@mcpose/audit 2.0.2 → 3.0.0

package/dist/chain.js

@@ -0,0 +1,265 @@
+import { createHash, createHmac } from 'node:crypto';
+// ── Canonical serialization ────────────────────────────────────────────────────
+//
+// v1 hashed `JSON.stringify` output, which made object-key insertion order
+// load-bearing: an independently written verifier that reconstructed the
+// fields in a different order failed on every chainHash. v2 hashes a
+// canonical form instead — lexicographically sorted keys at every depth —
+// so only the field SET matters. See ADR-0004.
+/**
+ * Canonical JSON: object keys sorted lexicographically at every depth,
+ * `undefined`-valued keys skipped. Throws on values with no canonical JSON
+ * form (BigInt, function, symbol, circular references).
+ *
+ * Use for data the audit layer controls (chain preimages, manifest
+ * payloads). For arbitrary caller payloads use {@link stableStringify}.
+ */
+export function canonicalJson(value) {
+    return serialize(value, new Set(), { strict: true });
+}
+/**
+ * Total variant of {@link canonicalJson} for arbitrary caller payloads:
+ * never throws. Circular references become `"[Circular]"`, BigInt becomes
+ * its decimal string. Used for `inputHash`/`outputHash`, so two
+ * semantically identical payloads hash identically regardless of the
+ * client's JSON key order.
+ */
+export function stableStringify(value) {
+    return serialize(value, new Set(), { strict: false });
+}
+function serialize(value, seen, opts) {
+    if (value === null || value === undefined)
+        return 'null';
+    switch (typeof value) {
+        case 'string':
+        case 'number':
+        case 'boolean':
+            return JSON.stringify(value);
+        case 'bigint':
+            if (opts.strict) {
+                throw new TypeError('canonicalJson: BigInt has no canonical JSON form');
+            }
+            return JSON.stringify(value.toString());
+        case 'function':
+        case 'symbol':
+            if (opts.strict) {
+                throw new TypeError(`canonicalJson: ${typeof value} has no canonical JSON form`);
+            }
+            return 'null';
+    }
+    const obj = value;
+    if (seen.has(obj)) {
+        if (opts.strict) {
+            throw new TypeError('canonicalJson: circular reference');
+        }
+        return '"[Circular]"';
+    }
+    seen.add(obj);
+    try {
+        if (Array.isArray(obj)) {
+            return `[${obj.map((item) => serialize(item, seen, opts)).join(',')}]`;
+        }
+        if (typeof obj.toJSON === 'function') {
+            return serialize(obj.toJSON(), seen, opts);
+        }
+        const entries = Object.entries(obj)
+            .filter(([, v]) => v !== undefined)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+            .map(([k, v]) => `${JSON.stringify(k)}:${serialize(v, seen, opts)}`);
+        return `{${entries.join(',')}}`;
+    }
+    finally {
+        seen.delete(obj);
+    }
+}
+// ── Hash primitives ────────────────────────────────────────────────────────────
+export function sha256hex(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+function hmacSha256hex(data, key) {
+    return createHmac('sha256', key).update(data).digest('hex');
+}
+// ── HMAC chain ─────────────────────────────────────────────────────────────────
+const DOMAIN_CHAIN_HASH = 'mcpose/v2/chain';
+/**
+ * The exact fields of an audit event that the chain covers, extracted from
+ * the event. Used by both the producer (middleware) and any verifier
+ * ({@link verifyAuditChain}) so the two cannot drift.
+ *
+ * NOT covered (bound only via inputHash/outputHash): the raw/encrypted
+ * payloads.
+ */
+export function chainPreimageFields(event) {
+    return {
+        id: event.id,
+        startedAt: event.startedAt,
+        endedAt: event.endedAt,
+        ...(event.sessionId === undefined ? {} : { sessionId: event.sessionId }),
+        ...(event.delegatedFrom === undefined
+            ? {}
+            : { delegatedFrom: event.delegatedFrom }),
+        // Required on every event, so it is a plain always-present field rather
+        // than an omission-guarded optional one (ADR-0019). Under the omission
+        // pattern an event with no proxy and one whose proxy was stripped hashed
+        // identically, so removing recorded provenance was undetectable.
+        proxy: event.proxy,
+        ...(event.kind === undefined ? {} : { kind: event.kind }),
+        // Optional, omitted when absent (ADR-0012), so a default-mode event keeps
+        // the preimage it had before erasable mode existed. Covering it is what
+        // stops a stored event being reinterpreted under the other hash scheme:
+        // adding or stripping the marker breaks verification at that index
+        // (ADR-0018).
+        ...(event.erasable === undefined ? {} : { erasable: event.erasable }),
+        identity: event.identity,
+        tool: event.tool,
+        duration_ms: event.duration_ms,
+        outcome: event.outcome,
+        // Required on every event, so it is a plain always-present field rather
+        // than an omission-guarded optional one (ADR-0015).
