codequill 0.8.1-beta.0

package/dist/services/manifests/proofManifest.js

@@ -0,0 +1,151 @@
+import { chainName } from "../utilities.js";
+import { leafHash, parentHash, normalizePath } from "../merkle.js";
+function isHex32(x) {
+    return typeof x === "string" && /^[0-9a-f]{64}$/i.test(x);
+}
+export function buildProofManifest(args) {
+    const core = buildProofFromManifest(args.snapshotManifest, args.targetPathHash);
+    // 1) Verify local file matches snapshot record (public file hash)
+    const fileHashInSnapshot = String(core.file?.hash ?? "").toLowerCase();
+    const current = String(args.currentFileHash ?? "").toLowerCase();
+    if (!isHex32(fileHashInSnapshot)) {
+        throw new Error(`Invalid proof build: snapshot file hash is not 32-byte hex`);
+    }
+    if (!isHex32(current)) {
+        throw new Error(`Invalid input: currentFileHash is not 32-byte hex`);
+    }
+    if (fileHashInSnapshot !== current) {
+        throw new Error(`File content does not match snapshot.\n\n` +
+            `Snapshot hash: ${fileHashInSnapshot}\n` +
+            `Current hash:  ${current}\n`);
+    }
+    // 2) Optional on-chain context
+    let statement = String(core.statement ?? "");
+    const meta = args.snapshotMeta ?? null;
+    let snapshot = undefined;
+    if (meta?.snapshot_id) {
+        snapshot = {
+            snapshot_id: String(meta.snapshot_id),
+            published_at: meta.published_at,
+            chain_id: meta.chain_id,
+            tx_hash: meta.tx_hash ? String(meta.tx_hash) : undefined,
+            explorer_url: meta.explorer_url ? String(meta.explorer_url) : undefined,
+            publisher_wallet: meta.wallet_address ? String(meta.wallet_address) : undefined,
+            manifest_cid: meta.manifest_cid ? String(meta.manifest_cid) : undefined,
+        };
+        const chain = chainName(meta.chain_id) ?? (meta.chain_id ? `chain ${meta.chain_id}` : "unknown chain");
+        const pubAt = meta.published_at ? new Date(meta.published_at * 1000).toUTCString() : "unknown time";
+        const wallet = meta.wallet_address ? String(meta.wallet_address) : "unknown wallet";
+        statement += ` The snapshot was published on ${chain} at ${pubAt} by authority wallet ${wallet}.`;
+    }
+    // 3) Privacy block + optional disclosure (kept inside this function, as requested)
+    const disclosed = !!args.disclosePathPlaintext;
+    const privacy = {
+        disclosed_path: disclosed,
+        path_binding: disclosed ? "prover_asserted" : "not_provided",
+        ...(disclosed
+            ? { path_plaintext: normalizePath(args.pathPlaintext ?? args.targetPathNorm) }
+            : {}),
+    };
+    if (disclosed) {
+        const norm = privacy.path_plaintext;
+        statement += ` (Path provided by prover: "${norm}" — not publicly verifiable without decrypted path map.)`;
+    }
+    // 4) Return final proof manifest (now includes privacy)
+    return {
+        ...core,
+        statement,
+        ...(snapshot ? { snapshot } : {}),
+        privacy,
+    };
+}
+function buildProofFromManifest(manifest, targetPathHash) {
+    if (!manifest?.files || !Array.isArray(manifest.files)) {
+        throw new Error("Invalid manifest: missing files[]");
+    }
+    if (!manifest?.merkle_root || typeof manifest.merkle_root !== "string") {
+        throw new Error("Invalid manifest: missing merkle_root");
+    }
+    const repo = String(manifest.repo ?? "");
+    const commit = String(manifest.commit ?? "");
+    const merkle_root = String(manifest.merkle_root).toLowerCase();
+    const targetHash = String(targetPathHash ?? "").toLowerCase();
+    if (!isHex32(targetHash)) {
+        throw new Error("targetPathHash must be 64 hex chars (no 0x)");
+    }
+    // Parse manifest records
+    const records = manifest.files.map((f) => ({
+        path_hash: String(f.path_hash).toLowerCase(),
+        hash: String(f.hash).toLowerCase(),
+    }));
+    // Find matching file record by path_hash
+    const rec = records.find((r) => r.path_hash === targetHash);
+    if (!rec) {
+        throw new Error(`File not found in manifest (by path_hash).\n` +
+            `Provided path_hash: ${targetHash}\n` +
+            `Tip: you must compute path_hash using the decrypted path map (salt is encrypted in snapshot.path_map_enc).`);
+    }
