@pipobscure/bundle 0.0.1

package/dist/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../src/archive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAiB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAiG1E,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,aAAa;AACb,MAAM,CAAC,KAAK,SAAU,CAAC,CAAA,aAAa,CAAC,IAAY,EAAE,KAAe;IAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,SAAU,CAAC,CAAA,WAAW,CAAC,GAAiB;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW;YAAE,SAAS;QACtD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;IACzE,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,KAAK,SAAU,CAAC,CAAA,OAAO,CACnB,OAAiD,EACjD,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAiF;IAE1G,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,EAQvG;IACG,MAAM,MAAM,GAAG,OAAO,IAAI,aAAa,CAAC,IAAI,IAAI,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,QAAQ,EAIzD;IACG,OAAO;QACH,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,OAAO;QACP,KAAK,CAAC,IAAI,CAAC,MAAc;YACrB,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAqB,CAAC,CAAC,EAAE,CAAC;QAC3F,CAAC;KACJ,CAAC;AACN,CAAC;AAED,0EAA0E;AAC1E,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,mEAAmE;AACnE,EAAE;AACF,kEAAkE;AAClE,KAAK,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,EAMrE;IACG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,uEAAuE;IACvE,IAAI,MAAM;QAAE,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE/C,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;QACxC,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,MAAM,EAAE,OAAO;QACxB,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACpD,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,2EAA2E;IAC3E,mEAAmE;IACnE,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,eAAe,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,MAAM;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,MAAM,2CAA2C,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAiB;IAChI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAmB;IAC/H,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC;QACD,oEAAoE;QACpE,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,+BAA+B,CAAC,CAAC;QAChF,OAAO,MAAM,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACP,GAAG,CAAC,SAAS,EAAE,CAAC;IACpB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,MAAc;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;aACnE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACP,GAAG,CAAC,SAAS,EAAE,CAAC;IACpB,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAa,EAAE,IAAwB;IAClE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;YACtB,SAAS,CAAC,KAAa,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;SACxF,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;aACxC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;aACxD,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAA+B;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAC,GAAa,EAAE,MAAc;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,78 @@
+/** What an audit concluded, as the gate reads it. */
+export interface Verdict {
+    /** The archive reviewed, as the auditor referred to it. */
+    bundle?: string | undefined;
+    /** sha256 of the archive file — what pins the verdict to the bytes. */
+    sha256?: string | undefined;
+    /** The archive it was reviewed against, when the review was a diff. */
+    baseline?: string | undefined;
+    baselineSha256?: string | undefined;
+    /** Which question was answered: whether to sign it, or whether to run it. */
+    mode?: 'sign' | 'run' | undefined;
+    state?: string | undefined;
+    members?: number | undefined;
+    /** How many members were actually read — the changed set, in diff mode. */
+    reviewed?: number | undefined;
+    verdict?: 'pass' | 'fail' | undefined;
+    summary?: string | undefined;
+    findings?: Finding[] | undefined;
+    /** 'human' when a person recorded it rather than the skill. */
+    by?: string | undefined;
+    at?: string | undefined;
+}
+export interface Finding {
+    severity: string;
+    file: string;
+    line?: number | undefined;
+    what: string;
+    why?: string | undefined;
+}
+export interface AuditOptions {
+    /** The archive under review. */
+    bundle: string;
+    /** Where the verdict is written and read (default: `<bundle>.audit.json`). */
+    verdict?: string | undefined;
+    /** A previously approved archive to review against, when there is one. */
+    baseline?: string | undefined;
+}
+/** What `prepare()` found, for a caller that wants to report it itself. */
+export interface Preparation {
+    bundle: string;
+    sha256: string;
+    state: string;
+    members: string[];
+    verdict: string;
+    /** Present when a baseline was supplied and exists. */
+    baseline?: {
+        path: string;
+        sha256: string;
+        added: string[];
+        removed: string[];
+        carried: number;
+    } | undefined;
+}
+/** Where the verdict for `bundle` lives, unless the caller says otherwise. */
+export declare function verdictPath(bundle: string, override?: string | undefined): string;
+/**
+ * Describe what is about to be audited: its hash, its members, and — when a
+ * baseline is given — what changed since. Throws when the archive does not hold
+ * together, because reviewing an archive whose contents are not what it says
+ * they are is worse than not reviewing it.
+ */
+export declare function prepare({ bundle, verdict, baseline }: AuditOptions): Preparation;
+/**
+ * The gate. Returns the verdict when it passes; throws with the reason when it
+ * does not — no verdict, a verdict over different bytes, a verdict against a
+ * different baseline, or a verdict that failed.
+ */
+export declare function check({ bundle, verdict, baseline }: AuditOptions): Verdict;
+/**
+ * Record a clean verdict reached by reading the archive yourself. It writes the
+ * same file the skill would, marked `by: 'human'`, so the gate treats both
+ * identically while the record still says which happened.
