agentic-qe 3.12.3 → 3.13.0

package/dist/cli/chunks/{workflow-XCGHEL3I.js → workflow-A2AX3RJU.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.12.3");process.exit(0)}
-import"./chunk-DMD6WVJ2.js";import{b as $}from"./chunk-FTM562PF.js";import{d as R}from"./chunk-S47YGWXK.js";import{b as k,c as C,d as b}from"./chunk-BEPP57C2.js";import{c as W}from"./chunk-OBL6W4Z5.js";import"./chunk-NKTLKMUB.js";import"./chunk-2LNDU7AW.js";import"./chunk-SGMJ277D.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.13.0");process.exit(0)}
+import"./chunk-DRIJYTSK.js";import{b as $}from"./chunk-7DMXCCSD.js";import{d as R}from"./chunk-YPTGE5NJ.js";import{b as k,c as C,d as b}from"./chunk-ZOXWASCC.js";import{c as W}from"./chunk-2DIT5AUU.js";import"./chunk-QI4CGJNK.js";import"./chunk-CYL2FV23.js";import"./chunk-ES7WCYOU.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
  Running workflow from: ${t}
 `));let s=k(c);if(!s.success||!s.workflow){console.log(o.red("Failed to parse pipeline:"));for(let w of s.errors)console.log(o.red(`   ${w}`));await a(1)}let r={...W(l.params,"params")};if(s.pipeline){for(let w of s.pipeline.stages)if(w.params)for(let[S,h]of Object.entries(w.params))r[S]=h}if(!d.workflowOrchestrator.getWorkflow(s.workflow.id)){let w=d.workflowOrchestrator.registerWorkflow(s.workflow);w.success||(console.log(o.red(`Failed to register workflow: ${w.error.message}`)),await a(1))}let n=await d.workflowOrchestrator.executeWorkflow(s.workflow.id,r);if(!n.success){console.log(o.red(`Failed to start workflow: ${n.error.message}`)),await a(1);return}let p=n.value;if(console.log(o.cyan(`  Execution ID: ${p}`)),console.log(o.gray(`  Workflow: ${s.workflow.name}`)),console.log(o.gray(`  Stages: ${s.workflow.steps.length}`)),console.log(""),l.watch){console.log(o.blue(`Workflow Progress:
 `));let w,S=Date.now();for(;;){let g=d.workflowOrchestrator.getWorkflowStatus(p);if(!g)break;if(!w||w.progress!==g.progress||w.status!==g.status||JSON.stringify(w.currentSteps)!==JSON.stringify(g.currentSteps)){process.stdout.write("\r\x1B[K");let v="\u2588".repeat(Math.floor(g.progress/5))+"\u2591".repeat(20-Math.floor(g.progress/5)),D=g.status==="completed"?o.green:g.status==="failed"?o.red:g.status==="running"?o.yellow:o.gray;console.log(`  [${v}] ${g.progress}% - ${D(g.status)}`),g.currentSteps.length>0&&l.verbose&&console.log(o.gray(`    Running: ${g.currentSteps.join(", ")}`)),w=g}if(g.status==="completed"||g.status==="failed"||g.status==="cancelled")break;await new Promise(v=>setTimeout(v,500))}let h=d.workflowOrchestrator.getWorkflowStatus(p);if(h){console.log("");let g=h.duration||Date.now()-S;h.status==="completed"?(console.log(o.green("Workflow completed successfully")),console.log(o.gray(`   Duration: ${$(g)}`)),console.log(o.gray(`   Completed: ${h.completedSteps.length} stages`)),h.skippedSteps.length>0&&console.log(o.yellow(`   Skipped: ${h.skippedSteps.length} stages`))):h.status==="failed"?(console.log(o.red("Workflow failed")),console.log(o.red(`   Error: ${h.error}`)),console.log(o.gray(`   Failed stages: ${h.failedSteps.join(", ")}`))):console.log(o.yellow(`Workflow ${h.status}`))}}else console.log(o.green("Workflow execution started")),console.log(o.gray(`   Use 'aqe workflow status ${p}' to check progress`));console.log(""),await a(0)}catch(s){console.error(o.red(`
@@ -35,10 +35,10 @@ Workflow cancelled: ${t}
 `)):console.log(o.red(`
 Failed to cancel workflow: ${l.error.message}
 `)),await a(l.success?0:1)}catch(l){console.error(o.red(`
-Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-ZMMKCGYW.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
+Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-MXS3ZKY2.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
  Browser Workflow Templates:
 `));for(let u of e.data.availableTemplates)console.log(`  ${o.cyan(u)}`);console.log("")}else console.log(o.red(`Failed: ${e.error||"Unknown error"}`));await a(0)}catch(t){console.error(o.red(`
-Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-ZMMKCGYW.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-25GS6RXR.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
+Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-MXS3ZKY2.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-HD6IZNJA.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
 File not found: ${p}
 `)),await a(1)),f.workflowYaml=i.readFileSync(p,"utf-8")}else f.templateName=t;else console.log(o.red(`
 Provide a template name or --yaml. Use "workflow browser-list" to see templates.

