@vauban-org/agent-sdk 0.16.0

package/dist/proof/otel.d.ts

@@ -0,0 +1,25 @@
+/**
+ * toOtelSpan — maps a RunStep to an OpenTelemetry span shape.
+ *
+ * Follows OpenInference semantic conventions for GenAI:
+ *   https://github.com/Arize-ai/openinference/blob/main/spec/semantic_conventions.md
+ *
+ * sprint-521 Bloc 1.
+ */
+import type { RunStep } from "./types.js";
+export interface OtelSpan {
+    traceId: string;
+    spanId: string;
+    attributes: Record<string, string | number>;
+}
+/**
+ * Map a RunStep to an OpenTelemetry-compatible span descriptor.
+ *
+ * Uses OpenInference semantic conventions (gen_ai.*) for GenAI observability.
+ * traceId and spanId fall back to empty strings if not set on the step.
+ *
+ * @param step - RunStep from the proof certificate decision_chain or live run.
+ * @returns OtelSpan with traceId, spanId, and attributes.
+ */
+export declare function toOtelSpan(step: RunStep): OtelSpan;
+//# sourceMappingURL=otel.d.ts.map

package/dist/proof/otel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.d.ts","sourceRoot":"","sources":["../../src/proof/otel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CA+ClD"}

package/dist/proof/otel.js

@@ -0,0 +1,57 @@
+/**
+ * toOtelSpan — maps a RunStep to an OpenTelemetry span shape.
+ *
+ * Follows OpenInference semantic conventions for GenAI:
+ *   https://github.com/Arize-ai/openinference/blob/main/spec/semantic_conventions.md
+ *
+ * sprint-521 Bloc 1.
+ */
+/**
+ * Map a RunStep to an OpenTelemetry-compatible span descriptor.
+ *
+ * Uses OpenInference semantic conventions (gen_ai.*) for GenAI observability.
+ * traceId and spanId fall back to empty strings if not set on the step.
+ *
+ * @param step - RunStep from the proof certificate decision_chain or live run.
+ * @returns OtelSpan with traceId, spanId, and attributes.
+ */
+export function toOtelSpan(step) {
+    const traceId = step.otel_trace_id ?? "";
+    const spanId = step.otel_span_id ?? "";
+    const attributes = {
+        // OpenInference GenAI conventions
+        "gen_ai.system": "vauban-command-center",
+        "gen_ai.operation.name": step.type,
+        "gen_ai.response.id": step.id,
+        // Run context
+        "run.id": step.run_id,
+        "run.step_index": step.step_index,
+        "run.step.type": step.type,
+        "run.step.status": step.status,
+        "run.step.started_at": step.started_at,
+    };
+    if (step.phase != null) {
+        attributes["run.step.phase"] = step.phase;
+    }
+    if (step.finished_at != null) {
+        attributes["run.step.finished_at"] = step.finished_at;
+    }
+    if (step.duration_ms != null) {
+        attributes["gen_ai.usage.total_tokens"] = step.duration_ms; // duration proxy
+        attributes["run.step.duration_ms"] = step.duration_ms;
+    }
+    if (step.leaf_hash_poseidon != null) {
+        attributes["proof.leaf_hash_poseidon"] = step.leaf_hash_poseidon;
+    }
+    if (step.mcp_call_hash != null) {
+        attributes["proof.mcp_call_hash"] = step.mcp_call_hash;
+    }
+    if (step.retrieval_proof_hash != null) {
+        attributes["proof.retrieval_proof_hash"] = step.retrieval_proof_hash;
+    }
+    if (step.error_message != null) {
+        attributes["exception.message"] = step.error_message;
+    }
+    return { traceId, spanId, attributes };
+}
+//# sourceMappingURL=otel.js.map

