@forestrie/forestrie-cli 0.8.0

package/dist/decode-receipt.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Public library entry: the pure COSE-receipt decoder and renderer that
+ * backs `forestrie decode-receipt`.
+ *
+ * Imported as `@forestrie/forestrie-cli/decode-receipt`. Everything here
+ * is runtime-neutral — no `node:*`, no `Bun.*`, no I/O, no network. It
+ * takes receipt bytes and returns a display model (plus a text
+ * rendering of it), so it runs unchanged in Node, Bun, Deno, a worker
+ * or a browser. The only dependencies are `@forestrie/receipt-verify`
+ * (the load-bearing receipt parse) and `@forestrie/encoding`.
+ *
+ * Decoding is display only: it does NOT verify signatures or inclusion.
+ * That is `forestrie verify` / `@forestrie/receipt-verify`.
+ */
+export { DecodeReceiptError, bytesToHex, decodeReceipt, toJson, type DecodeReceiptStage, type DecodedClaim, type DecodedHeaderEntry, type DecodedReceipt, type Json, } from "./lib/decode-receipt-decode.js";
+export { renderReceipt } from "./lib/decode-receipt-render.js";
+export { ALG_NAMES, COSE_KEY_PARAM_NAMES, COSE_SIGN1_TAG, CWT_CLAIMS_LABEL, CWT_CLAIM_NAMES, DELEGATION_CERT_LABEL, HEADER_LABELS, PROOFS_CONSISTENCY_KEY, PROOFS_INCLUSION_KEY, PROOF_KIND_NAMES, SEAL_PEAK_RECEIPTS_LABEL, VDS_LABEL, VDS_NAMES, VERIFIABLE_PROOFS_LABEL, headerLabelInfo, type LabelInfo, } from "./lib/decode-receipt-labels.js";
+export { CborDecodeError, decodeCborMap, decodeCborValue, isCborTagged, type CborTagged, type CborValue, } from "./lib/decode-receipt-cbor.js";
+//# sourceMappingURL=decode-receipt.d.ts.map

package/dist/decode-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-receipt.d.ts","sourceRoot":"","sources":["../src/decode-receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,MAAM,EACN,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,IAAI,GACV,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,SAAS,EACT,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,8BAA8B,CAAC"}

package/dist/decode-receipt.js

@@ -0,0 +1,19 @@
+/**
+ * Public library entry: the pure COSE-receipt decoder and renderer that
+ * backs `forestrie decode-receipt`.
+ *
+ * Imported as `@forestrie/forestrie-cli/decode-receipt`. Everything here
+ * is runtime-neutral — no `node:*`, no `Bun.*`, no I/O, no network. It
+ * takes receipt bytes and returns a display model (plus a text
+ * rendering of it), so it runs unchanged in Node, Bun, Deno, a worker
+ * or a browser. The only dependencies are `@forestrie/receipt-verify`
+ * (the load-bearing receipt parse) and `@forestrie/encoding`.
+ *
+ * Decoding is display only: it does NOT verify signatures or inclusion.
+ * That is `forestrie verify` / `@forestrie/receipt-verify`.
+ */
+export { DecodeReceiptError, bytesToHex, decodeReceipt, toJson, } from "./lib/decode-receipt-decode.js";
+export { renderReceipt } from "./lib/decode-receipt-render.js";
+export { ALG_NAMES, COSE_KEY_PARAM_NAMES, COSE_SIGN1_TAG, CWT_CLAIMS_LABEL, CWT_CLAIM_NAMES, DELEGATION_CERT_LABEL, HEADER_LABELS, PROOFS_CONSISTENCY_KEY, PROOFS_INCLUSION_KEY, PROOF_KIND_NAMES, SEAL_PEAK_RECEIPTS_LABEL, VDS_LABEL, VDS_NAMES, VERIFIABLE_PROOFS_LABEL, headerLabelInfo, } from "./lib/decode-receipt-labels.js";
+export { CborDecodeError, decodeCborMap, decodeCborValue, isCborTagged, } from "./lib/decode-receipt-cbor.js";
+//# sourceMappingURL=decode-receipt.js.map

