@freedomofpress/webcat 0.0.0-stage → 3.0.0

package/dist/lib/webcat/interfaces/errors.d.ts

@@ -0,0 +1,451 @@
+/**
+ * Error codes related to bundle fetching.
+ */
+export declare enum WebcatErrorFetch {
+    /**
+     * The {@link fetch} API call failed. Potential causes include network errors
+     * or misconfigured bundle paths.
+     */
+    FETCH_ERROR = "ERR_WEBCAT_BUNDLE_FETCH_ERROR"
+}
+/**
+ * Error codes related to bundle validation.
+ */
+export declare enum WebcatErrorBundle {
+    /** The bundle is invalid JSON. */
+    MALFORMED = "ERR_WEBCAT_BUNDLE_MALFORMED",
+    /** The bundle is missing the enrollment object. */
+    ENROLLMENT_MISSING = "ERR_WEBCAT_BUNDLE_MISSING_ENROLLMENT",
+    /** The bundle is missing the manifest object. */
+    MANIFEST_MISSING = "ERR_WEBCAT_BUNDLE_MISSING_MANIFEST",
+    /** The bundle is missing its signatures. */
+    SIGNATURES_MISSING = "ERR_WEBCAT_BUNDLE_MISSING_SIGNATURES"
+}
+/**
+ * Error codes related to enrollment validation
+ */
+export declare enum WebcatErrorEnrollment {
+    /**
+     * The enrollment is not of one of the
+     * {@link EnrollmentTypes | supported enrollment types}.
+     */
+    TYPE_INVALID = "ERR_WEBCAT_ENROLLMENT_TYPE_INVALID",
+    /**
+     * The enrollment object does not match its published hash.
+     */
+    MISMATCH = "ERR_WEBCAT_ENROLLMENT_MISMATCH",
+    /**
+     * The policy on the enrollment does not match the expected format.
+     * Sigsum-specific.
+     */
+    POLICY_MALFORMED = "ERR_WEBCAT_ENROLLMENT_POLICY_MALFORMED",
+    /**
+     * The policy on the enrollment is either empty or too long. Sigsum-specific.
+     */
+    POLICY_LENGTH = "ERR_WEBCAT_ENROLLMENT_POLICY_LENGTH",
+    /**
+     * The value of the signers property is not an array. Sigsum-specific.
+     */
+    SIGNERS_MALFORMED = "ERR_WEBCAT_ENROLLMENT_SIGNERS_MALFORMED",
+    /**
+     * The signers array is empty. Sigsum-specific.
+     */
+    SIGNERS_EMPTY = "ERR_WEBCAT_ENROLLMENT_SIGNERS_EMPTY",
+    /**
+     * The signer keys are not in the expected format. Sigsum-specific.
+     */
+    SIGNERS_KEY_MALFORMED = "ERR_WEBCAT_ENROLLMENT_SIGNERS_KEY_MALFORMED",
+    /**
+     * The signature threshold is not in the expected format. Sigsum-specific.
+     */
+    THRESHOLD_MALFORMED = "ERR_WEBCAT_ENROLLMENT_THRESHOLD_MALFORMED",
+    /**
+     * The signers threshold is higher than the number of signers and, hence,
+     * unreachable. Sigsum-specific.
+     */
+    THRESHOLD_IMPOSSIBLE = "ERR_WEBCAT_ENROLLMENT_THRESHOLD_IMPOSSIBLE",
+    /**
+     * The logs are not in the expected format. Sigsum-specific.
+     */
+    LOGS_MALFORMED = "ERR_WEBCAT_ENROLLMENT_LOGS_MALFORMED",
+    /** The enrollment max age is not in the expected format. */
+    MAX_AGE_MALFORMED = "ERR_WEBCAT_ENROLLMENT_MAX_AGE_MALFORMED",
+    /**
+     * The enrollment is missing the trusted_root property. Sigstore-specific.
+     */
+    TRUSTED_ROOT_MISSING = "ERR_WEBCAT_ENROLLMENT_TRUSTED_ROOT_MISSING",
+    /**
+     * The enrollment is missing the claims property. Sigstore-specific.
+     */
+    CLAIMS_MISSING = "ERR_WEBCAT_ENROLLMENT_CLAIMS_MISSING",
+    /**
+     * The enrollment claims are not in the expected format. Sigstore-specific.
+     */
+    CLAIMS_MALFORMED = "ERR_WEBCAT_ENROLLMENT_CLAIMS_MALFORMED",
+    /**
+     * The enrollment claims array is empty. Sigstore-specific.
+     */
+    CLAIMS_EMPTY = "ERR_WEBCAT_ENROLLMENT_CLAIMS_EMPTY"
