@paniniapi/forensics 0.0.0-stage → 0.1.0

package/dist/asn1.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Minimal DER (X.690) parser — enough surface to walk PKCS#7/CMS
+ * SignedData and X.509 certificate wrappers embedded in PDF digital
+ * signatures. Zero-dependency; throws `Asn1Error` on malformed input so
+ * callers can degrade to a signal rather than crash.
+ */
+export declare class Asn1Error extends Error {
+}
+export interface Asn1Node {
+    /** Class: 0 universal, 1 application, 2 context-specific, 3 private. */
+    readonly tagClass: number;
+    readonly constructed: boolean;
+    readonly tagNumber: number;
+    /** Raw TLV bytes including tag+length — needed to re-sign structures. */
+    readonly tlv: Uint8Array;
+    /** Content octets (for primitives) or the concatenated children TLVs. */
+    readonly content: Uint8Array;
+    /** Parsed children for constructed nodes. */
+    readonly children: readonly Asn1Node[];
+}
+export declare const TAG: {
+    readonly EOC: 0;
+    readonly BOOLEAN: 1;
+    readonly INTEGER: 2;
+    readonly BIT_STRING: 3;
+    readonly OCTET_STRING: 4;
+    readonly NULL: 5;
+    readonly OBJECT_ID: 6;
+    readonly UTF8_STRING: 12;
+    readonly PRINTABLE_STRING: 19;
+    readonly TELETEX_STRING: 20;
+    readonly IA5_STRING: 22;
+    readonly UTC_TIME: 23;
+    readonly GENERALIZED_TIME: 24;
+    readonly SEQUENCE: 16;
+    readonly SET: 17;
+};
+/** Parse the single top-level TLV in `buf`. Trailing bytes are an error. */
+export declare function parseDer(buf: Uint8Array): Asn1Node;
+/**
+ * Parse a top-level TLV tolerating trailing 0x00 padding — PDF /Contents
+ * hex strings are padded with zeros to a fixed length per ISO 32000.
+ */
+export declare function parseDerPadded(buf: Uint8Array): Asn1Node;
+/** Expect a universal tag; throws on mismatch. */
+export declare function expectTag(node: Asn1Node, tag: number, what: string): Asn1Node;
+/** Integer content → bigint (handles arbitrary size, positive only). */
+export declare function intValue(node: Asn1Node): bigint;
+/** OID content → dotted string. */
+export declare function oidValue(node: Asn1Node): string;
+/** Any text-ish string content → utf8-ish string. */
+export declare function stringValue(node: Asn1Node): string;
+/** Context-specific child with tag `n` (explicit-wrapped or direct). */
+export declare function ctxTag(node: Asn1Node, n: number): Asn1Node | undefined;
+/** Find first direct child matching class/tag. */
+export declare function child(node: Asn1Node, tagClass: number, tagNumber: number): Asn1Node | undefined;
+/** Find first direct child of a universal tag. */
+export declare function universal(node: Asn1Node, tagNumber: number): Asn1Node | undefined;
+//# sourceMappingURL=asn1.d.ts.map

package/dist/asn1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asn1.d.ts","sourceRoot":"","sources":["../src/asn1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;GAKG;AAEH,qBAAa,SAAU,SAAQ,KAAK;CAAG;AAEvC,MAAM,WAAW,QAAQ;IACvB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;CACxC;AAoBD,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;CAAY,CAAC;AAmD7B,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CAIlD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CAMxD;AAED,kDAAkD;AAClD,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAK7E;AAED,wEAAwE;AACxE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAK/C;AAED,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAc/C;AAED,qDAAqD;AACrD,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAQlD;AAED,wEAAwE;AACxE,wBAAgB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAGtE;AAED,kDAAkD;AAClD,wBAAgB,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAE/F;AAED,kDAAkD;AAClD,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAEjF"}

