@forestrie/forestrie-cli 0.9.1 → 0.11.0

package/dist/lib/decode-receipt-labels.d.ts

@@ -46,12 +46,13 @@ export declare const HEADER_LABELS: ReadonlyMap<number, LabelInfo>;
 /** COSE algorithm names (RFC 9053 + forestrie private-use). */
 export declare const ALG_NAMES: ReadonlyMap<number, string>;
 /**
- * Verifiable data structure ids (draft-ietf-cose-merkle-tree-proofs
- * registry). 3 is NOT a registered codepoint: draft-bryce-cose-merkle-
- * mountain-range-proofs requests TBD_1 (registration pending), and 3 is
- * only the value our test fixtures use — production emitters do not emit
- * header 395 at all. Render it as the draft's unregistered codepoint,
- * never as registry fact (F7, plan-2607-14 W1.5).
+ * Verifiable data structure ids (the COSE receipts registry, RFC 9942).
+ * 3 is NOT a registered codepoint: draft-bryce-cose-receipts-mmr-profile
+ * requests TBD_1 (registration pending). The Go sealer emits `395: 3` on
+ * every checkpoint and peak receipt; the TypeScript exporters do not, so a
+ * verifier must not require it. Render it as the draft's unregistered
+ * codepoint, never as registry fact. The display strings are the protocol
+ * registry's (spec/label-registry.md).
  */
 export declare const VDS_NAMES: ReadonlyMap<number, string>;
 /** CWT claim keys (RFC 8392 §3.1, cnf per RFC 8747). */

package/dist/lib/decode-receipt-labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decode-receipt-labels.d.ts","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,uFAAuF;AACvF,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAExC,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAuEvD,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAWhD,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAIhD,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAStD,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAO3D,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAGvD,CAAC;AAEH,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE/D"}
+{"version":3,"file":"decode-receipt-labels.d.ts","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,uFAAuF;AACvF,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAExC,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAuEvD,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAWhD,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAIhD,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAStD,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAO3D,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAGvD,CAAC;AAEH,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE/D"}

package/dist/lib/decode-receipt-labels.js

@@ -47,11 +47,11 @@ export const HEADER_LABELS = new Map([
     [CWT_CLAIMS_LABEL, { name: "CWT claims", note: "RFC 9597" }],
     [
         VDS_LABEL,
-        { name: "verifiable data structure", note: "COSE receipts (draft)" },
+        { name: "verifiable data structure", note: "COSE receipts (RFC 9942)" },
     ],
     [
         VERIFIABLE_PROOFS_LABEL,
-        { name: "verifiable proofs", note: "COSE receipts (draft)" },
+        { name: "verifiable proofs", note: "COSE receipts (RFC 9942)" },
     ],
     [
         DELEGATION_CERT_LABEL,
@@ -115,17 +115,18 @@ export const ALG_NAMES = new Map([
     [-65799, "KS256 (secp256k1 + Keccak-256, forestrie private-use)"],
     [
         -65800,
-        "ES256-WebAuthn (forestrie private-use; delegation proofs and " +
-            "certificates only, never checkpoint-signing)",
+        "ES256-WebAuthn (forestrie private-use; delegation proofs, certificates " +
+            "and session-key endorsements, never checkpoint-signing)",
     ],
 ]);
 /**
- * Verifiable data structure ids (draft-ietf-cose-merkle-tree-proofs
- * registry). 3 is NOT a registered codepoint: draft-bryce-cose-merkle-
- * mountain-range-proofs requests TBD_1 (registration pending), and 3 is
- * only the value our test fixtures use — production emitters do not emit
- * header 395 at all. Render it as the draft's unregistered codepoint,
- * never as registry fact (F7, plan-2607-14 W1.5).
+ * Verifiable data structure ids (the COSE receipts registry, RFC 9942).
+ * 3 is NOT a registered codepoint: draft-bryce-cose-receipts-mmr-profile
+ * requests TBD_1 (registration pending). The Go sealer emits `395: 3` on
+ * every checkpoint and peak receipt; the TypeScript exporters do not, so a
+ * verifier must not require it. Render it as the draft's unregistered
+ * codepoint, never as registry fact. The display strings are the protocol
+ * registry's (spec/label-registry.md).
  */
 export const VDS_NAMES = new Map([
     [1, "RFC9162_SHA256 (Certificate Transparency)"],

