@forestrie/forestrie-cli 0.9.1 → 0.10.0

package/dist/lib/decode-receipt-labels.d.ts

@@ -46,12 +46,13 @@ export declare const HEADER_LABELS: ReadonlyMap<number, LabelInfo>;
 /** COSE algorithm names (RFC 9053 + forestrie private-use). */
 export declare const ALG_NAMES: ReadonlyMap<number, string>;
 /**
- * Verifiable data structure ids (draft-ietf-cose-merkle-tree-proofs
- * registry). 3 is NOT a registered codepoint: draft-bryce-cose-merkle-
- * mountain-range-proofs requests TBD_1 (registration pending), and 3 is
- * only the value our test fixtures use — production emitters do not emit
- * header 395 at all. Render it as the draft's unregistered codepoint,
- * never as registry fact (F7, plan-2607-14 W1.5).
+ * Verifiable data structure ids (the COSE receipts registry, RFC 9942).
+ * 3 is NOT a registered codepoint: draft-bryce-cose-receipts-mmr-profile
+ * requests TBD_1 (registration pending). The Go sealer emits `395: 3` on
+ * every checkpoint and peak receipt; the TypeScript exporters do not, so a
+ * verifier must not require it. Render it as the draft's unregistered
+ * codepoint, never as registry fact. The display strings are the protocol
+ * registry's (spec/label-registry.md).
  */
 export declare const VDS_NAMES: ReadonlyMap<number, string>;
 /** CWT claim keys (RFC 8392 §3.1, cnf per RFC 8747). */

package/dist/lib/decode-receipt-labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decode-receipt-labels.d.ts","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,uFAAuF;AACvF,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAExC,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAuEvD,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAWhD,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAIhD,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAStD,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAO3D,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAGvD,CAAC;AAEH,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE/D"}
+{"version":3,"file":"decode-receipt-labels.d.ts","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,uFAAuF;AACvF,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAExC,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAuEvD,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAWhD,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAIhD,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAStD,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAO3D,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAGvD,CAAC;AAEH,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE/D"}

package/dist/lib/decode-receipt-labels.js

@@ -47,11 +47,11 @@ export const HEADER_LABELS = new Map([
     [CWT_CLAIMS_LABEL, { name: "CWT claims", note: "RFC 9597" }],
     [
         VDS_LABEL,
-        { name: "verifiable data structure", note: "COSE receipts (draft)" },
+        { name: "verifiable data structure", note: "COSE receipts (RFC 9942)" },
     ],
     [
         VERIFIABLE_PROOFS_LABEL,
-        { name: "verifiable proofs", note: "COSE receipts (draft)" },
+        { name: "verifiable proofs", note: "COSE receipts (RFC 9942)" },
     ],
     [
         DELEGATION_CERT_LABEL,
@@ -115,17 +115,18 @@ export const ALG_NAMES = new Map([
     [-65799, "KS256 (secp256k1 + Keccak-256, forestrie private-use)"],
     [
         -65800,
-        "ES256-WebAuthn (forestrie private-use; delegation proofs and " +
-            "certificates only, never checkpoint-signing)",
+        "ES256-WebAuthn (forestrie private-use; delegation proofs, certificates " +
+            "and session-key endorsements, never checkpoint-signing)",
     ],
 ]);
 /**
- * Verifiable data structure ids (draft-ietf-cose-merkle-tree-proofs
- * registry). 3 is NOT a registered codepoint: draft-bryce-cose-merkle-
- * mountain-range-proofs requests TBD_1 (registration pending), and 3 is
- * only the value our test fixtures use — production emitters do not emit
- * header 395 at all. Render it as the draft's unregistered codepoint,
- * never as registry fact (F7, plan-2607-14 W1.5).
+ * Verifiable data structure ids (the COSE receipts registry, RFC 9942).
+ * 3 is NOT a registered codepoint: draft-bryce-cose-receipts-mmr-profile
+ * requests TBD_1 (registration pending). The Go sealer emits `395: 3` on
+ * every checkpoint and peak receipt; the TypeScript exporters do not, so a
+ * verifier must not require it. Render it as the draft's unregistered
+ * codepoint, never as registry fact. The display strings are the protocol
+ * registry's (spec/label-registry.md).
  */
 export const VDS_NAMES = new Map([
     [1, "RFC9162_SHA256 (Certificate Transparency)"],