package/dist/proof/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.js","sourceRoot":"","sources":["../../src/proof/otel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAEvC,MAAM,UAAU,GAAoC;QAClD,kCAAkC;QAClC,eAAe,EAAE,uBAAuB;QACxC,uBAAuB,EAAE,IAAI,CAAC,IAAI;QAClC,oBAAoB,EAAE,IAAI,CAAC,EAAE;QAC7B,cAAc;QACd,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,gBAAgB,EAAE,IAAI,CAAC,UAAU;QACjC,eAAe,EAAE,IAAI,CAAC,IAAI;QAC1B,iBAAiB,EAAE,IAAI,CAAC,MAAM;QAC9B,qBAAqB,EAAE,IAAI,CAAC,UAAU;KACvC,CAAC;IAEF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,UAAU,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;QAC7B,UAAU,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;QAC7B,UAAU,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,iBAAiB;QAC7E,UAAU,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,EAAE,CAAC;QACpC,UAAU,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACnE,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAC/B,UAAU,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;IACzD,CAAC;IAED,IAAI,IAAI,CAAC,oBAAoB,IAAI,IAAI,EAAE,CAAC;QACtC,UAAU,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACvE,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAC/B,UAAU,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC"}

package/dist/proof/receipt-queue.d.ts

@@ -0,0 +1,97 @@
+/**
+ * ReceiptQueue — tamper-evident in-memory queue for TSA receipt retries.
+ *
+ * CH1-r: Every entry is HMAC-SHA-256 authenticated. process() rejects entries
+ * with invalid HMACs before submitting to the TSA — no silent data corruption.
+ *
+ * Backoff schedule: DEFAULT_BACKOFF_MS defines 5 exponential windows.
+ * process() skips entries whose next retry time has not been reached yet
+ * (based on queuedAt + DEFAULT_BACKOFF_MS[attempts - 1]).
+ *
+ * KeyProvider isolation: the key is fetched from the provider at enqueue and
+ * process time — never stored in the entry itself.
+ *
+ * @module proof/receipt-queue
+ */
+import type { KeyProvider } from "../ports/key-provider.js";
+import type { TimestampPort } from "../ports/timestamp.js";
+export interface ReceiptQueueEntry {
+    runId: string;
+    rootHash: string;
+    /** Unix epoch milliseconds when this entry was first enqueued. */
+    queuedAt: number;
+    /** Number of prior failed attempts (0 on first enqueue). */
+    attempts: number;
+    /**
+     * HMAC-SHA-256(canonical(entry-without-hmac), key from provider).
+     * CH1-r: tamper-evident field. process() rejects if this does not
+     * match a freshly computed HMAC.
+     */
+    hmac: string;
+}
+export interface ReceiptQueue {
+    /**
+     * Add a new entry to the queue. Computes and stores the HMAC.
+     *
+     * @param entry       - Entry without hmac/attempts.
+     * @param keyProvider - Provider that supplies the HMAC key.
+     * @param keyId       - Key identifier for keyProvider.getKey().
+     */
+    enqueue(entry: Omit<ReceiptQueueEntry, "hmac" | "attempts">, keyProvider: KeyProvider, keyId: string): Promise<void>;
+    /** Return all entries currently in the queue (including those in backoff). */
+    pending(): Promise<ReceiptQueueEntry[]>;
+    /**
+     * Process up to `batchSize` due entries.
+     *
+     * For each entry:
+     *   - Recompute HMAC; if mismatch → increment `rejected`, do NOT call adapter.
+     *   - If backoff window not elapsed → skip (not counted in any bucket).
+     *   - On success → remove from queue.
+     *   - On failure → increment `entry.attempts`, apply next backoff.
+     *
+     * @returns { processed, failed, rejected }
+     */
+    process(adapter: TimestampPort, keyProvider: KeyProvider, keyId: string, opts?: {
+        batchSize?: number;
+        backoffMs?: readonly number[];
+    }): Promise<{
+        processed: number;
+        failed: number;
+        rejected: number;
+    }>;
+    /** Number of entries currently in the queue. Test helper. */
+    size?(): Promise<number>;
+}
+/**
+ * Default exponential backoff schedule (5 levels).
+ * Level 0 = 30s, 1 = 5min, 2 = 1h, 3 = 6h, 4 = 24h.
+ */
+export declare const DEFAULT_BACKOFF_MS: readonly [30000, number, number, number, number];
+/**
+ * Thrown internally when a queue entry HMAC fails verification.
+ * The error is caught by process() and counted in the `rejected` bucket.
+ */
+export declare class HmacInvalidError extends Error {
+    constructor(runId: string);
+}
+/**
+ * In-memory ReceiptQueue implementation.
+ *
+ * Not durable across restarts — for production persistence, implement
+ * ReceiptQueue against a PostgreSQL table (see sprint-562 B2).
+ */
+export declare class InMemoryReceiptQueue implements ReceiptQueue {
+    private readonly _entries;
+    enqueue(entry: Omit<ReceiptQueueEntry, "hmac" | "attempts">, keyProvider: KeyProvider, keyId: string): Promise<void>;
+    pending(): Promise<ReceiptQueueEntry[]>;
+    process(adapter: TimestampPort, keyProvider: KeyProvider, keyId: string, opts?: {
+        batchSize?: number;
+        backoffMs?: readonly number[];
+    }): Promise<{
+        processed: number;
+        failed: number;
+        rejected: number;
+    }>;
+    size(): Promise<number>;
+}
+//# sourceMappingURL=receipt-queue.d.ts.map

