@viewportai/daemon 0.2.0 → 0.3.0

package/node_modules/@viewportai/context-engine/fixtures/protocol-vectors/standalone-decoder.mjs

@@ -0,0 +1,124 @@
+#!/usr/bin/env node
+
+import assert from 'node:assert/strict';
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Aes256Gcm, CipherSuite, HkdfSha256 } from '@hpke/core';
+import { DhkemX25519HkdfSha256 } from '@hpke/dhkem-x25519';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+function canonicalJson(value) {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  if (value === null || typeof value !== 'object') {
+    return JSON.stringify(value);
+  }
+
+  if (Array.isArray(value)) {
+    return `[${value.map((item) => canonicalJson(item) ?? 'null').join(',')}]`;
+  }
+
+  return `{${Object.keys(value)
+    .filter((key) => value[key] !== undefined)
+    .sort()
+    .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+    .join(',')}}`;
+}
+
+function readVector(name) {
+  return JSON.parse(fs.readFileSync(path.join(__dirname, name), 'utf8'));
+}
+
+function sha256Hex(buffer) {
+  return crypto.createHash('sha256').update(buffer).digest('hex');
+}
+
+async function decodeHpkeGrant(vector) {
+  const suite = new CipherSuite({
+    kem: new DhkemX25519HkdfSha256(),
+    kdf: new HkdfSha256(),
+    aead: new Aes256Gcm(),
+  });
+
+  const { grant, recipient } = vector;
+  const privateKey = await suite.kem.deserializePrivateKey(Buffer.from(recipient.hpkePrivateKey, 'base64'));
+  const info = Buffer.from(canonicalJson({
+    purpose: 'viewport-context-repo-key-grant',
+    version: grant.version,
+    recipientName: grant.recipientName,
+    repoId: grant.repoId,
+    keyEpoch: grant.keyEpoch,
+    suite: grant.suite,
+  }));
+  const aad = Buffer.from(canonicalJson({
+    version: grant.version,
+    recipientName: grant.recipientName,
+    repoId: grant.repoId,
+    keyEpoch: grant.keyEpoch,
+  }));
+  const aadDigest = `sha256:${sha256Hex(aad)}`;
+
+  assert.equal(grant.aadDigest, aadDigest);
+
+  const recipientContext = await suite.createRecipientContext({
+    recipientKey: privateKey,
+    enc: Buffer.from(grant.enc, 'base64'),
+    info,
+  });
+  const repoKey = Buffer.from(await recipientContext.open(Buffer.from(grant.ciphertext, 'base64'), aad));
+  const repoKeyDigest = `sha256:${sha256Hex(repoKey)}`;
+
+  assert.equal(repoKeyDigest, vector.expectedRepoKeyDigest);
+
+  return {
+    vector: 'hpke-key-grant.json',
+    ok: true,
+    aad_digest: aadDigest,
+    repo_key_digest: repoKeyDigest,
+  };
+}
+
+function verifySignedEvent(vector) {
+  const { signature, ...unsignedEvent } = vector.event;
+  const verified = crypto.verify(
+    null,
+    Buffer.from(canonicalJson(unsignedEvent)),
+    vector.actor.signingPublicKey,
+    Buffer.from(signature, 'base64'),
+  );
+
+  assert.equal(verified, true);
+
+  const tamperedEvent = {
+    ...unsignedEvent,
+    payloadDigest: `sha256:${'0'.repeat(64)}`,
+  };
+  const tamperedVerified = crypto.verify(
+    null,
+    Buffer.from(canonicalJson(tamperedEvent)),
+    vector.actor.signingPublicKey,
+    Buffer.from(signature, 'base64'),
+  );
+
+  assert.equal(tamperedVerified, false);
+
+  return {
+    vector: 'signed-event.json',
+    ok: true,
+    tamper_rejected: true,
+  };
+}
+
+const result = {
+  schemaVersion: 'viewport.context_protocol_standalone_decoder_result/v1',
+  hpke_key_grant: await decodeHpkeGrant(readVector('hpke-key-grant.json')),
+  signed_event: verifySignedEvent(readVector('signed-event.json')),
+};
+
+console.log(JSON.stringify(result, null, 2));

package/node_modules/@viewportai/context-engine/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "@viewportai/context-engine",
+  "version": "0.0.1",
+  "private": true,
+  "description": "Viewport Context Vault canonical engine.",
+  "type": "commonjs",
+  "main": "./src/index.js",
+  "exports": {
+    ".": "./src/index.js"
+  }
+}

package/node_modules/@viewportai/context-engine/schemas/context_bundle_manifest_v1.schema.json

