@mikeargento/bitgraph 1.9.1 → 1.9.2

package/dist/__tests__/audit-boundary.test.d.ts

@@ -1,20 +0,0 @@
-/**
- * Option A: a bounded proof bundle (a real export excerpt) audits CLEAN.
- *
- * These are the three real, contiguous proofs from an actual export of the
- * BitGraph whitepaper: the before-anchor (112758) -> the whitepaper commit
- * (112760) -> the after-anchor (112762). They chain intact among themselves;
- * the only "missing" link is 112758's predecessor (112756), which precedes the
- * exported window and is legitimately not included.
- *
- * Before Option A, that leading-edge gap surfaced as a `chain-break-missing`
- * anomaly and set exit code 2, making a perfectly good proof bundle look
- * failed. A validly signed, attested proof only exists by extending the chain
- * (fail-closed construction), so the excerpt boundary is expected, not a
- * defect. The audit now records it as an informational boundary entry point:
- * zero anomalies, chain intact, exit 0. Interior holes remain anomalies (see
- * audit-anomalies "missing middle" / "missing head"), so this does not weaken
- * full-epoch auditing.
- */
-export {};
-//# sourceMappingURL=audit-boundary.test.d.ts.map

package/dist/__tests__/audit-boundary.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-boundary.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit-boundary.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/__tests__/audit-boundary.test.js

@@ -1,84 +0,0 @@
-/**
- * Option A: a bounded proof bundle (a real export excerpt) audits CLEAN.
- *
- * These are the three real, contiguous proofs from an actual export of the
- * BitGraph whitepaper: the before-anchor (112758) -> the whitepaper commit
- * (112760) -> the after-anchor (112762). They chain intact among themselves;
- * the only "missing" link is 112758's predecessor (112756), which precedes the
- * exported window and is legitimately not included.
- *
- * Before Option A, that leading-edge gap surfaced as a `chain-break-missing`
- * anomaly and set exit code 2, making a perfectly good proof bundle look
- * failed. A validly signed, attested proof only exists by extending the chain
- * (fail-closed construction), so the excerpt boundary is expected, not a
- * defect. The audit now records it as an informational boundary entry point:
- * zero anomalies, chain intact, exit 0. Interior holes remain anomalies (see
- * audit-anomalies "missing middle" / "missing head"), so this does not weaken
- * full-epoch auditing.
- */
-import { describe, it, before, after } from "node:test";
-import * as assert from "node:assert/strict";
-import { mkdtemp, mkdir, writeFile, rm, readFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { runAudit, buildJsonReport, computeExitFlags, } from "@mikeargento/bitgraph-audit";
-import { computeProofHash } from "@mikeargento/bitgraph-verify";
-function safe(value) {
-    return value.replace(/[^A-Za-z0-9]/g, "_");
-}
-describe("audit: bounded export excerpt is clean (Option A boundary)", () => {
-    let dir;
-    let result;
-    let proofs;
-    before(async () => {
-        proofs = [];
-        for (const name of [
-            "anchor-with-ethereum-112758.json",
-            "successor-112760.json",
-            "anchor-after-112762.json",
-        ]) {
-            const url = new URL(`../../src/__tests__/real-fixtures/${name}`, import.meta.url);
-            proofs.push(JSON.parse(await readFile(fileURLToPath(url), "utf8")));
-        }
-        dir = await mkdtemp(join(tmpdir(), "bitgraph-audit-boundary-"));
-        for (const proof of proofs) {
-            const epochDir = join(dir, "proofs", safe(proof.commit.epochId));
-            await mkdir(epochDir, { recursive: true });
-            const fileName = `${proof.commit.counter}-${safe(computeProofHash(proof))}.json`;
-            await writeFile(join(epochDir, fileName), JSON.stringify(proof));
-        }
-        result = await runAudit(dir);
-    });
-    after(async () => {
-        if (dir !== undefined)
-            await rm(dir, { recursive: true, force: true });
-    });
-    it("reconstructs the excerpt as one intact chain with no anomalies", () => {
-        const report = buildJsonReport(result);
-        assert.equal(result.ingest.counts.observed, 3);
-        assert.equal(result.reconstruction.partitions.length, 1);
-        assert.equal(result.reconstruction.partitions[0].components.length, 1);
-        assert.equal(result.anomalies.anomalies.length, 0);
-        assert.equal(result.anomalies.divergences.length, 0);
-        assert.equal(report.summary.chainIntact, true);
-        assert.equal(report.summary.partitionsIntact, 1);
-    });