+        sensitivityTier: event.sensitivityTier,
+        ...(event.rejectionReason === undefined
+            ? {}
+            : { rejectionReason: event.rejectionReason }),
+        ...(event.error === undefined ? {} : { error: event.error }),
+        inputHash: event.inputHash,
+        outputHash: event.outputHash,
+        replayManifestPosition: event.replayManifestPosition,
+    };
+}
+/**
+ * `HMAC-SHA256(chainKey, canonicalJson({domain, prevChainHash, event}))`.
+ * Domain-separated and canonically framed: neither field order nor
+ * string-concatenation ambiguity can affect the hash. The entry is
+ * serialized without its own chainHash. First entry uses `prevChainHash: ''`.
+ */
+export function computeChainHash(entryWithoutChainHash, prevChainHash, chainKey) {
+    const preimage = canonicalJson({
+        domain: DOMAIN_CHAIN_HASH,
+        prevChainHash,
+        event: entryWithoutChainHash,
+    });
+    return hmacSha256hex(preimage, chainKey);
+}
+// ── Merkle tree ────────────────────────────────────────────────────────────────
+//
+// Leaves and internal nodes are domain-separated so an internal node can
+// never be replayed as a leaf (second-preimage hardening). Odd layers
+// duplicate the last node; ambiguity from that padding is neutralized by
+// the signed `eventCount` in the manifest payload.
+const LEAF_TAG = 'mcpose/v2/leaf\0';
+const NODE_TAG = 'mcpose/v2/node\0';
+function leafHash(chainHash) {
+    return sha256hex(LEAF_TAG + chainHash);
+}
+function nodeHash(left, right) {
+    return sha256hex(NODE_TAG + left + right);
+}
+function nextLayer(layer) {
+    const next = [];
+    for (let i = 0; i < layer.length; i += 2) {
+        // `i < layer.length` guarantees `left`; a missing right sibling means an
+        // odd layer, whose last node is duplicated (ADR-0004) — same padding as
+        // `computeMerkleProof` and `computeMerkleRootAndProofs`.
+        const left = layer[i];
+        const right = layer[i + 1] ?? left;
+        next.push(nodeHash(left, right));
+    }
+    return next;
+}
+/** Merkle root over the events' `chainHash` values. Empty → `sha256('')`. */
+export function computeMerkleRoot(hashes) {
+    if (hashes.length === 0)
+        return sha256hex('');
+    let layer = hashes.map(leafHash);
+    while (layer.length > 1) {
+        layer = nextLayer(layer);
+    }
+    // `hashes` is non-empty here and the loop exits only at length 1.
+    return layer[0];
+}
+export function computeMerkleProof(hashes, index) {
+    if (!Number.isInteger(index) || index < 0 || index >= hashes.length) {
+        throw new RangeError(`computeMerkleProof: index ${index} out of range for ${hashes.length} leaves`);
+    }
+    const siblings = [];
+    const directions = [];
+    let layer = hashes.map(leafHash);
+    let idx = index;
+    while (layer.length > 1) {
+        const siblingIdx = idx % 2 === 0 ? idx + 1 : idx - 1;
+        // A sibling past the end means an odd layer whose last node is
+        // duplicated, and `idx` is then that last node — same padding as
+        // `nextLayer`, which must stay identical. `idx` is always in range.
+        siblings.push(layer[siblingIdx] ?? layer[idx]);
+        directions.push(idx % 2 === 0 ? 'right' : 'left');
+        layer = nextLayer(layer);
+        idx = Math.floor(idx / 2);
+    }
+    return { index, siblings, directions };
+}
+function proofFromLayers(index, layers) {
+    const siblings = [];
+    const directions = [];
+    let idx = index;
+    for (let level = 0; level < layers.length - 1; level++) {
+        const layer = layers[level];
+        const siblingIdx = idx % 2 === 0 ? idx + 1 : idx - 1;
+        siblings.push(layer[siblingIdx] ?? layer[idx]);
+        directions.push(idx % 2 === 0 ? 'right' : 'left');
+        idx = Math.floor(idx / 2);
+    }
+    return { index, siblings, directions };
+}
+/** Build a manifest root and every proof from the same set of tree layers. */
+export function computeMerkleRootAndProofs(hashes) {
+    if (hashes.length === 0) {
+        return { merkleRoot: sha256hex(''), merkleProofs: [] };
+    }
+    const layers = [hashes.map(leafHash)];
+    while (layers[layers.length - 1].length > 1) {
+        layers.push(nextLayer(layers[layers.length - 1]));
+    }
+    return {
+        merkleRoot: layers[layers.length - 1][0],
+        merkleProofs: hashes.map((_, index) => proofFromLayers(index, layers)),
+    };
+}
+/**
+ * Verifies a Merkle proof for an event's `chainHash` (the raw chain hash —
+ * the leaf tag is applied internally).
+ *
+ * Rejects malformed proofs: `siblings`/`directions` length mismatch,
+ * directions inconsistent with `proof.index` (each level's direction is
+ * fully determined by the index), or an index that the path cannot
+ * represent (`index >= 2 ** siblings.length`, which leaves high bits
+ * unconsumed after traversal).
