{"_id":"@buildtovalue/audit","_rev":"2-79aabe34d4f43c03fb38407563e15de0","name":"@buildtovalue/audit","dist-tags":{"latest":"1.1.1-next.0"},"versions":{"1.1.0":{"name":"@buildtovalue/audit","version":"1.1.0","keywords":["bpmn","audit","ledger","attestation","xes","process-mining"],"license":"Apache-2.0","_id":"@buildtovalue/audit@1.1.0","maintainers":[{"name":"danzeroum","email":"danzeroum@gmail.com"}],"homepage":"https://github.com/danzeroum/bpmn#readme","bugs":{"url":"https://github.com/danzeroum/bpmn/issues"},"dist":{"shasum":"cd04cfab92fcaade90655446eebb5a163f7198a0","tarball":"https://registry.npmjs.org/@buildtovalue/audit/-/audit-1.1.0.tgz","fileCount":52,"integrity":"sha512-ehtJYj1y2hQzXNutVXRBaZ66HQ3gXxhyw4LcKzq6unCLw7mq3ZHgIW31adIETw/0T2i7sZQABJX70LwgFDwQqg==","signatures":[{"sig":"MEUCIAm4MzTiaDKr9lBB0gUfsrUXJyYi1vUCmmBJEsLyWzwWAiEAt8VKBZbft03ktdhZ8NcCXf8jXgh4qx33YaA7IoyULZo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":143895},"main":"./dist/cjs/index.js","type":"module","_from":"file:buildtovalue-audit-1.1.0.tgz","types":"./dist/esm/index.d.ts","module":"./dist/esm/index.js","engines":{"node":">=20"},"exports":{".":{"types":"./dist/esm/index.d.ts","import":"./dist/esm/index.js","require":"./dist/cjs/index.js"}},"scripts":{"build":"tsc -p tsconfig.build.json && tsc -p tsconfig.cjs.json && node ../../scripts/write-cjs-package.mjs dist/cjs","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"danzeroum","email":"danzeroum@gmail.com"},"_resolved":"C:\\Users\\danni\\AppData\\Local\\Temp\\dab1a4a29589a5ae3ca85bdf707cfd9e\\buildtovalue-audit-1.1.0.tgz","_integrity":"sha512-ehtJYj1y2hQzXNutVXRBaZ66HQ3gXxhyw4LcKzq6unCLw7mq3ZHgIW31adIETw/0T2i7sZQABJX70LwgFDwQqg==","repository":{"url":"git+https://github.com/danzeroum/bpmn.git","type":"git","directory":"packages/audit"},"_npmVersion":"10.9.3","description":"Demonstrable integrity for bpmn-react governance: hash-chain ledger verification (verifyLedger), canonical promotion attestations (attestVersion) and XES export for process mining. Zero runtime dependencies.","directories":{},"sideEffects":false,"_nodeVersion":"22.20.0","dependencies":{"@buildtovalue/core":"1.1.0","@buildtovalue/identity":"1.0.1","@buildtovalue/registry":"1.0.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/audit_1.1.0_1784345296895_0.8358984464790726","host":"s3://npm-registry-packages-npm-production"}},"1.1.1-next.0":{"name":"@buildtovalue/audit","version":"1.1.1-next.0","description":"Demonstrable integrity for bpmn-react governance: hash-chain ledger verification (verifyLedger), canonical promotion attestations (attestVersion) and XES export for process mining. Zero runtime dependencies.","license":"Apache-2.0","type":"module","sideEffects":false,"engines":{"node":">=20"},"main":"./dist/cjs/index.js","module":"./dist/esm/index.js","types":"./dist/esm/index.d.ts","exports":{".":{"types":"./dist/esm/index.d.ts","import":"./dist/esm/index.js","require":"./dist/cjs/index.js"}},"dependencies":{"@buildtovalue/core":"1.2.0-next.0","@buildtovalue/identity":"1.1.0-next.0","@buildtovalue/registry":"1.0.2-next.0"},"keywords":["bpmn","audit","ledger","attestation","xes","process-mining"],"repository":{"type":"git","url":"git+https://github.com/danzeroum/bpmn.git","directory":"packages/audit"},"publishConfig":{"access":"public"},"scripts":{"build":"tsc -p tsconfig.build.json && tsc -p tsconfig.cjs.json && node ../../scripts/write-cjs-package.mjs dist/cjs","typecheck":"tsc -p tsconfig.json --noEmit"},"_id":"@buildtovalue/audit@1.1.1-next.0","bugs":{"url":"https://github.com/danzeroum/bpmn/issues"},"homepage":"https://github.com/danzeroum/bpmn#readme","_integrity":"sha512-BS42t+E+bRdkwC91Hvvqgf+2iz/2/ILTV/YTKnSLH5FIoF1d5HhMky8nYVr8222EdelIw++6hNUAx+ynt1mygA==","_resolved":"/tmp/ce6603a289b5bbf30656035174881336/buildtovalue-audit-1.1.1-next.0.tgz","_from":"file:buildtovalue-audit-1.1.1-next.0.tgz","_nodeVersion":"22.23.1","_npmVersion":"10.9.8","dist":{"integrity":"sha512-BS42t+E+bRdkwC91Hvvqgf+2iz/2/ILTV/YTKnSLH5FIoF1d5HhMky8nYVr8222EdelIw++6hNUAx+ynt1mygA==","shasum":"a37e93a12e887b6ece15b48195f527d44ddde301","tarball":"https://registry.npmjs.org/@buildtovalue/audit/-/audit-1.1.1-next.0.tgz","fileCount":52,"unpackedSize":143275,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIAznbe764U36EVcWXgH8wgR+T0pFc606AMY8njvRIsenAiEAlC0Nznr8q8yqFaKitMgK5Ca8VR2fWM8UZAp6hbW0BrI="}]},"_npmUser":{"name":"danzeroum","email":"danzeroum@gmail.com"},"directories":{},"maintainers":[{"name":"danzeroum","email":"danzeroum@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/audit_1.1.1-next.0_1784725582742_0.06915571600151149"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-18T03:28:16.809Z","modified":"2026-07-22T13:06:23.106Z","1.1.0":"2026-07-18T03:28:17.042Z","1.1.1-next.0":"2026-07-22T13:06:22.939Z"},"bugs":{"url":"https://github.com/danzeroum/bpmn/issues"},"license":"Apache-2.0","homepage":"https://github.com/danzeroum/bpmn#readme","keywords":["bpmn","audit","ledger","attestation","xes","process-mining"],"repository":{"type":"git","url":"git+https://github.com/danzeroum/bpmn.git","directory":"packages/audit"},"description":"Demonstrable integrity for bpmn-react governance: hash-chain ledger verification (verifyLedger), canonical promotion attestations (attestVersion) and XES export for process mining. Zero runtime dependencies.","maintainers":[{"name":"danzeroum","email":"danzeroum@gmail.com"}],"readme":"# @buildtovalue/audit\n\nDemonstrable integrity for bpmn-react governance. Zero runtime dependencies;\nconsumes `@buildtovalue/core` and `@buildtovalue/registry` (read-only).\n\n```ts\nimport { verifyLedger, attestVersion, attestationHash } from '@buildtovalue/audit';\n\n// Re-verify a hash-chained ledger — live object or exported ledger.json:\nconst report = await verifyLedger(ledger);\n// { intact, entries, firstBreak?: { index, expected, actual }, verifiedAt }\n\n// Signable snapshot of a promotion (canonical JSON, hash-addressable):\nconst attestation = await attestVersion(registry, diagramId, versionId, { ledger });\nconst id = await attestationHash(attestation);\n```\n\n- `verifyLedger` recomputes every hash with the exact recipe the core ledger\n  signed (`computeEntryHash`), pointing at the first broken entry — integrity\n  stops being assumed and becomes checkable on demand (third-party CI:\n  `bpmn-react audit ledger.json`).\n- `attestVersion` captures `{ xmlHash, ledgerHeadHash, version, status,\n  effectiveFrom, approvers, attestedAt }`. Hash-based only — no asymmetric\n  signatures/PKI by design (Handoff 4 §3); if a host needs signing, it signs\n  the canonical bytes.\n- `toXES(ledger, { registry, logName })` exports the governance history as\n  IEEE XES 2.0 — one trace per version; ledger entries, registrations and\n  publications become classified events (`concept:name`, `time:timestamp`,\n  `org:resource`, `lifecycle:transition`) — minable in ProM/Celonis/Disco\n  (`bpmn-react export-xes ledger.json -o log.xes`).\n","readmeFilename":"README.md"}