@ai-dossier/core 1.4.1 → 1.5.0

package/dist/signature.js

@@ -6,7 +6,12 @@
  * supporting multiple signature schemes (Ed25519 and AWS KMS).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseTrustedKeys = parseTrustedKeys;
+exports.reportTrustedKeyProblems = reportTrustedKeyProblems;
+exports.trustedKeysFromContent = trustedKeysFromContent;
 exports.loadTrustedKeys = loadTrustedKeys;
+exports.isKmsKeyIdentifier = isKmsKeyIdentifier;
+exports.findTrustedIdentifier = findTrustedIdentifier;
 exports.verifyWithEd25519 = verifyWithEd25519;
 exports.verifyWithKms = verifyWithKms;
 exports.verifySignature = verifySignature;
@@ -18,6 +23,141 @@ const signers_1 = require("./signers");
 const signing_payload_1 = require("./signing-payload");
 const crypto_1 = require("./utils/crypto");
 const fs_1 = require("./utils/fs");
+/** Whether a line reads as an entry in its own right. */
+function looksLikeKeyEntry(line) {
+    const parts = line.trim().split(/\s+/);
+    return parts.length >= 2 && (0, signing_payload_1.isSupportedPublicKey)(parts[0]);
+}
+/**
+ * Split a trusted-keys file into `<public-key> <key-id>` pairs.
+ *
+ * One entry per line, except for PEM blocks: `dossier keys add` used to write its
+ * argument verbatim, so passing a PEM appended four lines that a line-oriented
+ * parse then shredded into entries matching nothing. Those blocks are rejoined so
+ * an already written file works without hand-editing — this only reassembles what
+ * the user wrote, it cannot widen a match.
+ *
+ * This is the single definition of what the trusted-key file format is: anything
+ * that lists, counts, or matches trusted keys must go through it, so `keys list`
+ * can never disagree with what verification actually trusts.
+ *
+ * Skipped lines come back alongside the entries rather than being dropped: every
+ * skip is a key the user thinks is trusted and isn't, so callers that can show
+ * the user something — `keys list`, and verification via `loadTrustedKeys` —
+ * report them instead of failing mute.
+ */
+function parseTrustedKeys(content) {
+    const entries = [];
+    const problems = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (!line || line.startsWith('#')) {
+            continue;
+        }
+        if (!line.startsWith('-----BEGIN')) {
+            const parts = line.split(/\s+/);
+            if (parts.length >= 2) {
+                entries.push({ publicKey: parts[0], keyId: parts.slice(1).join(' ') });
+            }
+            else {
+                problems.push({
+                    line: i + 1,
+                    message: 'public key has no identifier — expected "<public-key> <identifier>"',
+                });
+            }
+            continue;
+        }
+        const blockStart = i;
+        const block = [line];
+        while (i + 1 < lines.length && !block[block.length - 1].includes('-----END')) {
+            i++;
+            block.push(lines[i].trim());
+        }
+        // The identifier trails the END marker, or sits on the next line when the
+        // PEM carried its own trailing newline.
+        const endLine = block[block.length - 1];
+        const endMarker = /-----END [^-]*-----/.exec(endLine);
+        if (!endMarker) {
+            // The scan above ran to end-of-file looking for the END marker, so every
+            // later entry was swallowed with it. Say so explicitly: otherwise one
+            // truncated paste revokes trust for the whole file with no visible cause.
+            problems.push({
+                line: blockStart + 1,
+                message: 'public key block has no "-----END" marker — this block and every entry after it were ignored',
+            });
+            continue;
+        }
+        let keyId = endLine.slice(endMarker.index + endMarker[0].length).trim();
+        // Drop the identifier back off the END line, so the reassembled block is a
+        // bare PEM. Key parsing requires one block and nothing around it — trailing
+        // text would make this key unreadable and therefore untrusted.
+        block[block.length - 1] = endLine.slice(0, endMarker.index + endMarker[0].length);
+        // Only adopt the next line as the identifier when it is not plainly an entry
+        // of its own, or a bare PEM block would swallow the key that follows it.
+        if (!keyId && i + 1 < lines.length && !looksLikeKeyEntry(lines[i + 1])) {
+            i++;
+            keyId = lines[i].trim();
+        }
+        if (keyId) {
+            entries.push({ publicKey: block.join('\n'), keyId });
+        }
+        else {
+            problems.push({
+                line: blockStart + 1,
+                message: 'public key block has no identifier after the "-----END" marker — entry ignored',
+            });
+        }
+    }
+    return { entries, problems };
+}
+/** Cap on printed problems, so a mangled file cannot flood every verify run. */
+const MAX_REPORTED_TRUSTED_KEY_PROBLEMS = 3;
+/**
+ * Print unusable trusted-key entries to stderr, bounded.
