@jeger-ai/opengantry 3.1.0 → 3.2.0

package/dist/cli/lib/perimeter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"perimeter.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,eAAO,MAAM,2BAA2B,kGAI9B,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAWhD,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAGzF;AASD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAsB/F;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,oBAAoB,CAqBtB;AAkDD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAmGD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,CA2CtB"}
+{"version":3,"file":"perimeter.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,eAAO,MAAM,2BAA2B,kGAI9B,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,eAAO,MAAM,oBAAoB,qHACmF,CAAC;AAQrH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAGzF;AASD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAsB/F;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,oBAAoB,CAqBtB;AAkDD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAmGD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,CA2CtB"}

package/dist/cli/lib/perimeter.js

@@ -11,7 +11,7 @@ export const DEFAULT_PERIMETER_PROTECTED = [
     ".gitagent/foreman/MANIFEST.json",
     ".gitagent/planner/RULES.md",
 ];
-const SHALLOW_HISTORY_HINT = "Configure CI checkout with fetch-depth: 0 or fetch the base ref explicitly before running gantry perimeter --ci.";
+export const SHALLOW_HISTORY_HINT = "Configure CI checkout with fetch-depth: 0 or fetch the base ref explicitly before running gantry perimeter --ci.";
 function perimeterGlobs(manifest) {
     return manifest.perimeter_protected?.length
         ? [...manifest.perimeter_protected]

package/dist/cli/lib/perimeter.js.map

@@ -1 +1 @@
-{"version":3,"file":"perimeter.js","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,oBAAoB;IACpB,iCAAiC;IACjC,4BAA4B;CACpB,CAAC;AAmBX,MAAM,oBAAoB,GACxB,kHAAkH,CAAC;AAErH,SAAS,cAAc,CAAC,QAAkB;IACxC,OAAO,QAAQ,CAAC,mBAAmB,EAAE,MAAM;QACzC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC;QACnC,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,QAAkB;IAC9E,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAC3D,OAAO,CACL,GAAG,SAAS,CAAC,yBAAyB,gDAAgD,OAAO,YAAY,MAAM,IAAI;QACnH,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,OAAe;IACzE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,aAAa,OAAO,6BAA6B,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM;SACnB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAMD,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,OAAe,EACf,WAAmB;IAEnB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,aAAa,OAAO,6BAA6B,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;SAC3E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM;SACrB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,WAAmB;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACtB,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,KAAa,EACb,WAAmB,EACnB,aAAuB;IAEvB,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC5E,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC;AAQD,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,UAAgC,EAChC,UAAoB;IAEpB,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iBAAiB,OAAO,mCAAmC,QAAQ,EAAE;YAC7E,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,MAAM;gBACN,MAAM,EACJ,GAAG,SAAS,CAAC,mBAAmB,oBAAoB,QAAQ,gCAAgC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;oBACjH,sBAAsB,GAAG,4CAA4C;gBACvE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CACb,cAAc,QAAQ,UAAU,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,QAAgB,EAChB,aAAuB,EACvB,UAAgC,EAChC,UAAoB;IAEpB,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,sCAAsC,QAAQ,EAAE;YACxD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,MAAM,EAAE,mCAAmC,MAAM,EAAE;YACnD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,UAAU,GACd,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,KAAK,IAAI,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,KAAK,GACT,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5F,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CACb,yBAAyB,QAAQ,6CAA6C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6CAA6C,CAClJ,CAAC;QACF,OAAO;IACT,CAAC;IACD,UAAU,CAAC,IAAI,CACb,yBAAyB,QAAQ,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;QACtE,eAAe,MAAM,CAAC,UAAU,CAAC,uBAAuB,MAAM,CAAC,YAAY,CAAC,IAAI;QAChF,qEAAqE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,QAAkB,EAClB,OAA8B;IAE9B,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACD,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClG,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/D,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;QAC7B,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"perimeter.js","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,oBAAoB;IACpB,iCAAiC;IACjC,4BAA4B;CACpB,CAAC;AAmBX,MAAM,CAAC,MAAM,oBAAoB,GAC/B,kHAAkH,CAAC;AAErH,SAAS,cAAc,CAAC,QAAkB;IACxC,OAAO,QAAQ,CAAC,mBAAmB,EAAE,MAAM;QACzC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC;QACnC,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,QAAkB;IAC9E,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAC3D,OAAO,CACL,GAAG,SAAS,CAAC,yBAAyB,gDAAgD,OAAO,YAAY,MAAM,IAAI;QACnH,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,OAAe;IACzE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,aAAa,OAAO,6BAA6B,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM;SACnB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAMD,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,OAAe,EACf,WAAmB;IAEnB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,aAAa,OAAO,6BAA6B,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;SAC3E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM;SACrB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,WAAmB;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACtB,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,KAAa,EACb,WAAmB,EACnB,aAAuB;IAEvB,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC5E,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC;AAQD,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,UAAgC,EAChC,UAAoB;IAEpB,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iBAAiB,OAAO,mCAAmC,QAAQ,EAAE;YAC7E,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,MAAM;gBACN,MAAM,EACJ,GAAG,SAAS,CAAC,mBAAmB,oBAAoB,QAAQ,gCAAgC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;oBACjH,sBAAsB,GAAG,4CAA4C;gBACvE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CACb,cAAc,QAAQ,UAAU,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,QAAgB,EAChB,aAAuB,EACvB,UAAgC,EAChC,UAAoB;IAEpB,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,sCAAsC,QAAQ,EAAE;YACxD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,MAAM,EAAE,mCAAmC,MAAM,EAAE;YACnD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,UAAU,GACd,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,KAAK,IAAI,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,KAAK,GACT,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5F,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CACb,yBAAyB,QAAQ,6CAA6C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6CAA6C,CAClJ,CAAC;QACF,OAAO;IACT,CAAC;IACD,UAAU,CAAC,IAAI,CACb,yBAAyB,QAAQ,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;QACtE,eAAe,MAAM,CAAC,UAAU,CAAC,uBAAuB,MAAM,CAAC,YAAY,CAAC,IAAI;QAChF,qEAAqE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,QAAkB,EAClB,OAA8B;IAE9B,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACD,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClG,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/D,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;QAC7B,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/cli/lib/principal-hmac.d.ts

