vaspera 2.5.0

package/dist/action/types.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.test.js","sourceRoot":"","sources":["../../src/action/types.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG/D,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACpE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC1B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,eAAe,GAA6B;QAChD,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACjE,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,yDAAyD;QACzD,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,uDAAuD;QACvD,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,UAAU,GAA6B;YAC3C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,EAAE;YACP,IAAI,EAAE,EAAE;SACT,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agents/agent-integrity.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Agent Integrity Verifier
+ *
+ * Verifies consensus integrity in multi-agent systems.
+ * Detects single outlier domination, low-entropy agreements,
+ * and validates patch signing with Sigstore.
+ *
+ * @module agents/agent-integrity
+ */
+import type { Severity, Finding, AgentType, Verification } from "../certification/types.js";
+/**
+ * Agent contribution to consensus
+ */
+export interface AgentContribution {
+    agent: AgentType;
+    findings: number;
+    severity: Record<Severity, number>;
+    confidence: number;
+    timestamp: string;
+}
+/**
+ * Consensus analysis result
+ */
+export interface ConsensusAnalysis {
+    totalAgents: number;
+    activeAgents: number;
+    findingsDistribution: Record<AgentType, number>;
+    dominationScore: number;
+    entropyScore: number;
+    outlierAgents: AgentType[];
+    suspiciousPatterns: IntegrityFinding[];
+    isHealthy: boolean;
+}
+/**
+ * Integrity finding
+ */
+export interface IntegrityFinding {
+    type: IntegrityIssueType;
+    severity: Severity;
+    description: string;
+    evidence: string;
+    affectedAgents?: AgentType[];
+    recommendation: string;
+}
+/**
+ * Types of integrity issues
+ */
+export type IntegrityIssueType = "domination" | "low-entropy" | "outlier" | "timing-anomaly" | "unsigned-finding" | "hash-mismatch" | "version-drift" | "cross-contamination";
+/**
+ * Verification chain for a finding
+ */
+export interface VerificationChain {
+    findingId: string;
+    originalHash: string;
+    verifications: Array<{
+        agent: AgentType;
+        hash: string;
+        timestamp: string;
+        verdict: "confirmed" | "disputed" | "inconclusive";
+    }>;
+    isValid: boolean;
+    breakpoint?: string;
+}
+/**
+ * Analyze consensus health
+ */
+export declare function analyzeConsensus(contributions: AgentContribution[]): ConsensusAnalysis;
+/**
+ * Calculate hash for a finding
+ */
+export declare function hashFinding(finding: {
+    severity: string;
+    category: string;
+    description: string;
+    evidence: string;
+}): string;
+/**
+ * Verify a finding's hash chain
+ */
+export declare function verifyFindingChain(findingId: string, finding: {
+    severity: string;
+    category: string;
+    description: string;
+    evidence: string;
+}, verifications: Verification[]): VerificationChain;
+/**
+ * Detect findings that appear to be copied between agents
+ */
+export declare function detectCrossContamination(agentFindings: Record<AgentType, Finding[]>): IntegrityFinding[];
+/**
+ * Run full integrity verification
+ */
+export declare function runIntegrityCheck(contributions: AgentContribution[], agentFindings: Record<AgentType, Finding[]>, options?: {
+    checkCrossContamination?: boolean;
+    verifyHashes?: boolean;
+}): Promise<{
+    consensus: ConsensusAnalysis;
+    crossContamination: IntegrityFinding[];
+    hashVerification: {
+        verified: number;
+        failed: number;
+        chains: VerificationChain[];
+    };
+    overallHealth: "healthy" | "warning" | "critical";
+    recommendations: string[];
+}>;
+/**
+ * Convert integrity findings to certification findings
+ */
+export declare function integrityToFindings(analysis: ConsensusAnalysis, crossContamination: IntegrityFinding[]): Finding[];
+//# sourceMappingURL=agent-integrity.d.ts.map