+}
+/**
+ * Error codes related to manifest validation.
+ */
+export declare enum WebcatErrorManifest {
+    /**
+     * The manifest could not be verified against the signatures.
+     */
+    VERIFY_FAILED = "ERR_WEBCAT_MANIFEST_VERIFY_FAILED",
+    /**
+     * The number of valid signatures did not satisfy the threshold specified on
+     * the enrollment. Sigsum-specific.
+     */
+    THRESHOLD_UNSATISFIED = "ERR_WEBCAT_MANIFEST_THRESHOLD_UNSATISFIED",
+    /**
+     * The timestamp property is missing from the manifest. Sigsum-specific.
+     */
+    TIMESTAMP_MISSING = "ERR_WEBCAT_MANIFEST_MISSING_TIMESTAMP",
+    /**
+     * The timestamp value could not be verified. Sigsum-specific.
+     */
+    TIMESTAMP_VERIFY_FAILED = "ERR_WEBCAT_MANIFEST_TIMESTAMP_VERIFY_FAILED",
+    /**
+     * The manifest has expired.
+     */
+    EXPIRED = "ERR_WEBCAT_MANIFEST_EXPIRED",
+    /**
+     * No file list is present on the manifest, or the file list is empty.
+     */
+    FILES_MISSING = "ERR_WEBCAT_MANIFEST_FILES_MISSING",
+    /**
+     * A file hash is not in the expected format: the unpadded base64url
+     * encoding of a SHA-256 digest.
+     */
+    FILES_MALFORMED = "ERR_WEBCAT_MANIFEST_FILES_MALFORMED",
+    /**
+     * No default index is present on the manifest.
+     */
+    DEFAULT_INDEX_MISSING = "ERR_WEBCAT_MANIFEST_DEFAULT_INDEX_MISSING",
+    /**
+     * The default index does not match any file in the file list.
+     */
+    DEFAULT_INDEX_MISSING_FILE = "ERR_WEBCAT_MANIFEST_DEFAULT_INDEX_MISSING_FILE",
+    /**
+     * No default fallback is present on the manifest.
+     */
+    DEFAULT_FALLBACK_MISSING = "ERR_WEBCAT_MANIFEST_DEFAULT_FALLBACK_MISSING",
+    /**
+     * The default fallback does not match any file in the file list.
+     */
+    DEFAULT_FALLBACK_MISSING_FILE = "ERR_WEBCAT_MANIFEST_DEFAULT_FALLBACK_MISSING_FILE",
+    /**
+     * No default CSP is present on the manifest.
+     */
+    DEFAULT_CSP_MISSING = "ERR_WEBCAT_MANIFEST_DEFAULT_CSP_MISSING",
+    /**
+     * The default CSP is invalid. See {@link validateCSP}.
+     */
+    DEFAULT_CSP_INVALID = "ERR_WEBCAT_MANIFEST_DEFAULT_CSP_INVALID",
+    /**
+     * An extra CSP is invalid. See {@link validateCSP}.
+     */
+    EXTRA_CSP_INVALID = "ERR_WEBCAT_MANIFEST_EXTRA_CSP_INVALID",
+    /**
+     * The extra CSP object is not in the expected format.
+     */
+    EXTRA_CSP_MALFORMED = "ERR_WEBCAT_MANIFEST_EXTRA_CSP_MALFORMED",
+    /**
+     * No wasm property is present on the manifest.
+     */
+    WASM_MISSING = "ERR_WEBCAT_MANIFEST_WASM_MISSING"
+}
+/**
+ * Error codes related to CSP validation.
+ */
+export declare enum WebcatErrorCSP {
+    /**
+     * The CSP returned by the server did not match any of the CSPs declared on
+     * the manifest.
+     */
+    MISMATCH = "ERR_WEBCAT_CSP_MISMATCH"
+}
+/**
+ * Error codes related to header validation.
+ */
+export declare enum WebcatErrorHeaders {
+    /**
+     * Response headers are unavailable for inspection.
+     */
+    MISSING = "ERR_WEBCAT_HEADERS_MISSING",
+    /**
+     * A redirection to an external origin was attempted via a location header.
+     */
+    LOCATION_EXTERNAL = "ERR_WEBCAT_HEADERS_LOCATION_EXTERNAL",
+    /**
+     * A subresource request was redirected via a location header.
+     */
+    LOCATION_SUBRESOURCE = "ERR_WEBCAT_HEADERS_LOCATION_SUBRESOURCE",
+    /**
+     * The server returned a forbidden header.