@@ -0,0 +1,134 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:viewport:context_bundle_manifest:v1",
+  "title": "Viewport Context Bundle Manifest v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "apiVersion",
+    "bundle_id",
+    "resolved_at",
+    "resolver",
+    "index",
+    "request",
+    "profile",
+    "retrieval",
+    "offline",
+    "items",
+    "digest"
+  ],
+  "properties": {
+    "apiVersion": { "const": "viewport.context_bundle_manifest/v1" },
+    "bundle_id": { "type": "string", "pattern": "^ctxb_" },
+    "resolved_at": { "type": "string", "minLength": 1 },
+    "resolver": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "version"],
+      "properties": {
+        "kind": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 }
+      }
+    },
+    "index": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["engine", "embedding_model_id", "embedding_model_digest"],
+      "properties": {
+        "engine": { "type": "string", "minLength": 1 },
+        "embedding_model_id": { "type": "string", "minLength": 1 },
+        "embedding_model_digest": { "type": "string", "pattern": "^sha256:.+" }
+      }
+    },
+    "request": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["packs", "target", "include_private", "pins", "query", "max_items"],
+      "properties": {
+        "packs": { "type": "array", "items": { "type": "string" } },
+        "target": { "type": "object" },
+        "include_private": { "type": "boolean" },
+        "pins": { "type": "object" },
+        "query": { "type": ["string", "null"] },
+        "max_items": { "type": ["integer", "null"], "minimum": 1 }
+      }
+    },
+    "profile": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["name", "path", "digest", "schemaVersion"],
+          "properties": {
+            "name": { "type": "string", "minLength": 1 },
+            "path": { "type": "string", "pattern": "^\\.viewport/context/profiles/.+\\.json$" },
+            "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+            "schemaVersion": { "const": "viewport.context_profile/v1" }
+          }
+        }
+      ]
+    },
+    "retrieval": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "local_only", "remote_plaintext_calls"],
+      "properties": {
+        "mode": { "enum": ["all-approved", "local-semantic"] },
+        "local_only": { "const": true },
+        "remote_plaintext_calls": { "const": 0 }
+      }
+    },
+    "offline": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["active", "last_sync_at"],
+      "properties": {
+        "active": { "type": "boolean" },
+        "last_sync_at": { "type": ["string", "null"] }
+      }
+    },
+    "override": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["reason", "actor_name", "created_at", "mismatches"],
+      "properties": {
+        "reason": { "type": "string", "minLength": 1 },
+        "actor_name": { "type": "string", "minLength": 1 },
+        "created_at": { "type": "string", "minLength": 1 },
+        "mismatches": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["field", "expected", "actual"],
+            "properties": {
+              "field": { "type": "string", "minLength": 1 },
+              "expected": {},
+              "actual": {}
+            }
+          }
+        }
+      }
+    },
+    "items": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["entry_id", "version_id", "source", "trust", "scope", "body_mode", "title"],
+        "properties": {
+          "entry_id": { "type": "string", "pattern": "^ctxe_" },
+          "version_id": { "type": "string", "pattern": "^ctxev_" },
+          "source": { "type": "string", "minLength": 1 },
+          "trust": { "enum": ["approved", "canonical"] },
+          "scope": { "enum": ["private", "resource", "team", "organization"] },
+          "body_mode": { "enum": ["included", "redacted"] },
+          "title": { "type": "string", "minLength": 1 },
+          "retrieval_score": { "type": ["number", "null"] }
+        }
+      }
+    },
+    "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+  }
+}

package/node_modules/@viewportai/context-engine/schemas/context_erase_receipt_v1.schema.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:viewport:context_erase_receipt:v1",
+  "title": "Viewport Context Erase Receipt v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "id",
+    "repoId",
+    "actorName",
+    "revocationEventId",
+    "erasedAt",
+    "cacheTombstoned",
+    "signature"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "viewport.context_erase_receipt/v1" },
+    "id": { "type": "string", "pattern": "^erase_" },
+    "repoId": { "type": "string", "minLength": 1 },
+    "actorName": { "type": "string", "minLength": 1 },
+    "revocationEventId": { "type": "string", "pattern": "^evt_" },
+    "erasedAt": { "type": "string", "minLength": 1 },
+    "cacheTombstoned": { "const": true },
+    "signature": { "type": "string", "minLength": 1 }
+  }
+}

package/node_modules/@viewportai/context-engine/schemas/context_event_v1.schema.json

