@itechsmart/prooflink-verifier 1.0.0 → 2.0.0

package/README.md

@@ -1,159 +1,218 @@
 # ProofLink™ Verifier
 
-**Open-source cryptographic verification logic for iTechSmart UAIO receipts.**
+[![npm](https://img.shields.io/npm/v/%40itechsmart%2Fprooflink-verifier)](https://www.npmjs.com/package/@itechsmart/prooflink-verifier)
+[![license](https://img.shields.io/badge/license-MIT-blue)](./LICENSE)
+[![Verify Live](https://img.shields.io/badge/verify-live-00A870)](https://verify.itechsmart.dev)
+[![ledger](https://img.shields.io/badge/live_ledger-80%2C000%2B_receipts-22d3ee)](https://verify.itechsmart.dev)
 
-> Don't trust our AI. Trust the math.
+> **Every other AI-accountability standard is a PDF. ProofLink is a running ledger of
+> 80,000+ cryptographically-sealed AI actions you can verify right now — not a spec, a
+> live chain.** → **[verify.itechsmart.dev](https://verify.itechsmart.dev)**
 
----
+**Open-source, zero-dependency cryptographic verification logic for iTechSmart UAIO
+receipts** — the reference implementation of the
+[ProofLink Receipt Standard **v3.0**](https://github.com/Iteksmart/prooflink-standard/blob/main/ProofLink-Receipt-Standard-v3.md).
 
-## What is this?
+**Independently verify what an autonomous AI actually did.**
 
-When iTechSmart's UAIO platform autonomously remediates infrastructure — restarting a crashed pod, patching a misconfiguration, rolling back a bad deployment — it generates a **ProofLink receipt**: a cryptographically signed, hash-chained record of exactly what happened, when, and why.
+ProofLink is the **Trust & Accountability Layer for Autonomous AI** by [iTechSmart Inc.](https://itechsmart.dev) Every autonomous action seals a cryptographic receipt — SHA-256 hash-chained, **Ed25519-signed**, Bitcoin-anchored via OpenTimestamps — into a public ledger.
 
-This repository contains the **open-source verification logic** that anyone can use to independently confirm those receipts haven't been tampered with.
+This package is the open-source verifier. You don't need an account. You don't need a demo. You don't need to trust iTechSmart.
 
-You don't need to trust us. You can verify the math yourself.
+> **Don't trust the AI. Trust the math.**
 
----
+## Not a spec — a running chain
 
-## How it works
+Live snapshot (2026-07-02, `/api/chain` + `/api/stats`): **79,000+ receipts**, chain
+**intact (`chain_intact: true`, 0 breaks)**, **2,100+ strict cryptographically-verifiable v3
+receipts** (every new action is sealed as v3), **13,700+ Bitcoin-anchored** (~17%, growing
+daily).
 
-Each ProofLink receipt contains:
+**Honest two-era note.** The `*V3` API below strictly verifies v3 receipts
+(`schema_version "3.0"`): hash recompute + canonical re-derivation + Ed25519 + chain link.
+Legacy v1/v2 receipts are pointer-linked and preserved unmodified — disclosed openly at
+`/api/stats`. `strict_full_chain_linked: false` is the disclosed count of legacy pointer
+links, **not a chain break** (`breaks: 0`). We do not claim all 79k are strict-verifiable;
+2,100+ v3 are, and the count grows with every action.
 
-1. **SHA-256 hash** — computed over all fields of the receipt (deterministic, canonical JSON)
-2. **Previous hash** — the SHA-256 of the preceding receipt, creating a tamper-evident chain
-3. **Chain position** — sequential integer; gaps indicate missing receipts
-4. **Timestamp** — ISO 8601, must be chronologically ordered
+## Built for the regulations
 
-Altering **any** receipt in the chain invalidates **every subsequent receipt** — the same principle as Bitcoin's blockchain, applied to infrastructure audit trails.
+| Regulation / framework | ProofLink field / mechanism that satisfies it |
+|---|---|
+| **EU AI Act (Reg. 2024/1689) Article 12** — automatic tamper-evident logging for high-risk AI | Append-only hash chain; every action seals `timestamp`, `actor`, `action`, `subject`, `outcome`, `details` |
+| **NIST AI RMF 1.0 — MEASURE 2.7 / MANAGE 4.1** — monitoring evaluated & documented | `security` / `platform_fix` / `platform_health_check` receipts, signed & immutable; `actor` separates system/agent/operator |
+| **CMMC L2 — AU.L2-3.3.1 / AU.L2-3.3.8** — retain & protect audit logs | SHA-256 chain + Ed25519 make any edit/deletion/reorder detectable; Bitcoin anchoring adds external existence proof |
+| **SOC 2 — CC7.2 / CC7.3 / CC8.1** — anomaly monitoring & change management | `signal_classified` / `security` receipts; `config_change` records `{before_hash, after_hash, diff_summary}` |
+| **ISO/IEC 42001:2023 — Clause 9.1** — retain documented monitoring evidence | The receipt ledger is the retained cryptographic evidence; `compliance_tags` seal the control claim inside the signature |
 
-```
-Receipt 0 (genesis)           Receipt 1                    Receipt 2
-┌─────────────────────┐       ┌─────────────────────┐      ┌─────────────────────┐
-│ sha256: abc123...   │──────▶│ prev_hash: abc123... │─────▶│ prev_hash: def456...│
-│ prev_hash: null     │       │ sha256: def456...    │      │ sha256: ghi789...   │
-│ chain_position: 0   │       │ chain_position: 1    │      │ chain_position: 2   │
-└─────────────────────┘       └─────────────────────┘      └─────────────────────┘
-```
+## Connect anything — every call seals a receipt
+
+- **MCP server** — verify/search receipts from any MCP client (Claude, Cursor, Copilot,
+  LangGraph, CrewAI): `prooflink_verify_receipt`, `prooflink_search_receipts`,
+  `prooflink_verify_chain`.
+- **FastAPI / REST** — `verify.itechsmart.dev` exposes `/api/export`, `/api/verify/<id>`,
+  `/api/chain`, `/api/stats`, `/api/anchors`, `/api/how-to-verify`.
+- **SDK** — [`prooflink-sdk`](https://github.com/Iteksmart/prooflink-sdk) (Python +
+  TypeScript) for sealing; this repo for zero-dependency verification.
 
-If you alter Receipt 1's `action` field:
-- Its computed SHA-256 changes → `sha256` field no longer matches → **tamper detected**
-- Receipt 2's `prev_hash` no longer matches → **chain broken**
+ProofLink aligns conceptually with the IETF Internet-Draft
+[`draft-sharif-agent-audit-trail-00`](https://datatracker.ietf.org/doc/html/draft-sharif-agent-audit-trail-00)
+(same problem, shared SHA-256 hash-chain core) while differing deliberately on
+canonicalization (`json.dumps`, not RFC 8785 JCS) and signature (Ed25519, not ECDSA P-256).
 
 ---
 
-## Installation
+## Verify a real receipt in 30 seconds
 
 ```bash
-npm install @itechsmart/prooflink-verifier
+# Full cryptographic verification of one receipt from the live public ledger:
+npx @itechsmart/prooflink-verifier 450ebfeb2a1cb00d
+
+#   ✓ hash_integrity            SHA256(canonical_bytes) == hash_sha256
+#   ✓ canonical_rederivation    re-derived canonical bytes match
+#   ✓ ed25519_signature         Ed25519 OK
+#   VERIFIED
+
+# Pointer-linkage check on the newest 25 receipts in the chain:
+npx @itechsmart/prooflink-verifier --chain 25
 ```
 
-Or clone and use directly:
+Grab any receipt ID from the live ledger at **[verify.itechsmart.dev](https://verify.itechsmart.dev)** — no account, no demo, no trust required.
 