-    it("records exactly one boundary entry point: the excerpt's earliest proof (112758)", () => {
-        const report = buildJsonReport(result);
-        assert.equal(report.summary.boundaryEntryPoints, 1);
-        assert.equal(report.boundaryEntryPoints.length, 1);
-        const boundary = report.boundaryEntryPoints[0];
-        const earliest = proofs.find((p) => p.commit.counter === "112758");
-        assert.equal(boundary.proofHash, computeProofHash(earliest));
-        assert.equal(boundary.prevB64, earliest.commit.prevB64);
-    });
-    it("exits clean (code 0): a bounded excerpt is not a failure", () => {
-        assert.deepEqual(computeExitFlags(result), {
-            verificationFailures: false,
-            chainAnomaliesOrDivergences: false,
-            code: 0,
-        });
-    });
-});
-//# sourceMappingURL=audit-boundary.test.js.map

package/dist/__tests__/audit-boundary.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-boundary.test.js","sourceRoot":"","sources":["../../src/__tests__/audit-boundary.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,QAAQ,EACR,eAAe,EACf,gBAAgB,GAEjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAsB,MAAM,8BAA8B,CAAC;AAEpF,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,IAAI,GAAW,CAAC;IAChB,IAAI,MAAmB,CAAC;IACxB,IAAI,MAAqD,CAAC;IAE1D,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,IAAI,IAAI;YACjB,kCAAkC;YAClC,uBAAuB;YACvB,0BAA0B;SAC3B,EAAE,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,qCAAqC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAiB,CAAC,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACjF,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAE,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE;YACzC,oBAAoB,EAAE,KAAK;YAC3B,2BAA2B,EAAE,KAAK;YAClC,IAAI,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/audit-cli.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audit-cli.test.d.ts.map

package/dist/__tests__/audit-cli.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-cli.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit-cli.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/audit-cli.test.js

@@ -1,239 +0,0 @@
-// Copyright (c) Argento Computing Inc. All rights reserved. See LICENSE.
-/**
- * Tests for the bitgraph-audit CLI: spawns the built packages/audit
- * dist/cli.js with node against temp-dir bundles and asserts the written
- * report files, the bit-flag exit codes (0 clean, 1 verification
- * failures including unsupported-version, 2 chain anomalies or
- * divergences, 3 both, 64 usage error), format selection, trust-policy
- * key validation, and the --help exit-code documentation.
- */
-import { describe, it, before, after } from "node:test";
-import * as assert from "node:assert/strict";
-import { spawnSync } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
-import { rm, writeFile } from "node:fs/promises";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { healthyPairs, makeAnchorProof, makeCounterChain, makeEthereumHeader, makeStandardAuditBundle, makeTempDir, proofJson, signBody, utf8, witnessJson, writeBundleDir, b64, } from "./audit-fixtures.js";
-import { sha256 } from "@noble/hashes/sha256";
-import { keccak_256 } from "@noble/hashes/sha3";
-import { computeProofHash } from "@mikeargento/bitgraph-verify";
-const CLI_PATH = fileURLToPath(new URL("../../packages/audit/dist/cli.js", import.meta.url));
-function runCli(args) {
-    const spawned = spawnSync(process.execPath, [CLI_PATH, ...args], { encoding: "utf8" });
-    return {
-        status: spawned.status ?? -1,
-        stdout: spawned.stdout ?? "",
-        stderr: spawned.stderr ?? "",
-    };
-}
-describe("bitgraph-audit CLI", () => {
-    const tempDirs = [];
-    let mixed;
-    let cleanDir;
-    let rejectOnlyDir;
-    let forkOnlyDir;
-    before(async () => {
-        // Mixed bundle: gap + fork (bit 2) and an occ/1 reject (bit 1).
-        mixed = await makeStandardAuditBundle();
-        tempDirs.push(mixed.dir);
-        // Clean bundle: healthy chain with every artifact present.
-        cleanDir = await makeTempDir("bitgraph-audit-cli-clean-");
-        tempDirs.push(cleanDir);
-        const clean = await makeCounterChain({
-            epochId: "epoch-cli-clean",
-            pairs: healthyPairs(2),
-            chainId: "bitgraph:main",
-            payloadPrefix: "cli-clean",
-        });
-        await writeBundleDir(cleanDir, {
-            "proofs/a.json": proofJson(clean.proofs[0].proof),
-            "proofs/b.json": proofJson(clean.proofs[1].proof),
-            "artifacts/a.bin": clean.proofs[0].bytes,
-            "artifacts/b.bin": clean.proofs[1].bytes,
-        });
-        // Reject-only bundle: a single occ/1 proof-shaped file.