package/dist/agents/agent-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-integrity.d.ts","sourceRoot":"","sources":["../../src/agents/agent-integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAmB,MAAM,2BAA2B,CAAC;AAM7G;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,SAAS,EAAE,CAAC;IAC3B,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IACvC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,aAAa,GACb,SAAS,GACT,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,eAAe,GACf,qBAAqB,CAAC;AAE1B;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,KAAK,CAAC;QACnB,KAAK,EAAE,SAAS,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,WAAW,GAAG,UAAU,GAAG,cAAc,CAAC;KACpD,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA2DD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,iBAAiB,EAAE,GACjC,iBAAiB,CAqFnB;AAMD;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAST;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB,EACD,aAAa,EAAE,YAAY,EAAE,GAC5B,iBAAiB,CAgCnB;AAMD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,GAC1C,gBAAgB,EAAE,CAwCpB;AAMD;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,iBAAiB,EAAE,EAClC,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAC3C,OAAO,CAAC,EAAE;IACR,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GACA,OAAO,CAAC;IACT,SAAS,EAAE,iBAAiB,CAAC;IAC7B,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IACvC,gBAAgB,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,iBAAiB,EAAE,CAAC;KAC7B,CAAC;IACF,aAAa,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAClD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC,CAqED;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,iBAAiB,EAC3B,kBAAkB,EAAE,gBAAgB,EAAE,GACrC,OAAO,EAAE,CAcX"}

package/dist/agents/agent-integrity.js

@@ -0,0 +1,308 @@
+/**
+ * Agent Integrity Verifier
+ *
+ * Verifies consensus integrity in multi-agent systems.
+ * Detects single outlier domination, low-entropy agreements,
+ * and validates patch signing with Sigstore.
+ *
+ * @module agents/agent-integrity
+ */
+import { createHash } from "crypto";
+// ============================================================================
+// Consensus Analysis
+// ============================================================================
+/**
+ * Calculate Shannon entropy of a distribution
+ */
+function calculateEntropy(distribution) {
+    const total = distribution.reduce((sum, v) => sum + v, 0);
+    if (total === 0)
+        return 0;
+    let entropy = 0;
+    for (const count of distribution) {
+        if (count > 0) {
+            const p = count / total;
+            entropy -= p * Math.log2(p);
+        }
+    }
+    // Normalize to 0-100 scale based on max possible entropy
+    const maxEntropy = Math.log2(distribution.length || 1);
+    return maxEntropy > 0 ? (entropy / maxEntropy) * 100 : 0;
+}
+/**
+ * Calculate domination score (how much one agent dominates)
+ */
+function calculateDominationScore(distribution) {
+    const values = Object.values(distribution);
+    const total = values.reduce((sum, v) => sum + v, 0);
+    if (total === 0)
+        return 0;
+    const max = Math.max(...values);
+    // Domination = max contribution as percentage of total, scaled to 0-100
+    return (max / total) * 100;
+}
+/**
+ * Detect outlier agents
+ */
+function detectOutliers(contributions) {
+    if (contributions.length < 3)
+        return [];
+    const findings = contributions.map((c) => c.findings);
+    const mean = findings.reduce((sum, v) => sum + v, 0) / findings.length;
+    const stdDev = Math.sqrt(findings.reduce((sum, v) => sum + Math.pow(v - mean, 2), 0) / findings.length);
+    // Agents more than 2 standard deviations from mean
+    return contributions
+        .filter((c) => Math.abs(c.findings - mean) > 2 * stdDev)
+        .map((c) => c.agent);
+}
+/**
+ * Analyze consensus health
+ */
+export function analyzeConsensus(contributions) {
+    const findings = [];
+    // Build distribution
+    const distribution = {};
+    for (const contrib of contributions) {
+        distribution[contrib.agent] = contrib.findings;
+    }
+    // Calculate metrics
+    const dominationScore = calculateDominationScore(distribution);
+    const entropyScore = calculateEntropy(Object.values(distribution));
+    const outlierAgents = detectOutliers(contributions);
+    // Check for domination
+    if (dominationScore > 70) {
+        const dominant = contributions.reduce((max, c) => c.findings > (max?.findings || 0) ? c : max, contributions[0]);
+        findings.push({
+            type: "domination",