package/dist/lib/decode-receipt-labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"decode-receipt-labels.js","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,uFAAuF;AACvF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC;AAExC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC;AACvC,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAC;AAQzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAmC,IAAI,GAAG,CAAC;IACnE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC7B,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC3B,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5D;QACE,SAAS;QACT,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,uBAAuB,EAAE;KACrE;IACD;QACE,uBAAuB;QACvB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,uBAAuB,EAAE;KAC7D;IACD;QACE,qBAAqB;QACrB;YACE,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,6DAA6D;SACpE;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAChE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,6BAA6B;YACnC,IAAI,EACF,oEAAoE;gBACpE,8DAA8D;SACjE;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EACF,iEAAiE;gBACjE,0DAA0D;SAC7D;KACF;IACD;QACE,wBAAwB;QACxB;YACE,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,qDAAqD;SAC5D;KACF;IACD;QACE,iBAAiB;QACjB;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EACF,oEAAoE;gBACpE,mBAAmB;SACtB;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,wDAAwD;SAC/D;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3E,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACtE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC7D,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;CACnE,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IACb,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,KAAK,EAAE,uDAAuD,CAAC;IACjE;QACE,CAAC,KAAK;QACN,+DAA+D;YAC7D,8CAA8C;KACjD;CACF,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,EAAE,2CAA2C,CAAC;IAChD,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACxB,CAAC,CAAC,EAAE,0CAA0C,CAAC;CAChD,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAClE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,oCAAoC,CAAC;CAC1C,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAgC,IAAI,GAAG,CAAC;IACvE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACX,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACT,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;CACV,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAC1C,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;CAC/C,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"decode-receipt-labels.js","sourceRoot":"","sources":["../../src/lib/decode-receipt-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,uFAAuF;AACvF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC;AAExC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC;AACvC,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAC;AAQzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAmC,IAAI,GAAG,CAAC;IACnE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC7B,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC3B,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5D;QACE,SAAS;QACT,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,0BAA0B,EAAE;KACxE;IACD;QACE,uBAAuB;QACvB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,0BAA0B,EAAE;KAChE;IACD;QACE,qBAAqB;QACrB;YACE,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,6DAA6D;SACpE;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAChE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,6BAA6B;YACnC,IAAI,EACF,oEAAoE;gBACpE,8DAA8D;SACjE;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EACF,iEAAiE;gBACjE,0DAA0D;SAC7D;KACF;IACD;QACE,wBAAwB;QACxB;YACE,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,qDAAqD;SAC5D;KACF;IACD;QACE,iBAAiB;QACjB;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EACF,oEAAoE;gBACpE,mBAAmB;SACtB;KACF;IACD;QACE,CAAC,KAAK;QACN;YACE,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,wDAAwD;SAC/D;KACF;IACD,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3E,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACtE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC7D,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACvE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;CACnE,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IACb,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;IACd,CAAC,CAAC,KAAK,EAAE,uDAAuD,CAAC;IACjE;QACE,CAAC,KAAK;QACN,yEAAyE;YACvE,yDAAyD;KAC5D;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,CAAC,EAAE,2CAA2C,CAAC;IAChD,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACxB,CAAC,CAAC,EAAE,0CAA0C,CAAC;CAChD,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAClE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,oCAAoC,CAAC;CAC1C,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAgC,IAAI,GAAG,CAAC;IACvE,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,EAAE,KAAK,CAAC;IACV,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACX,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACT,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;CACV,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAC1C,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;CAC/C,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC1C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forestrie/forestrie-cli",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "forestrie — participant CLI for forestrie transparency logs (SCITT / COSE receipts)",
   "keywords": [
     "forestrie",
@@ -66,12 +66,12 @@
   "dependencies": {
     "@forestrie/chain-rpc": "^0.3.0",
     "@forestrie/cli-kit": "^0.1.1",
-    "@forestrie/delegation-cose": "^0.3.2",
+    "@forestrie/delegation-cose": "0.4.0",
     "@forestrie/deploy-core": "^0.7.1",
-    "@forestrie/encoding": "^0.8.0",
+    "@forestrie/encoding": "^0.9.1",
     "@forestrie/grant-builder": "^0.5.0",
-    "@forestrie/merklelog": "^0.4.0",
-    "@forestrie/receipt-verify": "^2.0.0",
+    "@forestrie/merklelog": "^0.5.0",
+    "@forestrie/receipt-verify": "3.1.0",
     "@forestrie/scrapi-client": "^0.2.2",
     "citty": "^0.2.2",
     "viem": "^2.31.0"

