@gsengai/c2pa 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dev-certs/README.md

@@ -0,0 +1,21 @@
+# Development certificates — NOT TRUSTED, integration testing only
+
+> **⚠️ These are self-signed development certificates.** Anything signed with
+> them **fails public trust validation by design** (validators report
+> `signingCredential.untrusted`). They exist so the quickstart and the test
+> suite work with zero setup. **Never use them in production.** For the
+> production certificate path (CA-issued certificate meeting the C2PA trust
+> requirements, keys in a KMS/HSM), see [`docs/CERTIFICATES.md`](../../../docs/CERTIFICATES.md).
+
+Files:
+
+- `dev-cert-chain.pem` — ES256 (P-256) leaf signing certificate + self-signed dev root, leaf first. The leaf carries the C2PA claim-signing profile (critical `digitalSignature` key usage, `emailProtection` EKU, `CA:FALSE`).
+- `dev-private-key.pem` — the leaf's PKCS#8 private key. It is deliberately public: it protects nothing and must protect nothing.
+
+Regenerate with `scripts/gen-dev-certs.sh` from the repo root (requires `openssl`).
+
+`createImageSigner` falls back to these files when no `certPath`/`keyPath` is
+given and prints a one-time warning to stderr saying so.
+
+This library supports compliance with EU AI Act Article 50 and California
+SB 942; it does not make you compliant and is not legal advice.

package/dev-certs/dev-cert-chain.pem

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

package/dev-certs/dev-private-key.pem

@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgrRL6tQjn4SEMAr7F
+BG4BnlmJZsNUOH1GXzVZF8eLE6yhRANCAAQZmr8WnbYpkePJpM6VFZDWql/2Cvk7
+R0eSJVjfhqDtfyOo3n/JAcFa/rVMys+kDHGT2lYCCb9ox3lAiLIpUTar
+-----END PRIVATE KEY-----

package/dist/index.cjs

@@ -0,0 +1,224 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  GENERATOR_ASSERTION_LABEL: () => GENERATOR_ASSERTION_LABEL,
+  TRAINED_ALGORITHMIC_MEDIA: () => TRAINED_ALGORITHMIC_MEDIA,
+  createImageSigner: () => createImageSigner,
+  detectImageMime: () => detectImageMime,
+  readManifest: () => readManifest
+});
+module.exports = __toCommonJS(index_exports);
+
+// ../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_tsx@4.23.0_typescript@5.9.3/node_modules/tsup/assets/cjs_shims.js
+var getImportMetaUrl = () => typeof document === "undefined" ? new URL(`file:${__filename}`).href : document.currentScript && document.currentScript.tagName.toUpperCase() === "SCRIPT" ? document.currentScript.src : new URL("main.js", document.baseURI).href;
+var importMetaUrl = /* @__PURE__ */ getImportMetaUrl();
+
+// src/mime.ts
+var PNG_MAGIC = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]);
+function detectImageMime(bytes, what) {
+  const head = Buffer.from(bytes.buffer, bytes.byteOffset, Math.min(bytes.byteLength, 8));
+  if (head.length >= 8 && head.equals(PNG_MAGIC)) {
+    return "image/png";
+  }
+  if (head.length >= 3 && head[0] === 255 && head[1] === 216 && head[2] === 255) {
+    return "image/jpeg";
+  }
+  throw new TypeError(
+    `gsengai: ${what} is not a PNG or JPEG image (unrecognized magic bytes). Only PNG and JPEG are supported in the MVP.`
+  );
+}
+
+// src/read.ts
+var import_promises = require("fs/promises");
+var import_c2pa_node = require("@contentauth/c2pa-node");
+
+// src/settings.ts
+var OFFLINE_NO_VERIFY_SETTINGS = {
+  verify: {
+    verify_after_reading: false,
+    verify_after_sign: false,
+    verify_trust: false,
+    ocsp_fetch: false,
+    remote_manifest_fetch: false
+  },
+  trust: { verify_trust_list: false }
+};
+var OFFLINE_VALIDATE_SETTINGS = {
+  verify: {
+    verify_after_reading: true,
+    verify_trust: true,
+    ocsp_fetch: false,
+    remote_manifest_fetch: false
+  },
+  trust: { verify_trust_list: true }
+};
+
+// src/read.ts
+async function readManifest(input) {
+  const bytes = typeof input === "string" ? await (0, import_promises.readFile)(input) : Buffer.from(input);
+  const mimeType = detectImageMime(bytes, "input");
+  const reader = await import_c2pa_node.Reader.fromAsset({ buffer: bytes, mimeType }, OFFLINE_VALIDATE_SETTINGS);
+  if (!reader) {
+    return null;
+  }
+  const activeLabel = reader.activeLabel();
+  if (!activeLabel) {
+    return null;
+  }
+  const store = reader.json();
+  const active = reader.getActive();
+  const results = store.validation_results?.activeManifest;
+  return {
+    activeLabel,
+    ingredientCount: active?.ingredients?.length ?? 0,
+    validationState: store.validation_state ?? null,
+    validationStatusCodes: {
+      success: (results?.success ?? []).map((s) => s.code),
+      informational: (results?.informational ?? []).map((s) => s.code),
+      failure: (results?.failure ?? []).map((s) => s.code)
+    },
+    manifestLabels: Object.keys(store.manifests ?? {})
+  };
+}
+
+// src/signer.ts
+var import_node_fs = require("fs");
+var import_promises2 = require("fs/promises");
+var import_node_path = require("path");
+var import_node_url = require("url");
+var import_c2pa_node2 = require("@contentauth/c2pa-node");
+var import_core = require("@gsengai/core");
+var VERSION = "0.1.0";
+var GENERATOR_NAME = "gsengai-c2pa";
+var GENERATOR_ASSERTION_LABEL = "org.gsengai.generator";
+var TRAINED_ALGORITHMIC_MEDIA = "http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia";
+var DEV_CERT_PATH = (0, import_node_url.fileURLToPath)(new URL("../dev-certs/dev-cert-chain.pem", importMetaUrl));
+var DEV_KEY_PATH = (0, import_node_url.fileURLToPath)(new URL("../dev-certs/dev-private-key.pem", importMetaUrl));
+var devCertWarningShown = false;
+function warnIfDevCerts(certPath, keyPath) {
+  if (certPath && keyPath || devCertWarningShown) {
+    return;
+  }
+  devCertWarningShown = true;
+  console.warn(
+    "[gsengai] Using the bundled DEVELOPMENT certificates: signed manifests are UNTRUSTED by public validators and are for integration testing only. Provide certPath/keyPath with your own signing certificate for production \u2014 see docs/CERTIFICATES.md."
+  );
+}
+function createImageSigner(options) {
+  const { store, systemId, failMode } = options;
+  if (typeof systemId !== "string" || systemId.length === 0) {
+    throw new TypeError("gsengai: systemId must be a non-empty string");
+  }
+  warnIfDevCerts(options.certPath, options.keyPath);
+  const cert = (0, import_node_fs.readFileSync)(options.certPath ?? DEV_CERT_PATH);
+  const key = (0, import_node_fs.readFileSync)(options.keyPath ?? DEV_KEY_PATH);
+  const signer = import_c2pa_node2.LocalSigner.newSigner(cert, key, "es256");
+  return {
+    async signImage(sign) {
+      if (typeof sign.model !== "string" || sign.model.length === 0) {
+        throw new TypeError("gsengai: model must be a non-empty string");
+      }
+      const inputBytes = typeof sign.input === "string" ? await (0, import_promises2.readFile)(sign.input) : Buffer.from(sign.input);
+      const mimeType = detectImageMime(inputBytes, "signImage input");
+      const existing = await import_c2pa_node2.Reader.fromAsset(
+        { buffer: inputBytes, mimeType },
+        OFFLINE_NO_VERIFY_SETTINGS
+      );
+      const title = sign.output !== void 0 ? (0, import_node_path.basename)(sign.output) : typeof sign.input === "string" ? (0, import_node_path.basename)(sign.input) : mimeType === "image/png" ? "image.png" : "image.jpg";
+      const builder = import_c2pa_node2.Builder.withJson(
+        {
+          // The backend allows exactly one claim_generator_info entry (ADR-0019);
+          // model info lives in the created action and the org.gsengai.generator assertion.
