@axorum/mcp 0.0.0-stage → 1.1.0

package/dist/server.js

@@ -0,0 +1,439 @@
+/**
+ * The MCP server: nine tools over the Axorum agent plane. `submit_intent` moves money,
+ * seven reads inform it, and `verify_receipt` checks a signed receipt offline.
+ *
+ * # What this is for
+ *
+ * An MCP-capable agent that connects to this server becomes an Axorum-governed spender,
+ * with no integration code. It gets a tool that moves money — and it gets it *safely*,
+ * because Axorum sits underneath refusing what the policy in force forbids, and recording
+ * the refusal. The guardrail is not a prompt asking the model to behave. It is a ledger
+ * that will not post what it is not allowed to post.
+ *
+ * # The tool descriptions are prompts
+ *
+ * The `description` on each tool is not documentation for a human skimming a table; it is
+ * the text a language model reads when deciding whether to call the tool and what to pass
+ * it. So each one says when to use the tool, what a refusal means, and what *not* to do —
+ * do not retry a refusal, do not follow a `not_primary` redirect. Those sentences are load
+ * bearing. They are the difference between a model that adapts to a policy and one that
+ * hammers it.
+ *
+ * @packageDocumentation
+ */
+import { createRequire } from "node:module";
+import { AxorumClient, DEFAULT_RETRY_POLICY } from "@axorum/client";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { toDraft } from "./convert.js";
+import { currencyWarningSentence, describeRecord, describeUsage, renderError, renderOutcome, renderResult, renderText, } from "./render.js";
+import { getBalanceShape, getObligationsShape, getReceiptShape, getTransactionShape, getUsageShape, submitIntentShape, verifyReceiptShape, } from "./schemas.js";
+import { VerifyRefusal, verifyReceipt } from "./verify.js";
+/**
+ * The server's name and version, as announced to an MCP host.
+ *
+ * The version is read from this package's own manifest rather than restated here. The
+ * literal that used to sit on this line said `0.4.0` while the package was published at
+ * a different version — and this is the number every MCP host is told during the
+ * handshake, so the drift was visible to every client and to nobody maintaining it.
+ * `package.json` sits one level above both `src/` and `dist/`, so the same path resolves
+ * whether this module is running from source under vitest or from the published build.
+ */
+const manifest = createRequire(import.meta.url)("../package.json");
+export const SERVER_INFO = { name: "axorum", version: manifest.version };
+/**
+ * The sentence every tool description repeats, in one place.
+ *
+ * Deliberate, effective redundancy. A model may see only *one* of these descriptions in
+ * the context where it decides to act, so the rule that makes this whole thing safe cannot
+ * live in only one of them.
+ */
+const REFUSAL_CONTRACT = "A refusal is a NORMAL, successful result, not an error: Axorum judged your intent and " +
+    "the policy forbade it, and that refusal is now recorded on the ledger. Read it, adapt, " +
+    "and do not retry the same thing hoping for a different answer — you will get the same " +
+    "answer. Only a genuine malfunction (bad config, unreachable service) comes back as an error.";
+/**
+ * Builds the server, wired to `client`.
+ *
+ * The client is injectable so the integration suite can point a real one at a real booted
+ * service; production passes none and gets one built from `config`.
+ */
+export function createServer(config, client) {
+    const axorum = client ?? buildClient(config);
+    const server = new McpServer(SERVER_INFO, {
+        instructions: "Axorum is a deontic financial-control ledger. Submit an intent and it is permitted or " +
+            "refused under the policy in force, and either way the outcome is recorded. " +
+            REFUSAL_CONTRACT +
+            " Money is denominated in integer MINOR units (cents), written as decimal strings for " +
+            "exactness. You act as a single agent identity, fixed by this server's configuration; " +
+            "there is no way to act as anybody else.",
+    });
+    registerSubmitIntent(server, axorum, config);
+    registerGetActivePolicy(server, axorum);
+    registerGetCurrencies(server, axorum);
+    registerGetTransaction(server, axorum);
+    registerGetObligations(server, axorum);
+    registerGetBalance(server, axorum);
+    registerGetUsage(server, axorum);
+    registerGetReceipt(server, axorum);
+    registerVerifyReceipt(server, config);
+    return server;
+}
+/** Builds the SDK client from the validated configuration. */
+function buildClient(config) {
+    return new AxorumClient(clientOptions(config));
+}
+/**
+ * The SDK client's options for the validated configuration. Pure.
+ *
+ * With failover URLs, `@axorum/client` holds every replica, and a read moves to the next
+ * one on a refused connection, a timeout or a `421`, but only under a retry policy. So reads
+ * get {@link DEFAULT_RETRY_POLICY}, with at least one send per replica. A submission is sent
+ * once, to the replica that last answered, which the policy read `submit_intent` makes
+ * first has just found. Without failover URLs no retry policy is set, as before.
