vaspera 2.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +184 -0
- package/LICENSE +21 -0
- package/README.md +809 -0
- package/dist/__tests__/integration/certification-flow.test.d.ts +5 -0
- package/dist/__tests__/integration/certification-flow.test.d.ts.map +1 -0
- package/dist/__tests__/integration/certification-flow.test.js +245 -0
- package/dist/__tests__/integration/certification-flow.test.js.map +1 -0
- package/dist/__tests__/integration/commands.test.d.ts +5 -0
- package/dist/__tests__/integration/commands.test.d.ts.map +1 -0
- package/dist/__tests__/integration/commands.test.js +93 -0
- package/dist/__tests__/integration/commands.test.js.map +1 -0
- package/dist/action/diff-mode.d.ts +34 -0
- package/dist/action/diff-mode.d.ts.map +1 -0
- package/dist/action/diff-mode.js +201 -0
- package/dist/action/diff-mode.js.map +1 -0
- package/dist/action/diff-mode.test.d.ts +5 -0
- package/dist/action/diff-mode.test.d.ts.map +1 -0
- package/dist/action/diff-mode.test.js +162 -0
- package/dist/action/diff-mode.test.js.map +1 -0
- package/dist/action/index.d.ts +10 -0
- package/dist/action/index.d.ts.map +1 -0
- package/dist/action/index.js +231 -0
- package/dist/action/index.js.map +1 -0
- package/dist/action/pr-comment.d.ts +30 -0
- package/dist/action/pr-comment.d.ts.map +1 -0
- package/dist/action/pr-comment.js +301 -0
- package/dist/action/pr-comment.js.map +1 -0
- package/dist/action/pr-comment.test.d.ts +5 -0
- package/dist/action/pr-comment.test.d.ts.map +1 -0
- package/dist/action/pr-comment.test.js +189 -0
- package/dist/action/pr-comment.test.js.map +1 -0
- package/dist/action/sarif-upload.d.ts +104 -0
- package/dist/action/sarif-upload.d.ts.map +1 -0
- package/dist/action/sarif-upload.js +188 -0
- package/dist/action/sarif-upload.js.map +1 -0
- package/dist/action/sarif-upload.test.d.ts +5 -0
- package/dist/action/sarif-upload.test.d.ts.map +1 -0
- package/dist/action/sarif-upload.test.js +206 -0
- package/dist/action/sarif-upload.test.js.map +1 -0
- package/dist/action/types.d.ts +104 -0
- package/dist/action/types.d.ts.map +1 -0
- package/dist/action/types.js +33 -0
- package/dist/action/types.js.map +1 -0
- package/dist/action/types.test.d.ts +5 -0
- package/dist/action/types.test.d.ts.map +1 -0
- package/dist/action/types.test.js +79 -0
- package/dist/action/types.test.js.map +1 -0
- package/dist/agents/agent-integrity.d.ts +111 -0
- package/dist/agents/agent-integrity.d.ts.map +1 -0
- package/dist/agents/agent-integrity.js +308 -0
- package/dist/agents/agent-integrity.js.map +1 -0
- package/dist/agents/agent-privacy.d.ts +68 -0
- package/dist/agents/agent-privacy.d.ts.map +1 -0
- package/dist/agents/agent-privacy.js +345 -0
- package/dist/agents/agent-privacy.js.map +1 -0
- package/dist/agents/exploit-chain.d.ts +64 -0
- package/dist/agents/exploit-chain.d.ts.map +1 -0
- package/dist/agents/exploit-chain.js +477 -0
- package/dist/agents/exploit-chain.js.map +1 -0
- package/dist/agents/exploit-chain.test.d.ts +5 -0
- package/dist/agents/exploit-chain.test.d.ts.map +1 -0
- package/dist/agents/exploit-chain.test.js +455 -0
- package/dist/agents/exploit-chain.test.js.map +1 -0
- package/dist/agents/index.d.ts +14 -0
- package/dist/agents/index.d.ts.map +1 -0
- package/dist/agents/index.js +19 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/logic-flaw-detector.d.ts +55 -0
- package/dist/agents/logic-flaw-detector.d.ts.map +1 -0
- package/dist/agents/logic-flaw-detector.js +454 -0
- package/dist/agents/logic-flaw-detector.js.map +1 -0
- package/dist/agents/zero-day-hunter.d.ts +69 -0
- package/dist/agents/zero-day-hunter.d.ts.map +1 -0
- package/dist/agents/zero-day-hunter.js +591 -0
- package/dist/agents/zero-day-hunter.js.map +1 -0
- package/dist/certification/artifacts.d.ts +21 -0
- package/dist/certification/artifacts.d.ts.map +1 -0
- package/dist/certification/artifacts.js +275 -0
- package/dist/certification/artifacts.js.map +1 -0
- package/dist/certification/autofix.d.ts +122 -0
- package/dist/certification/autofix.d.ts.map +1 -0
- package/dist/certification/autofix.js +476 -0
- package/dist/certification/autofix.js.map +1 -0
- package/dist/certification/badge.d.ts +56 -0
- package/dist/certification/badge.d.ts.map +1 -0
- package/dist/certification/badge.js +155 -0
- package/dist/certification/badge.js.map +1 -0
- package/dist/certification/cache.d.ts +121 -0
- package/dist/certification/cache.d.ts.map +1 -0
- package/dist/certification/cache.js +275 -0
- package/dist/certification/cache.js.map +1 -0
- package/dist/certification/cache.test.d.ts +5 -0
- package/dist/certification/cache.test.d.ts.map +1 -0
- package/dist/certification/cache.test.js +270 -0
- package/dist/certification/cache.test.js.map +1 -0
- package/dist/certification/consensus.d.ts +105 -0
- package/dist/certification/consensus.d.ts.map +1 -0
- package/dist/certification/consensus.js +353 -0
- package/dist/certification/consensus.js.map +1 -0
- package/dist/certification/consensus.test.d.ts +5 -0
- package/dist/certification/consensus.test.d.ts.map +1 -0
- package/dist/certification/consensus.test.js +342 -0
- package/dist/certification/consensus.test.js.map +1 -0
- package/dist/certification/index.d.ts +14 -0
- package/dist/certification/index.d.ts.map +1 -0
- package/dist/certification/index.js +14 -0
- package/dist/certification/index.js.map +1 -0
- package/dist/certification/rules.d.ts +89 -0
- package/dist/certification/rules.d.ts.map +1 -0
- package/dist/certification/rules.js +317 -0
- package/dist/certification/rules.js.map +1 -0
- package/dist/certification/sarif.d.ts +107 -0
- package/dist/certification/sarif.d.ts.map +1 -0
- package/dist/certification/sarif.js +191 -0
- package/dist/certification/sarif.js.map +1 -0
- package/dist/certification/store.d.ts +255 -0
- package/dist/certification/store.d.ts.map +1 -0
- package/dist/certification/store.js +835 -0
- package/dist/certification/store.js.map +1 -0
- package/dist/certification/store.test.d.ts +5 -0
- package/dist/certification/store.test.d.ts.map +1 -0
- package/dist/certification/store.test.js +468 -0
- package/dist/certification/store.test.js.map +1 -0
- package/dist/certification/summary.d.ts +72 -0
- package/dist/certification/summary.d.ts.map +1 -0
- package/dist/certification/summary.js +296 -0
- package/dist/certification/summary.js.map +1 -0
- package/dist/certification/types.d.ts +138 -0
- package/dist/certification/types.d.ts.map +1 -0
- package/dist/certification/types.js +34 -0
- package/dist/certification/types.js.map +1 -0
- package/dist/commands/audits/api-check.d.ts +3 -0
- package/dist/commands/audits/api-check.d.ts.map +1 -0
- package/dist/commands/audits/api-check.js +71 -0
- package/dist/commands/audits/api-check.js.map +1 -0
- package/dist/commands/audits/deadcode.d.ts +3 -0
- package/dist/commands/audits/deadcode.d.ts.map +1 -0
- package/dist/commands/audits/deadcode.js +63 -0
- package/dist/commands/audits/deadcode.js.map +1 -0
- package/dist/commands/audits/deps.d.ts +3 -0
- package/dist/commands/audits/deps.d.ts.map +1 -0
- package/dist/commands/audits/deps.js +56 -0
- package/dist/commands/audits/deps.js.map +1 -0
- package/dist/commands/audits/errors.d.ts +3 -0
- package/dist/commands/audits/errors.d.ts.map +1 -0
- package/dist/commands/audits/errors.js +65 -0
- package/dist/commands/audits/errors.js.map +1 -0
- package/dist/commands/audits/index.d.ts +3 -0
- package/dist/commands/audits/index.d.ts.map +1 -0
- package/dist/commands/audits/index.js +15 -0
- package/dist/commands/audits/index.js.map +1 -0
- package/dist/commands/audits/perf.d.ts +3 -0
- package/dist/commands/audits/perf.d.ts.map +1 -0
- package/dist/commands/audits/perf.js +85 -0
- package/dist/commands/audits/perf.js.map +1 -0
- package/dist/commands/audits/secrets.d.ts +3 -0
- package/dist/commands/audits/secrets.d.ts.map +1 -0
- package/dist/commands/audits/secrets.js +71 -0
- package/dist/commands/audits/secrets.js.map +1 -0
- package/dist/commands/certification/certify.d.ts +3 -0
- package/dist/commands/certification/certify.d.ts.map +1 -0
- package/dist/commands/certification/certify.js +108 -0
- package/dist/commands/certification/certify.js.map +1 -0
- package/dist/commands/certification/index.d.ts +3 -0
- package/dist/commands/certification/index.d.ts.map +1 -0
- package/dist/commands/certification/index.js +17 -0
- package/dist/commands/certification/index.js.map +1 -0
- package/dist/commands/certification/performance.d.ts +3 -0
- package/dist/commands/certification/performance.d.ts.map +1 -0
- package/dist/commands/certification/performance.js +89 -0
- package/dist/commands/certification/performance.js.map +1 -0
- package/dist/commands/certification/quality.d.ts +3 -0
- package/dist/commands/certification/quality.d.ts.map +1 -0
- package/dist/commands/certification/quality.js +92 -0