package/dist/lib/decode-receipt-labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"decode-receipt-labels.js","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,uFAAuF;AACvF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC;AAExC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC;AACvC,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAC;AAQzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAmC,IAAI,GAAG,CAAC;IACnE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC7B,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC3B,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5D;QACE,SAAS;QACT,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,uBAAuB,EAAE;KACrE;IACD;QACE,uBAAuB;QACvB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,uBAAuB,EAAE;KAC7D;IACD;QACE,qBAAqB;QACrB;YACE,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,6DAA6D;SACpE;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAChE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,6BAA6B;YACnC,IAAI,EACF,oEAAoE;gBACpE,8DAA8D;SACjE;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EACF,iEAAiE;gBACjE,0DAA0D;SAC7D;KACF;IACD;QACE,wBAAwB;QACxB;YACE,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,qDAAqD;SAC5D;KACF;IACD;QACE,iBAAiB;QACjB;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EACF,oEAAoE;gBACpE,mBAAmB;SACtB;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,wDAAwD;SAC/D;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3E,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACtE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC7D,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;CACnE,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IACb,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,KAAK,EAAE,uDAAuD,CAAC;IACjE;QACE,CAAC,KAAK;QACN,+DAA+D;YAC7D,8CAA8C;KACjD;CACF,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,EAAE,2CAA2C,CAAC;IAChD,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACxB,CAAC,CAAC,EAAE,0CAA0C,CAAC;CAChD,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAClE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,oCAAoC,CAAC;CAC1C,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAgC,IAAI,GAAG,CAAC;IACvE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACX,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACT,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;CACV,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAC1C,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;CAC/C,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"decode-receipt-labels.js","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,uFAAuF;AACvF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC;AAExC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC;AACvC,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAC;AAQzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAmC,IAAI,GAAG,CAAC;IACnE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC7B,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC3B,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5D;QACE,SAAS;QACT,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,0BAA0B,EAAE;KACxE;IACD;QACE,uBAAuB;QACvB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,0BAA0B,EAAE;KAChE;IACD;QACE,qBAAqB;QACrB;YACE,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,6DAA6D;SACpE;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAChE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,6BAA6B;YACnC,IAAI,EACF,oEAAoE;gBACpE,8DAA8D;SACjE;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EACF,iEAAiE;gBACjE,0DAA0D;SAC7D;KACF;IACD;QACE,wBAAwB;QACxB;YACE,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,qDAAqD;SAC5D;KACF;IACD;QACE,iBAAiB;QACjB;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EACF,oEAAoE;gBACpE,mBAAmB;SACtB;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,wDAAwD;SAC/D;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3E,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACtE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC7D,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;CACnE,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IACb,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,KAAK,EAAE,uDAAuD,CAAC;IACjE;QACE,CAAC,KAAK;QACN,yEAAyE;YACvE,yDAAyD;KAC5D;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,EAAE,2CAA2C,CAAC;IAChD,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACxB,CAAC,CAAC,EAAE,0CAA0C,CAAC;CAChD,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAClE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,oCAAoC,CAAC;CAC1C,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAgC,IAAI,GAAG,CAAC;IACvE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACX,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACT,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;CACV,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAC1C,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;CAC/C,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC1C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forestrie/forestrie-cli",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "forestrie — participant CLI for forestrie transparency logs (SCITT / COSE receipts)",
   "keywords": [
     "forestrie",
@@ -68,10 +68,10 @@
     "@forestrie/cli-kit": "^0.1.1",
     "@forestrie/delegation-cose": "^0.3.2",
     "@forestrie/deploy-core": "^0.7.1",
-    "@forestrie/encoding": "^0.8.0",
+    "@forestrie/encoding": "^0.9.1",
     "@forestrie/grant-builder": "^0.5.0",
-    "@forestrie/merklelog": "^0.4.0",
-    "@forestrie/receipt-verify": "^2.0.0",
+    "@forestrie/merklelog": "^0.5.0",
+    "@forestrie/receipt-verify": "^3.0.1",
     "@forestrie/scrapi-client": "^0.2.2",
     "citty": "^0.2.2",
     "viem": "^2.31.0"

