ALX Protocol TypeScript reference implementation

import REGISTRY_ABI from "@alx/protocol/abis/AlexandrianRegistryV2.json" assert { type: "json" };

import {
  canonicalize,
  kbHashFromEnvelope,
  artifactHashFromBytes,
  DOMAIN_TAGS,
} from "@alx/protocol";

// 1. Define your KB payload.
const payload = {
  type: "practice",
  rationale: "Use constant-time comparison to prevent timing attacks on tokens.",
  contexts: [],
  failureModes: [],
};

// 2. Serialize the artifact bytes and compute artifactHash.
//    In production, this would be the bytes of your stored artifact file.
const artifactBytes = new TextEncoder().encode(JSON.stringify(payload));
const artifactHash = artifactHashFromBytes(artifactBytes);

// 3. Build the canonical envelope.
const envelope = {
  type: "practice",
  domain: "software.security",
  sources: [],          // empty for a root Knowledge Block
  tier: "open",
  artifactHash,         // bind the artifact to this envelope
  payload,
};

// 4. Derive the kbHash. This is the canonical, protocol-visible identity.
const kbHash = kbHashFromEnvelope(envelope);

console.log("artifactHash:", artifactHash);
// artifactHash: 0x5e71fc830e383453429f2b703db3eb456dc4a6bfd66b2a0fc7535330ab8b168a

console.log("kbHash:", kbHash);
// kbHash: 0x5c3415ff46569330de2d0820b55a31859f2c7efde1df96ce5bb59c731a872d51

// 5. kbHash is deterministic — same envelope always yields the same hash.
console.log("stable:", kbHashFromEnvelope(envelope) === kbHash); // true

import {
  buildSignedProtocolRequestDomain,
  verifySignedProtocolRequest,
  SIGNED_PROTOCOL_REQUEST_TYPES,
  NonceTracker,
} from "@alx/protocol/core";

// Build a domain bound to the Base mainnet registry contract.
const domain = buildSignedProtocolRequestDomain({
  chainId: 8453,
  verifyingContract: "0xD1F216E872a9ed4b90E364825869c2F377155B29",
});

// On a server, use a NonceTracker to prevent replay.
const tracker = new NonceTracker();

const result = verifySignedProtocolRequest({
  domain,
  request: {
    kbId: "0xabc123...",
    query: "How do I prevent timing attacks?",
    agent: "0xYourAgentAddress",
    nonce: 1,
    expiry: Math.floor(Date.now() / 1000) + 300,
    chainId: 8453,
  },
  signature: "0x...",
  expectedChainId: 8453,
  nonceTracker: tracker,
});
// result.ok === true; result.signer is the recovered address.