@mcpose/testing

Compliance assertions for @mcpose/audit audit chains.

A small set of assertion functions that verify the tamper-evidence guarantees of an mcpose audit trail — chain integrity, Merkle-proof validity, PII redaction, and delegation handling. Each throws a descriptive Error on failure and returns void on success.

Runner-agnostic. These are plain functions with no test-framework dependency — use them with Vitest, Jest, node:test, or any runner.

Not to be confused with mcpose/testing — the subpath export of the core mcpose package, which provides proxy/middleware mocks (createMockBackendClient, runToolMiddleware). This package (@mcpose/testing) is about asserting the audit chain.

Install

npm install --save-dev @mcpose/testing

mcpose and @mcpose/audit are peer dependencies.

Quick start

import { expect, test } from 'vitest'; // or jest, node:test — your choice
import {
  assertAuditChainIntegrity,
  assertReplayManifestValid,
  assertPiiRedacted,
  assertDelegationHonored,
} from '@mcpose/testing';

// Supplied by your test setup:
//   captureAuditEvents — collects the AuditEvents emitted via AuditOptions.onEvent
//   auditHandle        — the handle returned by createAuditMiddleware()

test('transfer flow produces a verifiable audit trail', async () => {
  const events = await captureAuditEvents(/* run your scenario */);
  const manifest = await auditHandle.closeSession('session-123');

  assertAuditChainIntegrity(events);                 // no insert/delete/reorder
  assertReplayManifestValid(events, manifest!);      // every Merkle proof verifies
  assertPiiRedacted(events[0], [/\d{16}/]);          // no card numbers in plaintext
});

API

| Function | What it checks | |---|---| | assertAuditChainIntegrity(events) | Sequential replayManifestPositions, non-empty chainHashes, no duplicates — detects insertion, deletion, or reordering. | | assertReplayManifestValid(events, manifest) | eventCount matches, and every event's Merkle proof verifies against merkleRoot. | | assertPiiRedacted(event, patterns) | No RegExp pattern matches the plaintext input/output fields. High-tier (encrypted) events pass automatically. | | assertDelegationHonored(chain) | The delegation chain is non-empty and every Identity has a sub. |

Re-exports AuditEvent and ReplayManifest types from @mcpose/audit for convenience.

Documentation

• Full README & API reference
• @mcpose/audit — the package these helpers verify
• CONTEXT.md — canonical domain glossary

License

MIT © Amir Gorji