+          claim_generator_info: [{ name: GENERATOR_NAME, version: VERSION }],
+          title
+        },
+        OFFLINE_NO_VERIFY_SETTINGS
+      );
+      const when = (/* @__PURE__ */ new Date()).toISOString();
+      if (existing) {
+        builder.setIntent("edit");
+      } else {
+        builder.setIntent({ create: TRAINED_ALGORITHMIC_MEDIA });
+        builder.addAction(
+          JSON.stringify({
+            action: "c2pa.created",
+            digitalSourceType: TRAINED_ALGORITHMIC_MEDIA,
+            softwareAgent: { name: sign.model },
+            when
+          })
+        );
+      }
+      builder.addAssertion(GENERATOR_ASSERTION_LABEL, {
+        generator: { name: GENERATOR_NAME, version: VERSION },
+        model: sign.model,
+        when
+      });
+      let signedBytes;
+      let output;
+      if (sign.output !== void 0) {
+        builder.sign(signer, { buffer: inputBytes, mimeType }, { path: sign.output });
+        signedBytes = await (0, import_promises2.readFile)(sign.output);
+        output = sign.output;
+      } else {
+        const dest = { buffer: null };
+        builder.sign(signer, { buffer: inputBytes, mimeType }, dest);
+        if (!dest.buffer) {
+          throw new Error("gsengai: signing produced no output buffer");
+        }
+        signedBytes = dest.buffer;
+        output = signedBytes;
+      }
+      const readBack = await import_c2pa_node2.Reader.fromAsset(
+        { buffer: signedBytes, mimeType },
+        OFFLINE_NO_VERIFY_SETTINGS
+      );
+      const manifestLabel = readBack?.activeLabel();
+      if (!manifestLabel) {
+        throw new Error("gsengai: signed output has no readable active manifest");
+      }
+      const record = (0, import_core.safeAppend)(
+        store,
+        {
+          modality: "image",
+          model: sign.model,
+          systemId,
+          outputBytes: signedBytes,
+          manifestRef: manifestLabel,
+          markingMethods: ["c2pa"],
+          promptHash: sign.promptHash ?? null,
+          disclosureContext: sign.disclosureContext ?? null
+        },
+        failMode
+      );
+      return { output, record, manifestLabel };
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GENERATOR_ASSERTION_LABEL,
+  TRAINED_ALGORITHMIC_MEDIA,
+  createImageSigner,
+  detectImageMime,
+  readManifest
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_tsx@4.23.0_typescript@5.9.3/node_modules/tsup/assets/cjs_shims.js","../src/mime.ts","../src/read.ts","../src/settings.ts","../src/signer.ts"],"sourcesContent":["// SPDX-License-Identifier: Apache-2.0\n\nexport type { ImageMime } from \"./mime\";\nexport { detectImageMime } from \"./mime\";\nexport type { ManifestSummary, ValidationStatusCodes } from \"./read\";\nexport { readManifest } from \"./read\";\nexport type {\n  CreateImageSignerOptions,\n  ImageSigner,\n  SignImageOptions,\n  SignImageResult,\n} from \"./signer\";\nexport {\n  createImageSigner,\n  GENERATOR_ASSERTION_LABEL,\n  TRAINED_ALGORITHMIC_MEDIA,\n} from \"./signer\";\n","// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","// SPDX-License-Identifier: Apache-2.0\n\nexport type ImageMime = \"image/png\" | \"image/jpeg\";\n\nconst PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);\n\n/**\n * Detect the image format from magic bytes. Only PNG and JPEG are supported in\n * the MVP (PRD B1); anything else — including corrupt or truncated data — throws.\n */\nexport function detectImageMime(bytes: Uint8Array, what: string): ImageMime {\n  const head = Buffer.from(bytes.buffer, bytes.byteOffset, Math.min(bytes.byteLength, 8));\n  if (head.length >= 8 && head.equals(PNG_MAGIC)) {\n    return \"image/png\";\n  }\n  if (head.length >= 3 && head[0] === 0xff && head[1] === 0xd8 && head[2] === 0xff) {\n    return \"image/jpeg\";\n  }\n  throw new TypeError(\n    `gsengai: ${what} is not a PNG or JPEG image (unrecognized magic bytes). ` +\n      \"Only PNG and JPEG are supported in the MVP.\",\n  );\n}\n","// SPDX-License-Identifier: Apache-2.0\nimport { readFile } from \"node:fs/promises\";\nimport { Reader } from \"@contentauth/c2pa-node\";\nimport { detectImageMime } from \"./mime\";\nimport { OFFLINE_VALIDATE_SETTINGS } from \"./settings\";\n\n/** Validation status codes as reported by the C2PA validator, grouped by outcome. */\nexport interface ValidationStatusCodes {\n  success: string[];\n  informational: string[];\n  failure: string[];\n}\n\n/** Summary of the C2PA manifest store embedded in an asset. */\nexport interface ManifestSummary {\n  /** Label of the active (most recent) manifest. */\n  activeLabel: string;\n  /** Number of ingredients on the active manifest (parents + components). */\n  ingredientCount: number;\n  /**\n   * Overall validation state as reported by the validator. Dev-cert-signed\n   * assets report a valid signature but an untrusted credential — see\n   * docs/CERTIFICATES.md; this library never claims trust it does not have.\n   */\n  validationState: string | null;\n  /** Exact validator status codes for the active manifest. */\n  validationStatusCodes: ValidationStatusCodes;\n  /** All manifest labels in the store — the provenance chain, active first is not guaranteed. */\n  manifestLabels: string[];\n}\n\ninterface ValidationResultsShape {\n  activeManifest?: {\n    success?: { code: string }[];\n    informational?: { code: string }[];\n    failure?: { code: string }[];\n  };\n}\n\n/**\n * Read and locally validate the C2PA manifest store of a PNG/JPEG asset.\n * Returns null when the asset carries no manifest. Never fetches anything\n * remote (no OCSP, no remote manifests); trust is evaluated against local\n * configuration only.\n */\nexport async function readManifest(input: string | Uint8Array): Promise<ManifestSummary | null> {\n  const bytes = typeof input === \"string\" ? await readFile(input) : Buffer.from(input);\n  const mimeType = detectImageMime(bytes, \"input\");\n  const reader = await Reader.fromAsset({ buffer: bytes, mimeType }, OFFLINE_VALIDATE_SETTINGS);\n  if (!reader) {\n    return null;\n  }\n  const activeLabel = reader.activeLabel();\n  if (!activeLabel) {\n    return null;\n  }\n  const store = reader.json() as {\n    manifests?: Record<string, unknown>;\n    validation_state?: string;\n    validation_results?: ValidationResultsShape;\n  };\n  const active = reader.getActive();\n  const results = store.validation_results?.activeManifest;\n  return {\n    activeLabel,\n    ingredientCount: active?.ingredients?.length ?? 0,\n    validationState: store.validation_state ?? null,\n    validationStatusCodes: {\n      success: (results?.success ?? []).map((s) => s.code),\n      informational: (results?.informational ?? []).map((s) => s.code),\n      failure: (results?.failure ?? []).map((s) => s.code),\n    },\n    manifestLabels: Object.keys(store.manifests ?? {}),\n  };\n}\n","// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Offline discipline: every Reader/Builder gets explicit\n * settings so no OCSP or remote-manifest fetch can occur at sign or read time,\n * and no TSA URL is ever configured. Trust evaluation stays local: it runs\n * against configured anchors only (none by default), which is what makes the\n * dev-cert `signingCredential.untrusted` status honest and reproducible.