@@ -0,0 +1,20 @@
+import { type PepperKeyringEntry } from "./pepper-keyring.js";
+import { type SignerPrincipalKind } from "./receipt-attribution.js";
+export interface PrincipalHmacResult {
+    pepper_version: number;
+    hmac: string;
+    canonical_input: string;
+}
+export interface PrincipalHmacOptions {
+    org?: string;
+    keyring?: string;
+    kind?: SignerPrincipalKind;
+    value?: string;
+    repo?: string;
+    branch?: string;
+    epochs?: string;
+    json?: boolean;
+}
+export declare function computePrincipalHmacs(peppers: PepperKeyringEntry[], canonicalInput: string): PrincipalHmacResult[];
+export declare function runPrincipalHmac(options: PrincipalHmacOptions): void;
+//# sourceMappingURL=principal-hmac.d.ts.map

package/dist/cli/lib/principal-hmac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal-hmac.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/principal-hmac.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA+DD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAAE,EAC7B,cAAc,EAAE,MAAM,GACrB,mBAAmB,EAAE,CAMvB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAoCpE"}

package/dist/cli/lib/principal-hmac.js

@@ -0,0 +1,74 @@
+import { emitCliJson } from "./command-boundary.js";
+import { readEnvWithLegacy } from "./config-namespace.js";
+import { GantryUserError } from "./errors.js";
+import { filterEpochs, getPeppersForOrg, loadPepperKeyring, listOrgIds, } from "./pepper-keyring.js";
+import { canonicalizeRepositoryIdentifier, hmacSha256Hex, } from "./receipt-attribution.js";
+function resolveOrgId(explicit, entries) {
+    const orgId = explicit?.trim() || readEnvWithLegacy("ORG_ID");
+    if (orgId)
+        return orgId;
+    const available = listOrgIds(entries);
+    const hint = available.length > 0
+        ? `available org_ids in keyring: ${available.join(", ")}`
+        : "keyring has no org entries";
+    throw new GantryUserError("ORG_ID_REQUIRED", "principal-hmac requires --org (or GANTRY_ORG_ID)", hint, 2);
+}
+function parseKind(raw) {
+    const trimmed = raw?.trim().toLowerCase();
+    if (!trimmed)
+        return undefined;
+    if (trimmed === "email" || trimmed === "github_actor")
+        return trimmed;
+    throw new GantryUserError("PRINCIPAL_KIND_INVALID", `invalid --kind: ${raw}`, "use email or github_actor", 2);
+}
+function resolveCanonicalInput(options) {
+    const kind = parseKind(options.kind);
+    const value = options.value?.trim();
+    const repo = options.repo?.trim();
+    const branch = options.branch?.trim();
+    const modes = [kind && value ? "kind" : null, repo ? "repo" : null, branch ? "branch" : null].filter(Boolean);
+    if (modes.length !== 1) {
+        throw new GantryUserError("PRINCIPAL_HMAC_INPUT", "specify exactly one of: --kind <email|github_actor> <value>, --repo <url>, or --branch <name>", undefined, 2);
+    }
+    if (kind && value) {
+        if (kind === "email")
+            return value.toLowerCase();
+        return value;
+    }
+    if (repo)
+        return canonicalizeRepositoryIdentifier(repo);
+    if (branch)
+        return branch;
+    throw new GantryUserError("PRINCIPAL_HMAC_INPUT", "specify exactly one of: --kind <email|github_actor> <value>, --repo <url>, or --branch <name>", undefined, 2);
+}
+export function computePrincipalHmacs(peppers, canonicalInput) {
+    return peppers.map((entry) => ({
+        pepper_version: entry.pepper_version,
+        hmac: hmacSha256Hex(entry.pepper, canonicalInput),
+        canonical_input: canonicalInput,
+    }));
+}
+export function runPrincipalHmac(options) {
+    const entries = loadPepperKeyring(options.keyring);
+    const orgId = resolveOrgId(options.org, entries);
+    const orgPeppers = getPeppersForOrg(entries, orgId);
+    if (orgPeppers.length === 0) {
+        const available = listOrgIds(entries);
+        throw new GantryUserError("ORG_ID_UNKNOWN", `no peppers found for org_id: ${orgId}`, available.length > 0 ? `available org_ids: ${available.join(", ")}` : undefined, 2);
+    }
+    const epochsSpec = options.epochs?.trim() || "current";
+    const peppers = filterEpochs(orgPeppers, epochsSpec);
+    if (peppers.length === 0) {
+        throw new GantryUserError("PEPPER_EPOCHS_EMPTY", `no pepper epochs matched --epochs ${epochsSpec} for org ${orgId}`, undefined, 2);
+    }
+    const canonicalInput = resolveCanonicalInput(options);
+    const results = computePrincipalHmacs(peppers, canonicalInput);
+    if (options.json) {
+        emitCliJson({ status: "ok", hmacs: results });
+        return;
+    }
+    for (const row of results) {
+        process.stdout.write(`${row.hmac}\n`);
+    }
+}
+//# sourceMappingURL=principal-hmac.js.map

package/dist/cli/lib/principal-hmac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal-hmac.js","sourceRoot":"","sources":["../../../src/cli/lib/principal-hmac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GAEX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gCAAgC,EAChC,aAAa,GAEd,MAAM,0BAA0B,CAAC;AAmBlC,SAAS,YAAY,CAAC,QAA4B,EAAE,OAA6B;IAC/E,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GACR,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,iCAAiC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACzD,CAAC,CAAC,4BAA4B,CAAC;IACnC,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,kDAAkD,EAClD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC;IACtE,MAAM,IAAI,eAAe,CACvB,wBAAwB,EACxB,mBAAmB,GAAG,EAAE,EACxB,2BAA2B,EAC3B,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA6B;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAEtC,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAClG,OAAO,CACR,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,+FAA+F,EAC/F,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QAClB,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI;QAAE,OAAO,gCAAgC,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,+FAA+F,EAC/F,SAAS,EACT,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA6B,EAC7B,cAAsB;IAEtB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC;QACjD,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA6B;IAC5D,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,gCAAgC,KAAK,EAAE,EACvC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAC/E,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,qCAAqC,UAAU,YAAY,KAAK,EAAE,EAClE,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAE/D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/cli/lib/receipt-attribution.d.ts

