@xfuel/verify 0.1.0

package/dist/cli.js

@@ -0,0 +1,236 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * xfuel-verify CLI — Offline receipt verification.
+ *
+ * Usage:
+ *   xfuel-verify receipt.json
+ *   xfuel-verify receipt.json --check-nullifier
+ *   xfuel-verify receipt.json --rpc https://mainnet.base.org
+ *   cat receipt.json | xfuel-verify -
+ *
+ * Exit codes:
+ *   0 = verified
+ *   1 = verification failed
+ *   2 = partial (binding ok, nullifier not checked or pending)
+ *   3 = input error
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = require("node:fs");
+const index_js_1 = require("./index.js");
+const HELP = `
+xfuel-verify — Offline verification for Chit402 receipts
+
+Usage:
+  xfuel-verify <receipt.json>           Verify binding locally
+  xfuel-verify <receipt.json> --jwks-file <jwks.json>
+                                        Verify issuer signature with JWKS
+  xfuel-verify <receipt.json> --check-nullifier
+                                        Also verify nullifier on-chain
+  xfuel-verify - < receipt.json         Read from stdin
+  xfuel-verify --help                   Show this help
+
+Options:
+  --jwks-file <path>  JWKS file for issuer signature verification (no network)
+  --check-nullifier   Query Base RPC for nullifier anchor (requires network)
+  --rpc <url>         Custom RPC URL (default: https://mainnet.base.org)
+  --json              Output JSON instead of human-readable
+  --quiet             Only output errors
+
+Exit codes:
+  0 = verified
+  1 = verification failed
+  2 = partial verification (binding ok, nullifier not checked)
+  3 = input error
+
+Network behavior:
+  By default, no network requests are made. Network is only used when:
+  - --check-nullifier is passed (queries Base RPC for on-chain anchor)
+
+  JWKS must be provided as a local file (--jwks-file). The CLI does not
+  automatically fetch JWKS from a URL to ensure offline verification.
+
+Examples:
+  # Local binding verification (no network)
+  xfuel-verify my-receipt.json
+
+  # Verify issuer signature with JWKS file
+  xfuel-verify my-receipt.json --jwks-file issuer-jwks.json
+
+  # Full verification including on-chain nullifier
+  xfuel-verify my-receipt.json --jwks-file issuer-jwks.json --check-nullifier
+
+  # Pipe from curl
+  curl -s https://api.chit402.com/receipt/task-123?format=json | xfuel-verify -
+`;
+function parseArgs(args) {
+    const result = {
+        file: null,
+        jwksFile: null,
+        checkNullifier: false,
+        rpcUrl: null,
+        json: false,
+        quiet: false,
+        help: false,
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--help' || arg === '-h') {
+            result.help = true;
+        }
+        else if (arg === '--check-nullifier') {
+            result.checkNullifier = true;
+        }
+        else if (arg === '--jwks-file' && args[i + 1]) {
+            result.jwksFile = args[++i];
+        }
+        else if (arg === '--rpc' && args[i + 1]) {
+            result.rpcUrl = args[++i];
+        }
+        else if (arg === '--json') {
+            result.json = true;
+        }
+        else if (arg === '--quiet' || arg === '-q') {
+            result.quiet = true;
+        }
+        else if (!arg.startsWith('-')) {
+            result.file = arg;
+        }
+    }
+    return result;
+}
+function readReceipt(file) {
+    let content;
+    if (file === '-') {
+        content = (0, node_fs_1.readFileSync)(0, 'utf8');
+    }
+    else {
+        content = (0, node_fs_1.readFileSync)(file, 'utf8');
+    }
+    return JSON.parse(content);
+}
+function formatAmount(units) {
+    if (!units)
+        return '—';
+    const n = Number(units);
+    if (!Number.isFinite(n))
+        return units;
+    const usd = n / 1e6;
+    return `$${usd.toFixed(usd >= 0.01 ? 2 : 6)} (${units} units)`;
+}
+async function main() {
+    const args = parseArgs(process.argv.slice(2));
+    if (args.help || !args.file) {
+        console.log(HELP);
+        return args.help ? 0 : 3;
+    }
+    let receipt;
+    try {
+        receipt = readReceipt(args.file);
+    }
+    catch (err) {
+        console.error(`Error reading receipt: ${err instanceof Error ? err.message : String(err)}`);
+        return 3;
+    }
+    if (!receipt.task_id) {
+        console.error('Invalid receipt: missing task_id');
+        return 3;
+    }
+    // Load JWKS if provided
+    let jwks;
+    if (args.jwksFile) {
+        try {
+            const jwksContent = (0, node_fs_1.readFileSync)(args.jwksFile, 'utf8');
+            jwks = JSON.parse(jwksContent);
+        }
+        catch (err) {
+            console.error(`Error reading JWKS file: ${err instanceof Error ? err.message : String(err)}`);
+            return 3;
+        }
+    }
+    const result = await (0, index_js_1.verifyReceipt)(receipt, {
+        jwks,
+        checkNullifier: args.checkNullifier,
+        rpcUrl: args.rpcUrl || undefined,
+    });