+     */
+    FORBIDDEN = "ERR_WEBCAT_HEADERS_FORBIDDEN",
+    /**
+     * The server returned a duplicate critical header.
+     */
+    DUPLICATE = "ERR_WEBCAT_HEADERS_DUPLICATE",
+    /**
+     * A critical header was missing from the response.
+     */
+    MISSING_CRITICAL = "ERR_WEBCAT_HEADERS_MISSING_CRITICAL",
+    /**
+     * An enrollment header did not match the expected format.
+     */
+    ENROLLMENT_MALFORMED = "ERR_WEBCAT_HEADERS_ENROLLMENT_MALFORMED"
+}
+/**
+ * Error codes related to request URL validation.
+ */
+export declare enum WebcatErrorURL {
+    /**
+     * A request was issued with an unsupported protocol or port.
+     */
+    UNSUPPORTED = "ERR_WEBCAT_URL_UNSUPPORTED"
+}
+/**
+ * Error codes related to file content validation.
+ */
+export declare enum WebcatErrorFile {
+    /**
+     * The file is not present on the manifest.
+     */
+    MISSING = "ERR_WEBCAT_FILE_MISSING",
+    /**
+     * The file contents do not match the hash on the manifest.
+     */
+    MISMATCH = "ERR_WEBCAT_FILE_MISMATCH"
+}
+/**
+ * All user-facing error codes.
+ */
+export declare const WebcatErrorCode: {
+    /** {@inheritDoc WebcatErrorFetch} */
+    readonly Fetch: {
+        /**
+         * The {@link fetch} API call failed. Potential causes include network errors
+         * or misconfigured bundle paths.
+         */
+        readonly FETCH_ERROR: WebcatErrorFetch.FETCH_ERROR;
+    };
+    /** {@inheritDoc WebcatErrorBundle} */
+    readonly Bundle: {
+        /** The bundle is invalid JSON. */
+        readonly MALFORMED: WebcatErrorBundle.MALFORMED;
+        /** The bundle is missing the enrollment object. */
+        readonly ENROLLMENT_MISSING: WebcatErrorBundle.ENROLLMENT_MISSING;
+        /** The bundle is missing the manifest object. */
+        readonly MANIFEST_MISSING: WebcatErrorBundle.MANIFEST_MISSING;
+        /** The bundle is missing its signatures. */
+        readonly SIGNATURES_MISSING: WebcatErrorBundle.SIGNATURES_MISSING;
+    };
+    /** {@inheritDoc WebcatErrorEnrollment} */
+    readonly Enrollment: {
+        /**
+         * The enrollment is not of one of the
+         * {@link EnrollmentTypes | supported enrollment types}.
+         */
+        readonly TYPE_INVALID: WebcatErrorEnrollment.TYPE_INVALID;
+        /**
+         * The enrollment object does not match its published hash.
+         */
+        readonly MISMATCH: WebcatErrorEnrollment.MISMATCH;
+        /**
+         * The policy on the enrollment does not match the expected format.
+         * Sigsum-specific.
+         */
+        readonly POLICY_MALFORMED: WebcatErrorEnrollment.POLICY_MALFORMED;
+        /**
+         * The policy on the enrollment is either empty or too long. Sigsum-specific.
+         */
+        readonly POLICY_LENGTH: WebcatErrorEnrollment.POLICY_LENGTH;
+        /**
+         * The value of the signers property is not an array. Sigsum-specific.
+         */
+        readonly SIGNERS_MALFORMED: WebcatErrorEnrollment.SIGNERS_MALFORMED;
+        /**
+         * The signers array is empty. Sigsum-specific.
+         */
+        readonly SIGNERS_EMPTY: WebcatErrorEnrollment.SIGNERS_EMPTY;
+        /**
+         * The signer keys are not in the expected format. Sigsum-specific.
+         */
+        readonly SIGNERS_KEY_MALFORMED: WebcatErrorEnrollment.SIGNERS_KEY_MALFORMED;
+        /**
