@agimon-ai/po-web-security 0.0.0-alpha.41 → 0.0.0-alpha.42

package/README.md

@@ -52,8 +52,8 @@ go on.
 
 The Node signer traverses a public asset root without following symlinks, hashes each byte sequence, and signs
 a strict canonical manifest v2 with ECDSA P-256. Every manifest is checked against a profile. The `web` profile
-requires `/index.html`. The `native` profile requires exactly one asset, `/composition.js` as `text/javascript`,
-of at most 4 MiB, so a manifest can never pass both profiles. Signer and verifier take the same profile. Revision state and the private key
+requires `/index.html`. The `native` profile requires one or more top-level `.js` modules (such as `/<hash>.js`), each
+`text/javascript` and at most 4 MiB, so a manifest can never pass both profiles. Signer and verifier take the same profile. Revision state and the private key
 are persisted atomically at mode `0600`; malformed or replaced state fails closed instead of rotating
 silently.
 

package/dist/types/bundleManifest.cjs

@@ -1,3 +1,3 @@
-const e=`/index.html`,t=/^po\/[a-z0-9-]+\/v[1-9][0-9]*$/u,n=/^[0-9a-f]{64}$/u,r=/^[A-Za-z0-9_-]+$/u,i=/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;function a(e,t){let n=Object.keys(e).sort();return n.length===t.length&&n.every((e,n)=>e===t[n])}function o(e,t){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=t}function s(e){return typeof e!=`string`||e.length<2||!e.startsWith(`/`)||e.includes(`\\`)||e.includes(`\0`)||e.includes(`?`)||e.includes(`#`)||/[^\x21-\x7e]/u.test(e)||e.includes(`//`)||/%(?![0-9a-f]{2})/iu.test(e)||/%(?:2e|2f|5c)/iu.test(e)?!1:e.split(`/`).slice(1).every(e=>e!==``&&e!==`.`&&e!==`..`)}function c(e){let t=[...e.assets].sort((e,t)=>e.path<t.path?-1:+(e.path>t.path)).map(e=>`${e.path}\0${e.sha256}\0${String(e.byteLength)}\0${e.contentType}`);return[String(e.version),String(e.revision),String(e.builtAt),...t].join(`
-`)}function l(e,n){if(!t.test(e))throw Error(`invalid attestation tag: ${e}`);if(!Array.isArray(n)||!n.every(e=>typeof e==`string`))throw Error(`invalid attestation fields for ${e}`);return new TextEncoder().encode(`${e}\n${JSON.stringify(n)}`)}function u(t,n,r){if(r===`web`)return n.has(e);if(r===`app`)return!n.has(`/index.html`)&&!n.has(`/composition.js`)&&n.has(`/app.json`)&&t.some(e=>e.path.startsWith(`/bundle/`))&&t.every(e=>e.byteLength<=2097152);if(r!==`native`||t.length!==1)return!1;let[i]=t;return i!==void 0&&i.path===`/composition.js`&&i.contentType===`text/javascript`&&i.byteLength<=4194304}function d(e,t=`web`){if(typeof e!=`object`||!e||!a(e,[`assets`,`builtAt`,`revision`,`version`]))return!1;let r=e;if(r.version!==2||!o(r.revision,1)||!o(r.builtAt,0)||!Array.isArray(r.assets)||r.assets.length===0)return!1;let c=/* @__PURE__ */ new Set;for(let e of r.assets){if(typeof e!=`object`||!e||!a(e,[`byteLength`,`contentType`,`path`,`sha256`]))return!1;let t=e;if(!s(t.path)||c.has(t.path)||typeof t.sha256!=`string`||!n.test(t.sha256)||!o(t.byteLength,0)||typeof t.contentType!=`string`||!i.test(t.contentType))return!1;c.add(t.path)}return u(r.assets,c,t)}function f(e,t=`web`){if(typeof e!=`object`||!e||!a(e,[`manifest`,`publicKey`,`signature`]))return!1;let n=e;return d(n.manifest,t)&&typeof n.signature==`string`&&n.signature.length===86&&r.test(n.signature)&&typeof n.publicKey==`string`&&n.publicKey.length<=512&&r.test(n.publicKey)}function p(e,t){return e.assets.find(e=>e.path===t)}function m(e,t){return p(e,t)?.sha256}exports.APP_ASSET_MAX_BYTES=2097152,exports.APP_DESCRIPTOR_PATH=`/app.json`,exports.APP_PART_PREFIX=`/bundle/`,exports.ATTESTATION_TAG=t,exports.BUNDLE_MANIFEST_ROUTE=`/bundle-manifest.json`,exports.BUNDLE_MANIFEST_VERSION=2,exports.NATIVE_COMPOSITION_MAX_BYTES=4194304,exports.NATIVE_ENTRY_CONTENT_TYPE=`text/javascript`,exports.NATIVE_ENTRY_PATH=`/composition.js`,exports.WEB_ENTRY_PATH=e,exports.assetFor=p,exports.attestationBytes=l,exports.canonicalManifest=c,exports.digestFor=m,exports.isBundleManifest=d,exports.isSignedBundleManifest=f;
+const e=`/index.html`,t=/^\/[A-Za-z0-9._-]+\.js$/u,n=/^po\/[a-z0-9-]+\/v[1-9][0-9]*$/u,r=/^[0-9a-f]{64}$/u,i=/^[A-Za-z0-9_-]+$/u,a=/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;function o(e,t){let n=Object.keys(e).sort();return n.length===t.length&&n.every((e,n)=>e===t[n])}function s(e,t){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=t}function c(e){return typeof e!=`string`||e.length<2||!e.startsWith(`/`)||e.includes(`\\`)||e.includes(`\0`)||e.includes(`?`)||e.includes(`#`)||/[^\x21-\x7e]/u.test(e)||e.includes(`//`)||/%(?![0-9a-f]{2})/iu.test(e)||/%(?:2e|2f|5c)/iu.test(e)?!1:e.split(`/`).slice(1).every(e=>e!==``&&e!==`.`&&e!==`..`)}function l(e){let t=[...e.assets].sort((e,t)=>e.path<t.path?-1:+(e.path>t.path)).map(e=>`${e.path}\0${e.sha256}\0${String(e.byteLength)}\0${e.contentType}`);return[String(e.version),String(e.revision),String(e.builtAt),...t].join(`
+`)}function u(e,t){if(!n.test(e))throw Error(`invalid attestation tag: ${e}`);if(!Array.isArray(t)||!t.every(e=>typeof e==`string`))throw Error(`invalid attestation fields for ${e}`);return new TextEncoder().encode(`${e}\n${JSON.stringify(t)}`)}function d(n,r,i){return i===`web`?r.has(e):i===`app`?!r.has(`/index.html`)&&!r.has(`/composition.js`)&&r.has(`/app.json`)&&n.some(e=>e.path.startsWith(`/bundle/`))&&n.every(e=>e.byteLength<=2097152):i===`native`&&n.every(e=>t.test(e.path)&&e.contentType===`text/javascript`&&e.byteLength<=4194304)}function f(e,t=`web`){if(typeof e!=`object`||!e||!o(e,[`assets`,`builtAt`,`revision`,`version`]))return!1;let n=e;if(n.version!==2||!s(n.revision,1)||!s(n.builtAt,0)||!Array.isArray(n.assets)||n.assets.length===0)return!1;let i=/* @__PURE__ */ new Set;for(let e of n.assets){if(typeof e!=`object`||!e||!o(e,[`byteLength`,`contentType`,`path`,`sha256`]))return!1;let t=e;if(!c(t.path)||i.has(t.path)||typeof t.sha256!=`string`||!r.test(t.sha256)||!s(t.byteLength,0)||typeof t.contentType!=`string`||!a.test(t.contentType))return!1;i.add(t.path)}return d(n.assets,i,t)}function p(e,t=`web`){if(typeof e!=`object`||!e||!o(e,[`manifest`,`publicKey`,`signature`]))return!1;let n=e;return f(n.manifest,t)&&typeof n.signature==`string`&&n.signature.length===86&&i.test(n.signature)&&typeof n.publicKey==`string`&&n.publicKey.length<=512&&i.test(n.publicKey)}function m(e,t){return e.assets.find(e=>e.path===t)}function h(e,t){return m(e,t)?.sha256}exports.APP_ASSET_MAX_BYTES=2097152,exports.APP_DESCRIPTOR_PATH=`/app.json`,exports.APP_PART_PREFIX=`/bundle/`,exports.ATTESTATION_TAG=n,exports.BUNDLE_MANIFEST_ROUTE=`/bundle-manifest.json`,exports.BUNDLE_MANIFEST_VERSION=2,exports.NATIVE_COMPOSITION_MAX_BYTES=4194304,exports.NATIVE_ENTRY_CONTENT_TYPE=`text/javascript`,exports.NATIVE_ENTRY_PATH=`/composition.js`,exports.WEB_ENTRY_PATH=e,exports.assetFor=m,exports.attestationBytes=u,exports.canonicalManifest=l,exports.digestFor=h,exports.isBundleManifest=f,exports.isSignedBundleManifest=p;
 //# sourceMappingURL=bundleManifest.cjs.map