\n */\n\n/** Settings for signing and for existence-check reads: no verification, no fetches. */\nexport const OFFLINE_NO_VERIFY_SETTINGS = {\n  verify: {\n    verify_after_reading: false,\n    verify_after_sign: false,\n    verify_trust: false,\n    ocsp_fetch: false,\n    remote_manifest_fetch: false,\n  },\n  trust: { verify_trust_list: false },\n} as const;\n\n/** Settings for `readManifest`: full local validation including trust, still no fetches. */\nexport const OFFLINE_VALIDATE_SETTINGS = {\n  verify: {\n    verify_after_reading: true,\n    verify_trust: true,\n    ocsp_fetch: false,\n    remote_manifest_fetch: false,\n  },\n  trust: { verify_trust_list: true },\n} as const;\n","// SPDX-License-Identifier: Apache-2.0\nimport { readFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { basename } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { Builder, LocalSigner, Reader } from \"@contentauth/c2pa-node\";\nimport { type EvidenceRecord, type EvidenceStore, type FailMode, safeAppend } from \"@gsengai/core\";\nimport { detectImageMime } from \"./mime\";\nimport { OFFLINE_NO_VERIFY_SETTINGS } from \"./settings\";\n\nconst VERSION = \"0.1.0\";\nconst GENERATOR_NAME = \"gsengai-c2pa\";\n/** Label of the custom assertion carrying generator/model info on every signing (ADR-0019). */\nexport const GENERATOR_ASSERTION_LABEL = \"org.gsengai.generator\";\nexport const TRAINED_ALGORITHMIC_MEDIA =\n  \"http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia\";\n\nconst DEV_CERT_PATH = fileURLToPath(new URL(\"../dev-certs/dev-cert-chain.pem\", import.meta.url));\nconst DEV_KEY_PATH = fileURLToPath(new URL(\"../dev-certs/dev-private-key.pem\", import.meta.url));\n\nlet devCertWarningShown = false;\n\nexport interface CreateImageSignerOptions {\n  store: EvidenceStore;\n  /** Integrator's system/feature identifier — persisted as `system_id` (PRD §4). */\n  systemId: string;\n  /** PEM certificate chain (leaf first). Defaults to the bundled DEV certificates. */\n  certPath?: string;\n  /** PKCS#8 PEM private key for the leaf certificate. Defaults to the bundled DEV key. */\n  keyPath?: string;\n  /**\n   * Applies to evidence-store failures only (ADR-0017): `open` (default) warns,\n   * counts the lost record, and still returns the signed asset; `strict` throws.\n   * Signing failures always throw regardless of this setting.\n   */\n  failMode?: FailMode;\n}\n\nexport interface SignImageOptions {\n  /** Source image: file path or bytes. PNG and JPEG only (MVP). */\n  input: string | Uint8Array;\n  /** Destination file path. Omit to receive the signed asset as a Buffer. */\n  output?: string;\n  /** Model identifier that generated the image — recorded in the manifest and the evidence record. */\n  model: string;\n  /** Optional prompt hash (compute with `hashPrompt` from @gsengai/core). */\n  promptHash?: string | null;\n  disclosureContext?: string | null;\n}\n\nexport interface SignImageResult {\n  /** The signed asset: the `output` path when one was given, otherwise a Buffer. */\n  output: string | Buffer;\n  /** The appended evidence record; null only in fail-open mode when the store failed (the loss is counted). */\n  record: EvidenceRecord | null;\n  /** Active manifest label of the signed output, as reported by the C2PA reader (ADR-0018). */\n  manifestLabel: string;\n}\n\nexport interface ImageSigner {\n  /**\n   * Sign a PNG/JPEG with a C2PA manifest declaring AI generation and append one\n   * evidence record (PRD B6). If the input already carries a manifest it is\n   * preserved as the parent ingredient — never overwritten (PRD B3, ADR-0015).\n   */\n  signImage(options: SignImageOptions): Promise<SignImageResult>;\n}\n\nfunction warnIfDevCerts(certPath: string | undefined, keyPath: string | undefined): void {\n  if ((certPath && keyPath) || devCertWarningShown) {\n    return;\n  }\n  devCertWarningShown = true;\n  console.warn(\n    \"[gsengai] Using the bundled DEVELOPMENT certificates: signed manifests are UNTRUSTED \" +\n      \"by public validators and are for integration testing only. Provide certPath/keyPath \" +\n      \"with your own signing certificate for production — see docs/CERTIFICATES.md.\",\n  );\n}\n\nexport function createImageSigner(options: CreateImageSignerOptions): ImageSigner {\n  const { store, systemId, failMode } = options;\n  if (typeof systemId !== \"string\" || systemId.length === 0) {\n    throw new TypeError(\"gsengai: systemId must be a non-empty string\");\n  }\n  warnIfDevCerts(options.certPath, options.keyPath);\n  // Read eagerly so a bad path fails at construction, not at first sign.\n  const cert = readFileSync(options.certPath ?? DEV_CERT_PATH);\n  const key = readFileSync(options.keyPath ?? DEV_KEY_PATH);\n  const signer = LocalSigner.newSigner(cert, key, \"es256\"); // no TSA URL — offline by design\n\n  return {\n    async signImage(sign: SignImageOptions): Promise<SignImageResult> {\n      if (typeof sign.model !== \"string\" || sign.model.length === 0) {\n        throw new TypeError(\"gsengai: model must be a non-empty string\");\n      }\n      const inputBytes =\n        typeof sign.input === \"string\" ? await readFile(sign.input) : Buffer.from(sign.input);\n      const mimeType = detectImageMime(inputBytes, \"signImage input\");\n\n      // ADR-0015 intent mapping: existing manifest → edit + parent ingredient\n      // (chained, never overwritten); none → create + trainedAlgorithmicMedia.\n      const existing = await Reader.fromAsset(\n        { buffer: inputBytes, mimeType },\n        OFFLINE_NO_VERIFY_SETTINGS,\n      );\n      const title =\n        sign.output !== undefined\n          ? basename(sign.output)\n          : typeof sign.input === \"string\"\n            ? basename(sign.input)\n            : mimeType === \"image/png\"\n              ? \"image.png\"\n              : \"image.jpg\";\n      const builder = Builder.withJson(\n        {\n          // The backend allows exactly one claim_generator_info entry (ADR-0019);\n          // model info lives in the created action and the org.gsengai.generator assertion.\n          claim_generator_info: [{ name: GENERATOR_NAME, version: VERSION }],\n          title,\n        },\n        OFFLINE_NO_VERIFY_SETTINGS,\n      );\n      const when = new Date().toISOString();\n      if (existing) {\n        // Edit path: the builder generates the parent ingredient and its\n        // c2pa.opened action itself — adding our own opened action would drop\n        // the ingredient reference and fail validation (ADR-0019).\n        builder.setIntent(\"edit\");\n      } else {\n        builder.setIntent({ create: TRAINED_ALGORITHMIC_MEDIA });\n        builder.addAction(\n          JSON.stringify({\n            action: \"c2pa.created\",\n            digitalSourceType: TRAINED_ALGORITHMIC_MEDIA,\n            softwareAgent: { name: sign.model },\n            when,\n          }),\n        );\n      }\n      // Generator/model info + timestamp on both paths (PRD B2, ADR-0019).\n      builder.addAssertion(GENERATOR_ASSERTION_LABEL, {\n        generator: { name: GENERATOR_NAME, version: VERSION },\n        model: sign.model,\n        when,\n      });\n\n      // Signing failures always throw (ADR-0017) — nothing to fail open with.\n      let signedBytes: Buffer;\n      let output: string | Buffer;\n      if (sign.output !== undefined) {\n        builder.sign(signer, { buffer: inputBytes, mimeType }, { path: sign.output });\n        signedBytes = await readFile(sign.output);\n        output = sign.output;\n      } else {\n        const dest: { buffer: Buffer | null } = { buffer: null };\n        builder.sign(signer, { buffer: inputBytes, mimeType }, dest);\n        if (!dest.buffer) {\n          throw new Error(\"gsengai: signing produced no output buffer\");\n        }\n        signedBytes = dest.buffer;\n        output = signedBytes;\n      }\n\n      const readBack = await Reader.fromAsset(\n        { buffer: signedBytes, mimeType },\n        OFFLINE_NO_VERIFY_SETTINGS,\n      );\n      const manifestLabel = readBack?.activeLabel();\n      if (!manifestLabel) {\n        throw new Error(\"gsengai: signed output has no readable active manifest\");\n      }\n\n      // Evidence-store failures follow failMode (ADR-0017); output_hash is the\n      // sha256 of the signed output bytes, hashed centrally in core (ADR-0018).