package/dist/proof/receipt-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-queue.d.ts","sourceRoot":"","sources":["../../src/proof/receipt-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAM3D,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,OAAO,CACL,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,UAAU,CAAC,EACnD,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,8EAA8E;IAC9E,OAAO,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAExC;;;;;;;;;;OAUG;IACH,OAAO,CACL,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAC3D,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEpE,6DAA6D;IAC7D,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,kDAMrB,CAAC;AAIX;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,KAAK,EAAE,MAAM;CAO1B;AAsBD;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IAE9C,OAAO,CACX,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,UAAU,CAAC,EACnD,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAeV,OAAO,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAIvC,OAAO,CACX,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAC3D,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAoE7D,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;CAG9B"}

package/dist/proof/receipt-queue.js

@@ -0,0 +1,131 @@
+/**
+ * ReceiptQueue — tamper-evident in-memory queue for TSA receipt retries.
+ *
+ * CH1-r: Every entry is HMAC-SHA-256 authenticated. process() rejects entries
+ * with invalid HMACs before submitting to the TSA — no silent data corruption.
+ *
+ * Backoff schedule: DEFAULT_BACKOFF_MS defines 5 exponential windows.
+ * process() skips entries whose next retry time has not been reached yet
+ * (based on queuedAt + DEFAULT_BACKOFF_MS[attempts - 1]).
+ *
+ * KeyProvider isolation: the key is fetched from the provider at enqueue and
+ * process time — never stored in the entry itself.
+ *
+ * @module proof/receipt-queue
+ */
+import { canonicalize } from "../trace/canonical.js";
+import { hmacSha256 } from "./sha256.js";
+/**
+ * Default exponential backoff schedule (5 levels).
+ * Level 0 = 30s, 1 = 5min, 2 = 1h, 3 = 6h, 4 = 24h.
+ */
+export const DEFAULT_BACKOFF_MS = [
+    30_000,
+    5 * 60_000,
+    60 * 60_000,
+    6 * 60 * 60_000,
+    24 * 60 * 60_000,
+];
+// ─── Errors ───────────────────────────────────────────────────────────────────
+/**
+ * Thrown internally when a queue entry HMAC fails verification.
+ * The error is caught by process() and counted in the `rejected` bucket.
+ */
+export class HmacInvalidError extends Error {
+    constructor(runId) {
+        super(`HmacInvalidError: HMAC verification failed for entry runId="${runId}". ` +
+            "The entry may have been tampered with. Entry rejected without TSA call.");
+        this.name = "HmacInvalidError";
+    }
+}
+// ─── HMAC helpers ─────────────────────────────────────────────────────────────
+async function computeEntryHmac(entry, keyProvider, keyId) {
+    const key = await keyProvider.getKey(keyId);
+    // Canonical representation excludes the hmac field itself.
+    const canonical = canonicalize({
+        attempts: entry.attempts,
+        queuedAt: entry.queuedAt,
+        rootHash: entry.rootHash,
+        runId: entry.runId,
+    });
+    return hmacSha256(key, canonical);
+}
+// ─── InMemoryReceiptQueue ─────────────────────────────────────────────────────
+/**
+ * In-memory ReceiptQueue implementation.
+ *