+    // Build leaf list for all entries
+    const leafItems = records.map((r) => ({
+        leaf: leafHash(r.path_hash, r.hash),
+        path_hash: r.path_hash,
+        hash: r.hash,
+    }));
+    // Sort leaves lexicographically by leaf hash (must match merkle.ts)
+    leafItems.sort((a, b) => (a.leaf < b.leaf ? -1 : a.leaf > b.leaf ? 1 : 0));
+    const targetLeaf = leafHash(rec.path_hash, rec.hash);
+    const idx = leafItems.findIndex((x) => x.leaf === targetLeaf);
+    if (idx === -1)
+        throw new Error("Internal error: target leaf not found after sorting");
+    // Build proof upward
+    let index = idx;
+    let level = leafItems.map((x) => x.leaf);
+    const proofSteps = [];
+    while (level.length > 1) {
+        const isRightNode = index % 2 === 1;
+        const pairIndex = isRightNode ? index - 1 : index + 1;
+        const sibling = pairIndex < level.length ? level[pairIndex] : level[index]; // duplicate-last
+        proofSteps.push({
+            side: isRightNode ? "left" : "right",
+            hash: sibling,
+        });
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const l = level[i];
+            const r = i + 1 < level.length ? level[i + 1] : level[i];
+            next.push(parentHash(l, r));
+        }
+        level = next;
+        index = Math.floor(index / 2);
+    }
+    const computedRoot = String(level[0]).toLowerCase();
+    if (computedRoot !== merkle_root) {
+        throw new Error(`Manifest root mismatch: computed ${computedRoot} != manifest ${merkle_root}`);
+    }
+    const statement = `This document proves that the leaf derived from (path_hash="${rec.path_hash}", file_hash="${rec.hash}") ` +
+        `was included in the snapshot of repository "${repo}" at commit "${commit}", ` +
+        `whose Merkle root is ${merkle_root}, according to the CodeQuill snapshot specification v1.`;
+    return {
+        version: "codequill-proof:v1",
+        statement,
+        repo,
+        commit,
+        merkle_root,
+        file: {
+            path_hash: rec.path_hash,
+            hash: rec.hash,
+        },
+        leaf: targetLeaf,
+        proof: proofSteps,
+        hashing: {
+            algo: "keccak256",
+            pathHash: "hmac-sha256(path_salt, utf8(path)) (path_salt encrypted in snapshot.path_map_enc)",
+            file: "keccak(fileBytes)",
+            leaf: "keccak(0x00||pathHash||fileHash)",
+            node: "keccak(0x01||left||right)",
+            leafSort: "lexicographic hex of leaf hash",
+            oddRule: "duplicate_last",
+        },
+    };
+}
+//# sourceMappingURL=proofManifest.js.map

package/dist/services/manifests/proofManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proofManifest.js","sourceRoot":"","sources":["../../../src/services/manifests/proofManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAwB,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AA0DzF,SAAS,OAAO,CAAC,CAAM;IACnB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAUlC;IACG,MAAM,IAAI,GAAsB,sBAAsB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAEnG,kEAAkE;IAClE,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACX,2CAA2C;YAC3C,kBAAkB,kBAAkB,IAAI;YACxC,kBAAkB,OAAO,IAAI,CAChC,CAAC;IACN,CAAC;IAED,+BAA+B;IAC/B,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAEvC,IAAI,QAAQ,GAA4C,SAAS,CAAC;IAClE,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,QAAQ,GAAG;YACP,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACrC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACxD,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACvE,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/E,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;QAEF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACvG,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QACpG,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAEpF,SAAS,IAAI,kCAAkC,KAAK,OAAO,KAAK,wBAAwB,MAAM,GAAG,CAAC;IACtG,CAAC;IAED,mFAAmF;IACnF,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;IAC/C,MAAM,OAAO,GAAiB;QAC1B,cAAc,EAAE,SAAS;QACzB,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc;QAC5D,GAAG,CAAC,SAAS;YACT,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE;YAC9E,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,OAAO,CAAC,cAAe,CAAC;QACrC,SAAS,IAAI,+BAA+B,IAAI,0DAA0D,CAAC;IAC/G,CAAC;IAED,wDAAwD;IACxD,OAAO;