+ */
+export function clientOptions(config) {
+    const replicas = config.failoverUrls.length + 1;
+    // Spread rather than assign: `exactOptionalPropertyTypes` will not let a
+    // present-but-`undefined` key stand in for an absent one.
+    return {
+        baseUrl: config.baseUrl,
+        // The attestation authenticates the party-scoped reads (get_balance, get_transaction,
+        // get_obligations, get_usage); submits carry it inside the envelope. The server acts as
+        // exactly one agent, so one attestation credentials the whole client.
+        attestation: config.attestation,
+        ...(config.timeoutMs === undefined ? {} : { timeoutMs: config.timeoutMs }),
+        ...(replicas === 1
+            ? {}
+            : {
+                failoverUrls: config.failoverUrls,
+                retry: { ...DEFAULT_RETRY_POLICY, maxAttempts: Math.max(DEFAULT_RETRY_POLICY.maxAttempts, replicas) },
+            }),
+    };
+}
+/** `submit_intent` — the tool. Everything else here exists to inform a call to this one. */
+function registerSubmitIntent(server, axorum, config) {
+    server.registerTool("submit_intent", {
+        title: "Submit an intent to the Axorum ledger",
+        description: "Propose a financial action to the Axorum ledger. Use this whenever you want to move " +
+            "money or perform an action the policy governs. The ledger judges your intent against " +
+            "the policy in force and either POSTS it or REFUSES it — and records what it did either " +
+            "way.\n\n" +
+            REFUSAL_CONTRACT +
+            "\n\n" +
+            "The result leads with a plain-language verdict line. Read that line first; it tells you " +
+            "whether money moved. `posted: true` means the entries are on the ledger. `posted: false` " +
+            "means they are not, and the refusal is.\n\n" +
+            "Idempotency: the transaction id is the ledger's idempotency key. If a call fails in a way " +
+            "that leaves you unsure whether it landed (an unconfirmed commit, a dropped connection), " +
+            "re-submitting the SAME intent under the SAME transaction id is safe for at least 24 " +
+            "hours: it replays the stored outcome, marked as a REPLAY, rather than posting twice. It " +
+            "cannot double-spend. A DIFFERENT intent under an id already used is refused " +
+            "(transaction_reused); for a new intent, leave the transaction id out.\n\n" +
+            "Amounts are in integer MINOR units (cents, not dollars) written as decimal strings: " +
+            '{"minor": "50000", "currency": "USD"} is $500.00. Debits and credits must balance.\n\n' +
+            "METERED SPEND IS ONE INTENT, NOT TWO. If this action uses a metered resource — an API " +
+            "call, compute-seconds, tokens — put the usage moves on THIS intent, alongside the " +
+            "entries: `consume_usage` (you used it), `meter_usage` (it has been measured), " +
+            "`bill_usage` (it has been billed for). They commit atomically with the money.\n\n" +
+            "The ledger holds them to one rule: 0 <= billed <= metered <= consumed. You may never " +
+            "meter more than was consumed (that is phantom usage — claiming to have measured more " +
+            "than was used), and you may never bill more than was metered (billing with nothing to " +
+            "back it). Breaking either refuses the ENTIRE intent — the journal entries do not post " +
+            "either. Under-recognition is fine and normal: consuming now and metering later is a " +
+            "lawful state, not something to correct. Use get_usage to see what headroom you have.\n\n" +
+            "The rule is checked against the state the intent would LEAVE BEHIND, not the state it " +
+            "found. So a NEGATIVE move is lawful whenever the chain still holds afterwards and no " +
+            "counter would go below zero — that is how you issue a credit memo or fix an " +
+            "over-metering. And because the moves of one intent are judged together, metering more " +
+            "in the SAME intent raises what you may bill in it.\n\n" +
+            "You do not choose your identity: which agent this server acts as, and what authority it " +
+            "holds, come from the operator's configuration, not from you.",
+        inputSchema: submitIntentShape,
+    }, async (input) => {
+        try {
+            // `submitPinned` reads the policy in force, pins to it, and re-pins if the policy
+            // moved mid-flight — minting the transaction id exactly once, before the first
+            // attempt, so every retry inside it is a replay and never a second posting. Every
+            // attempt carries the id's mint time as `minted_at_ms`, the same one each time.
+            const outcome = await axorum.submitPinned(toDraft(input, config));
+            return renderOutcome(outcome);
+        }
+        catch (error) {
+            // A supplied id may already have been sent by an earlier call, so a refusal that
+            // recorded nothing speaks for this attempt only: see `Operation`.
