attention-manifest-protocol 0.4.2 → 0.4.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +341 -293
- package/CHANGELOG.zh-CN.md +41 -8
- package/README.md +250 -171
- package/README.zh-CN.md +251 -171
- package/lib/assignment/assign.d.ts +102 -0
- package/lib/assignment/assign.js +556 -0
- package/lib/assignment/binding.d.ts +103 -0
- package/lib/assignment/binding.js +575 -0
- package/lib/assignment/errors.d.ts +14 -0
- package/lib/assignment/errors.js +16 -0
- package/lib/assignment/guards.d.ts +18 -0
- package/lib/assignment/guards.js +28 -0
- package/lib/assignment/index.d.ts +10 -0
- package/lib/assignment/index.js +10 -0
- package/lib/assignment/types.d.ts +169 -0
- package/lib/assignment/types.js +1 -0
- package/lib/attention/budget.d.ts +1 -1
- package/lib/attention/budget.js +31 -9
- package/lib/bayes/engine.js +2 -1
- package/lib/bayes/reliability.js +25 -10
- package/lib/boundary/frame.d.ts +10 -4
- package/lib/boundary/frame.js +346 -109
- package/lib/boundary/kinds.d.ts +11 -0
- package/lib/boundary/kinds.js +33 -0
- package/lib/boundary/refTable.d.ts +19 -9
- package/lib/boundary/refTable.js +128 -30
- package/lib/boundary/toolCall.d.ts +22 -10
- package/lib/boundary/toolCall.js +798 -97
- package/lib/concept/conceptBudget.js +10 -1
- package/lib/concurrency/idempotency.d.ts +4 -3
- package/lib/concurrency/idempotency.js +57 -13
- package/lib/concurrency/retry.js +18 -3
- package/lib/context/agentContext.d.ts +13 -0
- package/lib/context/agentContext.js +14 -1
- package/lib/context/ast.d.ts +4 -1
- package/lib/context/ast.js +13 -3
- package/lib/context/contentStore.js +22 -9
- package/lib/context/contextBuilder.d.ts +457 -0
- package/lib/context/contextBuilder.js +1395 -0
- package/lib/context/contextPackage.d.ts +214 -0
- package/lib/context/contextPackage.js +191 -0
- package/lib/context/index.d.ts +14 -3
- package/lib/context/index.js +9 -1
- package/lib/context/relevance.d.ts +171 -0
- package/lib/context/relevance.js +250 -0
- package/lib/context/workspaceDiff.d.ts +105 -0
- package/lib/context/workspaceDiff.js +238 -0
- package/lib/context/workspaceService.d.ts +236 -1
- package/lib/context/workspaceService.js +1501 -73
- package/lib/cooperation/collaboration.d.ts +9 -0
- package/lib/cooperation/session.d.ts +4 -4
- package/lib/cooperation/session.js +3 -3
- package/lib/database/adapter/filesystemStore.d.ts +145 -0
- package/lib/database/adapter/filesystemStore.js +321 -0
- package/lib/database/adapter/index.d.ts +2 -0
- package/lib/database/adapter/index.js +2 -0
- package/lib/database/adapter/workspaceSessionStore.d.ts +118 -0
- package/lib/database/adapter/workspaceSessionStore.js +120 -0
- package/lib/database/entity/fileGraph.d.ts +53 -0
- package/lib/database/entity/fileGraph.js +15 -0
- package/lib/database/entity/fileTree.d.ts +76 -0
- package/lib/database/entity/fileTree.js +39 -0
- package/lib/database/entity/hook.d.ts +29 -0
- package/lib/database/entity/hook.js +18 -0
- package/lib/database/entity/index.d.ts +4 -0
- package/lib/database/entity/index.js +4 -0
- package/lib/database/entity/workspaceSession.d.ts +53 -0
- package/lib/database/entity/workspaceSession.js +28 -0
- package/lib/database/repository/fileAnnotationRepository.d.ts +75 -0
- package/lib/database/repository/fileAnnotationRepository.js +109 -0
- package/lib/database/repository/fileGraphRepository.d.ts +188 -0
- package/lib/database/repository/fileGraphRepository.js +648 -0
- package/lib/database/repository/fileNodeRepository.d.ts +116 -0
- package/lib/database/repository/fileNodeRepository.js +263 -0
- package/lib/database/repository/fileOutlineRepository.d.ts +40 -0
- package/lib/database/repository/fileOutlineRepository.js +104 -0
- package/lib/database/repository/fileWriteRepository.d.ts +41 -0
- package/lib/database/repository/fileWriteRepository.js +93 -0
- package/lib/database/repository/hookRepository.d.ts +67 -0
- package/lib/database/repository/hookRepository.js +150 -0
- package/lib/database/repository/index.d.ts +7 -0
- package/lib/database/repository/index.js +7 -0
- package/lib/database/repository/workspaceSessionRepository.d.ts +134 -0
- package/lib/database/repository/workspaceSessionRepository.js +327 -0
- package/lib/database/service/database.d.ts +14 -0
- package/lib/database/service/database.js +21 -0
- package/lib/database/sql/schema.js +187 -0
- package/lib/database/store/database.js +6 -1
- package/lib/delegate/team.d.ts +5 -0
- package/lib/delegate/team.js +83 -20
- package/lib/discover/classify.d.ts +20 -0
- package/lib/discover/classify.js +85 -0
- package/lib/discover/host.d.ts +20 -0
- package/lib/discover/host.js +89 -0
- package/lib/discover/index.d.ts +11 -0
- package/lib/discover/index.js +11 -0
- package/lib/discover/kinds.d.ts +14 -0
- package/lib/discover/kinds.js +23 -0
- package/lib/discover/tree.d.ts +7 -0
- package/lib/discover/tree.js +432 -0
- package/lib/discover/types.d.ts +115 -0
- package/lib/discover/types.js +1 -0
- package/lib/error/boundaryRejection.d.ts +1 -1
- package/lib/evaluation/agreement.js +2 -2
- package/lib/execution/handles.js +6 -0
- package/lib/execution/pin.js +2 -2
- package/lib/file/cfb.d.ts +56 -0
- package/lib/file/cfb.js +396 -0
- package/lib/file/dependency.d.ts +151 -0
- package/lib/file/dependency.js +568 -0
- package/lib/file/directory.d.ts +34 -0
- package/lib/file/directory.js +141 -0
- package/lib/file/errors.d.ts +20 -0
- package/lib/file/errors.js +18 -0
- package/lib/file/exportGraph.d.ts +31 -0
- package/lib/file/exportGraph.js +554 -0
- package/lib/file/file.d.ts +40 -0
- package/lib/file/file.js +339 -0
- package/lib/file/importGraph.d.ts +121 -0
- package/lib/file/importGraph.js +1022 -0
- package/lib/file/index.d.ts +45 -0
- package/lib/file/index.js +30 -0
- package/lib/file/metadata.d.ts +66 -0
- package/lib/file/metadata.js +470 -0
- package/lib/file/path.d.ts +60 -0
- package/lib/file/path.js +259 -0
- package/lib/file/read.d.ts +168 -0
- package/lib/file/read.js +541 -0
- package/lib/file/runtime.d.ts +95 -0
- package/lib/file/runtime.js +150 -0
- package/lib/file/service.d.ts +227 -0
- package/lib/file/service.js +663 -0
- package/lib/file/syntaxTree.d.ts +7 -0
- package/lib/file/syntaxTree.js +38 -0
- package/lib/file/time.d.ts +38 -0
- package/lib/file/time.js +44 -0
- package/lib/file/tree.d.ts +53 -0
- package/lib/file/tree.js +417 -0
- package/lib/file/types.d.ts +371 -0
- package/lib/file/types.js +1 -0
- package/lib/file/write.d.ts +159 -0
- package/lib/file/write.js +1028 -0
- package/lib/file/zip.d.ts +35 -0
- package/lib/file/zip.js +349 -0
- package/lib/fingerprint/algorithm.d.ts +97 -0
- package/lib/fingerprint/algorithm.js +271 -0
- package/lib/fingerprint/bytes.d.ts +18 -0
- package/lib/fingerprint/bytes.js +31 -0
- package/lib/fingerprint/error.d.ts +73 -0
- package/lib/fingerprint/error.js +86 -0
- package/lib/fingerprint/file.d.ts +71 -0
- package/lib/fingerprint/file.js +254 -0
- package/lib/fingerprint/index.d.ts +37 -0
- package/lib/fingerprint/index.js +12 -0
- package/lib/fingerprint/json.d.ts +41 -0
- package/lib/fingerprint/json.js +94 -0
- package/lib/fingerprint/number.d.ts +32 -0
- package/lib/fingerprint/number.js +95 -0
- package/lib/fingerprint/policy.d.ts +54 -0
- package/lib/fingerprint/policy.js +50 -0
- package/lib/fingerprint/preimage.d.ts +84 -0
- package/lib/fingerprint/preimage.js +133 -0
- package/lib/fingerprint/raw.d.ts +26 -0
- package/lib/fingerprint/raw.js +45 -0
- package/lib/fingerprint/ref.d.ts +39 -0
- package/lib/fingerprint/ref.js +178 -0
- package/lib/fingerprint/text.d.ts +42 -0
- package/lib/fingerprint/text.js +155 -0
- package/lib/fingerprint/tree.d.ts +56 -0
- package/lib/fingerprint/tree.js +288 -0
- package/lib/fingerprint/verify.d.ts +20 -0
- package/lib/fingerprint/verify.js +99 -0
- package/lib/global/filesystem.d.ts +43 -0
- package/lib/global/filesystem.js +75 -0
- package/lib/global/index.d.ts +8 -0
- package/lib/global/index.js +8 -0
- package/lib/global/service.d.ts +51 -0
- package/lib/global/service.js +98 -0
- package/lib/governance/transport.js +18 -6
- package/lib/hook/ast.d.ts +29 -0
- package/lib/hook/ast.js +22 -0
- package/lib/hook/code.d.ts +55 -0
- package/lib/hook/code.js +47 -0
- package/lib/hook/dependency.d.ts +45 -0
- package/lib/hook/dependency.js +28 -0
- package/lib/hook/diff.d.ts +114 -0
- package/lib/hook/diff.js +327 -0
- package/lib/hook/exportation.d.ts +31 -0
- package/lib/hook/exportation.js +24 -0
- package/lib/hook/file.d.ts +44 -0
- package/lib/hook/file.js +154 -0
