.cycle_id;
+    if (config.signingKey) {
+        payload.payload_signature = signPayload(config.signingKey, fp, agentId);
+    }
+    if (config.demo) {
+        const demoAnchor = `SWT3-DEMO-LOCAL-AI-${procedureId.replace(/[.-]/g, "")}-${verdict}-${epoch}-${fp}`;
+        const skillNames = args.skills.map((s) => s.name).join(", ");
+        return [
+            `[DEMO MODE: local only, not persisted]`,
+            ``,
+            `Skill Manifest Attestation`,
+            `Verdict: ${verdict}`,
+            `Anchor: ${demoAnchor}`,
+            `Skills: ${skillNames}`,
+            `Count: ${args.skills.length}`,
+            `Manifest Hash: ${computedManifest}`,
+            `Clearing Level: ${clearingLevel}`,
+            `Fingerprint: ${fp}`,
+        ].join("\n");
+    }
+    const receipt = await client.postWitness(payload);
+    if (receipt.tenant_id && !process.env.SWT3_TENANT_ID)
+        config.tenantId = receipt.tenant_id;
+    const skillNames = args.skills.map((s) => s.name).join(", ");
+    return [
+        `Skill Manifest Attestation`,
+        `Verdict: ${receipt.verdict}`,
+        `Anchor: ${receipt.swt3_anchor}`,
+        `Skills: ${skillNames}`,
+        `Count: ${args.skills.length}`,
+        `Manifest Hash: ${computedManifest}`,
+        `Clearing Level: ${receipt.clearing_level}`,
+        `Witnessed: ${receipt.witnessed_at}`,
+        `Verify: ${config.endpoint}${receipt.verification_url}`,
+        `Fingerprint: ${fp}`,
+    ].join("\n");
+}
+export async function handleAttestMemoryContext(args, config, client) {
+    const procedureId = "AI-SKILL.2";
+    const clearingLevel = args.clearing_level ?? config.clearingLevel;
+    const allIdentified = args.memory_sources.length > 0 &&
+        args.memory_sources.every((s) => s.id || s.hash);
+    const factorA = args.memory_sources.length;
+    const factorB = allIdentified ? 1 : 0;
+    const factorC = 0;
+    const verdict = allIdentified ? "PASS" : "FAIL";
+    const [ts, epoch] = timestampMs();
+    const fp = mintFingerprint(config.tenantId, procedureId, factorA, factorB, factorC, ts);
+    const payload = {
+        procedure_id: procedureId,
+        factor_a: factorA,
+        factor_b: factorB,
+        factor_c: factorC,
+        clearing_level: clearingLevel,
+        anchor_fingerprint: fp,
+        anchor_epoch: epoch,
+        fingerprint_timestamp_ms: ts,
+    };
+    if (clearingLevel <= 1) {
+        payload.ai_model_id = "memory-context";
+        payload.ai_context = {
+            provider: "memory",
+            sources: args.memory_sources,
+            total_sources: args.memory_sources.length,
+        };
+    }
+    else if (clearingLevel === 2) {
+        payload.ai_model_id = "memory-context";
+    }
+    else {
+        payload.ai_model_id = sha256Truncated("memory-context");
+    }
+    payload.witness_source = "mcp";
+    const agentId = args.agent_id || config.agentId;
+    if (agentId)
+        payload.agent_id = agentId;
+    if (args.cycle_id)
+        payload.cycle_id = args.cycle_id;
+    if (config.signingKey) {
+        payload.payload_signature = signPayload(config.signingKey, fp, agentId);
+    }
+    if (config.demo) {
+        const demoAnchor = `SWT3-DEMO-LOCAL-AI-${procedureId.replace(/[.-]/g, "")}-${verdict}-${epoch}-${fp}`;
+        const sourceTypes = args.memory_sources.map((s) => s.type).join(", ");
+        return [
+            `[DEMO MODE: local only, not persisted]`,
+            ``,
+            `Memory Context Binding`,
+            `Verdict: ${verdict}`,
+            `Anchor: ${demoAnchor}`,
+            `Sources: ${sourceTypes}`,
+            `Count: ${args.memory_sources.length}`,
+            `All Identified: ${allIdentified}`,
+            `Clearing Level: ${clearingLevel}`,
+            `Fingerprint: ${fp}`,
+        ].join("\n");
+    }
+    const receipt = await client.postWitness(payload);
+    if (receipt.tenant_id && !process.env.SWT3_TENANT_ID)
+        config.tenantId = receipt.tenant_id;
+    const sourceTypes = args.memory_sources.map((s) => s.type).join(", ");
+    return [
+        `Memory Context Binding`,
+        `Verdict: ${receipt.verdict}`,
+        `Anchor: ${receipt.swt3_anchor}`,
+        `Sources: ${sourceTypes}`,