@@ -0,0 +1,23 @@
+import type { OrgExportConfig } from "./org-export-config.js";
+export type BranchClass = "default" | "non_default";
+export type AttestationHarnessMode = "cli" | "mcp" | "ci" | "unknown";
+export interface AttestationAgentState {
+    name: string;
+    version: string;
+    harness_mode: AttestationHarnessMode;
+}
+export type SignerPrincipalKind = "email" | "github_actor";
+export declare function hmacSha256Hex(pepper: string, message: string): string;
+export declare function canonicalizeRepositoryIdentifier(raw: string): string;
+export declare function resolveRepositoryHash(repoRoot: string, org: OrgExportConfig): string;
+export declare function gitCurrentBranch(repoRoot: string): string;
+export declare function gitTreeSha(repoRoot: string, ref?: string): string | null;
+export declare function gitDefaultBranchName(repoRoot: string): string | null;
+export declare function resolveBranchClass(repoRoot: string, currentBranch: string): BranchClass;
+export declare function resolveBranchHmac(repoRoot: string, org: OrgExportConfig): {
+    branch_hmac: string;
+    branch_class: BranchClass;
+};
+export declare function resolveAttestationAgent(harnessMode?: AttestationHarnessMode): AttestationAgentState;
+export declare function pseudonymizeEmail(email: string, org: OrgExportConfig): string;
+//# sourceMappingURL=receipt-attribution.d.ts.map

package/dist/cli/lib/receipt-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-attribution.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/receipt-attribution.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;AACpD,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,cAAc,CAAC;AAE3D,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAapE;AAUD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAEpF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUpE;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,WAAW,CAKvF;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,WAAW,CAAC;CAC3B,CAgBA;AAYD,wBAAgB,uBAAuB,CACrC,WAAW,CAAC,EAAE,sBAAsB,GACnC,qBAAqB,CASvB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAE7E"}

package/dist/cli/lib/receipt-attribution.js

@@ -0,0 +1,113 @@
+import crypto from "node:crypto";
+import path from "node:path";
+import { CLI_VERSION } from "./constants.js";
+import { gitConfigGet, gitRevParse, gitRunOk } from "./git.js";
+export function hmacSha256Hex(pepper, message) {
+    return crypto.createHmac("sha256", pepper).update(message, "utf8").digest("hex");
+}
+export function canonicalizeRepositoryIdentifier(raw) {
+    let id = raw.trim().toLowerCase();
+    if (!id)
+        return id;
+    if (id.startsWith("git@")) {
+        const colon = id.indexOf(":");
+        if (colon >= 0) {
+            id = `${id.slice(4, colon)}/${id.slice(colon + 1)}`;
+        }
+    }
+    else {
+        id = id.replace(/^https?:\/\//, "");
+    }
+    id = id.replace(/\.git$/, "");
+    return id;
+}
+function resolveRepositoryIdentifier(repoRoot) {
+    const override = process.env.GANTRY_REPO_ID?.trim();
+    if (override)
+        return canonicalizeRepositoryIdentifier(override);
+    const remote = gitConfigGet(repoRoot, "remote.origin.url");
+    if (remote)