- package/lib/hook/importation.d.ts +33 -0
- package/lib/hook/importation.js +22 -0
- package/lib/hook/index.d.ts +30 -0
- package/lib/hook/index.js +23 -0
- package/lib/hook/outline.d.ts +35 -0
- package/lib/hook/outline.js +27 -0
- package/lib/hook/project.d.ts +65 -0
- package/lib/hook/project.js +217 -0
- package/lib/hook/types.d.ts +114 -0
- package/lib/hook/types.js +407 -0
- package/lib/index.d.ts +9 -0
- package/lib/index.js +9 -0
- package/lib/lock/lease.js +28 -3
- package/lib/manifest/cardSign.d.ts +1 -1
- package/lib/manifest/cardSign.js +37 -7
- package/lib/manifest/federation.js +13 -6
- package/lib/manifest/trust.d.ts +2 -0
- package/lib/manifest/trust.js +27 -6
- package/lib/module/index.d.ts +4 -0
- package/lib/module/index.js +4 -0
- package/lib/module/mcp/client.js +21 -2
- package/lib/module/mcp/filesystemServer.d.ts +24 -0
- package/lib/module/mcp/filesystemServer.js +102 -0
- package/lib/module/mcp/http.js +32 -19
- package/lib/module/mcp/workspaceServer.js +20 -3
- package/lib/module/tool/filesystemExecutor.d.ts +18 -0
- package/lib/module/tool/filesystemExecutor.js +49 -0
- package/lib/module/tool/globalExecutor.d.ts +17 -0
- package/lib/module/tool/globalExecutor.js +39 -0
- package/lib/module/tool/globalFilesystemExecutor.d.ts +18 -0
- package/lib/module/tool/globalFilesystemExecutor.js +49 -0
- package/lib/module/tool/workspaceExecutor.d.ts +9 -0
- package/lib/module/tool/workspaceExecutor.js +16 -3
- package/lib/naming/aliases.d.ts +48 -0
- package/lib/naming/aliases.js +79 -0
- package/lib/naming/catalog.d.ts +117 -0
- package/lib/naming/catalog.js +108 -0
- package/lib/naming/grammar.d.ts +67 -0
- package/lib/naming/grammar.js +212 -0
- package/lib/naming/ids.d.ts +157 -0
- package/lib/naming/ids.js +119 -0
- package/lib/naming/index.d.ts +13 -0
- package/lib/naming/index.js +13 -0
- package/lib/outline/index.d.ts +9 -0
- package/lib/outline/index.js +8 -0
- package/lib/outline/office.d.ts +160 -0
- package/lib/outline/office.js +2375 -0
- package/lib/outline/officeBridge.d.ts +32 -0
- package/lib/outline/officeBridge.js +27 -0
- package/lib/outline/outline.d.ts +159 -0
- package/lib/outline/outline.js +837 -0
- package/lib/outline/outlineIndex.d.ts +97 -0
- package/lib/outline/outlineIndex.js +325 -0
- package/lib/outline/outlineKeywords.d.ts +59 -0
- package/lib/outline/outlineKeywords.js +143 -0
- package/lib/outline/outlineStrategies.d.ts +414 -0
- package/lib/outline/outlineStrategies.js +8324 -0
- package/lib/outline/reactOutline.d.ts +37 -0
- package/lib/outline/reactOutline.js +1070 -0
- package/lib/outline/shellOutline.d.ts +65 -0
- package/lib/outline/shellOutline.js +873 -0
- package/lib/outline/sqlOutline.d.ts +170 -0
- package/lib/outline/sqlOutline.js +1536 -0
- package/lib/outline/strategy.d.ts +46 -0
- package/lib/outline/strategy.js +1 -0
- package/lib/outline/types.d.ts +95 -0
- package/lib/outline/types.js +1 -0
- package/lib/outline/visualBasicOutline.d.ts +27 -0
- package/lib/outline/visualBasicOutline.js +750 -0
- package/lib/protocol/filesystem.d.ts +55 -0
- package/lib/protocol/filesystem.js +105 -0
- package/lib/protocol/global.d.ts +42 -0
- package/lib/protocol/global.js +63 -0
- package/lib/protocol/globalFilesystem.d.ts +40 -0
- package/lib/protocol/globalFilesystem.js +59 -0
- package/lib/protocol/index.d.ts +4 -0
- package/lib/protocol/index.js +4 -0
- package/lib/protocol/protocol.d.ts +4 -0
- package/lib/protocol/wire.js +5 -2
- package/lib/protocol/workspace.d.ts +305 -0
- package/lib/protocol/workspace.js +258 -0
- package/lib/receipt/receipt.d.ts +8 -0
- package/lib/registry/content.js +9 -3
- package/lib/runtime/kernelRuntime.js +9 -1
- package/lib/scenario/scenario.js +5 -4
- package/lib/semantic/canonical.d.ts +61 -0
- package/lib/semantic/canonical.js +135 -8
- package/lib/semantic/jsonValue.d.ts +31 -0
- package/lib/semantic/jsonValue.js +122 -0
- package/lib/semantic/sha256.js +3 -0
- package/lib/semantic/time.d.ts +14 -0
- package/lib/semantic/time.js +56 -0
- package/lib/session/context.d.ts +76 -0
- package/lib/session/context.js +419 -0
- package/lib/session/errors.d.ts +24 -0
- package/lib/session/errors.js +22 -0
- package/lib/session/identity.d.ts +24 -0
- package/lib/session/identity.js +56 -0
- package/lib/session/index.d.ts +14 -0
- package/lib/session/index.js +12 -0
- package/lib/session/registry.d.ts +130 -0
- package/lib/session/registry.js +908 -0
- package/lib/session/types.d.ts +227 -0
- package/lib/session/types.js +14 -0
- package/lib/structure/index.d.ts +1 -0
- package/lib/structure/index.js +1 -0
- package/lib/structure/trie.d.ts +88 -0
- package/lib/structure/trie.js +183 -0
- package/lib/syntax/byteIndex.d.ts +44 -0
- package/lib/syntax/byteIndex.js +148 -0
- package/lib/syntax/charset.d.ts +88 -0
- package/lib/syntax/charset.js +276 -0
- package/lib/syntax/index.d.ts +6 -0
- package/lib/syntax/index.js +5 -0
- package/lib/syntax/syntaxRegistry.d.ts +150 -0
- package/lib/syntax/syntaxRegistry.js +314 -0
- package/lib/syntax/syntaxTree.d.ts +106 -0
- package/lib/syntax/syntaxTree.js +668 -0
- package/lib/syntax/types.d.ts +15 -0
- package/lib/syntax/types.js +1 -0
- package/lib/types/common.d.ts +1 -1
- package/package.json +72 -193
- package/.editorconfig +0 -12
- package/.prettierignore +0 -17
- package/MCP-Token/347/250/216/344/270/216/344/270/213/344/270/200/344/273/243/345/267/245/345/205/267/345/215/217/350/256/256.html +0 -1763
- package/docs/annotation-campaign-A.csv +0 -54
- package/docs/annotation-campaign-B.csv +0 -54
- package/docs/annotation-campaign.csv +0 -54
- package/docs/eval/annotations-A.jsonl +0 -16
- package/docs/eval/annotations.json +0 -122
- package/docs/eval/recorded-labels.json +0 -12
- package/docs/eval/replay-cases.json +0 -14
- package/docs/eval/replay-labels-b.json +0 -14
- package/docs/examples/attention-request.json +0 -16
- package/docs/examples/checkpoint.json +0 -15
- package/docs/examples/claim.json +0 -66
- package/docs/examples/collaboration.json +0 -66
- package/docs/examples/concept-checkpoint.json +0 -15
- package/docs/examples/concept-prune-plan.json +0 -45
- package/docs/examples/federation.json +0 -126
- package/docs/examples/frame-chain.json +0 -77
- package/docs/examples/ledger-snapshot.json +0 -108
- package/docs/examples/manifest.json +0 -77
- package/docs/examples/message.json +0 -19
- package/docs/examples/other-model.json +0 -45
- package/docs/examples/plan.json +0 -50
- package/docs/examples/prune-plan.json +0 -48
- package/docs/examples/receipt.json +0 -22
- package/docs/examples/runtime-run.json +0 -573
- package/docs/examples/team.json +0 -66
- package/docs/examples/verb-note.json +0 -11
- package/docs/probes/bayes-scores.json +0 -1452
- package/docs/probes/calibration-imported.json +0 -141
- package/docs/probes/context-ast-deepseek.json +0 -1577
- package/docs/probes/deepseek-probe.json +0 -917
- package/docs/probes/eval-recorded-replay.json +0 -597
- package/docs/probes/eval-replay.json +0 -124
- package/docs/probes/eval-summary.json +0 -42
- package/docs/probes/runtime-eval.json +0 -4230
- package/eslint.config.mts +0 -96
- package/index.html +0 -13
- package/prettier.config.mts +0 -37
- package/public/favicon.svg +0 -1
- package/public/icons.svg +0 -24
- package/src/attention/attention.ts +0 -347
- package/src/attention/budget.ts +0 -72
- package/src/attention/cognition.ts +0 -519
- package/src/attention/index.ts +0 -8
- package/src/attention/interrupts.ts +0 -228
- package/src/attention/resource.ts +0 -316
- package/src/attention/social.ts +0 -217
- package/src/attention/socialTypes.ts +0 -115
- package/src/authz/authz.ts +0 -305
- package/src/authz/index.ts +0 -1
- package/src/bayes/calibration.ts +0 -204
- package/src/bayes/calibrationRegistry.ts +0 -111
- package/src/bayes/calibrationSelection.ts +0 -154
- package/src/bayes/engine.ts +0 -532
- package/src/bayes/index.ts +0 -6
- package/src/bayes/reliability.ts +0 -62
- package/src/bayes/scopedPriors.ts +0 -88
- package/src/boundary/frame.ts +0 -322
- package/src/boundary/ids.ts +0 -14
- package/src/boundary/index.ts +0 -12
- package/src/boundary/refTable.ts +0 -125
- package/src/boundary/toolCall.ts +0 -212
- package/src/concept/concept.ts +0 -75
- package/src/concept/conceptBudget.ts +0 -346
- package/src/concept/conceptBudgetTypes.ts +0 -79
- package/src/concept/index.ts +0 -3
- package/src/concurrency/idempotency.ts +0 -41
- package/src/concurrency/index.ts +0 -5
- package/src/concurrency/mutex.ts +0 -26
- package/src/concurrency/namedLocks.ts +0 -35