package/dist/cli/chunks/workflow-orchestrator-GOWSPR3G.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.13.0");process.exit(0)}
+import{a,b,c,d}from"./chunk-54MFKCLT.js";import"./chunk-IYDYJ33J.js";import"./chunk-G5DFYX3J.js";import"./chunk-W5YEIHIO.js";import"./chunk-BUGWPTMF.js";import"./chunk-HVB2L52I.js";import"./chunk-OXXMVQDF.js";import"./chunk-NUQBJGGF.js";import"./chunk-2DIT5AUU.js";import"./chunk-QI4CGJNK.js";import"./chunk-CYL2FV23.js";import"./chunk-E3B5XTXJ.js";import"./chunk-SNTUKW4Q.js";import"./chunk-TVMFH5N2.js";import"./chunk-THBTN7XB.js";import"./chunk-RDU4WTV2.js";import"./chunk-LBE2P6UC.js";import"./chunk-IZRLIWFN.js";import"./chunk-AO7AHX6K.js";import"./chunk-YRQLVGCI.js";import"./chunk-3GSYD5SL.js";import"./chunk-ES7WCYOU.js";export{b as DEFAULT_WORKFLOW_CONFIG,a as WorkflowEvents,c as WorkflowOrchestrator,d as createWorkflowOrchestrator};

package/dist/cli/chunks/{wrappers-VGO2GO4J.js → wrappers-NA6FHA63.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.12.3");process.exit(0)}
-import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-QILF6BZH.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-YOG5KQZF.js";import"./chunk-NOSQI2OW.js";import"./chunk-FJACKKRL.js";import"./chunk-L2X3BWMN.js";import"./chunk-G5OGKVLO.js";import"./chunk-4EHW4TNA.js";import"./chunk-NJDLJ3KD.js";import"./chunk-OBL6W4Z5.js";import"./chunk-2LNDU7AW.js";import"./chunk-ULQCEM7K.js";import"./chunk-UAPUA6OY.js";import"./chunk-GS6G7AVS.js";import"./chunk-YUDGQZJN.js";import"./chunk-HJ4U64BL.js";import"./chunk-CYSBM52D.js";import"./chunk-NLDLUHOF.js";import"./chunk-PEHEANAM.js";import"./chunk-XUUVAAHV.js";import"./chunk-SGMJ277D.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.13.0");process.exit(0)}
+import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-HOKON5EL.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-HTPM3URI.js";import"./chunk-G5DFYX3J.js";import"./chunk-W5YEIHIO.js";import"./chunk-BUGWPTMF.js";import"./chunk-HVB2L52I.js";import"./chunk-OXXMVQDF.js";import"./chunk-NUQBJGGF.js";import"./chunk-2DIT5AUU.js";import"./chunk-CYL2FV23.js";import"./chunk-SNTUKW4Q.js";import"./chunk-TVMFH5N2.js";import"./chunk-THBTN7XB.js";import"./chunk-RDU4WTV2.js";import"./chunk-LBE2P6UC.js";import"./chunk-IZRLIWFN.js";import"./chunk-AO7AHX6K.js";import"./chunk-YRQLVGCI.js";import"./chunk-3GSYD5SL.js";import"./chunk-ES7WCYOU.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};