+        return canonicalizeRepositoryIdentifier(remote);
+    return path.basename(repoRoot).toLowerCase();
+}
+export function resolveRepositoryHash(repoRoot, org) {
+    return hmacSha256Hex(org.pepper, resolveRepositoryIdentifier(repoRoot));
+}
+export function gitCurrentBranch(repoRoot) {
+    const override = process.env.GANTRY_BRANCH_NAME?.trim();
+    if (override)
+        return override;
+    const r = gitRunOk(repoRoot, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    const branch = r.ok ? r.stdout.trim() : "";
+    if (!branch || branch === "HEAD")
+        return "detached";
+    return branch;
+}
+export function gitTreeSha(repoRoot, ref = "HEAD") {
+    const r = gitRunOk(repoRoot, ["rev-parse", "--verify", `${ref}^{tree}`]);
+    return r.ok && r.stdout.trim() ? r.stdout.trim() : null;
+}
+export function gitDefaultBranchName(repoRoot) {
+    const sym = gitRunOk(repoRoot, ["symbolic-ref", "refs/remotes/origin/HEAD"]);
+    if (sym.ok && sym.stdout.trim()) {
+        const parts = sym.stdout.trim().split("/");
+        const name = parts[parts.length - 1];
+        if (name)
+            return name;
+    }
+    if (gitRevParse(repoRoot, "main"))
+        return "main";
+    if (gitRevParse(repoRoot, "master"))
+        return "master";
+    return null;
+}
+export function resolveBranchClass(repoRoot, currentBranch) {
+    if (currentBranch === "detached")
+        return "non_default";
+    const defaultBranch = gitDefaultBranchName(repoRoot);
+    if (!defaultBranch)
+        return "non_default";
+    return currentBranch === defaultBranch ? "default" : "non_default";
+}
+export function resolveBranchHmac(repoRoot, org) {
+    const current = gitCurrentBranch(repoRoot);
+    if (current === "detached") {
+        const branchOverride = process.env.GANTRY_BRANCH_NAME?.trim();
+        if (branchOverride) {
+            return {
+                branch_hmac: hmacSha256Hex(org.pepper, branchOverride),
+                branch_class: resolveBranchClass(repoRoot, branchOverride),
+            };
+        }
+        return { branch_hmac: hmacSha256Hex(org.pepper, "detached"), branch_class: "non_default" };
+    }
+    return {
+        branch_hmac: hmacSha256Hex(org.pepper, current),
+        branch_class: resolveBranchClass(repoRoot, current),
+    };
+}
+function resolveHarnessMode(explicit) {
+    if (explicit)
+        return explicit;
+    if (process.env.CI === "true" || process.env.CI === "1")
+        return "ci";
+    if (process.env.GANTRY_HARNESS_MODE?.trim()) {
+        const mode = process.env.GANTRY_HARNESS_MODE.trim().toLowerCase();
+        if (mode === "cli" || mode === "mcp" || mode === "ci")
+            return mode;
+    }
+    return "cli";
+}
+export function resolveAttestationAgent(harnessMode) {
+    const name = process.env.GANTRY_AGENT_NAME?.trim() ||
+        (process.env.CI ? "ci-runner" : "gantry-cli");
+    return {
+        name,
+        version: CLI_VERSION,
+        harness_mode: resolveHarnessMode(harnessMode),
+    };
+}
+export function pseudonymizeEmail(email, org) {
+    return hmacSha256Hex(org.pepper, email.trim().toLowerCase());
+}
+//# sourceMappingURL=receipt-attribution.js.map

