READMEwch6766/MoonSecureCodec/lib/manifest does not have a README file
#ApprovalGate
A release gate that requires both technical and human approval.
#ApprovalGate::evaluate
fn ApprovalGate::evaluate(self : ApprovalGate, manifest : Manifest, approval : ApprovalRecord?) -> BoolCheck policy and approval evidence together.
#ApprovalGate::strict
Construct a strict gate for a public package release.
#ApprovalRecord
pub(all) struct ApprovalRecord {
reviewer : String
ticket : String
reviewed_root : String
approved_at : String
notes : String
}Approval metadata attached to a release review.
#ApprovalRecord::matches
Validate that an approval refers to the exact manifest root under review.
#ApprovalRecord::to_text
Return a stable serialized approval line for audit logs.
#AuditFinding
pub(all) struct AuditFinding {
code : String
severity : AuditSeverity
path : String
message : String
remediation : String
}A deterministic, machine-readable audit finding.
#AuditReport
pub(all) struct AuditReport {
findings : Array[AuditFinding]
files_checked : Int
total_bytes : Int64
}Result of validating a manifest against structural and supply-chain rules.
#AuditReport::count
Count findings at a given severity.
#AuditReport::decision
Convert a manifest audit report into an explicit release decision.
#AuditReport::error_codes
Return all error codes in insertion order.
#AuditReport::findings
Return the findings in insertion order for integrations that need structured data.
#AuditReport::has_errors
Return true when the report contains a blocking finding.
#AuditReport::is_clean
Return true only when the report has no findings at all.
#AuditReport::to_text
Format the report as stable text suitable for CI logs.
#AuditSeverity
Severity assigned to a manifest audit finding.
#Dependency
pub(all) struct Dependency {
name : String
version : String
license : String
source : String
digest : String
}A dependency record used to audit an SBOM-like manifest.
#DependencyAudit
A dependency audit result with actionable findings.
#DependencyAudit::count
Count dependency findings by severity.
#DependencyAudit::error_dependencies
Return the names of dependencies whose metadata contains blocking errors.
#DependencyAudit::has_errors
Return whether the dependency audit has a blocking finding.
#DependencyAudit::summary
Format dependency audit counts for release evidence.
#EvidenceBundle
pub(all) struct EvidenceBundle {
name : String
version : String
manifest_root : String
records : Array[EvidenceRecord]
bundle_digest : String
}A deterministic evidence bundle bound to one manifest root.
#EvidenceBundle::add
Append one record and refresh the bundle digest.
#EvidenceBundle::binds_to
Return true when the bundle names the exact manifest being reviewed.
#EvidenceBundle::canonical_text
Return the canonical header and record lines used for hashing.
#EvidenceBundle::count_kind
Count records belonging to one evidence kind.
#EvidenceBundle::digest
Return the stored digest of the evidence bundle.
#EvidenceBundle::duplicate_ids
Return duplicate record identifiers in first-seen order.
#EvidenceBundle::find
Find an evidence record by its stable identifier.
#EvidenceBundle::has_kind
Return true when at least one record of the requested kind is present.
#EvidenceBundle::is_complete
Return true only when all standard release evidence is present.
#EvidenceBundle::missing_kinds
fn EvidenceBundle::missing_kinds(self : EvidenceBundle, required : Array[EvidenceKind]) -> Array[EvidenceKind]Return which required evidence kinds are absent.
#EvidenceBundle::new
fn EvidenceBundle::new(name : String, version : String, manifest_root : String, records : Array[EvidenceRecord]) -> EvidenceBundleConstruct a bundle and calculate its digest immediately.
#EvidenceBundle::record_count
Return the number of evidence records in the bundle.
#EvidenceBundle::records
Return the records in insertion order for audit integrations.
#EvidenceBundle::refresh_digest
Recompute and store the SHA-256 digest of the canonical evidence text.
#EvidenceBundle::to_text
Format a compact audit summary suitable for a CI artifact.
#EvidenceBundle::verify
Verify digest, record validity, duplicate IDs, and manifest binding data.
#EvidenceKind
The kind of evidence attached to a release review.