- package/dist/commands/certification/quality.js.map +1 -0
- package/dist/commands/certification/redteam.d.ts +3 -0
- package/dist/commands/certification/redteam.d.ts.map +1 -0
- package/dist/commands/certification/redteam.js +114 -0
- package/dist/commands/certification/redteam.js.map +1 -0
- package/dist/commands/certification/reliability.d.ts +3 -0
- package/dist/commands/certification/reliability.d.ts.map +1 -0
- package/dist/commands/certification/reliability.js +93 -0
- package/dist/commands/certification/reliability.js.map +1 -0
- package/dist/commands/certification/security.d.ts +3 -0
- package/dist/commands/certification/security.d.ts.map +1 -0
- package/dist/commands/certification/security.js +90 -0
- package/dist/commands/certification/security.js.map +1 -0
- package/dist/commands/certification/typesafety.d.ts +3 -0
- package/dist/commands/certification/typesafety.d.ts.map +1 -0
- package/dist/commands/certification/typesafety.js +87 -0
- package/dist/commands/certification/typesafety.js.map +1 -0
- package/dist/commands/core/add-tests.d.ts +3 -0
- package/dist/commands/core/add-tests.d.ts.map +1 -0
- package/dist/commands/core/add-tests.js +29 -0
- package/dist/commands/core/add-tests.js.map +1 -0
- package/dist/commands/core/audit.d.ts +3 -0
- package/dist/commands/core/audit.d.ts.map +1 -0
- package/dist/commands/core/audit.js +64 -0
- package/dist/commands/core/audit.js.map +1 -0
- package/dist/commands/core/fix-critical.d.ts +3 -0
- package/dist/commands/core/fix-critical.d.ts.map +1 -0
- package/dist/commands/core/fix-critical.js +22 -0
- package/dist/commands/core/fix-critical.js.map +1 -0
- package/dist/commands/core/fix-high.d.ts +3 -0
- package/dist/commands/core/fix-high.d.ts.map +1 -0
- package/dist/commands/core/fix-high.js +32 -0
- package/dist/commands/core/fix-high.js.map +1 -0
- package/dist/commands/core/fix-medium.d.ts +3 -0
- package/dist/commands/core/fix-medium.d.ts.map +1 -0
- package/dist/commands/core/fix-medium.js +29 -0
- package/dist/commands/core/fix-medium.js.map +1 -0
- package/dist/commands/core/fix-rls.d.ts +3 -0
- package/dist/commands/core/fix-rls.d.ts.map +1 -0
- package/dist/commands/core/fix-rls.js +17 -0
- package/dist/commands/core/fix-rls.js.map +1 -0
- package/dist/commands/core/harden.d.ts +3 -0
- package/dist/commands/core/harden.d.ts.map +1 -0
- package/dist/commands/core/harden.js +19 -0
- package/dist/commands/core/harden.js.map +1 -0
- package/dist/commands/core/index.d.ts +3 -0
- package/dist/commands/core/index.d.ts.map +1 -0
- package/dist/commands/core/index.js +21 -0
- package/dist/commands/core/index.js.map +1 -0
- package/dist/commands/core/preflight.d.ts +3 -0
- package/dist/commands/core/preflight.d.ts.map +1 -0
- package/dist/commands/core/preflight.js +50 -0
- package/dist/commands/core/preflight.js.map +1 -0
- package/dist/commands/core/verify.d.ts +3 -0
- package/dist/commands/core/verify.d.ts.map +1 -0
- package/dist/commands/core/verify.js +32 -0
- package/dist/commands/core/verify.js.map +1 -0
- package/dist/commands/index.d.ts +28 -0
- package/dist/commands/index.d.ts.map +1 -0
- package/dist/commands/index.js +37 -0
- package/dist/commands/index.js.map +1 -0
- package/dist/commands/types.d.ts +9 -0
- package/dist/commands/types.d.ts.map +1 -0
- package/dist/commands/types.js +5 -0
- package/dist/commands/types.js.map +1 -0
- package/dist/compliance/cis.d.ts +29 -0
- package/dist/compliance/cis.d.ts.map +1 -0
- package/dist/compliance/cis.js +316 -0
- package/dist/compliance/cis.js.map +1 -0
- package/dist/compliance/frameworks/eu-ai-act.d.ts +55 -0
- package/dist/compliance/frameworks/eu-ai-act.d.ts.map +1 -0
- package/dist/compliance/frameworks/eu-ai-act.js +621 -0
- package/dist/compliance/frameworks/eu-ai-act.js.map +1 -0
- package/dist/compliance/frameworks/index.d.ts +67 -0
- package/dist/compliance/frameworks/index.d.ts.map +1 -0
- package/dist/compliance/frameworks/index.js +97 -0
- package/dist/compliance/frameworks/index.js.map +1 -0
- package/dist/compliance/frameworks/iso-42001.d.ts +59 -0
- package/dist/compliance/frameworks/iso-42001.d.ts.map +1 -0
- package/dist/compliance/frameworks/iso-42001.js +719 -0
- package/dist/compliance/frameworks/iso-42001.js.map +1 -0
- package/dist/compliance/frameworks/mitre-atlas.d.ts +58 -0
- package/dist/compliance/frameworks/mitre-atlas.d.ts.map +1 -0
- package/dist/compliance/frameworks/mitre-atlas.js +686 -0
- package/dist/compliance/frameworks/mitre-atlas.js.map +1 -0
- package/dist/compliance/frameworks/nist-ai-rmf.d.ts +51 -0
- package/dist/compliance/frameworks/nist-ai-rmf.d.ts.map +1 -0
- package/dist/compliance/frameworks/nist-ai-rmf.js +677 -0
- package/dist/compliance/frameworks/nist-ai-rmf.js.map +1 -0
- package/dist/compliance/frameworks/owasp-llm.d.ts +58 -0
- package/dist/compliance/frameworks/owasp-llm.d.ts.map +1 -0
- package/dist/compliance/frameworks/owasp-llm.js +399 -0
- package/dist/compliance/frameworks/owasp-llm.js.map +1 -0
- package/dist/compliance/gdpr.d.ts +34 -0
- package/dist/compliance/gdpr.d.ts.map +1 -0
- package/dist/compliance/gdpr.js +319 -0
- package/dist/compliance/gdpr.js.map +1 -0
- package/dist/compliance/hipaa.d.ts +29 -0
- package/dist/compliance/hipaa.d.ts.map +1 -0
- package/dist/compliance/hipaa.js +205 -0
- package/dist/compliance/hipaa.js.map +1 -0
- package/dist/compliance/index.d.ts +18 -0
- package/dist/compliance/index.d.ts.map +1 -0
- package/dist/compliance/index.js +26 -0
- package/dist/compliance/index.js.map +1 -0
- package/dist/compliance/iso27001.d.ts +30 -0
- package/dist/compliance/iso27001.d.ts.map +1 -0
- package/dist/compliance/iso27001.js +332 -0
- package/dist/compliance/iso27001.js.map +1 -0
- package/dist/compliance/mapper.d.ts +42 -0
- package/dist/compliance/mapper.d.ts.map +1 -0
- package/dist/compliance/mapper.js +269 -0
- package/dist/compliance/mapper.js.map +1 -0
- package/dist/compliance/mapper.test.d.ts +5 -0
- package/dist/compliance/mapper.test.d.ts.map +1 -0
- package/dist/compliance/mapper.test.js +360 -0
- package/dist/compliance/mapper.test.js.map +1 -0
- package/dist/compliance/pci-dss.d.ts +29 -0
- package/dist/compliance/pci-dss.d.ts.map +1 -0
- package/dist/compliance/pci-dss.js +247 -0
- package/dist/compliance/pci-dss.js.map +1 -0
- package/dist/compliance/report.d.ts +25 -0
- package/dist/compliance/report.d.ts.map +1 -0
- package/dist/compliance/report.js +254 -0
- package/dist/compliance/report.js.map +1 -0
- package/dist/compliance/report.test.d.ts +5 -0
- package/dist/compliance/report.test.d.ts.map +1 -0
- package/dist/compliance/report.test.js +128 -0
- package/dist/compliance/report.test.js.map +1 -0
- package/dist/compliance/soc2.d.ts +30 -0
- package/dist/compliance/soc2.d.ts.map +1 -0
- package/dist/compliance/soc2.js +262 -0
- package/dist/compliance/soc2.js.map +1 -0
- package/dist/compliance/soc2.test.d.ts +5 -0
- package/dist/compliance/soc2.test.d.ts.map +1 -0
- package/dist/compliance/soc2.test.js +86 -0
- package/dist/compliance/soc2.test.js.map +1 -0
- package/dist/compliance/types.d.ts +125 -0
- package/dist/compliance/types.d.ts.map +1 -0
- package/dist/compliance/types.js +10 -0
- package/dist/compliance/types.js.map +1 -0
- package/dist/config/flags.d.ts +456 -0
- package/dist/config/flags.d.ts.map +1 -0
- package/dist/config/flags.js +464 -0
- package/dist/config/flags.js.map +1 -0
- package/dist/config/index.d.ts +10 -0
- package/dist/config/index.d.ts.map +1 -0
- package/dist/config/index.js +10 -0
- package/dist/config/index.js.map +1 -0
- package/dist/config/severity-overrides.d.ts +209 -0
- package/dist/config/severity-overrides.d.ts.map +1 -0
- package/dist/config/severity-overrides.js +380 -0
- package/dist/config/severity-overrides.js.map +1 -0
- package/dist/cost/index.d.ts +11 -0
- package/dist/cost/index.d.ts.map +1 -0
- package/dist/cost/index.js +12 -0
- package/dist/cost/index.js.map +1 -0
- package/dist/cost/pricing.d.ts +57 -0
- package/dist/cost/pricing.d.ts.map +1 -0
- package/dist/cost/pricing.js +196 -0
- package/dist/cost/pricing.js.map +1 -0
- package/dist/cost/pricing.test.d.ts +5 -0
- package/dist/cost/pricing.test.d.ts.map +1 -0
- package/dist/cost/pricing.test.js +195 -0
- package/dist/cost/pricing.test.js.map +1 -0
- package/dist/cost/tracker.d.ts +100 -0
- package/dist/cost/tracker.d.ts.map +1 -0
- package/dist/cost/tracker.js +366 -0
- package/dist/cost/tracker.js.map +1 -0
- package/dist/cost/tracker.test.d.ts +5 -0
- package/dist/cost/tracker.test.d.ts.map +1 -0
- package/dist/cost/tracker.test.js +360 -0
- package/dist/cost/tracker.test.js.map +1 -0
- package/dist/cost/types.d.ts +135 -0
- package/dist/cost/types.d.ts.map +1 -0
- package/dist/cost/types.js +9 -0
- package/dist/cost/types.js.map +1 -0
- package/dist/enterprise/auth/oidc.d.ts +231 -0