+    if (args.json) {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else if (!args.quiet || result.overall === 'failed') {
+        console.log('');
+        console.log(`  Chit402 Receipt Verification`);
+        console.log(`  ─────────────────────────────────────────────────`);
+        console.log(`  Receipt ID:    ${result.receipt_id}`);
+        console.log(`  Hub:           ${result.hub || '—'}`);
+        console.log(`  Model:         ${result.model || '—'}`);
+        console.log(`  Amount:        ${formatAmount(result.amount_usdc)}`);
+        console.log(`  TX:            ${result.tx || '—'}`);
+        console.log(`  Output Hash:   ${result.output_hash ? result.output_hash.slice(0, 18) + '…' : '—'}`);
+        console.log('');
+        console.log(`  Binding`);
+        console.log(`  ─────────────────────────────────────────────────`);
+        if (result.binding.expected) {
+            console.log(`  Expected:      ${result.binding.expected.slice(0, 18)}…`);
+            console.log(`  Recomputed:    ${result.binding.recomputed?.slice(0, 18)}…`);
+            console.log(`  Match:         ${result.binding.matches ? '✓ YES' : '✗ NO'}`);
+            console.log(`  Covers:        ${result.binding.covers.join(', ')}`);
+        }
+        else {
+            console.log(`  Status:        No binding (${result.binding.reason})`);
+        }
+        console.log('');
+        console.log(`  Issuer Signature`);
+        console.log(`  ─────────────────────────────────────────────────`);
+        if (result.issuer_signature.checked) {
+            console.log(`  Kid:           ${result.issuer_signature.kid || '—'}`);
+            console.log(`  Valid:         ${result.issuer_signature.valid ? '✓ YES' : '✗ NO'}`);
+            if (!result.issuer_signature.valid && result.issuer_signature.reason) {
+                console.log(`  Reason:        ${result.issuer_signature.reason}`);
+            }
+        }
+        else {
+            console.log(`  Status:        ${result.issuer_signature.reason || 'Not checked'}`);
+            if (receipt.issuer_signature && !args.jwksFile) {
+                console.log(`                 (receipt has signature — pass --jwks-file to verify)`);
+            }
+        }
+        console.log('');
+        console.log(`  Nullifier`);
+        console.log(`  ─────────────────────────────────────────────────`);
+        if (result.nullifier.nullifier) {
+            console.log(`  Value:         ${result.nullifier.nullifier.slice(0, 18)}…`);
+            if (args.checkNullifier) {
+                console.log(`  On-chain:      ${result.nullifier.anchored ? '✓ ANCHORED' : '✗ NOT FOUND'}`);
+            }
+            else {
+                console.log(`  On-chain:      (not checked — use --check-nullifier)`);
+            }
+        }
+        else {
+            console.log(`  Status:        No nullifier (Tier-1 receipt)`);
+        }
+        console.log('');
+        console.log(`  Overall: ${result.overall.toUpperCase()}`);
+        if (result.errors.length > 0) {
+            console.log(`  Errors:  ${result.errors.join(', ')}`);
+        }
+        console.log('');
+    }
+    switch (result.overall) {
+        case 'verified':
+            return 0;
+        case 'failed':
+            return 1;
+        case 'partial':
+            return 2;
+        default:
+            return 1;
+    }
+}
+main()
+    .then((code) => process.exit(code))
+    .catch((err) => {
+    console.error('Unexpected error:', err);
+    process.exit(3);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;GAcG;;AAEH,qCAAuC;AACvC,yCAAwF;AAExF,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CZ,CAAC;AAEF,SAAS,SAAS,CAAC,IAAc;IAS/B,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,IAAqB;QAC3B,QAAQ,EAAE,IAAqB;QAC/B,cAAc,EAAE,KAAK;QACrB,MAAM,EAAE,IAAqB;QAC7B,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACvC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;QAC/B,CAAC;aAAM,IAAI,GAAG,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IACpB,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wBAAwB;IACxB,IAAI,IAAsB,CAAC;IAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAS,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9F,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAa,EAAC,OAAO,EAAE;QAC1C,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;KACjC,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,oBAAoB,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;gBACrE,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC5E,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,UAAU;YACb,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,CAAC,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,IAAI,EAAE;KACH,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACb,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,228 @@
+/**
+ * @xfuel/verify — Offline verification for Chit402 receipts.