+ *
+ * `loadTrustedKeys` runs on every `dossier verify`, so this stays silent unless
+ * the file is genuinely malformed — and a malformed trust file is precisely when
+ * the user needs to hear about it.
+ */
+function reportTrustedKeyProblems(problems, source) {
+    if (problems.length === 0) {
+        return;
+    }
+    const where = source ? ` in ${source}` : '';
+    console.warn(`Warning: ${problems.length} unusable trusted-key entry(s)${where}:`);
+    for (const problem of problems.slice(0, MAX_REPORTED_TRUSTED_KEY_PROBLEMS)) {
+        console.warn(`  line ${problem.line}: ${problem.message}`);
+    }
+    if (problems.length > MAX_REPORTED_TRUSTED_KEY_PROBLEMS) {
+        console.warn(`  ...and ${problems.length - MAX_REPORTED_TRUSTED_KEY_PROBLEMS} more`);
+    }
+    console.warn('  Those keys are NOT trusted. Re-add each with: ai-dossier keys add <public-key> <identifier>');
+}
+/**
+ * Build the trusted-key map from the contents of a trusted-keys file.
+ *
+ * Keys are indexed under both the form they were written in and their normalized
+ * form, so a key registered in one encoding still matches a signature that
+ * carries another.
+ *
+ * @param source - Path named in warnings about unusable entries. Omit to stay silent.
+ */
+function trustedKeysFromContent(content, source) {
+    const keys = new Map();
+    const { entries, problems } = parseTrustedKeys(content);
+    for (const { publicKey, keyId } of entries) {
+        keys.set(publicKey, keyId);
+        const normalized = (0, signing_payload_1.normalizePublicKey)(publicKey);
+        if (normalized !== publicKey) {
+            keys.set(normalized, keyId);
+        }
+    }
+    if (source) {
+        reportTrustedKeyProblems(problems, source);
+    }
+    return keys;
+}
 /**
  * Load trusted keys from file
  * Default location: ~/.dossier/trusted-keys.txt
@@ -25,37 +165,58 @@ const fs_1 = require("./utils/fs");
  */
 function loadTrustedKeys(filePath) {
     const keysPath = filePath || (0, node_path_1.join)((0, node_os_1.homedir)(), '.dossier', 'trusted-keys.txt');
-    const keys = new Map();
     const content = (0, fs_1.readFileIfExists)(keysPath);
-    if (!content) {
-        return keys;
-    }
-    try {
-        for (const line of content.split('\n')) {
-            const trimmed = line.trim();
-            // Skip empty lines and comments
-            if (!trimmed || trimmed.startsWith('#')) {
-                continue;
-            }
-            // Parse: <public-key> <key-id>
-            const parts = trimmed.split(/\s+/);
-            if (parts.length >= 2) {
-                const publicKey = parts[0];
-                const keyId = parts.slice(1).join(' ');
-                keys.set(publicKey, keyId);
-                // Index the normalized form too, so a key registered in one encoding
-                // still matches a signature that carries another.
-                const normalized = (0, signing_payload_1.normalizePublicKey)(publicKey);
-                if (normalized !== publicKey) {
-                    keys.set(normalized, keyId);
-                }
-            }
+    // Pass the path so unusable entries name the file the user has to fix.
+    return content ? trustedKeysFromContent(content, keysPath) : new Map();
+}
+/** The algorithm `KmsVerifier` claims, whose key material is the KMS key ARN. */
+const KMS_ALGORITHM = 'ECDSA-SHA-256';
+function isKmsAlgorithm(algorithm) {
+    return algorithm === KMS_ALGORITHM;
+}
+/**
+ * Whether a string identifies an AWS KMS key, and so is a usable trust-list entry
+ * for a KMS-signed dossier.
+ */
+function isKmsKeyIdentifier(value) {
+    return /^arn:aws[a-z-]*:kms:/.test(value.trim());
+}
+/**
+ * Resolve the identifier a signature is trusted under, or `undefined` if none of
+ * its key forms appear in the trust list.
+ *
+ * The signature and the trust list need not agree on encoding, so every form the
+ * *verifying* key carries is tried: the public key as written and normalized to
+ * raw base64. Every trust decision goes through here so "is it trusted" and "who
+ * is it" can never drift apart.