- package/src/concurrency/retry.ts +0 -50
- package/src/concurrency/worker.ts +0 -128
- package/src/context/agentContext.ts +0 -308
- package/src/context/ast.ts +0 -499
- package/src/context/contentStore.ts +0 -75
- package/src/context/context.ts +0 -65
- package/src/context/contextIndex.ts +0 -85
- package/src/context/document.ts +0 -137
- package/src/context/fileStorePath.ts +0 -14
- package/src/context/index.ts +0 -43
- package/src/context/lifecycle.ts +0 -221
- package/src/context/projections.ts +0 -151
- package/src/context/workspace.ts +0 -422
- package/src/context/workspaceProtocol.ts +0 -112
- package/src/context/workspaceService.ts +0 -423
- package/src/cooperation/board.ts +0 -104
- package/src/cooperation/collaboration.ts +0 -60
- package/src/cooperation/index.ts +0 -6
- package/src/cooperation/merge.ts +0 -190
- package/src/cooperation/metrics.ts +0 -57
- package/src/cooperation/session.ts +0 -131
- package/src/cooperation/unified.ts +0 -56
- package/src/counter.ts +0 -9
- package/src/database/adapter/adapters.ts +0 -35
- package/src/database/adapter/index.ts +0 -4
- package/src/database/adapter/runtimeSink.ts +0 -74
- package/src/database/adapter/sessionStore.ts +0 -32
- package/src/database/adapter/turnStore.ts +0 -23
- package/src/database/entity/agent.ts +0 -199
- package/src/database/entity/entity.ts +0 -1046
- package/src/database/entity/handle.ts +0 -79
- package/src/database/entity/index.ts +0 -32
- package/src/database/entity/message.ts +0 -74
- package/src/database/entity/meta.ts +0 -11
- package/src/database/entity/object.ts +0 -42
- package/src/database/entity/outbox.ts +0 -15
- package/src/database/entity/process.ts +0 -65
- package/src/database/entity/registry.ts +0 -155
- package/src/database/entity/runtimeApproval.ts +0 -30
- package/src/database/entity/runtimeSession.ts +0 -13
- package/src/database/entity/runtimeTurn.ts +0 -15
- package/src/database/entity/thread.ts +0 -85
- package/src/database/entity/window.ts +0 -85
- package/src/database/entity/worker.ts +0 -90
- package/src/database/index.ts +0 -6
- package/src/database/repository/addressSpaceRepository.ts +0 -72
- package/src/database/repository/agentRepository.ts +0 -460
- package/src/database/repository/base.ts +0 -41
- package/src/database/repository/executionRepository.ts +0 -477
- package/src/database/repository/handleRepository.ts +0 -64
- package/src/database/repository/index.ts +0 -20
- package/src/database/repository/messageRepository.ts +0 -52
- package/src/database/repository/objectRepository.ts +0 -69
- package/src/database/repository/outboxRepository.ts +0 -63
- package/src/database/repository/processRepository.ts +0 -58
- package/src/database/repository/registryRepository.ts +0 -119
- package/src/database/repository/repository.ts +0 -491
- package/src/database/repository/runtimeApprovalRepository.ts +0 -44
- package/src/database/repository/runtimeSessionRepository.ts +0 -27
- package/src/database/repository/runtimeTurnRepository.ts +0 -39
- package/src/database/repository/socialRepository.ts +0 -185
- package/src/database/repository/threadRepository.ts +0 -57
- package/src/database/repository/windowRepository.ts +0 -88
- package/src/database/repository/workerRepository.ts +0 -69
- package/src/database/service/database.ts +0 -90
- package/src/database/service/handleService.ts +0 -48
- package/src/database/service/index.ts +0 -16
- package/src/database/service/messageService.ts +0 -61
- package/src/database/service/objectService.ts +0 -59
- package/src/database/service/processService.ts +0 -61
- package/src/database/service/registryServices.ts +0 -88
- package/src/database/service/service.ts +0 -183
- package/src/database/service/stepService.ts +0 -53
- package/src/database/service/threadService.ts +0 -65
- package/src/database/service/windowService.ts +0 -30
- package/src/database/service/workerService.ts +0 -57
- package/src/database/sql/index.ts +0 -3
- package/src/database/sql/schema.ts +0 -418
- package/src/database/sql/sql.ts +0 -543
- package/src/database/store/database.ts +0 -210
- package/src/database/store/index.ts +0 -3
- package/src/database/store/store.ts +0 -266
- package/src/delegate/index.ts +0 -2
- package/src/delegate/team.ts +0 -268
- package/src/delegate/teamTypes.ts +0 -47
- package/src/diagnosis/checklist.ts +0 -74
- package/src/diagnosis/context.ts +0 -93
- package/src/diagnosis/frame.ts +0 -256
- package/src/diagnosis/index.ts +0 -5
- package/src/diagnosis/router.ts +0 -72
- package/src/diagnosis/types.ts +0 -89
- package/src/error/agentError.ts +0 -16
- package/src/error/ampError.ts +0 -20
- package/src/error/authzError.ts +0 -14
- package/src/error/boundaryRejection.ts +0 -20
- package/src/error/index.ts +0 -7
- package/src/error/kernelError.ts +0 -27
- package/src/error/mailboxError.ts +0 -9
- package/src/error/windowError.ts +0 -12
- package/src/evaluation/agreement.ts +0 -96
- package/src/evaluation/index.ts +0 -2
- package/src/evaluation/labels.ts +0 -241
- package/src/evidence/evidenceGraph.ts +0 -205
- package/src/evidence/index.ts +0 -4
- package/src/evidence/revalidation.ts +0 -191
- package/src/execution/exec.ts +0 -408
- package/src/execution/handles.ts +0 -65
- package/src/execution/index.ts +0 -3
- package/src/execution/pin.ts +0 -154
- package/src/frame/frame.ts +0 -70
- package/src/frame/index.ts +0 -1
- package/src/goal/goal.ts +0 -43
- package/src/goal/index.ts +0 -2
- package/src/goal/plan.ts +0 -196
- package/src/governance/attentionManifest.ts +0 -802
- package/src/governance/audit.ts +0 -362
- package/src/governance/budget.ts +0 -628
- package/src/governance/context.ts +0 -356
- package/src/governance/control.ts +0 -159
- package/src/governance/cooperation.ts +0 -479
- package/src/governance/credential.ts +0 -359
- package/src/governance/httpServer.ts +0 -99
- package/src/governance/index.ts +0 -32
- package/src/governance/legal.ts +0 -574
- package/src/governance/matrix.ts +0 -460
- package/src/governance/perspectives.ts +0 -406
- package/src/governance/signing.ts +0 -407
- package/src/governance/store.ts +0 -125
- package/src/governance/switching.ts +0 -459
- package/src/governance/toolPolicy.ts +0 -80
- package/src/governance/transport.ts +0 -204
- package/src/governance/types.ts +0 -380
- package/src/governance/workflow.ts +0 -743
- package/src/index.ts +0 -11
- package/src/interaction/index.ts +0 -1
- package/src/interaction/interaction.ts +0 -391
- package/src/ipc/index.ts +0 -4
- package/src/ipc/mailbox.ts +0 -132
- package/src/ipc/memorySocialStore.ts +0 -93
- package/src/ipc/social.ts +0 -93
- package/src/kernel/index.ts +0 -14
- package/src/kernel/scheduler.ts +0 -498
- package/src/ledger/checkpoint.ts +0 -304
- package/src/ledger/index.ts +0 -4
- package/src/ledger/ledger.ts +0 -31
- package/src/ledger/persistence.ts +0 -159
- package/src/ledger/share.ts +0 -80
- package/src/lock/index.ts +0 -2
- package/src/lock/lease.ts +0 -74
- package/src/main.ts +0 -199
- package/src/manifest/agentCard.ts +0 -72
- package/src/manifest/cardSign.ts +0 -87
- package/src/manifest/federation.ts +0 -237
- package/src/manifest/federationTypes.ts +0 -55
- package/src/manifest/index.ts +0 -8
- package/src/manifest/keys.ts +0 -643
- package/src/manifest/manifest.ts +0 -114
- package/src/manifest/sign.ts +0 -134
- package/src/manifest/trust.ts +0 -146
- package/src/mission/index.ts +0 -2
- package/src/mission/missionQueue.ts +0 -75
- package/src/module/index.ts +0 -9
- package/src/module/llm/deepseek.ts +0 -214
- package/src/module/llm/llm.ts +0 -84
- package/src/module/mcp/client.ts +0 -110
- package/src/module/mcp/http.ts +0 -102
- package/src/module/mcp/protocol.ts +0 -77
- package/src/module/mcp/server.ts +0 -148
- package/src/module/mcp/transport.ts +0 -30
- package/src/module/mcp/workspaceServer.ts +0 -111
- package/src/module/sandbox/sandbox.ts +0 -29
- package/src/module/tool/mcpExecutor.ts +0 -54
- package/src/module/tool/policy.ts +0 -52
- package/src/module/tool/redact.ts +0 -29
- package/src/module/tool/tool.ts +0 -53
- package/src/module/tool/workspaceExecutor.ts +0 -35
- package/src/policy/guard.ts +0 -240
- package/src/policy/index.ts +0 -2
- package/src/policy/policy.ts +0 -561
- package/src/process/agent.ts +0 -341
- package/src/process/agentService.ts +0 -236
- package/src/process/agentStore.ts +0 -378
- package/src/process/executionStore.ts +0 -151
- package/src/process/index.ts +0 -5
- package/src/process/process.ts +0 -240
- package/src/process/transitions.ts +0 -19
- package/src/progress/index.ts +0 -2