- package/dist/enterprise/auth/oidc.d.ts.map +1 -0
- package/dist/enterprise/auth/oidc.js +372 -0
- package/dist/enterprise/auth/oidc.js.map +1 -0
- package/dist/enterprise/auth/oidc.test.d.ts +5 -0
- package/dist/enterprise/auth/oidc.test.d.ts.map +1 -0
- package/dist/enterprise/auth/oidc.test.js +435 -0
- package/dist/enterprise/auth/oidc.test.js.map +1 -0
- package/dist/enterprise/index.d.ts +14 -0
- package/dist/enterprise/index.d.ts.map +1 -0
- package/dist/enterprise/index.js +19 -0
- package/dist/enterprise/index.js.map +1 -0
- package/dist/enterprise/integrations/chat.d.ts +205 -0
- package/dist/enterprise/integrations/chat.d.ts.map +1 -0
- package/dist/enterprise/integrations/chat.js +624 -0
- package/dist/enterprise/integrations/chat.js.map +1 -0
- package/dist/enterprise/integrations/chat.test.d.ts +5 -0
- package/dist/enterprise/integrations/chat.test.d.ts.map +1 -0
- package/dist/enterprise/integrations/chat.test.js +557 -0
- package/dist/enterprise/integrations/chat.test.js.map +1 -0
- package/dist/enterprise/integrations/ticketing.d.ts +257 -0
- package/dist/enterprise/integrations/ticketing.d.ts.map +1 -0
- package/dist/enterprise/integrations/ticketing.js +548 -0
- package/dist/enterprise/integrations/ticketing.js.map +1 -0
- package/dist/enterprise/integrations/ticketing.test.d.ts +5 -0
- package/dist/enterprise/integrations/ticketing.test.d.ts.map +1 -0
- package/dist/enterprise/integrations/ticketing.test.js +693 -0
- package/dist/enterprise/integrations/ticketing.test.js.map +1 -0
- package/dist/enterprise/policy/opa.d.ts +194 -0
- package/dist/enterprise/policy/opa.d.ts.map +1 -0
- package/dist/enterprise/policy/opa.js +385 -0
- package/dist/enterprise/policy/opa.js.map +1 -0
- package/dist/enterprise/policy/opa.test.d.ts +5 -0
- package/dist/enterprise/policy/opa.test.d.ts.map +1 -0
- package/dist/enterprise/policy/opa.test.js +702 -0
- package/dist/enterprise/policy/opa.test.js.map +1 -0
- package/dist/enterprise/signing/kms.d.ts +211 -0
- package/dist/enterprise/signing/kms.d.ts.map +1 -0
- package/dist/enterprise/signing/kms.js +480 -0
- package/dist/enterprise/signing/kms.js.map +1 -0
- package/dist/enterprise/signing/kms.test.d.ts +5 -0
- package/dist/enterprise/signing/kms.test.d.ts.map +1 -0
- package/dist/enterprise/signing/kms.test.js +511 -0
- package/dist/enterprise/signing/kms.test.js.map +1 -0
- package/dist/eval/fixtures.d.ts +58 -0
- package/dist/eval/fixtures.d.ts.map +1 -0
- package/dist/eval/fixtures.js +571 -0
- package/dist/eval/fixtures.js.map +1 -0
- package/dist/eval/fixtures.test.d.ts +5 -0
- package/dist/eval/fixtures.test.d.ts.map +1 -0
- package/dist/eval/fixtures.test.js +193 -0
- package/dist/eval/fixtures.test.js.map +1 -0
- package/dist/eval/harness.d.ts +30 -0
- package/dist/eval/harness.d.ts.map +1 -0
- package/dist/eval/harness.js +221 -0
- package/dist/eval/harness.js.map +1 -0
- package/dist/eval/harness.test.d.ts +5 -0
- package/dist/eval/harness.test.d.ts.map +1 -0
- package/dist/eval/harness.test.js +314 -0
- package/dist/eval/harness.test.js.map +1 -0
- package/dist/eval/index.d.ts +15 -0
- package/dist/eval/index.d.ts.map +1 -0
- package/dist/eval/index.js +18 -0
- package/dist/eval/index.js.map +1 -0
- package/dist/eval/metrics.d.ts +56 -0
- package/dist/eval/metrics.d.ts.map +1 -0
- package/dist/eval/metrics.js +298 -0
- package/dist/eval/metrics.js.map +1 -0
- package/dist/eval/metrics.test.d.ts +5 -0
- package/dist/eval/metrics.test.d.ts.map +1 -0
- package/dist/eval/metrics.test.js +426 -0
- package/dist/eval/metrics.test.js.map +1 -0
- package/dist/eval/report.d.ts +30 -0
- package/dist/eval/report.d.ts.map +1 -0
- package/dist/eval/report.js +333 -0
- package/dist/eval/report.js.map +1 -0
- package/dist/eval/report.test.d.ts +5 -0
- package/dist/eval/report.test.d.ts.map +1 -0
- package/dist/eval/report.test.js +275 -0
- package/dist/eval/report.test.js.map +1 -0
- package/dist/eval/types.d.ts +234 -0
- package/dist/eval/types.d.ts.map +1 -0
- package/dist/eval/types.js +27 -0
- package/dist/eval/types.js.map +1 -0
- package/dist/http-server.d.ts +3 -0
- package/dist/http-server.d.ts.map +1 -0
- package/dist/http-server.js +127 -0
- package/dist/http-server.js.map +1 -0
- package/dist/index.d.ts +33 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +4120 -0
- package/dist/index.js.map +1 -0
- package/dist/logger.d.ts +46 -0
- package/dist/logger.d.ts.map +1 -0
- package/dist/logger.js +131 -0
- package/dist/logger.js.map +1 -0
- package/dist/multimodel/consensus.d.ts +49 -0
- package/dist/multimodel/consensus.d.ts.map +1 -0
- package/dist/multimodel/consensus.js +454 -0
- package/dist/multimodel/consensus.js.map +1 -0
- package/dist/multimodel/consensus.test.d.ts +5 -0
- package/dist/multimodel/consensus.test.d.ts.map +1 -0
- package/dist/multimodel/consensus.test.js +415 -0
- package/dist/multimodel/consensus.test.js.map +1 -0
- package/dist/multimodel/index.d.ts +13 -0
- package/dist/multimodel/index.d.ts.map +1 -0
- package/dist/multimodel/index.js +14 -0
- package/dist/multimodel/index.js.map +1 -0
- package/dist/multimodel/runner.d.ts +95 -0
- package/dist/multimodel/runner.d.ts.map +1 -0
- package/dist/multimodel/runner.js +312 -0
- package/dist/multimodel/runner.js.map +1 -0
- package/dist/multimodel/runner.test.d.ts +5 -0
- package/dist/multimodel/runner.test.d.ts.map +1 -0
- package/dist/multimodel/runner.test.js +224 -0
- package/dist/multimodel/runner.test.js.map +1 -0
- package/dist/multimodel/types.d.ts +202 -0
- package/dist/multimodel/types.d.ts.map +1 -0
- package/dist/multimodel/types.js +10 -0
- package/dist/multimodel/types.js.map +1 -0
- package/dist/observability/index.d.ts +9 -0
- package/dist/observability/index.d.ts.map +1 -0
- package/dist/observability/index.js +9 -0
- package/dist/observability/index.js.map +1 -0
- package/dist/observability/otel.d.ts +102 -0
- package/dist/observability/otel.d.ts.map +1 -0
- package/dist/observability/otel.js +284 -0
- package/dist/observability/otel.js.map +1 -0
- package/dist/plugins/index.d.ts +10 -0
- package/dist/plugins/index.d.ts.map +1 -0
- package/dist/plugins/index.js +10 -0
- package/dist/plugins/index.js.map +1 -0
- package/dist/plugins/loader.d.ts +78 -0
- package/dist/plugins/loader.d.ts.map +1 -0
- package/dist/plugins/loader.js +470 -0
- package/dist/plugins/loader.js.map +1 -0
- package/dist/plugins/types.d.ts +304 -0
- package/dist/plugins/types.d.ts.map +1 -0
- package/dist/plugins/types.js +100 -0
- package/dist/plugins/types.js.map +1 -0
- package/dist/sbom/cyclonedx.d.ts +30 -0
- package/dist/sbom/cyclonedx.d.ts.map +1 -0
- package/dist/sbom/cyclonedx.js +392 -0
- package/dist/sbom/cyclonedx.js.map +1 -0
- package/dist/sbom/cyclonedx.test.d.ts +5 -0
- package/dist/sbom/cyclonedx.test.d.ts.map +1 -0
- package/dist/sbom/cyclonedx.test.js +244 -0
- package/dist/sbom/cyclonedx.test.js.map +1 -0
- package/dist/sbom/index.d.ts +13 -0
- package/dist/sbom/index.d.ts.map +1 -0
- package/dist/sbom/index.js +15 -0
- package/dist/sbom/index.js.map +1 -0
- package/dist/sbom/provenance.d.ts +37 -0
- package/dist/sbom/provenance.d.ts.map +1 -0
- package/dist/sbom/provenance.js +268 -0
- package/dist/sbom/provenance.js.map +1 -0
- package/dist/sbom/provenance.test.d.ts +5 -0
- package/dist/sbom/provenance.test.d.ts.map +1 -0
- package/dist/sbom/provenance.test.js +189 -0
- package/dist/sbom/provenance.test.js.map +1 -0
- package/dist/sbom/signing.d.ts +87 -0
- package/dist/sbom/signing.d.ts.map +1 -0
- package/dist/sbom/signing.js +354 -0
- package/dist/sbom/signing.js.map +1 -0
- package/dist/sbom/signing.test.d.ts +5 -0
- package/dist/sbom/signing.test.d.ts.map +1 -0
- package/dist/sbom/signing.test.js +170 -0
- package/dist/sbom/signing.test.js.map +1 -0
- package/dist/sbom/types.d.ts +384 -0
- package/dist/sbom/types.d.ts.map +1 -0
- package/dist/sbom/types.js +17 -0
- package/dist/sbom/types.js.map +1 -0
- package/dist/scanners/agent/credential-scope-audit.d.ts +40 -0
- package/dist/scanners/agent/credential-scope-audit.d.ts.map +1 -0
- package/dist/scanners/agent/credential-scope-audit.js +404 -0
- package/dist/scanners/agent/credential-scope-audit.js.map +1 -0
- package/dist/scanners/agent/exfil-path-graph.d.ts +50 -0
- package/dist/scanners/agent/exfil-path-graph.d.ts.map +1 -0
- package/dist/scanners/agent/exfil-path-graph.js +764 -0
- package/dist/scanners/agent/exfil-path-graph.js.map +1 -0
- package/dist/scanners/agent/index.d.ts +43 -0
- package/dist/scanners/agent/index.d.ts.map +1 -0
- package/dist/scanners/agent/index.js +616 -0
- package/dist/scanners/agent/index.js.map +1 -0
- package/dist/scanners/agent/manifest-audit.d.ts +43 -0
- package/dist/scanners/agent/manifest-audit.d.ts.map +1 -0
- package/dist/scanners/agent/manifest-audit.js +403 -0