+ *
+ * Only the key material the verifier actually used is eligible, which is decided
+ * by the algorithm, not by which fields happen to be populated. `KmsVerifier`
+ * verifies against `key_id` and ignores `public_key` — which KMS signatures carry
+ * anyway — so for KMS only `key_id` can confer trust. Everything else verifies
+ * against `public_key`, so only that may.
+ *
+ * Letting a field the verifier ignored confer trust would hand it out for free:
+ * the trust list is keyed by public key and public keys are public, so an Ed25519
+ * dossier carrying `key_id: "<any trusted public key>"` would be trusted as that
+ * signer while verifying under an attacker's `public_key`.
+ */
+function findTrustedIdentifier(trustedKeys, signature) {
+    const candidates = isKmsAlgorithm(signature.algorithm)
+        ? [signature.key_id]
+        : signature.public_key
+            ? [signature.public_key, (0, signing_payload_1.normalizePublicKey)(signature.public_key)]
+            : [];
+    for (const candidate of candidates) {
+        if (!candidate) {
+            continue;
+        }
+        const identifier = trustedKeys.get(candidate);
+        if (identifier !== undefined) {
+            return identifier;
         }
     }
-    catch (err) {
-        console.error(`Warning: failed to parse trusted keys: ${err.message}`);
-    }
-    return keys;
+    return undefined;
 }
 /**
  * Verify signature using Ed25519

package/dist/signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature.js","sourceRoot":"","sources":["../src/signature.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiBH,0CAsCC;AAQD,8CAsBC;AAKD,sCA2BC;AASD,0CAOC;AAnID,6CAAsD;AACtD,qCAAkC;AAClC,yCAAiC;AACjC,oDAAqF;AAErF,uCAAgD;AAChD,uDAAkE;AAClE,2CAA4C;AAC5C,mCAA8C;AAE9C;;;;GAIG;AACH,SAAgB,eAAe,CAAC,QAAiB;IAC/C,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvC,MAAM,OAAO,GAAG,IAAA,qBAAgB,EAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAE5B,gCAAgC;YAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,+BAA+B;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAE3B,qEAAqE;gBACrE,kDAAkD;gBAClD,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0CAA2C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,OAAe,EACf,SAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnD,2DAA2D;QAC3D,MAAM,eAAe,GAAG,IAAA,6BAAe,EAAC;YACtC,GAAG,EAAE,IAAA,2BAAS,EAAC,SAAS,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QAEH,2DAA2D;QAC3D,MAAM,KAAK,GAAG,IAAA,oBAAM,EAAC,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,SAAiB,EACjB,KAAa,EACb,MAAM,GAAG,WAAW;IAEpB,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzC,kEAAkE;IAClE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,OAAO,CAAC,CAAC;IAEjC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,IAAI,0BAAa,CAAC;QAChC,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,eAAe;QAC1B,gBAAgB,EAAE,iCAAoB,CAAC,aAAa;KACrD,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAA0B;IAE1B,MAAM,gBAAgB,GAAG,IAAA,6BAAmB,GAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../src/signature.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuDH,4CAyEC;AAYD,4DAgBC;AAWD,wDAkBC;AAOD,0CAKC;AAaD,gDAEC;AAsBD,sDAqBC;AAQD,8CAsBC;AAKD,sCA2BC;AASD,0CAOC;AA3UD,6CAAsD;AACtD,qCAAkC;AAClC,yCAAiC;AACjC,oDAAqF;AAErF,uCAAgD;AAChD,uDAAwF;AACxF,2CAA4C;AAC5C,mCAA8C;AAqB9C,yDAAyD;AACzD,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,IAAA,sCAAoB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAI9C,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,qEAAqE;iBAC/E,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC;QACrB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7E,CAAC,EAAE,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAED,0EAA0E;QAC1E,wCAAwC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,yEAAyE;YACzE,sEAAsE;YACtE,0EAA0E;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,UAAU,GAAG,CAAC;gBACpB,OAAO,EACL,8FAA8F;aACjG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,+DAA+D;QAC/D,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClF,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,CAAC,EAAE,CAAC;YACJ,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,UAAU,GAAG,CAAC;gBACpB,OAAO,EAAE,gFAAgF;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAChF,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAE5C;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,QAA6B,EAAE,MAAe;IACrF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,iCAAiC,KAAK,GAAG,CAAC,CAAC;IACnF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iCAAiC,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,iCAAiC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,GAAG,iCAAiC,OAAO,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,CAAC,IAAI,CACV,+FAA+F,CAChG,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,OAAe,EAAE,MAAe;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAExD,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE3B,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