+            severity: "high",
+            description: `Single agent dominates consensus (${dominant.agent}: ${dominationScore.toFixed(1)}% of findings)`,
+            evidence: `Agent ${dominant.agent} contributed ${dominant.findings} findings out of total`,
+            affectedAgents: [dominant.agent],
+            recommendation: "Review dominant agent's findings carefully and ensure other agents have sufficient coverage",
+        });
+    }
+    // Check for low entropy (suspiciously uniform agreement)
+    if (contributions.length >= 3 && entropyScore < 30) {
+        findings.push({
+            type: "low-entropy",
+            severity: "medium",
+            description: "Low diversity in agent findings (suspiciously uniform)",
+            evidence: `Entropy score: ${entropyScore.toFixed(1)}/100 (expected >50 for healthy consensus)`,
+            recommendation: "Verify agents are running independently and not sharing state",
+        });
+    }
+    // Report outliers
+    if (outlierAgents.length > 0) {
+        findings.push({
+            type: "outlier",
+            severity: "medium",
+            description: `${outlierAgents.length} agent(s) significantly deviate from consensus`,
+            evidence: `Outlier agents: ${outlierAgents.join(", ")}`,
+            affectedAgents: outlierAgents,
+            recommendation: "Review outlier findings - may indicate bugs or unique perspectives",
+        });
+    }
+    // Check timing patterns
+    const timestamps = contributions.map((c) => new Date(c.timestamp).getTime());
+    const timeDiffs = [];
+    for (let i = 1; i < timestamps.length; i++) {
+        timeDiffs.push(timestamps[i] - timestamps[i - 1]);
+    }
+    if (timeDiffs.length > 0) {
+        const avgDiff = timeDiffs.reduce((sum, d) => sum + d, 0) / timeDiffs.length;
+        const suspiciouslyFast = timeDiffs.filter((d) => d < 100).length;
+        if (suspiciouslyFast > timeDiffs.length / 2) {
+            findings.push({
+                type: "timing-anomaly",
+                severity: "medium",
+                description: "Suspicious timing pattern - agents completed too quickly",
+                evidence: `${suspiciouslyFast}/${timeDiffs.length} intervals under 100ms (avg: ${avgDiff.toFixed(0)}ms)`,
+                recommendation: "Verify agents are running independently and not pre-cached",
+            });
+        }
+    }
+    return {
+        totalAgents: contributions.length,
+        activeAgents: contributions.filter((c) => c.findings > 0).length,
+        findingsDistribution: distribution,
+        dominationScore,
+        entropyScore,
+        outlierAgents,
+        suspiciousPatterns: findings,
+        isHealthy: findings.filter((f) => f.severity === "high" || f.severity === "critical").length === 0,
+    };
+}
+// ============================================================================
+// Hash Verification
+// ============================================================================
+/**
+ * Calculate hash for a finding
+ */
+export function hashFinding(finding) {
+    const content = JSON.stringify({
+        severity: finding.severity,
+        category: finding.category,
+        description: finding.description,
+        evidence: finding.evidence,
+    });
+    return createHash("sha256").update(content).digest("hex");
+}
+/**
+ * Verify a finding's hash chain
+ */
+export function verifyFindingChain(findingId, finding, verifications) {
+    const originalHash = hashFinding(finding);
+    const chain = {
+        findingId,
+        originalHash,
+        verifications: [],
+        isValid: true,
+    };
+    let previousHash = originalHash;
+    for (const v of verifications) {
+        const verificationData = JSON.stringify({
+            previousHash,
+            agent: v.verifying_agent,
+            verdict: v.verdict,
+            evidence: v.evidence,
+        });
+        const verificationHash = createHash("sha256").update(verificationData).digest("hex");
+        chain.verifications.push({
+            agent: v.verifying_agent,
+            hash: verificationHash,
+            timestamp: v.created_at,
+            verdict: v.verdict,
+        });
+        previousHash = verificationHash;
+    }
+    return chain;
+}
+// ============================================================================
+// Cross-Contamination Detection
