agentic-flow 2.0.13 → 2.1.0

package/dist/harness/provenance.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Harness provenance — Ed25519 witness manifest over harness/agent config files
+ * (ADR-075, Track B).
+ *
+ * Produces a tamper-evident manifest (sha256 per file) and signs it with Ed25519
+ * (Node's built-in `crypto` — no external deps), complementing the CWE-78
+ * hardening: a signed manifest lets a consumer verify that the agent/skill/policy
+ * files a harness ships are exactly the ones that were reviewed.
+ *
+ * Deterministic by construction (no wall-clock inside): the caller supplies any
+ * timestamp, and entries are sorted, so signing the same files yields the same
+ * payload.
+ *
+ * @see docs/adr/ADR-075-metaharness-harness-evolution-and-provenance.md
+ */
+export interface ManifestEntry {
+    /** File path as supplied (used as the stable sort/identity key). */
+    path: string;
+    /** Lowercase hex sha256 of the file contents. */
+    sha256: string;
+}
+export interface HarnessManifest {
+    version: 1;
+    /** Optional caller-supplied timestamp (ISO string). Part of the signed payload. */
+    createdAt?: string;
+    /** File digests, sorted by path for a canonical, reproducible payload. */
+    entries: ManifestEntry[];
+}
+export interface KeyPairPem {
+    publicKey: string;
+    privateKey: string;
+}
+/** Generate an Ed25519 keypair as PEM strings (spki/pkcs8). */
+export declare function generateKeyPairPem(): KeyPairPem;
+/** sha256 (hex) of a buffer. */
+export declare function sha256Hex(data: Buffer | string): string;
+/**
+ * Build a canonical manifest over the given files. Entries are sorted by path so
+ * the signed payload is stable regardless of input order. `createdAt` is included
+ * verbatim if provided.
+ */
+export declare function buildManifest(files: string[], opts?: {
+    createdAt?: string;
+}): HarnessManifest;
+/** Sign a manifest with an Ed25519 private-key PEM. Returns a base64 signature. */
+export declare function signManifest(manifest: HarnessManifest, privateKeyPem: string): string;
+/** Verify a base64 Ed25519 signature over a manifest with a public-key PEM. */
+export declare function verifyManifest(manifest: HarnessManifest, signatureBase64: string, publicKeyPem: string): boolean;
+export interface SignedManifest {
+    manifest: HarnessManifest;
+    signature: string;
+    publicKey: string;
+}
+/** Convenience: build + sign in one step, returning a portable signed bundle. */
+export declare function signFiles(files: string[], privateKeyPem: string, publicKeyPem: string, opts?: {
+    createdAt?: string;
+}): SignedManifest;
+/**
+ * Verify a signed bundle AND that the on-disk files still match the manifest
+ * digests. Returns a per-file drift report so a caller can see exactly what
+ * changed since signing.
+ */
+export declare function verifySignedManifest(signed: SignedManifest): {
+    signatureValid: boolean;
+    filesIntact: boolean;
+    drift: {
+        path: string;
+        expected: string;
+        actual: string | null;
+    }[];
+};
+//# sourceMappingURL=provenance.d.ts.map

package/dist/harness/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/harness/provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,IAAI,UAAU,CAM/C;AAED,gCAAgC;AAChC,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,eAAe,CAKjG;AAYD,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAIrF;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAOhH;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,cAAc,CAGzI;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG;IAC5D,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;CACpE,CAaA"}