-        rejectOnlyDir = await makeTempDir("bitgraph-audit-cli-reject-");
-        tempDirs.push(rejectOnlyDir);
-        await writeBundleDir(rejectOnlyDir, {
-            "old.json": JSON.stringify({
-                version: "occ/1",
-                artifact: { hashAlg: "sha256", digestB64: "b2NjLWxlZ2FjeQ==" },
-                commit: { nonceB64: "b2NjLW5vbmNl" },
-                signer: { publicKeyB64: "b2NjLWtleQ==", signatureB64: "b2NjLXNpZw==" },
-            }),
-        });
-        // Fork-only bundle: valid proofs, one predecessor consumed twice.
-        forkOnlyDir = await makeTempDir("bitgraph-audit-cli-fork-");
-        tempDirs.push(forkOnlyDir);
-        const base = await makeCounterChain({
-            epochId: "epoch-cli-fork",
-            pairs: healthyPairs(2),
-            chainId: "bitgraph:main",
-            payloadPrefix: "cli-fork",
-        });
-        const tail = base.proofs[1];
-        const forkChild = async (slot, commit, payload) => {
-            const bytes = utf8(payload);
-            const commitBody = {
-                nonceB64: b64(crypto.getRandomValues(new Uint8Array(16))),
-                counter: commit,
-                slotCounter: slot,
-                prevB64: tail.chainHash,
-                epochId: "epoch-cli-fork",
-            };
-            commitBody["chainId"] = "bitgraph:main";
-            const proof = await signBody(base.key, { hashAlg: "sha256", digestB64: b64(sha256(bytes)) }, commitBody, "test-measurement-chain");
-            return { proof, proofHash: computeProofHash(proof) };
-        };
-        const childA = await forkChild("5", "6", "cli-fork-a");
-        const childB = await forkChild("7", "8", "cli-fork-b");
-        await writeBundleDir(forkOnlyDir, {
-            "proofs/base-0.json": proofJson(base.proofs[0].proof),
-            "proofs/base-1.json": proofJson(tail.proof),
-            "proofs/fork-a.json": proofJson(childA.proof),
-            "proofs/fork-b.json": proofJson(childB.proof),
-        });
-    });
-    after(async () => {
-        for (const dir of tempDirs)
-            await rm(dir, { recursive: true, force: true });
-    });
-    it("exits 3 on the mixed bundle and writes both report files", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-mixed-");
-        tempDirs.push(outDir);
-        const run = runCli([mixed.dir, "--out", outDir]);
-        assert.equal(run.status, 3, run.stderr);
-        const jsonPath = join(outDir, "audit-report.json");
-        const mdPath = join(outDir, "audit-report.md");
-        assert.ok(existsSync(jsonPath), "audit-report.json written");
-        assert.ok(existsSync(mdPath), "audit-report.md written");
-        // stdout: the short completion line names the files and the exit meaning.
-        assert.ok(run.stdout.includes("audit-report.json"));
-        assert.ok(run.stdout.includes("audit-report.md"));
-        assert.ok(run.stdout.includes("exit 3"));
-        assert.ok(run.stdout.includes("verification failures"));
-        assert.ok(run.stdout.includes("chain anomalies"));
-        // The written JSON is the real report.
-        const written = JSON.parse(readFileSync(jsonPath, "utf8"));
-        assert.equal(written.reportSchemaVersion, "bitgraph-audit-report/2");
-        assert.equal(written.summary.exit.code, 3);
-        // No em dashes in either written file.