@@ -0,0 +1,214 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:viewport:context_event:v1",
+  "title": "Viewport Context Event v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "id",
+    "repoId",
+    "type",
+    "actorName",
+    "keyEpoch",
+    "visibility",
+    "createdAt",
+    "parentIds",
+    "encrypted",
+    "grant",
+    "payloadDigest",
+    "schemaVersion",
+    "signature"
+  ],
+  "properties": {
+    "id": { "type": "string", "pattern": "^evt_" },
+    "repoId": { "type": "string", "minLength": 1 },
+    "type": {
+      "enum": [
+        "repo.created",
+        "member.granted",
+        "member.revoked",
+        "key.rotated",
+        "entry.approved",
+        "entry.proposed",
+        "entry.superseded",
+        "candidate.assigned",
+        "candidate.approved",
+        "candidate.rejected",
+        "candidate.tombstoned"
+      ]
+    },
+    "actorName": { "type": "string", "minLength": 1 },
+    "keyEpoch": { "type": "integer", "minimum": 0 },
+    "visibility": { "enum": ["private", "shared"] },
+    "createdAt": { "type": "string", "minLength": 1 },
+    "parentIds": {
+      "type": "array",
+      "items": { "type": "string", "pattern": "^evt_" }
+    },
+    "encrypted": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["alg", "iv", "ciphertext", "tag"],
+          "properties": {
+            "alg": { "const": "aes-256-gcm" },
+            "iv": { "type": "string", "minLength": 1 },
+            "ciphertext": { "type": "string", "minLength": 1 },
+            "tag": { "type": "string", "minLength": 1 }
+          }
+        }
+      ]
+    },
+    "grant": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["recipientName", "keyEpoch", "wrappedRepoKeyEnvelope"],
+          "properties": {
+            "recipientName": { "type": "string", "minLength": 1 },
+            "keyEpoch": { "type": "integer", "minimum": 1 },
+            "wrappedRepoKeyEnvelope": {
+              "oneOf": [
+                { "$ref": "urn:viewport:context_key_grant:v1" },
+                { "$ref": "urn:viewport:context_key_grant:hpke_draft_01" }
+              ]
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["revokedName", "nextKeyEpoch"],
+          "properties": {
+            "revokedName": { "type": "string", "minLength": 1 },
+            "nextKeyEpoch": { "type": "integer", "minimum": 1 }
+          }
+        }
+      ]
+    },
+    "payloadDigest": {
+      "oneOf": [
+        { "type": "null" },
+        { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+      ]
+    },
+    "contextResourceId": { "type": "string", "minLength": 1 },
+    "schemaVersion": { "const": "viewport.context_event/v1" },
+    "signature": { "type": "string", "minLength": 1 }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "visibility": { "const": "private" } } },
+      "then": {
+        "properties": {
+          "keyEpoch": { "const": 0 },
+          "encrypted": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["alg", "iv", "ciphertext", "tag"],
+            "properties": {
+              "alg": { "const": "aes-256-gcm" },
+              "iv": { "type": "string", "minLength": 1 },
+              "ciphertext": { "type": "string", "minLength": 1 },
+              "tag": { "type": "string", "minLength": 1 }
+            }
+          },
+          "grant": { "type": "null" },
+          "payloadDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "type": {
+            "enum": ["repo.created", "member.granted", "key.rotated"]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "visibility": { "const": "shared" },
+          "encrypted": { "type": "null" },
+          "payloadDigest": { "type": "null" },
+          "grant": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["recipientName", "keyEpoch", "wrappedRepoKeyEnvelope"],
+            "properties": {
+              "recipientName": { "type": "string", "minLength": 1 },
+              "keyEpoch": { "type": "integer", "minimum": 1 },
+              "wrappedRepoKeyEnvelope": {
+                "oneOf": [
+                  { "$ref": "urn:viewport:context_key_grant:v1" },
+                  { "$ref": "urn:viewport:context_key_grant:hpke_draft_01" }
+                ]
+              }
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "type": { "const": "member.revoked" }
+        }
+      },
+      "then": {
+        "properties": {
+          "visibility": { "const": "shared" },
+          "encrypted": { "type": "null" },
+          "payloadDigest": { "type": "null" },
+          "grant": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["revokedName", "nextKeyEpoch"],
+            "properties": {
+              "revokedName": { "type": "string", "minLength": 1 },
+              "nextKeyEpoch": { "type": "integer", "minimum": 1 }
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "type": {
+            "enum": [
+              "entry.approved",
+              "entry.proposed",
+              "entry.superseded",
+              "candidate.assigned",
+              "candidate.approved",
+              "candidate.rejected",
+              "candidate.tombstoned"
+            ]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "encrypted": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["alg", "iv", "ciphertext", "tag"],
+            "properties": {
+              "alg": { "const": "aes-256-gcm" },
+              "iv": { "type": "string", "minLength": 1 },
+              "ciphertext": { "type": "string", "minLength": 1 },
+              "tag": { "type": "string", "minLength": 1 }
+            }
+          },
+          "grant": { "type": "null" },
+          "payloadDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+        }
+      }
+    }
+  ]
+}