-```bash
-git clone https://github.com/Iteksmart/prooflink-verifier
-cd prooflink-verifier
-npm install
+---
+
+## Conformance to ProofLink Receipt Standard v3.0
+
+This verifier ships a **Standard v3.0-conformant** verifier for the **live v3
+receipt format** ([`ProofLink-Receipt-Standard-v3.md`](https://github.com/Iteksmart/prooflink-standard/blob/main/ProofLink-Receipt-Standard-v3.md)). Import the `*V3` API:
+
+```ts
+import { verifyV3, verifyReceiptV3, verifyChainV3 } from "prooflink-verifier";
+
+const res = await fetch("https://verify.itechsmart.dev/api/verify/<id>");
+const { receipt } = await res.json();
+verifyV3(receipt);                 // boolean — all 4 Standard checks
+verifyReceiptV3(receipt, prevHash) // { valid, checks[], errors[] }
 ```
 
+It performs the four normative checks: (1) `SHA256(canonical_bytes) == hash_sha256`,
+(2) canonical re-derivation of `canonical_bytes`, (3) Ed25519 signature over the raw
+`canonical_bytes` under the embedded (published) public key, (4) `prev_hash` chain link.
+
+### ⚠ Schema drift — read this
+
+The **original** exports (`computeReceiptHash`, `verifyReceipt`, `verifyChain`,
+`ProofLinkVerifier`) target a **pre-v3 / legacy receipt shape**
+(`receipt_id`, `sha256`, `previous_hash`, `before_state`, `after_state`,
+`nist_controls`, `arbiter_policy`, …) and hash a **fixed field list** with
+`JSON.stringify` and **no signature**. **Live receipts no longer match that shape.**
+The live ledger emits v3 receipts (`id`, `hash_sha256`, `prev_hash`,
+`canonical_bytes`, Ed25519 `signature`, full-payload canonicalization). Use the
+`*V3` API above for anything fetched from `verify.itechsmart.dev` today. The legacy
+exports are retained unchanged for historical/pre-v3 receipts. See the DRIFT NOTICE
+at the top of `src/standard-v3.ts`.
+
 ---
 
-## Usage
 
-### Verify a single receipt
+## Why Cryptographic Proof?
 
-```typescript
-import { verifyReceipt } from '@itechsmart/prooflink-verifier'
+Modern enterprise IT generates millions of autonomous actions per day — auto-scaling, patching, remediating, classifying. Most happen with no human in the loop. The audit story today is a mess of mutable logs, ad-hoc PDFs, and dashboards no one trusts.
 
-const result = verifyReceipt(receipt, previousReceipt)
+Regulators are catching up. **EU AI Act Article 12** (enforcement 2026-08-02) requires high-risk AI systems to maintain tamper-evident logs of every decision. NIST AI RMF and SOC 2 are tightening too.
 
-console.log(result.valid)           // true/false
-console.log(result.tamper_detected) // true if hash or chain broken
-console.log(result.checks)          // detailed check results
-console.log(result.errors)          // list of failures
-```
+A cryptographic receipt chain is the cheapest way to meet those requirements *and* the only way to prove autonomous behavior to a skeptical auditor. ProofLink generates one receipt per autonomous action, SHA-256 hashed, linked to the previous receipt, and publicly verifiable at [verify.itechsmart.dev](https://verify.itechsmart.dev).
 
-### Verify an entire chain
+## EU AI Act Article 12 Alignment
 
-```typescript
-import { verifyChain } from '@itechsmart/prooflink-verifier'
+Article 12 of the EU AI Act (effective 2026-08-02) requires providers of high-risk AI systems to maintain automatic, tamper-evident logs of every decision. Mutable log files, post-hoc PDFs, and ephemeral dashboards do not satisfy this requirement.
 
-const receipts = await fetchReceiptsFromLedger()
-const result = verifyChain(receipts)
+ProofLink receipts satisfy Article 12 by design:
 
-console.log(result.chain_valid)      // true if all receipts intact
-console.log(result.tamper_detected)  // true if any tampering found
-console.log(result.tamper_position)  // which position was altered
-console.log(result.summary)          // human-readable summary
-```
+| Article 12 requirement | ProofLink mechanism |
+|---|---|
+| Automatic logging at runtime | Receipt generated synchronously on every autonomous action |
+| Tamper-evident records | SHA-256 hash chain — altering any receipt invalidates every subsequent one |
+| Identification of the system | `executor` field carries the model/agent identifier |
+| Chronological ordering | `chain_position` integer + ISO 8601 `timestamp`, both verified during chain checks |
+| Retention | Hash chain stored append-only; OpenTimestamps anchor optionally pins to Bitcoin |
 
-### Compute a hash yourself
+## NIST 800-53 Control Mapping
 
-```typescript
-import { computeReceiptHash } from '@itechsmart/prooflink-verifier'
+Each receipt asserts compliance with the following NIST 800-53 controls. The mapping is recorded inside the receipts `nist_controls` field so it travels with the proof:
+
+| Control | Title | How ProofLink supports |
+|---|---|---|
+| **AU-2** | Event Logging | Every autonomous action generates an event record |
+| **AU-10** | Non-Repudiation | Hash chain + executor identity prevent denial |
+| **SI-7** | Software, Firmware, and Information Integrity | Tamper-evident chain on the action trail |
+| **SA-11** | Developer Testing and Evaluation | `test_result` field captured per receipt |
 
-const { sha256, ...receiptWithoutHash } = receipt
-const computed = computeReceiptHash(receiptWithoutHash)
+## What gets verified (schema v3 — the live ledger format)
 
-console.log(computed === receipt.sha256) // true if untampered
+Every v3 receipt is sealed like this on the platform side:
+
+```
+payload          = all receipt fields EXCEPT (canonical_bytes, signature, hash_sha256)
+                   — including prev_hash and chain_position, so the chain link
+                   itself is covered by the hash AND the signature
+canonical_bytes  = canonical JSON of payload (sorted keys, compact, UTF-8), hex-encoded
+hash_sha256      = SHA-256(canonical_bytes)
+signature        = Ed25519 over the raw canonical bytes (32-byte public key, hex)
 ```
 
+The verifier independently re-checks all three:
+
+| Check | What it proves |
+|---|---|
+| `hash_integrity` | The recorded hash really is the SHA-256 of the signed bytes |
+| `payload_consistency` | The fields you're reading are exactly what was hashed and signed — nothing displayed differs from the sealed record |
+| `signature_valid` | The Ed25519 signature verifies against the canonical bytes |
+
+Chain-level checks (`--chain`, `verifyPublicChain`): every receipt's `previous_hash` must equal the prior receipt's `sha256`, positions must be sequential, timestamps ordered. Altering any historic receipt breaks every receipt after it — the same principle as Bitcoin's blockchain, applied to AI accountability.
+
+Beyond this library: receipts are also anchored to the **Bitcoin blockchain via OpenTimestamps**, are **SCITT-compatible** (IETF architecture), and carry **W3C Verifiable Credential** envelopes plus clause-level **EU AI Act Article 12(1)/(2)/(4)** and NIST AI RMF mappings. See the [public verification spec](https://verify.itechsmart.dev/api/how-to-verify).
+
 ---
 