package/dist/types/bundleManifest.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.cjs","names":["WEB_ENTRY_PATH","ATTESTATION_TAG","SHA256","BASE64URL","CONTENT_TYPE","hasExactKeys","keys","value","expected","key","index","isSafeInteger","minimum","isSafeAssetPath","segment","canonicalManifest","lines","manifest","left","right","asset","attestationBytes","tag","fields","field","matchesProfile","profile","paths","assets","entry","isBundleManifest","candidate","valueAsset","isSignedBundleManifest","assetFor","path","digestFor"],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 2;\n\n/**\n * Which asset shape a manifest must have. A web bundle always serves `/index.html`; a native bundle is\n * exactly one composition module and never serves `/index.html`; an app bundle is `/app.json` plus\n * `/bundle/` parts and serves neither entry, so no manifest can pass two profiles.\n */\nexport type BundleProfile = 'web' | 'native' | 'app';\nexport const WEB_ENTRY_PATH = '/index.html';\nexport const NATIVE_ENTRY_PATH = '/composition.js';\nexport const NATIVE_ENTRY_CONTENT_TYPE = 'text/javascript';\n/** Largest native composition a sealed response can carry. */\nexport const NATIVE_COMPOSITION_MAX_BYTES = 4 * 1024 * 1024;\n/** JSON `{ platform, fingerprint }` naming the native binary an app bundle runs on. */\nexport const APP_DESCRIPTOR_PATH = '/app.json';\n/** App JS bundle parts; concatenated in path order they are the bundle. */\nexport const APP_PART_PREFIX = '/bundle/';\n/** Largest app asset, so every part fits one sealed response. */\nexport const APP_ASSET_MAX_BYTES = 2 * 1024 * 1024;\n/** Domain-separation tag for an attestation. Starts with `p`, so it can never collide with a `2\\n` manifest. */\nexport const ATTESTATION_TAG = /^po\\/[a-z0-9-]+\\/v[1-9][0-9]*$/u;\n\nconst SHA256 = /^[0-9a-f]{64}$/u;\nconst BASE64URL = /^[A-Za-z0-9_-]+$/u;\nconst CONTENT_TYPE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;\n\nexport interface BundleAsset {\n  /** Normalized absolute URL path, without a query or fragment. */\n  path: string;\n  /** Lowercase hex SHA-256 of the served bytes. */\n  sha256: string;\n  byteLength: number;\n  /** MIME type of the response, without parameters. */\n  contentType: string;\n}\n\nexport interface BundleManifest {\n  version: typeof BUNDLE_MANIFEST_VERSION;\n  /** Monotonically increasing persistent signer revision. */\n  revision: number;\n  /** Unix time in milliseconds. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the signing key. Trust must be established out of band. */\n  publicKey: string;\n}\n\nfunction hasExactKeys(value: object, expected: readonly string[]): boolean {\n  const keys = Object.keys(value).sort();\n  return keys.length === expected.length && keys.every((key, index) => key === expected[index]);\n}\n\nfunction isSafeInteger(value: unknown, minimum: number): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;\n}\n\nfunction isSafeAssetPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length < 2 || !value.startsWith('/')) return false;\n  if (value.includes('\\\\') || value.includes('\\0') || value.includes('?') || value.includes('#')) return false;\n  if (/[^\\x21-\\x7e]/u.test(value) || value.includes('//') || /%(?![0-9a-f]{2})/iu.test(value)) return false;\n  if (/%(?:2e|2f|5c)/iu.test(value)) return false;\n  return value\n    .split('/')\n    .slice(1)\n    .every((segment) => segment !== '' && segment !== '.' && segment !== '..');\n}\n\n/** The exact bytes signed by Node and verified by WebCrypto. */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map(\n    (asset) => `${asset.path}\\0${asset.sha256}\\0${String(asset.byteLength)}\\0${asset.contentType}`,\n  );\n  return [String(manifest.version), String(manifest.revision), String(manifest.builtAt), ...lines].join('\\n');\n}\n\n/**\n * The exact bytes of a tagged attestation: `UTF-8(tag + \"\\n\" + JSON.stringify(fields))`. Fields are an\n * ordered list of strings, so both sides build the same bytes without relying on object key order.\n * Throws on a malformed tag or a non-string field.\n */\nexport function attestationBytes(tag: string, fields: readonly string[]): Uint8Array<ArrayBuffer> {\n  if (!ATTESTATION_TAG.test(tag)) throw new Error(`invalid attestation tag: ${tag}`);\n  if (!Array.isArray(fields) || !fields.every((field) => typeof field === 'string')) {\n    throw new Error(`invalid attestation fields for ${tag}`);\n  }\n  return new TextEncoder().encode(`${tag}\\n${JSON.stringify(fields)}`);\n}\n\nfunction matchesProfile(assets: readonly BundleAsset[], paths: ReadonlySet<string>, profile: BundleProfile): boolean {\n  if (profile === 'web') return paths.has(WEB_ENTRY_PATH);\n  if (profile === 'app') {\n    return (\n      !paths.has(WEB_ENTRY_PATH) &&\n      !paths.has(NATIVE_ENTRY_PATH) &&\n      paths.has(APP_DESCRIPTOR_PATH) &&\n      assets.some((asset) => asset.path.startsWith(APP_PART_PREFIX)) &&\n      assets.every((asset) => asset.byteLength <= APP_ASSET_MAX_BYTES)\n    );\n  }\n  if (profile !== 'native' || assets.length !== 1) return false;\n  const [entry] = assets;\n  return (\n    entry !== undefined &&\n    entry.path === NATIVE_ENTRY_PATH &&\n    entry.contentType === NATIVE_ENTRY_CONTENT_TYPE &&\n    entry.byteLength <= NATIVE_COMPOSITION_MAX_BYTES\n  );\n}\n\nexport function isBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['assets', 'builtAt', 'revision', 'version'])) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (!isSafeInteger(candidate.revision, 1) || !isSafeInteger(candidate.builtAt, 0)) return false;\n  if (!Array.isArray(candidate.assets) || candidate.assets.length === 0) return false;\n\n  const paths = new Set<string>();\n  for (const valueAsset of candidate.assets) {\n    if (typeof valueAsset !== 'object' || valueAsset === null) return false;\n    if (!hasExactKeys(valueAsset, ['byteLength', 'contentType', 'path', 'sha256'])) return false;\n    const asset = valueAsset as Partial<BundleAsset>;\n    if (!isSafeAssetPath(asset.path) || paths.has(asset.path)) return false;\n    if (typeof asset.sha256 !== 'string' || !SHA256.test(asset.sha256)) return false;\n    if (!isSafeInteger(asset.byteLength, 0)) return false;\n    if (typeof asset.contentType !== 'string' || !CONTENT_TYPE.test(asset.contentType)) return false;\n    paths.add(asset.path);\n  }\n  return matchesProfile(candidate.assets as BundleAsset[], paths, profile);\n}\n\nexport function isSignedBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is SignedBundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['manifest', 'publicKey', 'signature'])) return false;\n  const candidate = value as Partial<SignedBundleManifest>;\n  return (\n    isBundleManifest(candidate.manifest, profile) &&\n    typeof candidate.signature === 'string' &&\n    candidate.signature.length === 86 &&\n    BASE64URL.test(candidate.signature) &&\n    typeof candidate.publicKey === 'string' &&\n    candidate.publicKey.length <= 512 &&\n    BASE64URL.test(candidate.publicKey)\n  );\n}\n\n/** The recorded asset for one path, or undefined if the manifest does not cover it. */\nexport function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined {\n  return manifest.assets.find((asset) => asset.path === path);\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return