@synctek/forgeos 2.0.0

package/dist/trust/signing.js

@@ -0,0 +1,249 @@
+/**
+ * Ed25519 key management for Trust Ledger entry signing.
+ *
+ * Binary-compatible with the Python signing.py implementation.
+ *
+ * Key files:
+ *   .forgeos/keys/private.pem  (mode 0o600 — owner read/write only)
+ *   .forgeos/keys/public.pem   (world-readable)
+ *
+ * Key format: PKCS8 PEM for private, SPKI PEM for public — matching
+ * Python's serialization.PrivateFormat.PKCS8 and
+ * serialization.PublicFormat.SubjectPublicKeyInfo.
+ *
+ * Fingerprint: first 16 hex chars of SHA-256(raw_32_byte_public_key).
+ * This matches Python's get_fingerprint() which calls:
+ *   public_key.public_bytes(Encoding.Raw, PublicFormat.Raw) → 32 bytes
+ *   SHA-256(raw_bytes).hexdigest()[:16]
+ *
+ * Signatures: Ed25519 raw signatures, base64-encoded (standard alphabet),
+ * produced over the canonical UTF-8 bytes of the entry dict. This matches
+ * Python's base64.b64encode(raw_sig).decode("ascii").
+ *
+ * Security invariants (matching Python):
+ *   - load_private_key raises if file mode is broader than 0o600
+ *   - Key rotation archives old_public.pem before overwriting
+ */
+import { generateKeyPairSync, sign, verify, createHash, createPrivateKey, createPublicKey, } from 'crypto';
+import { pythonJsonDumps } from './chain.js';
+import { readFileSync, writeFileSync, mkdirSync, chmodSync, existsSync, statSync, copyFileSync, } from 'fs';
+import { join } from 'path';
+const PRIVATE_KEY_FILENAME = 'private.pem';
+const PUBLIC_KEY_FILENAME = 'public.pem';
+const OLD_PUBLIC_KEY_FILENAME = 'old_public.pem';
+const REQUIRED_PRIVATE_MODE = 0o600;
+const REQUIRED_KEY_DIR_MODE = 0o700;
+export class SigningError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SigningError';
+    }
+}
+export class KeyNotFoundError extends SigningError {
+    constructor(message) {
+        super(message);
+        this.name = 'KeyNotFoundError';
+    }
+}
+export class KeyPermissionError extends SigningError {
+    constructor(message) {
+        super(message);
+        this.name = 'KeyPermissionError';
+    }
+}
+/**
+ * Manages Ed25519 keypairs for a ForgeOS project.
+ *
+ * All key files are stored under {projectPath}/.forgeos/keys/.
+ *
+ * Example:
+ *   const km = new KeyManager('/my/project');
+ *   km.generateKeypair();
+ *   const sig = km.signEntry({ seq: 0, ... });
+ *   const ok = km.verifySignature({ seq: 0, ... }, sig);
+ */
+export class KeyManager {
+    keysDir;
+    constructor(projectPath) {
+        this.keysDir = join(projectPath, '.forgeos', 'keys');
+    }
+    get privateKeyPath() {
+        return join(this.keysDir, PRIVATE_KEY_FILENAME);
+    }
+    get publicKeyPath() {
+        return join(this.keysDir, PUBLIC_KEY_FILENAME);
+    }
+    // ------------------------------------------------------------------
+    // Key lifecycle
+    // ------------------------------------------------------------------
+    /**
+     * Generate a new Ed25519 keypair and persist it to disk.
+     *
+     * Creates the key directory (mode 0o700) if it does not exist.
+     * Overwrites any existing keypair — rotate deliberately via rotateKey().
+     *
+     * @returns The key fingerprint (first 16 hex chars of SHA-256 of raw public key bytes).