+         * The signature threshold is not in the expected format. Sigsum-specific.
+         */
+        readonly THRESHOLD_MALFORMED: WebcatErrorEnrollment.THRESHOLD_MALFORMED;
+        /**
+         * The signers threshold is higher than the number of signers and, hence,
+         * unreachable. Sigsum-specific.
+         */
+        readonly THRESHOLD_IMPOSSIBLE: WebcatErrorEnrollment.THRESHOLD_IMPOSSIBLE;
+        /**
+         * The logs are not in the expected format. Sigsum-specific.
+         */
+        readonly LOGS_MALFORMED: WebcatErrorEnrollment.LOGS_MALFORMED;
+        /** The enrollment max age is not in the expected format. */
+        readonly MAX_AGE_MALFORMED: WebcatErrorEnrollment.MAX_AGE_MALFORMED;
+        /**
+         * The enrollment is missing the trusted_root property. Sigstore-specific.
+         */
+        readonly TRUSTED_ROOT_MISSING: WebcatErrorEnrollment.TRUSTED_ROOT_MISSING;
+        /**
+         * The enrollment is missing the claims property. Sigstore-specific.
+         */
+        readonly CLAIMS_MISSING: WebcatErrorEnrollment.CLAIMS_MISSING;
+        /**
+         * The enrollment claims are not in the expected format. Sigstore-specific.
+         */
+        readonly CLAIMS_MALFORMED: WebcatErrorEnrollment.CLAIMS_MALFORMED;
+        /**
+         * The enrollment claims array is empty. Sigstore-specific.
+         */
+        readonly CLAIMS_EMPTY: WebcatErrorEnrollment.CLAIMS_EMPTY;
+    };
+    /** {@inheritDoc WebcatErrorManifest} */
+    readonly Manifest: {
+        /**
+         * The manifest could not be verified against the signatures.
+         */
+        readonly VERIFY_FAILED: WebcatErrorManifest.VERIFY_FAILED;
+        /**
+         * The number of valid signatures did not satisfy the threshold specified on
+         * the enrollment. Sigsum-specific.
+         */
+        readonly THRESHOLD_UNSATISFIED: WebcatErrorManifest.THRESHOLD_UNSATISFIED;
+        /**
+         * The timestamp property is missing from the manifest. Sigsum-specific.
+         */
+        readonly TIMESTAMP_MISSING: WebcatErrorManifest.TIMESTAMP_MISSING;
+        /**
+         * The timestamp value could not be verified. Sigsum-specific.
+         */
+        readonly TIMESTAMP_VERIFY_FAILED: WebcatErrorManifest.TIMESTAMP_VERIFY_FAILED;
+        /**
+         * The manifest has expired.
+         */
+        readonly EXPIRED: WebcatErrorManifest.EXPIRED;
+        /**
+         * No file list is present on the manifest, or the file list is empty.
+         */
+        readonly FILES_MISSING: WebcatErrorManifest.FILES_MISSING;
+        /**
+         * A file hash is not in the expected format: the unpadded base64url
+         * encoding of a SHA-256 digest.
+         */
+        readonly FILES_MALFORMED: WebcatErrorManifest.FILES_MALFORMED;
+        /**
+         * No default index is present on the manifest.
+         */
+        readonly DEFAULT_INDEX_MISSING: WebcatErrorManifest.DEFAULT_INDEX_MISSING;
+        /**
+         * The default index does not match any file in the file list.
+         */
+        readonly DEFAULT_INDEX_MISSING_FILE: WebcatErrorManifest.DEFAULT_INDEX_MISSING_FILE;
+        /**
+         * No default fallback is present on the manifest.
+         */
+        readonly DEFAULT_FALLBACK_MISSING: WebcatErrorManifest.DEFAULT_FALLBACK_MISSING;
+        /**
+         * The default fallback does not match any file in the file list.
+         */