+ */
+export declare function approve({ bundle, verdict, baseline, note }: AuditOptions & {
+    /** What you checked — it becomes the verdict's summary. */
+    note?: string | undefined;
+}): Verdict;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAyBA,qDAAqD;AACrD,MAAM,WAAW,OAAO;IACpB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IACjC,+DAA+D;IAC/D,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,OAAO;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IACzB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,QAAQ,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;KACnB,GAAG,SAAS,CAAC;CACjB;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAEjF;AAMD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,YAAY,GAAG,WAAW,CAgChF;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,YAAY,GAAG,OAAO,CAwC1E;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,YAAY,GAAG;IACxE,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAmBV"}

package/dist/audit.js

@@ -0,0 +1,119 @@
+import * as FS from 'node:fs';
+import * as PATH from 'node:path';
+import * as CRYPTO from 'node:crypto';
+import { verifyBundleSync, inspectBundle } from './api.js';
+import { STATES, message } from './manifest.js';
+/** Where the verdict for `bundle` lives, unless the caller says otherwise. */
+export function verdictPath(bundle, override) {
+    return override ? PATH.resolve(override) : `${PATH.resolve(bundle)}.audit.json`;
+}
+function sha256Of(path) {
+    return CRYPTO.createHash('sha256').update(FS.readFileSync(path)).digest('hex');
+}
+/**
+ * Describe what is about to be audited: its hash, its members, and — when a
+ * baseline is given — what changed since. Throws when the archive does not hold
+ * together, because reviewing an archive whose contents are not what it says
+ * they are is worse than not reviewing it.
+ */
+export function prepare({ bundle, verdict, baseline }) {
+    if (!FS.existsSync(bundle))
+        throw new Error(`there is no archive at ${bundle}`);
+    // Damaged badly enough not to parse as a ZIP throws from inside the reader
+    // rather than answering; that is still a refusal and should read as one.
+    let state, members;
+    try {
+        state = verifyBundleSync(bundle).state;
+        ({ members } = inspectBundle(bundle));
+    }
+    catch (err) {
+        throw new Error(`${bundle} could not be read as an archive: ${message(err)}`);
+    }
+    if (state === 'invalid') {
+        throw new Error(`${bundle} is ${STATES.invalid.label} — rebuild it rather than reviewing it; ` +
+            'what you would review is not what it holds');
+    }
+    const found = {
+        bundle, sha256: sha256Of(bundle), state, members,
+        verdict: verdictPath(bundle, verdict),
+    };
+    if (baseline && FS.existsSync(baseline)) {
+        const previous = inspectBundle(baseline).members;
+        const added = members.filter((name) => !previous.includes(name));
+        const removed = previous.filter((name) => !members.includes(name));
+        found.baseline = {
+            path: baseline, sha256: sha256Of(baseline),
+            added, removed, carried: members.length - added.length,
+        };
+    }
+    return found;
+}
+/**
+ * The gate. Returns the verdict when it passes; throws with the reason when it
+ * does not — no verdict, a verdict over different bytes, a verdict against a
+ * different baseline, or a verdict that failed.
+ */
+export function check({ bundle, verdict, baseline }) {
+    const path = verdictPath(bundle, verdict);
+    if (!FS.existsSync(path)) {
+        throw new Error(`${bundle} has not been audited — there is no verdict at ${path}`);
+    }
+    let found;
+    try {
+        found = JSON.parse(FS.readFileSync(path, 'utf-8'));
+    }
+    catch (err) {
+        throw new Error(`${path} is not readable JSON: ${message(err)}`);
+    }
+    const sha256 = sha256Of(bundle);
+    if (found.sha256?.toLowerCase() !== sha256) {
+        throw new Error(`${path} approves different bytes — it is stale.\n` +
+            `  approved: ${found.sha256 ?? '(none)'}\n` +
+            `  on disk:  ${sha256}\n` +
+            '  re-audit the archive this build actually produced');
+    }
+    // A baseline that was available but reviewed against something else is the
+    // one way this gate can be fooled honestly: a verdict claiming a diff it did
+    // not do. A verdict recording *no* baseline is a full review, which is fine.