package/dist/decode-receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-receipt.js","sourceRoot":"","sources":["../src/decode-receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,MAAM,GAMP,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,SAAS,EACT,SAAS,EACT,uBAAuB,EACvB,eAAe,GAEhB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,GAGb,MAAM,8BAA8B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Package entry for `@forestrie/forestrie-cli`.
+ *
+ * This package is primarily a CLI (`forestrie`). Its one supported
+ * library surface is the pure receipt decoder/renderer, re-exported
+ * here and also reachable directly as
+ * `@forestrie/forestrie-cli/decode-receipt` — prefer the subpath, it is
+ * the stable name and will not grow unrelated exports.
+ */
+export * from "./decode-receipt.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * Package entry for `@forestrie/forestrie-cli`.
+ *
+ * This package is primarily a CLI (`forestrie`). Its one supported
+ * library surface is the pure receipt decoder/renderer, re-exported
+ * here and also reachable directly as
+ * `@forestrie/forestrie-cli/decode-receipt` — prefer the subpath, it is
+ * the stable name and will not grow unrelated exports.
+ */
+export * from "./decode-receipt.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,qBAAqB,CAAC"}

package/dist/lib/decode-receipt-cbor.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Minimal CBOR reader for `forestrie decode-receipt` display (FOR-346).
+ *
+ * Only used where the published helpers stop: `parseReceipt`
+ * (`@forestrie/receipt-verify`) returns the COSE protected header as an
+ * opaque bstr, and this command's whole job is to show what is inside
+ * it (alg, kid, vds, CWT claims). Display-only — no re-encoding, no
+ * crypto. Definite lengths only: the forestrie encoders (go-cose,
+ * cbor-x, `@forestrie/encoding` canonical emit) never produce
+ * indefinite-length items.
+ */
+export declare class CborDecodeError extends Error {
+}
+/** A decoded CBOR tag wrapper. */
+export type CborTagged = {
+    tag: number;
+    value: CborValue;
+};
+export type CborValue = number | bigint | string | boolean | null | undefined | Uint8Array | CborValue[] | Map<CborValue, CborValue> | CborTagged;
+/** True when `value` is a `CborTagged` wrapper (not a Map/array/bytes). */
+export declare function isCborTagged(value: unknown): value is CborTagged;
+/** Decode a single CBOR item; trailing bytes are an error. */
+export declare function decodeCborValue(bytes: Uint8Array): CborValue;
+/** Decode CBOR bytes that must contain a map (e.g. a COSE protected header). */
+export declare function decodeCborMap(bytes: Uint8Array): Map<CborValue, CborValue>;
+//# sourceMappingURL=decode-receipt-cbor.d.ts.map

package/dist/lib/decode-receipt-cbor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-receipt-cbor.d.ts","sourceRoot":"","sources":["../../src/lib/decode-receipt-cbor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,qBAAa,eAAgB,SAAQ,KAAK;CAAG;AAE7C,kCAAkC;AAClC,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAE3D,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,GACT,UAAU,GACV,SAAS,EAAE,GACX,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,GACzB,UAAU,CAAC;AAEf,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAUhE;AAyID,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAa5D;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAO1E"}

