@omnitype-code/journal 2.0.0

package/dist/verify/chain-verify.js

@@ -0,0 +1,119 @@
+/**
+ * Chain integrity verifier.
+ *
+ * Streams all segment files in order and checks:
+ *  1. Monotonic seq — no gaps, no duplicates
+ *  2. prev pointer — each event's prev must equal SHA-256(previous event)
+ *  3. HMAC sig — re-derived from install.key must match stored sig
+ *
+ * Usage:
+ *   omnitype-daemon verify [--from-seq N] [--to-seq M] [--report text|json]
+ */
+import { SegmentReader } from '../log/segment.js';
+import { loadOrCreateInstallKey, verifyEventSig, hashEvent, ZERO_HASH, } from '../crypto/chain.js';
+export async function verifyChain(opts) {
+    const start = Date.now();
+    const installKey = loadOrCreateInstallKey(opts.keysDir);
+    const result = {
+        ok: true,
+        total_verified: 0,
+        first_seq: -1,
+        last_seq: -1,
+        first_ts: 0,
+        last_ts: 0,
+        gaps: [],
+        hmac_failures: [],
+        prev_mismatches: [],
+        duration_ms: 0,
+    };
+    let prevHash = ZERO_HASH;
+    let prevSeq = (opts.fromSeq ?? 0) - 1;
+    for (const event of SegmentReader.readAll(opts.segmentsDir)) {
+        if (opts.fromSeq !== undefined && event.seq < opts.fromSeq)
+            continue;
+        if (opts.toSeq !== undefined && event.seq > opts.toSeq)
+            break;
+        // ── 1. Gap detection ───────────────────────────────────────────────────
+        if (prevSeq >= 0 && event.seq !== prevSeq + 1) {
+            result.gaps.push({ after_seq: prevSeq, before_seq: event.seq });
+            result.ok = false;
+        }
+        // ── 2. prev pointer check ──────────────────────────────────────────────
+        // First event in range may have any prev (we don't have the prior event)
+        if (result.total_verified > 0 || (opts.fromSeq !== undefined && opts.fromSeq > 0)) {
+            if (result.total_verified > 0 && event.prev !== prevHash) {
+                result.prev_mismatches.push({
+                    seq: event.seq,
+                    expected: prevHash.slice(0, 16) + '...',
+                    got: event.prev.slice(0, 16) + '...',
+                });
+                result.ok = false;
+            }
+        }
+        // ── 3. HMAC sig verification ───────────────────────────────────────────
+        const sigOk = verifyEventSig(installKey, event);
+        if (!sigOk) {
+            result.hmac_failures.push({ seq: event.seq, reason: 'sig_mismatch' });
+            result.ok = false;
+        }
+        // ── bookkeeping ────────────────────────────────────────────────────────
+        prevHash = hashEvent(event);
+        prevSeq = event.seq;
+        result.total_verified++;
+        if (result.first_seq === -1) {
+            result.first_seq = event.seq;
+            result.first_ts = event.ts;
+        }
+        result.last_seq = event.seq;
+        result.last_ts = event.ts;
+    }
+    result.duration_ms = Date.now() - start;
+    return result;
+}
+export function formatVerifyResult(result, format = 'text') {
+    if (format === 'json')
+        return JSON.stringify(result, null, 2);
+    const lines = [];
+    lines.push('\nOmniType — Chain Verify');
+    lines.push('─'.repeat(50));
+    lines.push(`  Events verified : ${result.total_verified}`);
+    lines.push(`  Seq range       : ${result.first_seq} → ${result.last_seq}`);
+    if (result.first_ts > 0 && result.last_ts > 0) {
+        const span = ((result.last_ts - result.first_ts) / 1e6 / 60).toFixed(1);
+        lines.push(`  Time span       : ${span} minutes`);
+    }
+    lines.push(`  Verify time     : ${result.duration_ms}ms`);
+    lines.push('');
+    if (result.gaps.length > 0) {
+        lines.push(`  ✗  Gaps detected (${result.gaps.length}):`);
+        for (const g of result.gaps.slice(0, 5)) {
+            lines.push(`     seq ${g.after_seq} → ${g.before_seq} (missing ${g.before_seq - g.after_seq - 1} event(s))`);
+        }
+        if (result.gaps.length > 5)
+            lines.push(`     … and ${result.gaps.length - 5} more`);
+    }
+    if (result.hmac_failures.length > 0) {
+        lines.push(`  ✗  HMAC failures (${result.hmac_failures.length}):`);
+        for (const f of result.hmac_failures.slice(0, 5)) {
+            lines.push(`     seq ${f.seq}: ${f.reason}`);
+        }
+        if (result.hmac_failures.length > 5)
+            lines.push(`     … and ${result.hmac_failures.length - 5} more`);
+    }
+    if (result.prev_mismatches.length > 0) {
+        lines.push(`  ✗  Prev-hash mismatches (${result.prev_mismatches.length}):`);
+        for (const m of result.prev_mismatches.slice(0, 5)) {
+            lines.push(`     seq ${m.seq}: expected ${m.expected}, got ${m.got}`);
+        }
+    }
+    if (result.ok) {
+        lines.push(`  ✓  All checks passed — chain is intact.`);
+    }
+    else {
+        const total = result.gaps.length + result.hmac_failures.length + result.prev_mismatches.length;
+        lines.push(`  ✗  ${total} integrity issue(s) found.`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=chain-verify.js.map

package/dist/verify/chain-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-verify.js","sourceRoot":"","sources":["../../src/verify/chain-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,SAAS,EACT,SAAS,GACV,MAAM,oBAAoB,CAAC;AAwB5B,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAmB;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAExD,MAAM,MAAM,GAAiB;QAC3B,EAAE,EAAE,IAAI;QACR,cAAc,EAAE,CAAC;QACjB,SAAS,EAAE,CAAC,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,EAAE;QACR,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE,CAAC;KACf,CAAC;IAEF,IAAI,QAAQ,GAAW,SAAS,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAEtC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO;YAAE,SAAS;QACrE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK;YAAE,MAAM;QAE9D,0EAA0E;QAC1E,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;YAClF,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;oBAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;oBACvC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;iBACrC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,KAAqB,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,0EAA0E;QAC1E,QAAQ,GAAG,SAAS,CAAC,KAAqB,CAAC,CAAC;QAC5C,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,cAAc,EAAE,CAAC;QAExB,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;YAC7B,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;QAC5B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,SAA0B,MAAM;IACvF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE3E,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,UAAU,aAAa,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;QACnE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IACxG,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@omnitype-code/journal",
+  "version": "2.0.0",
+  "description": "OmniType v2 — append-only attribution journal daemon",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "omnitype-daemon": "./dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/cli.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "cbor-x": "^1.5.9",
+    "commander": "^12.1.0"
+  },
+  "optionalDependencies": {
+    "@omnitype-code/adapter-sdk": "^2.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "~5.9.3",
+    "vitest": "^3.2.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/omnitype-code/omnitype-v2"
+  },
+  "keywords": ["attribution", "ai-coding", "provenance", "journal", "deterministic"]
+}