+            return renderError(error, input.transaction === undefined ? "submit" : "resubmit");
+        }
+    });
+}
+/** `get_active_policy` — what is in force right now. */
+function registerGetActivePolicy(server, axorum) {
+    server.registerTool("get_active_policy", {
+        title: "Read the policy in force",
+        description: "Return the id of the Axorum policy currently in force, or state that none is. Use it to " +
+            "check that the ledger is governed before you propose anything, or to quote the policy id " +
+            "to a human when explaining a refusal.\n\n" +
+            "No policy in force is a true fact about the ledger, not a failure — but note that an " +
+            "intent cannot be submitted while it holds, because there is nothing to judge the intent " +
+            "against. An operator has to activate a policy first.\n\n" +
+            "This tool does not tell you what the policy SAYS, only which one it is. The way to find " +
+            "out whether an action is allowed is to submit it and read the verdict.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            const policy = await axorum.activePolicy();
+            return policy === null
+                ? renderText("No policy is in force on this Axorum ledger. That is a real state, not an error — " +
+                    "but nothing can be submitted while it holds, because an intent is pinned to the " +
+                    "policy that judges it. A human operator has to activate a policy.")
+                : renderResult(`The policy in force is '${policy}'.`, { policy });
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `get_currencies` — the currencies an amount may be denominated in. */
+function registerGetCurrencies(server, axorum) {
+    server.registerTool("get_currencies", {
+        title: "Read the declared currencies",
+        description: "Return every currency the ledger's operator has declared, each with its minor-unit " +
+            "exponent (2 for USD means an amount of 1050 is $10.50; 6 for USDC means 1050 is " +
+            "0.00105 USDC). Use it before you submit an amount in a currency you have not used here " +
+            "before, and to convert a human's major-unit figure into the minor units an intent " +
+            "carries.\n\n" +
+            "An amount in a currency missing from this list is refused before any policy judges it, " +
+            "with cause 'undeclared_currency'. Only a human operator can declare a currency.\n\n" +
+            "A currency with a `warning` is declared, but the policy in force refuses the listed " +
+            "actions in it whatever you submit: every such intent is refused at commit with cause " +
+            "'currency_mismatch'. You cannot change that. Pay in a currency with no warning, or hand " +
+            "the warning's remedy to a human operator.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            const registry = await axorum.currencies();
+            const listed = registry.currencies
+                .map(({ currency, exponent }) => `${currency} (${exponent} minor-unit digits)`)
+                .join(", ");
+            const warned = registry.currencies.flatMap(({ currency, warning }) => warning === undefined ? [] : [currencyWarningSentence(currency, warning)]);
+            return registry.currencies.length === 0
+                ? renderText("No currency is declared on this Axorum ledger, so every amount would be refused. " +
+                    "A human operator has to declare one first.")
+                : renderResult([`The declared currencies are ${listed}.`, ...warned].join(" "), registry);
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `get_transaction` — the stored record, refusals included. */
+function registerGetTransaction(server, axorum) {
+    server.registerTool("get_transaction", {
+        title: "Read a transaction back from the ledger",
+        description: "Read the stored record for a transaction id. Use it to confirm what a submission actually " +
+            "did — above all after a failure that left you unsure whether the intent landed. If the " +
+            "record is there, it landed; if the ledger does not know the id, it did not.\n\n" +
+            "A recorded refusal is a record like any other and appears here with `posted: false`. " +
+            "Finding a refusal is not a failure of this lookup — it is the lookup working, and telling " +
+            "you the ledger refused that intent and remembered doing so.\n\n" +
+            "This is a read. It never posts anything and is always safe to call.",
+        inputSchema: getTransactionShape,
+    }, async ({ transaction }) => {
+        try {
+            const record = await axorum.transaction(transaction);
+            return renderResult(describeRecord(transaction, record), record);
