ocr-provenance-mcp 1.0.0

package/dist/services/provenance/verifier.d.ts

@@ -0,0 +1,153 @@
+/**
+ * ProvenanceVerifier - Hash integrity and chain verification
+ *
+ * Constitution Compliance:
+ * - CP-003: Immutable Hash Verification
+ * - CP-001: Complete Provenance Chain
+ *
+ * FAIL FAST: All errors throw immediately
+ * NO MOCKS: Tests use real DatabaseService
+ */
+import { DatabaseService } from '../storage/database/index.js';
+import { ProvenanceTracker } from './tracker.js';
+import { ProvenanceType, VerificationResult } from '../../models/provenance.js';
+/** Error codes for verifier operations */
+export declare const VerifierErrorCode: {
+    readonly INTEGRITY_FAILED: "INTEGRITY_VERIFICATION_FAILED";
+    readonly CONTENT_NOT_FOUND: "CONTENT_NOT_FOUND";
+    readonly FILE_NOT_FOUND: "SOURCE_FILE_NOT_FOUND";
+    readonly HASH_FORMAT_INVALID: "HASH_FORMAT_INVALID";
+    readonly NOT_FOUND: "PROVENANCE_NOT_FOUND";
+    readonly CHAIN_BROKEN: "PROVENANCE_CHAIN_BROKEN";
+    readonly ROOT_NOT_FOUND: "ROOT_DOCUMENT_NOT_FOUND";
+    readonly INVALID_TYPE: "INVALID_PROVENANCE_TYPE";
+    readonly INVALID_PARAMS: "INVALID_PROVENANCE_PARAMS";
+};
+type VerifierErrorCodeType = (typeof VerifierErrorCode)[keyof typeof VerifierErrorCode];
+/**
+ * VerifierError - Typed error for verification operations
+ * FAIL FAST: Always throw with detailed error information
+ */
+export declare class VerifierError extends Error {
+    readonly code: VerifierErrorCodeType;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(message: string, code: VerifierErrorCodeType, details?: Record<string, unknown> | undefined);
+}
+/** Result of single item verification */
+interface ItemVerificationResult {
+    valid: boolean;
+    item_id: string;
+    item_type: ProvenanceType;
+    expected_hash: string;
+    computed_hash: string;
+    format_valid: boolean;
+    verified_at: string;
+}
+/** Result of chain verification */
+interface ChainVerificationResult extends VerificationResult {
+    start_id: string;
+    chain_depth: number;
+    root_document_id: string;
+    chain_length: number;
+}
+/** Result of database-wide verification */
+interface DatabaseVerificationResult extends VerificationResult {
+    database_name: string;
+    documents_verified: number;
+    ocr_results_verified: number;
+    chunks_verified: number;
+    embeddings_verified: number;
+    images_verified: number;
+    vlm_descriptions_verified: number;
+    duration_ms: number;
+    /** Number of failed items beyond the MAX_FAILED_ITEMS cap (H-6) */
+    failed_overflow: number;
+    /** Chain integrity errors (missing parents, depth mismatches) */
+    chain_errors?: string[];
+}
+/**
+ * ProvenanceVerifier - Hash integrity and chain verification
+ *
+ * Provides verification for:
+ * 1. Single provenance record content hash
+ * 2. Complete provenance chain integrity
+ * 3. Database-wide verification
+ * 4. Source file integrity
+ */
+export declare class ProvenanceVerifier {
+    private readonly db;
+    private readonly tracker;
+    private readonly rawDb;
+    constructor(db: DatabaseService, tracker: ProvenanceTracker);
+    /**
+     * Verify content hash for a single provenance record
+     *
+     * @param provenanceId - Provenance record ID to verify
+     * @returns Verification result with computed and expected hashes
+     * @throws VerifierError if provenance not found, content not found, or file not accessible
+     */
+    verifyContentHash(provenanceId: string): Promise<ItemVerificationResult>;
+    /**
+     * Verify complete provenance chain from item to root
+     *
+     * @param provenanceId - Starting provenance record ID
+     * @returns Chain verification result with all failing items
+     * @throws VerifierError if chain broken or item not found
+     */
+    verifyChain(provenanceId: string): Promise<ChainVerificationResult>;
+    /**
+     * Verify all provenance records in database
+     *
+     * @returns Database verification result with counts by type
+     */
+    verifyDatabase(): Promise<DatabaseVerificationResult>;
+    /**
+     * Verify source file still matches stored hash
+     *
+     * @param documentId - Document ID to verify
+     * @returns Verification result for the file
+     * @throws VerifierError if document not found or file not accessible
+     */
+    verifyFileIntegrity(documentId: string): Promise<ItemVerificationResult>;
+    /**
+     * Get content and expected hash for a provenance record
+     * Returns { content, expectedHash, isFile } or throws if content not found
+     *
+     * CRITICAL MAPPING:
+     * - DOCUMENT: file_path → file_hash (via hashFile)
+     * - OCR_RESULT: extracted_text → content_hash
+     * - CHUNK: text → text_hash
+     * - EMBEDDING: original_text → content_hash
+     */
+    private getContentForVerification;
+    /**
+     * Get document by its provenance_id
+     */
+    private getDocumentByProvenanceId;
+    /**
+     * Get OCR result by its provenance_id
+     */
+    private getOCRResultByProvenanceId;
+    /**
+     * Get chunk by its provenance_id
+     */
+    private getChunkByProvenanceId;
+    /**
+     * Get embedding by its provenance_id (without vector)
+     */
+    private getEmbeddingByProvenanceId;
+    /**
+     * Get image by its provenance_id
+     */
+    private getImageByProvenanceId;
+    /**
+     * Get all provenance records ordered by chain_depth
+     */
+    private getAllProvenance;
+    /**
+     * Get database name from metadata
+     */
+    private getDatabaseName;
+}
+export {};
+//# sourceMappingURL=verifier.d.ts.map

package/dist/services/provenance/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../src/services/provenance/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAuB,MAAM,cAAc,CAAC;AACtE,OAAO,EAAoB,cAAc,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAuBlG,0CAA0C;AAC1C,eAAO,MAAM,iBAAiB;;;;;;;;;;CAMpB,CAAC;AAEX,KAAK,qBAAqB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAExF;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAGpB,IAAI,EAAE,qBAAqB;aAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAMpD;AAED,yCAAyC;AACzC,UAAU,sBAAsB;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mCAAmC;AACnC,UAAU,uBAAwB,SAAQ,kBAAkB;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,2CAA2C;AAC3C,UAAU,0BAA2B,SAAQ,kBAAkB;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB,EAAE,MAAM,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;gBAGvB,EAAE,EAAE,eAAe,EACnB,OAAO,EAAE,iBAAiB;IAK7C;;;;;;OAMG;IACG,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAiC9E;;;;;;OAMG;IACG,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA2DzE;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,0BAA0B,CAAC;IAoI3D;;;;;;OAMG;IACG,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAuC9E;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IA6PjC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAOjC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAOlC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAO9B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAOlC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAO9B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;OAEG;IACH,OAAO,CAAC,eAAe;CAWxB"}