Function verifyJsonlFile

core/telemetry/integrity.js:150–193

(filePath, options = {})

}

function verifyJsonlFile(filePath, options = {}) {
  const summary = {
    file: filePath,
    exists: fs.existsSync(filePath),
    total: 0,
    verified: 0,
    signed: 0,
    legacy: 0,
    tampered: [],
    invalid: [],
    signatureWarnings: [],
  };

  if (!summary.exists) return summary;

  const lines = fs.readFileSync(filePath, 'utf8').split(/\r?\n/).filter(Boolean);
  for (let index = 0; index < lines.length; index++) {
    summary.total++;
    let record;
    try {
      record = JSON.parse(lines[index]);
    } catch (error) {
      summary.invalid.push({ lineNumber: index + 1, reason: `invalid JSON: ${error.message}` });
      continue;
    }

    const result = verifyRecord(record, options);
    if (result.status === 'verified' || result.status === 'verified-signed') {
      summary.verified++;
      if (result.status === 'verified-signed') summary.signed++;
    } else if (result.status === 'legacy') {
      summary.legacy++;
    } else if (result.status === 'tampered') {
      summary.tampered.push({ lineNumber: index + 1, event_id: record.event_id || null, reason: result.reason });
    } else if (result.status === 'verified-unsigned-key-missing' || result.status === 'signature-unsupported') {
      summary.verified++;
      summary.signatureWarnings.push({ lineNumber: index + 1, event_id: record.event_id || null, reason: result.reason });
    } else {
      summary.invalid.push({ lineNumber: index + 1, reason: result.reason });
    }
  }

  return summary;
}

function collectJsonlFiles(projectRoot) {
  const roots = [