@attestplane/attestplane 0.0.1-alpha.1 → 0.0.3-alpha

package/dist/signing/verifier_ext.js

@@ -0,0 +1,340 @@
+// SPDX-FileCopyrightText: 2026 The Attestplane Authors
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Verifier extension — TypeScript mirror of
+ * `sdk/python/src/attestplane/signing/verifier_ext.py`.
+ *
+ * Adds two functions alongside the existing
+ * `verifyChainWithAnchors` in `../anchoring.ts`:
+ *
+ * - `verifyChainWithSignatures` — signature-only path.
+ * - `verifyChainFull` — unified chain + signature + anchor.
+ *
+ * Pipeline ordering (architect review § 1 decision 8): chain →
+ * signature → anchor. Each step always runs (no short-circuit) for
+ * forensic completeness.
+ *
+ * Plurality priority (T6 review decision 7):
+ * `valid > expired_key > invalid > unknown_key > unsigned`. Any single
+ * `valid` signature for a seq lifts that seq to `valid`.
+ *
+ * Coverage (T6 review decision 7, option a): a `valid` segment-head
+ * signature at seq=N covers seqs {previous-signed-head + 1 .. N} via
+ * chain-integrity transitivity. Per-event signatures cover their
+ * explicit `signed_seq` only.
+ */
+import { createPublicKey, verify as ed25519Verify } from 'node:crypto';
+import { verifyChainWithAnchors, } from '../anchoring.js';
+import { SIGNATURE_SCHEMA_VERSION, SigningError, deriveKeyId, } from './base.js';
+import { buildPerEventPayload, buildSegmentHeadPayload } from './signer.js';
+/** Lower rank = better. Used to merge multiple signatures per seq. */
+export const STATUS_RANK = Object.freeze({
+    valid: 0,
+    expired_key: 1,
+    invalid: 2,
+    unknown_key: 3,
+    unsigned: 4,
+});
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++) {
+        if (a[i] !== b[i])
+            return false;
+    }
+    return true;
+}
+function loadEd25519PublicKey(der) {
+    return createPublicKey({
+        key: Buffer.from(der),
+        format: 'der',
+        type: 'spki',
+    });
+}
+function verifySingleSignature(record, index, eventsBySeq, chainId, trustRoots, verificationTime) {
+    const base = {
+        record_index: index,
+        signed_seq: record.signed_seq,
+        key_id: record.key_id,
+    };
+    // 1. Schema version.
+    if (record.signature_schema_version !== SIGNATURE_SCHEMA_VERSION) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: `signature_schema_version=${record.signature_schema_version} ` +
+                `unsupported (expected ${SIGNATURE_SCHEMA_VERSION})`,
+        };
+    }
+    if (record.signed_payload.length === 0) {
+        return { ...base, status: 'invalid', reason: 'signed_payload is empty' };
+    }
+    // 2. Self-consistency: key_id derives from public_key_der.
+    const derived = deriveKeyId(record.public_key_der);
+    if (derived !== record.key_id) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: `record.key_id (${record.key_id}) does not derive from public_key_der (got ${derived})`,
+        };
+    }
+    // 3. TrustRoots lookup.
+    const entry = trustRoots.lookup(record.key_id);
+    if (entry === null) {
+        return {
+            ...base,
+            status: 'unknown_key',
+            reason: `key_id ${JSON.stringify(record.key_id)} not in trust roots`,
+        };
+    }
+    // 4. Validity window.
+    const vt = verificationTime.getTime();
+    if (vt < entry.valid_from.getTime()) {
+        return {
+            ...base,
+            status: 'expired_key',
+            reason: `verification_time ${verificationTime.toISOString()} ` +
+                `precedes valid_from ${entry.valid_from.toISOString()}`,
+        };
+    }
+    if (vt > entry.valid_until.getTime()) {
+        return {
+            ...base,
+            status: 'expired_key',
+            reason: `verification_time ${verificationTime.toISOString()} ` +
+                `exceeds valid_until ${entry.valid_until.toISOString()}`,
+        };
+    }
+    // 5. Ed25519 signature verification.