QACH,GAAG,IAAI;QACP,SAAS;QACT,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,OAAO;KACV,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA0B,EAAE,cAAsB;IAC9E,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,QAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,OAAQ,QAAgB,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAE,QAAgB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAE,QAAgB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,CAAE,QAAgB,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAExE,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnE,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAgD,QAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QACjG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC5C,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC,CAAC;IAEJ,yCAAyC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACX,8CAA8C;YAC9C,uBAAuB,UAAU,IAAI;YACrC,4GAA4G,CAC/G,CAAC;IACN,CAAC;IAED,kCAAkC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI;KACf,CAAC,CAAC,CAAC;IAEJ,oEAAoE;IACpE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC9D,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAEvF,qBAAqB;IACrB,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,IAAI,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB;QAC7F,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACpC,IAAI,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,GAAG,IAAI,CAAC;QACb,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,gBAAgB,WAAW,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,SAAS,GACX,+DAA+D,GAAG,CAAC,SAAS,iBAAiB,GAAG,CAAC,IAAI,KAAK;QAC1G,+CAA+C,IAAI,gBAAgB,MAAM,KAAK;QAC9E,wBAAwB,WAAW,yDAAyD,CAAC;IAEjG,OAAO;QACH,OAAO,EAAE,oBAAoB;QAC7B,SAAS;QACT,IAAI;QACJ,MAAM;QACN,WAAW;QACX,IAAI,EAAE;YACF,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI;SACjB;QACD,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,mFAAmF;YAC7F,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,kCAAkC;YACxC,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,gBAAgB;SAC5B;KACJ,CAAC;AACN,CAAC"}

package/dist/services/manifests/snapshotManifest.js

@@ -0,0 +1,214 @@
+import crypto, { createCipheriv, randomBytes } from "node:crypto";
+import sodium from "libsodium-wrappers";
+import { getCliVersion, randomSaltHex32 } from "../utilities.js";
+import { merkleRootFromFiles, merkleContentRootFromFileHashes, normalizePath } from "../merkle.js";
+import { keccakHex } from "../crypto.js";
+import { resolvePath } from "../paths.js";
+import { readFileUtf8 } from "../fs.js";
+import { listFilesAtCommit, readFileAtCommit } from "../git.js";
+export async function buildSnapshotManifest(params) {
+    const { repoRoot, repoName, commitHash } = params;
+    const concurrency = params.concurrency ?? 8;
+    if (!params.workspaceEncPublic?.public_key_b64) {
+        throw new Error("Missing workspaceEncPublic.public_key_b64 (required to encrypt path map).");
+    }
+    const pathSalt = params.pathSalt ?? randomSaltHex32();
+    const files = await listFilesAtCommit(repoRoot, commitHash);
+    if (!files.length)
+        throw new Error(`Commit ${commitHash} contains no files (nothing to snapshot).`);
+    // Ensure unique paths
+    const seen = new Set();
+    for (const p of files) {
+        if (seen.has(p))
+            throw new Error(`Duplicate file path detected in tree: ${p}`);
+        seen.add(p);
+    }
+    const limiter = pLimit(Math.max(1, concurrency));
+    const records = new Array(files.length);
+    const pathMapEntries = new Array(files.length);
+    // We'll also gather file hashes for content_root computation
+    const contentHashes = new Array(files.length);
+    await Promise.all(files.map((p, idx) => limiter(async () => {
+        const normalized = normalizePath(p);
+        const bytes = await readFileAtCommit(repoRoot, commitHash, normalized);
+        const fileHash = keccakHex(bytes);
+        const path_hash = pathHashHmacSha256(normalized, pathSalt);
+        records[idx] = { path_hash, hash: fileHash };
+        pathMapEntries[idx] = [path_hash, normalized];
+        contentHashes[idx] = fileHash;
+    })));
+    // Deterministic manifest order
+    records.sort((a, b) => (a.path_hash < b.path_hash ? -1 : a.path_hash > b.path_hash ? 1 : 0));
+    // Deterministic path map order too (sort by path_hash)