#EvidenceKind::to_text
Return the stable wire name used for an evidence kind.
#EvidenceRecord
pub(all) struct EvidenceRecord {
id : String
kind : EvidenceKind
subject : String
digest : String
observed_at : String
note : String
}A single, content-addressed release evidence record.
#EvidenceRecord::canonical_text
Serialize a record without a trailing newline for deterministic hashing.
#EvidenceRecord::is_valid
Validate fields before an evidence record is included in a bundle.
#EvidenceRecord::new
fn EvidenceRecord::new(id : String, kind : EvidenceKind, subject : String, digest : String, observed_at : String, note : String) -> EvidenceRecordConstruct one evidence record. digest should be a lowercase SHA-256 hex
digest of the referenced artifact, log, or review material.
#FileSnapshot
pub(all) struct FileSnapshot {
path : String
size : Int64
hash_xx64 : UInt64
hash_sha256 : String
}Represents a snapshot of a file or software dependency in the supply chain.
#FileSnapshot::canonical_bytes
Serialize a FileSnapshot to a canonical byte representation for Merkle tree hashing.
#FileSnapshot::from_bytes
Construct a FileSnapshot by inspecting raw file contents.
#LicensePolicy
pub(all) struct LicensePolicy {
allowed_licenses : Array[String]
require_source : Bool
require_digest : Bool
allow_unknown_version : Bool
}License and provenance policy for release dependency audits.
#LicensePolicy::development
Construct a permissive policy for local development while retaining warnings.
#LicensePolicy::strict
Construct a strict policy suitable for a published package.
#Manifest
pub(all) struct Manifest {
name : String
version : String
created_at : String
files : Array[FileSnapshot]
merkle_root : String
}A Software Supply Chain Manifest (SBOM / Snapshot) with embedded Merkle root.
#Manifest::approval_finding
Return a finding when approval metadata is missing or stale.
#Manifest::approval_payload
Return the exact root that an external signer should approve.
#Manifest::audit
Validate a manifest using the default conservative supply-chain policy.
The policy rejects ambiguous paths, duplicate paths, malformed hashes, and
a stale Merkle root. It also warns about empty manifests and suspicious
generated/build files that should normally be excluded from a release.
#Manifest::audit_with_policy
fn Manifest::audit_with_policy(self : Manifest, allowed_extensions : Array[String], max_file_size : Int64) -> AuditReportApply a project-specific allow-list to file extensions and paths.
#Manifest::compute_merkle_tree
Compute the Merkle tree for all files in this manifest.
#Manifest::contains_only_extensions
Return true when a manifest contains no files rejected by a policy.
#Manifest::diff
Compare two manifests (self as old/baseline, other as new) to find added, removed, and modified files.
#Manifest::evidence_bundle
Construct evidence metadata directly from the manifest under review.
#Manifest::files_under
Return all snapshots whose path begins with a normalized directory prefix.
#Manifest::find
Find a snapshot by exact repository-relative path.
#Manifest::has_complete_digests
Return true when every file in the manifest has a valid SHA-256 record.
#Manifest::has_unique_paths
Validate that all snapshot paths are unique without creating a full report.
#Manifest::is_release_ready
Return a compact policy result suitable for a CI exit decision.
#Manifest::is_source_release_ready
Validate a manifest against the default source-package policy.
#Manifest::merge
Merge two manifests while keeping the newer snapshot for duplicate paths.
The operation is deterministic: the left manifest's order is retained and
new paths from the right manifest are appended in their original order.
#Manifest::missing_paths
Return paths that are missing from a required-path list.
#Manifest::new
fn Manifest::new(name : String, version : String, created_at : String, files : Array[FileSnapshot]) -> ManifestConstruct a new supply chain Manifest and automatically compute its Merkle root.
#Manifest::refresh_merkle_root
Recalculate and update the merkle_root property of the manifest.
#Manifest::release_check
Validate a manifest against a release policy and append policy findings.
#Manifest::release_decision
Convert a policy check directly into a release decision.
#Manifest::select_batch
fn Manifest::select_batch(self : Manifest, start : Int, limit : Int) -> Result[ManifestSelection, String]Select a bounded batch for parallel or resumable verification.