package/src/commands/verify-grant.ts

@@ -18,7 +18,7 @@ export default defineForestrieCommand({
     "known-log-key": {
       type: "string",
       description:
-        "Caller-known log OWNER key (the delegation issuer), base64 x||y (64 bytes) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis; asserts (does not prove) the key-to-log binding — --genesis derives it from the grant chain, while the accumulator anchors (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
+        "Caller-known log OWNER key (the delegation issuer), base64 x||y (64 bytes) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis; asserts (does not prove) the key-to-log binding — --genesis roots it in the forest genesis document's bootstrap key (the root log, or a delegation directly under it), while the accumulator roots (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
       valueHint: "base64",
     },
     receipt: {

package/src/commands/verify.ts

@@ -18,7 +18,7 @@ export default defineForestrieCommand({
     "known-log-key": {
       type: "string",
       description:
-        "Caller-known log OWNER key (the delegation issuer), base64 x||y (64 bytes) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis; asserts (does not prove) the key-to-log binding — --genesis derives it from the grant chain, while the accumulator anchors (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
+        "Caller-known log OWNER key (the delegation issuer), base64 x||y (64 bytes) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis; asserts (does not prove) the key-to-log binding — --genesis roots it in the forest genesis document's bootstrap key (the root log, or a delegation directly under it), while the accumulator roots (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
       valueHint: "base64",
     },
     receipt: {

package/src/lib/checkpoint-provider.ts

@@ -31,6 +31,7 @@ import {
   computeCheckpointAccumulator,
   checkpointConsistencyProof,
   type CheckpointConsistencyProof,
+  type DecodedConsistencyProof,
 } from "@forestrie/receipt-verify";
 import { fetchPublishedCheckpoints } from "./verify-eventscan.js";
 import {
@@ -56,21 +57,38 @@ export type CheckpointSeal =
   | { kind: "sth"; checkpointBytes: Uint8Array };
 
 /**
- * Fold-relevant fields of a consistency proof, shared by calldata-decoded
- * proofs (`CalldataConsistencyProof` — no per-proof signed size; on-chain
- * calldata carries no protected header) and sth-decoded
- * `CheckpointConsistencyProof` (which adds `signedTreeSize2`, cross-checked
- * against the checkpoint's protected header at decode time). Neither
- * `computeCheckpointAccumulator` nor `freshenReceipt` reads `signedTreeSize2`
- * — only the trusted base SIZE (passed separately, never off the proof) and
- * `treeSize1`/`treeSize2`/`paths`/`rightPeaks` matter to the fold — so this
- * provider carries the narrower shape and backfills `signedTreeSize2` with
- * `treeSize2` only where receipt-verify's stricter parameter type demands it.
+ * One fold step: a single consistency proof, shared by calldata-decoded
+ * proofs (`CalldataConsistencyProof` — on-chain calldata carries no protected
+ * header, so no signed size) and `.sth`-decoded proofs. receipt-verify
+ * decodes an `.sth` to a `CheckpointConsistencyProof` CHAIN (`proofs[]`, one
+ * or more relayed steps under the head signature, ADR-0066 D2); this provider
+ * keeps one link per step, so a link's proof is the single-step
+ * `DecodedConsistencyProof`, and {@link singleProofChain} wraps it back into
+ * the chain shape where receipt-verify's parameter type demands it. The fold
+ * never reads `signedTreeSize2` — only the trusted base SIZE (passed
+ * separately, never off the proof) and `treeSize1`/`treeSize2`/`paths`/
+ * `rightPeaks` matter — so it is backfilled with `treeSize2`.
  */
-export type FoldableConsistencyProof = Pick<
-  CheckpointConsistencyProof,
-  "treeSize1" | "treeSize2" | "paths" | "rightPeaks"
->;
+export type FoldableConsistencyProof = DecodedConsistencyProof;
+
+/** Wrap one fold step as a one-proof chain for receipt-verify's chain-typed
+ * parameters. `signedTreeSize2` is the checkpoint's SIGNED size when the
+ * step is the last one a sealed `.sth` relays (so `freshenReceipt`'s
+ * signed-vs-declared guard stays live for it), and is backfilled from
+ * `treeSize2` for steps that carry no signature of their own: calldata
+ * proofs, and the earlier steps a checkpoint relays (see
+ * {@link FoldableConsistencyProof}). */
+export function singleProofChain(
+  p: FoldableConsistencyProof,
+  signedTreeSize2: bigint = p.treeSize2,
+): CheckpointConsistencyProof {
+  return {
+    proofs: [p],
+    treeSize1: p.treeSize1,
+    treeSize2: p.treeSize2,
+    signedTreeSize2,
+  };
+}
 
