@suveren/gateway 0.18.2 → 0.19.0

package/dist/mcp-server/report-verify-cli.mjs

@@ -1,7 +1,7 @@
 import {
   isExportBundle,
   verifyExportBundle
-} from "./chunk-QOKPECVY.mjs";
+} from "./chunk-ZRRZFGRL.mjs";
 
 // bin/report-verify-cli.ts
 import { readFileSync } from "fs";
@@ -19,6 +19,12 @@ function extractProofBundle(html) {
   } catch (err) {
     throw new Error(`Could not parse the embedded proof bundle: ${err instanceof Error ? err.message : String(err)}`);
   }
+  const o = parsed;
+  if (o && o.format === "suveren-report-export" && o.version === 1) {
+    throw new Error(
+      "This file was exported by an older gateway (format version 1): it does not carry what the checker needs to compare the values the page SHOWS with the signed data. Export the report again with a current gateway."
+    );
+  }
   if (!isExportBundle(parsed)) {
     throw new Error('The embedded proof bundle is not in the expected "suveren-report-export" format.');
   }
@@ -46,8 +52,8 @@ function parseArgs(argv) {
 var HELP_TEXT = `Usage: suveren-gateway verify-report <file> [--key <hex>] [--online]
 
 Verifies an "Export with proof" report file OFFLINE: every ticket signature,
-every mandate attestation signature, and every reference the report makes to
-a ticket, approval, mandate, or case.
+every mandate attestation signature, every reference the report makes to a
+ticket, approval, mandate, or case \u2014 and every VALUE the page shows.
 
   --key <hex>   Require the embedded Authority Server key to match this exact
                 value \u2014 a fingerprint you already trust (e.g. read aloud over
@@ -61,6 +67,27 @@ confirm the embedded key against something you trust independently of this
 file; with neither, the file's internal consistency is checked but the key
 itself is not.
 
+What the page shows is checked in two steps:
+  1. The visible page must be exactly what the embedded proof data draws \u2014
+     the checker re-draws the whole file and compares it byte for byte. Any
+     edit to the page (a number, a time, a style, an added box) fails. Keep
+     the file as downloaded: re-saving it from a browser changes it. A file
+     drawn by a different gateway version may not re-draw identically; check
+     it with that version.
+  2. Every value in every green box is checked against its source:
+       checked against signature   ticket fields (action, time, profile,
+                                   execution context), mandate limits (via
+                                   the recomputed bounds hash), commitment
+                                   mode, owners, intent (via its hash)
+       recomputed                  wait_s, a case's duration_s, metrics \u2014
+                                   recomputed from the file's own values
+       not checkable offline       approval times and approver (local
+                                   archive), records and a case's start email
+                                   (connector database), the refusals metric
+     Values that cannot be checked offline are listed per box under "Not
+     checkable offline" and do NOT fail the check \u2014 but they are never
+     reported as signed.
+
 References the report itself shows as "not verifiable" (e.g. the AI named a
 ticket that does not exist) are listed under "Not verifiable (as shown in the
 report)" and do NOT fail the check \u2014 the file is honest about them. Every
@@ -69,10 +96,12 @@ ticket (and mandate) in the file, or the check fails.
 
 Exit codes:
   0  every signature is valid, every reference shown as verified is backed,
-     AND the embedded key was confirmed
+     every value checked against a signature or recomputed matches, AND the
+     embedded key was confirmed
   1  something is invalid \u2014 a bad signature, a reference shown as verified
-     with no valid ticket behind it, or a key that does not match
-     --key/--online
+     with no valid ticket behind it, a value on the page that differs from
+     the signed data or does not recompute, an edited page, or a key that
+     does not match --key/--online
   2  everything else is valid, but the embedded key was NOT checked (no --key
      or --online given) \u2014 confirm it yourself before trusting this file
 `;
@@ -143,7 +172,8 @@ function printSummary(bundle, result) {
       console.log(`    - ${e.elementId}${e.ticketIds.length ? ` (${e.ticketIds.join(", ")})` : ""}${note}`);
     }
   }
-  const invalidAuth = result.authorizations.filter((a) => !a.attestationValid || a.boundsHashMatches === false);
+  printBoxes(result);
+  const invalidAuth = result.authorizations.filter((a) => !a.attestationValid || a.boundsHashMatches === false || a.boundsValuesProven === false);
   if (invalidAuth.length > 0) {
     console.log(`  Mandates: ${result.authorizations.length - invalidAuth.length}/${result.authorizations.length} valid \u2014 INVALID:`);
     for (const a of invalidAuth) console.log(`    - ${a.authorizationId}: ${a.error ?? "invalid"}`);
@@ -159,6 +189,33 @@ function printSummary(bundle, result) {
     console.log(`  Key not confirmed \u2014 compare this fingerprint with ${bundle.authorityServer.url}/api/as/pubkey or pass --online.`);
   }
 }
+function printBoxes(result) {
+  if (result.document.state === "match") console.log("  Page: exactly what the signed data draws.");
+  else if (result.document.state === "mismatch") console.log(`  INVALID \u2014 page: ${result.document.error}`);
+  for (const e of result.drawnErrors) console.log(`  INVALID \u2014 ${e}`);
+  const bad = result.boxes.filter((b) => b.mismatches.length > 0);
+  const ok = result.boxes.filter((b) => b.mismatches.length === 0);
+  const fully = ok.filter((b) => b.notCheckable.length === 0);
+  console.log(`  Boxes: ${fully.length} fully checked \xB7 ${ok.length - fully.length} partly not checkable offline \xB7 ${bad.length} MISMATCH.`);
+  for (const b of ok) {
+    const parts = [];
+    if (b.signed.length > 0) parts.push(`checked against signature: ${[...new Set(b.signed)].join(", ")}`);
+    if (b.recomputed.length > 0) parts.push(`recomputed: ${b.recomputed.map((r) => `${r.field} (from ${r.inputs.join(" + ")})`).join(", ")}`);
+    if (parts.length > 0) console.log(`    - ${b.elementId}: ${parts.join(" \xB7 ")}`);
+  }
+  if (bad.length > 0) {
+    console.log(`  INVALID \u2014 ${bad.length} box(es) show a value that differs from its source:`);
+    for (const b of bad) for (const m of b.mismatches) console.log(`    - ${b.elementId}: ${m}`);
+  }
+  const unbackable = result.boxes.filter((b) => b.notCheckable.length > 0);
+  if (unbackable.length > 0) {
+    console.log("  Not checkable offline (shown in the report, not backed by a signature \u2014 does not fail the check):");
+    for (const b of unbackable) {
+      console.log(`    - ${b.elementId}: ${b.notCheckable.map((n) => `${n.field} (${n.source})`).join(", ")}`);
+    }
+  }
+  console.log("  Coverage panel: from the connector database \u2014 not checkable offline.");
+}
 if (import.meta.url === `file://${process.argv[1]}`) {
   runVerifyReportCli(process.argv.slice(2)).then((code) => {
     process.exitCode = code;