- package/dist/scanners/agent/manifest-audit.js.map +1 -0
- package/dist/scanners/agent/payloads/index.d.ts +44 -0
- package/dist/scanners/agent/payloads/index.d.ts.map +1 -0
- package/dist/scanners/agent/payloads/index.js +184 -0
- package/dist/scanners/agent/payloads/index.js.map +1 -0
- package/dist/scanners/agent/permission-minimiser.d.ts +48 -0
- package/dist/scanners/agent/permission-minimiser.d.ts.map +1 -0
- package/dist/scanners/agent/permission-minimiser.js +551 -0
- package/dist/scanners/agent/permission-minimiser.js.map +1 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.d.ts +39 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.d.ts.map +1 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.js +720 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.js.map +1 -0
- package/dist/scanners/agent/sandbox-audit.d.ts +44 -0
- package/dist/scanners/agent/sandbox-audit.d.ts.map +1 -0
- package/dist/scanners/agent/sandbox-audit.js +425 -0
- package/dist/scanners/agent/sandbox-audit.js.map +1 -0
- package/dist/scanners/agent/supply-chain-mcp.d.ts +53 -0
- package/dist/scanners/agent/supply-chain-mcp.d.ts.map +1 -0
- package/dist/scanners/agent/supply-chain-mcp.js +479 -0
- package/dist/scanners/agent/supply-chain-mcp.js.map +1 -0
- package/dist/scanners/agent/tool-description-drift.d.ts +62 -0
- package/dist/scanners/agent/tool-description-drift.d.ts.map +1 -0
- package/dist/scanners/agent/tool-description-drift.js +365 -0
- package/dist/scanners/agent/tool-description-drift.js.map +1 -0
- package/dist/scanners/agent/types.d.ts +840 -0
- package/dist/scanners/agent/types.d.ts.map +1 -0
- package/dist/scanners/agent/types.js +149 -0
- package/dist/scanners/agent/types.js.map +1 -0
- package/dist/scanners/bandit.d.ts +25 -0
- package/dist/scanners/bandit.d.ts.map +1 -0
- package/dist/scanners/bandit.js +129 -0
- package/dist/scanners/bandit.js.map +1 -0
- package/dist/scanners/binary-analysis.d.ts +41 -0
- package/dist/scanners/binary-analysis.d.ts.map +1 -0
- package/dist/scanners/binary-analysis.js +587 -0
- package/dist/scanners/binary-analysis.js.map +1 -0
- package/dist/scanners/binary-analysis.test.d.ts +5 -0
- package/dist/scanners/binary-analysis.test.d.ts.map +1 -0
- package/dist/scanners/binary-analysis.test.js +291 -0
- package/dist/scanners/binary-analysis.test.js.map +1 -0
- package/dist/scanners/brakeman.d.ts +30 -0
- package/dist/scanners/brakeman.d.ts.map +1 -0
- package/dist/scanners/brakeman.js +271 -0
- package/dist/scanners/brakeman.js.map +1 -0
- package/dist/scanners/dependencies.d.ts +22 -0
- package/dist/scanners/dependencies.d.ts.map +1 -0
- package/dist/scanners/dependencies.js +202 -0
- package/dist/scanners/dependencies.js.map +1 -0
- package/dist/scanners/dependencies.test.d.ts +5 -0
- package/dist/scanners/dependencies.test.d.ts.map +1 -0
- package/dist/scanners/dependencies.test.js +185 -0
- package/dist/scanners/dependencies.test.js.map +1 -0
- package/dist/scanners/eslint.d.ts +25 -0
- package/dist/scanners/eslint.d.ts.map +1 -0
- package/dist/scanners/eslint.js +220 -0
- package/dist/scanners/eslint.js.map +1 -0
- package/dist/scanners/gosec.d.ts +25 -0
- package/dist/scanners/gosec.d.ts.map +1 -0
- package/dist/scanners/gosec.js +128 -0
- package/dist/scanners/gosec.js.map +1 -0
- package/dist/scanners/index.d.ts +128 -0
- package/dist/scanners/index.d.ts.map +1 -0
- package/dist/scanners/index.js +811 -0
- package/dist/scanners/index.js.map +1 -0
- package/dist/scanners/index.test.d.ts +5 -0
- package/dist/scanners/index.test.d.ts.map +1 -0
- package/dist/scanners/index.test.js +424 -0
- package/dist/scanners/index.test.js.map +1 -0
- package/dist/scanners/memory-safety.d.ts +44 -0
- package/dist/scanners/memory-safety.d.ts.map +1 -0
- package/dist/scanners/memory-safety.js +571 -0
- package/dist/scanners/memory-safety.js.map +1 -0
- package/dist/scanners/memory-safety.test.d.ts +5 -0
- package/dist/scanners/memory-safety.test.d.ts.map +1 -0
- package/dist/scanners/memory-safety.test.js +321 -0
- package/dist/scanners/memory-safety.test.js.map +1 -0
- package/dist/scanners/race-condition.d.ts +25 -0
- package/dist/scanners/race-condition.d.ts.map +1 -0
- package/dist/scanners/race-condition.js +443 -0
- package/dist/scanners/race-condition.js.map +1 -0
- package/dist/scanners/race-condition.test.d.ts +5 -0
- package/dist/scanners/race-condition.test.d.ts.map +1 -0
- package/dist/scanners/race-condition.test.js +428 -0
- package/dist/scanners/race-condition.test.js.map +1 -0
- package/dist/scanners/secrets.d.ts +25 -0
- package/dist/scanners/secrets.d.ts.map +1 -0
- package/dist/scanners/secrets.js +367 -0
- package/dist/scanners/secrets.js.map +1 -0
- package/dist/scanners/secrets.test.d.ts +5 -0
- package/dist/scanners/secrets.test.d.ts.map +1 -0
- package/dist/scanners/secrets.test.js +160 -0
- package/dist/scanners/secrets.test.js.map +1 -0
- package/dist/scanners/semgrep.d.ts +33 -0
- package/dist/scanners/semgrep.d.ts.map +1 -0
- package/dist/scanners/semgrep.js +350 -0
- package/dist/scanners/semgrep.js.map +1 -0
- package/dist/scanners/semgrep.test.d.ts +8 -0
- package/dist/scanners/semgrep.test.d.ts.map +1 -0
- package/dist/scanners/semgrep.test.js +254 -0
- package/dist/scanners/semgrep.test.js.map +1 -0
- package/dist/scanners/trivy.d.ts +26 -0
- package/dist/scanners/trivy.d.ts.map +1 -0
- package/dist/scanners/trivy.js +187 -0
- package/dist/scanners/trivy.js.map +1 -0
- package/dist/scanners/types.d.ts +210 -0
- package/dist/scanners/types.d.ts.map +1 -0
- package/dist/scanners/types.js +106 -0
- package/dist/scanners/types.js.map +1 -0
- package/dist/scanners/types.test.d.ts +5 -0
- package/dist/scanners/types.test.d.ts.map +1 -0
- package/dist/scanners/types.test.js +103 -0
- package/dist/scanners/types.test.js.map +1 -0
- package/dist/scanners/typescript.d.ts +32 -0
- package/dist/scanners/typescript.d.ts.map +1 -0
- package/dist/scanners/typescript.js +300 -0
- package/dist/scanners/typescript.js.map +1 -0
- package/dist/scanners/typescript.test.d.ts +5 -0
- package/dist/scanners/typescript.test.d.ts.map +1 -0
- package/dist/scanners/typescript.test.js +296 -0
- package/dist/scanners/typescript.test.js.map +1 -0
- package/dist/transcripts/index.d.ts +13 -0
- package/dist/transcripts/index.d.ts.map +1 -0
- package/dist/transcripts/index.js +17 -0
- package/dist/transcripts/index.js.map +1 -0
- package/dist/transcripts/logger.d.ts +190 -0
- package/dist/transcripts/logger.d.ts.map +1 -0
- package/dist/transcripts/logger.js +385 -0
- package/dist/transcripts/logger.js.map +1 -0
- package/dist/transcripts/logger.test.d.ts +5 -0
- package/dist/transcripts/logger.test.d.ts.map +1 -0
- package/dist/transcripts/logger.test.js +227 -0
- package/dist/transcripts/logger.test.js.map +1 -0
- package/dist/transcripts/redaction.d.ts +125 -0
- package/dist/transcripts/redaction.d.ts.map +1 -0
- package/dist/transcripts/redaction.js +416 -0
- package/dist/transcripts/redaction.js.map +1 -0
- package/dist/transcripts/redaction.test.d.ts +5 -0
- package/dist/transcripts/redaction.test.d.ts.map +1 -0
- package/dist/transcripts/redaction.test.js +267 -0
- package/dist/transcripts/redaction.test.js.map +1 -0
- package/dist/transcripts/signing.d.ts +108 -0
- package/dist/transcripts/signing.d.ts.map +1 -0
- package/dist/transcripts/signing.js +173 -0
- package/dist/transcripts/signing.js.map +1 -0
- package/dist/transcripts/verifier.d.ts +133 -0
- package/dist/transcripts/verifier.d.ts.map +1 -0
- package/dist/transcripts/verifier.js +489 -0
- package/dist/transcripts/verifier.js.map +1 -0
- package/dist/transcripts/verifier.test.d.ts +5 -0
- package/dist/transcripts/verifier.test.d.ts.map +1 -0
- package/dist/transcripts/verifier.test.js +330 -0
- package/dist/transcripts/verifier.test.js.map +1 -0
- package/dist/util/concurrency.d.ts +221 -0
- package/dist/util/concurrency.d.ts.map +1 -0
- package/dist/util/concurrency.js +339 -0
- package/dist/util/concurrency.js.map +1 -0
- package/dist/util/index.d.ts +12 -0
- package/dist/util/index.d.ts.map +1 -0
- package/dist/util/index.js +12 -0
- package/dist/util/index.js.map +1 -0
- package/dist/util/json.d.ts +63 -0
- package/dist/util/json.d.ts.map +1 -0
- package/dist/util/json.js +134 -0
- package/dist/util/json.js.map +1 -0
- package/dist/util/paths.d.ts +56 -0
- package/dist/util/paths.d.ts.map +1 -0
- package/dist/util/paths.js +128 -0
- package/dist/util/paths.js.map +1 -0
- package/dist/util/retry.d.ts +185 -0
- package/dist/util/retry.d.ts.map +1 -0
- package/dist/util/retry.js +338 -0
- package/dist/util/retry.js.map +1 -0
- package/package.json +79 -0
|
@@ -0,0 +1,133 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Transcript Verifier
|
|
3
|
+
*
|
|
4
|
+
* Verifies transcript integrity, signature validity, and consistency.