- package/src/progress/progress.ts +0 -85
- package/src/protocol/a2a.ts +0 -120
- package/src/protocol/channel.ts +0 -44
- package/src/protocol/envelope.ts +0 -655
- package/src/protocol/httpChannel.ts +0 -87
- package/src/protocol/index.ts +0 -6
- package/src/protocol/protocol.ts +0 -138
- package/src/protocol/wire.ts +0 -60
- package/src/receipt/index.ts +0 -1
- package/src/receipt/receipt.ts +0 -47
- package/src/registry/content.ts +0 -69
- package/src/registry/index.ts +0 -23
- package/src/registry/registry.ts +0 -599
- package/src/runtime/action.ts +0 -87
- package/src/runtime/behavior.ts +0 -330
- package/src/runtime/behaviorTuning.ts +0 -163
- package/src/runtime/cognitiveRuntime.ts +0 -703
- package/src/runtime/escalation.ts +0 -35
- package/src/runtime/governedTask.ts +0 -233
- package/src/runtime/index.ts +0 -15
- package/src/runtime/kernelRuntime.ts +0 -144
- package/src/runtime/operation.ts +0 -35
- package/src/runtime/replay.ts +0 -71
- package/src/runtime/routing.ts +0 -58
- package/src/runtime/safety.ts +0 -48
- package/src/runtime/session.ts +0 -341
- package/src/runtime/sessionStore.ts +0 -43
- package/src/runtime/telemetry.ts +0 -55
- package/src/runtime/turnStore.ts +0 -30
- package/src/scenario/index.ts +0 -1
- package/src/scenario/scenario.ts +0 -299
- package/src/semantic/canonical.ts +0 -24
- package/src/semantic/index.ts +0 -2
- package/src/semantic/sha256.ts +0 -82
- package/src/storage/appendLog.ts +0 -372
- package/src/storage/fileAppendSink.ts +0 -40
- package/src/storage/index.ts +0 -2
- package/src/store/bindCache.ts +0 -22
- package/src/store/cache.ts +0 -191
- package/src/store/context.ts +0 -31
- package/src/store/handleStore.ts +0 -31
- package/src/store/index.ts +0 -9
- package/src/store/messageStore.ts +0 -31
- package/src/store/objectStore.ts +0 -31
- package/src/store/processStore.ts +0 -31
- package/src/store/threadStore.ts +0 -31
- package/src/store/windowStore.ts +0 -31
- package/src/structure/abstractSyntaxTree.ts +0 -493
- package/src/structure/avlTree.ts +0 -408
- package/src/structure/binarySearchTree.ts +0 -352
- package/src/structure/binaryTree.ts +0 -525
- package/src/structure/bloomFilter.ts +0 -231
- package/src/structure/compare.ts +0 -110
- package/src/structure/cuckooFilter.ts +0 -337
- package/src/structure/deque.ts +0 -223
- package/src/structure/filterKey.ts +0 -36
- package/src/structure/hash.ts +0 -279
- package/src/structure/heap.ts +0 -268
- package/src/structure/index.ts +0 -20
- package/src/structure/iterator.ts +0 -22
- package/src/structure/lru.ts +0 -619
- package/src/structure/ordered.ts +0 -399
- package/src/structure/priority.ts +0 -915
- package/src/structure/queue.ts +0 -168
- package/src/structure/redBlackTree.ts +0 -680
- package/src/structure/segmentTree.ts +0 -248
- package/src/structure/stack.ts +0 -118
- package/src/structure/unordered.ts +0 -407
- package/src/style.css +0 -278
- package/src/thread/index.ts +0 -2
- package/src/thread/thread.ts +0 -176
- package/src/thread/transitions.ts +0 -17
- package/src/types/common.ts +0 -119
- package/src/types/index.ts +0 -23
- package/src/warrant/epistemic.ts +0 -154
- package/src/warrant/index.ts +0 -3
- package/src/warrant/inquiry.ts +0 -166
- package/src/warrant/warrant.ts +0 -179
- package/src/window/compaction.ts +0 -403
- package/src/window/compactionTypes.ts +0 -119
- package/src/window/index.ts +0 -7
- package/src/window/page.ts +0 -18
- package/src/window/window.ts +0 -244
- package/tools/_helpers.ts +0 -34
- package/tools/a2a-check.ts +0 -110
- package/tools/a2a-flow-check.ts +0 -78
- package/tools/agent-card-check.ts +0 -76
- package/tools/agent-check.ts +0 -236
- package/tools/agent-store-check.ts +0 -153
- package/tools/agreement-check.ts +0 -27
- package/tools/annotation-server-check.ts +0 -48
- package/tools/annotation-server.ts +0 -230
- package/tools/annotation-status.ts +0 -65
- package/tools/approval-access-check.ts +0 -66
- package/tools/arch-check.ts +0 -72
- package/tools/attention-core-check.ts +0 -48
- package/tools/attention-resource-check.ts +0 -169
- package/tools/audit-check.ts +0 -207
- package/tools/authority-check.ts +0 -124
- package/tools/authz-check.ts +0 -138
- package/tools/bayes-check.ts +0 -162
- package/tools/bayes-probe.ts +0 -154
- package/tools/behavior-tuning-check.ts +0 -53
- package/tools/board-check.ts +0 -87
- package/tools/boundary-check.ts +0 -199
- package/tools/bundle-trust-check.ts +0 -96
- package/tools/calibrate-imported.ts +0 -108
- package/tools/calibration-check.ts +0 -44
- package/tools/calibration-registry-check.ts +0 -40
- package/tools/calibration-sim.ts +0 -40
- package/tools/card-sign-check.ts +0 -71
- package/tools/card-trust-check.ts +0 -78
- package/tools/channel-check.ts +0 -86
- package/tools/checkpoint-check.ts +0 -620
- package/tools/cleanup-style-configs.ts +0 -29
- package/tools/cognition-check.ts +0 -648
- package/tools/cognitive-runtime-check.ts +0 -609
- package/tools/collaboration-demo.ts +0 -78
- package/tools/compaction-check.ts +0 -266
- package/tools/concept-check.ts +0 -260
- package/tools/concurrency-check.ts +0 -242
- package/tools/conformance-runtime.ts +0 -389
- package/tools/conformance.ts +0 -651
- package/tools/context-ast-check.ts +0 -90
- package/tools/context-ast-deepseek.ts +0 -242
- package/tools/context-graph-bench.ts +0 -50
- package/tools/context-graph-check.ts +0 -229
- package/tools/context-index-check.ts +0 -48
- package/tools/context-lifecycle-check.ts +0 -69
- package/tools/context-projection-check.ts +0 -73
- package/tools/context-scope-check.ts +0 -134
- package/tools/context-storage-check.ts +0 -113
- package/tools/cooperation-check.ts +0 -517
- package/tools/cooperation-http-check.ts +0 -125
- package/tools/deepseek-llm-check.ts +0 -147
- package/tools/deepseek-probe.ts +0 -494
- package/tools/diagnosis-check.ts +0 -109
- package/tools/diagnosis-router-check.ts +0 -50
- package/tools/document-context-check.ts +0 -237
- package/tools/envelope-check.ts +0 -659
- package/tools/eslint-rules/index.ts +0 -26
- package/tools/eslint-rules/rules/jsdoc-comment-format.ts +0 -105
- package/tools/eslint-rules/rules/no-function-keyword.ts +0 -60
- package/tools/eslint-rules/rules/no-multiline-parameters.ts +0 -71
- package/tools/eslint-rules/rules/no-multiline-type-parameters.ts +0 -57
- package/tools/eslint-rules/rules/no-undefined-comparison.ts +0 -115
- package/tools/eslint-rules/rules/prefer-template-for-string-conversion.ts +0 -97
- package/tools/eslint-rules/rules/require-typeof-parentheses.ts +0 -49
- package/tools/eslint-rules/rules/require-variable-type.ts +0 -36
- package/tools/eslint-rules/rules/variable-naming.ts +0 -175
- package/tools/eval-recorded-replay.ts +0 -215
- package/tools/eval-replay.ts +0 -139
- package/tools/eval-summary.ts +0 -136
- package/tools/evidence-revalidation-check.ts +0 -235
- package/tools/exec-check.ts +0 -217
- package/tools/federation-check.ts +0 -166
- package/tools/federation-demo.ts +0 -45
- package/tools/filter-check.ts +0 -243
- package/tools/governance-check.ts +0 -680
- package/tools/governance-store-check.ts +0 -131
- package/tools/governed-task-check.ts +0 -227
- package/tools/guard-check.ts +0 -122
- package/tools/http-channel-check.ts +0 -125
- package/tools/import-campaign.ts +0 -28
- package/tools/inquiry-check.ts +0 -126
- package/tools/interaction-check.ts +0 -171
- package/tools/interrupts-check.ts +0 -173
- package/tools/ipc-check.ts +0 -170
- package/tools/kernel-async-check.ts +0 -136
- package/tools/kernel-check.ts +0 -369
- package/tools/kernel-runtime-check.ts +0 -276
- package/tools/keys-check.ts +0 -559
- package/tools/label-audit.ts +0 -70
- package/tools/labels-workflow-check.ts +0 -49
- package/tools/linear-structure-check.ts +0 -524
- package/tools/live-exec.ts +0 -62
- package/tools/live-governance-eval.ts +0 -813
- package/tools/live-legacy.ts +0 -50
- package/tools/lru-check.ts +0 -182
- package/tools/make-annotation-campaign.ts +0 -57
- package/tools/mcp-executor-check.ts +0 -33
- package/tools/merge-annotations.ts +0 -32
- package/tools/merge-check.ts +0 -98
- package/tools/metrics-check.ts +0 -84
- package/tools/net-probe.ts +0 -107
- package/tools/oauth-probe.ts +0 -117
- package/tools/outbox-check.ts +0 -50
- package/tools/persistence-check.ts +0 -144
- package/tools/pin-check.ts +0 -116
- package/tools/platform-check.ts +0 -281
- package/tools/policy-check.ts +0 -514
- package/tools/prettier-plugin/index.mts +0 -84
- package/tools/priority-check.ts +0 -627