assetFor(manifest, path)?.sha256;\n}\n"],"mappings":"AAQA,MASaA,EAAiB,cAYjBC,EAAkB,kCAEzBC,EAAS,kBACTC,EAAY,oBACZC,EAAe,4DA6BrB,SAASC,EAAa,EAAe,EAAsC,CACzE,IAAMC,EAAO,OAAO,KAAKC,CAAK,CAAC,CAAC,KAAK,EACrC,OAAOD,EAAK,SAAWE,EAAS,QAAUF,EAAK,OAAO,EAAK,IAAUG,IAAQD,EAASE,EAAM,CAC9F,CAEA,SAASC,EAAc,EAAgB,EAAkC,CACvE,OAAO,OAAOJ,GAAU,UAAY,OAAO,cAAcA,CAAK,GAAKA,GAASK,CAC9E,CAEA,SAASC,EAAgB,EAAiC,CAKxD,OAJI,OAAON,GAAU,UAAYA,EAAM,OAAS,GAAK,CAACA,EAAM,WAAW,GAAG,GACtEA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,GAAG,GAAKA,EAAM,SAAS,GAAG,GACzF,gBAAgB,KAAKA,CAAK,GAAKA,EAAM,SAAS,IAAI,GAAK,qBAAqB,KAAKA,CAAK,GACtF,kBAAkB,KAAKA,CAAK,EAAU,GACnCA,EACJ,MAAM,GAAG,CAAC,CACV,MAAM,CAAC,CAAC,CACR,MAAO,GAAYO,IAAY,IAAMA,IAAY,KAAOA,IAAY,IAAI,CAC7E,CAGA,SAAgBC,EAAkB,EAAkC,CAIlE,IAAMC,EAHS,CAAC,GAAGC,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9CC,EAAK,KAAOC,EAAM,KAAO,GAAK,IAAK,KAAOA,EAAM,KAE/B,CAAC,CAAC,IAClB,GAAU,GAAGC,EAAM,KAAK,IAAIA,EAAM,OAAO,IAAI,OAAOA,EAAM,UAAU,EAAE,IAAIA,EAAM,aACnF,EACA,MAAO,CAAC,OAAOH,EAAS,OAAO,EAAG,OAAOA,EAAS,QAAQ,EAAG,OAAOA,EAAS,OAAO,EAAG,GAAGD,CAAK,CAAC,CAAC,KAAK;CAAI,CAC5G,CAOA,SAAgBK,EAAiB,EAAa,EAAoD,CAChG,GAAI,CAACpB,EAAgB,KAAKqB,CAAG,EAAG,MAAU,MAAM,4BAA4BA,GAAK,EACjF,GAAI,CAAC,MAAM,QAAQC,CAAM,GAAK,CAACA,EAAO,MAAO,GAAU,OAAOC,GAAU,QAAQ,EAC9E,MAAU,MAAM,kCAAkCF,GAAK,EAEzD,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAGA,EAAI,IAAI,KAAK,UAAUC,CAAM,GAAG,CACrE,CAEA,SAASE,EAAe,EAAgC,EAA4B,EAAiC,CACnH,GAAIC,IAAY,MAAO,OAAOC,EAAM,IAAI3B,CAAc,EACtD,GAAI0B,IAAY,MACd,MACE,CAACC,EAAM,IAAA,aAAkB,GACzB,CAACA,EAAM,IAAA,iBAAqB,GAC5BA,EAAM,IAAA,WAAuB,GAC7BC,EAAO,KAAM,GAAUR,EAAM,KAAK,WAAA,UAA0B,CAAC,GAC7DQ,EAAO,MAAO,GAAUR,EAAM,YAAA,OAAiC,EAGnE,GAAIM,IAAY,UAAYE,EAAO,SAAW,EAAG,MAAO,GACxD,GAAM,CAACC,GAASD,EAChB,OACEC,IAAU,IAAA,IACVA,EAAM,OAAA,mBACNA,EAAM,cAAA,mBACNA,EAAM,YAAA,OAEV,CAEA,SAAgBC,EAAiB,EAAgB,EAAyB,MAAgC,CAExG,GADI,OAAOvB,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,SAAU,UAAW,WAAY,SAAS,CAAC,EAAG,MAAO,GAC/E,IAAMwB,EAAYxB,EAGlB,GAFIwB,EAAU,UAAA,GACV,CAACpB,EAAcoB,EAAU,SAAU,CAAC,GAAK,CAACpB,EAAcoB,EAAU,QAAS,CAAC,GAC5E,CAAC,MAAM,QAAQA,EAAU,MAAM,GAAKA,EAAU,OAAO,SAAW,EAAG,MAAO,GAE9E,IAAMJ,kBAAQ,IAAI,IAClB,IAAK,IAAMK,KAAcD,EAAU,OAAQ,CAEzC,GADI,OAAOC,GAAe,WAAYA,GAClC,CAAC3B,EAAa2B,EAAY,CAAC,aAAc,cAAe,OAAQ,QAAQ,CAAC,EAAG,MAAO,GACvF,IAAMZ,EAAQY,EAId,GAHI,CAACnB,EAAgBO,EAAM,IAAI,GAAKO,EAAM,IAAIP,EAAM,IAAI,GACpD,OAAOA,EAAM,QAAW,UAAY,CAAClB,EAAO,KAAKkB,EAAM,MAAM,GAC7D,CAACT,EAAcS,EAAM,WAAY,CAAC,GAClC,OAAOA,EAAM,aAAgB,UAAY,CAAChB,EAAa,KAAKgB,EAAM,WAAW,EAAG,MAAO,GAC3FO,EAAM,IAAIP,EAAM,IAAI,CACtB,CACA,OAAOK,EAAeM,EAAU,OAAyBJ,EAAOD,CAAO,CACzE,CAEA,SAAgBO,EAAuB,EAAgB,EAAyB,MAAsC,CAEpH,GADI,OAAO1B,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,WAAY,YAAa,WAAW,CAAC,EAAG,MAAO,GACzE,IAAMwB,EAAYxB,EAClB,OACEuB,EAAiBC,EAAU,SAAUL,CAAO,GAC5C,OAAOK,EAAU,WAAc,UAC/BA,EAAU,UAAU,SAAW,IAC/B5B,EAAU,KAAK4B,EAAU,SAAS,GAClC,OAAOA,EAAU,WAAc,UAC/BA,EAAU,UAAU,QAAU,KAC9B5B,EAAU,KAAK4B,EAAU,SAAS,CAEtC,CAGA,SAAgBG,EAAS,EAA0B,EAAuC,CACxF,OAAOjB,EAAS,OAAO,KAAM,GAAUG,EAAM,OAASe,CAAI,CAC5D,CAGA,SAAgBC,EAAU,EAA0B,EAAkC,CACpF,OAAOF,EAASjB,EAAUkB,CAAI,CAAC,EAAE,MACnC"}
+{"version":3,"file":"bundleManifest.cjs","names":["WEB_ENTRY_PATH","NATIVE_MODULE_PATH","ATTESTATION_TAG","SHA256","BASE64URL","CONTENT_TYPE","hasExactKeys","keys","value","expected","key","index","isSafeInteger","minimum","isSafeAssetPath","segment","canonicalManifest","lines","manifest","left","right","asset","attestationBytes","tag","fields","field","matchesProfile","profile","paths","assets","entry","isBundleManifest","candidate","valueAsset","isSignedBundleManifest","assetFor","path","digestFor"],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 2;\n\n/**\n * Which asset shape a manifest must have. A web bundle always serves `/index.html`; a native bundle is\n * one or more top-level `.js` modules, one per plugin, and never serves `/index.html` or `/app.json`;\n * an app bundle is `/app.json` plus `/bundle/` parts and serves neither entry, so no manifest can pass\n * two profiles.\n */\nexport type BundleProfile = 'web' | 'native' | 'app';\nexport const WEB_ENTRY_PATH = '/index.html';\n/** The single-module native layout older builds used; still a valid native module path. */\nexport const NATIVE_ENTRY_PATH = '/composition.js';\nexport const NATIVE_ENTRY_CONTENT_TYPE = 'text/javascript';\n/** Largest native module a sealed response can carry; each plugin module is checked on its own. */\nexport const NATIVE_COMPOSITION_MAX_BYTES = 4 * 1024 * 1024;\nconst NATIVE_MODULE_PATH = /^\\/[A-Za-z0-9._-]+\\.js$/u;\n/** JSON `{ platform, fingerprint }` naming the native binary an app bundle runs on. */\nexport const APP_DESCRIPTOR_PATH = '/app.json';\n/** App JS bundle parts; concatenated in path order they are the bundle. */\nexport const APP_PART_PREFIX = '/bundle/';\n/** Largest app asset, so every part fits one sealed response. */\nexport const APP_ASSET_MAX_BYTES = 2 * 1024 * 1024;\n/** Domain-separation tag for an attestation. Starts with `p`, so it can never collide with a `2\\n` manifest. */\nexport const ATTESTATION_TAG = /^po\\/[a-z0-9-]+\\/v[1-9][0-9]*$/u;\n\nconst SHA256 = /^[0-9a-f]{64}$/u;\nconst BASE64URL = /^[A-Za-z0-9_-]+$/u;\nconst CONTENT_TYPE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;\n\nexport interface BundleAsset {\n  /** Normalized absolute URL path, without a query or fragment. */\n  path: string;\n  /** Lowercase hex SHA-256 of the served bytes. */\n  sha256: string;\n  byteLength: number;\n  /** MIME type of the response, without parameters. */\n  contentType: string;\n}\n\nexport interface BundleManifest {\n  version: typeof BUNDLE_MANIFEST_VERSION;\n  /** Monotonically increasing persistent signer revision. */\n  revision: number;\n  /** Unix time in milliseconds. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the signing key. Trust must be established out of band. */\n  publicKey: string;\n}\n\nfunction hasExactKeys(value: object, expected: readonly string[]): boolean {\n  const keys = Object.keys(value).sort();\n  return keys.length === expected.length && keys.every((key, index) => key === expected[index]);\n}\n\nfunction isSafeInteger(value: unknown, minimum: number): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;\n}\n\nfunction isSafeAssetPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length < 2 || !value.startsWith('/')) return false;\n  if (value.includes('\\\\') || value.includes('\\0') || value.includes('?') || value.includes('#')) return false;\n  if (/[^\\x21-\\x7e]/u.test(value) || value.includes('//') || /%(?![0-9a-f]{2})/iu.test(value)) return false;\n  if (/%(?:2e|2f|5c)/iu.test(value)) return false;\n  return value\n    .split('/')\n    .slice(1)\n    .every((segment) => segment !== '' && segment !== '.' && segment !== '..');\n}\n\n/** The exact bytes signed by Node and verified by WebCrypto. */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map(\n    (asset) => `${asset.path}\\0${asset.sha256}\\0${String(asset.byteLength)}\\0${asset.contentType}`,\n  );\n  return [String(manifest.version), String(manifest.revision), String(manifest.builtAt), ...lines].join('\\n');\n}\n\n/**\n * The exact bytes of a tagged attestation: `UTF-8(tag + \"\\n\" + JSON.stringify(fields))`. Fields are an\n * ordered list of strings, so both sides build the same bytes without relying on object key order.