\n      const record = safeAppend(\n        store,\n        {\n          modality: \"image\",\n          model: sign.model,\n          systemId,\n          outputBytes: signedBytes,\n          manifestRef: manifestLabel,\n          markingMethods: [\"c2pa\"],\n          promptHash: sign.promptHash ?? null,\n          disclosureContext: sign.disclosureContext ?? null,\n        },\n        failMode,\n      );\n\n      return { output, record, manifestLabel };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,IAAM,mBAAmB,MACvB,OAAO,aAAa,cAChB,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,OAC7B,SAAS,iBAAiB,SAAS,cAAc,QAAQ,YAAY,MAAM,WAC1E,SAAS,cAAc,MACvB,IAAI,IAAI,WAAW,SAAS,OAAO,EAAE;AAEtC,IAAM,gBAAgC,iCAAiB;;;ACR9D,IAAM,YAAY,OAAO,KAAK,CAAC,KAAM,IAAM,IAAM,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC;AAMvE,SAAS,gBAAgB,OAAmB,MAAyB;AAC1E,QAAM,OAAO,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,KAAK,IAAI,MAAM,YAAY,CAAC,CAAC;AACtF,MAAI,KAAK,UAAU,KAAK,KAAK,OAAO,SAAS,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,MAAI,KAAK,UAAU,KAAK,KAAK,CAAC,MAAM,OAAQ,KAAK,CAAC,MAAM,OAAQ,KAAK,CAAC,MAAM,KAAM;AAChF,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AAAA,IACR,YAAY,IAAI;AAAA,EAElB;AACF;;;ACrBA,sBAAyB;AACzB,uBAAuB;;;ACShB,IAAM,6BAA6B;AAAA,EACxC,QAAQ;AAAA,IACN,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IACnB,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,uBAAuB;AAAA,EACzB;AAAA,EACA,OAAO,EAAE,mBAAmB,MAAM;AACpC;AAGO,IAAM,4BAA4B;AAAA,EACvC,QAAQ;AAAA,IACN,sBAAsB;AAAA,IACtB,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,uBAAuB;AAAA,EACzB;AAAA,EACA,OAAO,EAAE,mBAAmB,KAAK;AACnC;;;ADcA,eAAsB,aAAa,OAA6D;AAC9F,QAAM,QAAQ,OAAO,UAAU,WAAW,UAAM,0BAAS,KAAK,IAAI,OAAO,KAAK,KAAK;AACnF,QAAM,WAAW,gBAAgB,OAAO,OAAO;AAC/C,QAAM,SAAS,MAAM,wBAAO,UAAU,EAAE,QAAQ,OAAO,SAAS,GAAG,yBAAyB;AAC5F,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,QAAM,cAAc,OAAO,YAAY;AACvC,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,KAAK;AAK1B,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,UAAU,MAAM,oBAAoB;AAC1C,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,QAAQ,aAAa,UAAU;AAAA,IAChD,iBAAiB,MAAM,oBAAoB;AAAA,IAC3C,uBAAuB;AAAA,MACrB,UAAU,SAAS,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACnD,gBAAgB,SAAS,iBAAiB,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MAC/D,UAAU,SAAS,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACrD;AAAA,IACA,gBAAgB,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,EACnD;AACF;;;AEzEA,qBAA6B;AAC7B,IAAAA,mBAAyB;AACzB,uBAAyB;AACzB,sBAA8B;AAC9B,IAAAC,oBAA6C;AAC7C,kBAAmF;AAInF,IAAM,UAAU;AAChB,IAAM,iBAAiB;AAEhB,IAAM,4BAA4B;AAClC,IAAM,4BACX;AAEF,IAAM,oBAAgB,+BAAc,IAAI,IAAI,mCAAmC,aAAe,CAAC;AAC/F,IAAM,mBAAe,+BAAc,IAAI,IAAI,oCAAoC,aAAe,CAAC;AAE/F,IAAI,sBAAsB;AAgD1B,SAAS,eAAe,UAA8B,SAAmC;AACvF,MAAK,YAAY,WAAY,qBAAqB;AAChD;AAAA,EACF;AACA,wBAAsB;AACtB,UAAQ;AAAA,IACN;AAAA,EAGF;AACF;AAEO,SAAS,kBAAkB,SAAgD;AAChF,QAAM,EAAE,OAAO,UAAU,SAAS,IAAI;AACtC,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AACzD,UAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AACA,iBAAe,QAAQ,UAAU,QAAQ,OAAO;AAEhD,QAAM,WAAO,6BAAa,QAAQ,YAAY,aAAa;AAC3D,QAAM,UAAM,6BAAa,QAAQ,WAAW,YAAY;AACxD,QAAM,SAAS,8BAAY,UAAU,MAAM,KAAK,OAAO;AAEvD,SAAO;AAAA,IACL,MAAM,UAAU,MAAkD;AAChE,UAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,WAAW,GAAG;AAC7D,cAAM,IAAI,UAAU,2CAA2C;AAAA,MACjE;AACA,YAAM,aACJ,OAAO,KAAK,UAAU,WAAW,UAAM,2BAAS,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,KAAK;AACtF,YAAM,WAAW,gBAAgB,YAAY,iBAAiB;AAI9D,YAAM,WAAW,MAAM,yBAAO;AAAA,QAC5B,EAAE,QAAQ,YAAY,SAAS;AAAA,QAC/B;AAAA,MACF;AACA,YAAM,QACJ,KAAK,WAAW,aACZ,2BAAS,KAAK,MAAM,IACpB,OAAO,KAAK,UAAU,eACpB,2BAAS,KAAK,KAAK,IACnB,aAAa,cACX,cACA;AACV,YAAM,UAAU,0BAAQ;AAAA,QACtB;AAAA;AAAA;AAAA,UAGE,sBAAsB,CAAC,EAAE,MAAM,gBAAgB,SAAS,QAAQ,CAAC;AAAA,UACjE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,QAAO,oBAAI,KAAK,GAAE,YAAY;AACpC,UAAI,UAAU;AAIZ,gBAAQ,UAAU,MAAM;AAAA,MAC1B,OAAO;AACL,gBAAQ,UAAU,EAAE,QAAQ,0BAA0B,CAAC;AACvD,gBAAQ;AAAA,UACN,KAAK,UAAU;AAAA,YACb,QAAQ;AAAA,YACR,mBAAmB;AAAA,YACnB,eAAe,EAAE,MAAM,KAAK,MAAM;AAAA,YAClC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAEA,cAAQ,aAAa,2BAA2B;AAAA,QAC9C,WAAW,EAAE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,QACpD,OAAO,KAAK;AAAA,QACZ;AAAA,MACF,CAAC;AAGD,UAAI;AACJ,UAAI;AACJ,UAAI,KAAK,WAAW,QAAW;AAC7B,gBAAQ,KAAK,QAAQ,EAAE,QAAQ,YAAY,SAAS,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAC5E,sBAAc,UAAM,2BAAS,KAAK,MAAM;AACxC,iBAAS,KAAK;AAAA,MAChB,OAAO;AACL,cAAM,OAAkC,EAAE,QAAQ,KAAK;AACvD,gBAAQ,KAAK,QAAQ,EAAE,QAAQ,YAAY,SAAS,GAAG,IAAI;AAC3D,YAAI,CAAC,KAAK,QAAQ;AAChB,gBAAM,IAAI,MAAM,4CAA4C;AAAA,QAC9D;AACA,sBAAc,KAAK;AACnB,iBAAS;AAAA,MACX;AAEA,YAAM,WAAW,MAAM,yBAAO;AAAA,QAC5B,EAAE,QAAQ,aAAa,SAAS;AAAA,QAChC;AAAA,MACF;AACA,YAAM,gBAAgB,UAAU,YAAY;AAC5C,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,MAAM,wDAAwD;AAAA,MAC1E;AAIA,YAAM,aAAS;AAAA,QACb;AAAA,QACA;AAAA,UACE,UAAU;AAAA,UACV,OAAO,KAAK;AAAA,UACZ;AAAA,UACA,aAAa;AAAA,UACb,aAAa;AAAA,UACb,gBAAgB,CAAC,MAAM;AAAA,UACvB,YAAY,KAAK,cAAc;AAAA,UAC/B,mBAAmB,KAAK,qBAAqB;AAAA,QAC/C;AAAA,QACA;AAAA,MACF;AAEA,aAAO,EAAE,QAAQ,QAAQ,cAAc;AAAA,IACzC;AAAA,EACF;AACF;","names":["import_promises","import_c2pa_node"]}

package/dist/index.d.cts

@@ -0,0 +1,88 @@
+import { EvidenceStore, FailMode, EvidenceRecord } from '@gsengai/core';
+
+type ImageMime = "image/png" | "image/jpeg";
+/**
+ * Detect the image format from magic bytes. Only PNG and JPEG are supported in
+ * the MVP (PRD B1); anything else — including corrupt or truncated data — throws.
+ */
+declare function detectImageMime(bytes: Uint8Array, what: string): ImageMime;
+
+/** Validation status codes as reported by the C2PA validator, grouped by outcome. */
+interface ValidationStatusCodes {
+    success: string[];
+    informational: string[];
+    failure: string[];
+}
+/** Summary of the C2PA manifest store embedded in an asset. */
+interface ManifestSummary {
+    /** Label of the active (most recent) manifest. */
+    activeLabel: string;
+    /** Number of ingredients on the active manifest (parents + components). */
+    ingredientCount: number;
+    /**
+     * Overall validation state as reported by the validator. Dev-cert-signed
+     * assets report a valid signature but an untrusted credential — see
+     * docs/CERTIFICATES.md; this library never claims trust it does not have.
+     */
+    validationState: string | null;
+    /** Exact validator status codes for the active manifest. */
+    validationStatusCodes: ValidationStatusCodes;
+    /** All manifest labels in the store — the provenance chain, active first is not guaranteed. */
+    manifestLabels: string[];
+}
+/**
+ * Read and locally validate the C2PA manifest store of a PNG/JPEG asset.
+ * Returns null when the asset carries no manifest. Never fetches anything
+ * remote (no OCSP, no remote manifests); trust is evaluated against local
+ * configuration only.
+ */
+declare function readManifest(input: string | Uint8Array): Promise<ManifestSummary | null>;
+
+/** Label of the custom assertion carrying generator/model info on every signing (ADR-0019). */
+declare const GENERATOR_ASSERTION_LABEL = "org.gsengai.generator";
+declare const TRAINED_ALGORITHMIC_MEDIA = "http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia";
+interface CreateImageSignerOptions {
+    store: EvidenceStore;
+    /** Integrator's system/feature identifier — persisted as `system_id` (PRD §4). */
+    systemId: string;
+    /** PEM certificate chain (leaf first). Defaults to the bundled DEV certificates. */
+    certPath?: string;
+    /** PKCS#8 PEM private key for the leaf certificate. Defaults to the bundled DEV key. */
+    keyPath?: string;
+    /**
+     * Applies to evidence-store failures only (ADR-0017): `open` (default) warns,
+     * counts the lost record, and still returns the signed asset; `strict` throws.
+     * Signing failures always throw regardless of this setting.