+    let pubkey;
+    try {
+        pubkey = loadEd25519PublicKey(record.public_key_der);
+    }
+    catch (exc) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: `public_key_der not parseable: ${exc.message}`,
+        };
+    }
+    if (pubkey.asymmetricKeyType !== 'ed25519') {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: `v1 supports Ed25519 keys only; got ${String(pubkey.asymmetricKeyType)}`,
+        };
+    }
+    if (!bytesEqual(entry.public_key_der, record.public_key_der)) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: "record.public_key_der does not match trust-root entry's public_key_der " +
+                '(same key_id, different bytes — tamper signal)',
+        };
+    }
+    const ok = ed25519Verify(null, Buffer.from(record.signed_payload), pubkey, Buffer.from(record.signature));
+    if (!ok) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: 'Ed25519 verify failed',
+        };
+    }
+    // 6. Payload semantics cross-check.
+    const target = eventsBySeq.get(record.signed_seq);
+    if (target === undefined) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: `signed_seq=${record.signed_seq} not in chain`,
+        };
+    }
+    if (!bytesEqual(target.event_hash, record.signed_event_hash)) {
+        return {
+            ...base,
+            status: 'invalid',
+            reason: `signed_event_hash mismatch at seq=${record.signed_seq}`,
+        };
+    }
+    if (record.signature_mode === 'segment_head') {
+        const expected = buildSegmentHeadPayload(chainId, {
+            seq: target.seq,
+            event_hash: target.event_hash,
+        });
+        if (!bytesEqual(expected, record.signed_payload)) {
+            let payloadChainId = '<unparsable>';
+            try {
+                const parsed = JSON.parse(Buffer.from(record.signed_payload).toString('utf-8'));
+                payloadChainId = parsed.chain_id;
+            }
+            catch {
+                // payloadChainId stays as '<unparsable>'
+            }
+            return {
+                ...base,
+                status: 'invalid',
+                reason: `signed_payload does not match expected canonical bytes for segment_head at seq=${record.signed_seq}; payload chain_id=${JSON.stringify(payloadChainId)}, verifier chain_id=${JSON.stringify(chainId)}`,
+            };
+        }
+    }
+    else {
+        const expected = buildPerEventPayload(target.event);
+        if (!bytesEqual(expected, record.signed_payload)) {
+            return {
+                ...base,
+                status: 'invalid',
+                reason: `signed_payload does not match canonicalize(event) for per_event at seq=${record.signed_seq}`,
+            };
+        }
+    }
+    return { ...base, status: 'valid', reason: null };
+}
+function mergeStatusAtSeq(perSeq) {
+    const result = new Map();
+    for (const [seq, statuses] of perSeq.entries()) {
+        let best = statuses[0];
+        let bestRank = STATUS_RANK[best];
+        for (let i = 1; i < statuses.length; i++) {
+            const s = statuses[i];
+            const r = STATUS_RANK[s];
+            if (r < bestRank) {
+                best = s;
+                bestRank = r;
+            }
+        }
+        result.set(seq, best);
+    }
+    return result;
+}
+function computeSignedSegmentCount(events, perSeqStatus, perSeqModes) {
+    const validSegmentHeads = [];
+    const validPerEvents = new Set();
+    for (const [seq, status] of perSeqStatus.entries()) {
+        if (status !== 'valid')
+            continue;
+        const modes = perSeqModes.get(seq) ?? new Set();
+        if (modes.has('segment_head'))
+            validSegmentHeads.push(seq);
+        if (modes.has('per_event'))
+            validPerEvents.add(seq);
+    }
+    validSegmentHeads.sort((a, b) => a - b);
+    const covered = new Set(validPerEvents);
+    let prevHead = -1;
+    for (const headSeq of validSegmentHeads) {
+        for (let s = prevHead + 1; s <= headSeq; s++) {
+            covered.add(s);
+        }
+        prevHead = headSeq;
+    }
+    const chainSeqs = new Set(events.map((e) => e.seq));