\n * Throws on a malformed tag or a non-string field.\n */\nexport function attestationBytes(tag: string, fields: readonly string[]): Uint8Array<ArrayBuffer> {\n  if (!ATTESTATION_TAG.test(tag)) throw new Error(`invalid attestation tag: ${tag}`);\n  if (!Array.isArray(fields) || !fields.every((field) => typeof field === 'string')) {\n    throw new Error(`invalid attestation fields for ${tag}`);\n  }\n  return new TextEncoder().encode(`${tag}\\n${JSON.stringify(fields)}`);\n}\n\nfunction matchesProfile(assets: readonly BundleAsset[], paths: ReadonlySet<string>, profile: BundleProfile): boolean {\n  if (profile === 'web') return paths.has(WEB_ENTRY_PATH);\n  if (profile === 'app') {\n    return (\n      !paths.has(WEB_ENTRY_PATH) &&\n      !paths.has(NATIVE_ENTRY_PATH) &&\n      paths.has(APP_DESCRIPTOR_PATH) &&\n      assets.some((asset) => asset.path.startsWith(APP_PART_PREFIX)) &&\n      assets.every((asset) => asset.byteLength <= APP_ASSET_MAX_BYTES)\n    );\n  }\n  if (profile !== 'native') return false;\n  return assets.every(\n    (entry) =>\n      NATIVE_MODULE_PATH.test(entry.path) &&\n      entry.contentType === NATIVE_ENTRY_CONTENT_TYPE &&\n      entry.byteLength <= NATIVE_COMPOSITION_MAX_BYTES,\n  );\n}\n\nexport function isBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['assets', 'builtAt', 'revision', 'version'])) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (!isSafeInteger(candidate.revision, 1) || !isSafeInteger(candidate.builtAt, 0)) return false;\n  if (!Array.isArray(candidate.assets) || candidate.assets.length === 0) return false;\n\n  const paths = new Set<string>();\n  for (const valueAsset of candidate.assets) {\n    if (typeof valueAsset !== 'object' || valueAsset === null) return false;\n    if (!hasExactKeys(valueAsset, ['byteLength', 'contentType', 'path', 'sha256'])) return false;\n    const asset = valueAsset as Partial<BundleAsset>;\n    if (!isSafeAssetPath(asset.path) || paths.has(asset.path)) return false;\n    if (typeof asset.sha256 !== 'string' || !SHA256.test(asset.sha256)) return false;\n    if (!isSafeInteger(asset.byteLength, 0)) return false;\n    if (typeof asset.contentType !== 'string' || !CONTENT_TYPE.test(asset.contentType)) return false;\n    paths.add(asset.path);\n  }\n  return matchesProfile(candidate.assets as BundleAsset[], paths, profile);\n}\n\nexport function isSignedBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is SignedBundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['manifest', 'publicKey', 'signature'])) return false;\n  const candidate = value as Partial<SignedBundleManifest>;\n  return (\n    isBundleManifest(candidate.manifest, profile) &&\n    typeof candidate.signature === 'string' &&\n    candidate.signature.length === 86 &&\n    BASE64URL.test(candidate.signature) &&\n    typeof candidate.publicKey === 'string' &&\n    candidate.publicKey.length <= 512 &&\n    BASE64URL.test(candidate.publicKey)\n  );\n}\n\n/** The recorded asset for one path, or undefined if the manifest does not cover it. */\nexport function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined {\n  return manifest.assets.find((asset) => asset.path === path);\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return assetFor(manifest, path)?.sha256;\n}\n"],"mappings":"AAQA,MAUaA,EAAiB,cAMxBC,EAAqB,2BAQdC,EAAkB,kCAEzBC,EAAS,kBACTC,EAAY,oBACZC,EAAe,4DA6BrB,SAASC,EAAa,EAAe,EAAsC,CACzE,IAAMC,EAAO,OAAO,KAAKC,CAAK,CAAC,CAAC,KAAK,EACrC,OAAOD,EAAK,SAAWE,EAAS,QAAUF,EAAK,OAAO,EAAK,IAAUG,IAAQD,EAASE,EAAM,CAC9F,CAEA,SAASC,EAAc,EAAgB,EAAkC,CACvE,OAAO,OAAOJ,GAAU,UAAY,OAAO,cAAcA,CAAK,GAAKA,GAASK,CAC9E,CAEA,SAASC,EAAgB,EAAiC,CAKxD,OAJI,OAAON,GAAU,UAAYA,EAAM,OAAS,GAAK,CAACA,EAAM,WAAW,GAAG,GACtEA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,GAAG,GAAKA,EAAM,SAAS,GAAG,GACzF,gBAAgB,KAAKA,CAAK,GAAKA,EAAM,SAAS,IAAI,GAAK,qBAAqB,KAAKA,CAAK,GACtF,kBAAkB,KAAKA,CAAK,EAAU,GACnCA,EACJ,MAAM,GAAG,CAAC,CACV,MAAM,CAAC,CAAC,CACR,MAAO,GAAYO,IAAY,IAAMA,IAAY,KAAOA,IAAY,IAAI,CAC7E,CAGA,SAAgBC,EAAkB,EAAkC,CAIlE,IAAMC,EAHS,CAAC,GAAGC,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9CC,EAAK,KAAOC,EAAM,KAAO,GAAK,IAAK,KAAOA,EAAM,KAE/B,CAAC,CAAC,IAClB,GAAU,GAAGC,EAAM,KAAK,IAAIA,EAAM,OAAO,IAAI,OAAOA,EAAM,UAAU,EAAE,IAAIA,EAAM,aACnF,EACA,MAAO,CAAC,OAAOH,EAAS,OAAO,EAAG,OAAOA,EAAS,QAAQ,EAAG,OAAOA,EAAS,OAAO,EAAG,GAAGD,CAAK,CAAC,CAAC,KAAK;CAAI,CAC5G,CAOA,SAAgBK,EAAiB,EAAa,EAAoD,CAChG,GAAI,CAACpB,EAAgB,KAAKqB,CAAG,EAAG,MAAU,MAAM,4BAA4BA,GAAK,EACjF,GAAI,CAAC,MAAM,QAAQC,CAAM,GAAK,CAACA,EAAO,MAAO,GAAU,OAAOC,GAAU,QAAQ,EAC9E,MAAU,MAAM,kCAAkCF,GAAK,EAEzD,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAGA,EAAI,IAAI,KAAK,UAAUC,CAAM,GAAG,CACrE,CAEA,SAASE,EAAe,EAAgC,EAA4B,EAAiC,CAYnH,OAXIC,IAAY,MAAcC,EAAM,IAAI5B,CAAc,EAClD2B,IAAY,MAEZ,CAACC,EAAM,IAAA,aAAkB,GACzB,CAACA,EAAM,IAAA,iBAAqB,GAC5BA,EAAM,IAAA,WAAuB,GAC7BC,EAAO,KAAM,GAAUR,EAAM,KAAK,WAAA,UAA0B,CAAC,GAC7DQ,EAAO,MAAO,GAAUR,EAAM,YAAA,OAAiC,EAG/DM,IAAY,UACTE,EAAO,MACX,GACC5B,EAAmB,KAAK6B,EAAM,IAAI,GAClCA,EAAM,cAAA,mBACNA,EAAM,YAAA,OACV,CACF,CAEA,SAAgBC,EAAiB,EAAgB,EAAyB,MAAgC,CAExG,GADI,OAAOvB,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,SAAU,UAAW,WAAY,SAAS,CAAC,EAAG,MAAO,GAC/E,IAAMwB,EAAYxB,EAGlB,GAFIwB,EAAU,UAAA,GACV,CAACpB,EAAcoB,EAAU,SAAU,CAAC,GAAK,CAACpB,EAAcoB,EAAU,QAAS,CAAC,GAC5E,CAAC,MAAM,QAAQA,EAAU,MAAM,GAAKA,EAAU,OAAO,SAAW,EAAG,MAAO,GAE9E,IAAMJ,kBAAQ,IAAI,IAClB,IAAK,IAAMK,KAAcD,EAAU,OAAQ,CAEzC,GADI,OAAOC,GAAe,WAAYA,GAClC,CAAC3B,EAAa2B,EAAY,CAAC,aAAc,cAAe,OAAQ,QAAQ,CAAC,EAAG,MAAO,GACvF,IAAMZ,EAAQY,EAId,GAHI,CAACnB,EAAgBO,EAAM,IAAI,GAAKO,EAAM,IAAIP,EAAM,IAAI,GACpD,OAAOA,EAAM,QAAW,UAAY,CAAClB,EAAO,KAAKkB,EAAM,MAAM,GAC7D,CAACT,EAAcS,EAAM,WAAY,CAAC,GAClC,OAAOA,EAAM,aAAgB,UAAY,CAAChB,EAAa,KAAKgB,EAAM,WAAW,EAAG,MAAO,GAC3FO,EAAM,IAAIP,EAAM,IAAI,CACtB,CACA,OAAOK,EAAeM,EAAU,OAAyBJ,EAAOD,CAAO,CACzE,CAEA,SAAgBO,EAAuB,EAAgB,EAAyB,MAAsC,CAEpH,GADI,OAAO1B,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,WAAY,YAAa,WAAW,CAAC,EAAG,MAAO,GACzE,IAAMwB,EAAYxB,EAClB,OACEuB,EAAiBC,EAAU,SAAUL,CAAO,GAC5C,OAAOK,EAAU,WAAc,UAC/BA,EAAU,UAAU,SAAW,IAC/B5B,EAAU,KAAK4B,EAAU,SAAS,GAClC,OAAOA,EAAU,WAAc,UAC/BA,EAAU,UAAU,QAAU,KAC9B5B,EAAU,KAAK4B,EAAU,SAAS,CAEtC,CAGA,SAAgBG,EAAS,EAA0B,EAAuC,CACxF,OAAOjB,EAAS,OAAO,KAAM,GAAUG,EAAM,OAASe,CAAI,CAC5D,CAGA,SAAgBC,EAAU,EAA0B,EAAkC,CACpF,OAAOF,EAASjB,EAAUkB,CAAI,CAAC,EAAE,MACnC"}

package/dist/types/bundleManifest.d.mts

@@ -10,14 +10,16 @@ export declare const BUNDLE_MANIFEST_ROUTE = "/bundle-manifest.json";
 export declare const BUNDLE_MANIFEST_VERSION = 2;
 /**
  * Which asset shape a manifest must have. A web bundle always serves `/index.html`; a native bundle is
- * exactly one composition module and never serves `/index.html`; an app bundle is `/app.json` plus
- * `/bundle/` parts and serves neither entry, so no manifest can pass two profiles.
+ * one or more top-level `.js` modules, one per plugin, and never serves `/index.html` or `/app.json`;
+ * an app bundle is `/app.json` plus `/bundle/` parts and serves neither entry, so no manifest can pass
+ * two profiles.