+    pathMapEntries.sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0));
+    // Private Merkle root (path_hash + fileHash leaves)
+    const root = merkleRootFromFiles(records);
+    // Public content-only root (fileHash-only leaves)
+    const content_root = merkleContentRootFromFileHashes(contentHashes);
+    // Encrypt path map (includes salt) for owner UX
+    const pathMapPlain = {
+        version: "codequill-pathmap:v1",
+        salt_hex: pathSalt,
+        entries: pathMapEntries, // [path_hash, normalized_path]
+    };
+    const path_map_enc = await encryptJsonAsEnvelopeV1(pathMapPlain, params.workspaceEncPublic.public_key_b64, {
+        workspace_id: params.workspaceEncPublic.workspace_id,
+        key_id: params.workspaceEncPublic.key_id,
+    });
+    const timestamp = Math.floor(Date.now() / 1000);
+    const cliVersion = getCliVersion();
+    const manifest = {
+        version: "codequill-snapshot:v1",
+        statement: buildSnapshotStatement({
+            repo: repoName,
+            commit: commitHash,
+            merkleRoot: root,
+            contentRoot: content_root,
+        }),
+        repo: repoName,
+        commit: commitHash,
+        merkle_root: root,
+        content_root,
+        files: records,
+        hashing: {
+            algo: "keccak256",
+            pathHash: "hmac-sha256(path_salt, utf8(path))",
+            file: "keccak(fileBytes)",
+            leaf: "keccak(0x00||pathHash||fileHash)",
+            node: "keccak(0x01||left||right)",
+            leafSort: "lexicographic hex of leaf hash",
+            oddRule: "duplicate_last",
+            pathSalt: {
+                storage: "encrypted",
+                location: "path_map_enc",
+                payload: "codequill-pathmap:v1",
+                field: "salt_hex",
+            },
+            contentRoot: {
+                leaf: "keccak(0x00||fileHash)",
+                node: "keccak(0x01||left||right)",
+                leafSort: "lexicographic hex of leaf hash",
+                oddRule: "duplicate_last",
+            },
+        },
+        path_map_enc,
+        timestamp,
+        generator: {
+            name: "codequill-cli",
+            version: cliVersion,
+        },
+    };
+    return { manifest, merkleRoot: root, contentRoot: content_root, fileCount: records.length };
+}
+export async function loadManifestFromFile(filePath) {
+    const p = resolvePath(filePath);
+    const raw = await readFileUtf8(p);
+    const obj = JSON.parse(raw);
+    if (!isValidManifest(obj))
+        throw new Error("Invalid manifest: missing required fields.");
+    return obj;
+}
+function isValidManifest(obj) {
+    return (!!obj &&
+        typeof obj === "object" &&
+        typeof obj.repo === "string" &&
+        typeof obj.commit === "string" &&
+        typeof obj.merkle_root === "string" &&
+        typeof obj.content_root === "string" &&
+        !!obj.path_map_enc &&
+        typeof obj.path_map_enc === "object" &&
+        typeof obj.path_map_enc.ciphertext_b64 === "string" &&
+        Array.isArray(obj.files));
+}
+function buildSnapshotStatement(args) {
+    return (`This document is a CodeQuill snapshot manifest for repository "${args.repo}" ` +
+        `at commit "${args.commit}". It lists private path hashes (HMAC-SHA256 with encrypted salt stored in path_map_enc) ` +
+        `and file content hashes used to compute the private Merkle root ${args.merkleRoot}. ` +
+        `It also includes a public content-only root ${args.contentRoot} for verification without any path data, ` +
+        `according to the CodeQuill snapshot specification v1.`);
+}
+/**
+ * path_hash = HMAC-SHA256(key = path_salt_bytes, msg = utf8(normalized_path))
+ * - saltHex is 64 hex chars (32 bytes)
+ * - returns lowercase hex (64 chars)
+ */
+function pathHashHmacSha256(normalizedPath, saltHex) {
+    const key = Buffer.from(saltHex, "hex");
+    if (key.length !== 32)
+        throw new Error("path_salt must be 32 bytes (64 hex chars).");
+    return crypto
+        .createHmac("sha256", key)
+        .update(normalizedPath, "utf8")
+        .digest("hex");
+}
+/**
+ * Encrypt JSON payload as codequill-envelope:v1:
+ * - AES-256-GCM for payload
+ * - X25519 sealed box wrap for DEK
+ * Stores ciphertext in-base64 inside manifest (since it's small).