package/src/command.ts

@@ -45,6 +45,8 @@ export default defineForestrieCommand({
       import("./commands/verify-grant.js").then((m) => m.default),
     "fetch-accumulator": () =>
       import("./commands/fetch-accumulator.js").then((m) => m.default),
+    "fetch-ks256-attestation": () =>
+      import("./commands/fetch-ks256-attestation.js").then((m) => m.default),
     "create-consistency-proof": () =>
       import("./commands/create-consistency-proof.js").then((m) => m.default),
   },

package/src/commands/fetch-ks256-attestation.ts

@@ -0,0 +1,52 @@
+import { defineCommandRunner, defineForestrieCommand } from "../commoncli.js";
+import { runFetchKs256Attestation } from "../main/fetch-ks256-attestation.js";
+import { parseFetchKs256AttestationOptions } from "../options/fetch-ks256-attestation.js";
+
+export default defineForestrieCommand({
+  meta: {
+    name: "fetch-ks256-attestation",
+    description:
+      "Ask a KS256 contract root (a Safe) over ERC-1271 whether it signs the receipt's delegation certificate, and cache the block-bound answer as a --ks256-attestation artifact (CBOR binding chainId/address/digest/signature hash/block) — verify then accepts the contract-rooted receipt offline as valid under the contract's signers at that block. Auditable: anyone with RPC can re-run the call at that block. An EOA root needs no attestation (verify recovers it)",
+  },
+  args: {
+    receipt: {
+      type: "string",
+      description: "Receipt carrying the KS256 delegation certificate (label 1000)",
+      valueHint: "path",
+      required: true,
+    },
+    root: {
+      type: "string",
+      description:
+        "Contract root address (0x + 40 hex); overrides the genesis root",
+      valueHint: "address",
+    },
+    genesis: {
+      type: "string",
+      description:
+        "Forest genesis (genesis.cbor): supplies the KS256 root unless --root is given, and the chain id the RPC must match",
+      valueHint: "path",
+    },
+    "rpc-url": {
+      type: "string",
+      description: "JSON-RPC endpoint (default: ${env} → RPC_URL)",
+      valueHint: "url",
+    },
+    block: {
+      type: "string",
+      description:
+        "Block number to pin the calls to, or 'latest' (default) — needs an archive node for old blocks",
+      valueHint: "number|latest",
+    },
+    out: {
+      type: "string",
+      description: "Output path for the attestation CBOR",
+      valueHint: "path",
+      required: true,
+    },
+  },
+  run: defineCommandRunner(
+    parseFetchKs256AttestationOptions,
+    runFetchKs256Attestation,
+  ),
+});

package/src/commands/verify-grant.ts

@@ -18,8 +18,14 @@ export default defineForestrieCommand({
     "known-log-key": {
       type: "string",
       description:
-        "Caller-known log OWNER key (the delegation issuer), base64 x||y (64 bytes) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis; asserts (does not prove) the key-to-log binding — --genesis derives it from the grant chain, while the accumulator anchors (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
-      valueHint: "base64",
+        "Caller-known log OWNER key (the delegation issuer): base64 x||y (64-byte ES256 key) or a 20-byte KS256 address (0x + 40 hex, or base64) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis (give --genesis too and it only supplies the forest chain id an attestation must match); asserts (does not prove) the key-to-log binding — --genesis roots it in the forest genesis document's bootstrap key (the root log, or a delegation directly under it), while the accumulator roots (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
+      valueHint: "base64|0xaddress",
+    },
+    "ks256-attestation": {
+      type: "string",
+      description:
+        "ERC-1271 attestation (CBOR from `forestrie fetch-ks256-attestation`) for a KS256 contract root such as a Safe: the delegation certificate then verifies offline as valid under the contract's signers at the attested block, not as a signature by one key. Needs the forest chain id from --genesis. verify never calls the chain",
+      valueHint: "path",
     },
     receipt: {
       type: "string",