-        assert.ok(!readFileSync(jsonPath, "utf8").includes("—"));
-        assert.ok(!readFileSync(mdPath, "utf8").includes("—"));
-    });
-    it("exits 0 on a clean chain-only bundle", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-clean-");
-        tempDirs.push(outDir);
-        const run = runCli([cleanDir, "--out", outDir]);
-        assert.equal(run.status, 0, run.stderr);
-        assert.ok(run.stdout.includes("exit 0"));
-        assert.ok(run.stdout.includes("clean"));
-        assert.ok(existsSync(join(outDir, "audit-report.json")));
-        assert.ok(existsSync(join(outDir, "audit-report.md")));
-    });
-    it("exits 1 on a reject-only bundle (unsupported-version counts as verification failure)", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-reject-");
-        tempDirs.push(outDir);
-        const run = runCli([rejectOnlyDir, "--out", outDir]);
-        assert.equal(run.status, 1, run.stderr);
-        assert.ok(run.stdout.includes("exit 1"));
-    });
-    it("exits 2 on a fork-only bundle (divergence between valid proofs)", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-fork-");
-        tempDirs.push(outDir);
-        const run = runCli([forkOnlyDir, "--out", outDir]);
-        assert.equal(run.status, 2, run.stderr);
-        assert.ok(run.stdout.includes("exit 2"));
-    });
-    it("exits 2 on a bundle whose anchor witness fails offline verification", async () => {
-        const witnessDir = await makeTempDir("bitgraph-audit-cli-witness-");
-        tempDirs.push(witnessDir);
-        const blockNumber = 555000;
-        // The anchor commits the hash of the correct header; the witness carries
-        // a tampered header (different timestamp, so a different keccak hash)
-        // while claiming the correct block hash, so it still matches the anchor
-        // and fails loudly at the hash step instead of disappearing as unmatched.
-        const correct = makeEthereumHeader({ blockNumber, timestamp: 1_700_000_000 });
-        const correctHash = `0x${Buffer.from(keccak_256(correct.headerBytes)).toString("hex")}`;
-        const tampered = makeEthereumHeader({ blockNumber, timestamp: 1_699_999_999 });
-        const anchor = await makeAnchorProof({
-            blockHash: correctHash,
-            blockNumber,
-            epochId: "epoch-cli-witness",
-            counter: "2",
-            slotCounter: "1",
-        });
-        await writeBundleDir(witnessDir, {
-            "proofs/anchor.json": proofJson(anchor.proof),
-            "witnesses/block.json": witnessJson({
-                headerRlpHex: tampered.headerRlpHex,
-                blockNumber,
-                blockHash: correctHash,
-            }),
-        });
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-witness-");
-        tempDirs.push(outDir);
-        const run = runCli([witnessDir, "--out", outDir]);
-        // The anchor itself verifies (no bytes: artifact-unavailable, not a
-        // failure), so bit 1 stays clear; the witness verification failure sets
-        // bit 2. Before the fix this bundle exited 0 "clean".
-        assert.equal(run.status, 2, run.stderr);
-        assert.ok(run.stdout.includes("exit 2"));
-        assert.ok(run.stdout.includes("anchor witness verification failures"));
-        const report = JSON.parse(readFileSync(join(outDir, "audit-report.json"), "utf8"));
-        assert.equal(report.summary.exit.code, 2);
-        assert.ok((report.summary.anomalyCountsByCode["witness-hash-mismatch"] ?? 0) >= 1);
-    });
-    it("exits 1 when a supplied policy makes bytes-free proofs fail (requireSlot)", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-policy-");
-        tempDirs.push(outDir);
-        const policyPath = join(outDir, "policy.json");
-        await writeFile(policyPath, JSON.stringify({ requireSlot: true }), "utf8");
-        // Fork-only proofs carry no slotAllocation record, so requireSlot
-        // fails them; the divergence keeps bit 2 set as well.