+        `Count: ${args.memory_sources.length}`,
+        `All Identified: ${allIdentified}`,
+        `Clearing Level: ${receipt.clearing_level}`,
+        `Witnessed: ${receipt.witnessed_at}`,
+        `Verify: ${config.endpoint}${receipt.verification_url}`,
+        `Fingerprint: ${fp}`,
+    ].join("\n");
+}
+//# sourceMappingURL=skill.js.map

package/dist/tools/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../../src/tools/skill.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EACL,eAAe,EACf,eAAe,EACf,WAAW,EACX,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAY3B,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAuB,EACvB,MAAiB,EACjB,MAAmB;IAEnB,MAAM,WAAW,GAAG,YAAY,CAAC;IACjC,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,aAAa,CAAC;IAElE,iDAAiD;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC7C,IAAI,EAAE,CAAC;IACV,MAAM,gBAAgB,GAAG,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB;QACvC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,sBAAsB;QAClD,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAExC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,WAAW,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,OAAO,GAAmB;QAC9B,YAAY,EAAE,WAAW;QACzB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,EAAE;QACtB,YAAY,EAAE,KAAK;QACnB,wBAAwB,EAAE,EAAE;KAC7B,CAAC;IAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,WAAW,GAAG,gBAAgB,CAAC;QACvC,OAAO,CAAC,UAAU,GAAG;YACnB,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,gBAAgB;SAChC,CAAC;IACJ,CAAC;SAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,WAAW,GAAG,gBAAgB,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,WAAW,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC;IAChD,IAAI,OAAO;QAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,sBAAsB,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACtG,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO;YACL,wCAAwC;YACxC,EAAE;YACF,4BAA4B;YAC5B,YAAY,OAAO,EAAE;YACrB,WAAW,UAAU,EAAE;YACvB,WAAW,UAAU,EAAE;YACvB,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,kBAAkB,gBAAgB,EAAE;YACpC,mBAAmB,aAAa,EAAE;YAClC,gBAAgB,EAAE,EAAE;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAE1F,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO;QACL,4BAA4B;QAC5B,YAAY,OAAO,CAAC,OAAO,EAAE;QAC7B,WAAW,OAAO,CAAC,WAAW,EAAE;QAChC,WAAW,UAAU,EAAE;QACvB,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAC9B,kBAAkB,gBAAgB,EAAE;QACpC,mBAAmB,OAAO,CAAC,cAAc,EAAE;QAC3C,cAAc,OAAO,CAAC,YAAY,EAAE;QACpC,WAAW,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,gBAAgB,EAAE;QACvD,gBAAgB,EAAE,EAAE;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAuB,EACvB,MAAiB,EACjB,MAAmB;IAEnB,MAAM,WAAW,GAAG,YAAY,CAAC;IACjC,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,aAAa,CAAC;IAElE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAClD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAEhD,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,WAAW,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,OAAO,GAAmB;QAC9B,YAAY,EAAE,WAAW;QACzB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,EAAE;QACtB,YAAY,EAAE,KAAK;QACnB,wBAAwB,EAAE,EAAE;KAC7B,CAAC;IAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,WAAW,GAAG,gBAAgB,CAAC;QACvC,OAAO,CAAC,UAAU,GAAG;YACnB,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM;SAC1C,CAAC;IACJ,CAAC;SAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,WAAW,GAAG,gBAAgB,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,WAAW,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC;IAChD,IAAI,OAAO;QAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,sBAAsB,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACtG,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO;YACL,wCAAwC;YACxC,EAAE;YACF,wBAAwB;YACxB,YAAY,OAAO,EAAE;YACrB,WAAW,UAAU,EAAE;YACvB,YAAY,WAAW,EAAE;YACzB,UAAU,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;YACtC,mBAAmB,aAAa,EAAE;YAClC,mBAAmB,aAAa,EAAE;YAClC,gBAAgB,EAAE,EAAE;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAE1F,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,wBAAwB;QACxB,YAAY,OAAO,CAAC,OAAO,EAAE;QAC7B,WAAW,OAAO,CAAC,WAAW,EAAE;QAChC,YAAY,WAAW,EAAE;QACzB,UAAU,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;QACtC,mBAAmB,aAAa,EAAE;QAClC,mBAAmB,OAAO,CAAC,cAAc,EAAE;QAC3C,cAAc,OAAO,CAAC,YAAY,EAAE;QACpC,WAAW,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,gBAAgB,EAAE;QACvD,gBAAgB,EAAE,EAAE;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/tools/suggest.d.ts