-## The canonical hash function
+## Installation & library usage
 
-The hash is computed over a deterministic JSON serialization of all fields **except** `sha256` itself:
+```bash
+npm install @itechsmart/prooflink-verifier
+```
 
 ```typescript
-export function computeReceiptHash(receipt: Omit<ProofLinkReceipt, 'sha256'>): string {
-  const canonical = JSON.stringify({
-    receipt_id: receipt.receipt_id,
-    version: receipt.version,
-    timestamp: receipt.timestamp,
-    container: receipt.container,
-    executor: receipt.executor,
-    trigger: receipt.trigger,
-    action: receipt.action,
-    action_parameters: receipt.action_parameters,
-    before_state: receipt.before_state,
-    after_state: receipt.after_state,
-    nist_controls: receipt.nist_controls,
-    human_input: receipt.human_input,
-    arbiter_policy: receipt.arbiter_policy,
-    previous_hash: receipt.previous_hash,
-    chain_position: receipt.chain_position,
-  }, null, 0)
-
-  return crypto.createHash('sha256').update(canonical, 'utf8').digest('hex')
-}
+import {
+  fetchAndVerifyReceipt,   // full crypto against the live ledger
+  fetchAndVerifyChain,     // pointer-linkage check on the newest N receipts
+  verifyReceiptV3,         // verify a v3 receipt object you already have
+  verifyPublicChain,       // verify a list from /api/receipts
+  verify, verifyAnyChain,  // schema-aware: auto-detects v3 vs legacy receipts
+} from '@itechsmart/prooflink-verifier'
+
+const result = await fetchAndVerifyReceipt('450ebfeb2a1cb00d')
+console.log(result.valid)            // true
+console.log(result.checks)           // hash_integrity, payload_consistency, signature_valid
+
+const chain = await fetchAndVerifyChain(50)
+console.log(chain.chain_valid)       // true
+console.log(chain.ledger_total)      // 80,000+ and counting
 ```
 
-The field ordering is fixed and documented. You can reimplement this in any language and verify receipts independently.
-
----
-
-## Verification checks
+Public API endpoints (no auth):
 
-For each receipt, the verifier runs 5 checks:
+- `GET https://verify.itechsmart.dev/api/receipt/<id>` — full receipt incl. `canonical_bytes` + `signature`
+- `GET https://verify.itechsmart.dev/api/receipts?limit=N` — newest receipts (summary)
+- `GET https://verify.itechsmart.dev/api/stats` — live totals + chain integrity
+- `GET https://verify.itechsmart.dev/api/how-to-verify` — the full verification spec
 
-| Check | What it verifies |
-|-------|-----------------|
-| `schema_valid` | All required fields present |
-| `receipt_integrity` | Stored SHA-256 matches recomputed hash |
-| `chain_link` | `previous_hash` matches prior receipt's `sha256` |
-| `chain_position` | Position is sequential (no gaps) |
-| `timestamp_order` | Timestamps are chronologically ordered |
+**For AI agents:** the same verification is exposed over MCP at [mcp.itechsmart.dev](https://mcp.itechsmart.dev) — Claude, GPT, Copilot and Cursor can verify receipts directly (17 tools).
 
 ---
 
-## Live receipts
-
-Verify real receipts from iTechSmart's production ledger:
+## Legacy schema (v1)
 
-```
-https://verify.itechsmart.dev
-https://api.itechsmart.dev/api/v1/prooflink/receipts
-```
+Earlier receipts used a fixed-field schema (`container`, `executor`, `trigger`, …). The original verification functions (`verifyReceipt`, `verifyChain`, `computeReceiptHash`) still support it, and `verify()` / `verifyAnyChain()` auto-detect which schema you're holding.
 
 ---
 
@@ -174,23 +233,29 @@ This verifier is intentionally minimal. The goal is auditable simplicity — not
 PRs welcome for:
 - Additional language implementations (Python, Go, Rust)
 - OpenTimestamps proof verification
-- CLI tool
 - Test vectors
 
 ---
 
-## License
+## Why this exists
+
+Regulators (EU AI Act Article 12, enforcement August 2, 2026), auditors, and customers increasingly ask one question about autonomous AI: **"Prove it."**
 
-MIT — use freely, audit openly, verify everything.
+Audit logs can be edited. Dashboards can be wrong. Vendor attestations require trust. A hash-chained, signed, Bitcoin-anchored receipt that *anyone* can verify with open-source code requires none of those things.
 
 ---
 
 ## About iTechSmart
 
-iTechSmart builds UAIO (Unified Autonomous IT Operations) — the first enterprise platform that autonomously detects, remediates, and cryptographically proves every infrastructure action.
+iTechSmart Inc. builds UAIO (Unified Autonomous IT Operations) — the first enterprise platform that autonomously detects, remediates, and cryptographically proves every infrastructure action — and operates ProofLink, the Trust & Accountability Layer for Autonomous AI.
 
-- Website: [itechsmart.dev](https://itechsmart.dev)
+- Product: [prooflink.itechsmart.dev](https://prooflink.itechsmart.dev)
 - Verify receipts: [verify.itechsmart.dev](https://verify.itechsmart.dev)
+- Website: [itechsmart.dev](https://itechsmart.dev)
 - Whitepaper: [whitepaper.itechsmart.dev](https://whitepaper.itechsmart.dev)
 
-SDVOSB · CAGE: 172W2 · NVIDIA Inception · NIST CSF 96/100
+SDVOSB · CAGE: 172W2 · UEI: ZCPFX4N86G36 · NVIDIA Inception
+
+## License
+
+MIT © iTechSmart Inc. — use freely, audit openly, verify everything. ProofLink™ is a registered federal trademark of iTechSmart Inc.

package/bin/cli.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+/* ProofLink verifier CLI — verify receipts on the live public ledger.
+ *
+ *   npx @itechsmart/prooflink-verifier <receipt_id>   full crypto verify of one receipt
+ *   npx @itechsmart/prooflink-verifier --chain [N]    pointer-linkage check on newest N (default 25)
+ */
+const { fetchAndVerifyReceipt, fetchAndVerifyChain } = require('../dist/index.js');
+
+const GREEN = '\x1b[32m', RED = '\x1b[31m', DIM = '\x1b[2m', BOLD = '\x1b[1m', RESET = '\x1b[0m';
+
+async function main() {
+  const args = process.argv.slice(2);
+  if (!args.length || args[0] === '--help' || args[0] === '-h') {
+    console.log(`${BOLD}ProofLink Verifier${RESET} — don't trust the AI, trust the math.
+
+Usage:
+  prooflink-verify <receipt_id>     Fully verify one receipt (hash + payload + Ed25519)
+  prooflink-verify --chain [N]      Verify pointer linkage of the newest N receipts (default 25)
+
+Ledger: https://verify.itechsmart.dev  (no account required)`);
+    process.exit(0);
+  }
+
+  if (args[0] === '--chain') {
+    const n = parseInt(args[1], 10) || 25;
+    const r = await fetchAndVerifyChain(n);
+    console.log(`${BOLD}ProofLink public chain check${RESET} ${DIM}(newest ${r.receipts_verified} of ${r.ledger_total.toLocaleString()} receipts)${RESET}`);
+    console.log(r.chain_valid
+      ? `${GREEN}✓ ${r.summary}${RESET}`
+      : `${RED}✗ ${r.summary}${RESET}`);
+    if (r.errors.length) r.errors.slice(0, 5).forEach(e => console.log(`  ${RED}- ${e}${RESET}`));
+    console.log(`${DIM}Ledger-reported chain_intact: ${r.ledger_chain_intact}${RESET}`);
+    process.exit(r.chain_valid ? 0 : 1);
+  }
+
+  const id = args[0];
+  const r = await fetchAndVerifyReceipt(id);
+  if (!r.found) {
+    console.log(`${RED}✗ Receipt ${id} not found on the public ledger${RESET}`);
+    process.exit(2);
+  }
+  console.log(`${BOLD}ProofLink receipt ${id}${RESET}`);
+  for (const c of r.checks) {
+    console.log(`  ${c.passed ? GREEN + '✓' : RED + '✗'} ${c.name}${RESET} ${DIM}${c.detail}${RESET}`);
+  }
+  console.log(r.valid
+    ? `${GREEN}${BOLD}VERIFIED${RESET} — hash intact, payload consistent, Ed25519 signature valid.`
+    : r.tamper_detected
+      ? `${RED}${BOLD}TAMPER DETECTED${RESET}`
+      : `${RED}${BOLD}NOT FULLY VERIFIED${RESET} ${DIM}(see checks above)${RESET}`);
+  process.exit(r.valid ? 0 : 1);
+}
+
+main().catch(e => { console.error(`${RED}Error: ${e.message}${RESET}`); process.exit(3); });