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `get_obligations` — duties a party owes or may perform. */
+function registerGetObligations(server, axorum) {
+    server.registerTool("get_obligations", {
+        title: "Read your agent's open duties",
+        description: "List the open obligations your agent owes or is authorized to perform. Your attestation " +
+            "identifies the party. In Axorum a permitted action can CREATE a duty — a verdict of ObligatedPending " +
+            "means the entries posted and something is now owed. Use this to see what is outstanding, " +
+            "and select its obligation ID in fulfills when proposing the required action.\n\n" +
+            "No open duties comes back as an empty list. That is an answer, not an error.\n\n" +
+            "The attestation scopes the answer to duties your party owes or may perform. You cannot " +
+            "read unrelated duties. The optional `actor` is only an assertion of who you are — pass it " +
+            "to be told when you are wrong. This is a read and is always safe to call.",
+        inputSchema: getObligationsShape,
+    }, async ({ actor }) => {
+        try {
+            const obligations = await axorum.obligations(actor);
+            const who = actor ?? "Your agent";
+            const count = obligations.pending.length;
+            return renderResult(count === 0
+                ? `${who} has no open obligations to owe or perform.`
+                : `${who} has ${count === 1 ? "1 open obligation" : `${count} open obligations`}.`, obligations);
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `get_balance` — an account's net position. */
+function registerGetBalance(server, axorum) {
+    server.registerTool("get_balance", {
+        title: "Read an account's balance",
+        description: "Return an account's net balance in integer MINOR units. Use it to check a position before " +
+            "proposing an intent, or to confirm the effect of one that posted.\n\n" +
+            "The balance is reported as a decimal STRING, not a number: the ledger's minor units are " +
+            "128-bit integers, and a JSON number would silently round a large one. Treat it as exact " +
+            'text. A balance of "50000" in USD is $500.00.\n\n' +
+            "A balance is not a permission. A policy may forbid a spend an account could easily cover, " +
+            "and permit one it cannot. The only way to find out whether an action is allowed is to " +
+            "submit it. This is a read and is always safe to call.\n\n" +
+            "Balance reads are OWNER-SCOPED: the service answers only when the attested party owns " +
+            "the account. Any other account — owned by someone else, opened with no owner, or not " +
+            "existing at all — answers the same 404 unknown_account (fail-closed, and deliberately " +
+            "indistinguishable so an account id is never an existence probe).",
+        inputSchema: getBalanceShape,
+    }, async ({ account }) => {
+        try {
+            const balance = await axorum.balance(account);
+            return renderResult(`Account '${account}' has a net balance of ${balance.balance.toString()} minor units.`, balance);
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `get_usage` — a metered resource's consumed/metered/billed running totals. */
+function registerGetUsage(server, axorum) {
+    server.registerTool("get_usage", {
+        title: "Read a usage balance's running totals",
+        description: "Return the running totals for one usage balance — how much of a metered resource has " +
+            "been CONSUMED, how much of that has been METERED (measured), and how much of that has " +
+            "been BILLED. Use it before submitting usage moves, to see how much room you have.\n\n" +
+            "The ledger holds these three to one rule: 0 <= billed <= metered <= consumed. The " +
+            "result tells you the two headrooms that follow from it — how much consumption you may " +
+            "still meter, and how much metering you may still bill. Those are hard limits: a move " +
+            "past either is refused, and it takes the whole intent down with it, money entries " +
+            "included.\n\n" +
+            "A balance that has not reconciled is NOT a problem to fix. Consuming now and metering " +
+            "later is the normal shape of metered billing; the totals converge as reconciliation " +
+            "catches up. Read the first line of the result — it is the ledger's own plain-English " +
+            "narration of the balance, with exact figures.\n\n" +
+            "The totals are reported as decimal STRINGS, not numbers: consumption has no ceiling, so " +
+            "a busy meter's total can grow past what a JSON number holds exactly. Treat them as " +
+            "exact text.\n\n" +