package/src/commands/verify.ts

@@ -18,8 +18,14 @@ export default defineForestrieCommand({
     "known-log-key": {
       type: "string",
       description:
-        "Caller-known log OWNER key (the delegation issuer), base64 x||y (64 bytes) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis; asserts (does not prove) the key-to-log binding — --genesis derives it from the grant chain, while the accumulator anchors (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
-      valueHint: "base64",
+        "Caller-known log OWNER key (the delegation issuer): base64 x||y (64-byte ES256 key) or a 20-byte KS256 address (0x + 40 hex, or base64) (env KNOWN_LOG_KEY). Offline signer-provenance anchor that replaces --genesis (give --genesis too and it only supplies the forest chain id an attestation must match); asserts (does not prove) the key-to-log binding — --genesis roots it in the forest genesis document's bootstrap key (the root log, or a delegation directly under it), while the accumulator roots (--known-accumulator / --rpc-url) supply split-view (freshness is a weaker, separate axis bearing only on coverage). See https://github.com/forestrie/protocol/blob/main/spec/receipt-trust-model.md",
+      valueHint: "base64|0xaddress",
+    },
+    "ks256-attestation": {
+      type: "string",
+      description:
+        "ERC-1271 attestation (CBOR from `forestrie fetch-ks256-attestation`) for a KS256 contract root such as a Safe: the delegation certificate then verifies offline as valid under the contract's signers at the attested block, not as a signature by one key. Needs the forest chain id from --genesis. verify never calls the chain",
+      valueHint: "path",
     },
     receipt: {
       type: "string",

package/src/lib/checkpoint-provider.ts

@@ -31,6 +31,7 @@ import {
   computeCheckpointAccumulator,
   checkpointConsistencyProof,
   type CheckpointConsistencyProof,
+  type DecodedConsistencyProof,
 } from "@forestrie/receipt-verify";
 import { fetchPublishedCheckpoints } from "./verify-eventscan.js";
 import {
@@ -56,21 +57,38 @@ export type CheckpointSeal =
   | { kind: "sth"; checkpointBytes: Uint8Array };
 
 /**
- * Fold-relevant fields of a consistency proof, shared by calldata-decoded
- * proofs (`CalldataConsistencyProof` — no per-proof signed size; on-chain
- * calldata carries no protected header) and sth-decoded
- * `CheckpointConsistencyProof` (which adds `signedTreeSize2`, cross-checked
- * against the checkpoint's protected header at decode time). Neither
- * `computeCheckpointAccumulator` nor `freshenReceipt` reads `signedTreeSize2`
- * — only the trusted base SIZE (passed separately, never off the proof) and
- * `treeSize1`/`treeSize2`/`paths`/`rightPeaks` matter to the fold — so this
- * provider carries the narrower shape and backfills `signedTreeSize2` with
- * `treeSize2` only where receipt-verify's stricter parameter type demands it.
+ * One fold step: a single consistency proof, shared by calldata-decoded
+ * proofs (`CalldataConsistencyProof` — on-chain calldata carries no protected
+ * header, so no signed size) and `.sth`-decoded proofs. receipt-verify
+ * decodes an `.sth` to a `CheckpointConsistencyProof` CHAIN (`proofs[]`, one
+ * or more relayed steps under the head signature, ADR-0066 D2); this provider
+ * keeps one link per step, so a link's proof is the single-step
+ * `DecodedConsistencyProof`, and {@link singleProofChain} wraps it back into
+ * the chain shape where receipt-verify's parameter type demands it. The fold
+ * never reads `signedTreeSize2` — only the trusted base SIZE (passed
+ * separately, never off the proof) and `treeSize1`/`treeSize2`/`paths`/
+ * `rightPeaks` matter — so it is backfilled with `treeSize2`.
  */
-export type FoldableConsistencyProof = Pick<
-  CheckpointConsistencyProof,
-  "treeSize1" | "treeSize2" | "paths" | "rightPeaks"
->;
+export type FoldableConsistencyProof = DecodedConsistencyProof;
+
+/** Wrap one fold step as a one-proof chain for receipt-verify's chain-typed
+ * parameters. `signedTreeSize2` is the checkpoint's SIGNED size when the
+ * step is the last one a sealed `.sth` relays (so `freshenReceipt`'s
+ * signed-vs-declared guard stays live for it), and is backfilled from
+ * `treeSize2` for steps that carry no signature of their own: calldata
+ * proofs, and the earlier steps a checkpoint relays (see
+ * {@link FoldableConsistencyProof}). */
+export function singleProofChain(
+  p: FoldableConsistencyProof,
+  signedTreeSize2: bigint = p.treeSize2,
+): CheckpointConsistencyProof {
+  return {
+    proofs: [p],
+    treeSize1: p.treeSize1,
+    treeSize2: p.treeSize2,
+    signedTreeSize2,
+  };
+}
 