package/dist/cli/lib/receipt-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-attribution.js","sourceRoot":"","sources":["../../../src/cli/lib/receipt-attribution.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAc/D,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAe;IAC3D,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,GAAW;IAC1D,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,EAAE,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,QAAQ;QAAE,OAAO,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC3D,IAAI,MAAM;QAAE,OAAO,gCAAgC,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,GAAoB;IAC1E,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,GAAG,GAAG,MAAM;IACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC7E,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,aAAqB;IACxE,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,aAAa,CAAC;IACvD,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa;QAAE,OAAO,aAAa,CAAC;IACzC,OAAO,aAAa,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAoB;IAItE,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;QAC9D,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO;gBACL,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC;gBACtD,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC;aAC3D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO;QACL,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;QAC/C,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiC;IAC3D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,WAAoC;IAEpC,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QACrC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAChD,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,kBAAkB,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,GAAoB;IACnE,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/cli/lib/receipt-inspect.d.ts

@@ -0,0 +1,28 @@
+import type { AttestationReceipt } from "./attestation-receipt.js";
+export interface ReceiptListEntry {
+    path: string;
+    msn_id: string;
+    verify_status: string;
+    receipt_sha256: string;
+    mtime_ms: number;
+}
+export declare function listReceipts(root: string, msnFilter?: string): ReceiptListEntry[];
+export declare function resolveReceiptPath(root: string, arg?: string): {
+    absPath: string;
+    relPath: string;
+    receipt: AttestationReceipt;
+};
+export interface ReceiptShowSummary {
+    path: string;
+    msn_id: string;
+    verify_status: string;
+    receipt_sha256: string;
+    org_id: string;
+    git_head: string;
+    git_tree_sha: string;
+    issued_at: string;
+    error_code?: string;
+    signature_verify_status?: string;
+}
+export declare function summarizeReceipt(relPath: string, receipt: AttestationReceipt): ReceiptShowSummary;
+//# sourceMappingURL=receipt-inspect.d.ts.map

package/dist/cli/lib/receipt-inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-inspect.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/receipt-inspect.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAyCD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAcjF;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,GACX;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CA2CnE;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,kBAAkB,CAejG"}