+     */
+    failMode?: FailMode;
+}
+interface SignImageOptions {
+    /** Source image: file path or bytes. PNG and JPEG only (MVP). */
+    input: string | Uint8Array;
+    /** Destination file path. Omit to receive the signed asset as a Buffer. */
+    output?: string;
+    /** Model identifier that generated the image — recorded in the manifest and the evidence record. */
+    model: string;
+    /** Optional prompt hash (compute with `hashPrompt` from @gsengai/core). */
+    promptHash?: string | null;
+    disclosureContext?: string | null;
+}
+interface SignImageResult {
+    /** The signed asset: the `output` path when one was given, otherwise a Buffer. */
+    output: string | Buffer;
+    /** The appended evidence record; null only in fail-open mode when the store failed (the loss is counted). */
+    record: EvidenceRecord | null;
+    /** Active manifest label of the signed output, as reported by the C2PA reader (ADR-0018). */
+    manifestLabel: string;
+}
+interface ImageSigner {
+    /**
+     * Sign a PNG/JPEG with a C2PA manifest declaring AI generation and append one
+     * evidence record (PRD B6). If the input already carries a manifest it is
+     * preserved as the parent ingredient — never overwritten (PRD B3, ADR-0015).
+     */
+    signImage(options: SignImageOptions): Promise<SignImageResult>;
+}
+declare function createImageSigner(options: CreateImageSignerOptions): ImageSigner;
+
+export { type CreateImageSignerOptions, GENERATOR_ASSERTION_LABEL, type ImageMime, type ImageSigner, type ManifestSummary, type SignImageOptions, type SignImageResult, TRAINED_ALGORITHMIC_MEDIA, type ValidationStatusCodes, createImageSigner, detectImageMime, readManifest };

package/dist/index.d.ts

@@ -0,0 +1,88 @@
+import { EvidenceStore, FailMode, EvidenceRecord } from '@gsengai/core';
+
+type ImageMime = "image/png" | "image/jpeg";
+/**
+ * Detect the image format from magic bytes. Only PNG and JPEG are supported in
+ * the MVP (PRD B1); anything else — including corrupt or truncated data — throws.
+ */
+declare function detectImageMime(bytes: Uint8Array, what: string): ImageMime;
+
+/** Validation status codes as reported by the C2PA validator, grouped by outcome. */
+interface ValidationStatusCodes {
+    success: string[];
+    informational: string[];
+    failure: string[];
+}
+/** Summary of the C2PA manifest store embedded in an asset. */
+interface ManifestSummary {
+    /** Label of the active (most recent) manifest. */
+    activeLabel: string;
+    /** Number of ingredients on the active manifest (parents + components). */
+    ingredientCount: number;
+    /**
+     * Overall validation state as reported by the validator. Dev-cert-signed
+     * assets report a valid signature but an untrusted credential — see
+     * docs/CERTIFICATES.md; this library never claims trust it does not have.
+     */
+    validationState: string | null;
+    /** Exact validator status codes for the active manifest. */
+    validationStatusCodes: ValidationStatusCodes;
+    /** All manifest labels in the store — the provenance chain, active first is not guaranteed. */
+    manifestLabels: string[];
+}
+/**
+ * Read and locally validate the C2PA manifest store of a PNG/JPEG asset.
+ * Returns null when the asset carries no manifest. Never fetches anything
+ * remote (no OCSP, no remote manifests); trust is evaluated against local
+ * configuration only.
+ */
+declare function readManifest(input: string | Uint8Array): Promise<ManifestSummary | null>;
+
+/** Label of the custom assertion carrying generator/model info on every signing (ADR-0019). */
+declare const GENERATOR_ASSERTION_LABEL = "org.gsengai.generator";
+declare const TRAINED_ALGORITHMIC_MEDIA = "http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia";
+interface CreateImageSignerOptions {
+    store: EvidenceStore;
+    /** Integrator's system/feature identifier — persisted as `system_id` (PRD §4). */
+    systemId: string;
+    /** PEM certificate chain (leaf first). Defaults to the bundled DEV certificates. */
+    certPath?: string;
+    /** PKCS#8 PEM private key for the leaf certificate. Defaults to the bundled DEV key. */
+    keyPath?: string;
+    /**
+     * Applies to evidence-store failures only (ADR-0017): `open` (default) warns,
+     * counts the lost record, and still returns the signed asset; `strict` throws.
+     * Signing failures always throw regardless of this setting.
+     */
+    failMode?: FailMode;
+}
+interface SignImageOptions {
+    /** Source image: file path or bytes. PNG and JPEG only (MVP). */
+    input: string | Uint8Array;
+    /** Destination file path. Omit to receive the signed asset as a Buffer. */
+    output?: string;
+    /** Model identifier that generated the image — recorded in the manifest and the evidence record. */
+    model: string;
+    /** Optional prompt hash (compute with `hashPrompt` from @gsengai/core). */
+    promptHash?: string | null;
+    disclosureContext?: string | null;
+}
+interface SignImageResult {
+    /** The signed asset: the `output` path when one was given, otherwise a Buffer. */
+    output: string | Buffer;
+    /** The appended evidence record; null only in fail-open mode when the store failed (the loss is counted). */
+    record: EvidenceRecord | null;
+    /** Active manifest label of the signed output, as reported by the C2PA reader (ADR-0018). */
+    manifestLabel: string;
+}
+interface ImageSigner {
+    /**
+     * Sign a PNG/JPEG with a C2PA manifest declaring AI generation and append one
+     * evidence record (PRD B6). If the input already carries a manifest it is
+     * preserved as the parent ingredient — never overwritten (PRD B3, ADR-0015).
+     */
+    signImage(options: SignImageOptions): Promise<SignImageResult>;
+}
+declare function createImageSigner(options: CreateImageSignerOptions): ImageSigner;
+
+export { type CreateImageSignerOptions, GENERATOR_ASSERTION_LABEL, type ImageMime, type ImageSigner, type ManifestSummary, type SignImageOptions, type SignImageResult, TRAINED_ALGORITHMIC_MEDIA, type ValidationStatusCodes, createImageSigner, detectImageMime, readManifest };

package/dist/index.js

@@ -0,0 +1,189 @@
+// src/mime.ts
+var PNG_MAGIC = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]);
+function detectImageMime(bytes, what) {
+  const head = Buffer.from(bytes.buffer, bytes.byteOffset, Math.min(bytes.byteLength, 8));
+  if (head.length >= 8 && head.equals(PNG_MAGIC)) {
+    return "image/png";
+  }
+  if (head.length >= 3 && head[0] === 255 && head[1] === 216 && head[2] === 255) {
+    return "image/jpeg";
+  }
+  throw new TypeError(
+    `gsengai: ${what} is not a PNG or JPEG image (unrecognized magic bytes). Only PNG and JPEG are supported in the MVP.`
+  );
+}
+
+// src/read.ts
+import { readFile } from "fs/promises";
+import { Reader } from "@contentauth/c2pa-node";
+
+// src/settings.ts
+var OFFLINE_NO_VERIFY_SETTINGS = {
+  verify: {
+    verify_after_reading: false,
+    verify_after_sign: false,
+    verify_trust: false,
+    ocsp_fetch: false,
+    remote_manifest_fetch: false
+  },
+  trust: { verify_trust_list: false }
+};
+var OFFLINE_VALIDATE_SETTINGS = {
+  verify: {
+    verify_after_reading: true,
+    verify_trust: true,
+    ocsp_fetch: false,
+    remote_manifest_fetch: false
+  },
+  trust: { verify_trust_list: true }
+};
+
+// src/read.ts
+async function readManifest(input) {
+  const bytes = typeof input === "string" ? await readFile(input) : Buffer.from(input);
+  const mimeType = detectImageMime(bytes, "input");
+  const reader = await Reader.fromAsset({ buffer: bytes, mimeType }, OFFLINE_VALIDATE_SETTINGS);
+  if (!reader) {
+    return null;
+  }
+  const activeLabel = reader.activeLabel();
+  if (!activeLabel) {
+    return null;
+  }
+  const store = reader.json();
+  const active = reader.getActive();
+  const results = store.validation_results?.activeManifest;
+  return {
+    activeLabel,
+    ingredientCount: active?.ingredients?.length ?? 0,
+    validationState: store.validation_state ?? null,
+    validationStatusCodes: {
+      success: (results?.success ?? []).map((s) => s.code),
+      informational: (results?.informational ?? []).map((s) => s.code),
+      failure: (results?.failure ?? []).map((s) => s.code)
+    },
+    manifestLabels: Object.keys(store.manifests ?? {})
+  };
+}
+
+// src/signer.ts
+import { readFileSync } from "fs";
+import { readFile as readFile2 } from "fs/promises";
+import { basename } from "path";
+import { fileURLToPath } from "url";
+import { Builder, LocalSigner, Reader as Reader2 } from "@contentauth/c2pa-node";
+import { safeAppend } from "@gsengai/core";
+var VERSION = "0.1.0";
+var GENERATOR_NAME = "gsengai-c2pa";
+var GENERATOR_ASSERTION_LABEL = "org.gsengai.generator";
+var TRAINED_ALGORITHMIC_MEDIA = "http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia";
+var DEV_CERT_PATH = fileURLToPath(new URL("../dev-certs/dev-cert-chain.pem", import.meta.url));
+var DEV_KEY_PATH = fileURLToPath(new URL("../dev-certs/dev-private-key.pem", import.meta.url));
+var devCertWarningShown = false;
+function warnIfDevCerts(certPath, keyPath) {
+  if (certPath && keyPath || devCertWarningShown) {
+    return;
+  }
+  devCertWarningShown = true;
+  console.warn(
+    "[gsengai] Using the bundled DEVELOPMENT certificates: signed manifests are UNTRUSTED by public validators and are for integration testing only. Provide certPath/keyPath with your own signing certificate for production \u2014 see docs/CERTIFICATES.md."