 /** One folded link: the accumulator committed at `treeSize2`. */
 export type CheckpointLink = {
@@ -82,6 +100,10 @@ export type CheckpointLink = {
    * (the tile-free climb material). Retained so a path-extending consumer
    * (freshen) gets it without a re-decode; folding consumers ignore it. */
   proof: FoldableConsistencyProof;
+  /** The SIGNED tree-size-2 covering this link, when it is the last step of a
+   * sealed `.sth` (cross-checked against `proof.treeSize2` at decode). Absent
+   * for calldata links and for the earlier steps a checkpoint relays. */
+  signedTreeSize2?: bigint;
   /** The signature material to verify this link's accumulator, when directly
    * signed (see {@link CheckpointSeal}). The provider does NOT verify it. */
   seal?: CheckpointSeal;
@@ -103,7 +125,9 @@ export async function foldProofChain(
     accumulatorFrom?: Uint8Array[];
     accumulatorFromSize?: bigint;
     seals?: readonly (CheckpointSeal | undefined)[];
-    sourceRefs?: readonly string[];
+    sourceRefs?: readonly (string | undefined)[];
+    /** Per-step signed tree-size-2, for the steps that have one. */
+    signedSizes?: readonly (bigint | undefined)[];
   } = {},
 ): Promise<CheckpointLink[]> {
   let accumulator = opts.accumulatorFrom ?? [];
@@ -126,13 +150,13 @@ export async function foldProofChain(
         `checkpoint chain is not contiguous at link ${i}: base ${p.treeSize1} != expected ${expectedBase}`,
       );
     }
-    // receipt-verify 2.0.0: the trusted base size is a parameter, never read
-    // off the proof (ADR-0066 D5.4) — `expectedBase` is exactly that, already
-    // checked against `p.treeSize1` above. `signedTreeSize2` is backfilled
-    // from `treeSize2` only to satisfy the parameter type; the fold does not
-    // read it (see `FoldableConsistencyProof`'s doc comment above).
+    // The trusted base size is a parameter, never read off the proof
+    // (ADR-0066 D5.4) — `expectedBase` is exactly that, already checked
+    // against `p.treeSize1` above. One link is one step, folded as a
+    // one-proof chain (see `singleProofChain`).
+    const signed = opts.signedSizes?.[i];
     accumulator = await computeCheckpointAccumulator(
-      { ...p, signedTreeSize2: p.treeSize2 },
+      singleProofChain(p, signed),
       accumulator,
       expectedBase,
     );
@@ -142,6 +166,7 @@ export async function foldProofChain(
       accumulator,
       proof: p,
     };
+    if (signed !== undefined) link.signedTreeSize2 = signed;
     const seal = opts.seals?.[i];
     if (seal !== undefined) link.seal = seal;
     const ref = opts.sourceRefs?.[i];
@@ -153,9 +178,17 @@ export async function foldProofChain(
 }
 