 /** One folded link: the accumulator committed at `treeSize2`. */
 export type CheckpointLink = {
@@ -82,6 +100,10 @@ export type CheckpointLink = {
    * (the tile-free climb material). Retained so a path-extending consumer
    * (freshen) gets it without a re-decode; folding consumers ignore it. */
   proof: FoldableConsistencyProof;
+  /** The SIGNED tree-size-2 covering this link, when it is the last step of a
+   * sealed `.sth` (cross-checked against `proof.treeSize2` at decode). Absent
+   * for calldata links and for the earlier steps a checkpoint relays. */
+  signedTreeSize2?: bigint;
   /** The signature material to verify this link's accumulator, when directly
    * signed (see {@link CheckpointSeal}). The provider does NOT verify it. */
   seal?: CheckpointSeal;
@@ -103,7 +125,9 @@ export async function foldProofChain(
     accumulatorFrom?: Uint8Array[];
     accumulatorFromSize?: bigint;
     seals?: readonly (CheckpointSeal | undefined)[];
-    sourceRefs?: readonly string[];
+    sourceRefs?: readonly (string | undefined)[];
+    /** Per-step signed tree-size-2, for the steps that have one. */
+    signedSizes?: readonly (bigint | undefined)[];
   } = {},
 ): Promise<CheckpointLink[]> {
   let accumulator = opts.accumulatorFrom ?? [];
@@ -126,13 +150,13 @@ export async function foldProofChain(
         `checkpoint chain is not contiguous at link ${i}: base ${p.treeSize1} != expected ${expectedBase}`,
       );
     }
-    // receipt-verify 2.0.0: the trusted base size is a parameter, never read
-    // off the proof (ADR-0066 D5.4) — `expectedBase` is exactly that, already
-    // checked against `p.treeSize1` above. `signedTreeSize2` is backfilled
-    // from `treeSize2` only to satisfy the parameter type; the fold does not
-    // read it (see `FoldableConsistencyProof`'s doc comment above).
+    // The trusted base size is a parameter, never read off the proof
+    // (ADR-0066 D5.4) — `expectedBase` is exactly that, already checked
+    // against `p.treeSize1` above. One link is one step, folded as a
+    // one-proof chain (see `singleProofChain`).
+    const signed = opts.signedSizes?.[i];
     accumulator = await computeCheckpointAccumulator(
-      { ...p, signedTreeSize2: p.treeSize2 },
+      singleProofChain(p, signed),
       accumulator,
       expectedBase,
     );
@@ -142,6 +166,7 @@ export async function foldProofChain(
       accumulator,
       proof: p,
     };
+    if (signed !== undefined) link.signedTreeSize2 = signed;
     const seal = opts.seals?.[i];
     if (seal !== undefined) link.seal = seal;
     const ref = opts.sourceRefs?.[i];
@@ -153,9 +178,17 @@ export async function foldProofChain(
 }
 