+    let count = 0;
+    for (const s of covered) {
+        if (chainSeqs.has(s))
+            count++;
+    }
+    return count;
+}
+export function verifyChainWithSignatures(events, signatures, options) {
+    if (!options.chain_id) {
+        throw new SigningError('verifyChainWithSignatures requires non-empty chain_id');
+    }
+    const actualWhen = options.verification_time ?? new Date();
+    if (Number.isNaN(actualWhen.getTime())) {
+        throw new SigningError('verifyChainWithSignatures requires a valid Date for verification_time');
+    }
+    const eventsBySeq = new Map();
+    for (const ev of events)
+        eventsBySeq.set(ev.seq, ev);
+    const results = [];
+    const perSeqStatuses = new Map();
+    const perSeqModes = new Map();
+    for (let i = 0; i < signatures.length; i++) {
+        const rec = signatures[i];
+        const result = verifySingleSignature(rec, i, eventsBySeq, options.chain_id, options.trust_roots, actualWhen);
+        results.push(result);
+        const seqList = perSeqStatuses.get(rec.signed_seq) ?? [];
+        seqList.push(result.status);
+        perSeqStatuses.set(rec.signed_seq, seqList);
+        const modeSet = perSeqModes.get(rec.signed_seq) ?? new Set();
+        modeSet.add(rec.signature_mode);
+        perSeqModes.set(rec.signed_seq, modeSet);
+    }
+    const perSeqStatus = mergeStatusAtSeq(perSeqStatuses);
+    let signatureStatus;
+    if (signatures.length === 0) {
+        signatureStatus = 'unsigned';
+    }
+    else {
+        // Bundle-level = worst (highest rank) status across signed seqs.
+        let worst = 'valid';
+        let worstRank = STATUS_RANK.valid;
+        for (const s of perSeqStatus.values()) {
+            const r = STATUS_RANK[s];
+            if (r > worstRank) {
+                worst = s;
+                worstRank = r;
+            }
+        }
+        signatureStatus = worst;
+    }
+    const signedSegmentCount = computeSignedSegmentCount(events, perSeqStatus, perSeqModes);
+    let firstBadIdx = null;
+    for (const r of results) {
+        if (r.status !== 'valid') {
+            firstBadIdx = r.record_index;
+            break;
+        }
+    }
+    return {
+        signature_status: signatureStatus,
+        signature_results: results,
+        signed_segment_count: signedSegmentCount,
+        first_bad_signature_index: firstBadIdx,
+    };
+}
+export function verifyChainFull(events, options = {}) {
+    const anchors = options.anchors ?? [];
+    const signatures = options.signatures ?? [];
+    const anchorOpts = {
+        ...(options.anchor_options ?? {}),
+        ...(options.verification_time !== undefined
+            ? { verificationTime: options.verification_time }
+            : {}),
+    };
+    const anchorResult = verifyChainWithAnchors(events, anchors, anchorOpts);
+    let sigStatus = 'unsigned';
+    let sigResults = [];
+    let signedCount = 0;
+    let firstBad = null;
+    if (signatures.length > 0) {
+        if (!options.chain_id || !options.trust_roots) {
+            throw new SigningError('verifyChainFull: signatures provided but chain_id or trust_roots is missing');
+        }
+        const sigOpts = {
+            chain_id: options.chain_id,
+            trust_roots: options.trust_roots,
+            ...(options.verification_time !== undefined
+                ? { verification_time: options.verification_time }
+                : {}),
+        };
+        const sigOut = verifyChainWithSignatures(events, signatures, sigOpts);
+        sigStatus = sigOut.signature_status;
+        sigResults = sigOut.signature_results;
+        signedCount = sigOut.signed_segment_count;
+        firstBad = sigOut.first_bad_signature_index;
+    }
+    return {
+        chain_ok: anchorResult.chain_ok,
+        chain_reason: anchorResult.chain_reason,
+        anchored_seqs: anchorResult.anchored_seqs,
+        unanchored_seqs: anchorResult.unanchored_seqs,
+        anchor_results: anchorResult.anchor_results,
+        signature_status: sigStatus,
+        signature_results: sigResults,
+        signed_segment_count: signedCount,