 /**
- * Retained-`.sth` provider: decode each checkpoint's embedded consistency proof
- * and fold. `checkpoints` are the raw `.sth` bytes in ascending massif order;
- * `sourceRefs` optionally names them (e.g. filenames) for narration.
+ * Retained-`.sth` provider: decode each checkpoint's embedded consistency
+ * proofs and fold. `checkpoints` are the raw `.sth` bytes in ascending massif
+ * order; `sourceRefs` optionally names them (e.g. filenames) for narration.
+ * A checkpoint may relay several proofs under one signature (ADR-0066 D2);
+ * each becomes its own link, and only the LAST link of a checkpoint carries
+ * that checkpoint's seal, since the signature covers only the head size.
+ * A log's initialising proof `[0, n, [], peaks]` (empty consistency-paths:
+ * the empty tree has no peaks) is a valid first step only; `foldProofChain`
+ * binds each step's tree-size-1 to the size reached, so it verifies only
+ * against the empty tree. A checkpoint with no proof at all is malformed and
+ * the decode throws.
  */
 export async function sthCheckpointChain(
   checkpoints: readonly Uint8Array[],
@@ -165,20 +198,30 @@ export async function sthCheckpointChain(
     sourceRefs?: readonly string[];
   } = {},
 ): Promise<CheckpointLink[]> {
-  const proofs = checkpoints.map((bytes) => checkpointConsistencyProof(bytes));
-  const seals: CheckpointSeal[] = checkpoints.map((bytes) => ({
-    kind: "sth",
-    checkpointBytes: bytes,
-  }));
+  const proofs: FoldableConsistencyProof[] = [];
+  const seals: (CheckpointSeal | undefined)[] = [];
+  const sourceRefs: (string | undefined)[] = [];
+  const signedSizes: (bigint | undefined)[] = [];
+  checkpoints.forEach((bytes, i) => {
+    const chain = checkpointConsistencyProof(bytes);
+    chain.proofs.forEach((step, j) => {
+      const last = j === chain.proofs.length - 1;
+      proofs.push(step);
+      seals.push(last ? { kind: "sth", checkpointBytes: bytes } : undefined);
+      signedSizes.push(last ? chain.signedTreeSize2 : undefined);
+      sourceRefs.push(opts.sourceRefs?.[i]);
+    });
+  });
   return foldProofChain(proofs, {
     seals,
+    signedSizes,
     ...(opts.accumulatorFrom !== undefined
       ? { accumulatorFrom: opts.accumulatorFrom }
       : {}),
     ...(opts.accumulatorFromSize !== undefined
       ? { accumulatorFromSize: opts.accumulatorFromSize }
       : {}),
-    ...(opts.sourceRefs !== undefined ? { sourceRefs: opts.sourceRefs } : {}),
+    ...(opts.sourceRefs !== undefined ? { sourceRefs } : {}),
   });
 }
 

package/src/lib/complete-grant-derive.ts

@@ -38,6 +38,7 @@ export type CompleteGrantReason =
   | "checkpoint_parse_failed"
   | "checkpoint_missing_peak_receipts"
   | "checkpoint_missing_sealed_size"
+  | "checkpoint_consistency_invalid"
   | "checkpoint_does_not_cover_leaf"
   | "leaf_not_in_massif"
   | "derive_failed";

package/src/lib/create-log-prepare.ts

@@ -9,6 +9,8 @@
  * the log exists — no operator onboard token, authority flows down the log
  * hierarchy (ADR-0053). Node/Bun HTTP only.
  */
+import { responseProblemDetail } from "./http-problem.js";
+
 
 /** Prepare (child public-root pre-registration) failure. */
 export class PrepareLogError extends Error {
@@ -48,7 +50,7 @@ export async function prepareChildLog(
     headers: { Authorization: `Forestrie-Grant ${params.grantBase64}` },
   });
   if (!res.ok) {
-    const preview = (await res.text().catch(() => "")).slice(0, 300);
+    const preview = await responseProblemDetail(res, 300);
     throw new PrepareLogError(
       `prepare failed: HTTP ${res.status} ${preview}`,
       res.status,