+     */
+    generateKeypair() {
+        mkdirSync(this.keysDir, { recursive: true });
+        chmodSync(this.keysDir, REQUIRED_KEY_DIR_MODE);
+        const { privateKey, publicKey } = generateKeyPairSync('ed25519');
+        const privatePem = privateKey.export({ type: 'pkcs8', format: 'pem' });
+        const publicPem = publicKey.export({ type: 'spki', format: 'pem' });
+        writeFileSync(this.privateKeyPath, privatePem, { mode: REQUIRED_PRIVATE_MODE });
+        writeFileSync(this.publicKeyPath, publicPem);
+        return this.getFingerprint();
+    }
+    /**
+     * Rotate the keypair, returning [oldFingerprint, newFingerprint].
+     *
+     * The old public key is preserved at old_public.pem during the transition
+     * so callers can construct a capability_declared ledger entry referencing
+     * both keys. After the transition entry is written, the caller may delete
+     * old_public.pem.
+     *
+     * @returns Tuple of [oldFingerprint, newFingerprint].
+     * @throws KeyNotFoundError if no existing keypair is found.
+     */
+    rotateKey() {
+        if (!existsSync(this.publicKeyPath)) {
+            throw new KeyNotFoundError(`No existing public key at ${this.publicKeyPath}. Cannot rotate a key that does not exist.`);
+        }
+        const oldFingerprint = this.getFingerprint();
+        // Archive old public key before overwriting
+        const oldPublicPath = join(this.keysDir, OLD_PUBLIC_KEY_FILENAME);
+        copyFileSync(this.publicKeyPath, oldPublicPath);
+        const newFingerprint = this.generateKeypair();
+        return [oldFingerprint, newFingerprint];
+    }
+    // ------------------------------------------------------------------
+    // Key loading
+    // ------------------------------------------------------------------
+    /**
+     * Load the private key from disk, enforcing strict file permissions.
+     *
+     * @throws KeyNotFoundError if the private key file does not exist.
+     * @throws KeyPermissionError if the file mode is broader than 0o600.
+     */
+    loadPrivateKey() {
+        if (!existsSync(this.privateKeyPath)) {
+            throw new KeyNotFoundError(`Private key not found at ${this.privateKeyPath}. Run 'forgeos analyze --init' to generate keys.`);
+        }
+        this.assertPrivateKeyPermissions();
+        const pem = readFileSync(this.privateKeyPath, 'utf8');
+        return createPrivateKey(pem);
+    }
+    /**
+     * Load the public key from disk.
+     *
+     * @throws KeyNotFoundError if the public key file does not exist.
+     */
+    loadPublicKey() {
+        if (!existsSync(this.publicKeyPath)) {
+            throw new KeyNotFoundError(`Public key not found at ${this.publicKeyPath}. Run 'forgeos analyze --init' to generate keys.`);
+        }
+        const pem = readFileSync(this.publicKeyPath, 'utf8');
+        return createPublicKey(pem);
+    }
+    /**
+     * Return the raw 32-byte Ed25519 public key material.
+     *
+     * This replicates Python's:
+     *   public_key.public_bytes(Encoding.Raw, PublicFormat.Raw)
+     * which returns the 32-byte raw Ed25519 public key (not PEM, not DER SPKI).
+     */
+    getPublicKeyBytes() {
+        const publicKey = this.loadPublicKey();
+        // Export as DER (SPKI format) then extract the raw 32-byte key material.
+        // DER SPKI for Ed25519 is: 12-byte header + 32-byte raw key = 44 bytes total.
+        // The raw key starts at offset 12.
+        const derBytes = publicKey.export({ type: 'spki', format: 'der' });
+        return derBytes.slice(12);
+    }
+    /**
+     * Return the key fingerprint as 16 hex characters.
+     *
+     * Fingerprint = first 16 hex chars of SHA-256(raw_public_key_bytes).
+     *
+     * This matches Python's:
+     *   raw_bytes = public_key.public_bytes(Encoding.Raw, PublicFormat.Raw)
+     *   digest = hashlib.sha256(raw_bytes).hexdigest()
+     *   return digest[:16]
+     */
+    getFingerprint() {
+        const rawBytes = this.getPublicKeyBytes();
+        const digest = createHash('sha256').update(rawBytes).digest('hex');
+        return digest.substring(0, 16);
+    }
+    // ------------------------------------------------------------------
+    // Sign / verify
+    // ------------------------------------------------------------------
+    /**
+     * Sign an entry dict with the project's private key.