+        first_bad_signature_index: firstBad,
+        ok: anchorResult.chain_ok && anchorResult.anchor_results.every((a) => a.valid),
+    };
+}
+//# sourceMappingURL=verifier_ext.js.map

package/dist/signing/verifier_ext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier_ext.js","sourceRoot":"","sources":["../../src/signing/verifier_ext.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAkB,eAAe,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAKL,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,wBAAwB,EAGxB,YAAY,EACZ,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAK5E,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAA8C,MAAM,CAAC,MAAM,CAAC;IAClF,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;CACZ,CAAC,CAAC;AA6BH,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAe;IAC3C,OAAO,eAAe,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAuB,EACvB,KAAa,EACb,WAAsC,EACtC,OAAe,EACf,UAAsB,EACtB,gBAAsB;IAEtB,MAAM,IAAI,GAAG;QACX,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IAEF,qBAAqB;IACrB,IAAI,MAAM,CAAC,wBAAwB,KAAK,wBAAwB,EAAE,CAAC;QACjE,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EACJ,4BAA4B,MAAM,CAAC,wBAAwB,GAAG;gBAC9D,yBAAyB,wBAAwB,GAAG;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC3E,CAAC;IAED,2DAA2D;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,kBAAkB,MAAM,CAAC,MAAM,8CAA8C,OAAO,GAAG;SAChG,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,KAAK,GAA0B,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB;SACrE,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;IACtC,IAAI,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACpC,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,aAAa;YACrB,MAAM,EACJ,qBAAqB,gBAAgB,CAAC,WAAW,EAAE,GAAG;gBACtD,uBAAuB,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,aAAa;YACrB,MAAM,EACJ,qBAAqB,gBAAgB,CAAC,WAAW,EAAE,GAAG;gBACtD,uBAAuB,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE;SAClE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,sCAAsC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE;SACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EACJ,yEAAyE;gBACzE,gDAAgD;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,aAAa,CACtB,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAClC,MAAM,EACN,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAC9B,CAAC;IACF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,cAAc,MAAM,CAAC,UAAU,eAAe;SACvD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,qCAAqC,MAAM,CAAC,UAAU,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE;YAChD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACjD,IAAI,cAAc,GAAqB,cAAc,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAG7E,CAAC;gBACF,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;YACD,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,kFAAkF,MAAM,CAAC,UAAU,sBAAsB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;aAChN,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACjD,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,0EAA0E,MAAM,CAAC,UAAU,EAAE;aACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAsC;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAoB,CAAC;QAC1C,IAAI,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAoB,CAAC;YACzC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;gBACjB,IAAI,GAAG,CAAC,CAAC;gBACT,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAA+B,EAC/B,YAA0C,EAC1C,WAA4C;IAE5C,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,OAAO;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAiB,CAAC;QAC/D,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,cAAc,CAAC,CAAC;IAChD,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAeD,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,UAAsC,EACtC,OAAyC;IAEzC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,uDAAuD,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,IAAI,EAAE,CAAC;IAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,uEAAuE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,MAAM;QAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAErD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAoB,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAClC,GAAG,EACH,CAAC,EACD,WAAW,EACX,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,WAAW,EACnB,UAAU,CACX,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAiB,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAChC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAEtD,IAAI,eAAgC,CAAC;IACrC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,eAAe,GAAG,UAAU,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,iEAAiE;QACjE,IAAI,KAAK,GAAoB,OAAO,CAAC;QACrC,IAAI,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;gBAClB,KAAK,GAAG,CAAC,CAAC;gBACV,SAAS,GAAG,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,eAAe,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAExF,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACzB,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;YAC7B,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,eAAe;QACjC,iBAAiB,EAAE,OAAO;QAC1B,oBAAoB,EAAE,kBAAkB;QACxC,yBAAyB,EAAE,WAAW;KACvC,CAAC;AACJ,CAAC;AAWD,MAAM,UAAU,eAAe,CAC7B,MAA+B,EAC/B,UAAkC,EAAE;IAEpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAE5C,MAAM,UAAU,GAAkC;QAChD,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,YAAY,GAA6B,sBAAsB,CACnE,MAAM,EACN,OAAO,EACP,UAAU,CACX,CAAC;IAEF,IAAI,SAAS,GAAoB,UAAU,CAAC;IAC5C,IAAI,UAAU,GAAqC,EAAE,CAAC;IACtD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,YAAY,CACpB,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAqC;YAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACtE,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACpC,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACtC,WAAW,GAAG,MAAM,CAAC,oBAAoB,CAAC;QAC1C,QAAQ,GAAG,MAAM,CAAC,yBAAyB,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,aAAa,EAAE,YAAY,CAAC,aAAa;QACzC,eAAe,EAAE,YAAY,CAAC,eAAe;QAC7C,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,gBAAgB,EAAE,SAAS;QAC3B,iBAAiB,EAAE,UAAU;QAC7B,oBAAoB,EAAE,WAAW;QACjC,yBAAyB,EAAE,QAAQ;QACnC,EAAE,EAAE,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;KAC/E,CAAC;AACJ,CAAC"}

package/dist/verifier.d.ts

@@ -0,0 +1,39 @@
+/**
+ * High-level proof-bundle verifier (TypeScript port of
+ * `sdk/python/src/attestplane/verifier.py`).
+ *
+ * Takes a parsed bundle object, performs a lightweight shape check
+ * (sufficient to safely rehydrate; callers needing full JSON Schema
+ * validation can run any standard validator against
+ * `schemas/v1/proof_bundle.schema.json`), rehydrates the contained
+ * events, re-walks the chain with `verifyChain`, and returns a
+ * `BundleVerificationResult`.
+ *
+ * Pure with respect to the bundle: no mutation, no signing, no I/O
+ * other than optionally reading a file when using `verifyProofBundleFile`.
+ */
+import { type VerificationResult } from './hashchain.js';
+export declare class BundleVerificationError extends Error {
+    constructor(message: string);
+}
+export declare class BundleSchemaError extends BundleVerificationError {
+    constructor(message: string);
+}
+export interface BundleVerificationResult {
+    readonly ok: boolean;
+    readonly chain_result: VerificationResult;
+    readonly bundle_reported_ok: boolean;
+    readonly agreement: boolean;
+    readonly event_count: number;
+    readonly bundle_version: number;
+    readonly chain_id: string;
+    readonly head_hash_hex: string;
+    readonly metadata_ok: boolean;
+    readonly metadata_reason: string | null;
+    readonly policy_trace_refs_ok: boolean;
+    readonly policy_trace_refs_reason: string | null;
+}
+export declare function shortSummary(result: BundleVerificationResult): string;
+export declare function verifyProofBundle(raw: unknown): BundleVerificationResult;
+export declare function verifyProofBundleFile(path: string): Promise<BundleVerificationResult>;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAGL,KAAK,kBAAkB,EAGxB,MAAM,gBAAgB,CAAC;AAUxB,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,iBAAkB,SAAQ,uBAAuB;gBAChD,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAcrE;AAiUD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,wBAAwB,CAwBxE;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAkB3F"}