package/dist/index.d.ts

@@ -1,2 +1,6 @@
 export * from './prooflink-verifier';
+export { verifyReceiptV3, verifyV3, verifyChainV3, canonicalize as canonicalizeV3, importEd25519PublicKey, PUBLISHED_PUBLIC_KEY, } from './standard-v3';
+export type { V3Receipt, V3Signature, V3Check, V3Result } from './standard-v3';
+export { fetchAndVerifyReceipt, fetchAndVerifyChain, verifyPublicChain, DEFAULT_LEDGER, } from './live';
+export type { PublicChainReceipt, PublicChainResult } from './live';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,sBAAsB,CAAC;AAIrC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,aAAa,EACb,YAAY,IAAI,cAAc,EAC9B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAI/E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC"}

package/dist/index.js

@@ -14,5 +14,25 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_LEDGER = exports.verifyPublicChain = exports.fetchAndVerifyChain = exports.fetchAndVerifyReceipt = exports.PUBLISHED_PUBLIC_KEY = exports.importEd25519PublicKey = exports.canonicalizeV3 = exports.verifyChainV3 = exports.verifyV3 = exports.verifyReceiptV3 = void 0;
+// Legacy pre-v3 verifier (verifies the historical ProofLinkReceipt shape:
+// receipt_id / sha256 / previous_hash / before_state / nist_controls …).
+// See the DRIFT NOTICE in ./standard-v3 — the LIVE ledger emits v3 receipts.
 __exportStar(require("./prooflink-verifier"), exports);
+// ProofLink Receipt Standard v3.0 — conformant verifier for LIVE v3 receipts.
+// Spec: https://verify.itechsmart.dev/api/how-to-verify
+var standard_v3_1 = require("./standard-v3");
+Object.defineProperty(exports, "verifyReceiptV3", { enumerable: true, get: function () { return standard_v3_1.verifyReceiptV3; } });
+Object.defineProperty(exports, "verifyV3", { enumerable: true, get: function () { return standard_v3_1.verifyV3; } });
+Object.defineProperty(exports, "verifyChainV3", { enumerable: true, get: function () { return standard_v3_1.verifyChainV3; } });
+Object.defineProperty(exports, "canonicalizeV3", { enumerable: true, get: function () { return standard_v3_1.canonicalize; } });
+Object.defineProperty(exports, "importEd25519PublicKey", { enumerable: true, get: function () { return standard_v3_1.importEd25519PublicKey; } });
+Object.defineProperty(exports, "PUBLISHED_PUBLIC_KEY", { enumerable: true, get: function () { return standard_v3_1.PUBLISHED_PUBLIC_KEY; } });
+// Live-ledger helpers: fetch + verify against verify.itechsmart.dev, and
+// pointer-linkage verification for the public summary list (/api/receipts).
+var live_1 = require("./live");
+Object.defineProperty(exports, "fetchAndVerifyReceipt", { enumerable: true, get: function () { return live_1.fetchAndVerifyReceipt; } });
+Object.defineProperty(exports, "fetchAndVerifyChain", { enumerable: true, get: function () { return live_1.fetchAndVerifyChain; } });
+Object.defineProperty(exports, "verifyPublicChain", { enumerable: true, get: function () { return live_1.verifyPublicChain; } });
+Object.defineProperty(exports, "DEFAULT_LEDGER", { enumerable: true, get: function () { return live_1.DEFAULT_LEDGER; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,6EAA6E;AAC7E,uDAAqC;AAErC,8EAA8E;AAC9E,wDAAwD;AACxD,6CAOuB;AANrB,8GAAA,eAAe,OAAA;AACf,uGAAA,QAAQ,OAAA;AACR,4GAAA,aAAa,OAAA;AACb,6GAAA,YAAY,OAAkB;AAC9B,qHAAA,sBAAsB,OAAA;AACtB,mHAAA,oBAAoB,OAAA;AAItB,yEAAyE;AACzE,4EAA4E;AAC5E,+BAKgB;AAJd,6GAAA,qBAAqB,OAAA;AACrB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AACjB,sGAAA,cAAc,OAAA"}

package/dist/live.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Live-ledger helpers: fetch receipts from verify.itechsmart.dev and verify
+ * them with the Standard v3.0 verifier (see ./standard-v3), plus a
+ * pointer-linkage check for the public summary list (/api/receipts).
+ */
+import { type V3Result } from './standard-v3';
+export declare const DEFAULT_LEDGER = "https://verify.itechsmart.dev";
+export interface PublicChainReceipt {
+    receipt_id: string;
+    chain_position: number;
+    previous_hash: string;
+    sha256: string;
+    timestamp: string;
+    [key: string]: unknown;
+}
+export interface PublicChainResult {
+    chain_valid: boolean;
+    tamper_detected: boolean;
+    receipts_verified: number;
+    tamper_position: number | null;
+    summary: string;
+    errors: string[];
+}
+/**
+ * Pointer-linkage verification for the public summary list (/api/receipts):
+ * previous_hash links, monotonic chain positions, timestamp order.
+ * Full crypto per receipt requires the detail endpoint (see fetchAndVerifyReceipt).
+ */
+export declare function verifyPublicChain(receipts: PublicChainReceipt[]): PublicChainResult;
+/** Fetch a receipt by id from the public ledger and fully verify it (Standard v3.0). */
+export declare function fetchAndVerifyReceipt(receiptId: string, base?: string): Promise<V3Result & {
+    receipt_id: string;
+    found: boolean;
+}>;
+/** Fetch the newest N receipts from the public ledger and verify pointer linkage. */
+export declare function fetchAndVerifyChain(limit?: number, base?: string): Promise<PublicChainResult & {
+    ledger_total: number;
+    ledger_chain_intact: boolean;
+}>;
+//# sourceMappingURL=live.d.ts.map

package/dist/live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../src/live.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAmC,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE/E,eAAO,MAAM,cAAc,kCAAkC,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,iBAAiB,CA+BnF;AAED,wFAAwF;AACxF,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,MAAuB,GAC5B,OAAO,CAAC,QAAQ,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAU5D;AAED,qFAAqF;AACrF,wBAAsB,mBAAmB,CACvC,KAAK,SAAK,EACV,IAAI,GAAE,MAAuB,GAC5B,OAAO,CAAC,iBAAiB,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAA;CAAE,CAAC,CAIrF"}