|
|
5
|
+
* Supports both local verification and Sigstore validation.
|
|
6
|
+
*
|
|
7
|
+
* @module transcripts/verifier
|
|
8
|
+
*/
|
|
9
|
+
import type { TranscriptBundle } from "./signing.js";
|
|
10
|
+
import type { TranscriptEntry } from "./logger.js";
|
|
11
|
+
/**
|
|
12
|
+
* Verification result for a single check
|
|
13
|
+
*/
|
|
14
|
+
export interface VerificationCheck {
|
|
15
|
+
name: string;
|
|
16
|
+
passed: boolean;
|
|
17
|
+
message: string;
|
|
18
|
+
details?: Record<string, unknown>;
|
|
19
|
+
}
|
|
20
|
+
/**
|
|
21
|
+
* Complete verification result
|
|
22
|
+
*/
|
|
23
|
+
export interface TranscriptVerificationResult {
|
|
24
|
+
/** Overall verification status */
|
|
25
|
+
valid: boolean;
|
|
26
|
+
/** Bundle being verified */
|
|
27
|
+
bundlePath?: string;
|
|
28
|
+
/** Session ID from transcript */
|
|
29
|
+
sessionId: string;
|
|
30
|
+
/** Individual verification checks */
|
|
31
|
+
checks: VerificationCheck[];
|
|
32
|
+
/** Summary of passed/failed checks */
|
|
33
|
+
summary: {
|
|
34
|
+
total: number;
|
|
35
|
+
passed: number;
|
|
36
|
+
failed: number;
|
|
37
|
+
warnings: number;
|
|
38
|
+
};
|
|
39
|
+
/** Timestamp of verification */
|
|
40
|
+
verifiedAt: string;
|
|
41
|
+
/** Error if verification failed catastrophically */
|
|
42
|
+
error?: string;
|
|
43
|
+
}
|
|
44
|
+
/**
|
|
45
|
+
* Chain verification result
|
|
46
|
+
*/
|
|
47
|
+
export interface ChainVerificationResult {
|
|
48
|
+
valid: boolean;
|
|
49
|
+
entryCount: number;
|
|
50
|
+
brokenAt?: number;
|
|
51
|
+
expectedHash?: string;
|
|
52
|
+
actualHash?: string;
|
|
53
|
+
message: string;
|
|
54
|
+
}
|
|
55
|
+
/**
|
|
56
|
+
* Signature verification result
|
|
57
|
+
*/
|
|
58
|
+
export interface SignatureVerificationResult {
|
|
59
|
+
valid: boolean;
|
|
60
|
+
signed: boolean;
|
|
61
|
+
signedAt?: string;
|
|
62
|
+
certificate?: string;
|
|
63
|
+
rekorLogId?: string;
|
|
64
|
+
message: string;
|
|
65
|
+
}
|
|
66
|
+
/**
|
|
67
|
+
* Verification options
|
|
68
|
+
*/
|
|
69
|
+
export interface VerificationOptions {
|
|
70
|
+
/** Verify Sigstore signature (requires network) */
|
|
71
|
+
verifySignature?: boolean;
|
|
72
|
+
/** Check timestamp ordering */
|
|
73
|
+
checkTimestamps?: boolean;
|
|
74
|
+
/** Verify model ID consistency */
|
|
75
|
+
checkModelConsistency?: boolean;
|
|
76
|
+
/** Verify provenance statement */
|
|
77
|
+
checkProvenance?: boolean;
|
|
78
|
+
/** Expected session ID (optional) */
|
|
79
|
+
expectedSessionId?: string;
|
|
80
|
+
/** Maximum allowed time gap between entries (ms) */
|
|
81
|
+
maxTimeGap?: number;
|
|
82
|
+
}
|
|
83
|
+
/**
|
|
84
|
+
* Verify Merkle chain integrity of transcript entries
|
|
85
|
+
*/
|
|
86
|
+
export declare function verifyMerkleChain(entries: TranscriptEntry[], rootHash: string, tipHash: string): ChainVerificationResult;
|
|
87
|
+
/**
|
|
88
|
+
* Verify timestamp ordering
|
|
89
|
+
*/
|
|
90
|
+
export declare function verifyTimestampOrdering(entries: TranscriptEntry[], maxGap?: number): VerificationCheck;
|
|
91
|
+
/**
|
|
92
|
+
* Verify model ID consistency
|
|
93
|
+
*/
|
|
94
|
+
export declare function verifyModelConsistency(entries: TranscriptEntry[]): VerificationCheck;
|
|
95
|
+
/**
|
|
96
|
+
* Verify Sigstore signature
|
|
97
|
+
*/
|
|
98
|
+
export declare function verifySignature(bundle: TranscriptBundle): Promise<SignatureVerificationResult>;
|
|
99
|
+
/**
|
|
100
|
+
* Verify provenance statement consistency
|
|
101
|
+
*/
|
|
102
|
+
export declare function verifyProvenance(bundle: TranscriptBundle): VerificationCheck;
|
|
103
|
+
/**
|
|
104
|
+
* Verify a transcript bundle
|
|
105
|
+
*/
|
|
106
|
+
export declare function verifyTranscriptBundle(bundle: TranscriptBundle, entries?: TranscriptEntry[], options?: VerificationOptions): Promise<TranscriptVerificationResult>;
|
|
107
|
+
/**
|
|
108
|
+
* Load and verify a transcript bundle from file
|
|
109
|
+
*/
|
|
110
|
+
export declare function verifyTranscriptFile(bundlePath: string, entriesPath?: string, options?: VerificationOptions): Promise<TranscriptVerificationResult>;
|
|
111
|
+
/**
|
|
112
|
+
* Verify multiple transcript bundles
|
|
113
|
+
*/
|
|
114
|
+
export declare function verifyTranscriptBatch(bundles: Array<{
|
|
115
|
+
bundle: TranscriptBundle;
|
|
116
|
+
entries?: TranscriptEntry[];
|
|
117
|
+
}>, options?: VerificationOptions): Promise<{
|
|
118
|
+
results: TranscriptVerificationResult[];
|
|
119
|
+
summary: {
|
|
120
|
+
total: number;
|
|
121
|
+
valid: number;
|
|
122
|
+
invalid: number;
|
|
123
|
+
};
|
|
124
|
+
}>;
|
|
125
|
+
/**
|
|
126
|
+
* Generate verification report
|
|
127
|
+
*/
|
|
128
|
+
export declare function generateVerificationReport(result: TranscriptVerificationResult): string;
|
|
129
|
+
/**
|
|
130
|
+
* Quick integrity check (chain only)
|
|
131
|
+
*/
|
|
132
|
+
export declare function quickIntegrityCheck(entries: TranscriptEntry[], rootHash: string, tipHash: string): boolean;
|
|
133
|
+
//# sourceMappingURL=verifier.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../src/transcripts/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAwB,MAAM,cAAc,CAAC;AAC3E,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,aAAa,CAAC;AAMrE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,kCAAkC;IAClC,KAAK,EAAE,OAAO,CAAC;IAEf,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAElB,qCAAqC;IACrC,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAE5B,sCAAsC;IACtC,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IAEnB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,+BAA+B;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,kCAAkC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,kCAAkC;IAClC,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,qCAAqC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAqBD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,uBAAuB,CAsFzB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,EAAE,EAC1B,MAAM,CAAC,EAAE,MAAM,GACd,iBAAiB,CAoCnB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,iBAAiB,CA+BpF;AAMD;;GAEG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,2BAA2B,CAAC,CA4DtC;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,GACvB,iBAAiB,CAyCnB;AAMD;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,eAAe,EAAE,EAC3B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,4BAA4B,CAAC,CA6GvC;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,4BAA4B,CAAC,CAkCvC;AAMD;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC,EACzE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC;IACT,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxC,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC,CAgBD;AAMD;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAuCvF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,eAAe,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAGT"}
|
|
@@ -0,0 +1,489 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Transcript Verifier
|
|
3
|
+
*
|
|
4
|
+
* Verifies transcript integrity, signature validity, and consistency.
|
|
5
|
+
* Supports both local verification and Sigstore validation.