  */
 export type BundleProfile = 'web' | 'native' | 'app';
 export declare const WEB_ENTRY_PATH = "/index.html";
+/** The single-module native layout older builds used; still a valid native module path. */
 export declare const NATIVE_ENTRY_PATH = "/composition.js";
 export declare const NATIVE_ENTRY_CONTENT_TYPE = "text/javascript";
-/** Largest native composition a sealed response can carry. */
+/** Largest native module a sealed response can carry; each plugin module is checked on its own. */
 export declare const NATIVE_COMPOSITION_MAX_BYTES: number;
 /** JSON `{ platform, fingerprint }` naming the native binary an app bundle runs on. */
 export declare const APP_DESCRIPTOR_PATH = "/app.json";

package/dist/types/bundleManifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.d.mts","names":[],"sources":["../../src/types/bundleManifest.ts"],"mappings":";;;;;;;;qBAQa;qBACA;;;;;;YAOD;qBACC;qBACA;qBACA;;qBAEA;;qBAEA;;qBAEA;;qBAEA;;qBAEA,iBAAe;iBAMX;;EAEf;;EAEA;EACA;;EAEA;;iBAGe;EACf,gBAAgB;;EAEhB;;EAEA;EACA,QAAQ;;iBAGO;EACf,UAAU;;EAEV;;EAEA;;;wBAwBc,kBAAkB,UAAU;;;;;;wBAe5B,iBAAiB,aAAa,4BAA4B,WAAW;wBA6BrE,iBAAiB,gBAAgB,UAAS,gBAAwB,SAAS;wBAsB3E,uBAAuB,gBAAgB,UAAS,gBAAwB,SAAS;;wBAgBjF,SAAS,UAAU,gBAAgB,eAAe;;wBAKlD,UAAU,UAAU,gBAAgB"}
+{"version":3,"file":"bundleManifest.d.mts","names":[],"sources":["../../src/types/bundleManifest.ts"],"mappings":";;;;;;;;qBAQa;qBACA;;;;;;;YAQD;qBACC;;qBAEA;qBACA;;qBAEA;;qBAGA;;qBAEA;;qBAEA;;qBAEA,iBAAe;iBAMX;;EAEf;;EAEA;EACA;;EAEA;;iBAGe;EACf,gBAAgB;;EAEhB;;EAEA;EACA,QAAQ;;iBAGO;EACf,UAAU;;EAEV;;EAEA;;;wBAwBc,kBAAkB,UAAU;;;;;;wBAe5B,iBAAiB,aAAa,4BAA4B,WAAW;wBA4BrE,iBAAiB,gBAAgB,UAAS,gBAAwB,SAAS;wBAsB3E,uBAAuB,gBAAgB,UAAS,gBAAwB,SAAS;;wBAgBjF,SAAS,UAAU,gBAAgB,eAAe;;wBAKlD,UAAU,UAAU,gBAAgB"}

package/dist/types/bundleManifest.mjs

@@ -1,3 +1,3 @@
-const e=`/bundle-manifest.json`,t=2,n=`/index.html`,r=`/composition.js`,i=`text/javascript`,a=4194304,o=`/app.json`,s=`/bundle/`,c=2097152,l=/^po\/[a-z0-9-]+\/v[1-9][0-9]*$/u,u=/^[0-9a-f]{64}$/u,d=/^[A-Za-z0-9_-]+$/u,f=/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;function p(e,t){let n=Object.keys(e).sort();return n.length===t.length&&n.every((e,n)=>e===t[n])}function m(e,t){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=t}function h(e){return typeof e!=`string`||e.length<2||!e.startsWith(`/`)||e.includes(`\\`)||e.includes(`\0`)||e.includes(`?`)||e.includes(`#`)||/[^\x21-\x7e]/u.test(e)||e.includes(`//`)||/%(?![0-9a-f]{2})/iu.test(e)||/%(?:2e|2f|5c)/iu.test(e)?!1:e.split(`/`).slice(1).every(e=>e!==``&&e!==`.`&&e!==`..`)}function g(e){let t=[...e.assets].sort((e,t)=>e.path<t.path?-1:+(e.path>t.path)).map(e=>`${e.path}\0${e.sha256}\0${String(e.byteLength)}\0${e.contentType}`);return[String(e.version),String(e.revision),String(e.builtAt),...t].join(`
-`)}function _(e,t){if(!l.test(e))throw Error(`invalid attestation tag: ${e}`);if(!Array.isArray(t)||!t.every(e=>typeof e==`string`))throw Error(`invalid attestation fields for ${e}`);return new TextEncoder().encode(`${e}\n${JSON.stringify(t)}`)}function v(e,t,r){if(r===`web`)return t.has(n);if(r===`app`)return!t.has(`/index.html`)&&!t.has(`/composition.js`)&&t.has(`/app.json`)&&e.some(e=>e.path.startsWith(`/bundle/`))&&e.every(e=>e.byteLength<=2097152);if(r!==`native`||e.length!==1)return!1;let[i]=e;return i!==void 0&&i.path===`/composition.js`&&i.contentType===`text/javascript`&&i.byteLength<=4194304}function y(e,t=`web`){if(typeof e!=`object`||!e||!p(e,[`assets`,`builtAt`,`revision`,`version`]))return!1;let n=e;if(n.version!==2||!m(n.revision,1)||!m(n.builtAt,0)||!Array.isArray(n.assets)||n.assets.length===0)return!1;let r=/* @__PURE__ */ new Set;for(let e of n.assets){if(typeof e!=`object`||!e||!p(e,[`byteLength`,`contentType`,`path`,`sha256`]))return!1;let t=e;if(!h(t.path)||r.has(t.path)||typeof t.sha256!=`string`||!u.test(t.sha256)||!m(t.byteLength,0)||typeof t.contentType!=`string`||!f.test(t.contentType))return!1;r.add(t.path)}return v(n.assets,r,t)}function b(e,t=`web`){if(typeof e!=`object`||!e||!p(e,[`manifest`,`publicKey`,`signature`]))return!1;let n=e;return y(n.manifest,t)&&typeof n.signature==`string`&&n.signature.length===86&&d.test(n.signature)&&typeof n.publicKey==`string`&&n.publicKey.length<=512&&d.test(n.publicKey)}function x(e,t){return e.assets.find(e=>e.path===t)}function S(e,t){return x(e,t)?.sha256}export{c as APP_ASSET_MAX_BYTES,o as APP_DESCRIPTOR_PATH,s as APP_PART_PREFIX,l as ATTESTATION_TAG,e as BUNDLE_MANIFEST_ROUTE,t as BUNDLE_MANIFEST_VERSION,a as NATIVE_COMPOSITION_MAX_BYTES,i as NATIVE_ENTRY_CONTENT_TYPE,r as NATIVE_ENTRY_PATH,n as WEB_ENTRY_PATH,x as assetFor,_ as attestationBytes,g as canonicalManifest,S as digestFor,y as isBundleManifest,b as isSignedBundleManifest};
+const e=`/bundle-manifest.json`,t=2,n=`/index.html`,r=`/composition.js`,i=`text/javascript`,a=4194304,o=/^\/[A-Za-z0-9._-]+\.js$/u,s=`/app.json`,c=`/bundle/`,l=2097152,u=/^po\/[a-z0-9-]+\/v[1-9][0-9]*$/u,d=/^[0-9a-f]{64}$/u,f=/^[A-Za-z0-9_-]+$/u,p=/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;function m(e,t){let n=Object.keys(e).sort();return n.length===t.length&&n.every((e,n)=>e===t[n])}function h(e,t){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=t}function g(e){return typeof e!=`string`||e.length<2||!e.startsWith(`/`)||e.includes(`\\`)||e.includes(`\0`)||e.includes(`?`)||e.includes(`#`)||/[^\x21-\x7e]/u.test(e)||e.includes(`//`)||/%(?![0-9a-f]{2})/iu.test(e)||/%(?:2e|2f|5c)/iu.test(e)?!1:e.split(`/`).slice(1).every(e=>e!==``&&e!==`.`&&e!==`..`)}function _(e){let t=[...e.assets].sort((e,t)=>e.path<t.path?-1:+(e.path>t.path)).map(e=>`${e.path}\0${e.sha256}\0${String(e.byteLength)}\0${e.contentType}`);return[String(e.version),String(e.revision),String(e.builtAt),...t].join(`
+`)}function v(e,t){if(!u.test(e))throw Error(`invalid attestation tag: ${e}`);if(!Array.isArray(t)||!t.every(e=>typeof e==`string`))throw Error(`invalid attestation fields for ${e}`);return new TextEncoder().encode(`${e}\n${JSON.stringify(t)}`)}function y(e,t,r){return r===`web`?t.has(n):r===`app`?!t.has(`/index.html`)&&!t.has(`/composition.js`)&&t.has(`/app.json`)&&e.some(e=>e.path.startsWith(`/bundle/`))&&e.every(e=>e.byteLength<=2097152):r===`native`&&e.every(e=>o.test(e.path)&&e.contentType===`text/javascript`&&e.byteLength<=4194304)}function b(e,t=`web`){if(typeof e!=`object`||!e||!m(e,[`assets`,`builtAt`,`revision`,`version`]))return!1;let n=e;if(n.version!==2||!h(n.revision,1)||!h(n.builtAt,0)||!Array.isArray(n.assets)||n.assets.length===0)return!1;let r=/* @__PURE__ */ new Set;for(let e of n.assets){if(typeof e!=`object`||!e||!m(e,[`byteLength`,`contentType`,`path`,`sha256`]))return!1;let t=e;if(!g(t.path)||r.has(t.path)||typeof t.sha256!=`string`||!d.test(t.sha256)||!h(t.byteLength,0)||typeof t.contentType!=`string`||!p.test(t.contentType))return!1;r.add(t.path)}return y(n.assets,r,t)}function x(e,t=`web`){if(typeof e!=`object`||!e||!m(e,[`manifest`,`publicKey`,`signature`]))return!1;let n=e;return b(n.manifest,t)&&typeof n.signature==`string`&&n.signature.length===86&&f.test(n.signature)&&typeof n.publicKey==`string`&&n.publicKey.length<=512&&f.test(n.publicKey)}function S(e,t){return e.assets.find(e=>e.path===t)}function C(e,t){return S(e,t)?.sha256}export{l as APP_ASSET_MAX_BYTES,s as APP_DESCRIPTOR_PATH,c as APP_PART_PREFIX,u as ATTESTATION_TAG,e as BUNDLE_MANIFEST_ROUTE,t as BUNDLE_MANIFEST_VERSION,a as NATIVE_COMPOSITION_MAX_BYTES,i as NATIVE_ENTRY_CONTENT_TYPE,r as NATIVE_ENTRY_PATH,n as WEB_ENTRY_PATH,S as assetFor,v as attestationBytes,_ as canonicalManifest,C as digestFor,b as isBundleManifest,x as isSignedBundleManifest};