+        readonly DEFAULT_FALLBACK_MISSING_FILE: WebcatErrorManifest.DEFAULT_FALLBACK_MISSING_FILE;
+        /**
+         * No default CSP is present on the manifest.
+         */
+        readonly DEFAULT_CSP_MISSING: WebcatErrorManifest.DEFAULT_CSP_MISSING;
+        /**
+         * The default CSP is invalid. See {@link validateCSP}.
+         */
+        readonly DEFAULT_CSP_INVALID: WebcatErrorManifest.DEFAULT_CSP_INVALID;
+        /**
+         * An extra CSP is invalid. See {@link validateCSP}.
+         */
+        readonly EXTRA_CSP_INVALID: WebcatErrorManifest.EXTRA_CSP_INVALID;
+        /**
+         * The extra CSP object is not in the expected format.
+         */
+        readonly EXTRA_CSP_MALFORMED: WebcatErrorManifest.EXTRA_CSP_MALFORMED;
+        /**
+         * No wasm property is present on the manifest.
+         */
+        readonly WASM_MISSING: WebcatErrorManifest.WASM_MISSING;
+    };
+    /** {@inheritDoc WebcatErrorCSP} */
+    readonly CSP: {
+        /**
+         * The CSP returned by the server did not match any of the CSPs declared on
+         * the manifest.
+         */
+        readonly MISMATCH: WebcatErrorCSP.MISMATCH;
+    };
+    /** {@inheritDoc WebcatErrorHeaders} */
+    readonly Headers: {
+        /**
+         * Response headers are unavailable for inspection.
+         */
+        readonly MISSING: WebcatErrorHeaders.MISSING;
+        /**
+         * A redirection to an external origin was attempted via a location header.
+         */
+        readonly LOCATION_EXTERNAL: WebcatErrorHeaders.LOCATION_EXTERNAL;
+        /**
+         * A subresource request was redirected via a location header.
+         */
+        readonly LOCATION_SUBRESOURCE: WebcatErrorHeaders.LOCATION_SUBRESOURCE;
+        /**
+         * The server returned a forbidden header.
+         */
+        readonly FORBIDDEN: WebcatErrorHeaders.FORBIDDEN;
+        /**
+         * The server returned a duplicate critical header.
+         */
+        readonly DUPLICATE: WebcatErrorHeaders.DUPLICATE;
+        /**
+         * A critical header was missing from the response.
+         */
+        readonly MISSING_CRITICAL: WebcatErrorHeaders.MISSING_CRITICAL;
+        /**
+         * An enrollment header did not match the expected format.
+         */
+        readonly ENROLLMENT_MALFORMED: WebcatErrorHeaders.ENROLLMENT_MALFORMED;
+    };
+    /** {@inheritDoc WebcatErrorURL} */
+    readonly URL: {
+        /**
+         * A request was issued with an unsupported protocol or port.
+         */
+        readonly UNSUPPORTED: WebcatErrorURL.UNSUPPORTED;
+    };
+    /** {@inheritDoc WebcatErrorFile} */
+    readonly File: {
+        /**
+         * The file is not present on the manifest.
+         */
+        readonly MISSING: WebcatErrorFile.MISSING;
+        /**
+         * The file contents do not match the hash on the manifest.
+         */
+        readonly MISMATCH: WebcatErrorFile.MISMATCH;
+    };
+};
+/**
+ * Error code type.
+ */
+export type WebcatErrorCodeAny = WebcatErrorFetch | WebcatErrorBundle | WebcatErrorEnrollment | WebcatErrorManifest | WebcatErrorCSP | WebcatErrorHeaders | WebcatErrorURL | WebcatErrorFile;
+/**
+ * Error class for user-facing errors.
+ */
+export declare class WebcatError extends Error {
+    readonly code: WebcatErrorCodeAny;
+    readonly details?: string[] | undefined;
+    constructor(code: WebcatErrorCodeAny, details?: string[] | undefined);
+}

