{"_id":"@axiorank/log-watchdog","_rev":"2-71526890a9fdfe262de5d6fa0f332b6c","name":"@axiorank/log-watchdog","dist-tags":{"latest":"0.1.1"},"versions":{"0.1.0":{"name":"@axiorank/log-watchdog","version":"0.1.0","keywords":["axiorank","transparency-log","monitor","watchdog","rfc6962","certificate-transparency","tamper-evident","audit","equivocation","split-view"],"author":{"name":"AxioRank"},"license":"MIT","_id":"@axiorank/log-watchdog@0.1.0","maintainers":[{"name":"tejaswi.s","email":"tejaswi33@gmail.com"}],"homepage":"https://axiorank.com","bugs":{"url":"https://github.com/frostyhand/AxioRank/issues"},"bin":{"axiorank-log-watchdog":"dist/cli.js"},"dist":{"shasum":"55bcdd90f1ac21d0e1a810c64be15456a0064729","tarball":"https://registry.npmjs.org/@axiorank/log-watchdog/-/log-watchdog-0.1.0.tgz","fileCount":18,"integrity":"sha512-CAzzSFyF7jx82Wsnt88YbHvG4lenfyu/aWcs3HNIEEQzloib/w9oksEUNNvP3Rdfp1FFPoINigukE3T8dFzdzQ==","signatures":[{"sig":"MEYCIQCBgFiU6snqc9O7emcEB8f97PqvWSdlk1WMus0dF/oHnQIhAKSRqbJEDVb4JqwxrPNjEC00gJ1deF5nUU6JmSAH9gTN","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":84891},"main":"./dist/index.cjs","type":"module","_from":"file:axiorank-log-watchdog-0.1.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","require":"./dist/index.cjs"},"./package.json":"./package.json"},"scripts":{"dev":"tsup --watch","test":"vitest run","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"tejaswi.s","email":"tejaswi33@gmail.com"},"_resolved":"/private/var/folders/tj/sd2_mky164g410jm_lcgy8wh0000gn/T/aca76a066bd7bbc8df50b85a34fc79a7/axiorank-log-watchdog-0.1.0.tgz","_integrity":"sha512-CAzzSFyF7jx82Wsnt88YbHvG4lenfyu/aWcs3HNIEEQzloib/w9oksEUNNvP3Rdfp1FFPoINigukE3T8dFzdzQ==","repository":{"url":"git+https://github.com/frostyhand/AxioRank.git","type":"git","directory":"packages/log-watchdog"},"_npmVersion":"10.9.8","description":"Independently monitor an AxioRank audit transparency log for equivocation, rollback, or gaps. Pins each verified signed tree head and alerts on any inconsistency. Zero runtime dependencies beyond the offline verifier.","directories":{},"sideEffects":false,"_nodeVersion":"22.22.3","dependencies":{"@axiorank/audit-verify":"^0.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.5","vitest":"^4.1.8","typescript":"^6.0.3","@types/node":"^22.10.2"},"_npmOperationalInternal":{"tmp":"tmp/log-watchdog_0.1.0_1781165684624_0.4636641443920566","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@axiorank/log-watchdog","version":"0.1.1","description":"Independently monitor an AxioRank audit transparency log for equivocation, rollback, or gaps. Pins each verified signed tree head and alerts on any inconsistency. Zero runtime dependencies beyond the offline verifier.","license":"MIT","homepage":"https://axiorank.com","bugs":{"url":"https://axiorank.com/support"},"author":{"name":"AxioRank"},"type":"module","main":"./dist/index.cjs","module":"./dist/index.js","types":"./dist/index.d.ts","bin":{"axiorank-log-watchdog":"dist/cli.js"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","require":"./dist/index.cjs"},"./package.json":"./package.json"},"sideEffects":false,"engines":{"node":">=18"},"keywords":["axiorank","transparency-log","monitor","watchdog","rfc6962","certificate-transparency","tamper-evident","audit","equivocation","split-view"],"scripts":{"build":"tsup","dev":"tsup --watch","typecheck":"tsc --noEmit","test":"vitest