-        const run = runCli([forkOnlyDir, "--out", outDir, "--trust-policy", policyPath]);
-        assert.equal(run.status, 3, run.stderr);
-    });
-    it("writes only JSON with --format json", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-json-");
-        tempDirs.push(outDir);
-        const run = runCli([cleanDir, "--out", outDir, "--format", "json"]);
-        assert.equal(run.status, 0, run.stderr);
-        assert.ok(existsSync(join(outDir, "audit-report.json")));
-        assert.ok(!existsSync(join(outDir, "audit-report.md")));
-        assert.ok(!run.stdout.includes("audit-report.md"));
-    });
-    it("rejects an unknown trust-policy key with usage and the valid field list", async () => {
-        const outDir = await makeTempDir("bitgraph-audit-cli-out-badpolicy-");
-        tempDirs.push(outDir);
-        const policyPath = join(outDir, "bad-policy.json");
-        await writeFile(policyPath, JSON.stringify({ requireBytes: true }), "utf8");
-        const run = runCli([cleanDir, "--out", outDir, "--trust-policy", policyPath]);
-        assert.equal(run.status, 64);
-        assert.ok(run.stderr.includes("requireBytes"), "names the unknown key");
-        assert.ok(run.stderr.includes("allowedMeasurements"), "lists the valid keys");
-        assert.ok(run.stderr.includes("requireSlot"), "lists the valid keys");
-        assert.ok(run.stderr.includes("Usage:"), "prints usage");
-        assert.ok(!existsSync(join(outDir, "audit-report.json")), "no report on usage error");
-    });
-    it("documents the exit-code semantics in --help", () => {
-        const run = runCli(["--help"]);
-        assert.equal(run.status, 0);
-        assert.ok(run.stdout.includes("Exit codes (bit flags):"));
-        for (const marker of ["0 ", "1 ", "2 ", "3 ", "64"]) {
-            assert.ok(run.stdout.includes(`  ${marker}`), `documents exit code ${marker.trim()}`);
-        }
-        assert.ok(run.stdout.includes("unsupported version"));
-        assert.ok(run.stdout.includes("NOT a failure"));
-        assert.ok(run.stdout.includes("Attestation validation results"));
-        assert.ok(!run.stdout.includes("—"), "help text contains no em dashes");
-    });
-    it("errors with usage when no bundle path is given", () => {
-        const run = runCli([]);
-        assert.equal(run.status, 64);
-        assert.ok(run.stderr.includes("missing bundle path"));
-        assert.ok(run.stderr.includes("Usage:"));
-    });
-});
-//# sourceMappingURL=audit-cli.test.js.map

package/dist/__tests__/audit-cli.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-cli.test.js","sourceRoot":"","sources":["../../src/__tests__/audit-cli.test.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,cAAc,EACd,GAAG,GAEJ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAGhE,MAAM,QAAQ,GAAG,aAAa,CAC5B,IAAI,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7D,CAAC;AAEF,SAAS,MAAM,CAAC,IAAc;IAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAA0B,CAAC;IAC/B,IAAI,QAAgB,CAAC;IACrB,IAAI,aAAqB,CAAC;IAC1B,IAAI,WAAmB,CAAC;IAExB,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,gEAAgE;QAChE,KAAK,GAAG,MAAM,uBAAuB,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEzB,2DAA2D;QAC3D,QAAQ,GAAG,MAAM,WAAW,CAAC,2BAA2B,CAAC,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;YACnC,OAAO,EAAE,iBAAiB;YAC1B,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YACtB,OAAO,EAAE,eAAe;YACxB,aAAa,EAAE,WAAW;SAC3B,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,QAAQ,EAAE;YAC7B,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YAClD,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YAClD,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK;YACzC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK;SAC1C,CAAC,CAAC;QAEH,wDAAwD;QACxD,aAAa,GAAG,MAAM,WAAW,CAAC,4BAA4B,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7B,MAAM,cAAc,CAAC,aAAa,EAAE;YAClC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBACzB,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE;gBAC9D,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;gBACpC,MAAM,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE;aACvE,CAAC;SACH,CAAC,CAAC;QAEH,kEAAkE;QAClE,WAAW,GAAG,MAAM,WAAW,CAAC,0BAA0B,CAAC,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;YAClC,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YACtB,OAAO,EAAE,eAAe;YACxB,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAE,MAAc,EAAE,OAAe,EAAE,EAAE;YACxE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,GAA4B;gBAC1C,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzD,OAAO,EAAE,MAAM;gBACf,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,IAAI,CAAC,SAAS;gBACvB,OAAO,EAAE,gBAAgB;aAC1B,CAAC;YACD,UAAiD,CAAC,SAAS,CAAC,GAAG,eAAe,CAAC;YAChF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,IAAI,CAAC,GAAG,EACR,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EACpD,UAAU,EACV,wBAAwB,CACzB,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,cAAc,CAAC,WAAW,EAAE;YAChC,oBAAoB,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YACtD,oBAAoB,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAC3C,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,+BAA+B,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAEzD,0EAA0E;QAC1E,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAElD,uCAAuC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAGxD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,uCAAuC;QACvC,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,+BAA+B,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,8BAA8B,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,6BAA6B,CAAC,CAAC;QACpE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAG,MAAM,CAAC;QAC3B,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,WAAW;YACtB,WAAW;YACX,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,GAAG;YACZ,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,UAAU,EAAE;YAC/B,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,sBAAsB,EAAE,WAAW,CAAC;gBAClC,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,WAAW;gBACX,SAAS,EAAE,WAAW;aACvB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,iCAAiC,CAAC,CAAC;QACpE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,oEAAoE;QACpE,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAEhF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,kEAAkE;QAClE,sDAAsD;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,8BAA8B,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,mCAAmC,CAAC,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC1D,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,EAAE,uBAAuB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/audit-dependencies.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audit-dependencies.test.d.ts.map

package/dist/__tests__/audit-dependencies.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-dependencies.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit-dependencies.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/audit-dependencies.test.js

@@ -1,116 +0,0 @@
-// Copyright (c) Argento Computing Inc. All rights reserved. See LICENSE.
