@ggui-ai/gadget-signing 0.7.0 → 0.8.0

package/dist/index.d.ts

@@ -338,4 +338,29 @@ export declare function verifyBundleSigstore(input: VerifyBundleSigstoreInput):
  * a verification.
  */
 export declare function extractSigstoreLeafCertPem(signature: SigstoreSignature): string | undefined;
+/**
+ * Extract EVERY signer identity — the embedded Fulcio cert's URI and
+ * rfc822 (email) `subjectAlternativeName` values — from a
+ * {@link SigstoreSignature}'s serialized cosign bundle. Returns an
+ * EMPTY array when the bundle is malformed, carries no certificate,
+ * or the cert has no URI/email SAN.
+ *
+ * ALL SANs, deliberately: a certificate can carry BOTH a URI and an
+ * email SAN, and a policy that inspected only the first would
+ * dead-end on such certs. Callers match their policy against every
+ * returned identity and accept on ANY hit.
+ *
+ * This is a PROJECTION, not a verification: callers that make an
+ * authorization decision on the returned identities (e.g. a
+ * registry's publish-time identity binding) MUST pair it with
+ * {@link verifyBundleSigstore} over the same signature — verification
+ * is what proves the SAN-bearing cert is genuinely CA-issued and tied
+ * to the signed bytes. Parsing delegates to the same X.509 parser the
+ * verifier uses (see {@link extractSANsFromBundle}), so the identities
+ * a policy check sees can never drift from what verification enforces.
+ *
+ * Lives here — next to {@link extractSigstoreLeafCertPem} — so cosign
+ * bundle-format knowledge has ONE home.
+ */
+export declare function extractSigstoreSANs(signature: SigstoreSignature): readonly string[];
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAgBH,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAWnE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAc5E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAS9E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAyCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAqBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAQ/D;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAMD;;;;;GAKG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC;IACtD,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,WAAW,EAAE,UAAU,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B;AAED,+DAA+D;AAC/D,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,WAAW,EAAE,UAAU,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,UAAU,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,CAAC,CAmDxB;AAiBD,sEAAsE;AACtE,MAAM,MAAM,wBAAwB,GAChC,cAAc,GACd,cAAc,GACd,aAAa,GACb,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEtB,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM7E;AAED,2CAA2C;AAC3C,MAAM,WAAW,uBAAuB;IACtC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAwB5B;AAkDD,6CAA6C;AAC7C,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QAClC,4EAA4E;QAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAsGvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,iBAAiB,GAC3B,MAAM,GAAG,SAAS,CA8BpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAgBH,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAWnE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAc5E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAS9E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAyCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAqBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAQ/D;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAMD;;;;;GAKG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC;IACtD,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,WAAW,EAAE,UAAU,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B;AAED,+DAA+D;AAC/D,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,WAAW,EAAE,UAAU,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,UAAU,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,CAAC,CAmDxB;AAiBD,sEAAsE;AACtE,MAAM,MAAM,wBAAwB,GAChC,cAAc,GACd,cAAc,GACd,aAAa,GACb,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEtB,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM7E;AAED,2CAA2C;AAC3C,MAAM,WAAW,uBAAuB;IACtC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAwB5B;AAkDD,6CAA6C;AAC7C,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QAClC,4EAA4E;QAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAyGvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,iBAAiB,GAC3B,MAAM,GAAG,SAAS,CA8BpB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,iBAAiB,GAC3B,SAAS,MAAM,EAAE,CASnB"}