package/dist/cli/lib/receipt-inspect.js

@@ -0,0 +1,105 @@
+import fs from "node:fs";
+import path from "node:path";
+import { formatRepoRelative } from "./cli-io.js";
+import { REL_RECEIPTS_DIR, MSN_ID_PATTERN } from "./constants.js";
+import { GantryUserError } from "./errors.js";
+function receiptsDir(root) {
+    return path.join(root, REL_RECEIPTS_DIR);
+}
+function parseReceiptFile(absPath) {
+    try {
+        const raw = fs.readFileSync(absPath, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function loadReceiptOrThrow(absPath, label) {
+    const receipt = parseReceiptFile(absPath);
+    if (!receipt) {
+        throw new GantryUserError("RECEIPT_NOT_FOUND", `${label}: invalid receipt at ${absPath}`, undefined, 1);
+    }
+    return receipt;
+}
+function entryFromFile(root, absPath) {
+    const receipt = parseReceiptFile(absPath);
+    if (!receipt?.msn_id)
+        return null;
+    const stat = fs.statSync(absPath);
+    return {
+        path: formatRepoRelative(root, absPath),
+        msn_id: receipt.msn_id,
+        verify_status: receipt.verify_status,
+        receipt_sha256: receipt.receipt_sha256,
+        mtime_ms: stat.mtimeMs,
+    };
+}
+export function listReceipts(root, msnFilter) {
+    const dir = receiptsDir(root);
+    if (!fs.existsSync(dir))
+        return [];
+    const filter = msnFilter?.trim().toUpperCase();
+    const entries = [];
+    for (const name of fs.readdirSync(dir)) {
+        if (!name.endsWith(".json"))
+            continue;
+        if (filter && !name.startsWith(`${filter}-`))
+            continue;
+        const abs = path.join(dir, name);
+        const entry = entryFromFile(root, abs);
+        if (entry)
+            entries.push(entry);
+    }
+    entries.sort((a, b) => b.mtime_ms - a.mtime_ms);
+    return entries;
+}
+export function resolveReceiptPath(root, arg) {
+    const trimmed = arg?.trim();
+    if (!trimmed) {
+        const latest = listReceipts(root)[0];
+        if (!latest) {
+            throw new GantryUserError("RECEIPT_NOT_FOUND", "gantry receipt show: no receipts under .gitagent/history/receipts/", "Run gantry verify --receipt or gantry attest first", 1);
+        }
+        const abs = path.join(root, latest.path);
+        return { absPath: abs, relPath: latest.path, receipt: loadReceiptOrThrow(abs, "gantry receipt show") };
+    }
+    if (MSN_ID_PATTERN.test(trimmed)) {
+        const matches = listReceipts(root, trimmed);
+        if (matches.length === 0) {
+            throw new GantryUserError("RECEIPT_NOT_FOUND", `gantry receipt show: no receipts for ${trimmed}`, undefined, 1);
+        }
+        const abs = path.join(root, matches[0].path);
+        return {
+            absPath: abs,
+            relPath: matches[0].path,
+            receipt: loadReceiptOrThrow(abs, "gantry receipt show"),
+        };
+    }
+    const abs = path.isAbsolute(trimmed) ? trimmed : path.join(root, trimmed);
+    if (!fs.existsSync(abs)) {
+        throw new GantryUserError("RECEIPT_NOT_FOUND", `gantry receipt show: file not found: ${trimmed}`, undefined, 1);
+    }
+    return {
+        absPath: abs,
+        relPath: formatRepoRelative(root, abs),
+        receipt: loadReceiptOrThrow(abs, "gantry receipt show"),
+    };
+}
+export function summarizeReceipt(relPath, receipt) {
+    return {
+        path: relPath,
+        msn_id: receipt.msn_id,
+        verify_status: receipt.verify_status,
+        receipt_sha256: receipt.receipt_sha256,
+        org_id: receipt.org_id,
+        git_head: receipt.git_head,
+        git_tree_sha: receipt.git_tree_sha,
+        issued_at: receipt.issued_at,
+        ...(receipt.error_code ? { error_code: receipt.error_code } : {}),
+        ...(receipt.signature?.verify_status
+            ? { signature_verify_status: receipt.signature.verify_status }
+            : {}),
+    };
+}
+//# sourceMappingURL=receipt-inspect.js.map

package/dist/cli/lib/receipt-inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-inspect.js","sourceRoot":"","sources":["../../../src/cli/lib/receipt-inspect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAW9C,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,KAAa;IACxD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,GAAG,KAAK,wBAAwB,OAAO,EAAE,EACzC,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,IAAI,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAkB;IAC3D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,SAAS;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,GAAY;IAEZ,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,oEAAoE,EACpE,oDAAoD,EACpD,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,wCAAwC,OAAO,EAAE,EACjD,SAAS,EACT,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YACxB,OAAO,EAAE,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,wCAAwC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC;QACtC,OAAO,EAAE,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC;KACxD,CAAC;AACJ,CAAC;AAeD,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,OAA2B;IAC3E,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa;YAClC,CAAC,CAAC,EAAE,uBAAuB,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/cli/lib/receipt-signing.d.ts