- package/tools/probe-context7.ts +0 -63
- package/tools/registry-check.ts +0 -252
- package/tools/reliability-check.ts +0 -25
- package/tools/retry-check.ts +0 -85
- package/tools/rewrite-declaration-extensions.ts +0 -98
- package/tools/runtime-check.ts +0 -165
- package/tools/runtime-deepseek-check.ts +0 -85
- package/tools/runtime-eval.ts +0 -358
- package/tools/scenario-check.ts +0 -161
- package/tools/scenario-incident.ts +0 -162
- package/tools/scoped-priors-check.ts +0 -35
- package/tools/scoped-priors-pooling.ts +0 -34
- package/tools/segment-ast-check.ts +0 -649
- package/tools/session-check.ts +0 -196
- package/tools/session-store-check.ts +0 -73
- package/tools/share-check.ts +0 -88
- package/tools/sign-check.ts +0 -95
- package/tools/signing-check.ts +0 -275
- package/tools/snapshot-demo.ts +0 -65
- package/tools/social-check.ts +0 -146
- package/tools/structure-compare-check.ts +0 -95
- package/tools/support/documentScanner.ts +0 -577
- package/tools/support/texScanner.ts +0 -631
- package/tools/support/workspaceScanner.ts +0 -476
- package/tools/team-check.ts +0 -163
- package/tools/team-demo.ts +0 -36
- package/tools/telemetry-check.ts +0 -44
- package/tools/tex-context-check.ts +0 -263
- package/tools/tool-gate-check.ts +0 -98
- package/tools/tree-structure-check.ts +0 -786
- package/tools/trust-flow-check.ts +0 -158
- package/tools/turn-store-check.ts +0 -57
- package/tools/unified-check.ts +0 -83
- package/tools/validate.ts +0 -309
- package/tools/wire-check.ts +0 -96
- package/tools/workspace-agent-check.ts +0 -486
- package/tools/workspace-agent-demo.ts +0 -62
- package/tools/workspace-agent-server.ts +0 -101
- package/tools/workspace-context-check.ts +0 -331
- package/tools/workspace-context.ts +0 -131
- package/tsconfig.build.json +0 -14
- package/tsconfig.json +0 -24
- package/tsconfig.tools.json +0 -31
- package/viz/context-ast.json +0 -1577
package/src/main.ts
DELETED
|
@@ -1,199 +0,0 @@
|
|
|
1
|
-
import "./style.css";
|
|
2
|
-
import raw from "../viz/context-ast.json";
|
|
3
|
-
|
|
4
|
-
interface AstNode {
|
|
5
|
-
id: string;
|
|
6
|
-
parentId?: string;
|
|
7
|
-
kind: string;
|
|
8
|
-
summary: string;
|
|
9
|
-
detailRef?: string;
|
|
10
|
-
depth: number;
|
|
11
|
-
order: number;
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
interface ConditionSummary {
|
|
15
|
-
text: string;
|
|
16
|
-
layer: string | null;
|
|
17
|
-
expectedLayer: string;
|
|
18
|
-
latencyMs: number;
|
|
19
|
-
}
|
|
20
|
-
|
|
21
|
-
interface ConditionDetail {
|
|
22
|
-
text: string;
|
|
23
|
-
pid: string | null;
|
|
24
|
-
lock: string | null;
|
|
25
|
-
expectedPid: string;
|
|
26
|
-
expectedLock: string;
|
|
27
|
-
latencyMs: number;
|
|
28
|
-
toolCalls: string[];
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
interface Condition {
|
|
32
|
-
id: string;
|
|
33
|
-
label: string;
|
|
34
|
-
inputTokens: number;
|
|
35
|
-
summary: ConditionSummary;
|
|
36
|
-
detail: ConditionDetail;
|
|
37
|
-
}
|
|
38
|
-
|
|
39
|
-
interface ContextMetrics {
|
|
40
|
-
nodes: number;
|
|
41
|
-
viewTokens: number;
|
|
42
|
-
flatTokens: number;
|
|
43
|
-
refs: number;
|
|
44
|
-
budgetTokens: number;
|
|
45
|
-
}
|
|
46
|
-
|
|
47
|
-
interface AstEdge {
|
|
48
|
-
from: string;
|
|
49
|
-
to: string;
|
|
50
|
-
kind: string;
|
|
51
|
-
}
|
|
52
|
-
|
|
53
|
-
interface ArchitectureLayer {
|
|
54
|
-
layer: string;
|
|
55
|
-
role: string;
|
|
56
|
-
state: string;
|
|
57
|
-
}
|
|
58
|
-
|
|
59
|
-
interface VizData {
|
|
60
|
-
generatedAt: string;
|
|
61
|
-
model: string;
|
|
62
|
-
context: ContextMetrics;
|
|
63
|
-
conditions: Condition[];
|
|
64
|
-
tree: AstNode[];
|
|
65
|
-
edges: AstEdge[];
|
|
66
|
-
details: Record<string, string>;
|
|
67
|
-
}
|
|
68
|
-
|
|
69
|
-
const Data: VizData = raw as unknown as VizData;
|
|
70
|
-
const App: HTMLElement | null = document.getElementById("app");
|
|
71
|
-
if (App === null) {
|
|
72
|
-
throw new Error("missing #app");
|
|
73
|
-
}
|
|
74
|
-
|
|
75
|
-
const money: (value: number) => string = (value: number): string => value.toLocaleString("en-US");
|
|
76
|
-
const escapeHtml: (value: string) => string = (value: string): string =>
|
|
77
|
-
value.replace(/[&<>"']/g, (character) => ({ "&": "&", "<": "<", ">": ">", '"': """, "'": "'" })[character] ?? character);
|
|
78
|
-
|
|
79
|
-
const ConditionRows: string = Data.conditions
|
|
80
|
-
.map(
|
|
81
|
-
(condition) => `<tr>
|
|
82
|
-
<td><b>${escapeHtml(condition.label)}</b><div class="muted">${escapeHtml(condition.id)}</div></td>
|
|
83
|
-
<td>${money(condition.inputTokens)}</td>
|
|
84
|
-
<td>${condition.summary.layer === condition.summary.expectedLayer ? "✅" : "❌"} ${escapeHtml(condition.summary.layer ?? "null")}</td>
|
|
85
|
-
<td>${condition.detail.pid === condition.detail.expectedPid ? "✅" : "❌"} ${escapeHtml(condition.detail.pid ?? "null")}</td>
|
|
86
|
-
<td>${condition.detail.lock === condition.detail.expectedLock ? "✅" : "❌"} ${escapeHtml(condition.detail.lock ?? "null")}</td>
|
|
87
|
-
<td>${escapeHtml(condition.detail.toolCalls.join(", ") || "none")}</td>
|
|
88
|
-
</tr>`,
|
|
89
|
-
)
|
|
90
|
-
.join("");
|
|
91
|
-
|
|
92
|
-
const TreeRows: string = Data.tree
|
|
93
|
-
.map(
|
|
94
|
-
(node) => `<button class="node ${node.detailRef === (void 0) ? "summary-only" : ""}" data-node="${escapeHtml(node.id)}" style="--depth:${node.depth}">
|
|
95
|
-
<span class="kind">${escapeHtml(node.kind)}</span>
|
|
96
|
-
<span class="id">${escapeHtml(node.id)}</span>
|
|
97
|
-
<span class="summary">${escapeHtml(node.summary)}</span>
|
|
98
|
-
<span class="ref">${node.detailRef === (void 0) ? "summary" : "detail ↗"}</span>
|
|
99
|
-
</button>`,
|
|
100
|
-
)
|
|
101
|
-
.join("");
|
|
102
|
-
|
|
103
|
-
const Architecture: ArchitectureLayer[] = [
|
|
104
|
-
{ layer: "CAS", role: "sha256 detail store", state: "active" },
|
|
105
|
-
{ layer: "Exact map", role: "nodeId -> node", state: "active" },
|
|
106
|
-
{ layer: "LRU", role: "resident detail cache", state: "active" },
|
|
107
|
-
{ layer: "AST", role: "tree + precedence", state: "active" },
|
|
108
|
-
{ layer: "Bloom", role: "negative CAS lookup", state: "deferred" },
|
|
109
|
-
{ layer: "Cuckoo", role: "deletable hot set", state: "deferred" },
|
|
110
|
-
{ layer: "Stack", role: "DFS / rollback", state: "planned" },
|
|
111
|
-
{ layer: "Heap", role: "top-k salience", state: "planned" },
|
|
112
|
-
];
|
|
113
|
-
|
|
114
|
-
const ArchitectureRows: string = Architecture.map(
|
|
115
|
-
(item) => `<div class="layer ${item.state}">
|
|
116
|
-
<span class="layer-name">${escapeHtml(item.layer)}</span>
|
|
117
|
-
<span class="layer-role">${escapeHtml(item.role)}</span>
|
|
118
|
-
<span class="layer-state">${item.state}</span>
|
|
119
|
-
</div>`,
|
|
120
|
-
).join("");
|
|
121
|
-
|
|
122
|
-
App.innerHTML = `
|
|
123
|
-
<header>
|
|
124
|
-
<h1>AMP Context AST</h1>
|
|
125
|
-
<p class="muted">${escapeHtml(Data.model)} · ${escapeHtml(Data.generatedAt)} · summaries in prompt, details local</p>
|
|
126
|
-
</header>
|
|
127
|
-
|
|
128
|
-
<section class="metrics">
|
|
129
|
-
<div><span class="label">nodes</span><b>${Data.context.nodes}</b></div>
|
|
130
|
-
<div><span class="label">summary tokens</span><b>${money(Data.context.viewTokens)}</b></div>
|
|
131
|
-
<div><span class="label">flat tokens</span><b>${money(Data.context.flatTokens)}</b></div>
|
|
132
|
-
<div><span class="label">detail refs</span><b>${Data.context.refs}</b></div>
|
|
133
|
-
<div><span class="label">budget</span><b>${money(Data.context.budgetTokens)}</b></div>
|
|
134
|
-
</section>
|
|
135
|
-
|
|
136
|
-
<section class="panel">
|
|
137
|
-
<h2>Context layers</h2>
|
|
138
|
-
<p class="muted">Bloom/Cuckoo are index filters, not storage. They stay deferred until negative lookups or deletions are a measured bottleneck.</p>
|
|
139
|
-
<div class="layers">${ArchitectureRows}</div>
|
|
140
|
-
</section>
|
|
141
|
-
|
|
142
|
-
<section class="panel">
|
|
143
|
-
<h2>Real DeepSeek A/B</h2>
|
|
144
|
-
<p class="muted">Same incident. Flat includes all details; AST sends summaries only; AST+tool calls read_detail on demand.</p>
|
|
145
|
-
<table>
|
|
146
|
-
<thead><tr><th>condition</th><th>input tokens</th><th>layer</th><th>blocking pid</th><th>lock</th><th>tool calls</th></tr></thead>
|
|
147
|
-
<tbody>${ConditionRows}</tbody>
|
|
148
|
-
</table>
|
|
149
|
-
<div class="verdict">
|
|
150
|
-
<b>AST summary</b> keeps the layer answer but cannot answer the detail question.