package/dist/lib/decode-receipt-cbor.js

@@ -0,0 +1,182 @@
+/**
+ * Minimal CBOR reader for `forestrie decode-receipt` display (FOR-346).
+ *
+ * Only used where the published helpers stop: `parseReceipt`
+ * (`@forestrie/receipt-verify`) returns the COSE protected header as an
+ * opaque bstr, and this command's whole job is to show what is inside
+ * it (alg, kid, vds, CWT claims). Display-only — no re-encoding, no
+ * crypto. Definite lengths only: the forestrie encoders (go-cose,
+ * cbor-x, `@forestrie/encoding` canonical emit) never produce
+ * indefinite-length items.
+ */
+export class CborDecodeError extends Error {
+}
+/** True when `value` is a `CborTagged` wrapper (not a Map/array/bytes). */
+export function isCborTagged(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        !(value instanceof Map) &&
+        !(value instanceof Uint8Array) &&
+        !Array.isArray(value) &&
+        typeof value.tag === "number" &&
+        "value" in value);
+}
+function need(c, n) {
+    if (c.offset + n > c.bytes.length) {
+        throw new CborDecodeError("unexpected end of CBOR data");
+    }
+}
+function readArgument(c, info) {
+    if (info < 24)
+        return info;
+    if (info === 24) {
+        need(c, 1);
+        return c.bytes[c.offset++];
+    }
+    if (info === 25) {
+        need(c, 2);
+        const v = c.view.getUint16(c.offset);
+        c.offset += 2;
+        return v;
+    }
+    if (info === 26) {
+        need(c, 4);
+        const v = c.view.getUint32(c.offset);
+        c.offset += 4;
+        return v;
+    }
+    if (info === 27) {
+        need(c, 8);
+        const v = c.view.getBigUint64(c.offset);
+        c.offset += 8;
+        return v <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(v) : v;
+    }
+    if (info === 31) {
+        throw new CborDecodeError("indefinite-length CBOR items are not supported");
+    }
+    throw new CborDecodeError(`reserved CBOR additional info ${info}`);
+}
+function toLength(arg, what) {
+    if (typeof arg === "bigint" || !Number.isSafeInteger(arg)) {
+        throw new CborDecodeError(`${what} length too large`);
+    }
+    return arg;
+}
+function readFloat(c, info) {
+    if (info === 25) {
+        // IEEE 754 half precision (RFC 8949 appendix D).
+        need(c, 2);
+        const half = c.view.getUint16(c.offset);
+        c.offset += 2;
+        const sign = half & 0x8000 ? -1 : 1;
+        const exp = (half >> 10) & 0x1f;
+        const frac = half & 0x03ff;
+        if (exp === 0)
+            return sign * frac * 2 ** -24;
+        if (exp === 31)
+            return frac ? Number.NaN : sign * Number.POSITIVE_INFINITY;
+        return sign * (1024 + frac) * 2 ** (exp - 25);
+    }
+    if (info === 26) {
+        need(c, 4);
+        const v = c.view.getFloat32(c.offset);
+        c.offset += 4;
+        return v;
+    }
+    need(c, 8);
+    const v = c.view.getFloat64(c.offset);
+    c.offset += 8;
+    return v;
+}
+function readItem(c, depth) {
+    if (depth > 64)
+        throw new CborDecodeError("CBOR nesting too deep");
+    need(c, 1);
+    const initial = c.bytes[c.offset++];
+    const major = initial >> 5;
+    const info = initial & 0x1f;
+    switch (major) {
+        case 0:
+            return readArgument(c, info);
+        case 1: {
+            const arg = readArgument(c, info);
+            return typeof arg === "bigint" ? -1n - arg : -1 - arg;
+        }
+        case 2: {
+            const len = toLength(readArgument(c, info), "byte string");
+            need(c, len);
+            const out = c.bytes.slice(c.offset, c.offset + len);
+            c.offset += len;
+            return out;
+        }
+        case 3: {
+            const len = toLength(readArgument(c, info), "text string");
+            need(c, len);
+            const out = new TextDecoder("utf-8", { fatal: true }).decode(c.bytes.subarray(c.offset, c.offset + len));
+            c.offset += len;
+            return out;
+        }
+        case 4: {
+            const len = toLength(readArgument(c, info), "array");
+            const out = [];
+            for (let i = 0; i < len; i += 1)
+                out.push(readItem(c, depth + 1));
+            return out;
+        }
+        case 5: {
+            const len = toLength(readArgument(c, info), "map");
+            const out = new Map();
+            for (let i = 0; i < len; i += 1) {
+                const key = readItem(c, depth + 1);
+                out.set(key, readItem(c, depth + 1));
+            }
+            return out;
+        }
+        case 6: {
+            const tag = toLength(readArgument(c, info), "tag");
+            return { tag, value: readItem(c, depth + 1) };
+        }
+        default: {
+            // major 7: simple values and floats
+            if (info === 20)
+                return false;
+            if (info === 21)
+                return true;
+            if (info === 22)
+                return null;
+            if (info === 23)
+                return undefined;
+            if (info === 24) {
+                need(c, 1);
+                return c.bytes[c.offset++];
+            }
+            if (info >= 25 && info <= 27)
+                return readFloat(c, info);
+            throw new CborDecodeError(`unsupported CBOR simple value (info ${info})`);
+        }
+    }
+}
+/** Decode a single CBOR item; trailing bytes are an error. */
+export function decodeCborValue(bytes) {
+    const cursor = {
+        bytes,
+        view: new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength),
+        offset: 0,
+    };
+    const value = readItem(cursor, 0);
+    if (cursor.offset !== bytes.length) {
+        throw new CborDecodeError(`trailing bytes after CBOR item (${bytes.length - cursor.offset} left)`);
+    }
+    return value;
+}
+/** Decode CBOR bytes that must contain a map (e.g. a COSE protected header). */
+export function decodeCborMap(bytes) {
+    if (bytes.length === 0)
+        return new Map();
+    const value = decodeCborValue(bytes);
+    if (!(value instanceof Map)) {
+        throw new CborDecodeError("expected a CBOR map");
+    }
+    return value;
+}
+//# sourceMappingURL=decode-receipt-cbor.js.map