+ * Not durable across restarts — for production persistence, implement
+ * ReceiptQueue against a PostgreSQL table (see sprint-562 B2).
+ */
+export class InMemoryReceiptQueue {
+    _entries = [];
+    async enqueue(entry, keyProvider, keyId) {
+        // Emit colocation warning if EnvKeyProvider + TRACE_DB_URL detected.
+        if (keyProvider.hasColocationRisk()) {
+            process.stderr.write(`[WARN] InMemoryReceiptQueue.enqueue: KeyProvider reports colocation risk ` +
+                `(key and TRACE_DB_URL on same host). ` +
+                `For production audit compliance, migrate to ExternalKMSKeyProvider.\n`);
+        }
+        const withAttempts = { ...entry, attempts: 0 };
+        const hmac = await computeEntryHmac(withAttempts, keyProvider, keyId);
+        this._entries.push({ ...withAttempts, hmac });
+    }
+    async pending() {
+        return [...this._entries];
+    }
+    async process(adapter, keyProvider, keyId, opts) {
+        const backoffMs = opts?.backoffMs ?? DEFAULT_BACKOFF_MS;
+        const batchSize = opts?.batchSize ?? this._entries.length;
+        let processed = 0;
+        let failed = 0;
+        let rejected = 0;
+        const now = Date.now();
+        const toRemove = [];
+        let count = 0;
+        for (let i = 0; i < this._entries.length && count < batchSize; i++) {
+            const entry = this._entries[i];
+            // CH1-r: recompute HMAC and compare before calling adapter.
+            const expectedHmac = await computeEntryHmac({ attempts: entry.attempts, queuedAt: entry.queuedAt, rootHash: entry.rootHash, runId: entry.runId }, keyProvider, keyId);
+            if (entry.hmac !== expectedHmac) {
+                rejected++;
+                toRemove.push(i); // Remove tampered entries immediately.
+                count++;
+                continue;
+            }
+            // Backoff check: skip if retry window hasn't elapsed.
+            if (entry.attempts > 0) {
+                const backoffIdx = Math.min(entry.attempts - 1, backoffMs.length - 1);
+                const nextRetryAt = entry.queuedAt + backoffMs[backoffIdx];
+                if (now < nextRetryAt) {
+                    // Not due yet — skip but do not count.
+                    continue;
+                }
+            }
+            count++;
+            try {
+                // Try to request the TSA receipt.
+                const _receipt = await adapter.request(entry.rootHash);
+                void _receipt;
+                // Success — mark for removal.
+                toRemove.push(i);
+                processed++;
+            }
+            catch {
+                // Failure — increment attempts and recompute HMAC for updated entry.
+                entry.attempts += 1;
+                const newHmac = await computeEntryHmac({ attempts: entry.attempts, queuedAt: entry.queuedAt, rootHash: entry.rootHash, runId: entry.runId }, keyProvider, keyId);
+                entry.hmac = newHmac;
+                failed++;
+            }
+        }
+        // Remove processed/rejected entries (reverse order to keep indices stable).
+        for (const idx of toRemove.slice().sort((a, b) => b - a)) {
+            this._entries.splice(idx, 1);
+        }
+        return { processed, failed, rejected };
+    }
+    async size() {
+        return this._entries.length;
+    }
+}
+//# sourceMappingURL=receipt-queue.js.map