package/dist/lib/webcat/interfaces/errors.js

@@ -0,0 +1,109 @@
+var WebcatErrorFetch = /* @__PURE__ */ ((WebcatErrorFetch2) => {
+  WebcatErrorFetch2["FETCH_ERROR"] = "ERR_WEBCAT_BUNDLE_FETCH_ERROR";
+  return WebcatErrorFetch2;
+})(WebcatErrorFetch || {});
+var WebcatErrorBundle = /* @__PURE__ */ ((WebcatErrorBundle2) => {
+  WebcatErrorBundle2["MALFORMED"] = "ERR_WEBCAT_BUNDLE_MALFORMED";
+  WebcatErrorBundle2["ENROLLMENT_MISSING"] = "ERR_WEBCAT_BUNDLE_MISSING_ENROLLMENT";
+  WebcatErrorBundle2["MANIFEST_MISSING"] = "ERR_WEBCAT_BUNDLE_MISSING_MANIFEST";
+  WebcatErrorBundle2["SIGNATURES_MISSING"] = "ERR_WEBCAT_BUNDLE_MISSING_SIGNATURES";
+  return WebcatErrorBundle2;
+})(WebcatErrorBundle || {});
+var WebcatErrorEnrollment = /* @__PURE__ */ ((WebcatErrorEnrollment2) => {
+  WebcatErrorEnrollment2["TYPE_INVALID"] = "ERR_WEBCAT_ENROLLMENT_TYPE_INVALID";
+  WebcatErrorEnrollment2["MISMATCH"] = "ERR_WEBCAT_ENROLLMENT_MISMATCH";
+  WebcatErrorEnrollment2["POLICY_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_POLICY_MALFORMED";
+  WebcatErrorEnrollment2["POLICY_LENGTH"] = "ERR_WEBCAT_ENROLLMENT_POLICY_LENGTH";
+  WebcatErrorEnrollment2["SIGNERS_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_SIGNERS_MALFORMED";
+  WebcatErrorEnrollment2["SIGNERS_EMPTY"] = "ERR_WEBCAT_ENROLLMENT_SIGNERS_EMPTY";
+  WebcatErrorEnrollment2["SIGNERS_KEY_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_SIGNERS_KEY_MALFORMED";
+  WebcatErrorEnrollment2["THRESHOLD_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_THRESHOLD_MALFORMED";
+  WebcatErrorEnrollment2["THRESHOLD_IMPOSSIBLE"] = "ERR_WEBCAT_ENROLLMENT_THRESHOLD_IMPOSSIBLE";
+  WebcatErrorEnrollment2["LOGS_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_LOGS_MALFORMED";
+  WebcatErrorEnrollment2["MAX_AGE_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_MAX_AGE_MALFORMED";
+  WebcatErrorEnrollment2["TRUSTED_ROOT_MISSING"] = "ERR_WEBCAT_ENROLLMENT_TRUSTED_ROOT_MISSING";
+  WebcatErrorEnrollment2["CLAIMS_MISSING"] = "ERR_WEBCAT_ENROLLMENT_CLAIMS_MISSING";
+  WebcatErrorEnrollment2["CLAIMS_MALFORMED"] = "ERR_WEBCAT_ENROLLMENT_CLAIMS_MALFORMED";
+  WebcatErrorEnrollment2["CLAIMS_EMPTY"] = "ERR_WEBCAT_ENROLLMENT_CLAIMS_EMPTY";
+  return WebcatErrorEnrollment2;
+})(WebcatErrorEnrollment || {});
+var WebcatErrorManifest = /* @__PURE__ */ ((WebcatErrorManifest2) => {
+  WebcatErrorManifest2["VERIFY_FAILED"] = "ERR_WEBCAT_MANIFEST_VERIFY_FAILED";
+  WebcatErrorManifest2["THRESHOLD_UNSATISFIED"] = "ERR_WEBCAT_MANIFEST_THRESHOLD_UNSATISFIED";
+  WebcatErrorManifest2["TIMESTAMP_MISSING"] = "ERR_WEBCAT_MANIFEST_MISSING_TIMESTAMP";
+  WebcatErrorManifest2["TIMESTAMP_VERIFY_FAILED"] = "ERR_WEBCAT_MANIFEST_TIMESTAMP_VERIFY_FAILED";
+  WebcatErrorManifest2["EXPIRED"] = "ERR_WEBCAT_MANIFEST_EXPIRED";
+  WebcatErrorManifest2["FILES_MISSING"] = "ERR_WEBCAT_MANIFEST_FILES_MISSING";
+  WebcatErrorManifest2["FILES_MALFORMED"] = "ERR_WEBCAT_MANIFEST_FILES_MALFORMED";
+  WebcatErrorManifest2["DEFAULT_INDEX_MISSING"] = "ERR_WEBCAT_MANIFEST_DEFAULT_INDEX_MISSING";
+  WebcatErrorManifest2["DEFAULT_INDEX_MISSING_FILE"] = "ERR_WEBCAT_MANIFEST_DEFAULT_INDEX_MISSING_FILE";
