@forestrie/receipt-verify 0.7.0 → 0.7.1

package/dist/checkpoint-chain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkpoint-chain.d.ts","sourceRoot":"","sources":["../src/checkpoint-chain.ts"],"names":[],"mappings":"AA6BA,iEAAiE;AACjE,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IACtB,uEAAuE;IACvE,UAAU,EAAE,UAAU,EAAE,CAAC;CAC1B,CAAC;AAeF,gEAAgE;AAChE,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,UAAU,GAC1B,0BAA0B,CAiC5B;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,0BAA0B,EACjC,eAAe,EAAE,UAAU,EAAE,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAmBvB;AAED;+DAC+D;AAC/D,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAQxE;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GACrE;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,aAAa,GACb,oBAAoB,GACpB,WAAW,GACX,iBAAiB,CAAC;IACtB,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B,CAAC;AAEN;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,eAAe,EAAE,CACf,eAAe,EAAE,UAAU,EAC3B,eAAe,EAAE,UAAU,KACxB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;CAChC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAiGjC"}
+{"version":3,"file":"checkpoint-chain.d.ts","sourceRoot":"","sources":["../src/checkpoint-chain.ts"],"names":[],"mappings":"AA6BA,iEAAiE;AACjE,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IACtB,uEAAuE;IACvE,UAAU,EAAE,UAAU,EAAE,CAAC;CAC1B,CAAC;AA2BF,gEAAgE;AAChE,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,UAAU,GAC1B,0BAA0B,CA6C5B;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,0BAA0B,EACjC,eAAe,EAAE,UAAU,EAAE,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAmBvB;AAED;+DAC+D;AAC/D,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAQxE;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GACrE;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,aAAa,GACb,oBAAoB,GACpB,WAAW,GACX,iBAAiB,CAAC;IACtB,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B,CAAC;AAEN;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,eAAe,EAAE,CACf,eAAe,EAAE,UAAU,EAC3B,eAAe,EAAE,UAAU,KACxB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;CAChC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAiGjC"}

package/dist/checkpoint-chain.js

@@ -26,15 +26,23 @@ import { parseCheckpoint } from "./build-receipt-offline.js";
 const VDS_COSE_RECEIPT_PROOFS_TAG = 396;
 const VDP_CONSISTENCY_PROOF_KEY = -2;
 function asBigint(v, what) {
-    if (typeof v === "bigint")
+    // Unsigned only: a negative size flows into `peakMMRIndexes`, whose
+    // `posHeight` spins forever on a non-positive argument — a malformed `.sth`
+    // must be rejected in bounded time, before any such call (FOR-414).
+    if (typeof v === "bigint") {
+        if (v < 0n)
+            throw new Error(`${what}: must be an unsigned integer, got ${v}`);
         return v;
-    if (typeof v === "number" && Number.isSafeInteger(v))
+    }
+    if (typeof v === "number" && Number.isSafeInteger(v) && v >= 0) {
         return BigInt(v);
+    }
     throw new Error(`${what}: expected an unsigned integer`);
 }
 function asBytesArray(v, what) {
-    if (!Array.isArray(v) || v.some((e) => !(e instanceof Uint8Array))) {
-        throw new Error(`${what}: expected an array of byte strings`);
+    if (!Array.isArray(v) ||
+        v.some((e) => !(e instanceof Uint8Array) || e.length !== 32)) {
+        throw new Error(`${what}: expected an array of 32-byte strings`);
     }
     return v;
 }
@@ -58,9 +66,19 @@ export function checkpointConsistencyProof(checkpointBytes) {
         pathsRaw.some((p) => !Array.isArray(p) || p.some((n) => !(n instanceof Uint8Array)))) {
         throw new Error("consistency paths must be arrays of byte strings");
     }
+    const treeSize1 = asBigint(proof[0], "tree-size-1");
+    const treeSize2 = asBigint(proof[1], "tree-size-2");
+    // A consistency proof strictly grows the tree; enforce `0 <= ts1 < ts2`
+    // (ts1 == 0 is a legitimate base-0 first link). This is the primary guard
+    // that keeps `treeSize2 - 1` / `treeSize1 - 1` non-negative before they
+    // reach `peakMMRIndexes` (FOR-414); the unsigned check in `asBigint` and
+    // the `posHeight` guard in @forestrie/merklelog are defence-in-depth.
+    if (treeSize2 <= treeSize1) {
+        throw new Error(`consistency proof must grow the tree: tree-size-1 ${treeSize1} < tree-size-2 ${treeSize2}`);
+    }
     return {
-        treeSize1: asBigint(proof[0], "tree-size-1"),
-        treeSize2: asBigint(proof[1], "tree-size-2"),
+        treeSize1,
+        treeSize2,
         paths: pathsRaw,
         rightPeaks: asBytesArray(proof[3], "right-peaks"),
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forestrie/receipt-verify",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "license": "MIT",
   "type": "module",
   "description": "Offline SCITT grant receipt verification (ADR-0045)",
@@ -29,7 +29,7 @@
   "dependencies": {
     "@noble/hashes": "^1.7.1",
     "@forestrie/encoding": "0.5.0",
-    "@forestrie/merklelog": "0.2.0"
+    "@forestrie/merklelog": "0.2.1"
   },
   "devDependencies": {
     "esbuild": "^0.24.0",