#Manifest::select_directory
Select files below a repository-relative directory.
#Manifest::select_large_files
Select files at least as large as a configured threshold.
#Manifest::select_suffixes
Select files whose paths end in one of the supplied suffixes.
#Manifest::statistics
Calculate deterministic statistics without reading the original files again.
#Manifest::submanifest
Return a copy containing only files under the requested directory.
#Manifest::summary
Return a stable human-readable summary for release notes and CI artifacts.
#Manifest::to_json_string
Serialize the Manifest into a human and machine readable JSON string.
#ManifestDiff
pub(all) struct ManifestDiff {
added : Array[FileSnapshot]
removed : Array[FileSnapshot]
modified : Array[FileSnapshot]
}Represents differences discovered between two supply chain manifests.
#ManifestDiff::changed_files
Return a manifest containing only changed files from a diff.
#ManifestDiff::has_changes
Return true if two manifests differ in any file content or path.
#ManifestDiff::removed_paths
Return all paths in a diff that were removed from the newer release.
#ManifestDiff::summary
Format a diff in a stable form suitable for a change review.
#ManifestSelection
pub(all) struct ManifestSelection {
files : Array[FileSnapshot]
total_bytes : Int64
source_manifest_root : String
}A deterministic selection of manifest entries for incremental verification.
#ManifestSelection::at
Return the selected snapshot at an index without exposing the backing array.
#ManifestSelection::contains_path
Return whether a selection contains an exact path.
#ManifestSelection::file_count
Return the number of selected files.
#ManifestSelection::has_complete_digests
Return true when all selected snapshots have canonical digest records.
#ManifestSelection::has_unique_paths
Return whether every selected path is unique.
#ManifestSelection::is_empty
Return true if a selection is empty.
#ManifestSelection::is_zero_bytes
Return whether the selection's byte total is zero.
#ManifestSelection::largest
Return the largest selected file, if any.
#ManifestSelection::merkle_root
Compute a Merkle root over selected canonical file snapshots.
#ManifestSelection::min_max_bytes
Return the inclusive total size range of selected files.
#ManifestSelection::paths
Return selected paths in stable manifest order.
#ManifestSelection::slice
fn ManifestSelection::slice(self : ManifestSelection, start : Int, limit : Int) -> Result[ManifestSelection, String]Return a bounded sub-selection while preserving source-root provenance.
#ManifestSelection::source_is
Verify that the selection still corresponds to the source manifest root.
#ManifestSelection::to_text
Return a stable summary suitable for an incremental build log.
#ManifestSelection::valid_sizes
Return a selection containing only files with non-negative sizes.
#ManifestSelection::with_sha256
Find selected files by their exact SHA-256 digest.
#ManifestStatistics
pub(all) struct ManifestStatistics {
file_count : Int
total_bytes : Int64
largest_path : String
largest_bytes : Int64
sha256_count : Int
generated_count : Int
}Aggregate release statistics derived from a manifest.
#ReleaseDecision
pub(all) struct ReleaseDecision {
ready : Bool
risk_score : Int
errors : Int
warnings : Int
checked_files : Int
checked_bytes : Int64
}Release decision with counts that can be exported to CI or a dashboard.
#ReleaseDecision::exit_code
Return an exit code suitable for a CI shell wrapper.
#ReleaseDecision::is_clean
Return true only when no warnings or errors remain.
#ReleaseDecision::to_text
Return a compact stable line for a build summary.
#ReleasePolicy
Release policy for CI and package publication gates.
#ReleasePolicy::source_package
Construct a conservative release policy for source packages.
#audit_dependencies
Audit dependency metadata independently from file integrity.
#release_evidence_kinds
The conservative evidence set expected for a public release.
#snapshots_equal
Return true when two snapshots have identical cryptographic content.
A production-grade software supply chain security, multi-base codec and Merkle tree verification toolkit in MoonBit.
supply-chainfingerprintmerklecodeccryptosbomhash
0.1.1
Apache-2.0
Updated 6 hours ago
4 downloads