+    if (baseline && FS.existsSync(baseline) && found.baselineSha256) {
+        const expected = sha256Of(baseline);
+        if (found.baselineSha256.toLowerCase() !== expected) {
+            throw new Error(`${path} was reached against a different baseline.\n` +
+                `  audited against: ${found.baselineSha256}\n` +
+                `  on disk:         ${expected}\n` +
+                '  re-audit against the baseline this build is comparing to');
+        }
+    }
+    if (found.verdict !== 'pass') {
+        const serious = (found.findings ?? []).filter((f) => f.severity !== 'note');
+        throw new Error(`the audit of ${bundle} did not pass: ${found.summary ?? '(no summary)'}` +
+            serious.map((f) => `\n  [${f.severity}] ${f.file}${f.line ? `:${f.line}` : ''} — ${f.what}`).join(''));
+    }
+    return found;
+}
+/**
+ * Record a clean verdict reached by reading the archive yourself. It writes the
+ * same file the skill would, marked `by: 'human'`, so the gate treats both
+ * identically while the record still says which happened.
+ */
+export function approve({ bundle, verdict, baseline, note }) {
+    const found = prepare({ bundle, verdict, baseline });
+    const recorded = {
+        bundle,
+        sha256: found.sha256,
+        ...(found.baseline ? { baseline: found.baseline.path, baselineSha256: found.baseline.sha256 } : {}),
+        mode: 'sign',
+        state: found.state,
+        members: found.members.length,
+        reviewed: found.members.length,
+        verdict: 'pass',
+        summary: note ?? 'approved by hand; no note given',
+        findings: [],
+        by: 'human',
+        at: new Date().toISOString(),
+    };
+    FS.mkdirSync(PATH.dirname(found.verdict), { recursive: true });
+    FS.writeFileSync(found.verdict, `${JSON.stringify(recorded, null, 2)}\n`);
+    return recorded;
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AA8EhD,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,QAA6B;IACrE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;AACpF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC1B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAgB;IAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IAEhF,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,KAAK,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC;QACD,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QACvC,CAAC,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,qCAAqC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,0CAA0C;YAC1F,4CAA4C,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAgB;QACvB,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO;QAChD,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;KACxC,CAAC;IAEF,IAAI,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,GAAG;YACb,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC1C,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;SACzD,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAgB;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,kDAAkD,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C;YAC/D,eAAe,KAAK,CAAC,MAAM,IAAI,QAAQ,IAAI;YAC3C,eAAe,MAAM,IAAI;YACzB,qDAAqD,CAAC,CAAC;IAC/D,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8CAA8C;gBACjE,sBAAsB,KAAK,CAAC,cAAc,IAAI;gBAC9C,sBAAsB,QAAQ,IAAI;gBAClC,4DAA4D,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,kBAAkB,KAAK,CAAC,OAAO,IAAI,cAAc,EAAE;YACrF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAGxD;IACG,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAY;QACtB,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC7B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC9B,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,IAAI,IAAI,iCAAiC;QAClD,QAAQ,EAAE,EAAE;QACZ,EAAE,EAAE,OAAO;QACX,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC/B,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,23 @@
+import { STATES, type VerificationResult } from './manifest.ts';
+export { STATES };
+export declare const USAGE = "usage: bundle <command> [options]\n\ncommands:\n  create    build an archive from a list of files\n  sign      sign an archive into a new file, optionally behind a prefix\n  audit     report what is about to be reviewed, and gate signing on the verdict\n  verify    verify an archive and report its trust state\n  run       mount a signed archive and run it\n  sea       build a node runtime that verifies an archive before running it\n  trust     refresh the sigstore trust root used to check sigstore signatures\n  skill     install this package's bundle-auditing skill into a project\n\ncreate options:\n  -b, --base <dir>      base directory the file list is relative to (default: .)\n  -p, --prefix <file>   prefix prepended before the archive (launcher or binary);\n                        omit it for a plain archive meant to be run from a mount\n  -f, --files <file>    read the newline-separated file list from here (default: stdin)\n  -o, --output <file>   write the archive here (default: stdout)\n  -k, --key <file>      leaf private key (PEM); signs at build time with --chain\n  -c, --chain <file>    full certificate chain (PEM, leaf first)\n      --hash <alg>      digest for the whole-file hash and member digests (default: sha256)\n      --sign <alg>      digest the signature over that hash uses (default: sha256)\n\nsign options:                       usage: sign [options] <archive>\n  -o, --output <file>   write the signed archive here (default: stdout)\n  -l, --launcher        prepend this package's shell launcher, so the result runs\n                        by name \u2014 the usual way to make a self-executing archive\n  -p, --prefix <file>   prepend some other prefix: a launcher of your own, or a\n                        node binary; omit both for a plain mountable archive\n  -x, --executable      make the output executable (implied by --launcher/--prefix)\n      --hash <alg>      digest