package/dist/harness/provenance.js

@@ -0,0 +1,92 @@
+/**
+ * Harness provenance — Ed25519 witness manifest over harness/agent config files
+ * (ADR-075, Track B).
+ *
+ * Produces a tamper-evident manifest (sha256 per file) and signs it with Ed25519
+ * (Node's built-in `crypto` — no external deps), complementing the CWE-78
+ * hardening: a signed manifest lets a consumer verify that the agent/skill/policy
+ * files a harness ships are exactly the ones that were reviewed.
+ *
+ * Deterministic by construction (no wall-clock inside): the caller supplies any
+ * timestamp, and entries are sorted, so signing the same files yields the same
+ * payload.
+ *
+ * @see docs/adr/ADR-075-metaharness-harness-evolution-and-provenance.md
+ */
+import { generateKeyPairSync, sign as cryptoSign, verify as cryptoVerify, createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+/** Generate an Ed25519 keypair as PEM strings (spki/pkcs8). */
+export function generateKeyPairPem() {
+    const { publicKey, privateKey } = generateKeyPairSync('ed25519');
+    return {
+        publicKey: publicKey.export({ type: 'spki', format: 'pem' }).toString(),
+        privateKey: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(),
+    };
+}
+/** sha256 (hex) of a buffer. */
+export function sha256Hex(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+/**
+ * Build a canonical manifest over the given files. Entries are sorted by path so
+ * the signed payload is stable regardless of input order. `createdAt` is included
+ * verbatim if provided.
+ */
+export function buildManifest(files, opts = {}) {
+    const entries = files
+        .map((path) => ({ path, sha256: sha256Hex(readFileSync(path)) }))
+        .sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    return { version: 1, ...(opts.createdAt ? { createdAt: opts.createdAt } : {}), entries };
+}
+/** Canonical bytes that get signed/verified — stable JSON of the manifest. */
+function canonicalPayload(manifest) {
+    // Keys emitted in a fixed order; entries already sorted by buildManifest.
+    return JSON.stringify({
+        version: manifest.version,
+        createdAt: manifest.createdAt ?? null,
+        entries: manifest.entries.map((e) => ({ path: e.path, sha256: e.sha256 })),
+    });
+}
+/** Sign a manifest with an Ed25519 private-key PEM. Returns a base64 signature. */
+export function signManifest(manifest, privateKeyPem) {
+    const payload = Buffer.from(canonicalPayload(manifest), 'utf8');
+    // Ed25519 takes a null algorithm (the curve fixes the hash).
+    return cryptoSign(null, payload, privateKeyPem).toString('base64');
+}
+/** Verify a base64 Ed25519 signature over a manifest with a public-key PEM. */
+export function verifyManifest(manifest, signatureBase64, publicKeyPem) {
+    try {
+        const payload = Buffer.from(canonicalPayload(manifest), 'utf8');
+        return cryptoVerify(null, payload, publicKeyPem, Buffer.from(signatureBase64, 'base64'));
+    }
+    catch {
+        return false; // malformed signature/key → not verified
+    }
+}
+/** Convenience: build + sign in one step, returning a portable signed bundle. */
+export function signFiles(files, privateKeyPem, publicKeyPem, opts = {}) {
+    const manifest = buildManifest(files, opts);
+    return { manifest, signature: signManifest(manifest, privateKeyPem), publicKey: publicKeyPem };
+}
+/**
+ * Verify a signed bundle AND that the on-disk files still match the manifest
+ * digests. Returns a per-file drift report so a caller can see exactly what
+ * changed since signing.
+ */
+export function verifySignedManifest(signed) {
+    const signatureValid = verifyManifest(signed.manifest, signed.signature, signed.publicKey);
+    const drift = [];
+    for (const entry of signed.manifest.entries) {
+        let actual = null;
+        try {
+            actual = sha256Hex(readFileSync(entry.path));
+        }
+        catch {
+            actual = null; // missing/unreadable
+        }
+        if (actual !== entry.sha256)
+            drift.push({ path: entry.path, expected: entry.sha256, actual });
+    }
+    return { signatureValid, filesIntact: drift.length === 0, drift };
+}
+//# sourceMappingURL=provenance.js.map