,SAAS,CAAC,CAAC;QACjD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,QAAiB;IAC/C,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAA,qBAAgB,EAAC,QAAQ,CAAC,CAAC;IAC3C,uEAAuE;IACvE,OAAO,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,iFAAiF;AACjF,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,SAAS,cAAc,CAAC,SAA6B;IACnD,OAAO,SAAS,KAAK,aAAa,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,qBAAqB,CACnC,WAAgC,EAChC,SAAuE;IAEvE,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC;QACpD,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACpB,CAAC,CAAC,SAAS,CAAC,UAAU;YACpB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,IAAA,oCAAkB,EAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAClE,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,OAAe,EACf,SAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnD,2DAA2D;QAC3D,MAAM,eAAe,GAAG,IAAA,6BAAe,EAAC;YACtC,GAAG,EAAE,IAAA,2BAAS,EAAC,SAAS,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QAEH,2DAA2D;QAC3D,MAAM,KAAK,GAAG,IAAA,oBAAM,EAAC,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,SAAiB,EACjB,KAAa,EACb,MAAM,GAAG,WAAW;IAEpB,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzC,kEAAkE;IAClE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,OAAO,CAAC,CAAC;IAEjC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,IAAI,0BAAa,CAAC;QAChC,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,eAAe;QAC1B,gBAAgB,EAAE,iCAAoB,CAAC,aAAa;KACrD,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAA0B;IAE1B,MAAM,gBAAgB,GAAG,IAAA,6BAAmB,GAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC"}

package/dist/signing-payload.d.ts

@@ -35,9 +35,27 @@ export declare function signatureCoverage(signature: {
  * comparison against whatever the source actually contained.
  */
 export declare function normalizePublicKey(publicKey: string): string;
+/**
+ * Whether a public key is one this project can actually verify against.
+ *
+ * True for anything that normalizes to a raw 32-byte Ed25519 key (raw base64,
+ * SPKI PEM, base64 SPKI DER) and for minisign keys, which are passed through.
+ *
+ * `normalizePublicKey` deliberately returns uninterpretable input unchanged so
+ * exact-match comparison still works on the read path. On the *write* path —
+ * `dossier keys add` — that same leniency would silently store a typo, a
+ * truncated key, or a file path as if it were a trusted key, and the only
+ * symptom would be `dossier verify` reporting "not trusted" forever after. Use
+ * this to reject before writing.
+ */
+export declare function isSupportedPublicKey(publicKey: string): boolean;
 /**
  * Build an SPKI PEM from any accepted public-key form, for use with node:crypto.
- * Returns the input unchanged when it is already PEM.
+ *
+ * Always rebuilt from the parsed key rather than passed through, so the bytes a
+ * signature is verified against are the bytes the trust check matched. Returns
+ * the input unchanged only when it denotes no Ed25519 key at all, leaving
+ * `crypto` to report the error.
  */
 export declare function toSpkiPem(publicKey: string): string;
 /**

package/dist/signing-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signing-payload.d.ts","sourceRoot":"","sources":["../src/signing-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,kBAAkB,CAAC;AAE5D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GAAG,iBAAiB,CAE/F;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAsC5D;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAkBnD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKrF;AAuBD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGpF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,iBAAsC,GAC/C,MAAM,CAKR"}
+{"version":3,"file":"signing-payload.d.ts","sourceRoot":"","sources":["../src/signing-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,kBAAkB,CAAC;AAE5D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GAAG,iBAAiB,CAE/F;AAmFD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAG/D;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAYnD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKrF;AAuBD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGpF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,iBAAsC,GAC/C,MAAM,CAKR"}

package/dist/signing-payload.js

@@ -23,6 +23,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.signatureCoverage = signatureCoverage;
 exports.normalizePublicKey = normalizePublicKey;
+exports.isSupportedPublicKey = isSupportedPublicKey;
 exports.toSpkiPem = toSpkiPem;
 exports.publicKeysMatch = publicKeysMatch;
 exports.canonicalizeFrontmatter = canonicalizeFrontmatter;
@@ -38,57 +39,116 @@ function signatureCoverage(signature) {
     return signature?.covers === 'frontmatter+body' ? 'frontmatter+body' : 'body';
 }
 /**
- * Normalize an Ed25519 public key to raw 32-byte base64.
+ * One PEM block and nothing else: no content before BEGIN or after END, matching
+ * labels, and only base64 in between.
