@page-scanner/cli 0.2.0 → 0.2.2

package/dist/verify.js

@@ -0,0 +1,115 @@
+/**
+ * `page-scanner verify` (#55): checks a file against the integrity record the
+ * extension wrote beside it.
+ *
+ * Two questions, answered separately. Is this the file that was exported? Its
+ * SHA-256 and length against the record's. And, when the record is signed,
+ * does the signature hold over the record, with the key the record names?
+ * The second only says the holder of that key made the record; whether that
+ * key is the person it should be is the thumbprint's to answer, which is why
+ * it is printed. Neither says anything about the time, which is the capturing
+ * computer's clock, or about what the page showed anyone else.
+ *
+ * The signed bytes are the record's canonical JSON without `signature`: keys
+ * sorted at every depth, no whitespace, the extension's `canonicalJson`.
+ */
+import { createHash, webcrypto } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { PageScannerError } from './errors.js';
+export const RECORD_SUFFIX = '.integrity.json';
+const RECORD_FORMAT = 'page-scanner-integrity/1';
+/** The extension's `canonicalJson`: the bytes its signature covers. */
+export function canonicalJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const entries = Object.entries(value)
+            .filter(([, item]) => item !== undefined)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+        return `{${entries.map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function badRequest(message, hint) {
+    return new PageScannerError('BAD_REQUEST', message, hint);
+}
+function readRecord(path) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (error) {
+        throw badRequest(`Could not read the record ${path}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const record = parsed;
+    if (!record ||
+        record.format !== RECORD_FORMAT ||
+        typeof record.file?.sha256 !== 'string' ||
+        typeof record.file.bytes !== 'number') {
+        throw badRequest(`${path} is not a Page Scanner integrity record.`);
+    }
+    return record;
+}
+async function signatureHolds(record) {
+    const { signature, ...signed } = record;
+    if (!signature || signature.algorithm !== 'ES256')
+        return false;
+    try {
+        const key = await webcrypto.subtle.importKey('jwk', {
+            kty: signature.publicKey.kty,
+            crv: signature.publicKey.crv,
+            x: signature.publicKey.x,
+            y: signature.publicKey.y,
+        }, { name: 'ECDSA', namedCurve: 'P-256' }, false, ['verify']);
+        const thumbprint = createHash('sha256')
+            .update(JSON.stringify({
+            crv: signature.publicKey.crv,
+            kty: signature.publicKey.kty,
+            x: signature.publicKey.x,
+            y: signature.publicKey.y,
+        }))
+            .digest('base64url');
+        if (thumbprint !== signature.keyThumbprint)
+            return false;
+        return await webcrypto.subtle.verify({ name: 'ECDSA', hash: 'SHA-256' }, key, Buffer.from(signature.value, 'base64url'), Buffer.from(canonicalJson(signed), 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+/** Checks `filePath` against its record, `<file>.integrity.json` unless one is named. */
+export async function verifyCapture(filePath, options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const file = resolve(cwd, filePath);
+    const recordPath = resolve(cwd, options.record ?? `${filePath}${RECORD_SUFFIX}`);
+    if (!existsSync(recordPath)) {
+        throw badRequest(`There is no record at ${recordPath}.`, 'Name it with --record, or export with an integrity record beside the file.');
+    }
+    const record = readRecord(recordPath);
+    let bytes;
+    try {
+        bytes = readFileSync(file);
+    }
+    catch (error) {
+        throw badRequest(`Could not read ${file}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const sha256 = createHash('sha256').update(bytes).digest('hex');
+    const matches = sha256 === record.file.sha256.toLowerCase() && bytes.length === record.file.bytes;
+    const signature = record.signature
+        ? { valid: await signatureHolds(record), keyThumbprint: record.signature.keyThumbprint }
+        : null;
+    return {
+        verified: matches && (signature === null || signature.valid),
+        file: { path: file, matches, sha256, bytes: bytes.length },
+        record: {
+            path: recordPath,
+            expectedSha256: record.file.sha256,
+            expectedBytes: record.file.bytes,
+            url: record.page?.url ?? null,
+            captured: record.captured?.local ?? record.captured?.utc ?? null,
+        },
+        signature,
+    };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,MAAM,aAAa,GAAG,0BAA0B,CAAC;AA8BjD,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAa;IAChD,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CACd,6BAA6B,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAqB,CAAC;IACrC,IACE,CAAC,MAAM;QACP,MAAM,CAAC,MAAM,KAAK,aAAa;QAC/B,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EACrC,CAAC;QACD,MAAM,UAAU,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAmB;IAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACxC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL;YACE,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG;YAC5B,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG;YAC5B,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;SACzB,EACD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;aACpC,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG;YAC5B,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG;YAC5B,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;SACzB,CAAC,CACH;aACA,MAAM,CAAC,WAAW,CAAC,CAAC;QACvB,IAAI,UAAU,KAAK,SAAS,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACzD,OAAO,MAAM,SAAS,CAAC,MAAM,CAAC,MAAM,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,EACzC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,UAA6C,EAAE;IAE/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,QAAQ,GAAG,aAAa,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,yBAAyB,UAAU,GAAG,EACtC,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CACd,kBAAkB,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;IAClG,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS;QAChC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE;QACxF,CAAC,CAAC,IAAI,CAAC;IACT,OAAO;QACL,QAAQ,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC;QAC5D,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;QAC1D,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAClC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YAChC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI;SACjE;QACD,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/version.d.ts

@@ -7,5 +7,5 @@
  * `version.test.ts` asserts this matches package.json, so the copy cannot
  * drift without a red test.
  */
-export declare const CLI_VERSION = "0.2.0";
+export declare const CLI_VERSION = "0.2.2";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -7,5 +7,5 @@
  * `version.test.ts` asserts this matches package.json, so the copy cannot
  * drift without a red test.
  */
-export const CLI_VERSION = '0.2.0';
+export const CLI_VERSION = '0.2.2';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@page-scanner/cli",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Capture a whole web page from the command line, through the Page Scanner Chrome extension.",
   "keywords": [
     "chrome",