+     *
+     * The entry is serialized to canonical JSON (sorted keys, UTF-8) before
+     * signing, matching Python's:
+     *   entry_bytes = json.dumps(entry, sort_keys=True, ensure_ascii=False).encode("utf-8")
+     *   raw_sig = private_key.sign(entry_bytes)
+     *   return base64.b64encode(raw_sig).decode("ascii")
+     *
+     * @param entry - The entry dict to sign (before signature field is set).
+     * @returns Base64-encoded (standard alphabet) signature string.
+     */
+    signEntry(entry) {
+        const privateKey = this.loadPrivateKey();
+        // Use Python-compatible serialization: sort_keys=True, ": " and ", " separators
+        const canonical = pythonJsonDumps(entry);
+        const entryBytes = Buffer.from(canonical, 'utf8');
+        // Ed25519 signing in Node.js uses createSign with 'sha512' alg name
+        // but for Ed25519, the digest algorithm is ignored — signing is done
+        // over the raw message. Using null/undefined as algorithm.
+        // Ed25519 signing: algorithm must be null (no digest; Ed25519 is pre-hash)
+        const rawSig = sign(null, entryBytes, privateKey);
+        return rawSig.toString('base64');
+    }
+    /**
+     * Verify an Ed25519 signature against an entry dict.
+     *
+     * Returns false on any verification failure — never throws.
+     *
+     * Matches Python's verify_signature which catches all exceptions and
+     * returns False rather than propagating.
+     *
+     * @param entry - The entry dict that was signed.
+     * @param signature - Base64-encoded signature string.
+     * @returns true if the signature is valid, false otherwise.
+     */
+    verifySignature(entry, signature) {
+        try {
+            const publicKey = this.loadPublicKey();
+            const canonical = pythonJsonDumps(entry);
+            const entryBytes = Buffer.from(canonical, 'utf8');
+            const sigBuffer = Buffer.from(signature, 'base64');
+            // Ed25519 verification: algorithm must be null (no digest)
+            return verify(null, entryBytes, publicKey, sigBuffer);
+        }
+        catch {
+            return false;
+        }
+    }
+    // ------------------------------------------------------------------
+    // Internal helpers
+    // ------------------------------------------------------------------
+    assertPrivateKeyPermissions() {
+        const st = statSync(this.privateKeyPath);
+        // Extract permission bits (last 9 bits of mode)
+        const mode = st.mode & 0o777;
+        // Check that no bits beyond 0o600 are set
+        if (mode & ~REQUIRED_PRIVATE_MODE) {
+            throw new KeyPermissionError(`Private key at ${this.privateKeyPath} has permissions ${oct(mode)} — expected ${oct(REQUIRED_PRIVATE_MODE)}. Run: chmod 600 .forgeos/keys/private.pem`);
+        }
+    }
+}
+// ------------------------------------------------------------------
+// Module-level helpers
+// ------------------------------------------------------------------
+function oct(n) {
+    return '0o' + n.toString(8);
+}
+//# sourceMappingURL=signing.js.map

package/dist/trust/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/trust/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,mBAAmB,EACnB,IAAI,EACJ,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,eAAe,GAEhB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,QAAQ,EACR,YAAY,GACb,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,mBAAmB,GAAG,YAAY,CAAC;AACzC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACjD,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,UAAU;IACb,OAAO,CAAS;IAExB,YAAY,WAAmB;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACjD,CAAC;IAED,qEAAqE;IACrE,gBAAgB;IAChB,qEAAqE;IAErE;;;;;;;OAOG;IACH,eAAe;QACb,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAE/C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QACjF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QAE9E,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAChF,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAE7C,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,SAAS;QACP,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,gBAAgB,CACxB,6BAA6B,IAAI,CAAC,aAAa,4CAA4C,CAC5F,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAE7C,4CAA4C;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAClE,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC1C,CAAC;IAED,qEAAqE;IACrE,cAAc;IACd,qEAAqE;IAErE;;;;;OAKG;IACH,cAAc;QACZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,gBAAgB,CACxB,4BAA4B,IAAI,CAAC,cAAc,kDAAkD,CAClG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,2BAA2B,EAAE,CAAC;QAEnC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,IAAI,CAAC,aAAa,kDAAkD,CAChG,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,yEAAyE;QACzE,8EAA8E;QAC9E,mCAAmC;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QAC7E,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;OASG;IACH,cAAc;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,qEAAqE;IACrE,gBAAgB;IAChB,qEAAqE;IAErE;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,KAA8B;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,gFAAgF;QAChF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAElD,oEAAoE;QACpE,qEAAqE;QACrE,2DAA2D;QAC3D,2EAA2E;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,KAA8B,EAAE,SAAiB;QAC/D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAEnD,2DAA2D;YAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IAE7D,2BAA2B;QACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,gDAAgD;QAChD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;QAC7B,0CAA0C;QAC1C,IAAI,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,IAAI,CAAC,cAAc,oBAAoB,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,qBAAqB,CAAC,4CAA4C,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,qEAAqE;AACrE,uBAAuB;AACvB,qEAAqE;AAErE,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/trust/transmission.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Shareable metadata transmission for the ForgeOS Trust Ledger.