  *
- * Accepts SPKI PEM, raw base64, and base64 SPKI DER. Returns the input trimmed
- * when it cannot be interpreted, so callers can still do an exact-match
- * comparison against whatever the source actually contained.
+ * Anchoring both ends is load-bearing. OpenSSL — so `crypto.createPublicKey` —
+ * skips whatever precedes the BEGIN line and ignores whatever follows END, so a
+ * blob with padding around a real block still parses, as the key inside the
+ * block. If normalization read that same blob more loosely it could conclude the
+ * string denotes a *different* key than the one `createPublicKey` will hand to
+ * `verify`, and a trust check is exactly the place where those two answers must
+ * never differ.
  */
-function normalizePublicKey(publicKey) {
+const SINGLE_PEM_BLOCK = /^-----BEGIN ([A-Za-z0-9 ]+)-----([A-Za-z0-9+/=\s]*)-----END \1-----$/;
+/**
+ * Decode base64 only when the input is exactly what re-encoding those bytes gives.
+ *
+ * Node's base64 decoder is lenient by design: it silently discards characters it
+ * does not recognize and stops at the first `=` padding. That leniency is a
+ * key-substitution primitive here, because every raw Ed25519 key is 44 base64
+ * characters ending in `=` — meaning `<any key><arbitrary trailing text>` decodes
+ * to that key. Requiring a byte-exact round trip collapses each string onto at
+ * most one key.
+ */
+function decodeExactBase64(value) {
+    const decoded = Buffer.from(value, 'base64');
+    return decoded.toString('base64') === value ? decoded : undefined;
+}
+/**
+ * The raw 32 key bytes a public-key string denotes, or `undefined` when it does
+ * not unambiguously denote an Ed25519 key.
+ *
+ * The single source of truth behind `normalizePublicKey`, `toSpkiPem` and
+ * `isSupportedPublicKey`, so the key a trust check matches on and the key a
+ * signature is verified against are derived from one parse and cannot drift.
+ */
+function ed25519RawKey(publicKey) {
     const trimmed = publicKey.trim();
     if (!trimmed) {
-        return trimmed;
+        return undefined;
     }
     // minisign keys are a different encoding entirely (and carry a key id); nothing
     // has produced them since 2025-11-18. Leave them untouched.
     if (trimmed.startsWith('RWT')) {
-        return trimmed;
+        return undefined;
     }
-    const base64Body = trimmed.includes('BEGIN')
-        ? trimmed
-            .replace(/-----BEGIN [^-]+-----/g, '')
-            .replace(/-----END [^-]+-----/g, '')
-            .replace(/\s+/g, '')
-        : trimmed.replace(/\s+/g, '');
-    let decoded;
-    try {
-        decoded = Buffer.from(base64Body, 'base64');
+    // `-` is not in the base64 alphabet, so this cannot misread a raw key as PEM —
+    // whereas testing for the word "BEGIN" would, since B, E, G, I and N all are.
+    let base64Body;
+    if (trimmed.includes('-----')) {
+        const block = SINGLE_PEM_BLOCK.exec(trimmed);
+        if (!block) {
+            return undefined;
+        }
+        base64Body = block[2].replace(/\s+/g, '');
     }
-    catch {
-        return trimmed;
+    else {
+        base64Body = trimmed.replace(/\s+/g, '');
+    }
+    const decoded = decodeExactBase64(base64Body);
+    if (!decoded) {
+        return undefined;
     }
     if (decoded.length === ED25519_RAW_KEY_BYTES) {
-        return decoded.toString('base64');
+        return decoded;
     }
     if (decoded.length === ED25519_SPKI_PREFIX.length + ED25519_RAW_KEY_BYTES &&
         decoded.subarray(0, ED25519_SPKI_PREFIX.length).equals(ED25519_SPKI_PREFIX)) {
-        return decoded.subarray(ED25519_SPKI_PREFIX.length).toString('base64');
+        return decoded.subarray(ED25519_SPKI_PREFIX.length);
     }
-    return trimmed;
+    return undefined;
+}
+/**
+ * Normalize an Ed25519 public key to raw 32-byte base64.
+ *
+ * Accepts SPKI PEM, raw base64, and base64 SPKI DER. Returns the input trimmed
+ * when it cannot be interpreted, so callers can still do an exact-match
+ * comparison against whatever the source actually contained.
+ */
+function normalizePublicKey(publicKey) {
+    const raw = ed25519RawKey(publicKey);
+    return raw ? raw.toString('base64') : publicKey.trim();
+}
+/**
+ * Whether a public key is one this project can actually verify against.