+            "Usage reads are OWNER-SCOPED. You can only read a balance your own party owns. A " +
+            "balance owned by someone else, one with no owner, and one that does not exist all " +
+            "answer with the same 404 unknown_usage — deliberately identical, so that a usage id can " +
+            "never be used to probe what exists. If you get that error, do not conclude the balance " +
+            "is absent; conclude only that you cannot read it. This is a read and is always safe to " +
+            "call.",
+        inputSchema: getUsageShape,
+    }, async ({ usage }) => {
+        try {
+            const report = await axorum.usage(usage);
+            return renderResult(describeUsage(report), report);
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `get_receipt` — the signed receipt, fetched for offline verification. */
+function registerGetReceipt(server, axorum) {
+    server.registerTool("get_receipt", {
+        title: "Fetch a transaction's signed receipt",
+        description: "Fetch the SIGNED receipt for a transaction your agent proposed: an " +
+            "axorum.evidence.v0 envelope whose base64 payload is the axorum.receipt.v0 facts of " +
+            "the applied record — transaction, tick, verdict, posted, policy (with its hash), the " +
+            "evidence hashes, and the provenance hash. It is signed by the deployment's key, so a " +
+            "third party can verify it OFFLINE with nothing but the deployment's published key " +
+            "list; use verify_receipt to run that check here.\n\n" +
+            "A refusal's receipt is a first-class receipt (verdict ForbiddenRejected, posted " +
+            "false) — signed proof the refusal was recorded.\n\n" +
+            "The receipt is re-minted deterministically from the stored record: fetching twice " +
+            "yields byte-identical envelopes, and both equal the inline `receipt` the original " +
+            "submission's outcome carried. A 503 signing_not_configured / signing_unavailable " +
+            "means the deployment does not sign or its signer is down — the transaction itself " +
+            "is committed and unaffected. This is a read and is always safe to call.",
+        inputSchema: getReceiptShape,
+    }, async ({ transaction }) => {
+        try {
+            const receipt = await axorum.receipt(transaction);
+            return renderResult(`Signed receipt for '${transaction}' from deployment '${receipt.deployment}', ` +
+                `signed by key ${receipt.key_id}. Verify it offline with verify_receipt.`, receipt);
+        }
+        catch (error) {
+            return renderError(error, "read");
+        }
+    });
+}
+/** `verify_receipt` — the offline check, in nothing but node:crypto. */
+function registerVerifyReceipt(server, config) {
+    server.registerTool("verify_receipt", {
+        title: "Verify a signed receipt offline",
+        description: "Verify an axorum.evidence.v0 receipt envelope OFFLINE — pure local cryptography, no " +
+            "call to the ledger. The check is the full spec/evidence-signing.md flow: the key " +
+            "list's own self-signature (so a compromised retired key cannot hide its revocation), " +
+            "the receipt's Ed25519 signature with the kind and deployment bound inside the signed " +
+            "message, key status (a revoked key fails the whole artifact; a retired one verifies " +
+            "with a note), and the receipt's internal contract (justification_hash is the final " +
+            "evidence element).\n\n" +
+            "Pass verification_keys — the envelope from GET /api/verification-keys.json — that " +
+            "you obtained and pinned OUT-OF-BAND for the strongest check; omit it and this server " +
+            "fetches the configured deployment's published list for you (trust-on-first-use). " +
+            "Pass pinned_generation to refuse a rolled-back key list.\n\n" +
+            "A verification FAILURE is an answer, not a malfunction: it means these bytes are " +
+            "not what the deployment signed, or the key is not (or no longer) trustworthy. The " +
+            "refusal message states which, in the spec's own compliance language.",
+        inputSchema: verifyReceiptShape,
+    }, async ({ receipt_envelope, verification_keys, pinned_generation }) => {
+        try {
+            const keys = verification_keys ?? (await fetchPublishedKeys(config.baseUrl));
+            const verified = verifyReceipt(receipt_envelope, keys, pinned_generation);
+            // The §4 retired-key note names the key id, verbatim.
+            const note = verified.keyStatus === "retired"
+                ? ` Note: signed by retired key ${verified.keyId}. The signature verifies; the key has since been rotated out.`
+                : "";
+            return renderResult(`VERIFIED: the receipt is authentic and unaltered under deployment ` +