 //# sourceMappingURL=bundleManifest.mjs.map

package/dist/types/bundleManifest.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.mjs","names":["BUNDLE_MANIFEST_ROUTE","BUNDLE_MANIFEST_VERSION","WEB_ENTRY_PATH","NATIVE_ENTRY_PATH","NATIVE_ENTRY_CONTENT_TYPE","NATIVE_COMPOSITION_MAX_BYTES","APP_DESCRIPTOR_PATH","APP_PART_PREFIX","APP_ASSET_MAX_BYTES","ATTESTATION_TAG","SHA256","BASE64URL","CONTENT_TYPE","hasExactKeys","keys","value","expected","key","index","isSafeInteger","minimum","isSafeAssetPath","segment","canonicalManifest","lines","manifest","left","right","asset","attestationBytes","tag","fields","field","matchesProfile","profile","paths","assets","entry","isBundleManifest","candidate","valueAsset","isSignedBundleManifest","assetFor","path","digestFor"],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 2;\n\n/**\n * Which asset shape a manifest must have. A web bundle always serves `/index.html`; a native bundle is\n * exactly one composition module and never serves `/index.html`; an app bundle is `/app.json` plus\n * `/bundle/` parts and serves neither entry, so no manifest can pass two profiles.\n */\nexport type BundleProfile = 'web' | 'native' | 'app';\nexport const WEB_ENTRY_PATH = '/index.html';\nexport const NATIVE_ENTRY_PATH = '/composition.js';\nexport const NATIVE_ENTRY_CONTENT_TYPE = 'text/javascript';\n/** Largest native composition a sealed response can carry. */\nexport const NATIVE_COMPOSITION_MAX_BYTES = 4 * 1024 * 1024;\n/** JSON `{ platform, fingerprint }` naming the native binary an app bundle runs on. */\nexport const APP_DESCRIPTOR_PATH = '/app.json';\n/** App JS bundle parts; concatenated in path order they are the bundle. */\nexport const APP_PART_PREFIX = '/bundle/';\n/** Largest app asset, so every part fits one sealed response. */\nexport const APP_ASSET_MAX_BYTES = 2 * 1024 * 1024;\n/** Domain-separation tag for an attestation. Starts with `p`, so it can never collide with a `2\\n` manifest. */\nexport const ATTESTATION_TAG = /^po\\/[a-z0-9-]+\\/v[1-9][0-9]*$/u;\n\nconst SHA256 = /^[0-9a-f]{64}$/u;\nconst BASE64URL = /^[A-Za-z0-9_-]+$/u;\nconst CONTENT_TYPE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;\n\nexport interface BundleAsset {\n  /** Normalized absolute URL path, without a query or fragment. */\n  path: string;\n  /** Lowercase hex SHA-256 of the served bytes. */\n  sha256: string;\n  byteLength: number;\n  /** MIME type of the response, without parameters. */\n  contentType: string;\n}\n\nexport interface BundleManifest {\n  version: typeof BUNDLE_MANIFEST_VERSION;\n  /** Monotonically increasing persistent signer revision. */\n  revision: number;\n  /** Unix time in milliseconds. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the signing key. Trust must be established out of band. */\n  publicKey: string;\n}\n\nfunction hasExactKeys(value: object, expected: readonly string[]): boolean {\n  const keys = Object.keys(value).sort();\n  return keys.length === expected.length && keys.every((key, index) => key === expected[index]);\n}\n\nfunction isSafeInteger(value: unknown, minimum: number): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;\n}\n\nfunction isSafeAssetPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length < 2 || !value.startsWith('/')) return false;\n  if (value.includes('\\\\') || value.includes('\\0') || value.includes('?') || value.includes('#')) return false;\n  if (/[^\\x21-\\x7e]/u.test(value) || value.includes('//') || /%(?![0-9a-f]{2})/iu.test(value)) return false;\n  if (/%(?:2e|2f|5c)/iu.test(value)) return false;\n  return value\n    .split('/')\n    .slice(1)\n    .every((segment) => segment !== '' && segment !== '.' && segment !== '..');\n}\n\n/** The exact bytes signed by Node and verified by WebCrypto. */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map(\n    (asset) => `${asset.path}\\0${asset.sha256}\\0${String(asset.byteLength)}\\0${asset.contentType}`,\n  );\n  return [String(manifest.version), String(manifest.revision), String(manifest.builtAt), ...lines].join('\\n');\n}\n\n/**\n * The exact bytes of a tagged attestation: `UTF-8(tag + \"\\n\" + JSON.stringify(fields))`. Fields are an\n * ordered list of strings, so both sides build the same bytes without relying on object key order.\n * Throws on a malformed tag or a non-string field.\n */\nexport function attestationBytes(tag: string, fields: readonly string[]): Uint8Array<ArrayBuffer> {\n  if (!ATTESTATION_TAG.test(tag)) throw new Error(`invalid attestation tag: ${tag}`);\n  if (!Array.isArray(fields) || !fields.every((field) => typeof field === 'string')) {\n    throw new Error(`invalid attestation fields for ${tag}`);\n  }\n  return new TextEncoder().encode(`${tag}\\n${JSON.stringify(fields)}`);\n}\n\nfunction matchesProfile(assets: readonly BundleAsset[], paths: ReadonlySet<string>, profile: BundleProfile): boolean {\n  if (profile === 'web') return paths.has(WEB_ENTRY_PATH);\n  if (profile === 'app') {\n    return (\n      !paths.has(WEB_ENTRY_PATH) &&\n      !paths.has(NATIVE_ENTRY_PATH) &&\n      paths.has(APP_DESCRIPTOR_PATH) &&\n      assets.some((asset) => asset.path.startsWith(APP_PART_PREFIX)) &&\n      assets.every((asset) => asset.byteLength <= APP_ASSET_MAX_BYTES)\n    );\n  }\n  if (profile !== 'native' || assets.length !== 1) return false;\n  const [entry] = assets;\n  return (\n    entry !== undefined &&\n    entry.path === NATIVE_ENTRY_PATH &&\n    entry.contentType === NATIVE_ENTRY_CONTENT_TYPE &&\n    entry.byteLength <= NATIVE_COMPOSITION_MAX_BYTES\n  );\n}\n\nexport function isBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['assets', 'builtAt', 'revision', 'version'])) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (!isSafeInteger(candidate.revision, 1) || !isSafeInteger(candidate.builtAt, 0)) return false;\n  if (!Array.isArray(candidate.assets) || candidate.assets.length === 0) return false;\n\n  const paths = new Set<string>();\n  for (const valueAsset of candidate.assets) {\n    if (typeof valueAsset !== 'object' || valueAsset === null) return false;\n    if (!hasExactKeys(valueAsset, ['byteLength', 'contentType', 'path', 'sha256'])) return false;\n    const asset = valueAsset as Partial<BundleAsset>;\n    if (!isSafeAssetPath(asset.path) || paths.has(asset.path)) return false;\n    if (typeof asset.sha256 !== 'string' || !SHA256.test(asset.sha256)) return false;\n    if (!isSafeInteger(asset.byteLength, 0)) return false;\n    if (typeof asset.contentType !