package/dist/proof/receipt-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-queue.js","sourceRoot":"","sources":["../../src/proof/receipt-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAIrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0DzC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,CAAC,GAAG,MAAM;IACV,EAAE,GAAG,MAAM;IACX,CAAC,GAAG,EAAE,GAAG,MAAM;IACf,EAAE,GAAG,EAAE,GAAG,MAAM;CACR,CAAC;AAEX,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,KAAa;QACvB,KAAK,CACH,+DAA+D,KAAK,KAAK;YACvE,yEAAyE,CAC5E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,iFAAiF;AAEjF,KAAK,UAAU,gBAAgB,CAC7B,KAAsC,EACtC,WAAwB,EACxB,KAAa;IAEb,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,2DAA2D;IAC3D,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,GAAwB,EAAE,CAAC;IAEpD,KAAK,CAAC,OAAO,CACX,KAAmD,EACnD,WAAwB,EACxB,KAAa;QAEb,qEAAqE;QACrE,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2EAA2E;gBACzE,uCAAuC;gBACvC,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAsB,EACtB,WAAwB,EACxB,KAAa,EACb,IAA4D;QAE5D,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,kBAAkB,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAE1D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE/B,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EACpG,WAAW,EACX,KAAK,CACN,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,QAAQ,EAAE,CAAC;gBACX,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,uCAAuC;gBACzD,KAAK,EAAE,CAAC;gBACR,SAAS;YACX,CAAC;YAED,sDAAsD;YACtD,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACtE,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC3D,IAAI,GAAG,GAAG,WAAW,EAAE,CAAC;oBACtB,uCAAuC;oBACvC,SAAS;gBACX,CAAC;YACH,CAAC;YAED,KAAK,EAAE,CAAC;YAER,IAAI,CAAC;gBACH,kCAAkC;gBAClC,MAAM,QAAQ,GAAkB,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtE,KAAK,QAAQ,CAAC;gBACd,8BAA8B;gBAC9B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,SAAS,EAAE,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACpB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EACpG,WAAW,EACX,KAAK,CACN,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;gBACrB,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;CACF"}

package/dist/proof/sha256.d.ts

@@ -0,0 +1,27 @@
+/**
+ * sha256 / hmacSha256 — Web Crypto API wrappers.
+ *
+ * Zero external dependencies. Uses globalThis.crypto.subtle (Node ≥ 19 native,
+ * browser, Deno, Cloudflare Workers). Throws if the runtime does not expose
+ * SubtleCrypto (Node < 19 without --experimental-global-webcrypto).
+ *
+ * @module proof/sha256
+ */
+/**
+ * SHA-256 hex digest via Web Crypto.
+ *
+ * @param input - UTF-8 string or raw bytes.
+ * @returns Lowercase hex digest (64 chars).
+ * @throws If SubtleCrypto is unavailable.
+ */
+export declare function sha256(input: string | Uint8Array): Promise<string>;
+/**
+ * HMAC-SHA-256 hex digest via Web Crypto.
+ *
+ * @param key   - Raw key bytes (min 32 bytes recommended for HMAC-SHA-256).
+ * @param input - UTF-8 string or raw bytes to authenticate.
+ * @returns Lowercase hex MAC (64 chars).
+ * @throws If SubtleCrypto is unavailable or key import fails.
+ */
+export declare function hmacSha256(key: Uint8Array, input: string | Uint8Array): Promise<string>;
+//# sourceMappingURL=sha256.d.ts.map

package/dist/proof/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../../src/proof/sha256.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkCH;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,GAAG,UAAU,GACzB,OAAO,CAAC,MAAM,CAAC,CAcjB"}