package/dist/live.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_LEDGER = void 0;
+exports.verifyPublicChain = verifyPublicChain;
+exports.fetchAndVerifyReceipt = fetchAndVerifyReceipt;
+exports.fetchAndVerifyChain = fetchAndVerifyChain;
+/**
+ * Live-ledger helpers: fetch receipts from verify.itechsmart.dev and verify
+ * them with the Standard v3.0 verifier (see ./standard-v3), plus a
+ * pointer-linkage check for the public summary list (/api/receipts).
+ */
+const standard_v3_1 = require("./standard-v3");
+exports.DEFAULT_LEDGER = 'https://verify.itechsmart.dev';
+/**
+ * Pointer-linkage verification for the public summary list (/api/receipts):
+ * previous_hash links, monotonic chain positions, timestamp order.
+ * Full crypto per receipt requires the detail endpoint (see fetchAndVerifyReceipt).
+ */
+function verifyPublicChain(receipts) {
+    const errors = [];
+    let tamperPosition = null;
+    const sorted = [...receipts].sort((a, b) => a.chain_position - b.chain_position);
+    for (let i = 1; i < sorted.length; i++) {
+        const prev = sorted[i - 1];
+        const cur = sorted[i];
+        if (cur.chain_position !== prev.chain_position + 1) {
+            errors.push(`Gap between positions ${prev.chain_position} and ${cur.chain_position}`);
+            tamperPosition = tamperPosition ?? cur.chain_position;
+            continue;
+        }
+        if (cur.previous_hash !== prev.sha256) {
+            errors.push(`Broken link at position ${cur.chain_position}: previous_hash does not match prior sha256`);
+            tamperPosition = tamperPosition ?? cur.chain_position;
+        }
+        if (new Date(cur.timestamp).getTime() < new Date(prev.timestamp).getTime()) {
+            errors.push(`Timestamp regression at position ${cur.chain_position}`);
+        }
+    }
+    const ok = errors.length === 0;
+    return {
+        chain_valid: ok,
+        tamper_detected: !ok,
+        receipts_verified: sorted.length,
+        tamper_position: tamperPosition,
+        summary: ok
+            ? `Chain VALID — ${sorted.length} receipts, pointer linkage intact`
+            : `Chain INVALID — ${errors.length} problem(s), first at position ${tamperPosition}`,
+        errors,
+    };
+}
+/** Fetch a receipt by id from the public ledger and fully verify it (Standard v3.0). */
+async function fetchAndVerifyReceipt(receiptId, base = exports.DEFAULT_LEDGER) {
+    const res = await fetch(`${base}/api/receipt/${encodeURIComponent(receiptId)}`);
+    if (!res.ok) {
+        return { receipt_id: receiptId, found: false, valid: false, id: receiptId, checks: [], errors: [`HTTP ${res.status} from ledger`] };
+    }
+    const body = (await res.json());
+    if (!body.found || !body.receipt) {
+        return { receipt_id: receiptId, found: false, valid: false, id: receiptId, checks: [], errors: ['Receipt not found'] };
+    }
+    return { receipt_id: receiptId, found: true, ...(0, standard_v3_1.verifyReceiptV3)(body.receipt) };
+}
+/** Fetch the newest N receipts from the public ledger and verify pointer linkage. */
+async function fetchAndVerifyChain(limit = 25, base = exports.DEFAULT_LEDGER) {
+    const res = await fetch(`${base}/api/receipts?limit=${limit}`);
+    const body = (await res.json());
+    return { ...verifyPublicChain(body.receipts || []), ledger_total: body.total, ledger_chain_intact: body.chain_intact };
+}
+//# sourceMappingURL=live.js.map

package/dist/live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../src/live.ts"],"names":[],"mappings":";;;AAgCA,8CA+BC;AAGD,sDAaC;AAGD,kDAOC;AAzFD;;;;GAIG;AACH,+CAA+E;AAElE,QAAA,cAAc,GAAG,+BAA+B,CAAC;AAoB9D;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,QAA8B;IAC9D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,cAAc,QAAQ,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;YACtF,cAAc,GAAG,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC;YACtD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,2BAA2B,GAAG,CAAC,cAAc,6CAA6C,CAAC,CAAC;YACxG,cAAc,GAAG,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IAC/B,OAAO;QACL,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,CAAC,EAAE;QACpB,iBAAiB,EAAE,MAAM,CAAC,MAAM;QAChC,eAAe,EAAE,cAAc;QAC/B,OAAO,EAAE,EAAE;YACT,CAAC,CAAC,iBAAiB,MAAM,CAAC,MAAM,mCAAmC;YACnE,CAAC,CAAC,mBAAmB,MAAM,CAAC,MAAM,kCAAkC,cAAc,EAAE;QACtF,MAAM;KACP,CAAC;AACJ,CAAC;AAED,wFAAwF;AACjF,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,OAAe,sBAAc;IAE7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,GAAG,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC;IACtI,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6C,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAA,6BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,mBAAmB,CACvC,KAAK,GAAG,EAAE,EACV,OAAe,sBAAc;IAE7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6E,CAAC;IAC5G,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AACzH,CAAC"}

package/dist/prooflink-verifier.d.ts

@@ -47,6 +47,9 @@ export interface VerificationCheck {
  * Compute the expected SHA-256 hash for a receipt.
  * The hash covers all fields EXCEPT the sha256 field itself.
  * This is the canonical hash function — open for inspection.
+ *
+ * @param receipt Receipt object without the sha256 field
+ * @returns Hexadecimal string of the computed SHA-256 hash
  */
 export declare function computeReceiptHash(receipt: Omit<ProofLinkReceipt, 'sha256'>): string;
 /**

package/dist/prooflink-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prooflink-verifier.d.ts","sourceRoot":"","sources":["../src/prooflink-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,YAAY,EAAE,WAAW,CAAA;IACzB,WAAW,EAAE,WAAW,CAAA;IACxB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,QAAQ,CAAA;IACpD,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,iBAAiB,EAAE,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,OAAO,CAAA;IACxB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,MAAM,CAoBpF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAYnF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,gBAAgB,EACzB,eAAe,EAAE,gBAAgB,GAAG,IAAI,GACvC,iBAAiB,CA4BnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,eAAe,EAAE,gBAAgB,GAAG,IAAI,GACvC,iBAAiB,CAqBnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,gBAAgB,EACzB,eAAe,EAAE,gBAAgB,GAAG,IAAI,GACvC,iBAAiB,CAgBnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,iBAAiB,CAkBvE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,gBAAgB,EACzB,eAAe,GAAE,gBAAgB,GAAG,IAAW,GAC9C,kBAAkB,CAwBpB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG;IACzD,WAAW,EAAE,OAAO,CAAA;IACpB,eAAe,EAAE,OAAO,CAAA;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;CAChB,CAsCA;AAMD,eAAO,MAAM,iBAAiB;;;;;;CAM7B,CAAA;AAED,eAAe,iBAAiB,CAAA"}
+{"version":3,"file":"prooflink-verifier.d.ts","sourceRoot":"","sources":["../src/prooflink-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,YAAY,EAAE,WAAW,CAAA;IACzB,WAAW,EAAE,WAAW,CAAA;IACxB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,QAAQ,CAAA;IACpD,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,iBAAiB,EAAE,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,OAAO,CAAA;IACxB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAMD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,MAAM,CAoBpF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAYnF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,gBAAgB,EACzB,eAAe,EAAE,gBAAgB,GAAG,IAAI,GACvC,iBAAiB,CA4BnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,eAAe,EAAE,gBAAgB,GAAG,IAAI,GACvC,iBAAiB,CAqBnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,gBAAgB,EACzB,eAAe,EAAE,gBAAgB,GAAG,IAAI,GACvC,iBAAiB,CAgBnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,iBAAiB,CAkBvE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,gBAAgB,EACzB,eAAe,GAAE,gBAAgB,GAAG,IAAW,GAC9C,kBAAkB,CAwBpB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG;IACzD,WAAW,EAAE,OAAO,CAAA;IACpB,eAAe,EAAE,OAAO,CAAA;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;CAChB,CAsCA;AAMD,eAAO,MAAM,iBAAiB;;;;;;CAM7B,CAAA;AAED,eAAe,iBAAiB,CAAA"}