package/dist/asn1.js

@@ -0,0 +1,186 @@
+"use strict";
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TAG = exports.Asn1Error = void 0;
+exports.parseDer = parseDer;
+exports.parseDerPadded = parseDerPadded;
+exports.expectTag = expectTag;
+exports.intValue = intValue;
+exports.oidValue = oidValue;
+exports.stringValue = stringValue;
+exports.ctxTag = ctxTag;
+exports.child = child;
+exports.universal = universal;
+/**
+ * Minimal DER (X.690) parser — enough surface to walk PKCS#7/CMS
+ * SignedData and X.509 certificate wrappers embedded in PDF digital
+ * signatures. Zero-dependency; throws `Asn1Error` on malformed input so
+ * callers can degrade to a signal rather than crash.
+ */
+class Asn1Error extends Error {
+}
+exports.Asn1Error = Asn1Error;
+const UNIVERSAL = {
+    EOC: 0,
+    BOOLEAN: 1,
+    INTEGER: 2,
+    BIT_STRING: 3,
+    OCTET_STRING: 4,
+    NULL: 5,
+    OBJECT_ID: 6,
+    UTF8_STRING: 12,
+    PRINTABLE_STRING: 19,
+    TELETEX_STRING: 20,
+    IA5_STRING: 22,
+    UTC_TIME: 23,
+    GENERALIZED_TIME: 24,
+    SEQUENCE: 16,
+    SET: 17,
+};
+exports.TAG = UNIVERSAL;
+function readLength(buf, off) {
+    if (off >= buf.length)
+        throw new Asn1Error('DER: truncated length');
+    const first = buf[off];
+    if (first < 0x80)
+        return { len: first, next: off + 1 };
+    const n = first & 0x7f;
+    if (n === 0)
+        throw new Asn1Error('DER: indefinite length is not DER');
+    if (n > 4 || off + 1 + n > buf.length)
+        throw new Asn1Error('DER: bad long-form length');
+    let len = 0;
+    for (let i = 0; i < n; i++)
+        len = len * 256 + buf[off + 1 + i];
+    return { len, next: off + 1 + n };
+}
+/** Parse one TLV at `off`; returns node and offset past it. */
+function readNode(buf, off) {
+    if (off >= buf.length)
+        throw new Asn1Error('DER: truncated tag');
+    const tagByte = buf[off];
+    const tagClass = (tagByte >> 6) & 0x03;
+    const constructed = (tagByte & 0x20) !== 0;
+    let tagNumber = tagByte & 0x1f;
+    let pos = off + 1;
+    if (tagNumber === 0x1f) {
+        // high-tag-number form
+        tagNumber = 0;
+        for (;;) {
+            if (pos >= buf.length)
+                throw new Asn1Error('DER: truncated high tag');
+            const b = buf[pos++];
+            tagNumber = tagNumber * 128 + (b & 0x7f);
+            if ((b & 0x80) === 0)
+                break;
+        }
+    }
+    const { len, next } = readLength(buf, pos);
+    if (next + len > buf.length)
+        throw new Asn1Error('DER: content overruns buffer');
+    const content = buf.subarray(next, next + len);
+    const tlv = buf.subarray(off, next + len);
+    const children = [];
+    if (constructed) {
+        let c = 0;
+        while (c < content.length) {
+            const r = readNode(content, c);
+            children.push(r.node);
+            c = r.next;
+        }
+    }
+    return {
+        node: { tagClass, constructed, tagNumber, content, tlv, children },
+        next: next + len,
+    };
+}
+/** Parse the single top-level TLV in `buf`. Trailing bytes are an error. */
+function parseDer(buf) {
+    const { node, next } = readNode(buf, 0);
+    if (next !== buf.length)
+        throw new Asn1Error('DER: trailing bytes after top-level TLV');
+    return node;
+}
+/**
+ * Parse a top-level TLV tolerating trailing 0x00 padding — PDF /Contents
+ * hex strings are padded with zeros to a fixed length per ISO 32000.
+ */
+function parseDerPadded(buf) {
+    const { node, next } = readNode(buf, 0);
+    for (let i = next; i < buf.length; i++) {
+        if (buf[i] !== 0)
+            throw new Asn1Error('DER: non-zero trailing bytes after top-level TLV');
+    }
+    return node;
+}
+/** Expect a universal tag; throws on mismatch. */
+function expectTag(node, tag, what) {
+    if (node.tagClass !== 0 || node.tagNumber !== tag) {
+        throw new Asn1Error(`DER: expected ${what} (universal ${tag})`);
+    }
+    return node;
+}
+/** Integer content → bigint (handles arbitrary size, positive only). */
+function intValue(node) {
+    expectTag(node, UNIVERSAL.INTEGER, 'INTEGER');
+    let v = 0n;
+    for (const b of node.content)
+        v = (v << 8n) | BigInt(b);
+    return v;
+}
+/** OID content → dotted string. */
+function oidValue(node) {
+    expectTag(node, UNIVERSAL.OBJECT_ID, 'OBJECT IDENTIFIER');
+    const c = node.content;
+    if (c.length === 0)
+        throw new Asn1Error('DER: empty OID');
+    const parts = [Math.floor(c[0] / 40), c[0] % 40];
+    let v = 0;
+    for (let i = 1; i < c.length; i++) {
+        v = v * 128 + (c[i] & 0x7f);
+        if ((c[i] & 0x80) === 0) {
+            parts.push(v);
+            v = 0;
+        }
+    }
+    return parts.join('.');
+}
+/** Any text-ish string content → utf8-ish string. */
+function stringValue(node) {
+    if (node.tagNumber === UNIVERSAL.UTC_TIME || node.tagNumber === UNIVERSAL.GENERALIZED_TIME) {
+        return Buffer.from(node.content).toString('latin1');
+    }
+    if (node.tagNumber === UNIVERSAL.BIT_STRING || node.tagNumber === UNIVERSAL.OCTET_STRING) {
+        return Buffer.from(node.content).toString('latin1');
+    }
+    return Buffer.from(node.content).toString('utf8');
+}
+/** Context-specific child with tag `n` (explicit-wrapped or direct). */
+function ctxTag(node, n) {
+    if (node.tagClass === 2 && node.tagNumber === n)
+        return node;
+    return undefined;
+}
+/** Find first direct child matching class/tag. */
+function child(node, tagClass, tagNumber) {
+    return node.children.find((c) => c.tagClass === tagClass && c.tagNumber === tagNumber);
+}
+/** Find first direct child of a universal tag. */
+function universal(node, tagNumber) {
+    return child(node, 0, tagNumber);
+}
+//# sourceMappingURL=asn1.js.map