package/dist/cli/commands/llm-router.js

@@ -400,6 +400,7 @@ function getDefaultModelForProvider(provider) {
     const defaults = {
         claude: 'claude-sonnet-4-6',
         'claude-code': 'sonnet',
+        codex: 'gpt-5-codex',
         openai: 'gpt-4o',
         ollama: 'llama3.1',
         openrouter: 'anthropic/claude-sonnet-4',

package/dist/init/skills-installer.js

@@ -30,6 +30,7 @@ const V3_DOMAIN_SKILLS = [
     'qe-visual-accessibility', // Visual regression, WCAG
     'qe-chaos-resilience', // Fault injection, resilience
     'qe-learning-optimization', // Transfer learning, self-improvement
+    'qe-court', // Adversarial review court — overturn-gated SHIP/REMAND/BLOCK verdict (ADR-124)
     // V3 utilities
     'qe-iterative-loop', // QE iteration patterns
     // New skills (ADR-086 skill design standards)

package/dist/integrations/embeddings/base/EmbeddingGenerator.js

@@ -11,7 +11,6 @@
  * @module integrations/embeddings/base/EmbeddingGenerator
  */
 import { EmbeddingCache } from '../cache/EmbeddingCache.js';
-import { pipeline } from '@huggingface/transformers';
 import { cosineSimilarity } from '../../../shared/utils/vector-math.js';
 /**
  * Base embedding generator class
@@ -61,6 +60,19 @@ export class EmbeddingGenerator {
             const loadDtype = this.config.quantization === 'none' ? 'fp32' :
                 this.config.quantization === 'fp16' ? 'fp16' :
                     this.config.quantization === 'int8' ? 'int8' : 'q8';
+            // Lazy-load the optional transformers backend (#565). If it isn't
+            // installed, fail with an actionable message pointing at the endpoint path.
+            let pipeline;
+            try {
+                ({ pipeline } = await import('@huggingface/transformers'));
+            }
+            catch (err) {
+                throw new Error('Local (in-process) embeddings require the optional dependency ' +
+                    '"@huggingface/transformers", which is not installed. Either run ' +
+                    '`npm install @huggingface/transformers`, or configure an embedding ' +
+                    'endpoint (e.g. Cognitum /v1/embeddings) so the local backend is not needed. ' +
+                    `Underlying import error: ${err instanceof Error ? err.message : String(err)}`);
+            }
             this.model = await pipeline('feature-extraction', this.config.model, {
                 dtype: loadDtype,
                 // v4 narrowed ProgressInfo to a discriminated union — `progress`

package/dist/kernel/unified-memory.js

@@ -255,6 +255,10 @@ export class UnifiedMemoryManager {
             this.db = openSafeDatabase(this.config.dbPath, {
                 walMode: this.config.walMode,
                 busyTimeout: this.config.busyTimeout,
+                // M3.2: the missing-file case is handled above; this covers the
+                // EXISTS-but-MALFORMED case — auto-restore the newest verified backup and
+                // park the corrupt original (non-destructive) instead of opening a broken DB.
+                autoRestore: true,
             });
             this.db.pragma(`mmap_size = ${this.config.mmapSize}`);
             this.db.pragma(`cache_size = ${this.config.cacheSize}`);