+  );
+}
+function createImageSigner(options) {
+  const { store, systemId, failMode } = options;
+  if (typeof systemId !== "string" || systemId.length === 0) {
+    throw new TypeError("gsengai: systemId must be a non-empty string");
+  }
+  warnIfDevCerts(options.certPath, options.keyPath);
+  const cert = readFileSync(options.certPath ?? DEV_CERT_PATH);
+  const key = readFileSync(options.keyPath ?? DEV_KEY_PATH);
+  const signer = LocalSigner.newSigner(cert, key, "es256");
+  return {
+    async signImage(sign) {
+      if (typeof sign.model !== "string" || sign.model.length === 0) {
+        throw new TypeError("gsengai: model must be a non-empty string");
+      }
+      const inputBytes = typeof sign.input === "string" ? await readFile2(sign.input) : Buffer.from(sign.input);
+      const mimeType = detectImageMime(inputBytes, "signImage input");
+      const existing = await Reader2.fromAsset(
+        { buffer: inputBytes, mimeType },
+        OFFLINE_NO_VERIFY_SETTINGS
+      );
+      const title = sign.output !== void 0 ? basename(sign.output) : typeof sign.input === "string" ? basename(sign.input) : mimeType === "image/png" ? "image.png" : "image.jpg";
+      const builder = Builder.withJson(
+        {
+          // The backend allows exactly one claim_generator_info entry (ADR-0019);
+          // model info lives in the created action and the org.gsengai.generator assertion.
+          claim_generator_info: [{ name: GENERATOR_NAME, version: VERSION }],
+          title
+        },
+        OFFLINE_NO_VERIFY_SETTINGS
+      );
+      const when = (/* @__PURE__ */ new Date()).toISOString();
+      if (existing) {
+        builder.setIntent("edit");
+      } else {
+        builder.setIntent({ create: TRAINED_ALGORITHMIC_MEDIA });
+        builder.addAction(
+          JSON.stringify({
+            action: "c2pa.created",
+            digitalSourceType: TRAINED_ALGORITHMIC_MEDIA,
+            softwareAgent: { name: sign.model },
+            when
+          })
+        );
+      }
+      builder.addAssertion(GENERATOR_ASSERTION_LABEL, {
+        generator: { name: GENERATOR_NAME, version: VERSION },
+        model: sign.model,
+        when
+      });
+      let signedBytes;
+      let output;
+      if (sign.output !== void 0) {
+        builder.sign(signer, { buffer: inputBytes, mimeType }, { path: sign.output });
+        signedBytes = await readFile2(sign.output);
+        output = sign.output;
+      } else {
+        const dest = { buffer: null };
+        builder.sign(signer, { buffer: inputBytes, mimeType }, dest);
+        if (!dest.buffer) {
+          throw new Error("gsengai: signing produced no output buffer");
+        }
+        signedBytes = dest.buffer;
+        output = signedBytes;
+      }
+      const readBack = await Reader2.fromAsset(
+        { buffer: signedBytes, mimeType },
+        OFFLINE_NO_VERIFY_SETTINGS
+      );
+      const manifestLabel = readBack?.activeLabel();
+      if (!manifestLabel) {
+        throw new Error("gsengai: signed output has no readable active manifest");
+      }
+      const record = safeAppend(
+        store,
+        {
+          modality: "image",
+          model: sign.model,
+          systemId,
+          outputBytes: signedBytes,
+          manifestRef: manifestLabel,
+          markingMethods: ["c2pa"],
+          promptHash: sign.promptHash ?? null,
+          disclosureContext: sign.disclosureContext ?? null
+        },
+        failMode
+      );
+      return { output, record, manifestLabel };
+    }
+  };
+}
+export {
+  GENERATOR_ASSERTION_LABEL,
+  TRAINED_ALGORITHMIC_MEDIA,
+  createImageSigner,
+  detectImageMime,
+  readManifest
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mime.ts","../src/read.ts","../src/settings.ts","../src/signer.ts"],"sourcesContent":["// SPDX-License-Identifier: Apache-2.0\n\nexport type ImageMime = \"image/png\" | \"image/jpeg\";\n\nconst PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);\n\n/**\n * Detect the image format from magic bytes. Only PNG and JPEG are supported in\n * the MVP (PRD B1); anything else — including corrupt or truncated data — throws.\n */\nexport function detectImageMime(bytes: Uint8Array, what: string): ImageMime {\n  const head = Buffer.from(bytes.buffer, bytes.byteOffset, Math.min(bytes.byteLength, 8));\n  if (head.length >= 8 && head.equals(PNG_MAGIC)) {\n    return \"image/png\";\n  }\n  if (head.length >= 3 && head[0] === 0xff && head[1] === 0xd8 && head[2] === 0xff) {\n    return \"image/jpeg\";\n  }\n  throw new TypeError(\n    `gsengai: ${what} is not a PNG or JPEG image (unrecognized magic bytes). ` +\n      \"Only PNG and JPEG are supported in the MVP.\",\n  );\n}\n","// SPDX-License-Identifier: Apache-2.0\nimport { readFile } from \"node:fs/promises\";\nimport { Reader } from \"@contentauth/c2pa-node\";\nimport { detectImageMime } from \"./mime\";\nimport { OFFLINE_VALIDATE_SETTINGS } from \"./settings\";\n\n/** Validation status codes as reported by the C2PA validator, grouped by outcome. */\nexport interface ValidationStatusCodes {\n  success: string[];\n  informational: string[];\n  failure: string[];\n}\n\n/** Summary of the C2PA manifest store embedded in an asset. */\nexport interface ManifestSummary {\n  /** Label of the active (most recent) manifest. */\n  activeLabel: string;\n  /** Number of ingredients on the active manifest (parents + components). */\n  ingredientCount: number;\n  /**\n   * Overall validation state as reported by the validator. Dev-cert-signed\n   * assets report a valid signature but an untrusted credential — see\n   * docs/CERTIFICATES.md; this library never claims trust it does not have.\n   */\n  validationState: string | null;\n  /** Exact validator status codes for the active manifest. */\n  validationStatusCodes: ValidationStatusCodes;\n  /** All manifest labels in the store — the provenance chain, active first is not guaranteed. */\n  manifestLabels: string[];\n}\n\ninterface ValidationResultsShape {\n  activeManifest?: {\n    success?: { code: string }[];\n    informational?: { code: string }[];\n    failure?: { code: string }[];\n  };\n}\n\n/**\n * Read and locally validate the C2PA manifest store of a PNG/JPEG asset.\n * Returns null when the asset carries no manifest. Never fetches anything\n * remote (no OCSP, no remote manifests); trust is evaluated against local\n * configuration only.\n */\nexport async function readManifest(input: string | Uint8Array): Promise<ManifestSummary | null> {\n  const bytes = typeof input === \"string\" ? await readFile(input) : Buffer.from(input);\n  const mimeType = detectImageMime(bytes, \"input\");\n  const reader = await Reader.fromAsset({ buffer: bytes, mimeType }, OFFLINE_VALIDATE_SETTINGS);\n  if (!reader) {\n    return null;\n  }\n  const activeLabel = reader.activeLabel();\n  if (!activeLabel) {\n    return null;\n  }\n  const store = reader.json() as {\n    manifests?: Record<string, unknown>;\n    validation_state?: string;\n    validation_results?: ValidationResultsShape;\n  };\n  const active = reader.getActive();\n  const results = store.validation_results?.activeManifest;\n  return {\n    activeLabel,\n    ingredientCount: active?.ingredients?.length ?? 