package/dist/prooflink-verifier.js

@@ -28,6 +28,9 @@ const crypto_1 = __importDefault(require("crypto"));
  * Compute the expected SHA-256 hash for a receipt.
  * The hash covers all fields EXCEPT the sha256 field itself.
  * This is the canonical hash function — open for inspection.
+ *
+ * @param receipt Receipt object without the sha256 field
+ * @returns Hexadecimal string of the computed SHA-256 hash
  */
 function computeReceiptHash(receipt) {
     const canonical = JSON.stringify({

package/dist/prooflink-verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"prooflink-verifier.js","sourceRoot":"","sources":["../src/prooflink-verifier.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;AA0DH,gDAoBC;AAMD,wDAYC;AAOD,0CA+BC;AAKD,kDAwBC;AAKD,oDAmBC;AAKD,kDAkBC;AAMD,sCA2BC;AAMD,kCA4CC;AAnSD,oDAA2B;AA+C3B,gDAAgD;AAChD,0BAA0B;AAC1B,gDAAgD;AAEhD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAAyC;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA,CAAC,qCAAqC;IAEjD,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,OAAyB;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,QAAQ,KAAK,MAAM,CAAA;IAElC,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;YAC/C,CAAC,CAAC,2BAA2B,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;KACjG,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAC7B,OAAyB,EACzB,eAAwC;IAExC,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,KAAK,IAAI,CAAA;QAC7C,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;YACN,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,6CAA6C;gBAC/C,CAAC,CAAC,wDAAwD,OAAO,CAAC,aAAa,EAAE;SACpF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,oDAAoD,OAAO,CAAC,cAAc,GAAG,CAAC,gBAAgB;SACvG,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,MAAM,CAAA;IAC/D,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,kCAAkC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;YACnF,CAAC,CAAC,0BAA0B,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;KAC9H,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CACjC,OAAyB,EACzB,eAAwC;IAExC,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,iDAAiD;SAC1D,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,KAAK,eAAe,CAAC,cAAc,GAAG,CAAC,CAAA;IAC5E,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,YAAY,OAAO,CAAC,cAAc,YAAY,eAAe,CAAC,cAAc,EAAE;YAChF,CAAC,CAAC,0BAA0B,eAAe,CAAC,cAAc,MAAM,OAAO,CAAC,cAAc,EAAE;KAC3F,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAClC,OAAyB,EACzB,eAAwC;IAExC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAA;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAA;IACrD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9D,MAAM,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAA;IAElC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,0BAA0B,OAAO,CAAC,SAAS,OAAO,eAAe,CAAC,SAAS,EAAE;YAC/E,CAAC,CAAC,4BAA4B,OAAO,CAAC,SAAS,aAAa,eAAe,CAAC,SAAS,EAAE;KAC1F,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,MAAM,QAAQ,GAAG;QACf,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;QAC7D,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa;QAClD,QAAQ,EAAE,gBAAgB,EAAE,aAAa;KAC1C,CAAA;IAED,MAAM,CAAC,GAAG,OAAkC,CAAA;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAA;IAEjF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAA;IACnC,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACrD,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAC3B,OAAyB,EACzB,kBAA2C,IAAI;IAE/C,MAAM,MAAM,GAAwB;QAClC,mBAAmB,CAAC,OAAO,CAAC;QAC5B,sBAAsB,CAAC,OAAO,CAAC;QAC/B,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC;QACzC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC;QAC7C,oBAAoB,CAAC,OAAO,EAAE,eAAe,CAAC;KAC/C,CAAA;IAED,MAAM,MAAM,GAAG,MAAM;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAEtC,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,MAAM;QAC9E,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,MAAM,CAAA;IAEpD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,eAAe,EAAE,cAAc;QAC/B,MAAM;KACP,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,QAA4B;IAOtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,IAAI;YACrB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,iCAAiC;SAC3C,CAAA;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAA;IAEhF,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,IAAI,cAAc,GAAkB,IAAI,CAAA;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEpB,IAAI,MAAM,CAAC,eAAe,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YACtD,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAA;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,cAAc,GAAG,cAAc,KAAK,IAAI,CAAA;IAE9C,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,cAAc;QAC/B,eAAe,EAAE,cAAc;QAC/B,OAAO;QACP,OAAO,EAAE,UAAU;YACjB,CAAC,CAAC,iBAAiB,QAAQ,CAAC,MAAM,2CAA2C;YAC7E,CAAC,CAAC,kDAAkD,cAAc,EAAE;KACvE,CAAA;AACH,CAAC;AAED,gDAAgD;AAChD,aAAa;AACb,gDAAgD;AAEnC,QAAA,iBAAiB,GAAG;IAC/B,WAAW,EAAE,kBAAkB;IAC/B,aAAa;IACb,WAAW;IACX,eAAe,EAAE,sBAAsB;IACvC,eAAe;CAChB,CAAA;AAED,kBAAe,yBAAiB,CAAA"}
+{"version":3,"file":"prooflink-verifier.js","sourceRoot":"","sources":["../src/prooflink-verifier.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;AA6DH,gDAoBC;AAMD,wDAYC;AAOD,0CA+BC;AAKD,kDAwBC;AAKD,oDAmBC;AAKD,kDAkBC;AAMD,sCA2BC;AAMD,kCA4CC;AAtSD,oDAA2B;AA+C3B,gDAAgD;AAChD,0BAA0B;AAC1B,gDAAgD;AAEhD;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAAC,OAAyC;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA,CAAC,qCAAqC;IAEjD,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,OAAyB;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,QAAQ,KAAK,MAAM,CAAA;IAElC,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;YAC/C,CAAC,CAAC,2BAA2B,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;KACjG,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAC7B,OAAyB,EACzB,eAAwC;IAExC,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,KAAK,IAAI,CAAA;QAC7C,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;YACN,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,6CAA6C;gBAC/C,CAAC,CAAC,wDAAwD,OAAO,CAAC,aAAa,EAAE;SACpF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,oDAAoD,OAAO,CAAC,cAAc,GAAG,CAAC,gBAAgB;SACvG,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,MAAM,CAAA;IAC/D,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,kCAAkC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;YACnF,CAAC,CAAC,0BAA0B,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;KAC9H,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CACjC,OAAyB,EACzB,eAAwC;IAExC,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,iDAAiD;SAC1D,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,KAAK,eAAe,CAAC,cAAc,GAAG,CAAC,CAAA;IAC5E,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,YAAY,OAAO,CAAC,cAAc,YAAY,eAAe,CAAC,cAAc,EAAE;YAChF,CAAC,CAAC,0BAA0B,eAAe,CAAC,cAAc,MAAM,OAAO,CAAC,cAAc,EAAE;KAC3F,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAClC,OAAyB,EACzB,eAAwC;IAExC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAA;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAA;IACrD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9D,MAAM,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAA;IAElC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,0BAA0B,OAAO,CAAC,SAAS,OAAO,eAAe,CAAC,SAAS,EAAE;YAC/E,CAAC,CAAC,4BAA4B,OAAO,CAAC,SAAS,aAAa,eAAe,CAAC,SAAS,EAAE;KAC1F,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,MAAM,QAAQ,GAAG;QACf,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;QAC7D,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa;QAClD,QAAQ,EAAE,gBAAgB,EAAE,aAAa;KAC1C,CAAA;IAED,MAAM,CAAC,GAAG,OAAkC,CAAA;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAA;IAEjF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAA;IACnC,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACrD,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAC3B,OAAyB,EACzB,kBAA2C,IAAI;IAE/C,MAAM,MAAM,GAAwB;QAClC,mBAAmB,CAAC,OAAO,CAAC;QAC5B,sBAAsB,CAAC,OAAO,CAAC;QAC/B,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC;QACzC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC;QAC7C,oBAAoB,CAAC,OAAO,EAAE,eAAe,CAAC;KAC/C,CAAA;IAED,MAAM,MAAM,GAAG,MAAM;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAEtC,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,MAAM;QAC9E,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,MAAM,CAAA;IAEpD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,eAAe,EAAE,cAAc;QAC/B,MAAM;KACP,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,QAA4B;IAOtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,IAAI;YACrB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,iCAAiC;SAC3C,CAAA;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAA;IAEhF,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,IAAI,cAAc,GAAkB,IAAI,CAAA;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEpB,IAAI,MAAM,CAAC,eAAe,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YACtD,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAA;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,cAAc,GAAG,cAAc,KAAK,IAAI,CAAA;IAE9C,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,cAAc;QAC/B,eAAe,EAAE,cAAc;QAC/B,OAAO;QACP,OAAO,EAAE,UAAU;YACjB,CAAC,CAAC,iBAAiB,QAAQ,CAAC,MAAM,2CAA2C;YAC7E,CAAC,CAAC,kDAAkD,cAAc,EAAE;KACvE,CAAA;AACH,CAAC;AAED,gDAAgD;AAChD,aAAa;AACb,gDAAgD;AAEnC,QAAA,iBAAiB,GAAG;IAC/B,WAAW,EAAE,kBAAkB;IAC/B,aAAa;IACb,WAAW;IACX,eAAe,EAAE,sBAAsB;IACvC,eAAe;CAChB,CAAA;AAED,kBAAe,yBAAiB,CAAA"}