+ *
+ * Verify payment binding and output commitment WITHOUT calling the Chit402 API.
+ * Third parties use this to confirm:
+ *   1. The receipt's payment binding matches on-chain settlement
+ *   2. The output hash commitment is correct
+ *   3. The issuer signature is valid (ES256/JWKS)
+ *   4. (Optional) The SP1 nullifier is anchored on-chain
+ *
+ * See docs/specs/RECEIPT_V2_SEMANTICS.md for the verification algorithm.
+ */
+import { computePaymentCommitment, computeInferenceBinding, type PaymentCommitmentInput, type InferenceBindingInput } from './binding.js';
+export { computePaymentCommitment, computeInferenceBinding, type PaymentCommitmentInput, type InferenceBindingInput, };
+/** ZKVerifierSP1 contract on Base mainnet. */
+export declare const ZK_VERIFIER_ADDRESS = "0x9373499645292715a2275A78eD65B14215C41c06";
+/** Default Base mainnet RPC. */
+export declare const BASE_RPC_URL = "https://mainnet.base.org";
+/** Base Sepolia testnet RPC. */
+export declare const BASE_SEPOLIA_RPC_URL = "https://sepolia.base.org";
+/** Chit402 receipt (v2/v3 compatible). */
+export interface XFuelReceipt {
+    schema?: string;
+    task_id: string;
+    status: string;
+    proof_outcome?: string;
+    verify_url?: string;
+    route?: {
+        model?: string;
+        provider?: string;
+        model_commitment?: {
+            commitment?: string;
+        } | null;
+    };
+    payment?: {
+        rail?: string;
+        ref?: string | null;
+        gross_amount?: string;
+        net_amount?: string;
+        fee_amount?: string;
+        fee_bps?: number;
+        protocol_fee_bps?: number;
+        platform_fee?: string;
+        platform_fee_bps?: number;
+    };
+    provider_cogs?: {
+        actual?: string;
+    };
+    output?: {
+        hash?: string;
+        kind?: string;
+    } | null;
+    proof?: {
+        tier?: string;
+        has_proof?: boolean;
+        nullifier?: string | null;
+    };
+    binding?: {
+        expected_commitment?: string;
+        recomputed_commitment?: string;
+        matches?: boolean;
+        covers?: string[];
+        model_commitment?: string | null;
+        output_hash?: string | null;
+        amount?: string;
+        rail?: string;
+    } | null;
+    signature?: {
+        alg?: string;
+        value?: string;
+    };
+    issuer_signature?: {
+        alg?: string;
+        value?: string;
+        kid?: string;
+    };
+}
+/** JWK public key for ES256 verification. */
+export interface Es256Jwk {
+    kty: 'EC';
+    crv: 'P-256';
+    x: string;
+    y: string;
+    kid?: string;
+    alg?: string;
+    use?: string;
+}
+/** JWKS (JSON Web Key Set) structure. */
+export interface Jwks {
+    keys: Es256Jwk[];
+}
+/** Result of ECDSA signature verification. */
+export interface IssuerSignatureVerification {
+    /** Whether an issuer signature was present to check. */
+    checked: boolean;
+    /** True if the ECDSA signature is valid. */
+    valid: boolean;
+    /** Key ID from the signature. */
+    kid?: string;
+    /** Reason for failure when valid=false. */
+    reason?: string;
+}
+export interface BindingVerification {
+    verified: boolean;
+    expected: string | null;
+    recomputed: string | null;
+    matches: boolean;
+    covers: string[];
+    reason?: string;
+}
+export interface NullifierVerification {
+    verified: boolean;
+    nullifier: string | null;
+    anchored: boolean | null;
+    reason?: string;
+}
+export interface ReceiptVerification {
+    receipt_id: string;
+    binding: BindingVerification;
+    issuer_signature: IssuerSignatureVerification;
+    nullifier: NullifierVerification;
+    output_hash: string | null;
+    hub: string | null;
+    model: string | null;
+    amount_usdc: string | null;
+    tx: string | null;
+    overall: 'verified' | 'partial' | 'failed';
+    errors: string[];
+}
+/**
+ * Canonical, order-stable payload an issuer signature covers.
+ * MUST match `canonicalSignedPayload` in services/gateway/src/receipt.js exactly.