package/dist/proof/sha256.js

@@ -0,0 +1,65 @@
+/**
+ * sha256 / hmacSha256 — Web Crypto API wrappers.
+ *
+ * Zero external dependencies. Uses globalThis.crypto.subtle (Node ≥ 19 native,
+ * browser, Deno, Cloudflare Workers). Throws if the runtime does not expose
+ * SubtleCrypto (Node < 19 without --experimental-global-webcrypto).
+ *
+ * @module proof/sha256
+ */
+function subtle() {
+    const s = globalThis.crypto?.subtle;
+    if (!s) {
+        throw new Error("proof/sha256: globalThis.crypto.subtle is unavailable. " +
+            "Require Node.js >= 19 or pass --experimental-global-webcrypto.");
+    }
+    return s;
+}
+/**
+ * Ensure the returned Uint8Array is backed by a plain ArrayBuffer
+ * (not SharedArrayBuffer), as required by SubtleCrypto's BufferSource type.
+ * The explicit return type avoids Uint8Array<ArrayBufferLike> widening.
+ */
+function toBytes(input) {
+    if (typeof input === "string") {
+        return new TextEncoder().encode(input);
+    }
+    // Always copy into a fresh ArrayBuffer to guarantee the concrete type.
+    const copy = new Uint8Array(input.length);
+    copy.set(input);
+    return copy;
+}
+function bufferToHex(buf) {
+    return Array.from(new Uint8Array(buf))
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+/**
+ * SHA-256 hex digest via Web Crypto.
+ *
+ * @param input - UTF-8 string or raw bytes.
+ * @returns Lowercase hex digest (64 chars).
+ * @throws If SubtleCrypto is unavailable.
+ */
+export async function sha256(input) {
+    const buf = await subtle().digest("SHA-256", toBytes(input));
+    return bufferToHex(buf);
+}
+/**
+ * HMAC-SHA-256 hex digest via Web Crypto.
+ *
+ * @param key   - Raw key bytes (min 32 bytes recommended for HMAC-SHA-256).
+ * @param input - UTF-8 string or raw bytes to authenticate.
+ * @returns Lowercase hex MAC (64 chars).
+ * @throws If SubtleCrypto is unavailable or key import fails.
+ */
+export async function hmacSha256(key, input) {
+    const s = subtle();
+    // Copy key into fresh ArrayBuffer to satisfy SubtleCrypto's BufferSource constraint.
+    const keyBytes = new Uint8Array(key.length);
+    keyBytes.set(key);
+    const cryptoKey = await s.importKey("raw", keyBytes, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const buf = await s.sign("HMAC", cryptoKey, toBytes(input));
+    return bufferToHex(buf);
+}
+//# sourceMappingURL=sha256.js.map

package/dist/proof/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../../src/proof/sha256.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAA0B;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,uEAAuE;IACvE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,GAAgB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAA0B;IACrD,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,KAA0B;IAE1B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,qFAAqF;IACrF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,SAAS,CACjC,KAAK,EACL,QAAQ,EACR,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC"}