+// ============================================================================
+/**
+ * Detect findings that appear to be copied between agents
+ */
+export function detectCrossContamination(agentFindings) {
+    const findings = [];
+    // Build hash map of all findings
+    const hashToAgents = {};
+    for (const [agent, agentFindingList] of Object.entries(agentFindings)) {
+        for (const finding of agentFindingList) {
+            const hash = hashFinding({
+                severity: finding.severity,
+                category: finding.category,
+                description: finding.description,
+                evidence: finding.evidence,
+            });
+            if (!hashToAgents[hash]) {
+                hashToAgents[hash] = [];
+            }
+            hashToAgents[hash].push(agent);
+        }
+    }
+    // Find duplicate findings across different agents
+    const duplicates = Object.entries(hashToAgents)
+        .filter(([_, agents]) => agents.length > 1);
+    if (duplicates.length > 5) {
+        const affectedAgents = [...new Set(duplicates.flatMap(([_, agents]) => agents))];
+        findings.push({
+            type: "cross-contamination",
+            severity: "high",
+            description: `${duplicates.length} findings appear identical across multiple agents`,
+            evidence: `Affected agents: ${affectedAgents.join(", ")}`,
+            affectedAgents,
+            recommendation: "Verify agents are running independently. Identical findings may indicate shared state or caching.",
+        });
+    }
+    return findings;
+}
+// ============================================================================
+// Main Integrity Check
+// ============================================================================
+/**
+ * Run full integrity verification
+ */
+export async function runIntegrityCheck(contributions, agentFindings, options) {
+    // Analyze consensus
+    const consensus = analyzeConsensus(contributions);
+    // Check cross-contamination
+    const crossContamination = options?.checkCrossContamination
+        ? detectCrossContamination(agentFindings)
+        : [];
+    // Verify hash chains
+    const chains = [];
+    let verified = 0;
+    let failed = 0;
+    if (options?.verifyHashes) {
+        for (const [_, findingList] of Object.entries(agentFindings)) {
+            for (const finding of findingList) {
+                const chain = verifyFindingChain(finding.id, finding, finding.verifications);
+                chains.push(chain);
+                if (chain.isValid)
+                    verified++;
+                else
+                    failed++;
+            }
+        }
+    }
+    // Determine overall health
+    const criticalIssues = [
+        ...consensus.suspiciousPatterns,
+        ...crossContamination,
+    ].filter((f) => f.severity === "critical").length;
+    const highIssues = [
+        ...consensus.suspiciousPatterns,
+        ...crossContamination,
+    ].filter((f) => f.severity === "high").length;
+    let overallHealth = "healthy";
+    if (criticalIssues > 0 || failed > 0) {
+        overallHealth = "critical";
+    }
+    else if (highIssues > 0 || !consensus.isHealthy) {
+        overallHealth = "warning";
+    }
+    // Generate recommendations
+    const recommendations = [];
+    if (!consensus.isHealthy) {
+        recommendations.push("Consensus health issues detected. Review suspicious patterns.");
+    }
+    if (crossContamination.length > 0) {
+        recommendations.push("Cross-contamination detected. Ensure agent isolation.");
+    }
+    if (failed > 0) {
+        recommendations.push(`${failed} finding(s) failed hash verification. Check for tampering.`);
+    }
+    if (consensus.outlierAgents.length > 0) {
+        recommendations.push(`Review outlier agents: ${consensus.outlierAgents.join(", ")}`);
+    }
+    return {
+        consensus,
+        crossContamination,
+        hashVerification: {
+            verified,
+            failed,
+            chains: chains.slice(0, 10), // Return first 10 chains only
+        },
+        overallHealth,
+        recommendations,
+    };
+}
+/**
+ * Convert integrity findings to certification findings
+ */
+export function integrityToFindings(analysis, crossContamination) {
+    const allFindings = [...analysis.suspiciousPatterns, ...crossContamination];