package/src/lib/create-receipt-derive.ts

@@ -1,5 +1,6 @@
 import {
   buildReceiptOffline,
+  checkpointConsistencyProof,
   computeAccumulatorPeak,
   openMassifNodeStore,
   parseCheckpoint,
@@ -27,6 +28,7 @@ export type CreateReceiptReason =
   | "checkpoint_parse_failed"
   | "checkpoint_missing_peak_receipts"
   | "checkpoint_missing_sealed_size"
+  | "checkpoint_consistency_invalid"
   | "checkpoint_does_not_cover_leaf"
   | "leaf_not_in_massif"
   | "derive_failed";
@@ -123,6 +125,20 @@ export async function deriveCheckpointReceipt(input: {
       "checkpoint carries no consistency proof (cannot determine sealed size)",
     );
   }
+  // The embedded consistency proofs must agree with the signed size: the
+  // last proof's tree-size-2 is the size the signature covers (ADR-0066 D1,
+  // D2). A checkpoint whose proofs contradict its signed size is malformed,
+  // and this builder refuses it rather than deriving from the signed half
+  // alone. (parseCheckpoint only requires that a proof be present.)
+  try {
+    checkpointConsistencyProof(checkpointBytes);
+  } catch (err) {
+    fail(
+      "parse",
+      "checkpoint_consistency_invalid",
+      `checkpoint consistency proofs do not agree with its signed size: ${errorMessage(err)}`,
+    );
+  }
 
   let store: MassifNodeStore;
   try {

package/src/lib/decode-receipt-labels.ts

@@ -57,11 +57,11 @@ export const HEADER_LABELS: ReadonlyMap<number, LabelInfo> = new Map([
   [CWT_CLAIMS_LABEL, { name: "CWT claims", note: "RFC 9597" }],
   [
     VDS_LABEL,
-    { name: "verifiable data structure", note: "COSE receipts (draft)" },
+    { name: "verifiable data structure", note: "COSE receipts (RFC 9942)" },
   ],
   [
     VERIFIABLE_PROOFS_LABEL,
-    { name: "verifiable proofs", note: "COSE receipts (draft)" },
+    { name: "verifiable proofs", note: "COSE receipts (RFC 9942)" },
   ],
   [
     DELEGATION_CERT_LABEL,
@@ -129,18 +129,19 @@ export const ALG_NAMES: ReadonlyMap<number, string> = new Map([
   [-65799, "KS256 (secp256k1 + Keccak-256, forestrie private-use)"],
   [
     -65800,
-    "ES256-WebAuthn (forestrie private-use; delegation proofs and " +
-      "certificates only, never checkpoint-signing)",
+    "ES256-WebAuthn (forestrie private-use; delegation proofs, certificates " +
+      "and session-key endorsements, never checkpoint-signing)",
   ],
 ]);
 
 /**
- * Verifiable data structure ids (draft-ietf-cose-merkle-tree-proofs
- * registry). 3 is NOT a registered codepoint: draft-bryce-cose-merkle-
- * mountain-range-proofs requests TBD_1 (registration pending), and 3 is
- * only the value our test fixtures use — production emitters do not emit
- * header 395 at all. Render it as the draft's unregistered codepoint,
- * never as registry fact (F7, plan-2607-14 W1.5).
+ * Verifiable data structure ids (the COSE receipts registry, RFC 9942).
+ * 3 is NOT a registered codepoint: draft-bryce-cose-receipts-mmr-profile
+ * requests TBD_1 (registration pending). The Go sealer emits `395: 3` on
+ * every checkpoint and peak receipt; the TypeScript exporters do not, so a
+ * verifier must not require it. Render it as the draft's unregistered
+ * codepoint, never as registry fact. The display strings are the protocol
+ * registry's (spec/label-registry.md).
  */
 export const VDS_NAMES: ReadonlyMap<number, string> = new Map([
   [1, "RFC9162_SHA256 (Certificate Transparency)"],

package/src/lib/delegate-flow.ts

@@ -33,6 +33,8 @@ import {
   verifyDelegateKeyVoucher,
 } from "./delegate-voucher.js";
 
+import { responseProblemDetail } from "./http-problem.js";
+
 /** Fixed inclusive MMR start for a horizon delegation lease. */
 const MMR_START = 0;
 