package/dist/lib/decode-receipt-cbor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-receipt-cbor.js","sourceRoot":"","sources":["../../src/lib/decode-receipt-cbor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAiB7C,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;QACvB,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,OAAQ,KAAoB,CAAC,GAAG,KAAK,QAAQ;QAC7C,OAAO,IAAI,KAAK,CACjB,CAAC;AACJ,CAAC;AAID,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS,EAAE,IAAY;IAC3C,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACX,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAE,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACX,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACX,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACX,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB,EAAE,IAAY;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,IAAY;IACxC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,iDAAiD;QACjD,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACX,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC3E,OAAO,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACX,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACX,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACd,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,KAAa;IACxC,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACX,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC;IAE5B,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,CAAC;YACJ,OAAO,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YACpD,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;YAChB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAC3C,CAAC;YACF,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;YAChB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,GAAG,GAAgB,EAAE,CAAC;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;YAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,oCAAoC;YACpC,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC9B,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC7B,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC7B,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,SAAS,CAAC;YAClC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACX,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAE,CAAC;YAC9B,CAAC;YACD,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE;gBAAE,OAAO,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACxD,MAAM,IAAI,eAAe,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,MAAM,MAAM,GAAW;QACrB,KAAK;QACL,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;QACpE,MAAM,EAAE,CAAC;KACV,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,mCAAmC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,QAAQ,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/decode-receipt-decode.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Structural decode for `forestrie decode-receipt` (FOR-346).
+ *
+ * `parseReceipt` (`@forestrie/receipt-verify`) does the load-bearing
+ * receipt parse (COSE_Sign1 shape, tag-18 tolerance, payload rules,
+ * header 396 inclusion proof). This module turns that result into a
+ * display model: protected header contents (which `parseReceipt` leaves
+ * as opaque bstr), named labels, and JSON-safe values. Unknown labels
+ * are carried through raw — never dropped.
+ */
+/** Parse stage names surfaced in structured errors. */
+export type DecodeReceiptStage = "input" | "envelope" | "cose-sign1" | "payload" | "protected-header" | "inclusion-proof";
+/** Structured decode failure: which parse stage rejected the input. */
+export declare class DecodeReceiptError extends Error {
+    readonly stage: DecodeReceiptStage;
+    constructor(stage: DecodeReceiptStage, message: string);
+}
+/** JSON-safe value: bytes become `h'…'` diagnostic-notation strings. */
+export type Json = string | number | boolean | null | Json[] | {
+    [key: string]: Json;
+};
+export type DecodedHeaderEntry = {
+    /** Raw CBOR label (int, or string for text keys). */
+    label: number | string;
+    /** Registry name, or null when the label is unknown (shown raw). */
+    name: string | null;
+    /** Registry provenance note, when known. */
+    note: string | null;
+    /** Full-fidelity value (bytes as h'…'). */
+    value: Json;
+};
+export type DecodedClaim = {
+    key: number | string;
+    name: string | null;
+    value: Json;
+};
+export type DecodedReceipt = {
+    /** Total receipt size in bytes. */
+    byteLength: number;
+    /** Outer CBOR tag (18 for COSE_Sign1) or null when untagged. */
+    tag: number | null;
+    protected: {
+        byteLength: number;
+        alg: {
+            value: number;
+            name: string | null;
+        } | null;
+        kid: {
+            hex: string;
+            byteLength: number;
+        } | {
+            text: string;
+        } | null;
+        vds: {
+            value: number;
+            name: string | null;
+        } | null;
+        /** CWT claims (header 15), incl. any cnf / ephemeral key material. */
+        cwtClaims: DecodedClaim[] | null;
+        entries: DecodedHeaderEntry[];
+    };
+    unprotected: {
+        entries: DecodedHeaderEntry[];
+        delegation: {
+            byteLength: number;
+            nestedCoseSign1: boolean;
+        } | null;
+        /** Present when this is a checkpoint carrying pre-signed peak receipts. */
+        peakReceipts: {
+            count: number;
+        } | null;
+    };
+    payload: {
+        detached: true;
+    } | {
+        detached: false;
+        byteLength: number;
+        hex: string;
+    };
+    signature: {
+        byteLength: number;
+        hex: string;
+    };
+    /** MMR inclusion proof summary (header 396, key -1). */
+    inclusion: {
+        mmrIndex: string;
+        pathLength: number;
+        path: string[];
+        /** 32-byte peak hash when the payload is attached; null when detached. */
+        peakHex: string | null;
+        peakSource: "payload" | "derived at verify time (detached payload)";
+    };
+};
+export declare function bytesToHex(bytes: Uint8Array): string;
+/** Convert any decoded CBOR / cbor-x value to JSON-safe display form. */
+export declare function toJson(value: unknown): Json;
+/**
+ * Decode receipt bytes to the display model.
+ *
+ * @throws DecodeReceiptError naming the parse stage on malformed input
+ */
+export declare function decodeReceipt(receiptBytes: Uint8Array): DecodedReceipt;
+//# sourceMappingURL=decode-receipt-decode.d.ts.map