|
|
151
|
-
<b>AST + read_detail</b> recovers the detail with roughly ${
|
|
152
|
-
Data.conditions[0].inputTokens > 0 ? `${Math.round((Data.conditions[2].inputTokens / Data.conditions[0].inputTokens) * 100)}%` : "?"
|
|
153
|
-
} of the flat input tokens.
|
|
154
|
-
</div>
|
|
155
|
-
</section>
|
|
156
|
-
|
|
157
|
-
<section class="grid">
|
|
158
|
-
<div class="panel tree-panel">
|
|
159
|
-
<h2>Tree + precedence</h2>
|
|
160
|
-
<p class="muted">${Data.tree.length} nodes · ${Data.edges.length} edges · click a node</p>
|
|
161
|
-
<div class="tree">${TreeRows}</div>
|
|
162
|
-
</div>
|
|
163
|
-
<div class="panel detail-panel">
|
|
164
|
-
<h2>Local detail</h2>
|
|
165
|
-
<div id="detail-meta" class="muted">select a node</div>
|
|
166
|
-
<pre id="detail">—</pre>
|
|
167
|
-
<h3>Precedence sample</h3>
|
|
168
|
-
<ul id="edges" class="edges">${Data.edges
|
|
169
|
-
.slice(0, 12)
|
|
170
|
-
.map((edge) => `<li>${escapeHtml(edge.from)} <span class="muted">--${escapeHtml(edge.kind)}--></span> ${escapeHtml(edge.to)}</li>`)
|
|
171
|
-
.join("")}</ul>
|
|
172
|
-
</div>
|
|
173
|
-
</section>
|
|
174
|
-
|
|
175
|
-
<footer class="muted">Generated by tools/context-ast-deepseek.ts. This page is a view over the report; it does not call the model.</footer>
|
|
176
|
-
`;
|
|
177
|
-
|
|
178
|
-
const DetailEl: HTMLElement | null = document.getElementById("detail");
|
|
179
|
-
const MetaEl: HTMLElement | null = document.getElementById("detail-meta");
|
|
180
|
-
const selectNode: (id: string) => void = (id: string): void => {
|
|
181
|
-
const node: AstNode | undefined = Data.tree.find((entry) => entry.id === id);
|
|
182
|
-
if (node === (void 0) || DetailEl === null || MetaEl === null) {
|
|
183
|
-
return;
|
|
184
|
-
}
|
|
185
|
-
const detail: string = Data.details[id];
|
|
186
|
-
MetaEl.textContent = `${node.id} · ${node.kind} · ${node.detailRef ?? "summary only"}`;
|
|
187
|
-
DetailEl.textContent = detail ?? node.summary;
|
|
188
|
-
const buttons: HTMLButtonElement[] = [...document.querySelectorAll<HTMLButtonElement>(".node")];
|
|
189
|
-
for (let i: number = 0; i < buttons.length; i += 1) {
|
|
190
|
-
const button: HTMLButtonElement = buttons[i];
|
|
191
|
-
button.classList.toggle("active", button.dataset.node === id);
|
|
192
|
-
}
|
|
193
|
-
};
|
|
194
|
-
const Nodes: HTMLButtonElement[] = [...document.querySelectorAll<HTMLButtonElement>(".node")];
|
|
195
|
-
for (let i: number = 0; i < Nodes.length; i += 1) {
|
|
196
|
-
const button: HTMLButtonElement = Nodes[i];
|
|
197
|
-
button.addEventListener("click", () => selectNode(button.dataset.node ?? ""));
|
|
198
|
-
}
|
|
199
|
-
selectNode("layer.database.probe.3");
|
|
@@ -1,72 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* A2A v1.0 Agent Card discovery.
|
|
3
|
-
*/
|
|
4
|
-
|
|
5
|
-
export interface AgentInterface {
|
|
6
|
-
url: string;
|
|
7
|
-
protocolBinding?: string;
|
|
8
|
-
protocolVersion?: string;
|
|
9
|
-
}
|
|
10
|
-
|
|
11
|
-
export interface AgentCard {
|
|
12
|
-
name: string;
|
|
13
|
-
description?: string;
|
|
14
|
-
version?: string;
|
|
15
|
-
url?: string;
|
|
16
|
-
supportedInterfaces?: AgentInterface[];
|
|
17
|
-
capabilities?: Record<string, unknown>;
|
|
18
|
-
skills?: Array<{
|
|
19
|
-
id: string;
|
|
20
|
-
name?: string;
|
|
21
|
-
}>;
|
|
22
|
-
}
|
|
23
|
-
|
|
24
|
-
export interface CardResult {
|
|
25
|
-
ok: boolean;
|
|
26
|
-
card?: AgentCard;
|
|
27
|
-
endpoint?: string;
|
|
28
|
-
reasons: string[];
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
type CardOptions = {
|
|
32
|
-
timeoutMs?: number;
|
|
33
|
-
};
|
|
34
|
-
|
|
35
|
-
type FetchAgentCard = (baseUrl: string, options?: CardOptions) => Promise<CardResult>;
|
|
36
|
-
|
|
37
|
-
const WellKnown: string = "/.well-known/agent-card.json";
|
|
38
|
-
|
|
39
|
-
/**
|
|
40
|
-
* Fetches and minimally validates an Agent Card; the endpoint is derived from it.
|
|
41
|
-
*/
|
|
42
|
-
export const fetchAgentCard: FetchAgentCard = async (baseUrl: string, options: CardOptions = {}): Promise<CardResult> => {
|
|
43
|
-
const url: string = `${baseUrl.replace(/\/$/, "")}${WellKnown}`;
|
|
44
|
-
const controller: AbortController = new AbortController();
|
|
45
|
-
const timer: ReturnType<typeof setTimeout> = setTimeout(() => controller.abort(), options.timeoutMs ?? 5_000);
|
|
46
|
-
try {
|
|
47
|
-
const response: Response = await fetch(url, {
|
|
48
|
-
headers: { accept: "application/json", "a2a-version": "1.0" },
|
|
49
|
-
signal: controller.signal,
|
|
50
|
-
});
|
|
51
|
-
if (!response.ok) {
|
|
52
|
-
return { ok: false, reasons: [`HTTP ${response.status} from ${url}`] };
|
|
53
|
-
}
|
|
54
|
-
|
|
55
|
-
const card: AgentCard = (await response.json()) as AgentCard;
|
|
56
|
-
const reasons: string[] = [];
|
|
57
|
-
if (typeof(card?.name) !== "string" || card.name.length === 0) {
|
|
58
|
-
reasons.push("card has no name");
|
|
59
|
-
}
|
|
60
|
-
if (!card?.url && !(card?.supportedInterfaces?.length ?? 0)) {
|
|
61
|
-
reasons.push("card has no interface url");
|
|
62
|
-
}
|
|
63
|
-
|
|
64
|
-
const endpoint: string | undefined = card?.url ?? card?.supportedInterfaces?.[0]?.url;
|
|
65
|
-
return reasons.length === 0 && endpoint ? { ok: true, card, endpoint, reasons } : { ok: false, card, reasons };
|
|
66
|
-
} catch (error) {
|
|
67
|
-
const reason: string = error instanceof Error && error.name === "AbortError" ? "timeout" : `${error}`;
|
|
68
|
-
return { ok: false, reasons: [reason] };
|
|
69
|
-
} finally {
|
|
70
|
-
clearTimeout(timer);
|
|
71
|
-
}
|
|
72
|
-
};
|
package/src/manifest/cardSign.ts
DELETED
|
@@ -1,87 +0,0 @@
|
|
|
1
|
-
import type { AgentCard } from "./agentCard.ts";
|
|
2
|
-
import { canonical } from "../semantic/canonical.ts";
|
|
3
|
-
import type { KeyRegistry } from "./sign.ts";
|
|
4
|
-
|
|
5
|
-
/**
|
|
6
|
-
* JWS JSON serialization, EdDSA over the JCS-canonicalised card.