package/src/checkpoint-chain.ts

@@ -38,14 +38,26 @@ export type CheckpointConsistencyProof = {
 };
 
 function asBigint(v: unknown, what: string): bigint {
-  if (typeof v === "bigint") return v;
-  if (typeof v === "number" && Number.isSafeInteger(v)) return BigInt(v);
+  // Unsigned only: a negative size flows into `peakMMRIndexes`, whose
+  // `posHeight` spins forever on a non-positive argument — a malformed `.sth`
+  // must be rejected in bounded time, before any such call (FOR-414).
+  if (typeof v === "bigint") {
+    if (v < 0n)
+      throw new Error(`${what}: must be an unsigned integer, got ${v}`);
+    return v;
+  }
+  if (typeof v === "number" && Number.isSafeInteger(v) && v >= 0) {
+    return BigInt(v);
+  }
   throw new Error(`${what}: expected an unsigned integer`);
 }
 
 function asBytesArray(v: unknown, what: string): Uint8Array[] {
-  if (!Array.isArray(v) || v.some((e) => !(e instanceof Uint8Array))) {
-    throw new Error(`${what}: expected an array of byte strings`);
+  if (
+    !Array.isArray(v) ||
+    v.some((e) => !(e instanceof Uint8Array) || e.length !== 32)
+  ) {
+    throw new Error(`${what}: expected an array of 32-byte strings`);
   }
   return v as Uint8Array[];
 }
@@ -80,9 +92,21 @@ export function checkpointConsistencyProof(
   ) {
     throw new Error("consistency paths must be arrays of byte strings");
   }
+  const treeSize1 = asBigint(proof[0], "tree-size-1");
+  const treeSize2 = asBigint(proof[1], "tree-size-2");
+  // A consistency proof strictly grows the tree; enforce `0 <= ts1 < ts2`
+  // (ts1 == 0 is a legitimate base-0 first link). This is the primary guard
+  // that keeps `treeSize2 - 1` / `treeSize1 - 1` non-negative before they
+  // reach `peakMMRIndexes` (FOR-414); the unsigned check in `asBigint` and
+  // the `posHeight` guard in @forestrie/merklelog are defence-in-depth.
+  if (treeSize2 <= treeSize1) {
+    throw new Error(
+      `consistency proof must grow the tree: tree-size-1 ${treeSize1} < tree-size-2 ${treeSize2}`,
+    );
+  }
   return {
-    treeSize1: asBigint(proof[0], "tree-size-1"),
-    treeSize2: asBigint(proof[1], "tree-size-2"),
+    treeSize1,
+    treeSize2,
     paths: pathsRaw as Uint8Array[][],
     rightPeaks: asBytesArray(proof[3], "right-peaks"),
   };