+ */
+async function encryptJsonAsEnvelopeV1(payload, workspacePublicKeyB64, recipient) {
+    const plaintext = Buffer.from(JSON.stringify(payload), "utf8");
+    const dek = randomBytes(32);
+    const iv = randomBytes(12);
+    const { ciphertext, tag } = aes256gcmEncrypt(plaintext, dek, iv);
+    const wrappedDek = await wrapDekForWorkspace(workspacePublicKeyB64, dek);
+    return {
+        scheme: "codequill-envelope:v1",
+        cipher: "aes-256-gcm",
+        iv_b64: iv.toString("base64"),
+        tag_b64: tag.toString("base64"),
+        dek_wrap: "x25519-sealedbox",
+        wrapped_dek_b64: wrappedDek.ciphertext_b64,
+        ciphertext_b64: ciphertext.toString("base64"),
+        recipient: {
+            type: "workspace",
+            workspace_id: recipient.workspace_id,
+            key_id: recipient.key_id,
+        },
+    };
+}
+function aes256gcmEncrypt(plaintext, key32, iv12) {
+    if (key32.length !== 32)
+        throw new Error("AES-256-GCM key must be 32 bytes.");
+    if (iv12.length !== 12)
+        throw new Error("AES-256-GCM iv must be 12 bytes.");
+    const cipher = createCipheriv("aes-256-gcm", key32, iv12);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return { ciphertext, tag };
+}
+async function wrapDekForWorkspace(publicKeyB64, dek) {
+    await sodium.ready;
+    const pub = Buffer.from(publicKeyB64, "base64");
+    if (pub.length !== 32)
+        throw new Error("Workspace public key must be 32 bytes (X25519).");
+    const wrapped = sodium.crypto_box_seal(new Uint8Array(dek), new Uint8Array(pub));
+    return {
+        version: "x25519-sealedbox",
+        ciphertext_b64: Buffer.from(wrapped).toString("base64"),
+    };
+}
+function pLimit(concurrency) {
+    let active = 0;
+    const queue = [];
+    const next = () => {
+        active--;
+        const fn = queue.shift();
+        if (fn)
+            fn();
+    };
+    return function (fn) {
+        return new Promise((resolve, reject) => {
+            const run = () => {
+                active++;
+                fn().then((x) => { next(); resolve(x); }, (e) => { next(); reject(e); });
+            };
+            if (active < concurrency)
+                run();
+            else
+                queue.push(run);
+        });
+    };
+}
+//# sourceMappingURL=snapshotManifest.js.map

package/dist/services/manifests/snapshotManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshotManifest.js","sourceRoot":"","sources":["../../../src/services/manifests/snapshotManifest.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAkFhE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAO3C;IACG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;IAEtD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,2CAA2C,CAAC,CAAC;IAEpG,sBAAsB;IACtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACjD,MAAM,OAAO,GAA+C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,cAAc,GAA4B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExE,6DAA6D;IAC7D,MAAM,aAAa,GAAa,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,OAAO,CAAC,GAAG,CACb,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAE3D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7C,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9C,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;IAClC,CAAC,CAAC,CACL,CACJ,CAAC;IAEF,+BAA+B;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7F,uDAAuD;IACvD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,oDAAoD;IACpD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE1C,kDAAkD;IAClD,MAAM,YAAY,GAAG,+BAA+B,CAAC,aAAa,CAAC,CAAC;IAEpE,gDAAgD;IAChD,MAAM,YAAY,GAAG;QACjB,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,cAAc,EAAE,+BAA+B;KAC3D,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAC9C,YAAY,EACZ,MAAM,CAAC,kBAAkB,CAAC,cAAc,EACxC;QACI,YAAY,EAAE,MAAM,CAAC,kBAAkB,CAAC,YAAY;QACpD,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;KAC3C,CACJ,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IAEnC,MAAM,QAAQ,GAAqB;QAC/B,OAAO,EAAE,uBAAuB;QAChC,SAAS,EAAE,sBAAsB,CAAC;YAC9B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,YAAY;SAC5B,CAAC;QACF,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,UAAU;QAElB,WAAW,EAAE,IAAI;QACjB,YAAY;QAEZ,KAAK,EAAE,OAAO;QACd,OAAO,