+ *
+ * Controls exactly what leaves the developer's machine.
+ *
+ * Design is fail-closed: any privacy violation raises rather than returning
+ * a partial payload. New fields added to the ledger schema are automatically
+ * excluded until explicitly added to TRANSMITTABLE_FIELDS.
+ *
+ * Binary-compatible with the Python transmission.py implementation:
+ * - Same TRANSMITTABLE_FIELDS allowlist
+ * - Same sensitive pattern regexes (adapted for JavaScript RegExp)
+ * - Same transmission payload structure
+ * - Same manifest format (both box-drawing and plain-text versions)
+ *
+ * Privacy model (architecture §7.1):
+ *   - LOCAL_ONLY_FIELDS (signature, source_tree_hash) are NEVER transmitted.
+ *   - TRANSMITTABLE_FIELDS is the explicit allowlist. Any field not in this
+ *     list is stripped. New fields are automatically excluded.
+ *   - The privacy filter validates before transmission and raises
+ *     PrivacyViolationError on any sensitive pattern match.
+ *
+ * Transmission log:
+ *   Every attempt (approved or rejected) is appended to
+ *   .forgeos/transmissions.log as a JSON line.
+ */
+import type { LedgerEntry } from './ledger.js';
+/**
+ * Explicit allowlist: only these top-level fields may appear in a
+ * transmitted payload. Matches Python's TRANSMITTABLE_FIELDS exactly.
+ */
+export declare const TRANSMITTABLE_FIELDS: Set<string>;
+/**
+ * Fields that are local-only and must be stripped before transmission.
+ * Matches Python's LOCAL_ONLY_FIELDS.
+ */
+export declare const LOCAL_ONLY_FIELDS: Set<string>;
+export declare class TransmissionError extends Error {
+    constructor(message: string);
+}
+export declare class PrivacyViolationError extends TransmissionError {
+    constructor(message: string);
+}
+export interface TransmissionPayload {
+    schema_version: string;
+    transmitted_at: string;
+    entry_count: number;
+    entries: Record<string, unknown>[];
+}
+export interface TransmissionResult {
+    status: 'sent' | 'cancelled' | 'error';
+    http_status: number | null;
+    response_body: Record<string, unknown> | null;
+    payload_hash: string;
+}
+/**
+ * Build a transmission payload from a list of ledger entries.
+ *
+ * Strips all LOCAL_ONLY_FIELDS and any fields not in TRANSMITTABLE_FIELDS.
+ * Runs a paranoia check for sensitive patterns in the resulting payload.
+ *
+ * Matches Python's prepare_transmission() exactly.
+ *
+ * @param entries - List of ledger entry dicts.
+ * @param fieldsToShare - Optional additional field names beyond TRANSMITTABLE_FIELDS.
+ * @returns Filtered payload dict suitable for transmission.
+ * @throws PrivacyViolationError if any value matches a sensitive pattern.