@@ -0,0 +1,15 @@
+/**
+ * SWT3 MCP Server: suggest_procedures tool.
+ *
+ * Advisory-only procedure suggestions based on context keywords.
+ * No network call. Never enforced. The agent decides what to witness.
+ */
+interface SuggestArgs {
+    context: string;
+    model_id?: string;
+    data_classification?: string;
+    tools_used?: string[];
+}
+export declare function handleSuggest(args: SuggestArgs): string;
+export {};
+//# sourceMappingURL=suggest.d.ts.map

package/dist/tools/suggest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suggest.d.ts","sourceRoot":"","sources":["../../src/tools/suggest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AA2HD,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAmEvD"}

package/dist/tools/suggest.js

@@ -0,0 +1,174 @@
+/**
+ * SWT3 MCP Server: suggest_procedures tool.
+ *
+ * Advisory-only procedure suggestions based on context keywords.
+ * No network call. Never enforced. The agent decides what to witness.
+ */
+const KEYWORD_MAP = [
+    {
+        keywords: ["infer", "generat", "complet", "chat", "prompt", "response", "llm", "model", "gpt", "claude", "llama", "mistral"],
+        procedure: "AI-INF.1",
+        title: "Inference Provenance",
+        reason: "AI model inference detected -- witness the model, prompt hash, and response hash",
+        priority: 1,
+    },
+    {
+        keywords: ["drift", "version", "chang", "updat", "different model", "switch", "migrat"],
+        procedure: "AI-DFT.1",
+        title: "Model Drift Detection",
+        reason: "Model version or behavior change indicated -- witness for drift tracking",
+        priority: 2,
+    },
+    {
+        keywords: ["guard", "safety", "filter", "modera", "content filter", "refusal", "block", "harm"],
+        procedure: "AI-GRD.1",
+        title: "Guardrail Attestation",
+        reason: "Safety or content filtering context detected -- witness guardrail state",
+        priority: 2,
+    },
+    {
+        keywords: ["agent", "identity", "who am i", "multi-agent", "orchestrat", "delegat"],
+        procedure: "AI-ID.1",
+        title: "Agent Identity",
+        reason: "Agent identity or multi-agent context detected -- witness agent_id",
+        priority: 3,
+    },
+    {
+        keywords: ["access", "database", "api call", "fetch", "read", "write", "permiss", "authoriz", "pii", "credential"],
+        procedure: "AI-ACC.1",
+        title: "Access Control Witnessing",
+        reason: "Data or resource access detected -- witness the authorization decision",
+        priority: 2,
+    },
+    {
+        keywords: ["tool", "function call", "plugin", "action", "execut", "run command", "code interpret"],
+        procedure: "AI-TOOL.1",
+        title: "Tool Use Witnessing",
+        reason: "Tool or function call detected -- witness the tool invocation",
+        priority: 2,
+    },
+    {
+        keywords: ["revok", "recall", "retract", "correct", "error", "mistake", "withdraw", "undo"],
+        procedure: "AI-REV.1",
+        title: "Anchor Revocation",
+        reason: "Correction or recall context detected -- consider revoking a prior anchor",
+        priority: 3,
+    },
+    {
+        keywords: ["handoff", "transfer", "pass to", "chain", "pipeline", "next agent", "downstream"],
+        procedure: "AI-CHAIN.1",
+        title: "Chain-of-Custody Handoff",
+        reason: "Agent handoff or pipeline transfer detected -- witness custody transfer",
+        priority: 3,
+    },
+    {
+        keywords: ["rag", "retriev", "context", "document", "chunk", "vector", "embed", "search result", "knowledge base"],
+        procedure: "AI-RAG.1",
+        title: "RAG Context Provenance",
+        reason: "Retrieval-augmented generation detected -- witness source documents and relevance",
+        priority: 2,
+    },
+    {
+        keywords: ["train", "fine-tun", "dataset", "epoch", "checkpoint", "weight", "lora", "adapter", "unsloth"],
+        procedure: "AI-DATA.3",
+        title: "Training Data Statistics",