 /**
- * Retained-`.sth` provider: decode each checkpoint's embedded consistency proof
- * and fold. `checkpoints` are the raw `.sth` bytes in ascending massif order;
- * `sourceRefs` optionally names them (e.g. filenames) for narration.
+ * Retained-`.sth` provider: decode each checkpoint's embedded consistency
+ * proofs and fold. `checkpoints` are the raw `.sth` bytes in ascending massif
+ * order; `sourceRefs` optionally names them (e.g. filenames) for narration.
+ * A checkpoint may relay several proofs under one signature (ADR-0066 D2);
+ * each becomes its own link, and only the LAST link of a checkpoint carries
+ * that checkpoint's seal, since the signature covers only the head size.
+ * A log's initialising proof `[0, n, [], peaks]` (empty consistency-paths:
+ * the empty tree has no peaks) is a valid first step only; `foldProofChain`
+ * binds each step's tree-size-1 to the size reached, so it verifies only
+ * against the empty tree. A checkpoint with no proof at all is malformed and
+ * the decode throws.
  */
 export async function sthCheckpointChain(
   checkpoints: readonly Uint8Array[],
@@ -165,20 +198,30 @@ export async function sthCheckpointChain(
     sourceRefs?: readonly string[];
   } = {},
 ): Promise<CheckpointLink[]> {
-  const proofs = checkpoints.map((bytes) => checkpointConsistencyProof(bytes));
-  const seals: CheckpointSeal[] = checkpoints.map((bytes) => ({
-    kind: "sth",
-    checkpointBytes: bytes,
-  }));
+  const proofs: FoldableConsistencyProof[] = [];
+  const seals: (CheckpointSeal | undefined)[] = [];
+  const sourceRefs: (string | undefined)[] = [];
+  const signedSizes: (bigint | undefined)[] = [];
+  checkpoints.forEach((bytes, i) => {
+    const chain = checkpointConsistencyProof(bytes);
+    chain.proofs.forEach((step, j) => {
+      const last = j === chain.proofs.length - 1;
+      proofs.push(step);
+      seals.push(last ? { kind: "sth", checkpointBytes: bytes } : undefined);
+      signedSizes.push(last ? chain.signedTreeSize2 : undefined);
+      sourceRefs.push(opts.sourceRefs?.[i]);
+    });
+  });
   return foldProofChain(proofs, {
     seals,
+    signedSizes,
     ...(opts.accumulatorFrom !== undefined
       ? { accumulatorFrom: opts.accumulatorFrom }
       : {}),
     ...(opts.accumulatorFromSize !== undefined
       ? { accumulatorFromSize: opts.accumulatorFromSize }
       : {}),
-    ...(opts.sourceRefs !== undefined ? { sourceRefs: opts.sourceRefs } : {}),
+    ...(opts.sourceRefs !== undefined ? { sourceRefs } : {}),
   });
 }
 

package/src/lib/complete-grant-derive.ts

@@ -38,6 +38,7 @@ export type CompleteGrantReason =
   | "checkpoint_parse_failed"
   | "checkpoint_missing_peak_receipts"
   | "checkpoint_missing_sealed_size"
+  | "checkpoint_consistency_invalid"
   | "checkpoint_does_not_cover_leaf"
   | "leaf_not_in_massif"
   | "derive_failed";

package/src/lib/create-log-prepare.ts

@@ -9,6 +9,8 @@
  * the log exists — no operator onboard token, authority flows down the log
  * hierarchy (ADR-0053). Node/Bun HTTP only.
  */
+import { responseProblemDetail } from "./http-problem.js";
+
 
 /** Prepare (child public-root pre-registration) failure. */
 export class PrepareLogError extends Error {
@@ -48,7 +50,7 @@ export async function prepareChildLog(
     headers: { Authorization: `Forestrie-Grant ${params.grantBase64}` },
   });
   if (!res.ok) {
-    const preview = (await res.text().catch(() => "")).slice(0, 300);
+    const preview = await responseProblemDetail(res, 300);
     throw new PrepareLogError(
       `prepare failed: HTTP ${res.status} ${preview}`,
       res.status,

package/src/lib/create-receipt-derive.ts

@@ -1,5 +1,6 @@
 import {
   buildReceiptOffline,
+  checkpointConsistencyProof,
   computeAccumulatorPeak,
   openMassifNodeStore,
   parseCheckpoint,
@@ -27,6 +28,7 @@ export type CreateReceiptReason =
   | "checkpoint_parse_failed"
   | "checkpoint_missing_peak_receipts"
   | "checkpoint_missing_sealed_size"
+  | "checkpoint_consistency_invalid"
   | "checkpoint_does_not_cover_leaf"
   | "leaf_not_in_massif"
   | "derive_failed";
@@ -123,6 +125,20 @@ export async function deriveCheckpointReceipt(input: {
       "checkpoint carries no consistency proof (cannot determine sealed size)",
     );
   }
+  // The embedded consistency proofs must agree with the signed size: the
+  // last proof's tree-size-2 is the size the signature covers (ADR-0066 D1,
+  // D2). A checkpoint whose proofs contradict its signed size is malformed,
+  // and this builder refuses it rather than deriving from the signed half
+  // alone. (parseCheckpoint only requires that a proof be present.)
+  try {
+    checkpointConsistencyProof(checkpointBytes);
+  } catch (err) {
+    fail(
+      "parse",
+      "checkpoint_consistency_invalid",
+      `checkpoint consistency proofs do not agree with its signed size: ${errorMessage(err)}`,
+    );
+  }
 