package/dist/harness/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/harness/provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,mBAAmB,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,IAAI,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAsBvC,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,SAAS,CAAC,IAAqB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAe,EAAE,OAA+B,EAAE;IAC9E,MAAM,OAAO,GAAoB,KAAK;SACnC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;SAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AAC3F,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,QAAyB;IACjD,0EAA0E;IAC1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,QAAyB,EAAE,aAAqB;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,6DAA6D;IAC7D,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,eAAuB,EAAE,YAAoB;IACrG,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,yCAAyC;IACzD,CAAC;AACH,CAAC;AAQD,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,KAAe,EAAE,aAAqB,EAAE,YAAoB,EAAE,OAA+B,EAAE;IACvH,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IAKzD,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAgE,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5C,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC,CAAC,qBAAqB;QACtC,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC","sourcesContent":["/**\n * Harness provenance — Ed25519 witness manifest over harness/agent config files\n * (ADR-075, Track B).\n *\n * Produces a tamper-evident manifest (sha256 per file) and signs it with Ed25519\n * (Node's built-in `crypto` — no external deps), complementing the CWE-78\n * hardening: a signed manifest lets a consumer verify that the agent/skill/policy\n * files a harness ships are exactly the ones that were reviewed.\n *\n * Deterministic by construction (no wall-clock inside): the caller supplies any\n * timestamp, and entries are sorted, so signing the same files yields the same\n * payload.\n *\n * @see docs/adr/ADR-075-metaharness-harness-evolution-and-provenance.md\n */\n\nimport { generateKeyPairSync, sign as cryptoSign, verify as cryptoVerify, createHash } from 'node:crypto';\nimport { readFileSync } from 'node:fs';\n\nexport interface ManifestEntry {\n  /** File path as supplied (used as the stable sort/identity key). */\n  path: string;\n  /** Lowercase hex sha256 of the file contents. */\n  sha256: string;\n}\n\nexport interface HarnessManifest {\n  version: 1;\n  /** Optional caller-supplied timestamp (ISO string). Part of the signed payload. */\n  createdAt?: string;\n  /** File digests, sorted by path for a canonical, reproducible payload. */\n  entries: ManifestEntry[];\n}\n\nexport interface KeyPairPem {\n  publicKey: string;\n  privateKey: string;\n}\n\n/** Generate an Ed25519 keypair as PEM strings (spki/pkcs8). */\nexport function generateKeyPairPem(): KeyPairPem {\n  const { publicKey, privateKey } = generateKeyPairSync('ed25519');\n  return {\n    publicKey: publicKey.export({ type: 'spki', format: 'pem' }).toString(),\n    privateKey: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(),\n  };\n}\n\n/** sha256 (hex) of a buffer. */\nexport function sha256Hex(data: Buffer | string): string {\n  return createHash('sha256').update(data).digest('hex');\n}\n\n/**\n * Build a canonical manifest over the given files. Entries are sorted by path so\n * the signed payload is stable regardless of input order. `createdAt` is included\n * verbatim if provided.\n */\nexport function buildManifest(files: string[], opts: { createdAt?: string } = {}): HarnessManifest {\n  const entries: ManifestEntry[] = files\n    .map((path) => ({ path, sha256: sha256Hex(readFileSync(path)) }))\n    .sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n  return { version: 1, ...(opts.createdAt ? { createdAt: opts.createdAt } : {}), entries };\n}\n\n/** Canonical bytes that get signed/verified — stable JSON of the manifest. */\nfunction canonicalPayload(manifest: HarnessManifest): string {\n  // Keys emitted in a fixed order; entries already sorted by buildManifest.\n  return JSON.stringify({\n    version: manifest.version,\n    createdAt: manifest.createdAt ?? null,\n    entries: manifest.entries.map((e) => ({ path: e.path, sha256: e.sha256 })),\n  });\n}\n\n/** Sign a manifest with an Ed25519 private-key PEM. Returns a base64 signature. */\nexport function signManifest(manifest: HarnessManifest, privateKeyPem: string): string {\n  const payload = Buffer.from(canonicalPayload(manifest), 'utf8');\n  // Ed25519 takes a null algorithm (the curve fixes the hash).\n  return cryptoSign(null, payload, privateKeyPem).toString('base64');\n}\n\n/** Verify a base64 Ed25519 signature over a manifest with a public-key PEM. */\nexport function verifyManifest(manifest: HarnessManifest, signatureBase64: string, publicKeyPem: string): boolean {\n  try {\n    const payload = Buffer.from(canonicalPayload(manifest), 'utf8');\n    return cryptoVerify(null, payload, publicKeyPem, Buffer.from(signatureBase64, 'base64'));\n  } catch {\n    return false; // malformed signature/key → not verified\n  }\n}\n\nexport interface SignedManifest {\n  manifest: HarnessManifest;\n  signature: string; // base64\n  publicKey: string; // spki PEM (the verification anchor)\n}\n\n/** Convenience: build + sign in one step, returning a portable signed bundle. */\nexport function signFiles(files: string[], privateKeyPem: string, publicKeyPem: string, opts: { createdAt?: string } = {}): SignedManifest {\n  const manifest = buildManifest(files, opts);\n  return { manifest, signature: signManifest(manifest, privateKeyPem), publicKey: publicKeyPem };\n}\n\n/**\n * Verify a signed bundle AND that the on-disk files still match the manifest\n * digests. Returns a per-file drift report so a caller can see exactly what\n * changed since signing.\n */\nexport function verifySignedManifest(signed: SignedManifest): {\n  signatureValid: boolean;\n  filesIntact: boolean;\n  drift: { path: string; expected: string; actual: string | null }[];\n} {\n  const signatureValid = verifyManifest(signed.manifest, signed.signature, signed.publicKey);\n  const drift: { path: string; expected: string; actual: string | null }[] = [];\n  for (const entry of signed.manifest.entries) {\n    let actual: string | null = null;\n    try {\n      actual = sha256Hex(readFileSync(entry.path));\n    } catch {\n      actual = null; // missing/unreadable\n    }\n    if (actual !== entry.sha256) drift.push({ path: entry.path, expected: entry.sha256, actual });\n  }\n  return { signatureValid, filesIntact: drift.length === 0, drift };\n}\n"]}

package/dist/intelligence/EmbeddingService.js

@@ -814,11 +814,11 @@ export class EmbeddingService {
         let newChunks = 0;
         let skipped = 0;
         try {
-            const { execSync } = await import('child_process');
+            const { execFileSync } = await import('child_process');
             const path = await import('path');
             const fs = await import('fs');
-            // Get changed files from git
-            const gitOutput = execSync(`git diff --name-only ${since}`, {
+            // Get changed files from git — pass `since` as a separate arg to avoid shell injection
+            const gitOutput = execFileSync('git', ['diff', '--name-only', since], {
                 cwd: repoPath,
                 encoding: 'utf-8',
             });