+ */
+export declare function prepareTransmission(entries: LedgerEntry[], fieldsToShare?: string[]): TransmissionPayload;
+/**
+ * Detect sensitive content in a string. Returns matching pattern sources.
+ *
+ * Convenience function for callers that want to pre-screen values.
+ */
+export declare function detectSensitiveContent(text: string): string[];
+/**
+ * Generate a box-drawing manifest of what will be transmitted.
+ *
+ * Matches Python's generate_manifest() box-drawing format exactly.
+ *
+ * @param transmissionData - Filtered payload from prepareTransmission().
+ * @param destination - Target URL the data will be sent to.
+ * @returns Multiline string suitable for printing to a terminal.
+ */
+export declare function generateManifest(transmissionData: TransmissionPayload, destination: string): string;
+/**
+ * Generate a plain-text (no box-drawing) manifest for non-TTY output.
+ *
+ * Matches Python's generate_plain_manifest() exactly.
+ */
+export declare function generatePlainManifest(transmissionData: TransmissionPayload, destination: string): string;
+export interface TransmissionLogRecord {
+    timestamp: string;
+    approved: boolean;
+    auto_confirmed: boolean;
+    payload_hash: string;
+    destination: string;
+    http_status: number | null;
+    error: string | null;
+}
+/**
+ * Append a transmission record to .forgeos/transmissions.log.
+ *
+ * Append-only log — every attempt is recorded whether approved,
+ * rejected, or errored. Matches Python's _log_transmission().
+ */
+export declare function logTransmission(projectPath: string, approved: boolean, autoConfirmed: boolean, payloadHash: string, destination: string, httpStatus?: number | null, error?: string | null): void;
+/**
+ * Load allowed endpoints from .forgeos/config.toml.
+ *
+ * Falls back to DEFAULT_ALLOWED_ENDPOINTS if the config file is missing
+ * or unreadable. Uses simple regex parsing (no TOML library dependency).
+ */
+export declare function loadAllowedEndpoints(projectPath: string): string[];
+/**
+ * Send a transmission payload to a ForgeOS Trust API endpoint.
+ *
+ * Checks the URL against the allowed endpoints list.
+ * Returns a TransmissionResult; all errors are caught and returned as status='error'.
+ *
+ * @param url - Target endpoint URL (must be HTTPS).
+ * @param data - Filtered payload from prepareTransmission().
+ * @param projectPath - Project root for config and logging.
+ * @param noConfirm - Skip interactive confirmation.
+ * @returns TransmissionResult.
+ * @throws TransmissionError if the URL is not in the allowed list.
+ */
+export declare function sendTransmission(url: string, data: TransmissionPayload, projectPath: string, noConfirm?: boolean): Promise<TransmissionResult>;
+//# sourceMappingURL=transmission.d.ts.map

package/dist/trust/transmission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transmission.d.ts","sourceRoot":"","sources":["../../src/trust/transmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;GAGG;AACH,eAAO,MAAM,oBAAoB,aAO/B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,iBAAiB,aAA6C,CAAC;AA6B5E,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,qBAAsB,SAAQ,iBAAiB;gBAC9C,OAAO,EAAE,MAAM;CAI5B;AAMD,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;IACvC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EAAE,EACtB,aAAa,CAAC,EAAE,MAAM,EAAE,GACvB,mBAAmB,CA6BrB;AAkDD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAI7D;AAMD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,gBAAgB,EAAE,mBAAmB,EACrC,WAAW,EAAE,MAAM,GAClB,MAAM,CAuCR;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,gBAAgB,EAAE,mBAAmB,EACrC,WAAW,EAAE,MAAM,GAClB,MAAM,CAeR;AAMD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,EACjB,aAAa,EAAE,OAAO,EACtB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,GAAE,MAAM,GAAG,IAAW,EAChC,KAAK,GAAE,MAAM,GAAG,IAAW,GAC1B,IAAI,CAmBN;AAMD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAyDlE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,mBAAmB,EACzB,WAAW,EAAE,MAAM,EACnB,SAAS,UAAQ,GAChB,OAAO,CAAC,kBAAkB,CAAC,CAwD7B"}