package/dist/lib/decode-receipt-decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-receipt-decode.d.ts","sourceRoot":"","sources":["../../src/lib/decode-receipt-decode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAwBH,uDAAuD;AACvD,MAAM,MAAM,kBAAkB,GAC1B,OAAO,GACP,UAAU,GACV,YAAY,GACZ,SAAS,GACT,kBAAkB,GAClB,iBAAiB,CAAC;AAEtB,uEAAuE;AACvE,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;gBAEvB,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM;CAKvD;AAED,wEAAwE;AACxE,MAAM,MAAM,IAAI,GACZ,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,IAAI,EAAE,GACN;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE5B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,qDAAqD;IACrD,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,oEAAoE;IACpE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2CAA2C;IAC3C,KAAK,EAAE,IAAI,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,IAAI,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;QACnD,GAAG,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACnE,GAAG,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;QACnD,sEAAsE;QACtE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,EAAE,kBAAkB,EAAE,CAAC;KAC/B,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC9B,UAAU,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,OAAO,CAAA;SAAE,GAAG,IAAI,CAAC;QACpE,2EAA2E;QAC3E,YAAY,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KACxC,CAAC;IACF,OAAO,EACH;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,GAClB;QAAE,QAAQ,EAAE,KAAK,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,SAAS,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,wDAAwD;IACxD,SAAS,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,0EAA0E;QAC1E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,EAAE,SAAS,GAAG,2CAA2C,CAAC;KACrE,CAAC;CACH,CAAC;AAMF,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CA4B3C;AAiED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,UAAU,GAAG,cAAc,CA6GtE"}