@@ -170,7 +172,7 @@ export async function runDelegateFlow(
   const pendingUrl = `${params.coordinatorUrl}/api/logs/${params.logId}/pending-delegation`;
   const pendingRes = await fetchImpl(pendingUrl);
   if (!pendingRes.ok) {
-    const preview = (await pendingRes.text()).slice(0, 200);
+    const preview = await responseProblemDetail(pendingRes, 200);
     throw new DelegateFlowError(
       `pending-delegation fetch failed: HTTP ${pendingRes.status} ${preview}`,
       pendingRes.status,
@@ -270,7 +272,7 @@ export async function runDelegateFlow(
     }),
   });
   if (!submitRes.ok) {
-    const preview = (await submitRes.text()).slice(0, 200);
+    const preview = await responseProblemDetail(submitRes, 200);
     throw new DelegateFlowError(
       `certificate submit failed: HTTP ${submitRes.status} ${preview}`,
       submitRes.status,

package/src/lib/http-problem.ts

@@ -0,0 +1,53 @@
+/**
+ * The human-readable reason a canopy / coordinator request was rejected
+ * (FOR-579).
+ *
+ * canopy-api answers with RFC 9457 problem details encoded as CBOR (served
+ * as `application/cbor` on most routes, `application/problem+cbor` on the
+ * SCRAPI ones); the delegation coordinator uses `application/problem+json`.
+ * Reading such a body with `response.text()` and printing it yields
+ * unreadable bytes, which is how a `400` from a strict CBOR decoder hid its
+ * cause (`Invalid CBOR body`) through four qualification runs on
+ * 2026-09-20. This decodes whichever form arrived and falls back to the
+ * text body. It never throws.
+ */
+import { decodeProblemDetailsBytes } from "@forestrie/scrapi-client";
+
+/** Longest string returned; problem bodies are short, this is a guard. */
+export const MAX_PROBLEM_DETAIL = 512;
+
+function describe(problem: {
+  title?: string;
+  detail?: string;
+}): string | undefined {
+  const { title, detail } = problem;
+  if (detail && title) return `${title}: ${detail}`;
+  return detail ?? title;
+}
+
+export async function responseProblemDetail(
+  response: Response,
+  max = MAX_PROBLEM_DETAIL,
+): Promise<string> {
+  const contentType = (response.headers.get("content-type") ?? "").toLowerCase();
+  let text = "";
+  try {
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (bytes.length === 0) return "";
+    if (contentType.includes("cbor")) {
+      // No content type passed: canopy-api serves most problem bodies as
+      // plain application/cbor, so decode opportunistically.
+      const problem = decodeProblemDetailsBytes(bytes);
+      const described = problem && describe(problem);
+      if (described) return described.slice(0, max);
+    }
+    text = new TextDecoder().decode(bytes);
+    if (contentType.includes("json")) {
+      const described = describe(JSON.parse(text) as { title?: string; detail?: string });
+      if (described) return described.slice(0, max);
+    }
+  } catch {
+    // fall through to whatever text we have
+  }
+  return text.slice(0, max);
+}

package/src/lib/known-log-key.ts

@@ -0,0 +1,35 @@
+import {
+  knownLogKeyFromBytes,
+  type RootVerifyKey,
+} from "@forestrie/receipt-verify";
+
+/** The accepted `--known-log-key` forms, for error messages and help. */
+export const KNOWN_LOG_KEY_FORMS =
+  "base64 x||y (64-byte ES256 public key) or a 20-byte KS256 address (0x + 40 hex, or base64)";
+
+/**
+ * Parse the caller-known log OWNER key (`--known-log-key`). Forms:
+ *
+ * - base64 of 64 bytes: an ES256 public key, x||y;
+ * - `0x` + 40 hex, or base64 of 20 bytes: a KS256 (Ethereum) address.
+ *
+ * Length alone decides the algorithm (via `knownLogKeyFromBytes`, the same
+ * rule univocity applies). Either way the caller ASSERTS the key owns the log.
+ */
+export async function parseKnownLogKey(value: string): Promise<RootVerifyKey> {
+  const v = value.trim();
+  const bytes = /^0x[0-9a-fA-F]{40}$/.test(v)
+    ? new Uint8Array(Buffer.from(v.slice(2), "hex"))
+    : new Uint8Array(Buffer.from(v, "base64"));
+  if (bytes.length !== 64 && bytes.length !== 20) {
+    throw new Error(
+      `--known-log-key must be ${KNOWN_LOG_KEY_FORMS}; decoded ${bytes.length} bytes`,
+    );
+  }
+  return knownLogKeyFromBytes(bytes);
+}
+
+/** True for a KS256 root (a `ParsedKs256RootKey`, not a WebCrypto key). */
+export function isKs256Root(key: RootVerifyKey): boolean {
+  return !(key instanceof CryptoKey);
+}