   let store: MassifNodeStore;
   try {

package/src/lib/decode-receipt-labels.ts

@@ -57,11 +57,11 @@ export const HEADER_LABELS: ReadonlyMap<number, LabelInfo> = new Map([
   [CWT_CLAIMS_LABEL, { name: "CWT claims", note: "RFC 9597" }],
   [
     VDS_LABEL,
-    { name: "verifiable data structure", note: "COSE receipts (draft)" },
+    { name: "verifiable data structure", note: "COSE receipts (RFC 9942)" },
   ],
   [
     VERIFIABLE_PROOFS_LABEL,
-    { name: "verifiable proofs", note: "COSE receipts (draft)" },
+    { name: "verifiable proofs", note: "COSE receipts (RFC 9942)" },
   ],
   [
     DELEGATION_CERT_LABEL,
@@ -129,18 +129,19 @@ export const ALG_NAMES: ReadonlyMap<number, string> = new Map([
   [-65799, "KS256 (secp256k1 + Keccak-256, forestrie private-use)"],
   [
     -65800,
-    "ES256-WebAuthn (forestrie private-use; delegation proofs and " +
-      "certificates only, never checkpoint-signing)",
+    "ES256-WebAuthn (forestrie private-use; delegation proofs, certificates " +
+      "and session-key endorsements, never checkpoint-signing)",
   ],
 ]);
 
 /**
- * Verifiable data structure ids (draft-ietf-cose-merkle-tree-proofs
- * registry). 3 is NOT a registered codepoint: draft-bryce-cose-merkle-
- * mountain-range-proofs requests TBD_1 (registration pending), and 3 is
- * only the value our test fixtures use — production emitters do not emit
- * header 395 at all. Render it as the draft's unregistered codepoint,
- * never as registry fact (F7, plan-2607-14 W1.5).
+ * Verifiable data structure ids (the COSE receipts registry, RFC 9942).
+ * 3 is NOT a registered codepoint: draft-bryce-cose-receipts-mmr-profile
+ * requests TBD_1 (registration pending). The Go sealer emits `395: 3` on
+ * every checkpoint and peak receipt; the TypeScript exporters do not, so a
+ * verifier must not require it. Render it as the draft's unregistered
+ * codepoint, never as registry fact. The display strings are the protocol
+ * registry's (spec/label-registry.md).
  */
 export const VDS_NAMES: ReadonlyMap<number, string> = new Map([
   [1, "RFC9162_SHA256 (Certificate Transparency)"],

package/src/lib/delegate-flow.ts

@@ -33,6 +33,8 @@ import {
   verifyDelegateKeyVoucher,
 } from "./delegate-voucher.js";
 
+import { responseProblemDetail } from "./http-problem.js";
+
 /** Fixed inclusive MMR start for a horizon delegation lease. */
 const MMR_START = 0;
 
@@ -170,7 +172,7 @@ export async function runDelegateFlow(
   const pendingUrl = `${params.coordinatorUrl}/api/logs/${params.logId}/pending-delegation`;
   const pendingRes = await fetchImpl(pendingUrl);
   if (!pendingRes.ok) {
-    const preview = (await pendingRes.text()).slice(0, 200);
+    const preview = await responseProblemDetail(pendingRes, 200);
     throw new DelegateFlowError(
       `pending-delegation fetch failed: HTTP ${pendingRes.status} ${preview}`,
       pendingRes.status,
@@ -270,7 +272,7 @@ export async function runDelegateFlow(
     }),
   });
   if (!submitRes.ok) {
-    const preview = (await submitRes.text()).slice(0, 200);
+    const preview = await responseProblemDetail(submitRes, 200);
     throw new DelegateFlowError(
       `certificate submit failed: HTTP ${submitRes.status} ${preview}`,
       submitRes.status,