0,\n    validationState: store.validation_state ?? null,\n    validationStatusCodes: {\n      success: (results?.success ?? []).map((s) => s.code),\n      informational: (results?.informational ?? []).map((s) => s.code),\n      failure: (results?.failure ?? []).map((s) => s.code),\n    },\n    manifestLabels: Object.keys(store.manifests ?? {}),\n  };\n}\n","// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Offline discipline: every Reader/Builder gets explicit\n * settings so no OCSP or remote-manifest fetch can occur at sign or read time,\n * and no TSA URL is ever configured. Trust evaluation stays local: it runs\n * against configured anchors only (none by default), which is what makes the\n * dev-cert `signingCredential.untrusted` status honest and reproducible.\n */\n\n/** Settings for signing and for existence-check reads: no verification, no fetches. */\nexport const OFFLINE_NO_VERIFY_SETTINGS = {\n  verify: {\n    verify_after_reading: false,\n    verify_after_sign: false,\n    verify_trust: false,\n    ocsp_fetch: false,\n    remote_manifest_fetch: false,\n  },\n  trust: { verify_trust_list: false },\n} as const;\n\n/** Settings for `readManifest`: full local validation including trust, still no fetches. */\nexport const OFFLINE_VALIDATE_SETTINGS = {\n  verify: {\n    verify_after_reading: true,\n    verify_trust: true,\n    ocsp_fetch: false,\n    remote_manifest_fetch: false,\n  },\n  trust: { verify_trust_list: true },\n} as const;\n","// SPDX-License-Identifier: Apache-2.0\nimport { readFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { basename } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { Builder, LocalSigner, Reader } from \"@contentauth/c2pa-node\";\nimport { type EvidenceRecord, type EvidenceStore, type FailMode, safeAppend } from \"@gsengai/core\";\nimport { detectImageMime } from \"./mime\";\nimport { OFFLINE_NO_VERIFY_SETTINGS } from \"./settings\";\n\nconst VERSION = \"0.1.0\";\nconst GENERATOR_NAME = \"gsengai-c2pa\";\n/** Label of the custom assertion carrying generator/model info on every signing (ADR-0019). */\nexport const GENERATOR_ASSERTION_LABEL = \"org.gsengai.generator\";\nexport const TRAINED_ALGORITHMIC_MEDIA =\n  \"http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia\";\n\nconst DEV_CERT_PATH = fileURLToPath(new URL(\"../dev-certs/dev-cert-chain.pem\", import.meta.url));\nconst DEV_KEY_PATH = fileURLToPath(new URL(\"../dev-certs/dev-private-key.pem\", import.meta.url));\n\nlet devCertWarningShown = false;\n\nexport interface CreateImageSignerOptions {\n  store: EvidenceStore;\n  /** Integrator's system/feature identifier — persisted as `system_id` (PRD §4). */\n  systemId: string;\n  /** PEM certificate chain (leaf first). Defaults to the bundled DEV certificates. */\n  certPath?: string;\n  /** PKCS#8 PEM private key for the leaf certificate. Defaults to the bundled DEV key. */\n  keyPath?: string;\n  /**\n   * Applies to evidence-store failures only (ADR-0017): `open` (default) warns,\n   * counts the lost record, and still returns the signed asset; `strict` throws.\n   * Signing failures always throw regardless of this setting.\n   */\n  failMode?: FailMode;\n}\n\nexport interface SignImageOptions {\n  /** Source image: file path or bytes. PNG and JPEG only (MVP). */\n  input: string | Uint8Array;\n  /** Destination file path. Omit to receive the signed asset as a Buffer. */\n  output?: string;\n  /** Model identifier that generated the image — recorded in the manifest and the evidence record. */\n  model: string;\n  /** Optional prompt hash (compute with `hashPrompt` from @gsengai/core). */\n  promptHash?: string | null;\n  disclosureContext?: string | null;\n}\n\nexport interface SignImageResult {\n  /** The signed asset: the `output` path when one was given, otherwise a Buffer. */\n  output: string | Buffer;\n  /** The appended evidence record; null only in fail-open mode when the store failed (the loss is counted). */\n  record: EvidenceRecord | null;\n  /** Active manifest label of the signed output, as reported by the C2PA reader (ADR-0018). */\n  manifestLabel: string;\n}\n\nexport interface ImageSigner {\n  /**\n   * Sign a PNG/JPEG with a C2PA manifest declaring AI generation and append one\n   * evidence record (PRD B6). If the input already carries a manifest it is\n   * preserved as the parent ingredient — never overwritten (PRD B3, ADR-0015).\n   */\n  signImage(options: SignImageOptions): Promise<SignImageResult>;\n}\n\nfunction warnIfDevCerts(certPath: string | undefined, keyPath: string | undefined): void {\n  if ((certPath && keyPath) || devCertWarningShown) {\n    return;\n  }\n  devCertWarningShown = true;\n  console.warn(\n    \"[gsengai] Using the bundled DEVELOPMENT certificates: signed manifests are UNTRUSTED \" +\n      \"by public validators and are for integration testing only. Provide certPath/keyPath \" +\n      \"with your own signing certificate for production — see docs/CERTIFICATES.md.\",\n  );\n}\n\nexport function createImageSigner(options: CreateImageSignerOptions): ImageSigner {\n  const { store, systemId, failMode } = options;\n  if (typeof systemId !== \"string\" || systemId.length === 0) {\n    throw new TypeError(\"gsengai: systemId must be a non-empty string\");\n  }\n  warnIfDevCerts(options.certPath, options.keyPath);\n  // Read eagerly so a bad path fails at construction, not at first sign.\n  const cert = readFileSync(options.certPath ?? DEV_CERT_PATH);\n  const key = readFileSync(options.keyPath ?? DEV_KEY_PATH);\n  const signer = LocalSigner.newSigner(cert, key, \"es256\"); // no TSA URL — offline by design\n\n  return {\n    async signImage(sign: SignImageOptions): Promise<SignImageResult> {\n      if (typeof sign.model !== \"string\" || sign.model.length === 0) {\n        throw new TypeError(\"gsengai: model must be a non-empty string\");\n      }\n      const inputBytes =\n        typeof sign.input === \"string\" ? await readFile(sign.input) : Buffer.from(sign.input);\n      const mimeType = detectImageMime(inputBytes, \"signImage input\");\n\n      // ADR-0015 intent mapping: existing manifest → edit + parent ingredient\n      // (chained, never overwritten); none → create + trainedAlgorithmicMedia.\n      const existing = await Reader.fromAsset(\n        { buffer: inputBytes, mimeType },\n        OFFLINE_NO_VERIFY_SETTINGS,\n      );\n      const title =\n        sign.output !== undefined\n          ? basename(sign.output)\n          : typeof sign.input === \"string\"\n            ? basename(sign.input)\n            : mimeType === \"image/png\"\n              ? \"image.png\"\n              : \"image.jpg\";\n      const builder = Builder.withJson(\n        {\n          // The backend allows exactly one claim_generator_info entry (ADR-0019);\n          // model info lives in the created action and the org.gsengai.generator assertion.\n          claim_generator_info: [{ name: GENERATOR_NAME, version: VERSION }],\n          title,\n        },\n        OFFLINE_NO_VERIFY_SETTINGS,\n      );\n      const when = new Date().toISOString();\n      if (existing) {\n        // Edit path: the builder generates the parent ingredient and its\n        // c2pa.opened action itself — adding our own opened action would drop\n        // the ingredient reference and fail validation (ADR-0019).\n        builder.setIntent(\"edit\");\n      } else {\n        builder.setIntent({ create: TRAINED_ALGORITHMIC_MEDIA });\n        builder.addAction(\n          JSON.stringify({\n            action: \"c2pa.created\",\n            digitalSourceType: TRAINED_ALGORITHMIC_MEDIA,\n            softwareAgent: { name: sign.model },\n            when,\n          }),\n        );\n      }\n      // Generator/model info + timestamp on both paths (PRD B2, ADR-0019).