+        reason: "Training or fine-tuning context detected -- witness dataset properties",
+        priority: 3,
+    },
+    {
+        keywords: ["bias", "fairness", "disparity", "protected", "demographic", "equit", "discriminat"],
+        procedure: "AI-FAIR.3",
+        title: "Bias Assessment",
+        reason: "Fairness or bias evaluation detected -- witness assessment results",
+        priority: 3,
+    },
+    {
+        keywords: ["model card", "registry", "catalog", "model version", "deploy model", "serve model"],
+        procedure: "AI-MDL.1",
+        title: "Model Hash Integrity",
+        reason: "Model management context detected -- witness model identity and hash",
+        priority: 2,
+    },
+    {
+        keywords: ["violat", "policy breach", "forbidden", "prohibited", "restrict", "banned", "illegal"],
+        procedure: "AI-VIO.1",
+        title: "Policy Violation",
+        reason: "Policy violation or prohibited action detected -- witness with severity classification",
+        priority: 1,
+    },
+    {
+        keywords: ["skill", "capability", "manifest", "plugin list", "tool list", "function list"],
+        procedure: "AI-SKILL.1",
+        title: "Skill Manifest",
+        reason: "Agent capability or skill registration detected -- witness the manifest",
+        priority: 3,
+    },
+    {
+        keywords: ["thermal", "temperature", "cool", "overheat", "power draw", "watt", "energy", "node health", "residential", "edge node"],
+        procedure: "AI-ENV.1",
+        title: "Environmental Integrity",
+        reason: "Hardware environment or node health context detected -- witness thermal and power state",
+        priority: 3,
+    },
+];
+export function handleSuggest(args) {
+    const context = [
+        args.context,
+        args.model_id || "",
+        args.data_classification || "",
+        ...(args.tools_used || []),
+    ].join(" ").toLowerCase();
+    const matches = [];
+    const seen = new Set();
+    for (const entry of KEYWORD_MAP) {
+        if (seen.has(entry.procedure))
+            continue;
+        const hit = entry.keywords.some((kw) => context.includes(kw));
+        if (hit) {
+            seen.add(entry.procedure);
+            matches.push({
+                procedure: entry.procedure,
+                title: entry.title,
+                reason: entry.reason,
+                priority: entry.priority,
+            });
+        }
+    }
+    // Always suggest AI-INF.1 if nothing else matched
+    if (matches.length === 0) {
+        matches.push({
+            procedure: "AI-INF.1",
+            title: "Inference Provenance",
+            reason: "Default recommendation -- witness any AI inference for baseline compliance",
+            priority: 1,
+        });
+    }
+    // Data classification boost
+    if (args.data_classification) {
+        const classification = args.data_classification.toLowerCase();
+        if (classification === "sensitive" || classification === "classified") {
+            if (!seen.has("AI-ACC.1")) {
+                matches.push({
+                    procedure: "AI-ACC.1",
+                    title: "Access Control Witnessing",
+                    reason: `Data classified as ${args.data_classification} -- witness access decisions`,
+                    priority: 1,
+                });
+            }
+        }
+    }
+    // Sort by priority
+    matches.sort((a, b) => a.priority - b.priority);
+    const lines = [
+        `Suggested Procedures (${matches.length}):`,
+        ``,
+    ];
+    for (const m of matches) {
+        lines.push(`  ${m.procedure} -- ${m.title}`);
+        lines.push(`    ${m.reason}`);
+        lines.push(``);
+    }
+    lines.push(`These are advisory only. Use witness_inference or the relevant tool to attest.`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=suggest.js.map