package/dist/lib/decode-receipt-decode.js

@@ -0,0 +1,237 @@
+/**
+ * Structural decode for `forestrie decode-receipt` (FOR-346).
+ *
+ * `parseReceipt` (`@forestrie/receipt-verify`) does the load-bearing
+ * receipt parse (COSE_Sign1 shape, tag-18 tolerance, payload rules,
+ * header 396 inclusion proof). This module turns that result into a
+ * display model: protected header contents (which `parseReceipt` leaves
+ * as opaque bstr), named labels, and JSON-safe values. Unknown labels
+ * are carried through raw — never dropped.
+ */
+import { parseReceipt } from "@forestrie/receipt-verify";
+import { coseUnprotectedToMap, decodeCoseSign1 } from "@forestrie/encoding";
+import { CborDecodeError, decodeCborMap, isCborTagged, } from "./decode-receipt-cbor.js";
+import { ALG_NAMES, COSE_SIGN1_TAG, CWT_CLAIMS_LABEL, CWT_CLAIM_NAMES, COSE_KEY_PARAM_NAMES, DELEGATION_CERT_LABEL, SEAL_PEAK_RECEIPTS_LABEL, VDS_LABEL, VDS_NAMES, headerLabelInfo, } from "./decode-receipt-labels.js";
+/** Structured decode failure: which parse stage rejected the input. */
+export class DecodeReceiptError extends Error {
+    stage;
+    constructor(stage, message) {
+        super(message);
+        this.name = "DecodeReceiptError";
+        this.stage = stage;
+    }
+}
+const HEX = Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
+export function bytesToHex(bytes) {
+    let out = "";
+    for (const b of bytes)
+        out += HEX[b];
+    return out;
+}
+/** Convert any decoded CBOR / cbor-x value to JSON-safe display form. */
+export function toJson(value) {
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value === "boolean" || typeof value === "string")
+        return value;
+    if (typeof value === "number") {
+        return Number.isFinite(value) ? value : String(value);
+    }
+    if (typeof value === "bigint") {
+        return value >= BigInt(Number.MIN_SAFE_INTEGER) &&
+            value <= BigInt(Number.MAX_SAFE_INTEGER)
+            ? Number(value)
+            : value.toString(10);
+    }
+    if (value instanceof Uint8Array)
+        return `h'${bytesToHex(value)}'`;
+    if (Array.isArray(value))
+        return value.map(toJson);
+    if (value instanceof Map) {
+        const out = {};
+        for (const [k, v] of value)
+            out[String(toJson(k))] = toJson(v);
+        return out;
+    }
+    if (isCborTagged(value)) {
+        return { tag: value.tag, value: toJson(value.value) };
+    }
+    if (typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = toJson(v);
+        return out;
+    }
+    return String(value);
+}
+function numericLabel(key) {
+    if (typeof key === "number")
+        return key;
+    if (typeof key === "bigint")
+        return Number(key);
+    const n = Number(key);
+    return Number.isFinite(n) ? n : String(key);
+}
+function headerEntry(key, value) {
+    const label = numericLabel(key);
+    const info = typeof label === "number" ? headerLabelInfo(label) : null;
+    return {
+        label,
+        name: info?.name ?? null,
+        note: info?.note ?? null,
+        value: toJson(value),
+    };
+}
+function decodeCwtClaims(claims) {
+    if (!(claims instanceof Map)) {
+        return [{ key: "(malformed)", name: null, value: toJson(claims) }];
+    }
+    const out = [];
+    for (const [k, v] of claims) {
+        const key = numericLabel(k);
+        const name = typeof key === "number" ? (CWT_CLAIM_NAMES.get(key) ?? null) : null;
+        // cnf (8) carries key material — name COSE_Key params for the audience.
+        if (key === 8 && v instanceof Map) {
+            const cnf = {};
+            for (const [pk, pv] of v) {
+                const paramKey = numericLabel(pk);
+                const paramName = typeof paramKey === "number"
+                    ? COSE_KEY_PARAM_NAMES.get(paramKey)
+                    : undefined;
+                cnf[paramName ? `${paramKey} (${paramName})` : String(paramKey)] =
+                    toJson(pv);
+            }
+            out.push({ key, name, value: cnf });
+            continue;
+        }
+        out.push({ key, name, value: toJson(v) });
+    }
+    return out;
+}
+/** Classify a `parseReceipt` failure by the stage that rejected the input. */
+function classifyParseReceiptError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/COSE Sign1/i.test(message)) {
+        return new DecodeReceiptError("cose-sign1", message);
+    }
+    if (/payload/i.test(message)) {
+        return new DecodeReceiptError("payload", message);