+  WebcatErrorManifest2["DEFAULT_FALLBACK_MISSING"] = "ERR_WEBCAT_MANIFEST_DEFAULT_FALLBACK_MISSING";
+  WebcatErrorManifest2["DEFAULT_FALLBACK_MISSING_FILE"] = "ERR_WEBCAT_MANIFEST_DEFAULT_FALLBACK_MISSING_FILE";
+  WebcatErrorManifest2["DEFAULT_CSP_MISSING"] = "ERR_WEBCAT_MANIFEST_DEFAULT_CSP_MISSING";
+  WebcatErrorManifest2["DEFAULT_CSP_INVALID"] = "ERR_WEBCAT_MANIFEST_DEFAULT_CSP_INVALID";
+  WebcatErrorManifest2["EXTRA_CSP_INVALID"] = "ERR_WEBCAT_MANIFEST_EXTRA_CSP_INVALID";
+  WebcatErrorManifest2["EXTRA_CSP_MALFORMED"] = "ERR_WEBCAT_MANIFEST_EXTRA_CSP_MALFORMED";
+  WebcatErrorManifest2["WASM_MISSING"] = "ERR_WEBCAT_MANIFEST_WASM_MISSING";
+  return WebcatErrorManifest2;
+})(WebcatErrorManifest || {});
+var WebcatErrorCSP = /* @__PURE__ */ ((WebcatErrorCSP2) => {
+  WebcatErrorCSP2["MISMATCH"] = "ERR_WEBCAT_CSP_MISMATCH";
+  return WebcatErrorCSP2;
+})(WebcatErrorCSP || {});
+var WebcatErrorHeaders = /* @__PURE__ */ ((WebcatErrorHeaders2) => {
+  WebcatErrorHeaders2["MISSING"] = "ERR_WEBCAT_HEADERS_MISSING";
+  WebcatErrorHeaders2["LOCATION_EXTERNAL"] = "ERR_WEBCAT_HEADERS_LOCATION_EXTERNAL";
+  WebcatErrorHeaders2["LOCATION_SUBRESOURCE"] = "ERR_WEBCAT_HEADERS_LOCATION_SUBRESOURCE";
+  WebcatErrorHeaders2["FORBIDDEN"] = "ERR_WEBCAT_HEADERS_FORBIDDEN";
+  WebcatErrorHeaders2["DUPLICATE"] = "ERR_WEBCAT_HEADERS_DUPLICATE";
+  WebcatErrorHeaders2["MISSING_CRITICAL"] = "ERR_WEBCAT_HEADERS_MISSING_CRITICAL";
+  WebcatErrorHeaders2["ENROLLMENT_MALFORMED"] = "ERR_WEBCAT_HEADERS_ENROLLMENT_MALFORMED";
+  return WebcatErrorHeaders2;
+})(WebcatErrorHeaders || {});
+var WebcatErrorURL = /* @__PURE__ */ ((WebcatErrorURL2) => {
+  WebcatErrorURL2["UNSUPPORTED"] = "ERR_WEBCAT_URL_UNSUPPORTED";
+  return WebcatErrorURL2;
+})(WebcatErrorURL || {});
+var WebcatErrorFile = /* @__PURE__ */ ((WebcatErrorFile2) => {
+  WebcatErrorFile2["MISSING"] = "ERR_WEBCAT_FILE_MISSING";
+  WebcatErrorFile2["MISMATCH"] = "ERR_WEBCAT_FILE_MISMATCH";
+  return WebcatErrorFile2;
+})(WebcatErrorFile || {});
+const WebcatErrorCode = {
+  /** {@inheritDoc WebcatErrorFetch} */
+  Fetch: { ...WebcatErrorFetch },
+  /** {@inheritDoc WebcatErrorBundle} */
+  Bundle: { ...WebcatErrorBundle },
+  /** {@inheritDoc WebcatErrorEnrollment} */
+  Enrollment: { ...WebcatErrorEnrollment },
+  /** {@inheritDoc WebcatErrorManifest} */
+  Manifest: { ...WebcatErrorManifest },
+  /** {@inheritDoc WebcatErrorCSP} */
+  CSP: { ...WebcatErrorCSP },
+  /** {@inheritDoc WebcatErrorHeaders} */
+  Headers: { ...WebcatErrorHeaders },
+  /** {@inheritDoc WebcatErrorURL} */
+  URL: { ...WebcatErrorURL },
+  /** {@inheritDoc WebcatErrorFile} */
+  File: { ...WebcatErrorFile }
+};
+class WebcatError extends Error {
+  constructor(code, details) {
+    super(code);
+    this.code = code;
+    this.details = details;
+    this.name = "WebcatError";
+  }
+}
+export {
+  WebcatError,
+  WebcatErrorBundle,
+  WebcatErrorCSP,
+  WebcatErrorCode,
+  WebcatErrorEnrollment,
+  WebcatErrorFetch,
+  WebcatErrorFile,
+  WebcatErrorHeaders,
+  WebcatErrorManifest,
+  WebcatErrorURL
+};