package/dist/index.js

@@ -422,19 +422,22 @@ export async function verifyBundleSigstore(input) {
     }
     // 3. RegExp identity pre-check. Upstream `sigstore.verify` accepts
     // only literal-equality identity strings, so a RegExp expectation
-    // must be enforced here against the bundle's embedded SAN.
+    // must be enforced here against the bundle's embedded SANs — ANY
+    // matching SAN satisfies the pattern (a cert can carry both a URI
+    // and an email SAN).
     if (expectedIdentity && expectedIdentity.subject instanceof RegExp) {
-        const san = extractSANFromBundle(parsedBundle);
-        if (san === undefined) {
+        const sans = extractSANsFromBundle(parsedBundle);
+        if (sans.length === 0) {
             return {
                 valid: false,
                 reason: "expectedIdentity.subject is RegExp but bundle has no subjectAlternativeName to match against",
             };
         }
-        if (!expectedIdentity.subject.test(san)) {
+        const pattern = expectedIdentity.subject;
+        if (!sans.some((san) => pattern.test(san))) {
             return {
                 valid: false,
-                reason: `identity mismatch: bundle SAN '${san}' does not match expected pattern ${expectedIdentity.subject}`,
+                reason: `identity mismatch: no bundle SAN (${sans.map((s) => `'${s}'`).join(', ')}) matches expected pattern ${pattern}`,
             };
         }
     }
@@ -547,25 +550,62 @@ export function extractSigstoreLeafCertPem(signature) {
     return rawBytes;
 }
 /**
- * Reach into a serialized sigstore Bundle and pull the
- * `subjectAlternativeName` from the embedded X.509 cert (if any). Used
- * by the RegExp-identity pre-check; production verification still goes
+ * Extract EVERY signer identity — the embedded Fulcio cert's URI and
+ * rfc822 (email) `subjectAlternativeName` values — from a
+ * {@link SigstoreSignature}'s serialized cosign bundle. Returns an
+ * EMPTY array when the bundle is malformed, carries no certificate,
+ * or the cert has no URI/email SAN.
+ *
+ * ALL SANs, deliberately: a certificate can carry BOTH a URI and an
+ * email SAN, and a policy that inspected only the first would
+ * dead-end on such certs. Callers match their policy against every
+ * returned identity and accept on ANY hit.
+ *
+ * This is a PROJECTION, not a verification: callers that make an
+ * authorization decision on the returned identities (e.g. a
+ * registry's publish-time identity binding) MUST pair it with
+ * {@link verifyBundleSigstore} over the same signature — verification
+ * is what proves the SAN-bearing cert is genuinely CA-issued and tied
+ * to the signed bytes. Parsing delegates to the same X.509 parser the
+ * verifier uses (see {@link extractSANsFromBundle}), so the identities
+ * a policy check sees can never drift from what verification enforces.
+ *
+ * Lives here — next to {@link extractSigstoreLeafCertPem} — so cosign
+ * bundle-format knowledge has ONE home.
+ */
+export function extractSigstoreSANs(signature) {
+    let parsed;
+    try {
+        parsed = JSON.parse(signature.bundle);
+    }
+    catch {
+        return [];
+    }
+    if (parsed === null || typeof parsed !== "object")
+        return [];
+    return extractSANsFromBundle(parsed);
+}
+/**
+ * Reach into a serialized sigstore Bundle and pull every URI/email
+ * `subjectAlternativeName` from the embedded X.509 cert (if any).
+ * Used by the RegExp-identity pre-check and
+ * {@link extractSigstoreSANs}; production verification still goes
  * through the upstream verifier for the actual cryptographic check.
  *
  * Parsing delegates to `@sigstore/core`'s `X509Certificate` — the
- * SAME parser the upstream verifier uses — so the SAN this pre-check
- * sees can never drift from the SAN verification enforces. (A prior
+ * SAME parser the upstream verifier uses — so the SANs this pre-check
+ * sees can never drift from the SANs verification enforces. (A prior
  * hand-rolled DER scan over-captured on real certificates —
  * discovered on the first genuinely Fulcio-issued cert it ever saw,
  * 2026-08-10 — and was replaced wholesale rather than patched.)
  *
- * Returns `undefined` if the bundle has no cert (e.g. publicKey-only
+ * Returns `[]` if the bundle has no cert (e.g. publicKey-only
  * bundle), the cert fails to parse, or it carries no URI/email SAN.
  */
-function extractSANFromBundle(bundle) {
+function extractSANsFromBundle(bundle) {
     const material = bundle.verificationMaterial;
     if (!material)
-        return undefined;
+        return [];
     let certB64;
     if ("certificate" in material && material.certificate) {
         certB64 = material.certificate.rawBytes;
@@ -576,15 +616,22 @@ function extractSANFromBundle(bundle) {
         certB64 = material.x509CertificateChain.certificates[0]?.rawBytes;
     }
     if (!certB64)
-        return undefined;
+        return [];
     try {
         const cert = X509Certificate.parse(Buffer.from(certB64, "base64"));
-        // `subjectAltName` is the URI GeneralName when present, else the
-        // rfc822Name — the exact preference order the verifier's identity
-        // policy uses.
-        return cert.subjectAltName;
+        // Collect BOTH GeneralName kinds the identity policies use — URI
+        // first (matching upstream's preference order), then rfc822.
+        const ext = cert.extSubjectAltName;
+        if (ext === undefined)
+            return [];
+        const sans = [];
+        if (ext.uri !== undefined)
+            sans.push(ext.uri);
+        if (ext.rfc822Name !== undefined)
+            sans.push(ext.rfc822Name);
+        return sans;
     }
     catch {
-        return undefined;
+        return [];
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/gadget-signing",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Gadget bundle signing + verification for the ggui gadget marketplace. Ed25519 author-key path + sigstore/cosign keyless path. Pure-TS @noble crypto for Ed25519 — browser-safe.",
   "license": "Apache-2.0",
   "keywords": [