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,oCAAoC;YAC9C,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,kCAAkC;YACxC,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,gBAAgB;YAEzB,QAAQ,EAAE;gBACN,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,sBAAsB;gBAC/B,KAAK,EAAE,UAAU;aACpB;YAED,WAAW,EAAE;gBACT,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,gBAAgB;aAC5B;SACJ;QACD,YAAY;QACZ,SAAS;QACT,SAAS,EAAE;YACP,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,UAAU;SACtB;KACJ,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACvD,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACzF,OAAO,GAAuB,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,GAAQ;IAC7B,OAAO,CACH,CAAC,CAAC,GAAG;QACL,OAAO,GAAG,KAAK,QAAQ;QACvB,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAC5B,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC9B,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACnC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QACpC,CAAC,CAAC,GAAG,CAAC,YAAY;QAClB,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QACpC,OAAO,GAAG,CAAC,YAAY,CAAC,cAAc,KAAK,QAAQ;QACnD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAC3B,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA+E;IAC3G,OAAO,CACH,kEAAkE,IAAI,CAAC,IAAI,IAAI;QAC/E,cAAc,IAAI,CAAC,MAAM,2FAA2F;QACpH,mEAAmE,IAAI,CAAC,UAAU,IAAI;QACtF,+CAA+C,IAAI,CAAC,WAAW,2CAA2C;QAC1G,uDAAuD,CAC1D,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,cAAsB,EAAE,OAAe;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAErF,OAAO,MAAM;SACR,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SACzB,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CAClC,OAAY,EACZ,qBAA6B,EAC7B,SAAqD;IAErD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAE3B,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAEzE,OAAO;QACH,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAE/B,QAAQ,EAAE,kBAAkB;QAC5B,eAAe,EAAE,UAAU,CAAC,cAAc;QAE1C,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAE7C,SAAS,EAAE;YACP,IAAI,EAAE,WAAW;YACjB,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,MAAM,EAAE,SAAS,CAAC,MAAM;SAC3B;KACJ,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACrB,SAAiB,EACjB,KAAa,EACb,IAAY;IAEZ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,GAAW;IAChE,MAAM,MAAM,CAAC,KAAK,CAAC;IAEnB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAE1F,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjF,OAAO;QACH,OAAO,EAAE,kBAA2B;QACpC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1D,CAAC;AACN,CAAC;AAED,SAAS,MAAM,CAAC,WAAmB;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,GAAG,EAAE;QACd,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,EAAE;YAAE,EAAE,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,UAAa,EAAoB;QACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,GAAG,EAAE;gBACb,MAAM,EAAE,CAAC;gBACT,EAAE,EAAE,CAAC,IAAI,CACL,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9B,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChC,CAAC;YACN,CAAC,CAAC;YACF,IAAI,MAAM,GAAG,WAAW;gBAAE,GAAG,EAAE,CAAC;;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACN,CAAC"}

package/dist/services/merkle.js

@@ -0,0 +1,92 @@
+import { keccakHex, hexToBytes, concatBytes } from './crypto.js';
+export function normalizePath(p) {
+    let x = (p ?? '').trim();
+    x = x.replace(/\\/g, '/');
+    x = x.replace(/^\.\/+/, '');
+    x = x.replace(/\/{2,}/g, '/');
+    if (x.length > 1)
+        x = x.replace(/\/+$/, '');
+    if (!x)
+        throw new Error('Empty path not allowed');
+    return x;
+}
+/**
+ * LEAF = keccak256( 0x00 || path_hash || file_hash )
+ */
+export function leafHash(pathHash, fileHash) {
+    const prefix = new Uint8Array([0x00]);
+    const leafBytes = concatBytes(concatBytes(prefix, hexToBytes(pathHash)), hexToBytes(fileHash));
+    return keccakHex(leafBytes);
+}
+/**
+ * NODE = keccak256( 0x01 || left || right )
+ */
+export function parentHash(leftHash, rightHash) {
+    const prefix = new Uint8Array([0x01]);
+    const nodeBytes = concatBytes(concatBytes(prefix, hexToBytes(leftHash)), hexToBytes(rightHash));
+    return keccakHex(nodeBytes);
+}
+/**
+ * LEAF = keccak256( 0x00 || pathHash32 || fileHash32 )
+ * NODE = keccak256( 0x01 || left32 || right32 )
+ *
+ * This is your PRIVATE root (path-hash salted).