+    }
+    if (/header 396|proof/i.test(message)) {
+        return new DecodeReceiptError("inclusion-proof", message);
+    }
+    // Anything else came out of the CBOR envelope decode.
+    return new DecodeReceiptError("envelope", message);
+}
+/**
+ * Decode receipt bytes to the display model.
+ *
+ * @throws DecodeReceiptError naming the parse stage on malformed input
+ */
+export function decodeReceipt(receiptBytes) {
+    if (receiptBytes.length === 0) {
+        throw new DecodeReceiptError("input", "receipt is empty (0 bytes)");
+    }
+    // Tag tolerance: parseReceipt accepts both; record which form we got.
+    // Tag 18 with a 1-byte argument encodes as the initial byte 0xd2.
+    const tag = receiptBytes[0] === 0xd2 ? COSE_SIGN1_TAG : null;
+    let parsed;
+    try {
+        parsed = parseReceipt(receiptBytes);
+    }
+    catch (error) {
+        throw classifyParseReceiptError(error);
+    }
+    const [protectedBstr, unprotectedRaw, payload, signature] = parsed.coseSign1;
+    // Protected header: parseReceipt keeps it opaque (signed bytes); open it.
+    let protectedMap;
+    try {
+        protectedMap = decodeCborMap(protectedBstr);
+    }
+    catch (error) {
+        const message = error instanceof CborDecodeError
+            ? `protected header is not a valid CBOR map: ${error.message}`
+            : String(error);
+        throw new DecodeReceiptError("protected-header", message);
+    }
+    let alg = null;
+    let kid = null;
+    let vds = null;
+    let cwtClaims = null;
+    const protectedEntries = [];
+    for (const [k, v] of protectedMap) {
+        protectedEntries.push(headerEntry(k, v));
+        const label = numericLabel(k);
+        if (label === 1 && (typeof v === "number" || typeof v === "bigint")) {
+            const value = Number(v);
+            alg = { value, name: ALG_NAMES.get(value) ?? null };
+        }
+        else if (label === 4) {
+            if (v instanceof Uint8Array) {
+                kid = { hex: bytesToHex(v), byteLength: v.length };
+            }
+            else if (typeof v === "string") {
+                kid = { text: v };
+            }
+        }
+        else if (label === VDS_LABEL &&
+            (typeof v === "number" || typeof v === "bigint")) {
+            const value = Number(v);
+            vds = { value, name: VDS_NAMES.get(value) ?? null };
+        }
+        else if (label === CWT_CLAIMS_LABEL) {
+            cwtClaims = decodeCwtClaims(v);
+        }
+    }
+    // Unprotected header: already decoded by parseReceipt's CBOR pass.
+    const unprotectedMap = coseUnprotectedToMap(unprotectedRaw);
+    const unprotectedEntries = [];
+    let delegation = null;
+    let peakReceipts = null;
+    for (const [label, value] of unprotectedMap) {
+        unprotectedEntries.push(headerEntry(label, value));
+        if (label === DELEGATION_CERT_LABEL && value instanceof Uint8Array) {
+            delegation = {
+                byteLength: value.length,
+                nestedCoseSign1: decodeCoseSign1(value) !== null,
+            };
+        }
+        else if (label === SEAL_PEAK_RECEIPTS_LABEL && Array.isArray(value)) {
+            peakReceipts = { count: value.length };
+        }
+    }
+    const path = parsed.proof.path.map(bytesToHex);
+    const peakHex = parsed.explicitPeak ? bytesToHex(parsed.explicitPeak) : null;
+    return {
+        byteLength: receiptBytes.length,
+        tag,
+        protected: {
+            byteLength: protectedBstr.length,
+            alg,
+            kid,
+            vds,
+            cwtClaims,
+            entries: protectedEntries,
+        },
+        unprotected: {
+            entries: unprotectedEntries,
+            delegation,
+            peakReceipts,
+        },
+        payload: payload instanceof Uint8Array
+            ? { detached: false, byteLength: payload.length, hex: bytesToHex(payload) }
+            : { detached: true },
+        signature: { byteLength: signature.length, hex: bytesToHex(signature) },
+        inclusion: {
+            // parseReceipt always sets mmrIndex; Proof marks it optional.
+            mmrIndex: (parsed.proof.mmrIndex ?? 0n).toString(10),
+            pathLength: path.length,
+            path,
+            peakHex,
+            peakSource: peakHex
+                ? "payload"
+                : "derived at verify time (detached payload)",
+        },
+    };
+}
+//# sourceMappingURL=decode-receipt-decode.js.map