package/src/lib/http-problem.ts

@@ -0,0 +1,53 @@
+/**
+ * The human-readable reason a canopy / coordinator request was rejected
+ * (FOR-579).
+ *
+ * canopy-api answers with RFC 9457 problem details encoded as CBOR (served
+ * as `application/cbor` on most routes, `application/problem+cbor` on the
+ * SCRAPI ones); the delegation coordinator uses `application/problem+json`.
+ * Reading such a body with `response.text()` and printing it yields
+ * unreadable bytes, which is how a `400` from a strict CBOR decoder hid its
+ * cause (`Invalid CBOR body`) through four qualification runs on
+ * 2026-09-20. This decodes whichever form arrived and falls back to the
+ * text body. It never throws.
+ */
+import { decodeProblemDetailsBytes } from "@forestrie/scrapi-client";
+
+/** Longest string returned; problem bodies are short, this is a guard. */
+export const MAX_PROBLEM_DETAIL = 512;
+
+function describe(problem: {
+  title?: string;
+  detail?: string;
+}): string | undefined {
+  const { title, detail } = problem;
+  if (detail && title) return `${title}: ${detail}`;
+  return detail ?? title;
+}
+
+export async function responseProblemDetail(
+  response: Response,
+  max = MAX_PROBLEM_DETAIL,
+): Promise<string> {
+  const contentType = (response.headers.get("content-type") ?? "").toLowerCase();
+  let text = "";
+  try {
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (bytes.length === 0) return "";
+    if (contentType.includes("cbor")) {
+      // No content type passed: canopy-api serves most problem bodies as
+      // plain application/cbor, so decode opportunistically.
+      const problem = decodeProblemDetailsBytes(bytes);
+      const described = problem && describe(problem);
+      if (described) return described.slice(0, max);
+    }
+    text = new TextDecoder().decode(bytes);
+    if (contentType.includes("json")) {
+      const described = describe(JSON.parse(text) as { title?: string; detail?: string });
+      if (described) return described.slice(0, max);
+    }
+  } catch {
+    // fall through to whatever text we have
+  }
+  return text.slice(0, max);
+}

package/src/lib/resolve-receipt-freshen.ts

@@ -39,6 +39,7 @@ import {
   calldataCheckpointChain,
   sthCheckpointChain,
   type CheckpointLink,
+  singleProofChain,
 } from "./checkpoint-provider.js";
 import { univocityLeafHash } from "./verify-anchored.js";
 import { bytesEqual } from "./bytes.js";
@@ -102,16 +103,11 @@ async function emitFreshened(opts: {
   const result = await freshenReceipt({
     oldReceiptBytes: opts.oldReceiptBytes,
     leafValue: opts.leafValue,
-    // `freshenReceipt`'s consistency-proof array type carries
-    // `signedTreeSize2` (checked at `.sth` decode time), but the fold itself
-    // never reads it — see `FoldableConsistencyProof`'s doc comment in
-    // checkpoint-provider.ts. Backfilled from `treeSize2` to satisfy the
-    // parameter type for calldata-sourced links, which have no per-proof
-    // signed size.
-    consistencyProofs: opts.links.map((l) => ({
-      ...l.proof,
-      signedTreeSize2: l.proof.treeSize2,
-    })),
+    // `freshenReceipt` takes chains; each link is one step, wrapped as a
+    // one-proof chain — see `singleProofChain` in checkpoint-provider.ts.
+    consistencyProofs: opts.links.map((l) =>
+      singleProofChain(l.proof, l.signedTreeSize2),
+    ),
     latestCheckpointBytes: opts.latestCheckpointBytes,
   });
 
@@ -177,7 +173,9 @@ export async function freshenFromSthChain(opts: {
     leafValue,
     links,
     latestCheckpointBytes: opts.checkpoints[opts.checkpoints.length - 1]!,
-    sourceRefs: [...(opts.sourceRefs ?? [])],
+    // One entry per LINK, as the calldata path reports: a checkpoint that
+    // relays several proofs yields several links that all name it.
+    sourceRefs: links.map((l) => l.sourceRef ?? ""),
     knownAccumulator: opts.knownAccumulator,
   });
 }