+                `'${verified.deployment}' — verdict ${String(verified.receipt.verdict)}, ` +
+                `posted ${String(verified.receipt.posted)}, tick ${verified.tickExact}.` +
+                note, verified.receipt);
+        }
+        catch (error) {
+            if (error instanceof KeyListUnavailable) {
+                // Could not obtain the key list — not a verification verdict.
+                return renderError(error, "read");
+            }
+            if (error instanceof VerifyRefusal) {
+                return renderResult(`VERIFICATION FAILED: ${error.message}`, {
+                    verified: false,
+                    reason: error.message,
+                });
+            }
+            return renderError(error, "read");
+        }
+    });
+}
+/** Could not obtain the key list to verify against — an inability to CHECK,
+ * not a verification failure (the receipt might be perfectly valid). Distinct
+ * from `VerifyRefusal` so it is never rendered as "VERIFICATION FAILED". */
+class KeyListUnavailable extends Error {
+}
+/** Fetches the deployment's published key-list envelope (the §3.8 surface). */
+async function fetchPublishedKeys(baseUrl) {
+    const base = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
+    let response;
+    try {
+        response = await fetch(`${base}/api/verification-keys.json`);
+    }
+    catch (error) {
+        throw new KeyListUnavailable(`the deployment's published key list could not be fetched ` +
+            `(${error instanceof Error ? error.message : String(error)}) — supply ` +
+            `verification_keys obtained out-of-band`);
+    }
+    if (!response.ok) {
+        throw new KeyListUnavailable(`the deployment's published key list could not be fetched ` +
+            `(HTTP ${response.status}) — supply verification_keys obtained out-of-band`);
+    }
+    return (await response.json());
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAA4B,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3D;;;;;;;;;GASG;AACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAwB,CAAC;AAE1F,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAW,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,gBAAgB,GACpB,wFAAwF;IACxF,yFAAyF;IACzF,wFAAwF;IACxF,8FAA8F,CAAC;AAEjG;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,MAAqB;IACtE,MAAM,MAAM,GAAG,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,EAAE;QACxC,YAAY,EACV,wFAAwF;YACxF,6EAA6E;YAC7E,gBAAgB;YAChB,uFAAuF;YACvF,uFAAuF;YACvF,yCAAyC;KAC5C,CAAC,CAAC;IAEH,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,SAAS,WAAW,CAAC,MAAoB;IACvC,OAAO,IAAI,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,yEAAyE;IACzE,0DAA0D;IAC1D,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,sFAAsF;QACtF,wFAAwF;QACxF,sEAAsE;QACtE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1E,GAAG,CAAC,QAAQ,KAAK,CAAC;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,KAAK,EAAE,EAAE,GAAG,oBAAoB,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE;aACtG,CAAC;KACP,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,oBAAoB,CAC3B,MAAiB,EACjB,MAAoB,EACpB,MAAoB;IAEpB,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EACT,sFAAsF;YACtF,uFAAuF;YACvF,yFAAyF;YACzF,UAAU;YACV,gBAAgB;YAChB,MAAM;YACN,0FAA0F;YAC1F,2FAA2F;YAC3F,6CAA6C;YAC7C,4FAA4F;YAC5F,0FAA0F;YAC1F,sFAAsF;YACtF,0FAA0F;YAC1F,8EAA8E;YAC9E,2EAA2E;YAC3E,sFAAsF;YACtF,wFAAwF;YACxF,wFAAwF;YACxF,oFAAoF;YACpF,gFAAgF;YAChF,mFAAmF;YACnF,uFAAuF;YACvF,uFAAuF;YACvF,wFAAwF;YACxF,wFAAwF;YACxF,sFAAsF;YACtF,0FAA0F;YAC1F,wFAAwF;YACxF,uFAAuF;YACvF,8EAA8E;YAC9E,wFAAwF;YACxF,wDAAwD;YACxD,0FAA0F;YAC1F,8DAA8D;QAChE,WAAW,EAAE,iBAAiB;KAC/B,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,IAAI,CAAC;YACH,kFAAkF;YAClF,+EAA+E;YAC/E,kFAAkF;YAClF,gFAAgF;YAChF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iFAAiF;YACjF,kEAAkE;YAClE,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,SAAS,uBAAuB,CAAC,MAAiB,EAAE,MAAoB;IACtE,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,0FAA0F;YAC1F,2FAA2F;YAC3F,2CAA2C;YAC3C,uFAAuF;YACvF,0FAA0F;YAC1F,0DAA0D;YAC1D,0FAA0F;YAC1F,wEAAwE;QAC1E,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3C,OAAO,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,UAAU,CACR,oFAAoF;oBAClF,kFAAkF;oBAClF,mEAAmE,CACtE;gBACH,CAAC,CAAC,YAAY,CAAC,2BAA2B,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,qBAAqB,CAAC,MAAiB,EAAE,MAAoB;IACpE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,qFAAqF;YACrF,kFAAkF;YAClF,yFAAyF;YACzF,oFAAoF;YACpF,cAAc;YACd,yFAAyF;YACzF,qFAAqF;YACrF,sFAAsF;YACtF,uFAAuF;YACvF,0FAA0F;YAC1F,2CAA2C;QAC7C,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU;iBAC/B,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,KAAK,QAAQ,qBAAqB,CAAC;iBAC9E,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CACnE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAC1E,CAAC;YACF,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBACrC,CAAC,CAAC,UAAU,CACR,mFAAmF;oBACjF,4CAA4C,CAC/C;gBACH,CAAC,CAAC,YAAY,CACV,CAAC,+BAA+B,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAC/D,QAAQ,CACT,CAAC;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,sBAAsB,CAAC,MAAiB,EAAE,MAAoB;IACrE,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,yCAAyC;QAChD,WAAW,EACT,4FAA4F;YAC5F,yFAAyF;YACzF,iFAAiF;YACjF,uFAAuF;YACvF,4FAA4F;YAC5F,iEAAiE;YACjE,qEAAqE;QACvE,WAAW,EAAE,mBAAmB;KACjC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACrD,OAAO,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,sBAAsB,CAAC,MAAiB,EAAE,MAAoB;IACrE,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,0FAA0F;YAC1F,uGAAuG;YACvG,2FAA2F;YAC3F,kFAAkF;YAClF,kFAAkF;YAClF,yFAAyF;YACzF,4FAA4F;YAC5F,2EAA2E;QAC7E,WAAW,EAAE,mBAAmB;KACjC,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,KAAK,IAAI,YAAY,CAAC;YAClC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;YACzC,OAAO,YAAY,CACjB,KAAK,KAAK,CAAC;gBACT,CAAC,CAAC,GAAG,GAAG,6CAA6C;gBACrD,CAAC,CAAC,GAAG,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,mBAAmB,GAAG,EACpF,WAAW,CACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,SAAS,kBAAkB,CAAC,MAAiB,EAAE,MAAoB;IACjE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,4FAA4F;YAC5F,uEAAuE;YACvE,0FAA0F;YAC1F,0FAA0F;YAC1F,mDAAmD;YACnD,4FAA4F;YAC5F,wFAAwF;YACxF,2DAA2D;YAC3D,wFAAwF;YACxF,uFAAuF;YACvF,wFAAwF;YACxF,kEAAkE;QACpE,WAAW,EAAE,eAAe;KAC7B,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,YAAY,CACjB,YAAY,OAAO,0BAA0B,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,EACtF,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,MAAiB,EAAE,MAAoB;IAC/D,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EACT,uFAAuF;YACvF,wFAAwF;YACxF,uFAAuF;YACvF,oFAAoF;YACpF,wFAAwF;YACxF,uFAAuF;YACvF,oFAAoF;YACpF,eAAe;YACf,wFAAwF;YACxF,sFAAsF;YACtF,uFAAuF;YACvF,mDAAmD;YACnD,0FAA0F;YAC1F,qFAAqF;YACrF,iBAAiB;YACjB,mFAAmF;YACnF,oFAAoF;YACpF,0FAA0F;YAC1F,yFAAyF;YACzF,yFAAyF;YACzF,OAAO;QACT,WAAW,EAAE,aAAa;KAC3B,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,kBAAkB,CAAC,MAAiB,EAAE,MAAoB;IACjE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,qEAAqE;YACrE,qFAAqF;YACrF,uFAAuF;YACvF,uFAAuF;YACvF,oFAAoF;YACpF,sDAAsD;YACtD,kFAAkF;YAClF,qDAAqD;YACrD,oFAAoF;YACpF,oFAAoF;YACpF,mFAAmF;YACnF,oFAAoF;YACpF,yEAAyE;QAC3E,WAAW,EAAE,eAAe;KAC7B,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAClD,OAAO,YAAY,CACjB,uBAAuB,WAAW,sBAAsB,OAAO,CAAC,UAAU,KAAK;gBAC7E,iBAAiB,OAAO,CAAC,MAAM,0CAA0C,EAC3E,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,qBAAqB,CAAC,MAAiB,EAAE,MAAoB;IACpE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,sFAAsF;YACtF,mFAAmF;YACnF,uFAAuF;YACvF,uFAAuF;YACvF,sFAAsF;YACtF,qFAAqF;YACrF,wBAAwB;YACxB,oFAAoF;YACpF,uFAAuF;YACvF,mFAAmF;YACnF,8DAA8D;YAC9D,mFAAmF;YACnF,oFAAoF;YACpF,sEAAsE;QACxE,WAAW,EAAE,kBAAkB;KAChC,EACD,KAAK,EAAE,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GACR,iBAAiB,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAC1E,sDAAsD;YACtD,MAAM,IAAI,GACR,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAC9B,CAAC,CAAC,gCAAgC,QAAQ,CAAC,KAAK,+DAA+D;gBAC/G,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,YAAY,CACjB,oEAAoE;gBAClE,IAAI,QAAQ,CAAC,UAAU,eAAe,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;gBAC1E,UAAU,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,QAAQ,CAAC,SAAS,GAAG;gBACxE,IAAI,EACN,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,8DAA8D;gBAC9D,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;gBACnC,OAAO,YAAY,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,EAAE;oBAC3D,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,KAAK,CAAC,OAAO;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;4EAE4E;AAC5E,MAAM,kBAAmB,SAAQ,KAAK;CAAG;AAEzC,+EAA+E;AAC/E,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAC1B,2DAA2D;YACzD,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;YACvE,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,kBAAkB,CAC1B,2DAA2D;YACzD,SAAS,QAAQ,CAAC,MAAM,mDAAmD,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;AAC5C,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Offline verification of `axorum.evidence.v0` envelopes — the `verify_receipt`
+ * tool's engine, in nothing but `node:crypto`.
+ *
+ * This is a deliberate second implementation of the verifier the Rust
+ * `axorum-evidence` crate ships, built from the committed JSON Schemas
+ * (`spec/schemas/`) and `spec/evidence-signing.md` §3.1/§4 alone. It shares no
+ * code with the service: an envelope that verifies here has been checked the
+ * way a stranger's stack would check it. The refusal sentences are the spec's
+ * §4 catalogue, verbatim.
+ *
+ * The signed message is:
+ *
+ * ```text
+ * "axorum.evidence.v0" || 0x0A || kind || 0x0A || deployment || 0x0A || SHA-256(payload)
+ * ```
+ *
+ * with the deployment and kind *inside* the signed bytes — no artifact
+ * transplants across deployments, no signature replays across kinds.