+ *
+ * True for anything that normalizes to a raw 32-byte Ed25519 key (raw base64,
+ * SPKI PEM, base64 SPKI DER) and for minisign keys, which are passed through.
+ *
+ * `normalizePublicKey` deliberately returns uninterpretable input unchanged so
+ * exact-match comparison still works on the read path. On the *write* path —
+ * `dossier keys add` — that same leniency would silently store a typo, a
+ * truncated key, or a file path as if it were a trusted key, and the only
+ * symptom would be `dossier verify` reporting "not trusted" forever after. Use
+ * this to reject before writing.
+ */
+function isSupportedPublicKey(publicKey) {
+    const trimmed = publicKey.trim();
+    return trimmed.startsWith('RWT') || ed25519RawKey(trimmed) !== undefined;
 }
 /**
  * Build an SPKI PEM from any accepted public-key form, for use with node:crypto.
- * Returns the input unchanged when it is already PEM.
+ *
+ * Always rebuilt from the parsed key rather than passed through, so the bytes a
+ * signature is verified against are the bytes the trust check matched. Returns
+ * the input unchanged only when it denotes no Ed25519 key at all, leaving
+ * `crypto` to report the error.
  */
 function toSpkiPem(publicKey) {
-    const trimmed = publicKey.trim();
-    if (trimmed.includes('BEGIN')) {
-        return trimmed;
-    }
-    const raw = Buffer.from(normalizePublicKey(trimmed), 'base64');
-    if (raw.length !== ED25519_RAW_KEY_BYTES) {
-        // Not something we can rebuild; hand it back and let crypto report the error.
-        return trimmed;
+    const raw = ed25519RawKey(publicKey);
+    if (!raw) {
+        return publicKey.trim();
     }
     const der = Buffer.concat([ED25519_SPKI_PREFIX, raw]);
     const body = der

package/dist/signing-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"signing-payload.js","sourceRoot":"","sources":["../src/signing-payload.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAaH,8CAEC;AASD,gDAsCC;AAMD,8BAkBC;AAKD,0CAKC;AA2BD,0DAGC;AAQD,gDASC;AA7ID,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAE3E,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAIjC;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,SAA0C;IAC1E,OAAO,SAAS,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,SAAiB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,gFAAgF;IAChF,4DAA4D;IAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC1C,CAAC,CAAC,OAAO;aACJ,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC;aACrC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;aACnC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,IACE,OAAO,CAAC,MAAM,KAAK,mBAAmB,CAAC,MAAM,GAAG,qBAAqB;QACrE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAC3E,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,SAAiB;IACzC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACzC,8EAA8E;QAC9E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG;SACb,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;SAC3B,OAAO,EAAE,CAAC;IACb,OAAO,+BAA+B,IAAI,8BAA8B,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,CAAqB,EAAE,CAAqB;IAC1E,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,kBAAkB,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,WAAoC;IAC1E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC;IACtD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,WAAoC,EACpC,IAAY,EACZ,WAA8B,kBAAkB;IAEhD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,yBAAyB,uBAAuB,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;AAClF,CAAC"}
+{"version":3,"file":"signing-payload.js","sourceRoot":"","sources":["../src/signing-payload.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAaH,8CAEC;AA0FD,gDAGC;AAeD,oDAGC;AAUD,8BAYC;AAKD,0CAKC;AA2BD,0DAGC;AAQD,gDASC;AA3MD,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAE3E,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAIjC;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,SAA0C;IAC1E,OAAO,SAAS,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAG,sEAAsE,CAAC;AAEhG;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,gFAAgF;IAChF,4DAA4D;IAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IACE,OAAO,CAAC,MAAM,KAAK,mBAAmB,CAAC,MAAM,GAAG,qBAAqB;QACrE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAC3E,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,SAAiB;IAClD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,SAAS,CAAC,SAAiB;IACzC,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG;SACb,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;SAC3B,OAAO,EAAE,CAAC;IACb,OAAO,+BAA+B,IAAI,8BAA8B,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,CAAqB,EAAE,CAAqB;IAC1E,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,kBAAkB,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,WAAoC;IAC1E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC;IACtD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,WAAoC,EACpC,IAAY,EACZ,WAA8B,kBAAkB;IAEhD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,yBAAyB,uBAAuB,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;AAClF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-dossier/core",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Parsing, verification, and signing for dossiers — portable, signed, versioned skills for any LLM tool.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",