\n      builder.addAssertion(GENERATOR_ASSERTION_LABEL, {\n        generator: { name: GENERATOR_NAME, version: VERSION },\n        model: sign.model,\n        when,\n      });\n\n      // Signing failures always throw (ADR-0017) — nothing to fail open with.\n      let signedBytes: Buffer;\n      let output: string | Buffer;\n      if (sign.output !== undefined) {\n        builder.sign(signer, { buffer: inputBytes, mimeType }, { path: sign.output });\n        signedBytes = await readFile(sign.output);\n        output = sign.output;\n      } else {\n        const dest: { buffer: Buffer | null } = { buffer: null };\n        builder.sign(signer, { buffer: inputBytes, mimeType }, dest);\n        if (!dest.buffer) {\n          throw new Error(\"gsengai: signing produced no output buffer\");\n        }\n        signedBytes = dest.buffer;\n        output = signedBytes;\n      }\n\n      const readBack = await Reader.fromAsset(\n        { buffer: signedBytes, mimeType },\n        OFFLINE_NO_VERIFY_SETTINGS,\n      );\n      const manifestLabel = readBack?.activeLabel();\n      if (!manifestLabel) {\n        throw new Error(\"gsengai: signed output has no readable active manifest\");\n      }\n\n      // Evidence-store failures follow failMode (ADR-0017); output_hash is the\n      // sha256 of the signed output bytes, hashed centrally in core (ADR-0018).\n      const record = safeAppend(\n        store,\n        {\n          modality: \"image\",\n          model: sign.model,\n          systemId,\n          outputBytes: signedBytes,\n          manifestRef: manifestLabel,\n          markingMethods: [\"c2pa\"],\n          promptHash: sign.promptHash ?? null,\n          disclosureContext: sign.disclosureContext ?? null,\n        },\n        failMode,\n      );\n\n      return { output, record, manifestLabel };\n    },\n  };\n}\n"],"mappings":";AAIA,IAAM,YAAY,OAAO,KAAK,CAAC,KAAM,IAAM,IAAM,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC;AAMvE,SAAS,gBAAgB,OAAmB,MAAyB;AAC1E,QAAM,OAAO,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,KAAK,IAAI,MAAM,YAAY,CAAC,CAAC;AACtF,MAAI,KAAK,UAAU,KAAK,KAAK,OAAO,SAAS,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,MAAI,KAAK,UAAU,KAAK,KAAK,CAAC,MAAM,OAAQ,KAAK,CAAC,MAAM,OAAQ,KAAK,CAAC,MAAM,KAAM;AAChF,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AAAA,IACR,YAAY,IAAI;AAAA,EAElB;AACF;;;ACrBA,SAAS,gBAAgB;AACzB,SAAS,cAAc;;;ACShB,IAAM,6BAA6B;AAAA,EACxC,QAAQ;AAAA,IACN,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IACnB,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,uBAAuB;AAAA,EACzB;AAAA,EACA,OAAO,EAAE,mBAAmB,MAAM;AACpC;AAGO,IAAM,4BAA4B;AAAA,EACvC,QAAQ;AAAA,IACN,sBAAsB;AAAA,IACtB,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,uBAAuB;AAAA,EACzB;AAAA,EACA,OAAO,EAAE,mBAAmB,KAAK;AACnC;;;ADcA,eAAsB,aAAa,OAA6D;AAC9F,QAAM,QAAQ,OAAO,UAAU,WAAW,MAAM,SAAS,KAAK,IAAI,OAAO,KAAK,KAAK;AACnF,QAAM,WAAW,gBAAgB,OAAO,OAAO;AAC/C,QAAM,SAAS,MAAM,OAAO,UAAU,EAAE,QAAQ,OAAO,SAAS,GAAG,yBAAyB;AAC5F,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,QAAM,cAAc,OAAO,YAAY;AACvC,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,KAAK;AAK1B,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,UAAU,MAAM,oBAAoB;AAC1C,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,QAAQ,aAAa,UAAU;AAAA,IAChD,iBAAiB,MAAM,oBAAoB;AAAA,IAC3C,uBAAuB;AAAA,MACrB,UAAU,SAAS,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACnD,gBAAgB,SAAS,iBAAiB,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MAC/D,UAAU,SAAS,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACrD;AAAA,IACA,gBAAgB,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,EACnD;AACF;;;AEzEA,SAAS,oBAAoB;AAC7B,SAAS,YAAAA,iBAAgB;AACzB,SAAS,gBAAgB;AACzB,SAAS,qBAAqB;AAC9B,SAAS,SAAS,aAAa,UAAAC,eAAc;AAC7C,SAAiE,kBAAkB;AAInF,IAAM,UAAU;AAChB,IAAM,iBAAiB;AAEhB,IAAM,4BAA4B;AAClC,IAAM,4BACX;AAEF,IAAM,gBAAgB,cAAc,IAAI,IAAI,mCAAmC,YAAY,GAAG,CAAC;AAC/F,IAAM,eAAe,cAAc,IAAI,IAAI,oCAAoC,YAAY,GAAG,CAAC;AAE/F,IAAI,sBAAsB;AAgD1B,SAAS,eAAe,UAA8B,SAAmC;AACvF,MAAK,YAAY,WAAY,qBAAqB;AAChD;AAAA,EACF;AACA,wBAAsB;AACtB,UAAQ;AAAA,IACN;AAAA,EAGF;AACF;AAEO,SAAS,kBAAkB,SAAgD;AAChF,QAAM,EAAE,OAAO,UAAU,SAAS,IAAI;AACtC,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AACzD,UAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AACA,iBAAe,QAAQ,UAAU,QAAQ,OAAO;AAEhD,QAAM,OAAO,aAAa,QAAQ,YAAY,aAAa;AAC3D,QAAM,MAAM,aAAa,QAAQ,WAAW,YAAY;AACxD,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK,OAAO;AAEvD,SAAO;AAAA,IACL,MAAM,UAAU,MAAkD;AAChE,UAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,WAAW,GAAG;AAC7D,cAAM,IAAI,UAAU,2CAA2C;AAAA,MACjE;AACA,YAAM,aACJ,OAAO,KAAK,UAAU,WAAW,MAAMC,UAAS,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,KAAK;AACtF,YAAM,WAAW,gBAAgB,YAAY,iBAAiB;AAI9D,YAAM,WAAW,MAAMC,QAAO;AAAA,QAC5B,EAAE,QAAQ,YAAY,SAAS;AAAA,QAC/B;AAAA,MACF;AACA,YAAM,QACJ,KAAK,WAAW,SACZ,SAAS,KAAK,MAAM,IACpB,OAAO,KAAK,UAAU,WACpB,SAAS,KAAK,KAAK,IACnB,aAAa,cACX,cACA;AACV,YAAM,UAAU,QAAQ;AAAA,QACtB;AAAA;AAAA;AAAA,UAGE,sBAAsB,CAAC,EAAE,MAAM,gBAAgB,SAAS,QAAQ,CAAC;AAAA,UACjE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,QAAO,oBAAI,KAAK,GAAE,YAAY;AACpC,UAAI,UAAU;AAIZ,gBAAQ,UAAU,MAAM;AAAA,MAC1B,OAAO;AACL,gBAAQ,UAAU,EAAE,QAAQ,0BAA0B,CAAC;AACvD,gBAAQ;AAAA,UACN,KAAK,UAAU;AAAA,YACb,QAAQ;AAAA,YACR,mBAAmB;AAAA,YACnB,eAAe,EAAE,MAAM,KAAK,MAAM;AAAA,YAClC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAEA,cAAQ,aAAa,2BAA2B;AAAA,QAC9C,WAAW,EAAE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,QACpD,OAAO,KAAK;AAAA,QACZ;AAAA,MACF,CAAC;AAGD,UAAI;AACJ,UAAI;AACJ,UAAI,KAAK,WAAW,QAAW;AAC7B,gBAAQ,KAAK,QAAQ,EAAE,QAAQ,YAAY,SAAS,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAC5E,sBAAc,MAAMD,UAAS,KAAK,MAAM;AACxC,iBAAS,KAAK;AAAA,MAChB,OAAO;AACL,cAAM,OAAkC,EAAE,QAAQ,KAAK;AACvD,gBAAQ,KAAK,QAAQ,EAAE,QAAQ,YAAY,SAAS,GAAG,IAAI;AAC3D,YAAI,CAAC,KAAK,QAAQ;AAChB,gBAAM,IAAI,MAAM,4CAA4C;AAAA,QAC9D;AACA,sBAAc,KAAK;AACnB,iBAAS;AAAA,MACX;AAEA,YAAM,WAAW,MAAMC,QAAO;AAAA,QAC5B,EAAE,QAAQ,aAAa,SAAS;AAAA,QAChC;AAAA,MACF;AACA,YAAM,gBAAgB,UAAU,YAAY;AAC5C,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,MAAM,wDAAwD;AAAA,MAC1E;AAIA,YAAM,SAAS;AAAA,QACb;AAAA,QACA;AAAA,UACE,UAAU;AAAA,UACV,OAAO,KAAK;AAAA,UACZ;AAAA,UACA,aAAa;AAAA,UACb,aAAa;AAAA,UACb,gBAAgB,CAAC,MAAM;AAAA,UACvB,YAAY,KAAK,cAAc;AAAA,UAC/B,mBAAmB,KAAK,qBAAqB;AAAA,QAC/C;AAAA,QACA;AAAA,MACF;AAEA,aAAO,EAAE,QAAQ,QAAQ,cAAc;AAAA,IACzC;AAAA,EACF;AACF;","names":["readFile","Reader","readFile","Reader"]}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@gsengai/c2pa",
+  "version": "0.1.0",
+  "private": false,
+  "description": "C2PA image signing for AI-generated media: signed manifests with AI-generation assertions, ingredient preservation, evidence record per signing. Supports compliance with EU AI Act Article 50 and California SB 942. Not legal advice.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "dev-certs"
+  ],
+  "dependencies": {
+    "@contentauth/c2pa-node": "0.6.0",
+    "@gsengai/core": "^0.1.0"
+  },
+  "devDependencies": {
+    "@contentauth/c2pa-types": "^0.7.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.6.0"
+  },
+  "author": "Dominik Ertl",
+  "keywords": [
+    "eu-ai-act",
+    "ai-act",
+    "article-50",
+    "sb-942",
+    "ai-transparency",
+    "ai-disclosure",
+    "ai-compliance",
+    "content-provenance",
+    "c2pa",
+    "content-credentials",
+    "provenance",
+    "image-signing"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gsengai/gsengai.git",
+    "directory": "packages/c2pa"
+  },
+  "homepage": "https://github.com/gsengai/gsengai/tree/main/packages/c2pa#readme",
+  "bugs": "https://github.com/gsengai/gsengai/issues",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup"
+  }
+}