package/dist/proof/types.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Proof module types — @vauban-org/agent-sdk v0.5.2 (sprint-521 Bloc 1).
+ *
+ * Mirrors src/proof/run-certificate.ts so cert.json fetched from
+ * /api/runs/:id/proof-certificate parses cleanly into these types.
+ *
+ * Intentionally kept free of server-side dependencies (no DbClient, no crypto).
+ */
+export type CertState = "awaiting_anchor" | "anchored" | "verified_on_chain";
+export type LogSeverity = "debug" | "info" | "warn" | "error";
+export interface RunStep {
+    id: string;
+    run_id: string;
+    step_index: number;
+    parent_step_id?: string | null;
+    type: "retrieval" | "decision" | "execution" | "feedback" | "observation";
+    phase?: string | null;
+    status: "pending" | "done" | "error" | "skipped";
+    started_at: string;
+    finished_at?: string | null;
+    duration_ms?: number | null;
+    payload?: Record<string, unknown> | null;
+    leaf_hash_poseidon?: string | null;
+    mcp_call_hash?: string | null;
+    retrieval_proof_hash?: string | null;
+    otel_trace_id?: string | null;
+    otel_span_id?: string | null;
+    error_message?: string | null;
+}
+export interface RunProofCertificate {
+    run_id: string;
+    agent_id: string;
+    started_at: string;
+    finished_at: string;
+    /** Trigger event ID — null if not recorded in run steps. */
+    trigger_event_id: string | null;
+    /** Brain entry IDs from retrieval steps that had an MCP call hash. */
+    brain_context_refs: string[];
+    decision_chain: Array<{
+        step_id: string;
+        step_index: number;
+        type: string;
+        phase: string | null;
+        leaf_hash_poseidon: string;
+        started_at: string;
+        finished_at: string;
+        duration_ms: number | null;
+    }>;
+    merkle_root: string | null;
+    katana_tx: string | null;
+    anchor_block_number: number | null;
+    state: CertState;
+    issued_at: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/proof/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/proof/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAE7E,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,KAAK,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC,CAAC;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/proof/types.js

@@ -0,0 +1,10 @@
+/**
+ * Proof module types — @vauban-org/agent-sdk v0.5.2 (sprint-521 Bloc 1).
+ *
+ * Mirrors src/proof/run-certificate.ts so cert.json fetched from
+ * /api/runs/:id/proof-certificate parses cleanly into these types.
+ *
+ * Intentionally kept free of server-side dependencies (no DbClient, no crypto).
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/proof/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/proof/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/proof/verify.d.ts

@@ -0,0 +1,28 @@
+/**
+ * verifyProofCertificate — pure client-side verification of RunProofCertificate.
+ *
+ * Recomputes the Poseidon Merkle root from decision_chain leaf hashes and
+ * compares against cert.merkle_root. No network call, no server trust needed.
+ *
+ * sprint-521 Bloc 1.
+ */
+import type { RunProofCertificate } from "./types.js";
+export interface VerifyResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Verify a RunProofCertificate by recomputing its Merkle root.
+ *
+ * Checks:
+ *   1. cert.state is a valid CertState enum value.
+ *   2. All leaf hashes in decision_chain have valid hex felt252 format.
+ *   3. If decision_chain is non-empty, recompute the Merkle root and compare
+ *      against cert.merkle_root. Mismatch → merkle_mismatch.
+ *   4. Empty decision_chain + null merkle_root → valid (degenerate case).
+ *
+ * @param cert - RunProofCertificate to verify (typically fetched from /api/runs/:id/proof-certificate).
+ * @returns { valid: boolean; reason?: string }
+ */
+export declare function verifyProofCertificate(cert: RunProofCertificate): VerifyResult;
+//# sourceMappingURL=verify.d.ts.map

package/dist/proof/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/proof/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAgCtD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,mBAAmB,GACxB,YAAY,CA2Bd"}