== 'string' || !CONTENT_TYPE.test(asset.contentType)) return false;\n    paths.add(asset.path);\n  }\n  return matchesProfile(candidate.assets as BundleAsset[], paths, profile);\n}\n\nexport function isSignedBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is SignedBundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['manifest', 'publicKey', 'signature'])) return false;\n  const candidate = value as Partial<SignedBundleManifest>;\n  return (\n    isBundleManifest(candidate.manifest, profile) &&\n    typeof candidate.signature === 'string' &&\n    candidate.signature.length === 86 &&\n    BASE64URL.test(candidate.signature) &&\n    typeof candidate.publicKey === 'string' &&\n    candidate.publicKey.length <= 512 &&\n    BASE64URL.test(candidate.publicKey)\n  );\n}\n\n/** The recorded asset for one path, or undefined if the manifest does not cover it. */\nexport function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined {\n  return manifest.assets.find((asset) => asset.path === path);\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return assetFor(manifest, path)?.sha256;\n}\n"],"mappings":"AAQA,MAAaA,EAAwB,wBACxBC,EAA0B,EAQ1BC,EAAiB,cACjBC,EAAoB,kBACpBC,EAA4B,kBAE5BC,EAA+B,QAE/BC,EAAsB,YAEtBC,EAAkB,WAElBC,EAAsB,QAEtBC,EAAkB,kCAEzBC,EAAS,kBACTC,EAAY,oBACZC,EAAe,4DA6BrB,SAASC,EAAa,EAAe,EAAsC,CACzE,IAAMC,EAAO,OAAO,KAAKC,CAAK,CAAC,CAAC,KAAK,EACrC,OAAOD,EAAK,SAAWE,EAAS,QAAUF,EAAK,OAAO,EAAK,IAAUG,IAAQD,EAASE,EAAM,CAC9F,CAEA,SAASC,EAAc,EAAgB,EAAkC,CACvE,OAAO,OAAOJ,GAAU,UAAY,OAAO,cAAcA,CAAK,GAAKA,GAASK,CAC9E,CAEA,SAASC,EAAgB,EAAiC,CAKxD,OAJI,OAAON,GAAU,UAAYA,EAAM,OAAS,GAAK,CAACA,EAAM,WAAW,GAAG,GACtEA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,GAAG,GAAKA,EAAM,SAAS,GAAG,GACzF,gBAAgB,KAAKA,CAAK,GAAKA,EAAM,SAAS,IAAI,GAAK,qBAAqB,KAAKA,CAAK,GACtF,kBAAkB,KAAKA,CAAK,EAAU,GACnCA,EACJ,MAAM,GAAG,CAAC,CACV,MAAM,CAAC,CAAC,CACR,MAAO,GAAYO,IAAY,IAAMA,IAAY,KAAOA,IAAY,IAAI,CAC7E,CAGA,SAAgBC,EAAkB,EAAkC,CAIlE,IAAMC,EAHS,CAAC,GAAGC,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9CC,EAAK,KAAOC,EAAM,KAAO,GAAK,IAAK,KAAOA,EAAM,KAE/B,CAAC,CAAC,IAClB,GAAU,GAAGC,EAAM,KAAK,IAAIA,EAAM,OAAO,IAAI,OAAOA,EAAM,UAAU,EAAE,IAAIA,EAAM,aACnF,EACA,MAAO,CAAC,OAAOH,EAAS,OAAO,EAAG,OAAOA,EAAS,QAAQ,EAAG,OAAOA,EAAS,OAAO,EAAG,GAAGD,CAAK,CAAC,CAAC,KAAK;CAAI,CAC5G,CAOA,SAAgBK,EAAiB,EAAa,EAAoD,CAChG,GAAI,CAACpB,EAAgB,KAAKqB,CAAG,EAAG,MAAU,MAAM,4BAA4BA,GAAK,EACjF,GAAI,CAAC,MAAM,QAAQC,CAAM,GAAK,CAACA,EAAO,MAAO,GAAU,OAAOC,GAAU,QAAQ,EAC9E,MAAU,MAAM,kCAAkCF,GAAK,EAEzD,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAGA,EAAI,IAAI,KAAK,UAAUC,CAAM,GAAG,CACrE,CAEA,SAASE,EAAe,EAAgC,EAA4B,EAAiC,CACnH,GAAIC,IAAY,MAAO,OAAOC,EAAM,IAAIjC,CAAc,EACtD,GAAIgC,IAAY,MACd,MACE,CAACC,EAAM,IAAA,aAAkB,GACzB,CAACA,EAAM,IAAA,iBAAqB,GAC5BA,EAAM,IAAA,WAAuB,GAC7BC,EAAO,KAAM,GAAUR,EAAM,KAAK,WAAA,UAA0B,CAAC,GAC7DQ,EAAO,MAAO,GAAUR,EAAM,YAAA,OAAiC,EAGnE,GAAIM,IAAY,UAAYE,EAAO,SAAW,EAAG,MAAO,GACxD,GAAM,CAACC,GAASD,EAChB,OACEC,IAAU,IAAA,IACVA,EAAM,OAAA,mBACNA,EAAM,cAAA,mBACNA,EAAM,YAAA,OAEV,CAEA,SAAgBC,EAAiB,EAAgB,EAAyB,MAAgC,CAExG,GADI,OAAOvB,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,SAAU,UAAW,WAAY,SAAS,CAAC,EAAG,MAAO,GAC/E,IAAMwB,EAAYxB,EAGlB,GAFIwB,EAAU,UAAA,GACV,CAACpB,EAAcoB,EAAU,SAAU,CAAC,GAAK,CAACpB,EAAcoB,EAAU,QAAS,CAAC,GAC5E,CAAC,MAAM,QAAQA,EAAU,MAAM,GAAKA,EAAU,OAAO,SAAW,EAAG,MAAO,GAE9E,IAAMJ,kBAAQ,IAAI,IAClB,IAAK,IAAMK,KAAcD,EAAU,OAAQ,CAEzC,GADI,OAAOC,GAAe,WAAYA,GAClC,CAAC3B,EAAa2B,EAAY,CAAC,aAAc,cAAe,OAAQ,QAAQ,CAAC,EAAG,MAAO,GACvF,IAAMZ,EAAQY,EAId,GAHI,CAACnB,EAAgBO,EAAM,IAAI,GAAKO,EAAM,IAAIP,EAAM,IAAI,GACpD,OAAOA,EAAM,QAAW,UAAY,CAAClB,EAAO,KAAKkB,EAAM,MAAM,GAC7D,CAACT,EAAcS,EAAM,WAAY,CAAC,GAClC,OAAOA,EAAM,aAAgB,UAAY,CAAChB,EAAa,KAAKgB,EAAM,WAAW,EAAG,MAAO,GAC3FO,EAAM,IAAIP,EAAM,IAAI,CACtB,CACA,OAAOK,EAAeM,EAAU,OAAyBJ,EAAOD,CAAO,CACzE,CAEA,SAAgBO,EAAuB,EAAgB,EAAyB,MAAsC,CAEpH,GADI,OAAO1B,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,WAAY,YAAa,WAAW,CAAC,EAAG,MAAO,GACzE,IAAMwB,EAAYxB,EAClB,OACEuB,EAAiBC,EAAU,SAAUL,CAAO,GAC5C,OAAOK,EAAU,WAAc,UAC/BA,EAAU,UAAU,SAAW,IAC/B5B,EAAU,KAAK4B,EAAU,SAAS,GAClC,OAAOA,EAAU,WAAc,UAC/BA,EAAU,UAAU,QAAU,KAC9B5B,EAAU,KAAK4B,EAAU,SAAS,CAEtC,CAGA,SAAgBG,EAAS,EAA0B,EAAuC,CACxF,OAAOjB,EAAS,OAAO,KAAM,GAAUG,EAAM,OAASe,CAAI,CAC5D,CAGA,SAAgBC,EAAU,EAA0B,EAAkC,CACpF,OAAOF,EAASjB,EAAUkB,CAAI,CAAC,EAAE,MACnC"}
+{"version":3,"file":"bundleManifest.mjs","names":["BUNDLE_MANIFEST_ROUTE","BUNDLE_MANIFEST_VERSION","WEB_ENTRY_PATH","NATIVE_ENTRY_PATH","NATIVE_ENTRY_CONTENT_TYPE","NATIVE_COMPOSITION_MAX_BYTES","NATIVE_MODULE_PATH","APP_DESCRIPTOR_PATH","APP_PART_PREFIX","APP_ASSET_MAX_BYTES","ATTESTATION_TAG","SHA256","BASE64URL","CONTENT_TYPE","hasExactKeys","keys","value","expected","key","index","isSafeInteger","minimum","isSafeAssetPath","segment","canonicalManifest","lines","manifest","left","right","asset","attestationBytes","tag","fields","field","matchesProfile","profile","paths","assets","entry","isBundleManifest","candidate","valueAsset","isSignedBundleManifest","assetFor","path","digestFor"],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 2;\n\n/**\n * Which asset shape a manifest must have. A web bundle always serves `/index.html`; a native bundle is\n * one or more top-level `.js` modules, one per plugin, and never serves `/index.html` or `/app.json`;\n * an app bundle is `/app.json` plus `/bundle/` parts and serves neither entry, so no manifest can pass\n * two profiles.\n */\nexport type BundleProfile = 'web' | 'native' | 'app';\nexport const WEB_ENTRY_PATH = '/index.html';\n/** The single-module native layout older builds used; still a valid native module path. */\nexport const NATIVE_ENTRY_PATH = '/composition.js';\nexport const NATIVE_ENTRY_CONTENT_TYPE = 'text/javascript';\n/** Largest native module a sealed response can carry; each plugin module is checked on its own. */\nexport const NATIVE_COMPOSITION_MAX_BYTES = 4 * 1024 * 1024;\nconst NATIVE_MODULE_PATH = /^\\/[A-Za-z0-9._-]+\\.js$/u;\n/** JSON `{ platform, fingerprint }` naming the native binary an app bundle runs on. */\nexport const APP_DESCRIPTOR_PATH = '/app.json';\n/** App JS bundle parts; concatenated in path order they are the bundle. */\nexport const APP_PART_PREFIX = '/bundle/';\n/** Largest app asset, so every part fits one sealed response. */\nexport const APP_ASSET_MAX_BYTES = 2 * 1024 * 1024;\n/** Domain-separation tag for an attestation. Starts with `p`, so it can never collide with a `2\\n` manifest. */\nexport const ATTESTATION_TAG = /^po\\/[a-z0-9-]+\\/v[1-9][0-9]*$/u;\n\nconst SHA256 = /^[0-9a-f]{64}$/u;\nconst BASE64URL = /^[A-Za-z0-9_-]+$/u;\nconst CONTENT_TYPE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;\n\nexport interface BundleAsset {\n  /** Normalized absolute URL path, without a query or fragment. */\n  path: string;\n  /** Lowercase hex SHA-256 of the served bytes. */\n  sha256: string;\n  byteLength: number;\n  /** MIME type of the response, without parameters. */\n  contentType: string;\n}\n\nexport interface BundleManifest {\n  version: typeof BUNDLE_MANIFEST_VERSION;\n  /** Monotonically increasing persistent signer revision. */\n  revision: number;\n  /** Unix time in milliseconds. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the signing key. Trust must be established out of band. */\n  publicKey: string;\n}\n\nfunction hasExactKeys(value: object, expected: readonly string[]): boolean {\n  const keys = Object.keys(value).sort();\n  return keys.length === expected.length && keys.every((key, index) => key === expected[index]);\n}\n\nfunction isSafeInteger(value: unknown, minimum: number): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;\n}\n\nfunction isSafeAssetPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length < 2 || !value.startsWith('/')) return false;\n  if (value.includes('\\\\') || value.includes('\\0') || value.includes('?') || value.includes('#')) return false;\n  if (/[^\\x21-\\x7e]/u.test(value) || value.includes('//') || /%(?![0-9a-f]{2})/iu.test(value)) return false;\n  if (/%(?:2e|2f|5c)/iu.test(value)) return false;\n  return value\n    .split('/')\n    .slice(1)\n    .every((segment) => segment !