agentic-payments 0.1.1 → 0.1.2

package/dist/mcp/tools/consensus.d.ts

@@ -3,7 +3,17 @@
  */
 import type { ToolResult, VerifyConsensusArgs } from './types.js';
 /**
- * Verify payment signature with multi-agent consensus
+ * Verify payment signature with multi-agent Byzantine consensus
+ *
+ * Implements cryptographic multi-agent verification where:
+ * - Each agent independently verifies the signature
+ * - Consensus threshold determines approval (e.g., 13 of 20 agents = 65%)
+ * - Byzantine fault tolerance: system remains secure even if f < n/3 agents are compromised
+ *
+ * Example: $50K vendor contract with 20 agents (procurement, finance, legal, audit, etc.)
+ * - Requires 13 signatures (65% consensus)
+ * - Can tolerate up to 6 compromised agents (7 would be 35% < required 65%)
+ * - No single agent or small group can authorize fraudulent transactions
  */
 export declare function verifyConsensusTool(args: VerifyConsensusArgs): Promise<ToolResult>;
 //# sourceMappingURL=consensus.d.ts.map

package/dist/mcp/tools/consensus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consensus.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/consensus.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAElE;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,UAAU,CAAC,CAoCrB"}
+{"version":3,"file":"consensus.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/consensus.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAElE;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,UAAU,CAAC,CAmFrB"}

package/dist/mcp/tools/consensus.js

@@ -2,30 +2,79 @@
  * Consensus verification MCP tools
  */
 import { VerificationSystemBuilder } from '../../verification.js';
+import { AgentIdentity } from '../../identity.js';
 /**
- * Verify payment signature with multi-agent consensus
+ * Verify payment signature with multi-agent Byzantine consensus
+ *
+ * Implements cryptographic multi-agent verification where:
+ * - Each agent independently verifies the signature
+ * - Consensus threshold determines approval (e.g., 13 of 20 agents = 65%)
+ * - Byzantine fault tolerance: system remains secure even if f < n/3 agents are compromised
+ *
+ * Example: $50K vendor contract with 20 agents (procurement, finance, legal, audit, etc.)
+ * - Requires 13 signatures (65% consensus)
+ * - Can tolerate up to 6 compromised agents (7 would be 35% < required 65%)
+ * - No single agent or small group can authorize fraudulent transactions
  */
 export async function verifyConsensusTool(args) {
     try {
-        const { agent_public_keys, consensus_threshold = 0.67, } = args;
-        // Create verification system with agent pool
-        const builder = new VerificationSystemBuilder()
+        const { message, signature, public_key, agent_public_keys, consensus_threshold = 0.67, } = args;
+        // Decode inputs from hex strings
+        const messageBytes = Buffer.from(message, 'hex');
+        const signatureBytes = Buffer.from(signature, 'hex');
+        const publicKeyBytes = Buffer.from(public_key, 'hex');
+        // Create agent identities from public keys
+        const agents = [];
+        for (const agentPubKey of agent_public_keys) {
+            const agentPubKeyBytes = Buffer.from(agentPubKey, 'hex');
+            // Create identity with public key only (no private key for verification)
+            const identity = await AgentIdentity.fromPublicKey(agentPubKeyBytes);
+            agents.push(identity);
+        }
+        if (agents.length === 0) {
+            return {
+                success: false,
+                error: 'No agents provided for consensus verification',
+            };
+        }
+        // Calculate minimum required agents based on threshold
+        const minRequired = Math.ceil(agents.length * consensus_threshold);
+        // Build verification system with Byzantine fault tolerance
+        const system = new VerificationSystemBuilder()
             .consensusThreshold(consensus_threshold)
-            .minAgents(Math.ceil(agent_public_keys.length * consensus_threshold));
-        // Build system (in real implementation, you'd add agents and use system.verifyWithConsensus)
-        builder.build();
-        // Note: This is a simplified implementation
-        // In production, you would:
-        // 1. Reconstruct AgentIdentity instances from public keys
-        // 2. Use system.verifyWithConsensus() method
-        // 3. Return actual consensus voting results
+            .minAgents(minRequired)
+            .maxAgents(agents.length)
+            .timeout(5000)
+            .parallel(true) // Parallel verification for performance
+            .addAgents(agents)
+            .build();
+        // Verify with multi-agent consensus
+        const result = await system.verifyWithConsensus(signatureBytes, messageBytes, publicKeyBytes);
+        // Return detailed consensus results
         return {
             success: true,
-            verified: true,
-            consensus_reached: true,
-            threshold: consensus_threshold,
-            agent_count: agent_public_keys.length,
-            message: 'Consensus verification requires full agent pool implementation',
+            verified: result.isValid,
+            consensus_reached: result.consensusReached,
+            votes_for: result.votesFor,
+            votes_against: result.votesAgainst,
+            total_votes: result.totalVotes,
+            consensus_percentage: Math.round(result.consensusPercentage * 100),
+            threshold_percentage: Math.round(consensus_threshold * 100),
+            required_votes: minRequired,
+            agent_count: agents.length,
+            total_latency_ms: result.totalLatencyMs,
+            avg_latency_ms: Math.round(result.avgLatencyMs * 100) / 100,
+            agent_votes: result.agentVotes.map(v => ({
+                agent_id: v.agentId,
+                vote: v.vote ? 'approve' : 'reject',
+                timestamp: v.timestamp,
+                latency_ms: v.latencyMs,
+            })),
+            byzantine_fault_tolerance: {
+                max_compromised_agents: Math.floor(agents.length / 3) - 1,
+                security_margin: result.votesFor - minRequired,
+                is_byzantine_secure: result.votesFor >= minRequired,
+            },
         };
     }
     catch (error) {