|
|
7
|
-
*/
|
|
8
|
-
export interface CardSignature {
|
|
9
|
-
protected: string;
|
|
10
|
-
signature: string;
|
|
11
|
-
}
|
|
12
|
-
|
|
13
|
-
const encoder = new TextEncoder();
|
|
14
|
-
|
|
15
|
-
function toBase64Url(bytes: ArrayBuffer): string {
|
|
16
|
-
const view = new Uint8Array(bytes);
|
|
17
|
-
let binary = "";
|
|
18
|
-
for (const byte of view) {
|
|
19
|
-
binary += String.fromCharCode(byte);
|
|
20
|
-
}
|
|
21
|
-
return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
|
|
22
|
-
}
|
|
23
|
-
|
|
24
|
-
function fromBase64Url(text: string): BufferSource {
|
|
25
|
-
const padded = text.replace(/-/g, "+").replace(/_/g, "/");
|
|
26
|
-
const pad = padded.length % 4 ? "=".repeat(4 - (padded.length % 4)) : "";
|
|
27
|
-
const binary = atob(padded + pad);
|
|
28
|
-
return Uint8Array.from(binary, (char) => char.charCodeAt(0)) as unknown as BufferSource;
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
function payloadOf(card: AgentCard): BufferSource {
|
|
32
|
-
const { ...rest } = card as AgentCard & { signatures?: unknown };
|
|
33
|
-
delete (rest as { signatures?: unknown }).signatures;
|
|
34
|
-
return encoder.encode(canonical(rest)) as unknown as BufferSource;
|
|
35
|
-
}
|
|
36
|
-
|
|
37
|
-
function signingInput(protectedHeader: string, payload: BufferSource): BufferSource {
|
|
38
|
-
const encoded = toBase64Url(payload as ArrayBuffer);
|
|
39
|
-
return encoder.encode(`${protectedHeader}.${encoded}`) as unknown as BufferSource;
|
|
40
|
-
}
|
|
41
|
-
|
|
42
|
-
export async function signCard(card: AgentCard, key: { kid: string; privateKey: CryptoKey }): Promise<CardSignature> {
|
|
43
|
-
const protectedHeader = toBase64Url(encoder.encode(JSON.stringify({ alg: "EdDSA", kid: key.kid })) as unknown as ArrayBuffer);
|
|
44
|
-
const payload = payloadOf(card);
|
|
45
|
-
const signature = await crypto.subtle.sign("Ed25519", key.privateKey, signingInput(protectedHeader, payload));
|
|
46
|
-
return { protected: protectedHeader, signature: toBase64Url(signature) };
|
|
47
|
-
}
|
|
48
|
-
|
|
49
|
-
export async function verifyCardSignature(card: AgentCard, signature: CardSignature, publicKey: CryptoKey): Promise<{ ok: boolean; reasons: string[] }> {
|
|
50
|
-
const reasons: string[] = [];
|
|
51
|
-
let header: { alg?: string; kid?: string };
|
|
52
|
-
try {
|
|
53
|
-
header = JSON.parse(new TextDecoder().decode(fromBase64Url(signature.protected) as unknown as ArrayBuffer));
|
|
54
|
-
} catch {
|
|
55
|
-
return { ok: false, reasons: ["protected header is not base64url JSON"] };
|
|
56
|
-
}
|
|
57
|
-
if (header.alg !== "EdDSA") {
|
|
58
|
-
reasons.push(`unsupported alg ${`${header.alg}`}`);
|
|
59
|
-
}
|
|
60
|
-
|
|
61
|
-
const valid = await crypto.subtle.verify("Ed25519", publicKey, fromBase64Url(signature.signature), signingInput(signature.protected, payloadOf(card)));
|
|
62
|
-
if (!valid) {
|
|
63
|
-
reasons.push("card signature does not verify");
|
|
64
|
-
}
|
|
65
|
-
return { ok: reasons.length === 0, reasons };
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
/**
|
|
69
|
-
* Resolves the signing key from a trust registry (which Federation bundles can
|
|
70
|
-
* populate) instead of trusting a key embedded in the card itself.
|
|
71
|
-
*/
|
|
72
|
-
export async function verifyCardWithRegistry(card: AgentCard, signature: CardSignature, registry: KeyRegistry): Promise<{ ok: boolean; reasons: string[] }> {
|
|
73
|
-
let header: { kid?: string };
|
|
74
|
-
try {
|
|
75
|
-
header = JSON.parse(new TextDecoder().decode(fromBase64Url(signature.protected) as unknown as ArrayBuffer));
|
|
76
|
-
} catch {
|
|
77
|
-
return { ok: false, reasons: ["protected header is not base64url JSON"] };
|
|
78
|
-
}
|
|
79
|
-
if (!header.kid) {
|
|
80
|
-
return { ok: false, reasons: ["signature carries no kid"] };
|
|
81
|
-
}
|
|
82
|
-
const key = registry.get(header.kid);
|
|
83
|
-
if (!key) {
|
|
84
|
-
return { ok: false, reasons: [`unknown or revoked key: ${header.kid}`] };
|
|
85
|
-
}
|
|
86
|
-
return verifyCardSignature(card, signature, key);
|
|
87
|
-
}
|
|
@@ -1,237 +0,0 @@
|
|
|
1
|
-
import type { Digest, Id, Ref, Timestamp } from "../types/common.ts";
|
|
2
|
-
import type { Attestation, KeyMaterial, ManifestBundle } from "./federationTypes.ts";
|
|
3
|
-
import type { Manifest } from "./manifest.ts";
|
|
4
|
-
import { canonical, digestOf } from "../semantic/canonical.ts";
|
|
5
|
-
import { KeyRegistry } from "./sign.ts";
|
|
6
|
-
import type { KeyPair } from "./sign.ts";
|
|
7
|
-
import { verifyManifest } from "./sign.ts";
|
|
8
|
-
import { checkManifestWindow } from "./keys.ts";
|
|
9
|
-
|
|
10
|
-
const encoder = new TextEncoder();
|
|
11
|
-
const SKEW_MS = 5 * 60_000;
|
|
12
|
-
|
|
13
|
-
function toBase64Url(bytes: ArrayBuffer): string {
|
|
14
|
-
const view = new Uint8Array(bytes);
|
|
15
|
-
let binary = "";
|
|
16
|
-
for (const byte of view) {
|
|
17
|
-
binary += String.fromCharCode(byte);
|
|
18
|
-
}
|
|
19
|
-
return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
function fromBase64Url(text: string): BufferSource {
|
|
23
|
-
const padded = text.replace(/-/g, "+").replace(/_/g, "/");
|
|
24
|
-
const pad = padded.length % 4 ? "=".repeat(4 - (padded.length % 4)) : "";
|
|
25
|
-
const binary = atob(padded + pad);
|
|
26
|
-
return Uint8Array.from(binary, (char) => char.charCodeAt(0)) as unknown as BufferSource;
|
|
27
|
-
}
|
|
28
|
-
|
|
29
|
-
async function exportKeyMaterial(key: KeyPair): Promise<KeyMaterial> {
|
|
30
|
-
const raw = await crypto.subtle.exportKey("raw", key.publicKey);
|
|
31
|
-
return { kid: key.kid, alg: "ed25519", publicKey: toBase64Url(raw) };
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
async function importPublicKey(material: KeyMaterial): Promise<CryptoKey> {
|
|
35
|
-
return crypto.subtle.importKey("raw", fromBase64Url(material.publicKey), { name: "Ed25519" }, true, ["verify"]);
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
/* ------------------------------- bundle ------------------------------- */
|
|
39
|
-
|
|
40
|
-
/**
|
|
41
|
-
* Digest covers manifest + keys + revocation + validity window.
|
|
42
|
-
*/
|
|
43
|
-
export function bundleDigest(bundle: Omit<ManifestBundle, "digest" | "attestations">): Digest {
|
|
44
|
-
return digestOf({
|
|
45
|
-
manifest: bundle.manifest,
|
|
46
|
-
keys: bundle.keys,
|
|
47
|
-
revoked: bundle.revoked ?? [],
|
|
48
|
-
issued: bundle.issued,
|
|
49
|
-
expires: bundle.expires,
|
|
50
|
-
});
|
|
51
|
-
}
|
|
52
|
-
|
|
53
|
-
export async function exportBundle(
|
|
54
|
-
manifest: Manifest,
|
|
55
|
-
key: KeyPair,
|
|
56
|
-
options: { issued: Timestamp; expires: Timestamp; revoked?: string[]; attestations?: Attestation[] },
|
|
57
|
-
): Promise<ManifestBundle> {
|
|
58
|
-
const base = {
|
|
59
|
-
amp: "0.1" as const,
|
|
60
|
-
kind: "bundle" as const,
|
|
61
|
-
manifest,
|
|
62
|
-
keys: [await exportKeyMaterial(key)],
|
|
63
|
-
revoked: options.revoked ?? [],
|
|
64
|
-
issued: options.issued,
|
|
65
|
-
expires: options.expires,
|
|
66
|
-
};
|
|
67
|
-
return { ...base, digest: bundleDigest(base), attestations: options.attestations };
|
|
68
|
-
}
|
|
69
|
-
|
|
70
|
-
export interface ImportResult {
|
|
71
|
-
ok: boolean;
|
|
72
|
-
reasons: string[];
|
|
73
|
-
manifest?: Manifest;
|
|
74
|
-
/**
|
|
75
|
-
* True only when an endorsement's subject binds to the manifest digest AND
|
|
76
|
-
* its Ed25519 signature verifies against a caller-supplied issuer key.
|
|
77
|
-
* Without `issuerKeys`, no attestation can be endorsed.
|
|
78
|
-
*/
|
|
79
|
-
attested: boolean;
|
|
80
|
-
attestations: Id[];
|
|
81
|
-
}
|
|
82
|
-
|
|
83
|
-
/**
|
|
84
|
-
* Fails closed. Every check must pass before the manifest is used;
|
|
85
|
-
* the only permitted degradation is "not endorsed", never "less verified".
|
|
86
|
-
*
|
|
87
|
-
* `issuerKeys` is the caller's trust root for third-party attestations. The
|
|
88
|
-
* bundle carries the manifest signer's keys, not the issuer's, so an
|
|
89
|
-
* attestation is never trusted just because it is inside the bundle.