package/dist/asn1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asn1.js","sourceRoot":"","sources":["../src/asn1.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AA8FH,4BAIC;AAMD,wCAMC;AAGD,8BAKC;AAGD,4BAKC;AAGD,4BAcC;AAGD,kCAQC;AAGD,wBAGC;AAGD,sBAEC;AAGD,8BAEC;AAxKD;;;;;GAKG;AAEH,MAAa,SAAU,SAAQ,KAAK;CAAG;AAAvC,8BAAuC;AAevC,MAAM,SAAS,GAAG;IAChB,GAAG,EAAE,CAAC;IACN,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,UAAU,EAAE,CAAC;IACb,YAAY,EAAE,CAAC;IACf,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,WAAW,EAAE,EAAE;IACf,gBAAgB,EAAE,EAAE;IACpB,cAAc,EAAE,EAAE;IAClB,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,EAAE;IACpB,QAAQ,EAAE,EAAE;IACZ,GAAG,EAAE,EAAE;CACC,CAAC;AAEE,QAAA,GAAG,GAAG,SAAS,CAAC;AAE7B,SAAS,UAAU,CAAC,GAAe,EAAE,GAAW;IAC9C,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;IACxB,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IACvD,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IACtE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACxF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC;IAChE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,GAAe,EAAE,GAAW;IAC5C,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACvC,MAAM,WAAW,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;IAC/B,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,uBAAuB;QACvB,SAAS,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACR,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAE,CAAC;YACtB,SAAS,GAAG,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM;QAC9B,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;QAClE,IAAI,EAAE,IAAI,GAAG,GAAG;KACjB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAgB,QAAQ,CAAC,GAAe;IACtC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAe;IAC5C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kDAAkD;AAClD,SAAgB,SAAS,CAAC,IAAc,EAAE,GAAW,EAAE,IAAY;IACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,iBAAiB,IAAI,eAAe,GAAG,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,SAAgB,QAAQ,CAAC,IAAc;IACrC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mCAAmC;AACnC,SAAgB,QAAQ,CAAC,IAAc;IACrC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACvB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,qDAAqD;AACrD,SAAgB,WAAW,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAC3F,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,wEAAwE;AACxE,SAAgB,MAAM,CAAC,IAAc,EAAE,CAAS;IAC9C,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kDAAkD;AAClD,SAAgB,KAAK,CAAC,IAAc,EAAE,QAAgB,EAAE,SAAiB;IACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACzF,CAAC;AAED,kDAAkD;AAClD,SAAgB,SAAS,CAAC,IAAc,EAAE,SAAiB;IACzD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC"}