@@ -1,12 +1,29 @@
 export type ReceiptSignatureKind = "ssh" | "gpg" | "none";
 export type ReceiptSignatureVerifyStatus = "good" | "bad" | "unknown";
+export type ReceiptPayloadEncoding = "receipt_sha256_hex" | "canonical_json_utf8";
 export interface ReceiptSignature {
     kind: ReceiptSignatureKind;
     signature_b64: string;
+    payload_encoding?: ReceiptPayloadEncoding;
     key_fingerprint?: string;
     signer_principal?: string;
     verify_status?: ReceiptSignatureVerifyStatus;
 }
+export declare function unsignedReceiptPayload(input: Record<string, unknown> & {
+    receipt_sha256?: string;
+    signature?: unknown;
+}): Record<string, unknown>;
+/** Canonical UTF-8 JSON of receipt body (includes receipt_sha256; excludes signature). */
+export declare function canonicalReceiptUtf8<T extends {
+    signature?: unknown;
+}>(receipt: T): string;
+export declare function resolveSignatureMessage(receiptSha256: string, canonicalUtf8: string, encoding: ReceiptPayloadEncoding | undefined): string;
+export declare function signReceiptMessage(repoRoot: string, message: string, payloadEncoding: ReceiptPayloadEncoding): ReceiptSignature | null;
+/** @deprecated v0.1.0 — signs receipt_sha256 hex only. */
 export declare function signReceiptHash(repoRoot: string, receiptSha256: string): ReceiptSignature | null;
-export declare function verifyReceiptSignature(repoRoot: string, receiptSha256: string, signature: ReceiptSignature): ReceiptSignatureVerifyStatus;
+export declare function verifyReceiptSignature(repoRoot: string, message: string, signature: ReceiptSignature): ReceiptSignatureVerifyStatus;
+export declare function verifyReceiptAgainstCanonical(repoRoot: string, receipt: {
+    receipt_sha256: string;
+    signature?: ReceiptSignature;
+}, canonicalUtf8: string): ReceiptSignatureVerifyStatus;
 //# sourceMappingURL=receipt-signing.d.ts.map

package/dist/cli/lib/receipt-signing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receipt-signing.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/receipt-signing.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAC1D,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,4BAA4B,CAAC;CAC9C;AAgDD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAoDhG;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,gBAAgB,GAC1B,4BAA4B,CA2D9B"}
+{"version":3,"file":"receipt-signing.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/receipt-signing.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAC1D,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,GAAG,qBAAqB,CAAC;AAElF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,4BAA4B,CAAC;CAC9C;AAgDD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAChF,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAG1F;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,sBAAsB,GAAG,SAAS,GAC3C,MAAM,CAGR;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,sBAAsB,GACtC,gBAAgB,GAAG,IAAI,CAoDzB;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAEhG;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,gBAAgB,GAC1B,4BAA4B,CA4D9B;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;CAAE,EACjE,aAAa,EAAE,MAAM,GACpB,4BAA4B,CAK9B"}

