@forestrie/forestrie-cli 0.9.1 → 0.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/dist/cli.js +1084 -193
  2. package/dist/lib/decode-receipt-labels.d.ts +7 -6
  3. package/dist/lib/decode-receipt-labels.d.ts.map +1 -1
  4. package/dist/lib/decode-receipt-labels.js +11 -10
  5. package/dist/lib/decode-receipt-labels.js.map +1 -1
  6. package/package.json +4 -4
  7. package/src/commands/verify-grant.ts +1 -1
  8. package/src/commands/verify.ts +1 -1
  9. package/src/lib/checkpoint-provider.ts +73 -30
  10. package/src/lib/complete-grant-derive.ts +1 -0
  11. package/src/lib/create-log-prepare.ts +3 -1
  12. package/src/lib/create-receipt-derive.ts +16 -0
  13. package/src/lib/decode-receipt-labels.ts +11 -10
  14. package/src/lib/delegate-flow.ts +4 -2
  15. package/src/lib/http-problem.ts +53 -0
  16. package/src/lib/resolve-receipt-freshen.ts +9 -11
  17. package/src/lib/verify-anchored.ts +1 -1
  18. package/src/lib/verify-checkpoint-chain.ts +2 -2
  19. package/src/lib/verify-eventscan.ts +2 -2
  20. package/src/main/onboard-genesis.ts +3 -1
  21. package/src/main/onboard-request.ts +4 -2
  22. package/src/options/verify.ts +24 -18
package/src/options/verify.ts CHANGED
@@ -23,22 +23,28 @@ import {
23
23
  * Both add `--univocity --log-id --rpc-url` for the chain-anchored check (the
24
24
  * only networked path).
25
25
  *
26
- * Trust anchors (FOR-297 ladder; each rung needs strictly less trust):
27
- * 1. `--known-log-key` — caller-known log OWNER key: offline, no genesis;
28
- * the key↔log binding is asserted by the key's provenance, not proven;
29
- * no lifecycle visibility, no split-view protection.
30
- * 2. `--genesis` — genesis-derived roots (the grant-chain walk, approach A,
31
- * will derive per-log bindings from genesis + public tiles).
32
- * 3. `--known-accumulator` — cached, auditable chain read: contract-enforced
33
- * state (signature + grant chain + split-view for covered entries),
34
- * fully offline; `--massif` (tiles) or `--consistency-proof` (portable
35
- * top-up artifact) extends older receipts to a newer snapshot.
36
- * 4. `--checkpoint-chain` — retained `.sth` fold (FOR-368): authenticated
37
- * accumulator at every retained seal from the public log store alone;
38
- * signatures root in rung 1/2 trust.
39
- * 5. `--rpc-url` — live chain read: rung 3 plus freshness (the RPC provider
40
- * is itself a trusted chain reader); buried peaks resolve via the
41
- * CheckpointPublished history scan (public chain data only).
26
+ * Trust roots (protocol: spec/receipt-trust-model.md). They are alternatives,
27
+ * not an ordering — each answers a different subset of the four trust
28
+ * questions, and the report says which root was used:
29
+ * - `--known-log-key` — the known log key root: an owner key the caller holds
30
+ * out of band; offline, no genesis; the key↔log binding is asserted by the
31
+ * key's provenance, not proven; no split-view protection.
32
+ * - `--genesis` — the genesis root: the forest genesis document's bootstrap
33
+ * key, which roots the root log or a delegation directly under it. A deeper
34
+ * child log's authority needs the off-chain grant-chain walk, which no
35
+ * verifier implements (spec/implementation-status.md).
36
+ * - `--known-accumulator` — the known accumulator root, from a cached,
37
+ * auditable chain read: the contract-anchored state, fully offline;
38
+ * `--massif` (tiles) or `--consistency-proof` (portable top-up artifact)
39
+ * extends older receipts to a newer snapshot.
40
+ * - `--checkpoint-chain` — the checkpoint chain root: a retained fold of
41
+ * checkpoint objects, an authenticated accumulator at every retained seal
42
+ * from the public log store alone; signatures root in the genesis or known
43
+ * log key root.
44
+ * - `--rpc-url` — the known accumulator root from a live chain read, plus
45
+ * freshness (the RPC provider is itself a trusted chain reader); buried
46
+ * peaks resolve via the CheckpointPublished history scan (public chain
47
+ * data only).
42
48
  */
43
49
 
44
50
  type AnchorFields = {
@@ -75,8 +81,8 @@ type AnchorFields = {
75
81
  /**
76
82
  * Caller-known log OWNER key (the delegation-cert issuer), base64 `x||y`
77
83
  * (64 bytes, `KNOWN_LOG_KEY`) — FOR-297 D1. An offline trust anchor that
78
- * replaces the genesis-derived roots: the "known hosts" rung of the trust
79
- * ladder. It asserts (does not prove) the key↔log binding, and gives no
84
+ * replaces the genesis root: the known log key root of the trust model.
85
+ * It asserts (does not prove) the key↔log binding, and gives no
80
86
  * grant-lifecycle visibility or split-view protection — the grant-chain
81
87
  * walk (approach A) derives the binding; chain anchors add split-view.
82
88
  */