package/dist/learning/qe-flywheel/corpus-scorer.js

@@ -150,11 +150,13 @@ function selectHeldOut(docs, ratio) {
  */
 function scoreHeldOut(docs, policy, ratio) {
     if (docs.length === 0)
-        return 0;
+        return { mean: 0, samples: [] };
     const queries = selectHeldOut(docs, ratio);
     if (queries.length === 0)
-        return 0;
-    let sumReciprocalRank = 0;
+        return { mean: 0, samples: [] };
+    // Per-query reciprocal ranks: the mean is the held-out signal; the vector is
+    // the paired sample the accept/v1+sig significance gate needs (ADR-118).
+    const samples = [];
     for (const queried of queries) {
         const query = queried.bodyTokens; // subject deliberately withheld
         const rels = docs.map((d) => ({ doc: d, rel: relevance(query, d, queried, policy) }));
@@ -177,9 +179,10 @@ function scoreHeldOut(docs, policy, ratio) {
         }
         const ranked = rankMMR(pool, policy.mmrLambda);
         const rank = ranked.indexOf(queried.id) + 1; // 1-based; 0 -> not found
-        sumReciprocalRank += rank > 0 ? 1 / rank : 0;
+        samples.push(rank > 0 ? 1 / rank : 0);
     }
-    return sumReciprocalRank / queries.length;
+    const mean = samples.reduce((a, b) => a + b, 0) / samples.length;
+    return { mean, samples };
 }
 // ---------------------------------------------------------------------------
 // Anchor flat guard (the no-regression floor)
@@ -283,11 +286,11 @@ export function createCorpusScorer(opts) {
     const corpus = loadCorpus(opts.db);
     let anchorMeanCached = null;
     return (policy) => {
-        const heldOut = scoreHeldOut(corpus, policy, ratio);
+        const held = scoreHeldOut(corpus, policy, ratio);
         if (anchorMeanCached === null) {
             anchorMeanCached = gradeAnchor(anchorPath);
         }
-        return { heldOut, anchorMean: anchorMeanCached };
+        return { heldOut: held.mean, anchorMean: anchorMeanCached, heldOutSamples: held.samples };
     };
 }
 //# sourceMappingURL=corpus-scorer.js.map

package/dist/learning/qe-flywheel/generation.d.ts

@@ -22,6 +22,13 @@ export interface PolicyScores {
     heldOut: number;
     /** Mean over the ADR-117 frozen anchor items (the no-regression signal). */
     anchorMean: number;
+    /**
+     * Per-held-out-task scores whose mean is `heldOut`. Optional — when present and
+     * paired index-for-index with the baseline's, they enable the accept/v1+sig
+     * paired-bootstrap significance gate (ADR-118). Scorers that don't provide them
+     * simply can't use accept/v1+sig (it fail-closes).
+     */
+    heldOutSamples?: number[];
 }
 /** Injected: evaluate a policy → its held-out + anchor scores. */
 export type PolicyScorer = (policy: RetrievalPolicy) => PolicyScores | Promise<PolicyScores>;

package/dist/learning/qe-flywheel/generation.js

@@ -54,6 +54,11 @@ export async function runFlywheelGeneration(input) {
         anchorTol: input.anchorTol,
         provenanceTier,
         allowJudgeTier: input.allowJudgeTier,
+        // ADR-118 accept/v1+sig: seal the paired per-task samples ONLY when the sig
+        // rule is in use. Left undefined for accept/v1 (and thus absent from the
+        // sealed hash), so accept/v1 receipts remain byte-identical to before.
+        candidateHeldOutSamples: ruleVersion === 'accept/v1+sig' ? candidateScores.heldOutSamples : undefined,
+        baselineHeldOutSamples: ruleVersion === 'accept/v1+sig' ? baselineScores.heldOutSamples : undefined,
     };
     const ruleResult = reExecuteGate(ruleVersion, sealed);
     const verdict = ruleResult.promote ? 'promote' : 'reject';

