@sanning/proof 0.19.1 → 0.20.0

package/src/environment.ts

@@ -1,20 +1,12 @@
-// The environment marker: is this sandbox evidence?
+// The environment marker: whether a pack holds sandbox evidence.
 //
-// `environment` is an OPTIONAL skeleton field inside every envelope's signed
-// scope, `"dev"` or `"production"` (envelope-spec §2, A1 and A9). The spec
-// says a verifier MAY surface the value as `environment_marker` in its result
-// and a profile MAY refuse to count dev-marked envelopes toward production
-// evidence. Both commands now do the first, and print a pack or case that
-// holds a `dev` envelope as sandbox evidence rather than as `VERIFIED`.
-//
-// The marker is read from the signed envelopes the pack holds, never from a
-// wrapper field, a pack name or anything else the holder could write without a
-// key. It never moves the verdict word: a sandbox pack that verifies is still
-// `verified`, and the commands map that to the headline `SANDBOX` and exit 5
-// (`sandboxExit` in `./exit-codes.ts`). The Python twin is
-// `src/sanning_proof/environment.py`.
+// `environment` is an optional field inside every envelope's signed scope,
+// `"dev"` or `"production"` (envelope-spec section 2). It is read from the signed
+// envelopes a pack holds, never from a wrapper field, a pack name or anything
+// else the holder could write without a key. It is a label, never a claim or a
+// verdict: a sandbox pack that verifies is still `verified`, prints the sandbox
+// line, and exits 3 (`exitCodeFor`).
 
-import { isAgentProofSpec } from "./agent-proof.js";
 import {
   ANCHOR_TRACE_BODY_TYPE,
   EXPORT_BODY_TYPE,
@@ -26,16 +18,7 @@ import {
 /** `"dev"` when every envelope is signed `dev`, `"mixed"` when only some are. */
 export type EnvironmentMarker = "dev" | "mixed";
 
-/** The headline `verify` prints for sandbox evidence in place of `VERIFIED`. */
-export const SANDBOX_HEADLINE = "SANDBOX";
-
-/** The title `case` prints for sandbox evidence in place of `Verified` (case titles are title case). */
-export const SANDBOX_TITLE = "Sandbox";
-
-/** The one line printed with it, and with any other headline, wherever the marker is present. */
-export const SANDBOX_LINE = "Sandbox evidence (environment dev): not production evidence";
-
-// The same bound `resolveTraceEvents` puts on unwrapping export wrappers.
+// Same bound as `resolveTraceEvents` puts on unwrapping export wrappers.
 const MAX_EXPORT_UNWRAP = 4;
 
 function isObject(v: unknown): v is Record<string, unknown> {
@@ -56,19 +39,12 @@ function entryEnvelopes(list: unknown, out: Record<string, unknown>[]): void {
 }
 
 /**
- * The signed envelopes a pack holds: every checkpoint and event envelope of an
- * anchor-trace body, every event envelope of a stamp-evidence body, the same
- * inside an export's inline source bundle, and an agent proof's checkpoint
- * envelope. A stamp-trace body holds none. A value that is not an object is
- * not an envelope and is not counted.
+ * The signed envelopes a pack holds: checkpoint and event envelopes of an
+ * anchor-trace body, event envelopes of a stamp-evidence body (also inside an
+ * export's inline source bundle). Non-objects are not counted.
  */
 export function packEnvelopes(bundle: unknown): Record<string, unknown>[] {
   const out: Record<string, unknown>[] = [];
-  if (isObject(bundle) && isAgentProofSpec(own(bundle, "spec_version"))) {
-    const env = own(bundle, "checkpoint_envelope");
-    if (isObject(env)) out.push(env);
-    return out;
-  }
   let cur: unknown = bundle;
   for (let depth = 0; depth < MAX_EXPORT_UNWRAP; depth++) {
     if (!isObject(cur)) return out;
@@ -91,10 +67,9 @@ export function packEnvelopes(bundle: unknown): Record<string, unknown>[] {
 }
 
 /**
- * The environment marker over one or more packs: `"dev"` where every envelope
- * they hold is signed `environment: "dev"`, `"mixed"` where some are and some
- * are not (`production`, or no `environment` at all), and `null` where none
- * is, which is every production pack and every pack that holds no envelope.
+ * The marker over one or more packs: `"dev"` where every envelope is signed
+ * `environment: "dev"`, `"mixed"` where only some are, `null` where none is
+ * (including a pack that holds no envelope).
  */
 export function environmentMarker(bundles: readonly unknown[]): EnvironmentMarker | null {
   let total = 0;
@@ -110,32 +85,9 @@ export function environmentMarker(bundles: readonly unknown[]): EnvironmentMarke
 }
 
 /**
- * Whether a body's only unsettled witnesses are simulated: the body has events
- * and witnesses (checkpoints, stamps or both), every witness is named, at
- * least one is simulated, and every other one a gateway confirmed. Then the
- * one thing that keeps the bundle from `verified` is a simulated witness
- * nobody can look up: no mismatch, no unreachable gateway, no witness of
- * another kind, no checkpoint or stamp witnessed by nobody.
- */
-export function onlySimulatedUnsettled(result: EvidenceBundleResult): boolean {
-  const witnesses = [...result.checkpoints, ...(result.stamps ?? [])];
-  if (witnesses.length === 0 || result.events.length === 0) return false;
-  let simulated = 0;
-  for (const w of witnesses) {
-    if (w.anchorRef === null) return false;
-    if (w.anchorRef.kind === SIMULATED_WITNESS_KIND) simulated++;
-    else if (w.onChain?.rollup !== "confirm") return false;
-  }
-  return simulated > 0;
-}
-
-/**
- * Whether a run with gateways counted only simulated witnesses, so nothing
- * was looked up on a chain: gateways were passed, the run is not counted as
- * checked on a chain, and it holds a simulated witness. A run that stopped
- * before its witnesses were read (a bad wrapper signature or `body_hash`, an
- * unknown `body_type`, an export whose source is not inline) holds none, so it
- * is not one, and prints what it printed before simulated witnesses existed.
+ * Whether a run with gateways counted only simulated witnesses, so nothing was
+ * looked up on a chain. A run that stopped before reading its witnesses holds
+ * none and is not one.
  */
 export function simulatedOnlyRun(result: EvidenceBundleResult, gateways: readonly string[]): boolean {
   if (gateways.length === 0 || result.onChainChecked) return false;