package/dist/consistency.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Arithmetic consistency forensics — the strongest deterministic tamper
+ * signal available on any format: a running balance is a checksum that
+ * covers every row. Edit one amount and every balance after it breaks;
+ * recompute them all and the stated opening/closing no longer reconcile.
+ * Every break is reported with the row index and expected-vs-actual.
+ */
+import type { ExtractedStatement } from '@paniniapi/extract';
+import type { ConsistencyCheck, IntegritySignal } from './types';
+export declare function checkConsistency(st: ExtractedStatement): {
+    check: ConsistencyCheck;
+    signals: IntegritySignal[];
+};
+//# sourceMappingURL=consistency.d.ts.map

package/dist/consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consistency.d.ts","sourceRoot":"","sources":["../src/consistency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AA4BjE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,kBAAkB,GAAG;IACxD,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B,CAkIA"}

package/dist/consistency.js

@@ -0,0 +1,163 @@
+"use strict";
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkConsistency = checkConsistency;
+/** Banks round differently across currencies — 1 paise covers drift. */
+const TOLERANCE_PAISE = 1;
+/** Extract the running-balance chain from rows that carry one. */
+function balanceChain(st) {
+    const chain = [];
+    for (let i = 0; i < st.transactions.length; i++) {
+        const t = st.transactions[i];
+        if (t.balancePaise === null)
+            continue;
+        chain.push({
+            index: i,
+            balance: t.balancePaise,
+            amount: t.amountPaise,
+            direction: t.direction,
+        });
+    }
+    return chain;
+}
+function checkConsistency(st) {
+    const signals = [];
+    let balanceChainBreaks = 0;
+    let openingMismatch = null;
+    let closingMismatch = null;
+    let outOfPeriodRows = 0;
+    let duplicateRows = 0;
+    const chain = balanceChain(st);
+    // ── running-balance continuity ──────────────────────────────────────
+    for (let i = 1; i < chain.length; i++) {
+        const prev = chain[i - 1];
+        const cur = chain[i];
+        if (cur.amount === null || cur.direction === null || cur.direction === 'UNKNOWN')
+            continue;
+        const delta = cur.direction === 'CREDIT' ? cur.amount : -cur.amount;
+        const expected = prev.balance + delta;
+        if (Math.abs(cur.balance - expected) > TOLERANCE_PAISE) {
+            balanceChainBreaks++;
+            if (balanceChainBreaks <= 5) {
+                signals.push({
+                    ruleId: 'math.balance_chain_break',
+                    severity: 'critical',
+                    message: `row ${cur.index} balance breaks the running chain — the amount or balance was altered`,
+                    evidence: `expected ${expected} paise (prev ${prev.balance} ${cur.direction === 'CREDIT' ? '+' : '-'} ${cur.amount}), row shows ${cur.balance}`,
+                });
+            }
+        }
+    }
+    if (balanceChainBreaks > 5) {
+        signals.push({
+            ruleId: 'math.balance_chain_break',
+            severity: 'critical',
+            message: `…plus ${balanceChainBreaks - 5} more balance-chain breaks`,
+            evidence: `total ${balanceChainBreaks} breaks`,
+        });
+    }
+    // ── opening/closing reconciliation ──────────────────────────────────
+    const open = Number(st.metadata['openingBalancePaise'] ?? NaN);