== '' && segment !== '.' && segment !== '..');\n}\n\n/** The exact bytes signed by Node and verified by WebCrypto. */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map(\n    (asset) => `${asset.path}\\0${asset.sha256}\\0${String(asset.byteLength)}\\0${asset.contentType}`,\n  );\n  return [String(manifest.version), String(manifest.revision), String(manifest.builtAt), ...lines].join('\\n');\n}\n\n/**\n * The exact bytes of a tagged attestation: `UTF-8(tag + \"\\n\" + JSON.stringify(fields))`. Fields are an\n * ordered list of strings, so both sides build the same bytes without relying on object key order.\n * Throws on a malformed tag or a non-string field.\n */\nexport function attestationBytes(tag: string, fields: readonly string[]): Uint8Array<ArrayBuffer> {\n  if (!ATTESTATION_TAG.test(tag)) throw new Error(`invalid attestation tag: ${tag}`);\n  if (!Array.isArray(fields) || !fields.every((field) => typeof field === 'string')) {\n    throw new Error(`invalid attestation fields for ${tag}`);\n  }\n  return new TextEncoder().encode(`${tag}\\n${JSON.stringify(fields)}`);\n}\n\nfunction matchesProfile(assets: readonly BundleAsset[], paths: ReadonlySet<string>, profile: BundleProfile): boolean {\n  if (profile === 'web') return paths.has(WEB_ENTRY_PATH);\n  if (profile === 'app') {\n    return (\n      !paths.has(WEB_ENTRY_PATH) &&\n      !paths.has(NATIVE_ENTRY_PATH) &&\n      paths.has(APP_DESCRIPTOR_PATH) &&\n      assets.some((asset) => asset.path.startsWith(APP_PART_PREFIX)) &&\n      assets.every((asset) => asset.byteLength <= APP_ASSET_MAX_BYTES)\n    );\n  }\n  if (profile !== 'native') return false;\n  return assets.every(\n    (entry) =>\n      NATIVE_MODULE_PATH.test(entry.path) &&\n      entry.contentType === NATIVE_ENTRY_CONTENT_TYPE &&\n      entry.byteLength <= NATIVE_COMPOSITION_MAX_BYTES,\n  );\n}\n\nexport function isBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['assets', 'builtAt', 'revision', 'version'])) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (!isSafeInteger(candidate.revision, 1) || !isSafeInteger(candidate.builtAt, 0)) return false;\n  if (!Array.isArray(candidate.assets) || candidate.assets.length === 0) return false;\n\n  const paths = new Set<string>();\n  for (const valueAsset of candidate.assets) {\n    if (typeof valueAsset !== 'object' || valueAsset === null) return false;\n    if (!hasExactKeys(valueAsset, ['byteLength', 'contentType', 'path', 'sha256'])) return false;\n    const asset = valueAsset as Partial<BundleAsset>;\n    if (!isSafeAssetPath(asset.path) || paths.has(asset.path)) return false;\n    if (typeof asset.sha256 !== 'string' || !SHA256.test(asset.sha256)) return false;\n    if (!isSafeInteger(asset.byteLength, 0)) return false;\n    if (typeof asset.contentType !== 'string' || !CONTENT_TYPE.test(asset.contentType)) return false;\n    paths.add(asset.path);\n  }\n  return matchesProfile(candidate.assets as BundleAsset[], paths, profile);\n}\n\nexport function isSignedBundleManifest(value: unknown, profile: BundleProfile = 'web'): value is SignedBundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['manifest', 'publicKey', 'signature'])) return false;\n  const candidate = value as Partial<SignedBundleManifest>;\n  return (\n    isBundleManifest(candidate.manifest, profile) &&\n    typeof candidate.signature === 'string' &&\n    candidate.signature.length === 86 &&\n    BASE64URL.test(candidate.signature) &&\n    typeof candidate.publicKey === 'string' &&\n    candidate.publicKey.length <= 512 &&\n    BASE64URL.test(candidate.publicKey)\n  );\n}\n\n/** The recorded asset for one path, or undefined if the manifest does not cover it. */\nexport function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined {\n  return manifest.assets.find((asset) => asset.path === path);\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return assetFor(manifest, path)?.sha256;\n}\n"],"mappings":"AAQA,MAAaA,EAAwB,wBACxBC,EAA0B,EAS1BC,EAAiB,cAEjBC,EAAoB,kBACpBC,EAA4B,kBAE5BC,EAA+B,QACtCC,EAAqB,2BAEdC,EAAsB,YAEtBC,EAAkB,WAElBC,EAAsB,QAEtBC,EAAkB,kCAEzBC,EAAS,kBACTC,EAAY,oBACZC,EAAe,4DA6BrB,SAASC,EAAa,EAAe,EAAsC,CACzE,IAAMC,EAAO,OAAO,KAAKC,CAAK,CAAC,CAAC,KAAK,EACrC,OAAOD,EAAK,SAAWE,EAAS,QAAUF,EAAK,OAAO,EAAK,IAAUG,IAAQD,EAASE,EAAM,CAC9F,CAEA,SAASC,EAAc,EAAgB,EAAkC,CACvE,OAAO,OAAOJ,GAAU,UAAY,OAAO,cAAcA,CAAK,GAAKA,GAASK,CAC9E,CAEA,SAASC,EAAgB,EAAiC,CAKxD,OAJI,OAAON,GAAU,UAAYA,EAAM,OAAS,GAAK,CAACA,EAAM,WAAW,GAAG,GACtEA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,IAAI,GAAKA,EAAM,SAAS,GAAG,GAAKA,EAAM,SAAS,GAAG,GACzF,gBAAgB,KAAKA,CAAK,GAAKA,EAAM,SAAS,IAAI,GAAK,qBAAqB,KAAKA,CAAK,GACtF,kBAAkB,KAAKA,CAAK,EAAU,GACnCA,EACJ,MAAM,GAAG,CAAC,CACV,MAAM,CAAC,CAAC,CACR,MAAO,GAAYO,IAAY,IAAMA,IAAY,KAAOA,IAAY,IAAI,CAC7E,CAGA,SAAgBC,EAAkB,EAAkC,CAIlE,IAAMC,EAHS,CAAC,GAAGC,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9CC,EAAK,KAAOC,EAAM,KAAO,GAAK,IAAK,KAAOA,EAAM,KAE/B,CAAC,CAAC,IAClB,GAAU,GAAGC,EAAM,KAAK,IAAIA,EAAM,OAAO,IAAI,OAAOA,EAAM,UAAU,EAAE,IAAIA,EAAM,aACnF,EACA,MAAO,CAAC,OAAOH,EAAS,OAAO,EAAG,OAAOA,EAAS,QAAQ,EAAG,OAAOA,EAAS,OAAO,EAAG,GAAGD,CAAK,CAAC,CAAC,KAAK;CAAI,CAC5G,CAOA,SAAgBK,EAAiB,EAAa,EAAoD,CAChG,GAAI,CAACpB,EAAgB,KAAKqB,CAAG,EAAG,MAAU,MAAM,4BAA4BA,GAAK,EACjF,GAAI,CAAC,MAAM,QAAQC,CAAM,GAAK,CAACA,EAAO,MAAO,GAAU,OAAOC,GAAU,QAAQ,EAC9E,MAAU,MAAM,kCAAkCF,GAAK,EAEzD,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAGA,EAAI,IAAI,KAAK,UAAUC,CAAM,GAAG,CACrE,CAEA,SAASE,EAAe,EAAgC,EAA4B,EAAiC,CAYnH,OAXIC,IAAY,MAAcC,EAAM,IAAIlC,CAAc,EAClDiC,IAAY,MAEZ,CAACC,EAAM,IAAA,aAAkB,GACzB,CAACA,EAAM,IAAA,iBAAqB,GAC5BA,EAAM,IAAA,WAAuB,GAC7BC,EAAO,KAAM,GAAUR,EAAM,KAAK,WAAA,UAA0B,CAAC,GAC7DQ,EAAO,MAAO,GAAUR,EAAM,YAAA,OAAiC,EAG/DM,IAAY,UACTE,EAAO,MACX,GACC/B,EAAmB,KAAKgC,EAAM,IAAI,GAClCA,EAAM,cAAA,mBACNA,EAAM,YAAA,OACV,CACF,CAEA,SAAgBC,EAAiB,EAAgB,EAAyB,MAAgC,CAExG,GADI,OAAOvB,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,SAAU,UAAW,WAAY,SAAS,CAAC,EAAG,MAAO,GAC/E,IAAMwB,EAAYxB,EAGlB,GAFIwB,EAAU,UAAA,GACV,CAACpB,EAAcoB,EAAU,SAAU,CAAC,GAAK,CAACpB,EAAcoB,EAAU,QAAS,CAAC,GAC5E,CAAC,MAAM,QAAQA,EAAU,MAAM,GAAKA,EAAU,OAAO,SAAW,EAAG,MAAO,GAE9E,IAAMJ,kBAAQ,IAAI,IAClB,IAAK,IAAMK,KAAcD,EAAU,OAAQ,CAEzC,GADI,OAAOC,GAAe,WAAYA,GAClC,CAAC3B,EAAa2B,EAAY,CAAC,aAAc,cAAe,OAAQ,QAAQ,CAAC,EAAG,MAAO,GACvF,IAAMZ,EAAQY,EAId,GAHI,CAACnB,EAAgBO,EAAM,IAAI,GAAKO,EAAM,IAAIP,EAAM,IAAI,GACpD,OAAOA,EAAM,QAAW,UAAY,CAAClB,EAAO,KAAKkB,EAAM,MAAM,GAC7D,CAACT,EAAcS,EAAM,WAAY,CAAC,GAClC,OAAOA,EAAM,aAAgB,UAAY,CAAChB,EAAa,KAAKgB,EAAM,WAAW,EAAG,MAAO,GAC3FO,EAAM,IAAIP,EAAM,IAAI,CACtB,CACA,OAAOK,EAAeM,EAAU,OAAyBJ,EAAOD,CAAO,CACzE,CAEA,SAAgBO,EAAuB,EAAgB,EAAyB,MAAsC,CAEpH,GADI,OAAO1B,GAAU,WAAYA,GAC7B,CAACF,EAAaE,EAAO,CAAC,WAAY,YAAa,WAAW,CAAC,EAAG,MAAO,GACzE,IAAMwB,EAAYxB,EAClB,OACEuB,EAAiBC,EAAU,SAAUL,CAAO,GAC5C,OAAOK,EAAU,WAAc,UAC/BA,EAAU,UAAU,SAAW,IAC/B5B,EAAU,KAAK4B,EAAU,SAAS,GAClC,OAAOA,EAAU,WAAc,UAC/BA,EAAU,UAAU,QAAU,KAC9B5B,EAAU,KAAK4B,EAAU,SAAS,CAEtC,CAGA,SAAgBG,EAAS,EAA0B,EAAuC,CACxF,OAAOjB,EAAS,OAAO,KAAM,GAAUG,EAAM,OAASe,CAAI,CAC5D,CAGA,SAAgBC,EAAU,EAA0B,EAAkC,CACpF,OAAOF,EAASjB,EAAUkB,CAAI,CAAC,EAAE,MACnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po-web-security",
-  "version": "0.0.0-alpha.41",
+  "version": "0.0.0-alpha.42",
   "description": "Shared security primitives for the Po web cockpit: sealed channels and signed bundle manifests for independently trusted verifiers.",
   "keywords": [
     "ai",