@atcn/verify-cli 1.3.2 → 1.4.1

package/README.md

@@ -16,6 +16,7 @@ Options:
 - **`--previous`:** checks the chain link to the previous revision.
 - **`--operator-keys` and `--require-operator-signature`:** check operator countersignatures.
 - **`--obligation-package`:** cross-checks a closure's linked obligations against their closure packages. You can repeat it.
+- **`--at <ISO-8601 time>`:** checks a provider receipt's `expires_at` against that time instead of now, for example the time you received it.
 - **`--json`:** prints the report as JSON.
 
 Exit codes:

package/dist/cli.js

@@ -5,7 +5,7 @@ import { PublicKeyRecordSchema } from "@atcn/schema";
 import { OperatorKeyRecordSchema, SUBLEDGER_VERIFIER_VERSION, SUPPORTED_SUBLEDGER_SCHEMA_VERSIONS, verifySubledgerDocument, } from "@atcn/subledger";
 const USAGE = `usage: atcn-verify <document.json> --keys <published-keys.json> [--previous <previous-revision.json>]
                    [--operator-keys <operator-keys.json>] [--require-operator-signature]
-                   [--obligation-package <closure-package.json> ...] [--json]
+                   [--obligation-package <closure-package.json> ...] [--at <ISO-8601 time>] [--json]
 
 Verifies offline, without contacting the service:
   - ATCN closure packages (obligations): signatures, key validity, event references,
@@ -14,7 +14,7 @@ Verifies offline, without contacting the service:
     delegation lineage, reversals, allocation sums and versions, roll-up totals,
     provider response signatures, and the version chain.
   - Subledger provider receipts (atcn.subledger.receipt): signature, schema, reversals,
-    totals, field disclosure, and the revision chain.
+    totals, field disclosure, the revision chain, and expiry.
 --keys accepts a JSON array of public key records or the /v1/service/keys response ({"items": [...]}).
 --previous checks the chain link to the prior receipt revision or closure version.
 --operator-keys checks countersignatures made with the operator's own keys
@@ -22,6 +22,7 @@ Verifies offline, without contacting the service:
 --obligation-package (repeatable) cross-checks a task closure's obligation-backed delegations against
   the obligations' closure packages (GET /v1/exports/{obligation_id}): each package must verify, and its
   journal must produce exactly the costs the closure recorded from the clearing network.
+--at checks a provider receipt's expires_at against that time instead of now.
 Subledger schema versions supported: ${SUPPORTED_SUBLEDGER_SCHEMA_VERSIONS.join(", ")} (atcn-verify ${SUBLEDGER_VERIFIER_VERSION}).
 Exit code 0 = valid, 1 = invalid, 2 = usage or input error, 3 = unsupported schema version (upgrade atcn-verify).`;
 function readJson(path) {
@@ -55,6 +56,7 @@ function main() {
                 "operator-keys": { type: "string" },
                 "require-operator-signature": { type: "boolean" },
                 "obligation-package": { type: "string", multiple: true },
+                at: { type: "string" },
                 json: { type: "boolean" },
                 help: { type: "boolean" },
             },
@@ -68,6 +70,11 @@ function main() {
         console.error(USAGE);
         return 2;
     }
+    const at = parsed.values.at;
+    if (at !== undefined && Number.isNaN(Date.parse(at))) {
+        console.error(`--at must be an ISO 8601 time, got ${at}\n\n${USAGE}`);
+        return 2;
+    }
     let report;
     let label;
     try {
@@ -84,6 +91,7 @@ function main() {
                 operatorKeys,
                 requireOperatorSignature: parsed.values["require-operator-signature"],
                 obligationPackages,
+                at: at === undefined ? undefined : new Date(at).toISOString(),
             });
             report = result;
             label = result.document_type === "atcn.subledger.receipt" ? "provider receipt" : "task closure";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atcn/verify-cli",
-  "version": "1.3.2",
+  "version": "1.4.1",
   "description": "Offline verifier for ATCN closure packages, subledger task closures, and provider receipts: atcn-verify <document.json> --keys <keys.json>",
   "license": "Apache-2.0",
   "repository": {
@@ -27,8 +27,8 @@
     "build": "tsc -p tsconfig.build.json"
   },
   "dependencies": {
-    "@atcn/core": "1.3.2",
-    "@atcn/schema": "1.3.2",
-    "@atcn/subledger": "1.3.2"
+    "@atcn/core": "1.4.1",
+    "@atcn/schema": "1.4.1",
+    "@atcn/subledger": "1.4.1"
   }
 }