package/dist/standard-v3.d.ts

@@ -0,0 +1,78 @@
+/**
+ * ProofLink Receipt Standard v3.0 — conformant v3 verifier.
+ *
+ * Spec: https://github.com/Iteksmart/prooflink-standard/blob/main/ProofLink-Receipt-Standard-v3.md
+ * Live: https://verify.itechsmart.dev/api/how-to-verify
+ *
+ * ─────────────────────────────────────────────────────────────────────────
+ * DRIFT NOTICE
+ * The original exports in `prooflink-verifier.ts` (computeReceiptHash,
+ * verifyReceipt, verifyChain over the `ProofLinkReceipt` shape with fields
+ * receipt_id / sha256 / previous_hash / before_state / nist_controls …) verify
+ * a PRE-v3 receipt shape that the LIVE ledger no longer emits. Live v3 receipts
+ * use id / hash_sha256 / prev_hash / canonical_bytes / signature, are Ed25519
+ * signed, and hash the FULL canonicalized payload (not a fixed field list).
+ * This module is the Standard-v3.0-conformant verifier for live v3 receipts.
+ * The legacy exports are retained unchanged for historical/pre-v3 receipts.
+ * ─────────────────────────────────────────────────────────────────────────
+ *
+ * Zero third-party dependencies (Node 18+ built-in `crypto`).
+ * Reproduces the canonical live verification exactly:
+ *   1. hash integrity        SHA256(canonical_bytes) == hash_sha256
+ *   2. canonical re-derive    json.dumps(payload, sort_keys, separators=(",",":"),
+ *                             ensure_ascii=False) == canonical_bytes
+ *   3. Ed25519 signature      sig over raw canonical_bytes under embedded pubkey
+ *   4. chain link             prev_hash == previous entry's hash_sha256
+ */
+import { KeyObject } from "node:crypto";
+export declare const PUBLISHED_PUBLIC_KEY = "21102eaa68ea9ed42c05a2253aa953d33c59b5348ff8659018146e59fb061b97";
+export interface V3Signature {
+    algorithm: string;
+    public_key: string;
+    value: string;
+    signs?: string;
+}
+export interface V3Receipt {
+    id: string;
+    timestamp: string;
+    category: string;
+    subject: string;
+    action: string;
+    actor: string;
+    outcome: string;
+    schema_version: string;
+    prev_hash: string;
+    chain_position: number;
+    canonical_bytes: string;
+    hash_sha256: string;
+    signature: V3Signature;
+    compliance_tags?: string[];
+    supersedes?: string;
+    learned_from?: string[];
+    [k: string]: unknown;
+}
+export interface V3Check {
+    name: string;
+    passed: boolean;
+    detail: string;
+}
+export interface V3Result {
+    valid: boolean;
+    id: string;
+    checks: V3Check[];
+    errors: string[];
+}
+/** Canonical JSON bytes byte-for-byte identical to Python's
+ *  json.dumps(x, sort_keys=True, separators=(",",":"), ensure_ascii=False). */
+export declare function canonicalize(value: unknown): Buffer;
+export declare function importEd25519PublicKey(hex: string): KeyObject;
+/** Verify one v3 receipt against Standard v3.0. Never throws on a failed check. */
+export declare function verifyReceiptV3(receipt: V3Receipt, prevHash?: string): V3Result;
+/** Boolean convenience wrapper. */
+export declare function verifyV3(receipt: V3Receipt, prevHash?: string): boolean;
+/** Verify an oldest-first chain (e.g. /api/export order) of v3 receipts. */
+export declare function verifyChainV3(receipts: V3Receipt[]): {
+    chain_valid: boolean;
+    results: V3Result[];
+};
+//# sourceMappingURL=standard-v3.d.ts.map

package/dist/standard-v3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-v3.d.ts","sourceRoot":"","sources":["../src/standard-v3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAmD,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzF,eAAO,MAAM,oBAAoB,qEACmC,CAAC;AAErE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,WAAW,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAID;+EAC+E;AAC/E,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAcD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAM7D;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAyD/E;AAED,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,QAAQ,EAAE,CAAA;CAAE,CAGlG"}