|
|
6
|
+
*
|
|
7
|
+
* @module transcripts/verifier
|
|
8
|
+
*/
|
|
9
|
+
import { createHash } from "crypto";
|
|
10
|
+
import { readFile } from "fs/promises";
|
|
11
|
+
// ============================================================================
|
|
12
|
+
// Chain Verification
|
|
13
|
+
// ============================================================================
|
|
14
|
+
/**
|
|
15
|
+
* Calculate entry hash (must match logger's calculation)
|
|
16
|
+
*/
|
|
17
|
+
function calculateEntryHash(entry) {
|
|
18
|
+
const data = JSON.stringify({
|
|
19
|
+
id: entry.id,
|
|
20
|
+
timestamp: entry.timestamp,
|
|
21
|
+
type: entry.type,
|
|
22
|
+
sessionId: entry.sessionId,
|
|
23
|
+
contentHash: entry.contentHash,
|
|
24
|
+
previousHash: entry.previousHash,
|
|
25
|
+
});
|
|
26
|
+
return createHash("sha256").update(data).digest("hex");
|
|
27
|
+
}
|
|
28
|
+
/**
|
|
29
|
+
* Verify Merkle chain integrity of transcript entries
|
|
30
|
+
*/
|
|
31
|
+
export function verifyMerkleChain(entries, rootHash, tipHash) {
|
|
32
|
+
if (entries.length === 0) {
|
|
33
|
+
return {
|
|
34
|
+
valid: true,
|
|
35
|
+
entryCount: 0,
|
|
36
|
+
message: "Empty transcript (no entries to verify)",
|
|
37
|
+
};
|
|
38
|
+
}
|
|
39
|
+
// Verify chain from first entry
|
|
40
|
+
let previousHash = "genesis";
|
|
41
|
+
for (let i = 0; i < entries.length; i++) {
|
|
42
|
+
const entry = entries[i];
|
|
43
|
+
// Verify previous hash links correctly
|
|
44
|
+
if (entry.previousHash !== previousHash) {
|
|
45
|
+
return {
|
|
46
|
+
valid: false,
|
|
47
|
+
entryCount: entries.length,
|
|
48
|
+
brokenAt: i,
|
|
49
|
+
expectedHash: previousHash,
|
|
50
|
+
actualHash: entry.previousHash,
|
|
51
|
+
message: `Chain broken at entry ${i}: expected previousHash ${previousHash.slice(0, 16)}..., got ${entry.previousHash.slice(0, 16)}...`,
|
|
52
|
+
};
|
|
53
|
+
}
|
|
54
|
+
// Calculate expected content hash (hash of just the content)
|
|
55
|
+
const expectedContentHash = createHash("sha256").update(entry.content).digest("hex");
|
|
56
|
+
if (entry.contentHash !== expectedContentHash) {
|
|
57
|
+
return {
|
|
58
|
+
valid: false,
|
|
59
|
+
entryCount: entries.length,
|
|
60
|
+
brokenAt: i,
|
|
61
|
+
expectedHash: expectedContentHash,
|
|
62
|
+
actualHash: entry.contentHash,
|
|
63
|
+
message: `Content hash mismatch at entry ${i}: content may have been tampered`,
|
|
64
|
+
};
|
|
65
|
+
}
|
|
66
|
+
// Calculate expected entry hash
|
|
67
|
+
const expectedEntryHash = calculateEntryHash(entry);
|
|
68
|
+
if (entry.entryHash !== expectedEntryHash) {
|
|
69
|
+
return {
|
|
70
|
+
valid: false,
|
|
71
|
+
entryCount: entries.length,
|
|
72
|
+
brokenAt: i,
|
|
73
|
+
expectedHash: expectedEntryHash,
|
|
74
|
+
actualHash: entry.entryHash,
|
|
75
|
+
message: `Entry hash mismatch at entry ${i}: entry may have been tampered`,
|
|
76
|
+
};
|
|
77
|
+
}
|
|
78
|
+
// Update previous hash for next iteration (chain via entryHash)
|
|
79
|
+
previousHash = entry.entryHash;
|
|
80
|
+
}
|
|
81
|
+
// Verify root hash (first entry's entry hash)
|
|
82
|
+
if (entries[0].entryHash !== rootHash) {
|
|
83
|
+
return {
|
|
84
|
+
valid: false,
|
|
85
|
+
entryCount: entries.length,
|
|
86
|
+
expectedHash: entries[0].entryHash,
|
|
87
|
+
actualHash: rootHash,
|
|
88
|
+
message: `Root hash mismatch: expected ${entries[0].entryHash.slice(0, 16)}..., got ${rootHash.slice(0, 16)}...`,
|
|
89
|
+
};
|
|
90
|
+
}
|
|
91
|
+
// Verify tip hash (last entry's entry hash)
|
|
92
|
+
const lastEntry = entries[entries.length - 1];
|
|
93
|
+
if (lastEntry.entryHash !== tipHash) {
|
|
94
|
+
return {
|
|
95
|
+
valid: false,
|
|
96
|
+
entryCount: entries.length,
|
|
97
|
+
expectedHash: lastEntry.entryHash,
|
|
98
|
+
actualHash: tipHash,
|
|
99
|
+
message: `Tip hash mismatch: expected ${lastEntry.entryHash.slice(0, 16)}..., got ${tipHash.slice(0, 16)}...`,
|
|
100
|
+
};
|
|
101
|
+
}
|
|
102
|
+
return {
|
|
103
|
+
valid: true,
|
|
104
|
+
entryCount: entries.length,
|
|
105
|
+
message: `Chain verified: ${entries.length} entries, integrity intact`,
|
|
106
|
+
};
|
|
107
|
+
}
|
|
108
|
+
/**
|
|
109
|
+
* Verify timestamp ordering
|
|
110
|
+
*/
|
|
111
|
+
export function verifyTimestampOrdering(entries, maxGap) {
|
|
112
|
+
if (entries.length < 2) {
|
|
113
|
+
return {
|
|
114
|
+
name: "timestamp-ordering",
|
|
115
|
+
passed: true,
|
|
116
|
+
message: "Insufficient entries for timestamp verification",
|
|
117
|
+
};
|
|
118
|
+
}
|
|
119
|
+
const issues = [];
|
|
120
|
+
let previousTime = new Date(entries[0].timestamp).getTime();
|
|
121
|
+
for (let i = 1; i < entries.length; i++) {
|
|
122
|
+
const currentTime = new Date(entries[i].timestamp).getTime();
|
|
123
|
+
// Check for backwards timestamps
|
|
124
|
+
if (currentTime < previousTime) {
|
|
125
|
+
issues.push(`Entry ${i}: timestamp goes backwards (${entries[i].timestamp} < ${entries[i - 1].timestamp})`);
|
|
126
|
+
}
|
|
127
|
+
// Check for excessive gaps
|
|
128
|
+
if (maxGap && currentTime - previousTime > maxGap) {
|
|
129
|
+
issues.push(`Entry ${i}: excessive gap of ${currentTime - previousTime}ms`);
|
|
130
|
+
}
|
|
131
|
+
previousTime = currentTime;
|
|
132
|
+
}
|
|
133
|
+
return {
|
|
134
|
+
name: "timestamp-ordering",
|
|
135
|
+
passed: issues.length === 0,
|
|
136
|
+
message: issues.length === 0
|
|
137
|
+
? `Timestamps correctly ordered across ${entries.length} entries`
|
|
138
|
+
: `Found ${issues.length} timestamp issue(s)`,
|
|
139
|
+
details: issues.length > 0 ? { issues } : undefined,
|
|
140
|
+
};
|
|
141
|
+
}
|
|
142
|
+
/**
|
|
143
|
+
* Verify model ID consistency
|
|
144
|
+
*/
|
|
145
|
+
export function verifyModelConsistency(entries) {
|
|
146
|
+
const modelIds = new Set();
|
|
147
|
+
for (const entry of entries) {
|
|
148
|
+
if (entry.modelId) {
|
|
149
|
+
modelIds.add(entry.modelId);
|
|
150
|
+
}
|
|
151
|
+
}
|
|
152
|
+
if (modelIds.size === 0) {
|
|
153
|
+
return {
|
|
154
|
+
name: "model-consistency",
|
|
155
|
+
passed: true,
|
|
156
|
+
message: "No model IDs recorded in transcript",
|
|
157
|
+
};
|
|
158
|
+
}
|
|
159
|
+
if (modelIds.size === 1) {
|
|
160
|
+
return {
|
|
161
|
+
name: "model-consistency",
|
|
162
|
+
passed: true,
|
|
163
|
+
message: `Consistent model ID: ${[...modelIds][0]}`,
|
|
164
|
+
};
|
|
165
|
+
}
|
|
166
|
+
return {
|
|
167
|
+
name: "model-consistency",
|
|
168
|
+
passed: false,
|
|
169
|
+
message: `Multiple model IDs detected: ${[...modelIds].join(", ")}`,
|
|
170
|
+
details: { modelIds: [...modelIds] },
|
|
171
|
+
};
|
|
172
|
+
}
|
|
173
|
+
// ============================================================================
|
|
174
|
+
// Signature Verification
|
|
175
|
+
// ============================================================================
|
|
176
|
+
/**
|
|
177
|
+
* Verify Sigstore signature
|
|
178
|
+
*/
|
|
179
|
+
export async function verifySignature(bundle) {
|
|
180
|
+
if (!bundle.signature) {
|
|
181
|
+
return {
|
|
182
|
+
valid: true,
|
|
183
|
+
signed: false,
|
|
184
|
+
message: "Transcript is unsigned (no signature to verify)",
|
|
185
|
+
};
|
|
186
|
+
}
|
|
187
|
+
try {
|
|
188
|
+
// Try to import the verification module
|
|
189
|
+
const { verifySignature: sigstoreVerify, isSigningAvailable, sha256 } = await import("../sbom/signing.js");
|
|
190
|
+
const available = isSigningAvailable();
|
|
191
|
+
if (!available) {
|
|
192
|
+
return {
|
|
193
|
+
valid: true,
|
|
194
|
+
signed: true,
|
|
195
|
+
signedAt: bundle.signature.signedAt,
|
|
196
|
+
message: "Signature present but verification tools unavailable",
|
|
197
|
+
};
|
|
198
|
+
}
|
|
199
|
+
// Recreate the provenance JSON that was signed
|
|
200
|
+
const provenanceJson = JSON.stringify(bundle.provenance);
|
|
201
|
+
const expectedDigest = sha256(provenanceJson);
|
|
202
|
+
// Verify the signature matches the digest
|
|
203
|
+
// For transcripts, we store the digest as the signature identifier
|
|
204
|
+
const digestMatches = bundle.signature.sig === expectedDigest;
|
|
205
|
+
// Note: Full Sigstore verification would require the original bundle
|
|
206
|
+
// For now, we verify digest consistency
|
|
207
|
+
const verificationResult = sigstoreVerify({
|
|
208
|
+
content: provenanceJson,
|
|
209
|
+
digest: expectedDigest,
|
|
210
|
+
signed: true,
|
|
211
|
+
signedAt: bundle.signature.signedAt,
|
|
212
|
+
});
|
|
213
|
+
const isValid = digestMatches && verificationResult.valid;
|
|
214
|
+
return {
|
|
215
|
+
valid: isValid,
|
|
216
|
+
signed: true,
|
|
217
|
+
signedAt: bundle.signature.signedAt,
|
|
218
|
+
certificate: bundle.signature.cert,
|
|
219
|
+
rekorLogId: bundle.signature.rekorLogId,
|
|
220
|
+
message: isValid
|
|
221
|
+
? "Signature verified (digest matches)"
|
|
222
|
+
: `Signature verification failed: ${verificationResult.errors.join(", ")}`,
|
|
223
|
+
};
|
|
224
|
+
}
|
|
225
|
+
catch (error) {
|
|
226
|
+
return {
|
|
227
|
+
valid: false,
|
|
228
|
+
signed: true,