for the whole-file hash and member digests (default: sha256)\n      --sign <alg>      digest the signature over that hash uses (default: sha256)\n\n  by default this signs through sigstore, taking the identity from CI when\n  there is one and otherwise opening a GitHub sign-in:\n      --flow <how>          auto | ci | browser | device (default: auto)\n      --token <jwt>         use this OIDC token instead of signing in\n      --oidc-issuer <url>   OIDC issuer (default: sigstore's dex)\n      --connector <name>    identity provider to jump to (default: github)\n      --fulcio <url>        certificate authority (default: fulcio.sigstore.dev)\n      --rekor <url>         transparency log; empty string to skip it\n      --tsa <url>           timestamp authority; empty string to skip it\n\n  or, to sign against a certificate authority of your own:\n  -k, --key <file>      leaf private key (PEM)\n  -c, --chain <file>    full certificate chain (PEM, leaf first)\n\naudit options:                      usage: audit [options] <archive>\n  -b, --baseline <file> a previously approved archive to review against, so the\n                        review is of what changed rather than of everything\n  -v, --verdict <file>  where the verdict is (default: <archive>.audit.json)\n      --check           exit non-zero unless a clean verdict pins these bytes\n      --approve         record a clean verdict you reached by reading it yourself\n  -n, --note <text>     what you checked, recorded with --approve\n\n  with none of those it reports what is about to be reviewed and how. The review\n  itself needs judgement, so no command performs it: install the skill with\n  'bundle skill' and run /audit-bundle, or read the archive yourself and\n  --approve. Signing is not gated unless you run --check before it.\n\nverify options:                     usage: verify [options] <archive>\n  -a, --archive <file>  archive to verify (or pass it as a positional argument)\n  -r, --root <file>     extra trusted root certificate (PEM); repeatable\n      --identity <san>  require this sigstore signing identity\n      --issuer <url>    require this sigstore OIDC issuer\n      --sigstore-root <file>  sigstore trust root (default: the cache 'trust' fills)\n      --json            print the result as JSON\n\nrun options:                        usage: run [options] <archive> [-- <app args>]\n  -r, --root <file>     extra trusted root certificate (PEM); repeatable\n      --identity <san>  require this sigstore signing identity\n      --issuer <url>    require this sigstore OIDC issuer\n      --untrusted       run an archive whose signature is good but untrusted\n\nsea options:                        usage: sea [options] [archive]\n  -o, --output <file>   write the executable here (required)\n      --node <file>     node binary to embed (default: the running one)\n      --base <file>     reuse a SEA base built earlier instead of building one\n      --no-sigstore     leave the sigstore libraries out of the embedded verifier\n      --untrusted       let the finished executable run an archive whose\n                        signature is good but unanchored\n  -r, --root <file>     trusted root the executable checks against; repeatable\n      --identity <san>  identity the executable requires of a signature\n      --issuer <url>    issuer the executable requires of a signature\n\n  with an archive, the result is that application: one file that verifies\n  itself and runs what is inside it. without one, the result is a verifying\n  node \u2014 a runtime that takes an archive on its own command line:\n\n      bundle sea -o node-verifying\n      ./node-verifying ./my-app.zip --args --for --the --app\n\n  a runtime built with a policy (-r, --identity, --issuer) is sealed: it\n  accepts no policy from its command line, because a binary that demands a\n  signing identity is not one whose user can ask it to stop.\n\n  the signing options are the same as 'sign': sigstore by default, or --key\n  with --chain against a certificate authority of your own\n\ntrust options:\n      --mirror <url>    TUF repository to refresh from (default: sigstore's)\n\nskill options:                      usage: skill [options] [name]\n  -d, --dir <dir>       where to install (default: .claude/skills)\n  -f, --force           overwrite files that are already there\n  -l, --list            list the skills this package carries and stop\n\n  -h, --help            show this help";
+/** Where a command's output goes. Swappable so tests need no subprocess. */
+export interface Console {
+    out(line: string): void;
+    err(line: string): void;
+}
+/**
+ * The commands, in the order the usage text lists them. Keeping the dispatch
+ * table and the help in one place is what stops the two drifting apart.
+ */
+export declare const COMMANDS: Record<string, (args: string[], io: Console) => number | Promise<number>>;
+/**
+ * Run one CLI invocation. `argv` is the user's arguments — everything after the
+ * runtime and the entry point — and the return value is the process exit code,
+ * so a caller decides what to do with it rather than being exited out from
+ * under.
+ */
+export declare function main(argv: string[], io?: Console): Promise<number>;
+/** Print a verification result, as text or as the JSON `--json` produces. */
+export declare function report(res: VerificationResult, json: boolean, io: Console): void;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAOA,OAAO,EAAW,MAAM,EAAE,KAAK,kBAAkB,EAA0B,MAAM,eAAe,CAAC;AAKjG,OAAO,EAAE,MAAM,EAAE,CAAC;AAQlB,eAAO,MAAM,KAAK,+vMA2GqB,CAAC;AAExC,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAOD;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE9F,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,OAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBjF;AA2GD,6EAA6E;AAC7E,wBAAgB,MAAM,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,IAAI,CAqBhF"}