@mikeargento/bitgraph-audit 0.6.4 → 0.8.0

package/src/ingest.ts

@@ -43,6 +43,7 @@ import { readTarEntries } from "./tar.js";
 import { combineEntryDigests } from "./contents-hash.js";
 import type {
   AnchorWitnessFile,
+  CeilingFile,
   ArtifactRecord,
   AuditFinding,
   BundleManifest,
@@ -82,6 +83,8 @@ const NUL = new Uint8Array([0]);
 const MANIFEST_PATH = "manifest.json";
 const BUNDLE_VERSION = "bitgraph-bundle/1";
 const WITNESS_VERSION = "bitgraph-anchor-witness/1";
+const CEILING_VERSION_TAG = "bitgraph-ceiling/1";
+const CEILING_STATUS_VERSION_TAG = "bitgraph-ceiling-status/1";
 
 // ---------------------------------------------------------------------------
 // Public API
@@ -336,6 +339,8 @@ function finalizeIngest(params: FinalizeParams): IngestResult {
   const proofsByHash = new Map<string, ObservedProof>();
   const unsupportedVersions: UnsupportedVersionRecord[] = [];
   const witnesses: AnchorWitnessFile[] = [];
+  const ceilings: CeilingFile[] = [];
+  const ceilingStatuses: CeilingFile[] = [];
   const artifactsByHex = new Map<string, ArtifactRecord>();
   let manifest: ManifestReport | undefined;
   let proofFiles = 0;
@@ -393,6 +398,17 @@ function finalizeIngest(params: FinalizeParams): IngestResult {
       continue;
     }
 
+    // A ceiling in time travels beside its proof: evidence, never an artifact.
+    const pv = parsed !== undefined ? (parsed as Record<string, unknown>)["version"] : undefined;
+    if (pv === CEILING_VERSION_TAG || pv === CEILING_STATUS_VERSION_TAG) {
+      (pv === CEILING_VERSION_TAG ? ceilings : ceilingStatuses).push({
+        path: entry.path,
+        fileSha256Hex: entry.sha256Hex,
+        json: parsed as Record<string, unknown>,
+      });
+      continue;
+    }
+
     indexArtifact(entry, artifactsByHex);
   }
 
@@ -420,6 +436,7 @@ function finalizeIngest(params: FinalizeParams): IngestResult {
     unsupportedVersion: unsupportedVersions.length,
     artifacts: artifacts.length,
     witnesses: witnesses.length,
+    ceilings: ceilings.length + ceilingStatuses.length,
     skippedUnsafePaths,
   };
 
@@ -432,6 +449,8 @@ function finalizeIngest(params: FinalizeParams): IngestResult {
     unsupportedVersions,
     artifacts,
     witnesses,
+    ceilings,
+    ceilingStatuses,
     ...(manifest !== undefined ? { manifest } : {}),
     computedContentsHashB64,
     findings,

package/src/report-json.ts

@@ -109,6 +109,9 @@ export function buildJsonReport(result: AuditResult): AuditJsonReport {
       groups: result.authorities.groups,
       sharedSignersAcrossEpochs: result.authorities.sharedSignersAcrossEpochs,
     },
+    ...(result.ceilings && (result.ceilings.checks.length > 0 || result.ceilings.statuses.length > 0)
+      ? { ceilings: result.ceilings }
+      : {}),
     attestations: {
       records: result.attestations.records,
       counts: result.attestations.counts,

package/src/report-md.ts

@@ -333,6 +333,28 @@ function executiveSummary(
   );
   lines.push("");
 
+  // Ceilings in time (bitgraph-ceiling/1), only when the bundle carries any.
+  const cl = report.ceilings;
+  if (cl && (cl.checks.length > 0 || cl.statuses.length > 0)) {
+    lines.push("### Ceilings in time (Base)");
+    lines.push("");
+    lines.push(`Checked against writer ${inlineCode(cl.writer)} on chain ${cl.chainId}.`);
+    lines.push("");
+    for (const c of cl.checks) {
+      if (c.status === "verified") {
+        const w = c.window!;
+        const width = w.widthSeconds != null ? `, ${w.widthSeconds} s after the floor block` : "";
+        lines.push(`- VERIFIED ${inlineCode(c.path)}: ${c.label ?? ""}${width}. ${c.onChainDetail ?? ""}.`);
+      } else {
+        lines.push(`- ${c.status.toUpperCase()} ${inlineCode(c.path)}: ${c.reason ?? ""}`);
+      }
+      // Settlement on Ethereum (bitgraph-settlement/1), one line per layer.
+      for (const line of c.settlement?.lines ?? []) lines.push(`  - ${line}`);
+    }
+    for (const st of cl.statuses) lines.push(`- ${st.status} ${inlineCode(st.path)}: ${st.note}`);
+    lines.push("");
+  }
+
   // External time evidence.
   lines.push("### External time evidence");
   lines.push("");