|
|
229
|
+
signedAt: bundle.signature.signedAt,
|
|
230
|
+
message: `Signature verification error: ${error instanceof Error ? error.message : "Unknown error"}`,
|
|
231
|
+
};
|
|
232
|
+
}
|
|
233
|
+
}
|
|
234
|
+
// ============================================================================
|
|
235
|
+
// Provenance Verification
|
|
236
|
+
// ============================================================================
|
|
237
|
+
/**
|
|
238
|
+
* Verify provenance statement consistency
|
|
239
|
+
*/
|
|
240
|
+
export function verifyProvenance(bundle) {
|
|
241
|
+
const { transcript, provenance } = bundle;
|
|
242
|
+
const issues = [];
|
|
243
|
+
// Check subject name matches session
|
|
244
|
+
const expectedSubject = `transcript:${transcript.sessionId}`;
|
|
245
|
+
if (provenance.subject[0]?.name !== expectedSubject) {
|
|
246
|
+
issues.push(`Subject name mismatch: expected ${expectedSubject}, got ${provenance.subject[0]?.name}`);
|
|
247
|
+
}
|
|
248
|
+
// Check predicate fields match transcript
|
|
249
|
+
if (provenance.predicate.sessionId !== transcript.sessionId) {
|
|
250
|
+
issues.push("Session ID mismatch between transcript and provenance");
|
|
251
|
+
}
|
|
252
|
+
if (provenance.predicate.entryCount !== transcript.entryCount) {
|
|
253
|
+
issues.push(`Entry count mismatch: transcript=${transcript.entryCount}, provenance=${provenance.predicate.entryCount}`);
|
|
254
|
+
}
|
|
255
|
+
if (provenance.predicate.rootHash !== transcript.rootHash) {
|
|
256
|
+
issues.push("Root hash mismatch between transcript and provenance");
|
|
257
|
+
}
|
|
258
|
+
if (provenance.predicate.tipHash !== transcript.tipHash) {
|
|
259
|
+
issues.push("Tip hash mismatch between transcript and provenance");
|
|
260
|
+
}
|
|
261
|
+
// Verify subject digest
|
|
262
|
+
const transcriptContent = JSON.stringify(transcript);
|
|
263
|
+
const transcriptHash = createHash("sha256").update(transcriptContent).digest("hex");
|
|
264
|
+
if (provenance.subject[0]?.digest?.sha256 !== transcriptHash) {
|
|
265
|
+
issues.push("Subject digest does not match transcript content hash");
|
|
266
|
+
}
|
|
267
|
+
return {
|
|
268
|
+
name: "provenance-consistency",
|
|
269
|
+
passed: issues.length === 0,
|
|
270
|
+
message: issues.length === 0
|
|
271
|
+
? "Provenance statement is consistent with transcript"
|
|
272
|
+
: `Found ${issues.length} provenance inconsistency(ies)`,
|
|
273
|
+
details: issues.length > 0 ? { issues } : undefined,
|
|
274
|
+
};
|
|
275
|
+
}
|
|
276
|
+
// ============================================================================
|
|
277
|
+
// Main Verification Function
|
|
278
|
+
// ============================================================================
|
|
279
|
+
/**
|
|
280
|
+
* Verify a transcript bundle
|
|
281
|
+
*/
|
|
282
|
+
export async function verifyTranscriptBundle(bundle, entries, options) {
|
|
283
|
+
const checks = [];
|
|
284
|
+
const { transcript } = bundle;
|
|
285
|
+
// Check session ID if expected
|
|
286
|
+
if (options?.expectedSessionId && transcript.sessionId !== options.expectedSessionId) {
|
|
287
|
+
checks.push({
|
|
288
|
+
name: "session-id",
|
|
289
|
+
passed: false,
|
|
290
|
+
message: `Session ID mismatch: expected ${options.expectedSessionId}, got ${transcript.sessionId}`,
|
|
291
|
+
});
|
|
292
|
+
}
|
|
293
|
+
else {
|
|
294
|
+
checks.push({
|
|
295
|
+
name: "session-id",
|
|
296
|
+
passed: true,
|
|
297
|
+
message: `Session ID: ${transcript.sessionId}`,
|
|
298
|
+
});
|
|
299
|
+
}
|
|
300
|
+
// Verify bundle version
|
|
301
|
+
if (bundle.version !== "1.0.0") {
|
|
302
|
+
checks.push({
|
|
303
|
+
name: "bundle-version",
|
|
304
|
+
passed: false,
|
|
305
|
+
message: `Unsupported bundle version: ${bundle.version}`,
|
|
306
|
+
});
|
|
307
|
+
}
|
|
308
|
+
else {
|
|
309
|
+
checks.push({
|
|
310
|
+
name: "bundle-version",
|
|
311
|
+
passed: true,
|
|
312
|
+
message: "Bundle version 1.0.0 supported",
|
|
313
|
+
});
|
|
314
|
+
}
|
|
315
|
+
// Verify Merkle chain if entries provided
|
|
316
|
+
if (entries && entries.length > 0) {
|
|
317
|
+
const chainResult = verifyMerkleChain(entries, transcript.rootHash, transcript.tipHash);
|
|
318
|
+
checks.push({
|
|
319
|
+
name: "merkle-chain",
|
|
320
|
+
passed: chainResult.valid,
|
|
321
|
+
message: chainResult.message,
|
|
322
|
+
details: chainResult.brokenAt !== undefined ? {
|
|
323
|
+
brokenAt: chainResult.brokenAt,
|
|
324
|
+
expectedHash: chainResult.expectedHash,
|
|
325
|
+
actualHash: chainResult.actualHash,
|
|
326
|
+
} : undefined,
|
|
327
|
+
});
|
|
328
|
+
// Verify timestamp ordering
|
|
329
|
+
if (options?.checkTimestamps !== false) {
|
|
330
|
+
checks.push(verifyTimestampOrdering(entries, options?.maxTimeGap));
|
|
331
|
+
}
|
|
332
|
+
// Verify model consistency
|
|
333
|
+
if (options?.checkModelConsistency !== false) {
|
|
334
|
+
checks.push(verifyModelConsistency(entries));
|
|
335
|
+
}
|
|
336
|
+
}
|
|
337
|
+
else {
|
|
338
|
+
checks.push({
|
|
339
|
+
name: "merkle-chain",
|
|
340
|
+
passed: true,
|
|
341
|
+
message: "No entries provided for chain verification (skipped)",
|
|
342
|
+
});
|
|
343
|
+
}
|
|
344
|
+
// Verify provenance
|
|
345
|
+
if (options?.checkProvenance !== false) {
|
|
346
|
+
checks.push(verifyProvenance(bundle));
|
|
347
|
+
}
|
|
348
|
+
// Verify signature
|
|
349
|
+
if (options?.verifySignature !== false) {
|
|
350
|
+
const sigResult = await verifySignature(bundle);
|
|
351
|
+
checks.push({
|
|
352
|
+
name: "signature",
|
|
353
|
+
passed: sigResult.valid,
|
|
354
|
+
message: sigResult.message,
|
|
355
|
+
details: sigResult.signed ? {
|
|
356
|
+
signedAt: sigResult.signedAt,
|
|
357
|
+
rekorLogId: sigResult.rekorLogId,
|
|
358
|
+
} : undefined,
|
|
359
|
+
});
|
|
360
|
+
}
|
|
361
|
+
// Verify redaction metadata
|
|
362
|
+
if (transcript.hasRedactions) {
|
|
363
|
+
checks.push({
|
|
364
|
+
name: "redactions-declared",
|
|
365
|
+
passed: true,
|
|
366
|
+
message: "Transcript declares redactions (entries may contain [REDACTED] markers)",
|
|
367
|
+
});
|
|
368
|
+
}
|
|
369
|
+
// Calculate summary
|
|
370
|
+
const passed = checks.filter((c) => c.passed).length;
|
|
371
|
+
const failed = checks.filter((c) => !c.passed).length;
|
|
372
|
+
return {
|
|
373
|
+
valid: failed === 0,
|
|
374
|
+
sessionId: transcript.sessionId,
|
|
375
|
+
checks,
|
|
376
|
+
summary: {
|
|
377
|
+
total: checks.length,
|
|
378
|
+
passed,
|
|
379
|
+
failed,
|
|
380
|
+
warnings: 0,
|
|
381
|
+
},
|
|
382
|
+
verifiedAt: new Date().toISOString(),
|
|
383
|
+
};
|
|
384
|
+
}
|
|
385
|
+
/**
|
|
386
|
+
* Load and verify a transcript bundle from file
|
|
387
|
+
*/
|
|
388
|
+
export async function verifyTranscriptFile(bundlePath, entriesPath, options) {
|
|
389
|
+
try {
|
|
390
|
+
// Load bundle
|
|
391
|
+
const bundleContent = await readFile(bundlePath, "utf-8");
|
|
392
|
+
const bundle = JSON.parse(bundleContent);
|
|
393
|
+
// Load entries if provided
|
|
394
|
+
let entries;
|
|
395
|
+
if (entriesPath) {
|
|
396
|
+
const entriesContent = await readFile(entriesPath, "utf-8");
|
|
397
|
+
const lines = entriesContent.split("\n").filter((l) => l.trim());
|
|
398
|
+
entries = lines.map((line) => JSON.parse(line));
|
|
399
|
+
}
|
|
400
|
+
const result = await verifyTranscriptBundle(bundle, entries, options);
|
|
401
|
+
result.bundlePath = bundlePath;
|
|
402
|
+
return result;
|
|
403
|
+
}
|
|
404
|
+
catch (error) {
|
|
405
|
+
return {
|
|
406
|
+
valid: false,
|
|
407
|
+
bundlePath,
|
|
408
|
+
sessionId: "unknown",
|
|
409
|
+
checks: [],
|
|
410
|
+
summary: {
|
|
411
|
+
total: 0,
|
|
412
|
+
passed: 0,
|
|
413
|
+
failed: 1,
|
|
414
|
+
warnings: 0,
|
|
415
|
+
},
|
|
416
|
+
verifiedAt: new Date().toISOString(),
|
|
417
|
+
error: error instanceof Error ? error.message : "Unknown error loading bundle",
|
|
418
|
+
};
|
|
419
|
+
}
|
|
420
|
+
}
|
|
421
|
+
// ============================================================================
|
|
422
|
+
// Batch Verification
|
|
423
|
+
// ============================================================================
|
|
424
|
+
/**
|
|
425
|
+
* Verify multiple transcript bundles
|
|
426
|
+
*/
|
|
427
|
+
export async function verifyTranscriptBatch(bundles, options) {
|
|
428
|
+
const results = [];
|
|
429
|
+
for (const { bundle, entries } of bundles) {
|
|
430
|
+
const result = await verifyTranscriptBundle(bundle, entries, options);
|
|
431
|
+
results.push(result);
|
|
432
|
+
}
|
|
433
|
+
return {
|
|
434
|
+
results,
|
|
435
|
+
summary: {
|
|
436
|
+
total: results.length,
|
|
437
|
+
valid: results.filter((r) => r.valid).length,
|
|
438
|
+
invalid: results.filter((r) => !r.valid).length,
|
|
439
|
+
},
|
|
440
|
+
};
|
|
441
|
+
}
|
|
442
|
+
// ============================================================================
|
|
443
|
+
// Helpers
|
|
444
|
+
// ============================================================================
|
|
445
|
+
/**
|
|
446
|
+