package/dist/learning/qe-flywheel/witness-verify.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Cross-side witness verification (ADR-124 M2.2) — the single verifier that
+ * reconciles AQE's flywheel receipts with the Cognitum `qe-harness` witness
+ * bundles so QE evidence signed by the shared platform identity
+ * (fingerprint `f1ac28607da49ec1`) is verifiable on either side.
+ *
+ * WHAT WAS ALREADY ALIGNED (the bridge that exists): both sides use Ed25519,
+ * the same env secret `QE_WITNESS_SIGNING_KEY` (JSON `{publicKey,privateKey}`
+ * PEM), and the SAME key-id/fingerprint scheme `sha256(pem.trim()).slice(0,16)`
+ * — so both can sign AS the platform identity. `keyFingerprint()` here is
+ * byte-identical to `receipt.ts` `keyIdOf` and to qe-harness `witness.ts`.
+ *
+ * WHAT THIS RECONCILES: the two SIGNED ARTIFACTS are not natively
+ * cross-verifiable — AQE signs a fixed-field-order JSON body as HEX; qe-harness
+ * signs a `sha256:`-prefixed digest of a recursively key-sorted `stableStringify`
+ * as BASE64, wrapped in a nested `witness{}`. This module verifies BOTH.
+ *
+ * TWO EXTERNAL DEPENDENCIES (tracked, need the qe-harness owner — see M2.2 notes):
+ *   1. The public key for `f1ac28607da49ec1` is committed to NEITHER repo (it
+ *      lives on meta-llm). Offline verification of platform-signed artifacts
+ *      needs it provisioned via `QE_WITNESS_PUBLIC_KEYS_JSON`. This verifier is
+ *      READY the moment that allowlist is populated.
+ *   2. The qe-harness bundle format here is implemented to the documented
+ *      algorithm; byte-parity must be confirmed against a REAL qe-harness sample
+ *      bundle before it gates anything (see witness-verify.test.ts).
+ *
+ * No new deps — node:crypto only. Reuses receipt.ts for the AQE path.
+ */
+import { type EvolveReceipt } from './receipt.js';
+/** Public-key allowlist: fingerprint (`sha256(pem)[:16]`) → SPKI PEM. */
+export type PublicKeyAllowlist = Map<string, string>;
+/** Byte-identical to receipt.ts `keyIdOf` and qe-harness `witness.ts` fingerprint. */
+export declare function keyFingerprint(publicKeyPem: string): string;
+/**
+ * Load the trusted public-key allowlist from `QE_WITNESS_PUBLIC_KEYS_JSON`
+ * (`{ "<fingerprint>": "<SPKI PEM>", ... }`). Empty map when unset/unparseable —
+ * callers decide whether an empty allowlist means "verify signature only" (AQE
+ * receipts carry their own PEM) or "reject" (platform bundles need a trust root).
+ */
+export declare function loadAllowlist(json?: string | undefined): PublicKeyAllowlist;
+/**
+ * Deterministic serialization matching qe-harness `stableStringify`: recursive
+ * key-sort on objects, array order preserved. This MUST stay byte-identical to
+ * the qe-harness implementation or digests will not match.
+ */
+export declare function stableStringify(value: unknown): string;
+/** qe-harness canonical digest: `sha256:` + sha256(stableStringify(bundle − digest − witness)). */
+export declare function canonicalDigest(bundle: Record<string, unknown>): string;
+/** The qe-harness witness envelope (packages/engine/src/types.ts). */
+export interface HarnessWitness {
+    alg: 'ed25519';
+    digest: string;
+    /** base64 Ed25519 signature over `digest`. */
+    signature: string;
+    publicKeyFingerprint: string;
+    signedAt?: string;
+}
+export type WitnessFormat = 'aqe-receipt' | 'harness-witness' | 'unknown';
+export interface VerifyResult {
+    valid: boolean;
+    format: WitnessFormat;
+    fingerprint?: string;
+    reason?: string;
+}
+/**
+ * Verify an AQE flywheel receipt. When an allowlist is provided and non-empty,
+ * the receipt's embedded public key must be present (by fingerprint) AND match;
+ * an empty allowlist verifies the signature against the receipt's own PEM only.
+ * NOTE: this is signature verification; the full AQE trust model ALSO re-executes
+ * the frozen gate (ADR-120) — do that separately for promotion decisions.
+ */
+export declare function verifyAqeReceipt(receipt: EvolveReceipt, allowlist?: PublicKeyAllowlist, opts?: {
+    allowSelfSigned?: boolean;
+}): VerifyResult;
+/**
+ * Verify a qe-harness witness bundle. Requires the signer's public key in the
+ * allowlist (platform bundles do NOT embed their PEM). Recomputes the canonical
+ * digest to detect payload tampering, then Ed25519-verifies the base64 signature
+ * over the digest string.
+ */
+export declare function verifyHarnessWitness(bundle: Record<string, unknown> & {
+    witness: HarnessWitness;
+}, allowlist: PublicKeyAllowlist): VerifyResult;
+/** Detect the artifact format and dispatch to the right verifier. */
+export declare function verifyWitness(artifact: unknown, allowlist?: PublicKeyAllowlist): VerifyResult;
+//# sourceMappingURL=witness-verify.d.ts.map