package/src/lib/verify-anchored.ts

@@ -59,7 +59,7 @@ export type AnchorCheck = OnChainLogState & {
  * - the leaf is at/after the anchored size — the entry simply is not
  *   anchored yet (`receipt_newer_than_anchored_state`).
  * Tampered receipts surface earlier (signature/inclusion) or as a
- * recomputed peak that matches no anchored state ever; the chain rungs
+ * recomputed peak that matches no anchored state ever; the chain roots
  * that PROVE the buried case land in later plan phases.
  */
 export function classifyUnanchoredPeak(

package/src/lib/verify-checkpoint-chain.ts

@@ -15,7 +15,7 @@ import type { AnchorCheck } from "./verify-anchored.js";
  * (ADR-0056: every checkpoint's embedded consistency proof spans its
  * massif's entry boundary to its seal). `@forestrie/receipt-verify`'s
  * `verifyCheckpointChain` folds that chain from size 0, authenticating the
- * accumulator at EVERY retained seal — this rung depends only on the
+ * accumulator at EVERY retained seal — this root depends only on the
  * public log store: no tiles, no RPC, no holder cache. It is the
  * complement of the `CheckpointPublished` event scan (public chain data
  * only); the two paths are independently sufficient and cross-checkable.
@@ -109,7 +109,7 @@ export type CheckpointChainAnchorCheck = AnchorCheck & {
 
 /**
  * Find the recomputed receipt peak in the authenticated chain. Newest-first
- * (mirrors the event-scan rung): the freshest cover gives the most useful
+ * (mirrors the event-scan route): the freshest cover gives the most useful
  * report, and a match at ANY link is proof — later links' signed
  * consistency proofs commit it forward. Newer-than-chain fails CLOSED with
  * a refresh remedy: retention limits coverage, never validity.

package/src/lib/verify-eventscan.ts

@@ -11,8 +11,8 @@
  * record of those accumulators (`CheckpointPublished` carries `size` and
  * `accumulator`; the contract stores nothing retrievable historically).
  *
- * This rung depends only on public blockchain data — deliberately
- * independent of the log store (the retained-checkpoint chain rung is its
+ * This route depends only on public blockchain data — deliberately
+ * independent of the log store (the retained-checkpoint chain root is its
  * complement with the opposite dependency; see plan-2607-29).
  */
 import { bytesEqual } from "./bytes.js";

package/src/main/onboard-genesis.ts

@@ -10,6 +10,8 @@ import {
 } from "../lib/onboard-genesis-body.js";
 import type { OnboardGenesisOptions } from "../options/onboard-genesis.js";
 
+import { responseProblemDetail } from "../lib/http-problem.js";
+
 /**
  * FOR-406 (plan-2607-27 W2): operator genesis onboarding — turn a
  * `forestrie deploy` into a usable forest. POSTs the five-label v2
@@ -138,7 +140,7 @@ export async function runOnboardGenesis(
       command: "onboard-genesis",
       message: `genesis POST rejected: HTTP ${res.status}`,
       httpStatus: res.status,
-      detail: (await res.text()).slice(0, 512),
+      detail: await responseProblemDetail(res),
     });
     return;
   }

package/src/main/onboard-request.ts

@@ -16,6 +16,8 @@ import { loadEs256SigningKey } from "../lib/sign-statement-key.js";
 import { signX402Payment } from "../lib/x402-payment.js";
 import type { OnboardRequestOptions } from "../options/onboard-request.js";
 
+import { responseProblemDetail } from "../lib/http-problem.js";
+
 /**
  * Self-service onboarding (plan-2607-43 slice 06): create → (pay) → redeem.
  *
@@ -183,7 +185,7 @@ export async function runOnboardRequest(
       reportError(out, options, {
         error: "create_failed",
         command: "onboard-request",
-        message: `request rejected: HTTP ${res.status}: ${(await res.text()).slice(0, 300)}`,
+        message: `request rejected: HTTP ${res.status}: ${await responseProblemDetail(res, 300)}`,
         httpStatus: res.status,
       });
       return;
@@ -271,7 +273,7 @@ export async function runOnboardRequest(
     reportError(out, options, {
       error: "redeem_failed",
       command: "onboard-request",
-      message: `redeem rejected: HTTP ${res.status}: ${(await res.text()).slice(0, 300)}`,
+      message: `redeem rejected: HTTP ${res.status}: ${await responseProblemDetail(res, 300)}`,
       httpStatus: res.status,
     });
     return;