+ *
+ * @packageDocumentation
+ */
+/** The envelope format version this verifier understands. */
+export declare const ENVELOPE_VERSION = "axorum.evidence.v0";
+/** The key-list format version this verifier understands. */
+export declare const KEYS_VERSION = "axorum.keys.v0";
+/** The receipt payload version this verifier understands. */
+export declare const RECEIPT_VERSION = "axorum.receipt.v0";
+/** The closed six-kind artifact vocabulary (`spec/evidence-signing.md` §3.1). */
+export declare const ARTIFACT_KINDS: readonly ["receipt", "evidence-package", "lake-manifest", "lake-head", "oplog-head", "key-list"];
+/** A wire envelope, structurally validated before any cryptography runs. */
+export interface WireEnvelope {
+    version: string;
+    kind: string;
+    deployment: string;
+    key_id: string;
+    payload: string;
+    signature: string;
+}
+/** One key-list entry. */
+interface WireKeyEntry {
+    key_id: string;
+    public_key: string;
+    public_key_pem: string;
+    status: "active" | "retired" | "revoked";
+}
+/** The `axorum.keys.v0` list. */
+interface WireKeyList {
+    version: string;
+    deployment: string;
+    generation: number;
+    keys: WireKeyEntry[];
+}
+/** A verification refusal, carrying the §4 sentence as its message. */
+export declare class VerifyRefusal extends Error {
+}
+/** Reads and structurally checks a wire envelope from parsed JSON. */
+export declare function readEnvelope(value: unknown): WireEnvelope;
+/** The §3.1 signed message for `(kind, deployment, payload)`. */
+export declare function signedMessage(kind: string, deployment: string, payload: Buffer): Buffer;
+/**
+ * Verifies a signed key-list envelope (`kind: key-list`, self-signed by its
+ * own active key) and returns the verified list. `pinnedGeneration` refuses a
+ * rolled-back list, exactly as the spec's §4 row words it.
+ */
+export declare function verifyKeyList(value: unknown, pinnedGeneration?: number): WireKeyList;
+/** What a green check yields: the artifact's identity plus the payload bytes. */
+export interface VerifiedEnvelope {
+    kind: string;
+    deployment: string;
+    keyId: string;
+    /** `active` or `retired` — a `retired` pass carries the informational note. */
+    keyStatus: "active" | "retired";
+    payload: Buffer;
+}
+/**
+ * Verifies one envelope against a **verified** key list, with the spec's §4
+ * refusal sentences: unknown key, revoked key, deployment mismatch, and the
+ * signature itself.
+ */
+export declare function verifyEnvelope(value: unknown, list: WireKeyList): VerifiedEnvelope;
+/** The verified receipt facts, plus how the check concluded. */
+export interface VerifiedReceipt {
+    /** The deployment whose ledger judged — and signed — the transaction. */
+    deployment: string;
+    /** `active`, or `retired` (verifies, with the §4 informational note). */
+    keyStatus: "active" | "retired";
+    /** The signing key's id (for the §4 retired-key note, which names it). */
+    keyId: string;
+    /** The parsed `axorum.receipt.v0` payload, exactly as signed. */
+    receipt: Record<string, unknown>;
+    /**
+     * The `tick` as its exact decimal string — `tick` is an unsigned 64-bit
+     * integer (`spec/schemas/axorum.receipt.v0.schema.json`), so a busy ledger's
+     * value can exceed what `JSON.parse` holds without rounding. Read from the
+     * raw signed bytes, so it is always exact; the `receipt.tick` field may be a
+     * rounded `number` above 2^53.
+     */
+    tickExact: string;
+}
+/**
+ * The whole `axorum verify` flow for one receipt, offline: verify the key
+ * list (self-signed, generation-pinned), verify the receipt envelope against
+ * it, parse and cross-check the payload. Throws {@link VerifyRefusal} with
+ * the spec's §4 sentence on any failure.
+ */
+export declare function verifyReceipt(receiptEnvelope: unknown, keyListEnvelope: unknown, pinnedGeneration?: number): VerifiedReceipt;
+export {};
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAErD,6DAA6D;AAC7D,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAE7C,6DAA6D;AAC7D,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,iFAAiF;AACjF,eAAO,MAAM,cAAc,kGAOjB,CAAC;AAKX,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0BAA0B;AAC1B,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1C;AAED,iCAAiC;AACjC,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,uEAAuE;AACvE,qBAAa,aAAc,SAAQ,KAAK;CAAG;AAuB3C,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CA0BzD;AAWD,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAQvF;AAkFD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,WAAW,CAuCpF;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAqClF;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,eAAe,EAAE,OAAO,EACxB,eAAe,EAAE,OAAO,EACxB,gBAAgB,CAAC,EAAE,MAAM,GACxB,eAAe,CAkCjB"}