package/dist/cli/lib/receipt-signing.js

@@ -2,6 +2,7 @@ import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { canonicalJson } from "./canonical-json.js";
 import { gitConfigGet } from "./git.js";
 const RECEIPT_SIGN_NAMESPACE = "gxt";
 function expandHome(value) {
@@ -41,26 +42,39 @@ function writeAllowedSignersFile(pubPath, principal, outPath) {
     const pubLine = fs.readFileSync(pubPath, "utf8").trim();
     fs.writeFileSync(outPath, `${principal} ${pubLine}\n`, "utf8");
 }
-export function signReceiptHash(repoRoot, receiptSha256) {
+export function unsignedReceiptPayload(input) {
+    const { receipt_sha256: _receiptSha, signature: _signature, ...rest } = input;
+    return { ...rest };
+}
+/** Canonical UTF-8 JSON of receipt body (includes receipt_sha256; excludes signature). */
+export function canonicalReceiptUtf8(receipt) {
+    const { signature: _signature, ...body } = receipt;
+    return canonicalJson(body);
+}
+export function resolveSignatureMessage(receiptSha256, canonicalUtf8, encoding) {
+    if (encoding === "canonical_json_utf8")
+        return canonicalUtf8;
+    return receiptSha256;
+}
+export function signReceiptMessage(repoRoot, message, payloadEncoding) {
     const signingKey = resolveSigningKey(repoRoot);
     if (!signingKey)
         return null;
     if (resolveSigningFormat(repoRoot) === "ssh") {
         const keyPath = sshPrivateKeyPath(signingKey);
         const pubPath = sshPublicKeyPath(signingKey);
-        const principal = resolveSshSignerPrincipal(repoRoot);
         const messagePath = path.join(os.tmpdir(), `gxt-receipt-${process.pid}-${Date.now()}.txt`);
         const sigPath = `${messagePath}.sig`;
         try {
-            fs.writeFileSync(messagePath, receiptSha256, "utf8");
+            fs.writeFileSync(messagePath, message, "utf8");
             const result = spawnSync("ssh-keygen", ["-Y", "sign", "-f", keyPath, "-n", RECEIPT_SIGN_NAMESPACE, messagePath], { encoding: "utf8" });
             if (result.status !== 0 || !fs.existsSync(sigPath))
                 return null;
             return {
                 kind: "ssh",
                 signature_b64: fs.readFileSync(sigPath).toString("base64"),
+                payload_encoding: payloadEncoding,
                 key_fingerprint: sshKeyFingerprint(pubPath) ?? path.basename(keyPath),
-                signer_principal: principal,
                 verify_status: "unknown",
             };
         }
@@ -79,18 +93,23 @@ export function signReceiptHash(repoRoot, receiptSha256) {
             }
         }
     }
-    const result = spawnSync("gpg", ["--detach-sign", "--armor", "--local-user", signingKey, "--output", "-"], { input: receiptSha256, encoding: "utf8" });
+    const result = spawnSync("gpg", ["--detach-sign", "--armor", "--local-user", signingKey, "--output", "-"], { input: message, encoding: "utf8" });
     const stdout = typeof result.stdout === "string" ? result.stdout.trim() : "";
     if (result.status !== 0 || !stdout)
         return null;
     return {
         kind: "gpg",
         signature_b64: Buffer.from(stdout, "utf8").toString("base64"),
+        payload_encoding: payloadEncoding,
         key_fingerprint: signingKey,
         verify_status: "unknown",
     };
 }
-export function verifyReceiptSignature(repoRoot, receiptSha256, signature) {
+/** @deprecated v0.1.0 — signs receipt_sha256 hex only. */
+export function signReceiptHash(repoRoot, receiptSha256) {
+    return signReceiptMessage(repoRoot, receiptSha256, "receipt_sha256_hex");
+}
+export function verifyReceiptSignature(repoRoot, message, signature) {
     if (signature.kind === "none")
         return "unknown";
     if (signature.kind === "ssh") {
@@ -115,7 +134,7 @@ export function verifyReceiptSignature(repoRoot, receiptSha256, signature) {
                 RECEIPT_SIGN_NAMESPACE,
                 "-s",
                 sigPath,
-            ], { input: receiptSha256, encoding: "utf8" });
+            ], { input: message, encoding: "utf8" });
             return result.status === 0 ? "good" : "bad";
         }
         finally {
@@ -133,7 +152,7 @@ export function verifyReceiptSignature(repoRoot, receiptSha256, signature) {
     try {
         fs.writeFileSync(sigPath, Buffer.from(signature.signature_b64, "base64"));
         const result = spawnSync("gpg", ["--verify", sigPath, "-"], {
-            input: receiptSha256,
+            input: message,
             encoding: "utf8",
         });
         return result.status === 0 ? "good" : "bad";
@@ -147,4 +166,11 @@ export function verifyReceiptSignature(repoRoot, receiptSha256, signature) {
         }
     }
 }
+export function verifyReceiptAgainstCanonical(repoRoot, receipt, canonicalUtf8) {
+    if (!receipt.signature)
+        return "unknown";
+    const encoding = receipt.signature.payload_encoding ?? "receipt_sha256_hex";
+    const message = resolveSignatureMessage(receipt.receipt_sha256, canonicalUtf8, encoding);
+    return verifyReceiptSignature(repoRoot, message, receipt.signature);
+}
 //# sourceMappingURL=receipt-signing.js.map