+    const close = Number(st.metadata['closingBalancePaise'] ?? NaN);
+    const first = chain[0];
+    const last = chain[chain.length - 1];
+    if (!Number.isNaN(open) &&
+        first !== undefined &&
+        first.amount !== null &&
+        first.direction !== null) {
+        // first row's pre-transaction balance should equal opening balance.
+        const preFirst = first.direction === 'CREDIT' ? first.balance - first.amount : first.balance + first.amount;
+        openingMismatch = Math.abs(preFirst - open) > TOLERANCE_PAISE;
+        if (openingMismatch) {
+            signals.push({
+                ruleId: 'math.opening_mismatch',
+                severity: 'critical',
+                message: 'first transaction does not reconcile with the stated opening balance',
+                evidence: `implied opening ${preFirst} paise vs stated ${open}`,
+            });
+        }
+    }
+    if (!Number.isNaN(close) && last !== undefined) {
+        closingMismatch = Math.abs(last.balance - close) > TOLERANCE_PAISE;
+        if (closingMismatch) {
+            signals.push({
+                ruleId: 'math.closing_mismatch',
+                severity: 'critical',
+                message: 'last running balance does not equal the stated closing balance',
+                evidence: `last row ${last.balance} paise vs stated ${close}`,
+            });
+        }
+    }
+    // ── period bounds ────────────────────────────────────────────────────
+    const from = st.metadata['statementFrom'];
+    const to = st.metadata['statementTo'];
+    if (from !== undefined && to !== undefined) {
+        for (let i = 0; i < st.transactions.length; i++) {
+            const d = st.transactions[i].date;
+            if (d !== null && (d < from || d > to))
+                outOfPeriodRows++;
+        }
+        if (outOfPeriodRows > 0) {
+            signals.push({
+                ruleId: 'math.out_of_period',
+                severity: 'warning',
+                message: `${outOfPeriodRows} transaction(s) dated outside the stated period ${from}..${to}`,
+                evidence: `period ${from}..${to}`,
+            });
+        }
+    }
+    // ── duplicate rows (copy-paste fabrication signature) ────────────────
+    const seen = new Map();
+    for (const t of st.transactions) {
+        if (t.amountPaise === null)
+            continue;
+        const k = `${t.date}|${t.narration}|${t.amountPaise}`;
+        seen.set(k, (seen.get(k) ?? 0) + 1);
+    }
+    for (const [k, n] of seen) {
+        if (n > 1)
+            duplicateRows += n - 1;
+        if (n > 2) {
+            signals.push({
+                ruleId: 'math.duplicate_rows',
+                severity: 'warning',
+                message: `row duplicated ${n}× — repeated identical transaction`,
+                evidence: k.slice(0, 80),
+            });
+        }
+    }
+    if (duplicateRows > 0 && !signals.some((s) => s.ruleId === 'math.duplicate_rows')) {
+        signals.push({
+            ruleId: 'math.duplicate_rows',
+            severity: 'info',
+            message: `${duplicateRows} duplicate transaction row(s) — often legitimate (repeat purchases) but worth review`,
+            evidence: `${duplicateRows} duplicates`,
+        });
+    }
+    return {
+        check: {
+            balanceChainBreaks,
+            openingMismatch,
+            closingMismatch,
+            sumMismatch: null,
+            outOfPeriodRows,
+            duplicateRows,
+        },
+        signals,
+    };
+}
+//# sourceMappingURL=consistency.js.map