|
|
90
|
-
*/
|
|
91
|
-
export async function importBundle(bundle: ManifestBundle, options: { now: Timestamp; revoked?: string[]; issuerKeys?: KeyRegistry }): Promise<ImportResult> {
|
|
92
|
-
const reasons: string[] = [];
|
|
93
|
-
const { digest, attestations, ...rest } = bundle;
|
|
94
|
-
|
|
95
|
-
if (bundleDigest(rest) !== digest) {
|
|
96
|
-
reasons.push("bundle digest does not cover its content");
|
|
97
|
-
}
|
|
98
|
-
|
|
99
|
-
const now = Date.parse(options.now);
|
|
100
|
-
if (!Number.isFinite(now)) {
|
|
101
|
-
reasons.push("now is not a valid timestamp");
|
|
102
|
-
}
|
|
103
|
-
if (Date.parse(bundle.expires) + SKEW_MS < now) {
|
|
104
|
-
reasons.push("bundle expired");
|
|
105
|
-
}
|
|
106
|
-
if (Date.parse(bundle.issued) - SKEW_MS > now) {
|
|
107
|
-
reasons.push("bundle issued in the future");
|
|
108
|
-
}
|
|
109
|
-
|
|
110
|
-
const window = checkManifestWindow(bundle.manifest, options.now, SKEW_MS);
|
|
111
|
-
for (const reason of window.reasons) {
|
|
112
|
-
reasons.push(`manifest ${reason}`);
|
|
113
|
-
}
|
|
114
|
-
|
|
115
|
-
const signature = bundle.manifest.signatures.find((entry) => entry.role === "self");
|
|
116
|
-
if (!signature) {
|
|
117
|
-
reasons.push("manifest has no self signature");
|
|
118
|
-
}
|
|
119
|
-
|
|
120
|
-
const key = signature ? bundle.keys.find((material) => material.kid === signature.kid) : undefined;
|
|
121
|
-
if (signature && !key) {
|
|
122
|
-
reasons.push(`missing key for kid ${signature.kid}`);
|
|
123
|
-
}
|
|
124
|
-
|
|
125
|
-
const revoked = new Set([...(bundle.revoked ?? []), ...(options.revoked ?? [])]);
|
|
126
|
-
if (signature && revoked.has(signature.kid)) {
|
|
127
|
-
reasons.push(`key revoked: ${signature.kid}`);
|
|
128
|
-
}
|
|
129
|
-
|
|
130
|
-
if (signature && key) {
|
|
131
|
-
try {
|
|
132
|
-
const publicKey = await importPublicKey(key);
|
|
133
|
-
const verification = await verifyManifest(bundle.manifest, publicKey);
|
|
134
|
-
for (const reason of verification.reasons) {
|
|
135
|
-
reasons.push(reason);
|
|
136
|
-
}
|
|
137
|
-
} catch {
|
|
138
|
-
reasons.push("public key cannot be imported");
|
|
139
|
-
}
|
|
140
|
-
}
|
|
141
|
-
|
|
142
|
-
const endorsed: Id[] = [];
|
|
143
|
-
for (const attestation of attestations ?? []) {
|
|
144
|
-
if (attestation.subject.digest !== bundle.manifest.digest) {
|
|
145
|
-
continue;
|
|
146
|
-
}
|
|
147
|
-
if (!Number.isFinite(Date.parse(attestation.expires))) {
|
|
148
|
-
continue;
|
|
149
|
-
}
|
|
150
|
-
if (Date.parse(attestation.expires) + SKEW_MS < now) {
|
|
151
|
-
continue;
|
|
152
|
-
}
|
|
153
|
-
if (Date.parse(attestation.issued) - SKEW_MS > now) {
|
|
154
|
-
continue;
|
|
155
|
-
}
|
|
156
|
-
const issuerKid = attestation.signatures[0]?.kid;
|
|
157
|
-
const issuerKey = issuerKid ? options.issuerKeys?.get(issuerKid) : undefined;
|
|
158
|
-
if (!issuerKey) {
|
|
159
|
-
continue;
|
|
160
|
-
}
|
|
161
|
-
const verdict = await verifyAttestationWithKey(attestation, issuerKey);
|
|
162
|
-
if (!verdict.ok) {
|
|
163
|
-
continue;
|
|
164
|
-
}
|
|
165
|
-
endorsed.push(attestation.id);
|
|
166
|
-
}
|
|
167
|
-
|
|
168
|
-
return {
|
|
169
|
-
ok: reasons.length === 0,
|
|
170
|
-
reasons,
|
|
171
|
-
manifest: reasons.length === 0 ? bundle.manifest : undefined,
|
|
172
|
-
attested: endorsed.length > 0,
|
|
173
|
-
attestations: endorsed,
|
|
174
|
-
};
|
|
175
|
-
}
|
|
176
|
-
|
|
177
|
-
/**
|
|
178
|
-
* Imports a bundle's keys into a registry; revoked kids stay revoked.
|
|
179
|
-
*/
|
|
180
|
-
export async function registryFromBundle(bundle: ManifestBundle): Promise<KeyRegistry> {
|
|
181
|
-
const registry = new KeyRegistry();
|
|
182
|
-
for (const material of bundle.keys) {
|
|
183
|
-
registry.add(material.kid, await importPublicKey(material));
|
|
184
|
-
}
|
|
185
|
-
for (const kid of bundle.revoked ?? []) {
|
|
186
|
-
registry.revoke(kid);
|
|
187
|
-
}
|
|
188
|
-
return registry;
|
|
189
|
-
}
|
|
190
|
-
|
|
191
|
-
/* ----------------------------- attestation ---------------------------- */
|
|
192
|
-
export async function attest(input: {
|
|
193
|
-
id: Id;
|
|
194
|
-
issuer: Ref;
|
|
195
|
-
manifest: Manifest;
|
|
196
|
-
scope: string[];
|
|
197
|
-
issued: Timestamp;
|
|
198
|
-
expires: Timestamp;
|
|
199
|
-
key: KeyPair;
|
|
200
|
-
}): Promise<Attestation> {
|
|
201
|
-
const body = {
|
|
202
|
-
amp: "0.1" as const,
|
|
203
|
-
kind: "attestation" as const,
|
|
204
|
-
id: input.id,
|
|
205
|
-
issuer: input.issuer,
|
|
206
|
-
subject: {
|
|
207
|
-
kind: "manifest" as const,
|
|
208
|
-
id: input.manifest.agent.id,
|
|
209
|
-
digest: input.manifest.digest,
|
|
210
|
-
},
|
|
211
|
-
scope: input.scope,
|
|
212
|
-
issued: input.issued,
|
|
213
|
-
expires: input.expires,
|
|
214
|
-
};
|
|
215
|
-
const signature = await crypto.subtle.sign("Ed25519", input.key.privateKey, encoder.encode(canonical(body)));
|
|
216
|
-
return {
|
|
217
|
-
...body,
|
|
218
|
-
signatures: [{ role: "org", alg: "ed25519", kid: input.key.kid, sig: toBase64Url(signature) }],
|
|
219
|
-
};
|
|
220
|
-
}
|
|
221
|
-
|
|
222
|
-
export async function verifyAttestation(attestation: Attestation, issuerKey: KeyPair): Promise<{ ok: boolean; reasons: string[] }> {
|
|
223
|
-
return verifyAttestationWithKey(attestation, issuerKey.publicKey);
|
|
224
|
-
}
|
|
225
|
-
|
|
226
|
-
/**
|
|
227
|
-
* Public-key variant so a verifier does not need the issuer's private key.
|
|
228
|
-
*/
|
|
229
|
-
export async function verifyAttestationWithKey(attestation: Attestation, publicKey: CryptoKey): Promise<{ ok: boolean; reasons: string[] }> {
|
|
230
|
-
const { signatures, ...body } = attestation;
|
|
231
|
-
const signature = signatures[0];
|
|
232
|
-
if (!signature) {
|
|
233
|
-
return { ok: false, reasons: ["attestation has no signature"] };
|
|
234
|
-
}
|
|
235
|
-
const valid = await crypto.subtle.verify("Ed25519", publicKey, fromBase64Url(signature.sig), encoder.encode(canonical(body)));
|
|
236
|
-
return { ok: valid, reasons: valid ? [] : ["attestation signature does not verify"] };
|
|
237
|
-
}
|
|
@@ -1,55 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* AMP v0.1 — Federation Profile: bundles and third-party attestations.
|
|
3
|
-
* Mirrors docs/schemas/federation.schema.json.
|
|
4
|
-
*/
|
|
5
|
-
import type { Digest, Id, Ref, Signature, Timestamp } from "../types/common.ts";
|
|
6
|
-
import type { Manifest } from "./manifest.ts";
|
|
7
|
-
|
|
8
|
-
export interface KeyMaterial {
|
|
9
|
-
kid: string;
|
|
10
|
-
alg: "ed25519";
|
|
11
|
-
/**
|
|
12
|
-
* base64url raw public key.
|
|
13
|
-
*/
|
|
14
|
-
publicKey: string;
|
|
15
|
-
}
|
|
16
|
-
|
|
17
|
-
/**
|
|
18
|
-
* A bundle is a transport shape, not a new trust root: the manifest inside is
|
|
19
|
-
* already signed, and the keys are the minimum needed to check it.
|
|
20
|
-
*/
|
|
21
|
-
export interface ManifestBundle {
|
|
22
|
-
amp: "0.1";
|
|
23
|
-
kind: "bundle";
|
|
24
|
-
manifest: Manifest;
|
|
25
|
-
keys: KeyMaterial[];
|
|
26
|
-
/**
|
|
27
|
-
* Keys the issuing domain has revoked; the receiver still merges its own list.
|
|
28
|
-
*/
|
|
29
|
-
revoked?: string[];
|
|
30
|
-
issued: Timestamp;
|
|
31
|
-
expires: Timestamp;
|
|
32
|
-
digest: Digest;
|
|
33
|
-
attestations?: Attestation[];
|
|
34
|
-
}
|
|
35
|
-
|
|
36
|
-
export interface AttestationSubject {
|
|
37
|
-
kind: "manifest";
|
|
38
|
-
id: Id;
|
|
39
|
-
/**
|
|
40
|
-
* Bound to bytes, not to a name or version.
|
|
41
|
-
*/
|
|
42
|
-
digest: Digest;
|
|
43
|
-
}
|
|
44
|
-
|
|
45
|
-
export interface Attestation {
|
|
46
|
-
amp: "0.1";
|
|
47
|
-
kind: "attestation";
|
|
48
|
-
id: Id;
|
|
49
|
-
issuer: Ref;
|
|
50
|
-
subject: AttestationSubject;
|
|
51
|
-
scope: string[];
|
|
52
|
-
issued: Timestamp;
|
|
53
|
-
expires: Timestamp;
|
|
54
|
-
signatures: Signature[];
|
|
55
|
-
}
|
package/src/manifest/index.ts
DELETED