-/**
- * Dependency audit for @mikeargento/bitgraph-audit (Phase 4e).
- *
- * The audit package promises zero runtime network access. This suite pins
- * that promise mechanically:
- *
- *   1. The declared runtime dependency closure is exactly
- *      @mikeargento/bitgraph-verify plus @noble/hashes, with
- *      @noble/ed25519 arriving only transitively through verify. Nothing
- *      else, and no peer or optional dependencies that could widen it.
- *   2. An fs walk of the shipped module graphs (packages/audit/dist and
- *      packages/verify/dist, which is inside the runtime closure) asserts
- *      no compiled file references node:http, node:https, node:net,
- *      node:dgram, node:tls, XMLHttpRequest, WebSocket, a bare
- *      http/https/net/tls/dgram import, or a global fetch call.
- *
- * The @noble packages were audited by hand and recorded in DECISIONS.md:
- * pure crypto, no network APIs. (@noble/hashes sha3-addons defines a hash
- * CLASS METHOD named fetch for XOF output; it is not the global fetch and
- * the audit package does not import sha3-addons.)
- */
-import { describe, it } from "node:test";
-import * as assert from "node:assert/strict";
-import { readFile, readdir } from "node:fs/promises";
-import { fileURLToPath } from "node:url";
-import { join } from "node:path";
-// Compiled location: <repo>/dist/__tests__/audit-dependencies.test.js
-const repoRoot = fileURLToPath(new URL("../..", import.meta.url));
-async function walkJsFiles(dir) {
-    const out = [];
-    const entries = await readdir(dir, { withFileTypes: true });
-    entries.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
-    for (const entry of entries) {
-        const abs = join(dir, entry.name);
-        if (entry.isDirectory()) {
-            out.push(...(await walkJsFiles(abs)));
-        }
-        else if (entry.isFile() && entry.name.endsWith(".js")) {
-            out.push(abs);
-        }
-    }
-    return out;
-}
-/**
- * Forbidden references. Substring checks for the node: specifiers and the
- * browser network globals (these strings have no legitimate reason to
- * appear anywhere in the compiled output, comments included), plus
- * pattern checks for bare-specifier network imports and global fetch
- * calls.
- */
-const FORBIDDEN_SUBSTRINGS = [
-    "node:http",
-    "node:https",
-    "node:net",
-    "node:dgram",
-    "node:tls",
-    "XMLHttpRequest",
-    "WebSocket",
-];
-const FORBIDDEN_PATTERNS = [
-    ["bare network import", /(?:from\s*|require\s*\(\s*|import\s*\(\s*)["'](?:http|https|net|tls|dgram)["']/],
-    ["global fetch call", /\bfetch\s*\(/],
-];
-async function assertGraphClean(distDir) {
-    const files = await walkJsFiles(distDir);
-    assert.ok(files.length > 0, `compiled module graph exists at ${distDir} (run the build first)`);
-    for (const file of files) {
-        const source = await readFile(file, "utf8");
-        for (const needle of FORBIDDEN_SUBSTRINGS) {
-            assert.ok(!source.includes(needle), `${file} must not reference ${needle}`);
-        }
-        for (const [name, pattern] of FORBIDDEN_PATTERNS) {
-            assert.ok(!pattern.test(source), `${file} must not contain a ${name}`);
-        }
-    }
-    return files.length;
-}
-describe("audit package dependency audit: zero network surface", () => {
-    it("declares exactly the allowed runtime dependency closure", async () => {
-        const auditPkg = JSON.parse(await readFile(join(repoRoot, "packages", "audit", "package.json"), "utf8"));
-        const verifyPkg = JSON.parse(await readFile(join(repoRoot, "packages", "verify", "package.json"), "utf8"));
-        assert.deepEqual(Object.keys(auditPkg["dependencies"] ?? {}).sort(), ["@mikeargento/bitgraph-verify", "@noble/hashes"], "audit runtime dependencies are exactly verify + @noble/hashes");
-        assert.deepEqual(Object.keys(verifyPkg["dependencies"] ?? {}).sort(), ["@noble/ed25519", "@noble/hashes"], "verify (the only workspace dependency) brings exactly the @noble crypto pair");
-        // No side doors that could widen the closure at install time.