package/node_modules/@viewportai/context-engine/schemas/context_key_grant_hpke_draft_01.schema.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:viewport:context_key_grant:hpke_draft_01",
+  "title": "Viewport Context HPKE Key Grant Draft 01",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "recipientName", "repoId", "keyEpoch", "suite", "enc", "ciphertext", "aadDigest"],
+  "properties": {
+    "version": { "const": "viewport.context_key_grant/hpke-draft-01" },
+    "recipientName": { "type": "string", "minLength": 1 },
+    "repoId": { "type": "string", "minLength": 1 },
+    "keyEpoch": { "type": "integer", "minimum": 1 },
+    "suite": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kem", "kdf", "aead"],
+      "properties": {
+        "kem": { "const": "DHKEM_X25519_HKDF_SHA256" },
+        "kdf": { "const": "HKDF_SHA256" },
+        "aead": { "const": "AES_256_GCM" }
+      }
+    },
+    "enc": { "type": "string", "pattern": "^[A-Za-z0-9+/]{43}=$" },
+    "ciphertext": { "type": "string", "pattern": "^[A-Za-z0-9+/]{64}$" },
+    "aadDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+  }
+}

package/node_modules/@viewportai/context-engine/schemas/context_key_grant_v1.schema.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:viewport:context_key_grant:v1",
+  "title": "Viewport Context Key Grant v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "recipientName", "ephemeralPublicKey", "encryptedRepoKey"],
+  "properties": {
+    "version": { "const": "viewport.context_key_grant/v1" },
+    "recipientName": { "type": "string", "minLength": 1 },
+    "ephemeralPublicKey": { "type": "string", "minLength": 1 },
+    "encryptedRepoKey": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["alg", "iv", "ciphertext", "tag"],
+      "properties": {
+        "alg": { "const": "x25519-hkdf-sha256+a256gcm" },
+        "iv": { "type": "string", "minLength": 1 },
+        "ciphertext": { "type": "string", "minLength": 1 },
+        "tag": { "type": "string", "minLength": 1 }
+      }
+    }
+  }
+}

package/node_modules/@viewportai/context-engine/schemas/context_profile_v1.schema.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:viewport:context_profile:v1",
+  "title": "Viewport Context Profile v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "name", "path", "profile", "digest", "updatedAt"],
+  "properties": {
+    "schemaVersion": { "const": "viewport.context_profile/v1" },
+    "name": { "type": "string", "minLength": 1 },
+    "path": { "type": "string", "pattern": "^\\.viewport/context/profiles/.+\\.json$" },
+    "profile": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "packs": { "type": "array", "items": { "type": "string" } },
+        "query": { "type": ["string", "null"] },
+        "maxItems": { "type": ["integer", "null"], "minimum": 1 }
+      }
+    },
+    "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "updatedAt": { "type": "string", "minLength": 1 }
+  }
+}