package/dist/learning/qe-flywheel/witness-verify.js

@@ -0,0 +1,156 @@
+/**
+ * Cross-side witness verification (ADR-124 M2.2) — the single verifier that
+ * reconciles AQE's flywheel receipts with the Cognitum `qe-harness` witness
+ * bundles so QE evidence signed by the shared platform identity
+ * (fingerprint `f1ac28607da49ec1`) is verifiable on either side.
+ *
+ * WHAT WAS ALREADY ALIGNED (the bridge that exists): both sides use Ed25519,
+ * the same env secret `QE_WITNESS_SIGNING_KEY` (JSON `{publicKey,privateKey}`
+ * PEM), and the SAME key-id/fingerprint scheme `sha256(pem.trim()).slice(0,16)`
+ * — so both can sign AS the platform identity. `keyFingerprint()` here is
+ * byte-identical to `receipt.ts` `keyIdOf` and to qe-harness `witness.ts`.
+ *
+ * WHAT THIS RECONCILES: the two SIGNED ARTIFACTS are not natively
+ * cross-verifiable — AQE signs a fixed-field-order JSON body as HEX; qe-harness
+ * signs a `sha256:`-prefixed digest of a recursively key-sorted `stableStringify`
+ * as BASE64, wrapped in a nested `witness{}`. This module verifies BOTH.
+ *
+ * TWO EXTERNAL DEPENDENCIES (tracked, need the qe-harness owner — see M2.2 notes):
+ *   1. The public key for `f1ac28607da49ec1` is committed to NEITHER repo (it
+ *      lives on meta-llm). Offline verification of platform-signed artifacts
+ *      needs it provisioned via `QE_WITNESS_PUBLIC_KEYS_JSON`. This verifier is
+ *      READY the moment that allowlist is populated.
+ *   2. The qe-harness bundle format here is implemented to the documented
+ *      algorithm; byte-parity must be confirmed against a REAL qe-harness sample
+ *      bundle before it gates anything (see witness-verify.test.ts).
+ *
+ * No new deps — node:crypto only. Reuses receipt.ts for the AQE path.
+ */
+import { createHash, verify as edVerify, createPublicKey } from 'node:crypto';
+import { verifySignature, receiptBodyString } from './receipt.js';
+/** Byte-identical to receipt.ts `keyIdOf` and qe-harness `witness.ts` fingerprint. */
+export function keyFingerprint(publicKeyPem) {
+    return createHash('sha256').update(publicKeyPem.trim()).digest('hex').slice(0, 16);
+}
+/**
+ * Load the trusted public-key allowlist from `QE_WITNESS_PUBLIC_KEYS_JSON`
+ * (`{ "<fingerprint>": "<SPKI PEM>", ... }`). Empty map when unset/unparseable —
+ * callers decide whether an empty allowlist means "verify signature only" (AQE
+ * receipts carry their own PEM) or "reject" (platform bundles need a trust root).
+ */
+export function loadAllowlist(json = process.env.QE_WITNESS_PUBLIC_KEYS_JSON) {
+    const map = new Map();
+    if (!json)
+        return map;
+    try {
+        const obj = JSON.parse(json);
+        for (const [fp, pem] of Object.entries(obj)) {
+            if (typeof pem === 'string')
+                map.set(fp, pem);
+        }
+    }
+    catch {
+        // An unparseable allowlist yields an empty (fail-closed) trust root — but log
+        // it loudly, or a typo'd env var silently disables verification (qe-court finding).
+        console.error('[witness-verify] QE_WITNESS_PUBLIC_KEYS_JSON is set but not valid JSON — ' +
+            'treating the trust root as EMPTY (verification will fail closed).');
+    }
+    return map;
+}
+/**
+ * Deterministic serialization matching qe-harness `stableStringify`: recursive
+ * key-sort on objects, array order preserved. This MUST stay byte-identical to
+ * the qe-harness implementation or digests will not match.
+ */
+export function stableStringify(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return '[' + value.map(stableStringify).join(',') + ']';
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return '{' + keys.map((k) => JSON.stringify(k) + ':' + stableStringify(obj[k])).join(',') + '}';
+}
+/** qe-harness canonical digest: `sha256:` + sha256(stableStringify(bundle − digest − witness)). */
+export function canonicalDigest(bundle) {
+    const rest = {};
+    for (const [k, v] of Object.entries(bundle)) {
+        if (k === 'digest' || k === 'witness')
+            continue;
+        rest[k] = v;
+    }