package/dist/standard-v3.js

@@ -0,0 +1,131 @@
+"use strict";
+/**
+ * ProofLink Receipt Standard v3.0 — conformant v3 verifier.
+ *
+ * Spec: https://github.com/Iteksmart/prooflink-standard/blob/main/ProofLink-Receipt-Standard-v3.md
+ * Live: https://verify.itechsmart.dev/api/how-to-verify
+ *
+ * ─────────────────────────────────────────────────────────────────────────
+ * DRIFT NOTICE
+ * The original exports in `prooflink-verifier.ts` (computeReceiptHash,
+ * verifyReceipt, verifyChain over the `ProofLinkReceipt` shape with fields
+ * receipt_id / sha256 / previous_hash / before_state / nist_controls …) verify
+ * a PRE-v3 receipt shape that the LIVE ledger no longer emits. Live v3 receipts
+ * use id / hash_sha256 / prev_hash / canonical_bytes / signature, are Ed25519
+ * signed, and hash the FULL canonicalized payload (not a fixed field list).
+ * This module is the Standard-v3.0-conformant verifier for live v3 receipts.
+ * The legacy exports are retained unchanged for historical/pre-v3 receipts.
+ * ─────────────────────────────────────────────────────────────────────────
+ *
+ * Zero third-party dependencies (Node 18+ built-in `crypto`).
+ * Reproduces the canonical live verification exactly:
+ *   1. hash integrity        SHA256(canonical_bytes) == hash_sha256
+ *   2. canonical re-derive    json.dumps(payload, sort_keys, separators=(",",":"),
+ *                             ensure_ascii=False) == canonical_bytes
+ *   3. Ed25519 signature      sig over raw canonical_bytes under embedded pubkey
+ *   4. chain link             prev_hash == previous entry's hash_sha256
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PUBLISHED_PUBLIC_KEY = void 0;
+exports.canonicalize = canonicalize;
+exports.importEd25519PublicKey = importEd25519PublicKey;
+exports.verifyReceiptV3 = verifyReceiptV3;
+exports.verifyV3 = verifyV3;
+exports.verifyChainV3 = verifyChainV3;
+const node_crypto_1 = require("node:crypto");
+exports.PUBLISHED_PUBLIC_KEY = "21102eaa68ea9ed42c05a2253aa953d33c59b5348ff8659018146e59fb061b97";
+const COMPUTED = ["canonical_bytes", "signature", "hash_sha256"];
+/** Canonical JSON bytes byte-for-byte identical to Python's
+ *  json.dumps(x, sort_keys=True, separators=(",",":"), ensure_ascii=False). */
+function canonicalize(value) {
+    return Buffer.from(canon(value), "utf-8");
+}
+function canon(v) {
+    if (v === null || typeof v !== "object")
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return "[" + v.map(canon).join(",") + "]";
+    const o = v;
+    const parts = [];
+    for (const k of Object.keys(o).sort()) {
+        if (o[k] === undefined)
+            continue;
+        parts.push(JSON.stringify(k) + ":" + canon(o[k]));
+    }
+    return "{" + parts.join(",") + "}";
+}
+const SPKI = Buffer.from("302a300506032b6570032100", "hex");
+function importEd25519PublicKey(hex) {
+    return (0, node_crypto_1.createPublicKey)({
+        key: Buffer.concat([SPKI, Buffer.from(hex, "hex")]),
+        format: "der",
+        type: "spki",
+    });
+}
+/** Verify one v3 receipt against Standard v3.0. Never throws on a failed check. */
+function verifyReceiptV3(receipt, prevHash) {
+    const checks = [];
+    const errors = [];
+    const id = receipt?.id ?? "<no-id>";
+    if (String(receipt?.schema_version) !== "3.0") {
+        errors.push(`schema_version is ${JSON.stringify(receipt?.schema_version)}; Standard v3.0 covers "3.0"`);
+        return { valid: false, id, checks, errors };
+    }
+    let canonBytes;
+    try {
+        canonBytes = Buffer.from(receipt.canonical_bytes, "hex");
+    }
+    catch (e) {
+        checks.push({ name: "hash_integrity", passed: false, detail: `canonical_bytes not hex: ${e}` });
+        return { valid: false, id, checks, errors };
+    }
+    // 1. hash integrity
+    const got = (0, node_crypto_1.createHash)("sha256").update(canonBytes).digest("hex");
+    const h1 = got === receipt.hash_sha256;
+    checks.push({ name: "hash_integrity", passed: h1,
+        detail: h1 ? "SHA256(canonical_bytes) == hash_sha256"
+            : `hash mismatch: ${got.slice(0, 16)}… vs ${String(receipt.hash_sha256).slice(0, 16)}…` });
+    // 2. canonical re-derivation
+    const payload = {};
+    for (const [k, v] of Object.entries(receipt))
+        if (!COMPUTED.includes(k))
+            payload[k] = v;
+    const rederived = canonicalize(payload);
+    const h2 = rederived.equals(canonBytes);
+    checks.push({ name: "canonical_rederivation", passed: h2,
+        detail: h2 ? "re-derived canonical bytes match" : "canonical re-derivation MISMATCH — signed field tampered" });
+    // 3. Ed25519 signature
+    const sig = receipt.signature;
+    if (!sig || !sig.public_key || !sig.value) {
+        checks.push({ name: "ed25519_signature", passed: false, detail: "signature missing/malformed" });
+    }
+    else {
+        try {
+            const ok = (0, node_crypto_1.verify)(null, canonBytes, importEd25519PublicKey(sig.public_key), Buffer.from(sig.value, "hex"));
+            checks.push({ name: "ed25519_signature", passed: ok,
+                detail: ok ? `Ed25519 OK (key ${sig.public_key.slice(0, 16)}…)` : "Ed25519 signature INVALID" });
+        }
+        catch (e) {
+            checks.push({ name: "ed25519_signature", passed: false, detail: `signature error: ${e}` });
+        }
+    }
+    // 4. chain link
+    if (prevHash !== undefined) {
+        const h4 = receipt.prev_hash === prevHash;
+        checks.push({ name: "chain_link", passed: h4,
+            detail: h4 ? "prev_hash links to previous entry"
+                : `chain BROKEN: ${String(receipt.prev_hash).slice(0, 16)}… != ${prevHash.slice(0, 16)}…` });
+    }
+    const valid = checks.every((c) => c.passed) && errors.length === 0;
+    return { valid, id, checks, errors };
+}
+/** Boolean convenience wrapper. */
+function verifyV3(receipt, prevHash) {
+    return verifyReceiptV3(receipt, prevHash).valid;
+}
+/** Verify an oldest-first chain (e.g. /api/export order) of v3 receipts. */
+function verifyChainV3(receipts) {
+    const results = receipts.map((r, i) => verifyReceiptV3(r, i > 0 ? receipts[i - 1].hash_sha256 : undefined));
+    return { chain_valid: results.every((r) => r.valid), results };
+}
+//# sourceMappingURL=standard-v3.js.map

package/dist/standard-v3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-v3.js","sourceRoot":"","sources":["../src/standard-v3.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAmDH,oCAEC;AAcD,wDAMC;AAGD,0CAyDC;AAGD,4BAEC;AAGD,sCAGC;AA9ID,6CAAyF;AAE5E,QAAA,oBAAoB,GAC/B,kEAAkE,CAAC;AA0CrE,MAAM,QAAQ,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAEjE;+EAC+E;AAC/E,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AACD,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAChE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS;QACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAC5D,SAAgB,sBAAsB,CAAC,GAAW;IAChD,OAAO,IAAA,6BAAe,EAAC;QACrB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,SAAgB,eAAe,CAAC,OAAkB,EAAE,QAAiB;IACnE,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,IAAI,SAAS,CAAC;IAEpC,IAAI,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,8BAA8B,CAAC,CAAC;QACxG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED,oBAAoB;IACpB,MAAM,GAAG,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,GAAG,KAAK,OAAO,CAAC,WAAW,CAAC;IACvC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,kBAAkB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAExG,6BAA6B;IAC7B,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,0DAA0D,EAAE,CAAC,CAAC;IAElH,uBAAuB;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;IAC9B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7G,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE;gBACjD,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,iBAAiB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,mCAAmC;AACnC,SAAgB,QAAQ,CAAC,OAAkB,EAAE,QAAiB;IAC5D,OAAO,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC;AAClD,CAAC;AAED,4EAA4E;AAC5E,SAAgB,aAAa,CAAC,QAAqB;IACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5G,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACjE,CAAC"}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@itechsmart/prooflink-verifier",
-  "version": "1.0.0",
-  "description": "Open-source cryptographic verification for iTechSmart UAIO ProofLink receipts — don't trust our AI, trust the math.",
+  "version": "2.0.0",
+  "description": "Verify ProofLink receipts \u2014 the Trust & Accountability Layer for Autonomous AI by iTechSmart. Full cryptographic verification (SHA-256 hash chain + Ed25519 signatures) against the live public ledger. Don't trust the AI. Trust the math.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
     "dist",
+    "bin",
     "README.md",
     "LICENSE"
   ],
@@ -16,13 +17,20 @@
   },
   "keywords": [
     "prooflink",
-    "uaio",
-    "itechsmart",
+    "ai-accountability-layer",
+    "ai-audit-trail",
     "cryptographic-verification",
-    "audit",
+    "ed25519",
     "sha256",
     "hash-chain",
-    "tamper-evident"
+    "tamper-evident",
+    "eu-ai-act",
+    "article-12",
+    "scitt",
+    "uaio",
+    "itechsmart",
+    "bitcoin-anchoring",
+    "opentimestamps"
   ],
   "author": "iTechSmart Inc.",
   "license": "MIT",
@@ -44,5 +52,8 @@
     "@types/node": "^20.0.0",
     "typescript": "^5.4.0",
     "vitest": "^1.6.0"
+  },
+  "bin": {
+    "prooflink-verify": "bin/cli.js"
   }
-}
+}