run"},"dependencies":{"@axiorank/audit-verify":"workspace:^"},"publishConfig":{"access":"public"},"devDependencies":{"@types/node":"^22.10.2","tsup":"^8.3.5","typescript":"^6.0.3","vitest":"^4.1.8"},"_id":"@axiorank/log-watchdog@0.1.1","_nodeVersion":"22.22.3","_npmVersion":"10.9.8","dist":{"integrity":"sha512-hgxAO8O9vLZ5YdPm4uJ5NcGD5g3xFl4uZ9GJJp60WP8oES3SI5E6gP4QOoYlfUv0k117QUwbt5C9byVMgmV6wg==","shasum":"9535747087a8ad676368e869d503ba00f3f0b5ff","tarball":"https://registry.npmjs.org/@axiorank/log-watchdog/-/log-watchdog-0.1.1.tgz","fileCount":18,"unpackedSize":84736,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCOV2dVrNZvQwv6atIJnk6S06+Unf2Zjz15+bVoOVjv/AIgQF/sun09tThdJkdfhcGoeWGcTL1fU8f2GBniUsZ2WRM="}]},"_npmUser":{"name":"tejaswi.s","email":"tejaswi33@gmail.com"},"directories":{},"maintainers":[{"name":"tejaswi.s","email":"tejaswi33@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/log-watchdog_0.1.1_1785415317801_0.9389966484350702"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-11T08:14:44.495Z","modified":"2026-07-30T12:41:59.041Z","0.1.0":"2026-06-11T08:14:44.752Z","0.1.1":"2026-07-30T12:41:57.955Z"},"bugs":{"url":"https://axiorank.com/support"},"author":{"name":"AxioRank"},"license":"MIT","homepage":"https://axiorank.com","keywords":["axiorank","transparency-log","monitor","watchdog","rfc6962","certificate-transparency","tamper-evident","audit","equivocation","split-view"],"description":"Independently monitor an AxioRank audit transparency log for equivocation, rollback, or gaps. Pins each verified signed tree head and alerts on any inconsistency. Zero runtime dependencies beyond the offline verifier.","maintainers":[{"name":"tejaswi.s","email":"tejaswi33@gmail.com"}],"readme":"# @axiorank/log-watchdog\n\nIndependently monitor an [AxioRank](https://axiorank.com) audit transparency log. The watchdog polls the public checkpoint endpoints, verifies each signed tree head and the chain between them against a key you pinned out of band, pins the latest verified head locally, and alerts on any inconsistency. It trusts the pinned key, never the server it is auditing.\n\nThis is the \"do not trust us, verify\" half of AxioRank's verifiable audit: customers (and anyone else) can continuously check that the vendor's own log was never forked or rewritten.\n\n## What it detects\n\n- **rollback**: the head's sequence went backward.\n- **equivocation**: a sequence you already saw now presents a different root or signature (a split view).\n- **inconsistency**: a gap, a broken chain link, or an invalid signed-tree-head signature.\n- **missing witnesses**: the head lacks the independent co-signatures you require.\n\nExit codes: `0` verified and pinned, `1` tamper evidence, `2` a transient network or HTTP problem (nothing pinned).\n\n## Setup\n\n1. Enable public monitoring for your workspace (Settings, Security, Public log monitoring) and copy the log id.\n2. Pin the JWKS once, out of band:\n\n   ```bash\n   curl -s https://app.axiorank.com/api/v1/audit/public-key > jwks.json\n   ```\n\n## CLI\n\n```bash\nnpx @axiorank/log-watchdog \\\n  --base-url https://app.axiorank.com \\\n  --log-id <your-log-id> \\\n  --jwks ./jwks.json \\\n  --state ./head.json \\\n  --once\n```\n\nRun it on a schedule (cron, a CI job, or `--interval <seconds>` to loop). Keep `head.json` between runs so a rollback is detectable. Add `--webhook <url>` to POST findings, and `--require-witnesses <n> --witness-keys ./witnesses.json` to require independent co-signatures.\n\n## GitHub Action\n\n```yaml\n- uses: axiorank/log-watchdog@v0\n  with:\n    log-id: ${{ vars.AXIORANK_LOG_ID }}\n    jwks: ./jwks.json\n```\n\nThe action caches the pinned head across runs, opens an issue on tamper evidence, and fails the job.\n\n## Programmatic\n\n```ts\nimport { runWatchdog, loadState, saveState } from \"@axiorank/log-watchdog\";\n\nconst state = loadState(\"./head.json\");\nconst result = await runWatchdog({ baseUrl, logId, jwks, state });\nif (!result.ok) console.error(result.findings);\nelse if (result.head) saveState(\"./head.json\", { logId, baseUrl, head: result.head });\n```\n\nVerification is implemented in the zero-dependency [`@axiorank/audit-verify`](https://www.npmjs.com/package/@axiorank/audit-verify) package.\n\n## License\n\nMIT\n","readmeFilename":"README.md"}