+    return 'sha256:' + createHash('sha256').update(stableStringify(rest)).digest('hex');
+}
+/**
+ * Verify an AQE flywheel receipt. When an allowlist is provided and non-empty,
+ * the receipt's embedded public key must be present (by fingerprint) AND match;
+ * an empty allowlist verifies the signature against the receipt's own PEM only.
+ * NOTE: this is signature verification; the full AQE trust model ALSO re-executes
+ * the frozen gate (ADR-120) — do that separately for promotion decisions.
+ */
+export function verifyAqeReceipt(receipt, allowlist, opts) {
+    const fingerprint = keyFingerprint(receipt.publicKeyPem);
+    if (allowlist && allowlist.size > 0) {
+        const allowed = allowlist.get(fingerprint);
+        if (!allowed)
+            return { valid: false, format: 'aqe-receipt', fingerprint, reason: 'fingerprint-not-in-allowlist' };
+        if (allowed.trim() !== receipt.publicKeyPem.trim()) {
+            return { valid: false, format: 'aqe-receipt', fingerprint, reason: 'allowlist-pem-mismatch' };
+        }
+    }
+    else if (!opts?.allowSelfSigned) {
+        // FAIL-CLOSED (qe-court finding): with no trust root, verifying against the
+        // receipt's OWN embedded key just proves internal consistency — anyone can
+        // self-sign a forged receipt. A caller must either provide an allowlist or
+        // explicitly opt into self-signed verification (e.g. a consistency check that
+        // is NOT used as authorization).
+        return { valid: false, format: 'aqe-receipt', fingerprint, reason: 'no-trust-root' };
+    }
+    const ok = verifySignature(receipt.publicKeyPem, receiptBodyString(receipt), receipt.signature);
+    return { valid: ok, format: 'aqe-receipt', fingerprint, reason: ok ? undefined : 'bad-signature' };
+}
+/**
+ * Verify a qe-harness witness bundle. Requires the signer's public key in the
+ * allowlist (platform bundles do NOT embed their PEM). Recomputes the canonical
+ * digest to detect payload tampering, then Ed25519-verifies the base64 signature
+ * over the digest string.
+ */
+export function verifyHarnessWitness(bundle, allowlist) {
+    const w = bundle.witness;
+    const fingerprint = w?.publicKeyFingerprint;
+    // Fail closed on an unexpected algorithm — never verify a non-Ed25519-declared
+    // witness as Ed25519 (qe-court finding: ambiguous alg across implementations).
+    if (w?.alg !== 'ed25519') {
+        return { valid: false, format: 'harness-witness', fingerprint, reason: 'unsupported-alg' };
+    }
+    const pem = fingerprint ? allowlist.get(fingerprint) : undefined;
+    if (!pem)
+        return { valid: false, format: 'harness-witness', fingerprint, reason: 'fingerprint-not-in-allowlist' };
+    const recomputed = canonicalDigest(bundle);
+    if (recomputed !== w.digest) {
+        return { valid: false, format: 'harness-witness', fingerprint, reason: 'digest-mismatch' };
+    }
+    try {
+        const key = createPublicKey(pem);
+        const ok = edVerify(null, Buffer.from(w.digest, 'utf8'), key, Buffer.from(w.signature, 'base64'));
+        return { valid: ok, format: 'harness-witness', fingerprint, reason: ok ? undefined : 'bad-signature' };
+    }
+    catch {
+        return { valid: false, format: 'harness-witness', fingerprint, reason: 'verify-error' };
+    }
+}
+/** Detect the artifact format and dispatch to the right verifier. */
+export function verifyWitness(artifact, allowlist = loadAllowlist()) {
+    if (artifact && typeof artifact === 'object') {
+        const o = artifact;
+        const w = o.witness;
+        if (w && typeof w === 'object' && typeof w.signature === 'string' && typeof w.publicKeyFingerprint === 'string') {
+            return verifyHarnessWitness(o, allowlist);
+        }
+        if (typeof o.signature === 'string' && typeof o.publicKeyPem === 'string' && typeof o.sealedHash === 'string') {
+            return verifyAqeReceipt(o, allowlist);
+        }
+    }
+    return { valid: false, format: 'unknown', reason: 'unrecognized-artifact' };
+}
+//# sourceMappingURL=witness-verify.js.map