+    return allFindings.map((f, i) => ({
+        id: `int-${String(i + 1).padStart(3, "0")}`,
+        severity: f.severity,
+        category: "consensus-manipulation",
+        description: f.description,
+        evidence: f.evidence,
+        confidence: 85,
+        verifications: [],
+        created_at: new Date().toISOString(),
+        scanner_source: undefined,
+    }));
+}
+//# sourceMappingURL=agent-integrity.js.map

package/dist/agents/agent-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-integrity.js","sourceRoot":"","sources":["../../src/agents/agent-integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAyEpC,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,gBAAgB,CAAC,YAAsB;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAE1B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACvD,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,YAAuC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAChC,wEAAwE;IACxE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,aAAkC;IAElC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CACtB,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAC9E,CAAC;IAEF,mDAAmD;IACnD,OAAO,aAAa;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;SACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAkC;IAElC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,qBAAqB;IACrB,MAAM,YAAY,GAA8B,EAA+B,CAAC;IAChF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IACjD,CAAC;IAED,oBAAoB;IACpB,MAAM,eAAe,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAEpD,uBAAuB;IACvB,IAAI,eAAe,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAC/C,CAAC,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAC3C,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,qCAAqC,QAAQ,CAAC,KAAK,KAAK,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;YAC/G,QAAQ,EAAE,SAAS,QAAQ,CAAC,KAAK,gBAAgB,QAAQ,CAAC,QAAQ,wBAAwB;YAC1F,cAAc,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,cAAc,EAAE,6FAA6F;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,IAAI,aAAa,CAAC,MAAM,IAAI,CAAC,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,wDAAwD;YACrE,QAAQ,EAAE,kBAAkB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C;YAC9F,cAAc,EAAE,+DAA+D;SAChF,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,GAAG,aAAa,CAAC,MAAM,gDAAgD;YACpF,QAAQ,EAAE,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvD,cAAc,EAAE,aAAa;YAC7B,cAAc,EAAE,oEAAoE;SACrF,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;QAC5E,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;QAEjE,IAAI,gBAAgB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,0DAA0D;gBACvE,QAAQ,EAAE,GAAG,gBAAgB,IAAI,SAAS,CAAC,MAAM,gCAAgC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBACxG,cAAc,EAAE,4DAA4D;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,aAAa,CAAC,MAAM;QACjC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM;QAChE,oBAAoB,EAAE,YAAY;QAClC,eAAe;QACf,YAAY;QACZ,aAAa;QACb,kBAAkB,EAAE,QAAQ;QAC5B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC;KACnG,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAK3B;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,OAKC,EACD,aAA6B;IAE7B,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAsB;QAC/B,SAAS;QACT,YAAY;QACZ,aAAa,EAAE,EAAE;QACjB,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,IAAI,YAAY,GAAG,YAAY,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC;YACtC,YAAY;YACZ,KAAK,EAAE,CAAC,CAAC,eAAe;YACxB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAErF,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;YACvB,KAAK,EAAE,CAAC,CAAC,eAAe;YACxB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;QAEH,YAAY,GAAG,gBAAgB,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAA2C;IAE3C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,iCAAiC;IACjC,MAAM,YAAY,GAAgC,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACtE,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,WAAW,CAAC;gBACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAkB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEjF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,GAAG,UAAU,CAAC,MAAM,mDAAmD;YACpF,QAAQ,EAAE,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzD,cAAc;YACd,cAAc,EAAE,mGAAmG;SACpH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAkC,EAClC,aAA2C,EAC3C,OAGC;IAYD,oBAAoB;IACpB,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAElD,4BAA4B;IAC5B,MAAM,kBAAkB,GAAG,OAAO,EAAE,uBAAuB;QACzD,CAAC,CAAC,wBAAwB,CAAC,aAAa,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;IAEP,qBAAqB;IACrB,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC7E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,IAAI,KAAK,CAAC,OAAO;oBAAE,QAAQ,EAAE,CAAC;;oBACzB,MAAM,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,cAAc,GAAG;QACrB,GAAG,SAAS,CAAC,kBAAkB;QAC/B,GAAG,kBAAkB;KACtB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAElD,MAAM,UAAU,GAAG;QACjB,GAAG,SAAS,CAAC,kBAAkB;QAC/B,GAAG,kBAAkB;KACtB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAE9C,IAAI,aAAa,GAAuC,SAAS,CAAC;IAClE,IAAI,cAAc,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,aAAa,GAAG,UAAU,CAAC;IAC7B,CAAC;SAAM,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAClD,aAAa,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,2BAA2B;IAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,eAAe,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,eAAe,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,4DAA4D,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,eAAe,CAAC,IAAI,CAAC,0BAA0B,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,OAAO;QACL,SAAS;QACT,kBAAkB;QAClB,gBAAgB,EAAE;YAChB,QAAQ;YACR,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,8BAA8B;SAC5D;QACD,aAAa;QACb,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA2B,EAC3B,kBAAsC;IAEtC,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAE5E,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,EAAE,EAAE,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QAC3C,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,wBAA2C;QACrD,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,cAAc,EAAE,SAAS;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/agents/agent-privacy.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Agent Privacy Analyzer
+ *
+ * Analyzes tool traces and agent interactions for privacy issues.
+ * Detects PII egress, cross-tenant data bleed, memory/caching of
+ * sensitive data, and consent compliance issues.
+ *
+ * @module agents/agent-privacy
+ */
+import type { Severity, Finding } from "../certification/types.js";
+/**
+ * PII type detected in traces
+ */
+export type PIIType = "email" | "phone" | "ssn" | "credit-card" | "ip-address" | "name" | "address" | "dob" | "medical" | "financial" | "custom";
+/**
+ * Privacy finding from trace analysis
+ */
+export interface PrivacyFinding {
+    type: PIIType;
+    location: "input" | "output" | "memory" | "log";
+    tool: string;
+    severity: Severity;
+    description: string;
+    evidence: string;
+    redactedSample?: string;
+    gdprRelevant: boolean;
+    ccpaRelevant: boolean;
+}
+/**
+ * Trace entry from tool invocation logs
+ */
+export interface TraceEntry {
+    timestamp: string;
+    tool: string;
+    input: string;
+    output?: string;
+    sessionId?: string;
+    userId?: string;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Privacy analysis result
+ */
+export interface PrivacyAnalysisResult {
+    totalTraces: number;
+    tracesAnalyzed: number;
+    piiDetected: number;
+    findings: PrivacyFinding[];
+    byType: Record<PIIType, number>;
+    byTool: Record<string, number>;
+    recommendations: string[];
+}
+/**
+ * Run privacy analysis on tool traces
+ */
+export declare function runPrivacyAnalysis(tracesDir: string, options?: {
+    detectCrossTenant?: boolean;
+    customPatterns?: Array<{
+        name: string;
+        pattern: RegExp;
+        severity: Severity;
+    }>;
+}): Promise<PrivacyAnalysisResult>;
+/**
+ * Convert privacy findings to certification findings
+ */
+export declare function privacyToFindings(result: PrivacyAnalysisResult): Finding[];
+//# sourceMappingURL=agent-privacy.d.ts.map

package/dist/agents/agent-privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-privacy.d.ts","sourceRoot":"","sources":["../../src/agents/agent-privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAmB,MAAM,2BAA2B,CAAC;AAMpF;;GAEG;AACH,MAAM,MAAM,OAAO,GACf,OAAO,GACP,OAAO,GACP,KAAK,GACL,aAAa,GACb,YAAY,GACZ,MAAM,GACN,SAAS,GACT,KAAK,GACL,SAAS,GACT,WAAW,GACX,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAgTD;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IACR,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CAC/E,GACA,OAAO,CAAC,qBAAqB,CAAC,CAgEhC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,EAAE,CAY1E"}