+ */
+export function merkleRootFromFiles(files) {
+    if (!files.length)
+        throw new Error('Cannot build Merkle root: no files.');
+    const leaves = files.map((f) => {
+        const pathHash = f.path_hash;
+        const fileHash = f.hash;
+        const leafBytes = concatBytes(concatBytes(new Uint8Array([0x00]), hexToBytes(pathHash)), hexToBytes(fileHash));
+        return keccakHex(leafBytes);
+    });
+    leaves.sort();
+    let level = leaves.slice();
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const left = level[i];
+            const right = i + 1 < level.length ? level[i + 1] : level[i];
+            const parentBytes = concatBytes(concatBytes(new Uint8Array([0x01]), hexToBytes(left)), hexToBytes(right));
+            next.push(keccakHex(parentBytes));
+        }
+        level = next;
+    }
+    return level[0];
+}
+/**
+ * CONTENT-ONLY ROOT (PUBLIC VERIFICATION)
+ *
+ * Definitions:
+ * - file_hash = keccak(fileBytes)
+ * - leaf = keccak(0x00 || file_hash)
+ * - leaves sorted lexicographically (hex)
+ * - node  = keccak(0x01 || left || right)
+ * - oddRule = duplicate_last
+ *
+ * This leaks NOTHING about paths and requires NO salt.
+ */
+export function merkleContentRootFromFileHashes(fileHashes) {
+    if (!fileHashes.length)
+        throw new Error('Cannot build content root: no files.');
+    // leaf = keccak(0x00 || fileHash)
+    const leaves = fileHashes.map((fileHash) => {
+        const leafBytes = concatBytes(new Uint8Array([0x00]), hexToBytes(fileHash));
+        return keccakHex(leafBytes);
+    });
+    leaves.sort();
+    let level = leaves.slice();
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const left = level[i];
+            const right = i + 1 < level.length ? level[i + 1] : level[i];
+            const parentBytes = concatBytes(concatBytes(new Uint8Array([0x01]), hexToBytes(left)), hexToBytes(right));
+            next.push(keccakHex(parentBytes));
+        }
+        level = next;
+    }
+    return level[0];
+}
+//# sourceMappingURL=merkle.js.map

package/dist/services/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../../src/services/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AASjE,MAAM,UAAU,aAAa,CAAC,CAAS;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,SAAS,GACX,WAAW,CACP,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EACzC,UAAU,CAAC,QAAQ,CAAC,CACvB,CAAC;IACN,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,SAAiB;IAC1D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,SAAS,GACX,WAAW,CACP,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EACzC,UAAU,CAAC,SAAS,CAAC,CACxB,CAAC;IACN,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IACzD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;QACxB,MAAM,SAAS,GACX,WAAW,CACP,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EACzD,UAAU,CAAC,QAAQ,CAAC,CACvB,CAAC;QACN,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,EAAE,CAAC;IAEd,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAE7D,MAAM,WAAW,GACb,WAAW,CACP,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EACrD,UAAU,CAAC,KAAK,CAAC,CACpB,CAAC;YAEN,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAAC,UAAoB;IAChE,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAEhF,kCAAkC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvC,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,EAAE,CAAC;IAEd,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAE7D,MAAM,WAAW,GACb,WAAW,CACP,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EACrD,UAAU,CAAC,KAAK,CAAC,CACpB,CAAC;YAEN,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/services/paths.js

@@ -0,0 +1,16 @@
+import path from 'node:path';
+import fs from 'node:fs';
+export function toAbsolute(p) {
+    return path.isAbsolute(p) ? p : path.resolve(process.cwd(), p);
+}
+export function ensurePathExists(p) {
+    if (!fs.existsSync(p)) {
+        throw new Error(`Path does not exist: ${p}`);
+    }
+}
+export function resolvePath(inputPath) {
+    const p = inputPath ? toAbsolute(inputPath) : process.cwd();
+    ensurePathExists(p);
+    return p;
+}
+//# sourceMappingURL=paths.js.map

package/dist/services/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/services/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAkB;IAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5D,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC"}