package/dist/consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consistency.js","sourceRoot":"","sources":["../src/consistency.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAuCH,4CAqIC;AA/JD,wEAAwE;AACxE,MAAM,eAAe,GAAG,CAAC,CAAC;AAS1B,kEAAkE;AAClE,SAAS,YAAY,CAAC,EAAsB;IAC1C,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI;YAAE,SAAS;QACtC,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,CAAC,CAAC,YAAY;YACvB,MAAM,EAAE,CAAC,CAAC,WAAW;YACrB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,gBAAgB,CAAC,EAAsB;IAIrD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,eAAe,GAAmB,IAAI,CAAC;IAC3C,IAAI,eAAe,GAAmB,IAAI,CAAC;IAC3C,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAE/B,uEAAuE;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QAC3F,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,eAAe,EAAE,CAAC;YACvD,kBAAkB,EAAE,CAAC;YACrB,IAAI,kBAAkB,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,0BAA0B;oBAClC,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,OAAO,GAAG,CAAC,KAAK,uEAAuE;oBAChG,QAAQ,EAAE,YAAY,QAAQ,gBAAgB,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE;iBAChJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,SAAS,kBAAkB,GAAG,CAAC,4BAA4B;YACpE,QAAQ,EAAE,SAAS,kBAAkB,SAAS;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACnB,KAAK,KAAK,SAAS;QACnB,KAAK,CAAC,MAAM,KAAK,IAAI;QACrB,KAAK,CAAC,SAAS,KAAK,IAAI,EACxB,CAAC;QACD,oEAAoE;QACpE,MAAM,QAAQ,GACZ,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7F,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,eAAe,CAAC;QAC9D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,sEAAsE;gBAC/E,QAAQ,EAAE,mBAAmB,QAAQ,oBAAoB,IAAI,EAAE;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/C,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,eAAe,CAAC;QACnE,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,gEAAgE;gBACzE,QAAQ,EAAE,YAAY,IAAI,CAAC,OAAO,oBAAoB,KAAK,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAE,eAAe,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,eAAe,mDAAmD,IAAI,KAAK,EAAE,EAAE;gBAC3F,QAAQ,EAAE,UAAU,IAAI,KAAK,EAAE,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QACrC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC;YAAE,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,kBAAkB,CAAC,oCAAoC;gBAChE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,aAAa,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,aAAa,sFAAsF;YAC/G,QAAQ,EAAE,GAAG,aAAa,aAAa;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,kBAAkB;YAClB,eAAe;YACf,eAAe;YACf,WAAW,EAAE,IAAI;YACjB,eAAe;YACf,aAAa;SACd;QACD,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export { inspectStatement, type InspectOptions } from './report';
+export { checkConsistency } from './consistency';
+export { verifyPdfSignatures, type SignatureOptions } from './pdf/signature';
+export { inspectPdfStructure, type StructureOptions } from './pdf/structure';
+export { inspectPdfContent } from './pdf/content';
+export type { ConsistencyCheck, IntegrityReport, IntegritySignal, IntegrityVerdict, SignalSeverity, SignatureCheck, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectPdfContent = exports.inspectPdfStructure = exports.verifyPdfSignatures = exports.checkConsistency = exports.inspectStatement = void 0;
+var report_1 = require("./report");
+Object.defineProperty(exports, "inspectStatement", { enumerable: true, get: function () { return report_1.inspectStatement; } });
+var consistency_1 = require("./consistency");
+Object.defineProperty(exports, "checkConsistency", { enumerable: true, get: function () { return consistency_1.checkConsistency; } });
+var signature_1 = require("./pdf/signature");
+Object.defineProperty(exports, "verifyPdfSignatures", { enumerable: true, get: function () { return signature_1.verifyPdfSignatures; } });
+var structure_1 = require("./pdf/structure");
+Object.defineProperty(exports, "inspectPdfStructure", { enumerable: true, get: function () { return structure_1.inspectPdfStructure; } });
+var content_1 = require("./pdf/content");
+Object.defineProperty(exports, "inspectPdfContent", { enumerable: true, get: function () { return content_1.inspectPdfContent; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,mCAAiE;AAAxD,0GAAA,gBAAgB,OAAA;AACzB,6CAAiD;AAAxC,+GAAA,gBAAgB,OAAA;AACzB,6CAA6E;AAApE,gHAAA,mBAAmB,OAAA;AAC5B,6CAA6E;AAApE,gHAAA,mBAAmB,OAAA;AAC5B,yCAAkD;AAAzC,4GAAA,iBAAiB,OAAA"}