package/dist/lib/webcat/interfaces/log.d.ts

@@ -0,0 +1,14 @@
+export declare enum LogType {
+    debug = "debug",
+    info = "info",
+    warning = "warning",
+    error = "error"
+}
+export interface LogEntry {
+    timestamp: Date;
+    tabId: number;
+    origin: string;
+    level: keyof Console;
+    message: string;
+    stack?: string;
+}

package/dist/lib/webcat/interfaces/log.js

@@ -0,0 +1,10 @@
+var LogType = /* @__PURE__ */ ((LogType2) => {
+  LogType2["debug"] = "debug";
+  LogType2["info"] = "info";
+  LogType2["warning"] = "warning";
+  LogType2["error"] = "error";
+  return LogType2;
+})(LogType || {});
+export {
+  LogType
+};

package/dist/lib/webcat/interfaces/originstate.d.ts

@@ -0,0 +1,40 @@
+import { Enrollment, Manifest, SigstoreSignatures, SigsumSignatures } from "./bundle";
+import { WebcatError } from "./errors";
+export type CachePartition = {
+    firstParty: string;
+    incognito: boolean;
+};
+export type OriginStateObject = {
+    status: "verified_manifest";
+    enrollment_hash: string;
+    manifest: Manifest;
+    delegation?: string;
+    validUntil: number;
+};
+export interface OriginState {
+    readonly enrollment_hash: Uint8Array;
+    readonly enrollment?: Enrollment;
+    readonly manifest?: Manifest;
+    readonly delegation?: string;
+    readonly error?: WebcatError;
+    readonly validUntil?: number;
+    stale: boolean;
+    verifyEnrollment(enrollment?: Enrollment, delegation?: string): Promise<void>;
+    verifyManifest(manifest?: Manifest, signatures?: SigsumSignatures | SigstoreSignatures): Promise<void | number>;
+    verifyCSP(csp: string, pathname: string): boolean;
+    isRequestSent(): boolean;
+    isEnrollmentVerified(): this is OriginStateVerifiedEnrollment;
+    isManifestVerified(): this is OriginStateVerifiedManifest;
+    isFailed(): this is OriginStateFailed;
+}
+export type OriginStateVerifiedEnrollment = OriginState & {
+    enrollment: Enrollment;
+};
+export type OriginStateVerifiedManifest = OriginState & {
+    manifest: Manifest;
+    validUntil: number;
+    toPOJO(): OriginStateObject;
+};
+export type OriginStateFailed = OriginState & {
+    error: WebcatError;
+};

package/dist/lib/webcat/interfaces/originstate.js

@@ -0,0 +1 @@
+

package/dist/lib/webcat/interfaces/requeststate.d.ts

@@ -0,0 +1,10 @@
+import { CachePartition, OriginState } from "./originstate";
+export type RequestState = {
+    fqdn: string;
+    isFrame: boolean;
+    cachePartition: CachePartition;
+    pendingOrigin?: OriginState;
+};
+export type Stateful<T> = T & {
+    state: RequestState;
+};

package/dist/lib/webcat/interfaces/requeststate.js

@@ -0,0 +1 @@
+