* Generate verification report
|
|
447
|
+
*/
|
|
448
|
+
export function generateVerificationReport(result) {
|
|
449
|
+
const lines = [];
|
|
450
|
+
lines.push("## Transcript Verification Report");
|
|
451
|
+
lines.push("");
|
|
452
|
+
lines.push(`**Session ID**: ${result.sessionId}`);
|
|
453
|
+
lines.push(`**Verified At**: ${result.verifiedAt}`);
|
|
454
|
+
if (result.bundlePath) {
|
|
455
|
+
lines.push(`**Bundle Path**: ${result.bundlePath}`);
|
|
456
|
+
}
|
|
457
|
+
lines.push("");
|
|
458
|
+
// Overall status
|
|
459
|
+
lines.push("### Status");
|
|
460
|
+
lines.push(`- **Overall**: ${result.valid ? "✓ VALID" : "✗ INVALID"}`);
|
|
461
|
+
lines.push(`- **Checks Passed**: ${result.summary.passed}/${result.summary.total}`);
|
|
462
|
+
lines.push("");
|
|
463
|
+
// Individual checks
|
|
464
|
+
lines.push("### Verification Checks");
|
|
465
|
+
for (const check of result.checks) {
|
|
466
|
+
const icon = check.passed ? "✓" : "✗";
|
|
467
|
+
lines.push(`- ${icon} **${check.name}**: ${check.message}`);
|
|
468
|
+
if (check.details) {
|
|
469
|
+
for (const [key, value] of Object.entries(check.details)) {
|
|
470
|
+
lines.push(` - ${key}: ${JSON.stringify(value)}`);
|
|
471
|
+
}
|
|
472
|
+
}
|
|
473
|
+
}
|
|
474
|
+
// Error if present
|
|
475
|
+
if (result.error) {
|
|
476
|
+
lines.push("");
|
|
477
|
+
lines.push("### Error");
|
|
478
|
+
lines.push(`\`\`\`\n${result.error}\n\`\`\``);
|
|
479
|
+
}
|
|
480
|
+
return lines.join("\n");
|
|
481
|
+
}
|
|
482
|
+
/**
|
|
483
|
+
* Quick integrity check (chain only)
|
|
484
|
+
*/
|
|
485
|
+
export function quickIntegrityCheck(entries, rootHash, tipHash) {
|
|
486
|
+
const result = verifyMerkleChain(entries, rootHash, tipHash);
|
|
487
|
+
return result.valid;
|
|
488
|
+
}
|
|
489
|
+
//# sourceMappingURL=verifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/transcripts/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAgGvC,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAsB;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,QAAgB,EAChB,OAAe;IAEf,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,yCAAyC;SACnD,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,IAAI,YAAY,GAAG,SAAS,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAEzB,uCAAuC;QACvC,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACxC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,KAAK,CAAC,YAAY;gBAC9B,OAAO,EAAE,yBAAyB,CAAC,2BAA2B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;aACxI,CAAC;QACJ,CAAC;QAED,6DAA6D;QAC7D,MAAM,mBAAmB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAErF,IAAI,KAAK,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;YAC9C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,mBAAmB;gBACjC,UAAU,EAAE,KAAK,CAAC,WAAW;gBAC7B,OAAO,EAAE,kCAAkC,CAAC,kCAAkC;aAC/E,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;YAC1C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,iBAAiB;gBAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,OAAO,EAAE,gCAAgC,CAAC,gCAAgC;aAC3E,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;IACjC,CAAC;IAED,8CAA8C;IAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAClC,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,gCAAgC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;SACjH,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,YAAY,EAAE,SAAS,CAAC,SAAS;YACjC,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,+BAA+B,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;SAC9G,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,OAAO,EAAE,mBAAmB,OAAO,CAAC,MAAM,4BAA4B;KACvE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA0B,EAC1B,MAAe;IAEf,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,iDAAiD;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAE5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAE7D,iCAAiC;QACjC,IAAI,WAAW,GAAG,YAAY,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,+BAA+B,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAC9G,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,IAAI,WAAW,GAAG,YAAY,GAAG,MAAM,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,WAAW,GAAG,YAAY,IAAI,CAAC,CAAC;QAC9E,CAAC;QAED,YAAY,GAAG,WAAW,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,uCAAuC,OAAO,CAAC,MAAM,UAAU;YACjE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,qBAAqB;QAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;KACpD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,qCAAqC;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;SACpD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,gCAAgC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAwB;IAExB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,iDAAiD;SAC3D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAE3G,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;gBACnC,OAAO,EAAE,sDAAsD;aAChE,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAE9C,0CAA0C;QAC1C,mEAAmE;QACnE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,cAAc,CAAC;QAE9D,qEAAqE;QACrE,wCAAwC;QACxC,MAAM,kBAAkB,GAAG,cAAc,CAAC;YACxC,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;SACpC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,aAAa,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAE1D,OAAO;YACL,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;YACnC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;YAClC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU;YACvC,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,kCAAkC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC7E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;YACnC,OAAO,EAAE,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;SACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,qCAAqC;IACrC,MAAM,eAAe,GAAG,cAAc,UAAU,CAAC,SAAS,EAAE,CAAC;IAC7D,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,mCAAmC,eAAe,SAAS,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,0CAA0C;IAC1C,IAAI,UAAU,CAAC,SAAS,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,oCAAoC,UAAU,CAAC,UAAU,gBAAgB,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IAED,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpF,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,KAAK,cAAc,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,gCAAgC;QAC1D,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;KACpD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAwB,EACxB,OAA2B,EAC3B,OAA6B;IAE7B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE9B,+BAA+B;IAC/B,IAAI,OAAO,EAAE,iBAAiB,IAAI,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,iCAAiC,OAAO,CAAC,iBAAiB,SAAS,UAAU,CAAC,SAAS,EAAE;SACnG,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,eAAe,UAAU,CAAC,SAAS,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,+BAA+B,MAAM,CAAC,OAAO,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAC1C,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,WAAW,CAAC,KAAK;YACzB,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,OAAO,EAAE,WAAW,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC;gBAC5C,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,UAAU,EAAE,WAAW,CAAC,UAAU;aACnC,CAAC,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QAEH,4BAA4B;QAC5B,IAAI,OAAO,EAAE,eAAe,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,2BAA2B;QAC3B,IAAI,OAAO,EAAE,qBAAqB,KAAK,KAAK,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,EAAE,eAAe,KAAK,KAAK,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,EAAE,eAAe,KAAK,KAAK,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS,CAAC,KAAK;YACvB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;aACjC,CAAC,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAEtD,OAAO;QACL,KAAK,EAAE,MAAM,KAAK,CAAC;QACnB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,MAAM;QACN,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM;YACN,MAAM;YACN,QAAQ,EAAE,CAAC;SACZ;QACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,WAAoB,EACpB,OAA6B;IAE7B,IAAI,CAAC;QACH,cAAc;QACd,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAqB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE3D,2BAA2B;QAC3B,IAAI,OAAsC,CAAC;QAC3C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QAE/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE;gBACP,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,CAAC;aACZ;YACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;SAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAyE,EACzE,OAA6B;IAS7B,MAAM,OAAO,GAAmC,EAAE,CAAC;IAEnD,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;YAC5C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;SAChD;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAoC;IAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,iBAAiB;IACjB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,KAAK,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA0B,EAC1B,QAAgB,EAChB,OAAe;IAEf,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verifier.test.d.ts","sourceRoot":"","sources":["../../src/transcripts/verifier.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}
|