package/dist/mcp/tools/consensus.js.map

@@ -1 +1 @@
-{"version":3,"file":"consensus.js","sourceRoot":"","sources":["../../../src/mcp/tools/consensus.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAGlE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,EACJ,iBAAiB,EACjB,mBAAmB,GAAG,IAAI,GAC3B,GAAG,IAAI,CAAC;QAET,6CAA6C;QAC7C,MAAM,OAAO,GAAG,IAAI,yBAAyB,EAAE;aAC5C,kBAAkB,CAAC,mBAAmB,CAAC;aACvC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC;QAExE,6FAA6F;QAC7F,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,4CAA4C;QAC5C,4BAA4B;QAC5B,0DAA0D;QAC1D,6CAA6C;QAC7C,4CAA4C;QAE5C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,mBAAmB;YAC9B,WAAW,EAAE,iBAAiB,CAAC,MAAM;YACrC,OAAO,EACL,gEAAgE;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"consensus.js","sourceRoot":"","sources":["../../../src/mcp/tools/consensus.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,EACJ,OAAO,EACP,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,mBAAmB,GAAG,IAAI,GAC3B,GAAG,IAAI,CAAC;QAET,iCAAiC;QACjC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEtD,2CAA2C;QAC3C,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;YAC5C,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACzD,yEAAyE;YACzE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,+CAA+C;aACvD,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC;QAEnE,2DAA2D;QAC3D,MAAM,MAAM,GAAG,IAAI,yBAAyB,EAAE;aAC3C,kBAAkB,CAAC,mBAAmB,CAAC;aACvC,SAAS,CAAC,WAAW,CAAC;aACtB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;aACxB,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,IAAI,CAAC,CAAC,wCAAwC;aACvD,SAAS,CAAC,MAAM,CAAC;aACjB,KAAK,EAAE,CAAC;QAEX,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAC7C,cAAc,EACd,YAAY,EACZ,cAAc,CACf,CAAC;QAEF,oCAAoC;QACpC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;YAC1C,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,GAAG,CAAC;YAClE,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,GAAG,CAAC;YAC3D,cAAc,EAAE,WAAW;YAC3B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,gBAAgB,EAAE,MAAM,CAAC,cAAc;YACvC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,GAAG;YAC3D,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvC,QAAQ,EAAE,CAAC,CAAC,OAAO;gBACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACnC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,UAAU,EAAE,CAAC,CAAC,SAAS;aACxB,CAAC,CAAC;YACH,yBAAyB,EAAE;gBACzB,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;gBACzD,eAAe,EAAE,MAAM,CAAC,QAAQ,GAAG,WAAW;gBAC9C,mBAAmB,EAAE,MAAM,CAAC,QAAQ,IAAI,WAAW;aACpD;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-payments",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Dual-protocol payment infrastructure for autonomous AI commerce (AP2 + ACP)",
   "type": "module",
   "main": "./dist/index.js",