package/dist/tools/suggest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suggest.js","sourceRoot":"","sources":["../../src/tools/suggest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,MAAM,WAAW,GAMZ;IACH;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC5H,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,kFAAkF;QAC1F,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACvF,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,0EAA0E;QAClF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC;QAC/F,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,yEAAyE;QACjF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC;QACnF,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,oEAAoE;QAC5E,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC;QAClH,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,2BAA2B;QAClC,MAAM,EAAE,wEAAwE;QAChF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,CAAC;QAClG,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,+DAA+D;QACvE,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC;QAC3F,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,2EAA2E;QACnF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;QAC7F,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,yEAAyE;QACjF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,CAAC;QAClH,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,mFAAmF;QAC3F,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;QACzG,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,wEAAwE;QAChF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC;QAC/F,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,oEAAoE;QAC5E,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,CAAC;QAC/F,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,sEAAsE;QAC9E,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;QACjG,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,wFAAwF;QAChG,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,CAAC;QAC1F,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,yEAAyE;QACjF,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC;QACnI,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,yFAAyF;QACjG,QAAQ,EAAE,CAAC;KACZ;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,MAAM,OAAO,GAAG;QACd,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,QAAQ,IAAI,EAAE;QACnB,IAAI,CAAC,mBAAmB,IAAI,EAAE;QAC9B,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,UAAU;YACrB,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,4EAA4E;YACpF,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;QAC9D,IAAI,cAAc,KAAK,WAAW,IAAI,cAAc,KAAK,YAAY,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS,EAAE,UAAU;oBACrB,KAAK,EAAE,2BAA2B;oBAClC,MAAM,EAAE,sBAAsB,IAAI,CAAC,mBAAmB,8BAA8B;oBACpF,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG;QACZ,yBAAyB,OAAO,CAAC,MAAM,IAAI;QAC3C,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAE7F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/tools/trust.d.ts

@@ -0,0 +1,33 @@
+/**
+ * SWT3 MCP Server: verify_agent_trust + present_trust_credential tools.
+ *
+ * Enables LLMs to autonomously verify counterpart agents before
+ * proceeding with tool calls or data exchange. The compliance anchor
+ * IS the authorization credential.
+ *
+ * AI-TRUST.1: Trust verification result (PASS/FAIL)
+ * AI-TRUST.2: Handshake evidence (checks performed/passed)
+ */
+import type { McpConfig } from "../config.js";
+import type { AxiomClient } from "../client.js";
+import type { SessionState } from "../state.js";
+interface VerifyArgs {
+    counterpart_agent_id: string;
+    counterpart_tenant_id: string;
+    anchor_fingerprint: string;
+    anchor_timestamp_ms?: number;
+    is_signed?: boolean;
+    procedures?: string[];
+    clearing_level?: 0 | 1 | 2 | 3;
+    has_hardware_attestation?: boolean;
+    has_guardrails?: boolean;
+    agent_id?: string;
+    cycle_id?: string;
+}
+interface PresentArgs {
+    agent_id?: string;
+}
+export declare function handleVerifyAgentTrust(args: VerifyArgs, config: McpConfig, client: AxiomClient, state: SessionState): Promise<string>;
+export declare function handlePresentCredential(args: PresentArgs, config: McpConfig): string;
+export {};
+//# sourceMappingURL=trust.d.ts.map

package/dist/tools/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/tools/trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,cAAc,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsFhD,UAAU,UAAU;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,MAAM,CAAC,CA2HjB;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,SAAS,GAChB,MAAM,CA0BR"}