-        for (const [pkgName, pkg] of [
-            ["audit", auditPkg],
-            ["verify", verifyPkg],
-        ]) {
-            assert.equal(pkg["peerDependencies"], undefined, `${pkgName} has no peerDependencies`);
-            assert.equal(pkg["optionalDependencies"], undefined, `${pkgName} has no optionalDependencies`);
-            assert.equal(pkg["bundledDependencies"], undefined, `${pkgName} has no bundledDependencies`);
-        }
-    });
-    it("packages/audit/dist references no network API", async () => {
-        const count = await assertGraphClean(join(repoRoot, "packages", "audit", "dist"));
-        assert.ok(count >= 15, `walked the full audit module graph (${count} files)`);
-    });
-    it("packages/verify/dist (runtime closure member) references no network API", async () => {
-        const count = await assertGraphClean(join(repoRoot, "packages", "verify", "dist"));
-        assert.ok(count >= 4, `walked the full verify module graph (${count} files)`);
-    });
-    it("README ships resolvable doc links (absolute GitHub URLs, never repo-relative)", async () => {
-        // README.md is in the package "files" allowlist but docs/ is not, so
-        // repo-relative doc links would be dead on npmjs.com. They must be
-        // absolute GitHub URLs.
-        const readme = await readFile(join(repoRoot, "packages", "audit", "README.md"), "utf8");
-        const base = "https://github.com/mikeargento/bitgraph/blob/main/docs";
-        assert.ok(readme.includes(`${base}/BUNDLE-FORMAT.md`), "BUNDLE-FORMAT.md link is absolute");
-        assert.ok(readme.includes(`${base}/HOW-TO-AUDIT.md`), "HOW-TO-AUDIT.md link is absolute");
-        // No markdown link target resolves to a repo-relative docs path.
-        assert.ok(!/\]\(docs\//.test(readme), "no repo-relative docs/ link targets");
-        assert.ok(!/\]\(\.{1,2}\/.*docs\//.test(readme), "no relative docs/ link targets");
-    });
-});
-//# sourceMappingURL=audit-dependencies.test.js.map

package/dist/__tests__/audit-dependencies.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-dependencies.test.js","sourceRoot":"","sources":["../../src/__tests__/audit-dependencies.test.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,sEAAsE;AACtE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAElE,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG;IAC3B,WAAW;IACX,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,WAAW;CACH,CAAC;AAEX,MAAM,kBAAkB,GAAmD;IACzE,CAAC,qBAAqB,EAAE,gFAAgF,CAAC;IACzG,CAAC,mBAAmB,EAAE,cAAc,CAAC;CACtC,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAAC,OAAe;IAC7C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,mCAAmC,OAAO,wBAAwB,CAAC,CAAC;IAChG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACjD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACtB,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAC1B,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACvB,CAAC;QAExD,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAClD,CAAC,8BAA8B,EAAE,eAAe,CAAC,EACjD,+DAA+D,CAChE,CAAC;QACF,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EACnD,CAAC,gBAAgB,EAAE,eAAe,CAAC,EACnC,8EAA8E,CAC/E,CAAC;QACF,8DAA8D;QAC9D,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI;YAC3B,CAAC,OAAO,EAAE,QAAQ,CAAC;YACnB,CAAC,QAAQ,EAAE,SAAS,CAAC;SACb,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,0BAA0B,CAAC,CAAC;YACvF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,8BAA8B,CAAC,CAAC;YAC/F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,6BAA6B,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,uCAAuC,KAAK,SAAS,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,wCAAwC,KAAK,SAAS,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,qEAAqE;QACrE,mEAAmE;QACnE,wBAAwB;QACxB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,EAChD,MAAM,CACP,CAAC;QACF,MAAM,IAAI,GAAG,wDAAwD,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,mBAAmB,CAAC,EAAE,mCAAmC,CAAC,CAAC;QAC5F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,kBAAkB,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAC1F,iEAAiE;QACjE,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}