package/dist/proof/verify.js

@@ -0,0 +1,70 @@
+/**
+ * verifyProofCertificate — pure client-side verification of RunProofCertificate.
+ *
+ * Recomputes the Poseidon Merkle root from decision_chain leaf hashes and
+ * compares against cert.merkle_root. No network call, no server trust needed.
+ *
+ * sprint-521 Bloc 1.
+ */
+import { computeMerkleRoot } from "@vauban-org/proof-core";
+/** Valid CertState values for enum validation. */
+const VALID_CERT_STATES = new Set([
+    "awaiting_anchor",
+    "anchored",
+    "verified_on_chain",
+]);
+/**
+ * Minimum hex length for a leaf hash (excluding "0x" prefix).
+ *
+ * Poseidon felt252 values are ≤ 252 bits → at most 63 hex chars.
+ * A non-trivial leaf hash will be 62 or 63 hex chars.
+ * We accept anything ≥ 62 hex chars to accommodate both lengths.
+ */
+const MIN_FELT_HEX_LEN = 62;
+/**
+ * Validate a hex felt252 leaf hash.
+ * Must start with "0x" and have at least 62 lowercase hex chars after the prefix.
+ */
+function isValidLeaf(leaf) {
+    return (typeof leaf === "string" &&
+        leaf.startsWith("0x") &&
+        /^[0-9a-f]+$/i.test(leaf.slice(2)) &&
+        leaf.length >= MIN_FELT_HEX_LEN + 2);
+}
+/**
+ * Verify a RunProofCertificate by recomputing its Merkle root.
+ *
+ * Checks:
+ *   1. cert.state is a valid CertState enum value.
+ *   2. All leaf hashes in decision_chain have valid hex felt252 format.
+ *   3. If decision_chain is non-empty, recompute the Merkle root and compare
+ *      against cert.merkle_root. Mismatch → merkle_mismatch.
+ *   4. Empty decision_chain + null merkle_root → valid (degenerate case).
+ *
+ * @param cert - RunProofCertificate to verify (typically fetched from /api/runs/:id/proof-certificate).
+ * @returns { valid: boolean; reason?: string }
+ */
+export function verifyProofCertificate(cert) {
+    // ─── 1. State enum validation ─────────────────────────────────────────────
+    if (!VALID_CERT_STATES.has(cert.state)) {
+        return { valid: false, reason: "invalid_state" };
+    }
+    // ─── 2. Degenerate case: empty decision_chain ─────────────────────────────
+    if (cert.decision_chain.length === 0) {
+        return { valid: true };
+    }
+    // ─── 3. Leaf format validation ────────────────────────────────────────────
+    const leaves = cert.decision_chain.map((s) => s.leaf_hash_poseidon);
+    for (const leaf of leaves) {
+        if (!isValidLeaf(leaf)) {
+            return { valid: false, reason: "invalid_leaf_format" };
+        }
+    }
+    // ─── 4. Merkle root recomputation ─────────────────────────────────────────
+    const recomputed = computeMerkleRoot(leaves);
+    if (cert.merkle_root === null || recomputed !== cert.merkle_root) {
+        return { valid: false, reason: "merkle_mismatch" };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=verify.js.map

package/dist/proof/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/proof/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,kDAAkD;AAClD,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACrD,iBAAiB;IACjB,UAAU;IACV,mBAAmB;CACpB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,IAAI,gBAAgB,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAOD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAyB;IAEzB,6EAA6E;IAC7E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACnD,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/registry/agent-capability.d.ts

@@ -0,0 +1,29 @@
+/**
+ * AgentCapabilityCard — multi-kind capability descriptor for CC LLM router agents.
+ *
+ * Sprint-580 / registry-multi-kind
+ *
+ * In-memory schema only. SQL persistence via migration
+ * `036_agent_capability_index.sql` (coordinator-applied).
+ */
+export declare const AGENT_KINDS: readonly ["ARCHITECT", "BUILDER", "SCRIBE", "TESTER", "SYNERGY", "OODA", "LLM_ROUTER", "PLUGIN", "MCP"];
+export type AgentKind = (typeof AGENT_KINDS)[number];
+export type CostTier = "low" | "medium" | "high";
+export type LatencyTier = "low" | "medium" | "high";
+export interface AgentCapabilityCard {
+    /** Stable agent identifier (matches AgentDescriptor.id or AGENT_IDS UUID). */
+    agentId: string;
+    /** Kind classifier for this capability entry. */
+    kind: AgentKind;
+    /** Free-form skill tags, lowercased. */
+    skills: readonly string[];
+    /** Relative cost to invoke this agent. */
+    costTier: CostTier;
+    /** Relative latency of this agent. */
+    latencyTier: LatencyTier;
+    /** pgvector similarity embedding — optional in in-memory mode. */
+    embeddingVector?: readonly number[];
+    /** Unix epoch ms when this card was registered. */
+    createdAt: number;
+}
+//# sourceMappingURL=agent-capability.d.ts.map