+ */
+export function verifyMerkleProof(leafChainHash, proof, root) {
+    if (!Number.isSafeInteger(proof.index) ||
+        proof.index < 0 ||
+        proof.siblings.length !== proof.directions.length) {
+        return false;
+    }
+    let current = leafHash(leafChainHash);
+    let idx = proof.index;
+    for (let i = 0; i < proof.siblings.length; i++) {
+        const expectedDir = idx % 2 === 0 ? 'right' : 'left';
+        if (proof.directions[i] !== expectedDir)
+            return false;
+        const sibling = proof.siblings[i];
+        // A hole in a caller-supplied `siblings` array is a malformed proof.
+        if (sibling === undefined)
+            return false;
+        current =
+            expectedDir === 'right'
+                ? nodeHash(current, sibling)
+                : nodeHash(sibling, current);
+        idx = Math.floor(idx / 2);
+    }
+    // Bits left over mean the claimed position lies outside a tree of this
+    // depth: a two-leaf proof for position 0 must not also verify at 2 or 4.
+    if (idx !== 0)
+        return false;
+    return current === root;
+}
+//# sourceMappingURL=chain.js.map

package/dist/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGrD,kFAAkF;AAClF,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,0EAA0E;AAC1E,+CAA+C;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,IAAiB,EACjB,IAAyB;IAEzB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAEzD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACX,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ;YACX,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,SAAS,CACjB,kBAAkB,OAAO,KAAK,6BAA6B,CAC5D,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACzE,CAAC;QACD,IAAI,OAAQ,GAA4B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/D,OAAO,SAAS,CAAE,GAAiC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,kFAAkF;AAElF,MAAM,UAAU,SAAS,CAAC,IAAqB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,IAAqB,EAAE,GAAW;IACvD,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAElF,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiD;IAEjD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,iEAAiE;QACjE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACzD,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,cAAc;QACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,wEAAwE;QACxE,oDAAoD;QACpD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,qBAA8C,EAC9C,aAAqB,EACrB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,MAAM,EAAE,iBAAiB;QACzB,aAAa;QACb,KAAK,EAAE,qBAAqB;KAC7B,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,mDAAmD;AAEnD,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAEpC,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,SAAS,CAAC,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,yEAAyE;QACzE,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,kEAAkE;IAClE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAgB,EAChB,KAAa;IAEb,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAClB,6BAA6B,KAAK,qBAAqB,MAAM,CAAC,MAAM,SAAS,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAyB,EAAE,CAAC;IAE5C,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,KAAK,CAAC;IAEhB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACrD,+DAA+D;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,CAAE,CAAC,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClD,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACzB,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,MAAkB;IACxD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,IAAI,GAAG,GAAG,KAAK,CAAC;IAEhB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,CAAE,CAAC,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B,CAAC,MAAgB;IAIzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE;QAC1C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,KAAkB,EAClB,IAAY;IAEZ,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,KAAK,CAAC,KAAK,GAAG,CAAC;QACf,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,EACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAClC,qEAAqE;QACrE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO;YACL,WAAW,KAAK,OAAO;gBACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC5B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,uEAAuE;IACvE,yEAAyE;IACzE,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,OAAO,KAAK,IAAI,CAAC;AAC1B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export type { SensitivityTier, SensitivityResolverFn, SensitivityOverrideFn, SigningKeyProvider, SubjectKeyStore, SubjectKeyTombstone, AuditEventBase, LowAuditEvent, MediumAuditEvent, HighAuditEvent, AuditEvent, MerkleProof, ReplayManifest, AuditOptions, AuditMiddlewareHandle, } from './types.js';
+export { createSensitivityResolver } from './sensitivity.js';
+export { createDefaultSigningKeyProvider } from './signingKey.js';
+export { createInMemorySubjectKeyStore } from './subjectKeyStore.js';
+export { createAuditMiddleware } from './middleware.js';
+export { computeMerkleRoot, computeMerkleProof, verifyMerkleProof, canonicalJson, stableStringify, } from './chain.js';
+export type { ChainVerification } from './verify.js';
+export { verifyAuditChain, verifyManifestSignature } from './verify.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACZ,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { createSensitivityResolver } from './sensitivity.js';
+export { createDefaultSigningKeyProvider } from './signingKey.js';
+export { createInMemorySubjectKeyStore } from './subjectKeyStore.js';
+export { createAuditMiddleware } from './middleware.js';
+export { computeMerkleRoot, computeMerkleProof, verifyMerkleProof, canonicalJson, stableStringify, } from './chain.js';
+export { verifyAuditChain, verifyManifestSignature } from './verify.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/middleware.d.ts

@@ -0,0 +1,5 @@
+import type { AuditMiddlewareHandle, AuditOptions, ReplayManifest } from './types.js';
+export declare function createAuditMiddleware(options: AuditOptions): AuditMiddlewareHandle;
+/** Rebuilds the exact signed payload for a manifest (used by verifiers). */
+export declare function manifestSigningPayload(manifest: Omit<ReplayManifest, 'signature'>): string;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,qBAAqB,EACrB,YAAY,EACZ,cAAc,EAEf,MAAM,YAAY,CAAC;AAkJpB,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,GACpB,qBAAqB,CA0XvB;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,GAC1C,MAAM,CA8BR"}