package/dist/pdf/content.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { IntegritySignal } from '../types';
+/**
+ * Text-content anomaly signals. Never throws — an unreadable content
+ * stream yields a `content_unreadable` warning signal.
+ */
+export declare function inspectPdfContent(pdf: Uint8Array): IntegritySignal[];
+//# sourceMappingURL=content.d.ts.map

package/dist/pdf/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/pdf/content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAoBhD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,GAAG,eAAe,EAAE,CA2CpE"}

package/dist/pdf/content.js

@@ -0,0 +1,91 @@
+"use strict";
+/**
+ * Copyright 2026 Kapil — Project Panini Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectPdfContent = inspectPdfContent;
+/**
+ * Content-layer forensics: anomalies in the rendered text itself —
+ * the classic "typed Salary over the real narration" attack leaves
+ * stacked fragments at the same page position, and invisible-text
+ * rendering modes smuggle content past a visual review.
+ */
+const extract_1 = require("@paniniapi/extract");
+const X_TOL = 2;
+const Y_TOL = 3;
+function overlappingPairs(fragments) {
+    const hits = [];
+    for (let i = 0; i < fragments.length; i++) {
+        for (let j = i + 1; j < fragments.length; j++) {
+            const a = fragments[i];
+            const b = fragments[j];
+            if (a.page !== b.page)
+                continue;
+            if (Math.abs(a.y - b.y) > Y_TOL || Math.abs(a.x - b.x) > X_TOL)
+                continue;
+            if (a.text === b.text)
+                continue; // identical duplicate draw — harmless
+            hits.push([a, b]);
+        }
+    }
+    return hits;
+}
+/**
+ * Text-content anomaly signals. Never throws — an unreadable content
+ * stream yields a `content_unreadable` warning signal.
+ */
+function inspectPdfContent(pdf) {
+    const signals = [];
+    const latin = Buffer.from(pdf).toString('latin1');
+    // Invisible-text rendering modes: `3 Tr` (invisible), `7 Tr` (invisible
+    // +clip). Legit statements never hide text.
+    const invisible = (latin.match(/\b[37]\s+Tr\b/g) ?? []).length;
+    if (invisible > 0) {
+        signals.push({
+            ruleId: 'pdf.invisible_text',
+            severity: 'critical',
+            message: `${invisible} text run(s) render invisibly — content a reviewer cannot see is present in the document`,
+            evidence: `Tr-mode-3/7 operators ×${invisible}`,
+        });
+    }
+    let fragments;
+    try {
+        fragments = (0, extract_1.extractPdfFragments)(pdf);
+    }
+    catch {
+        signals.push({
+            ruleId: 'pdf.content_unreadable',
+            severity: 'info',
+            message: 'content stream could not be decomposed for overlay analysis',
+            evidence: 'fragment extraction failed',
+        });
+        return signals;
+    }
+    const hits = overlappingPairs(fragments);
+    if (hits.length > 0) {
+        const sample = hits
+            .slice(0, 3)
+            .map(([a, b]) => `p${a.page} ("${a.text.slice(0, 24)}" vs "${b.text.slice(0, 24)}")`)
+            .join('; ');
+        signals.push({
+            ruleId: 'pdf.overlapping_text',
+            severity: 'critical',
+            message: `${hits.length} stacked text fragments at identical positions — overtyped content`,
+            evidence: sample,
+        });
+    }
+    return signals;
+}
+//# sourceMappingURL=content.js.map