+ *
+ * Signed fields (15 total):
+ *   1. task_id
+ *   2. payment.rail
+ *   3. payment.ref
+ *   4. payment.gross_amount
+ *   5. payment.net_amount
+ *   6. payment.fee_amount
+ *   7. payment.protocol_fee_bps ?? payment.fee_bps
+ *   8. payment.platform_fee
+ *   9. payment.platform_fee_bps
+ *  10. provider_cogs.actual
+ *  11. route.model
+ *  12. route.model_commitment.commitment
+ *  13. route.provider
+ *  14. output.hash
+ *  15. binding.expected_commitment
+ */
+export declare function canonicalIssuerPayload(receipt: XFuelReceipt): string;
+/**
+ * Verify a receipt's ES256 issuer signature against a JWK (public key).
+ * This is the public-key verification path — no shared secret required.
+ *
+ * Verification steps:
+ *   1. GET /receipt/:taskId?format=json → receipt.issuer_signature
+ *   2. GET /.well-known/jwks.json → find key matching issuer_signature.kid
+ *   3. ES256 verify canonicalIssuerPayload(receipt) against the signature
+ *
+ * @param receipt - Receipt JSON with issuer_signature
+ * @param jwk - JWK public key { kty: 'EC', crv: 'P-256', x, y }
+ */
+export declare function verifyIssuerSignature(receipt: XFuelReceipt, jwk: Es256Jwk): IssuerSignatureVerification;
+/**
+ * Verify a receipt's ES256 issuer signature against a JWKS (key set).
+ * Finds the matching key by kid and verifies.
+ *
+ * @param receipt - Receipt JSON with issuer_signature
+ * @param jwks - JWKS with keys array
+ */
+export declare function verifyIssuerSignatureWithJwks(receipt: XFuelReceipt, jwks: Jwks): IssuerSignatureVerification;
+/**
+ * Verify a receipt's payment binding locally (no network required).
+ *
+ * This recomputes the commitment from the receipt's fields and compares
+ * it to the stored `binding.expected_commitment`.
+ */
+export declare function verifyBinding(receipt: XFuelReceipt): BindingVerification;
+/**
+ * Verify a receipt's nullifier is anchored on-chain.
+ *
+ * Requires network access to the Base RPC.
+ */
+export declare function verifyNullifier(receipt: XFuelReceipt, options?: {
+    rpcUrl?: string;
+    verifierAddress?: string;
+}): Promise<NullifierVerification>;
+/**
+ * Canonical signed payload for HMAC verification.
+ * Alias of canonicalIssuerPayload — both must produce identical bytes.
+ */
+export declare const canonicalSignedPayload: typeof canonicalIssuerPayload;
+/**
+ * Hash the canonical payload (for ERC-8004 response_hash).
+ */
+export declare function hashCanonicalPayload(receipt: XFuelReceipt): string;
+/**
+ * Full receipt verification — binding + issuer signature + optional nullifier check.
+ *
+ * @param receipt The Chit402 receipt JSON
+ * @param options.jwks JWKS for issuer signature verification (no network fetch)
+ * @param options.checkNullifier Whether to verify nullifier on-chain (requires network)
+ * @param options.rpcUrl RPC URL for on-chain checks
+ */
+export declare function verifyReceipt(receipt: XFuelReceipt, options?: {
+    jwks?: Jwks;
+    checkNullifier?: boolean;
+    rpcUrl?: string;
+    verifierAddress?: string;
+}): Promise<ReceiptVerification>;
+declare const _default: {
+    verifyBinding: typeof verifyBinding;
+    verifyIssuerSignature: typeof verifyIssuerSignature;
+    verifyIssuerSignatureWithJwks: typeof verifyIssuerSignatureWithJwks;
+    verifyNullifier: typeof verifyNullifier;
+    verifyReceipt: typeof verifyReceipt;
+    computePaymentCommitment: typeof computePaymentCommitment;
+    computeInferenceBinding: typeof computeInferenceBinding;
+    canonicalIssuerPayload: typeof canonicalIssuerPayload;
+    canonicalSignedPayload: typeof canonicalIssuerPayload;
+    hashCanonicalPayload: typeof hashCanonicalPayload;
+    ZK_VERIFIER_ADDRESS: string;
+    BASE_RPC_URL: string;
+    BASE_SEPOLIA_RPC_URL: string;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,+CAA+C,CAAC;AAEhF,gCAAgC;AAChC,eAAO,MAAM,YAAY,6BAA6B,CAAC;AAEvD,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAO/D,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE;YACjB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,GAAG,IAAI,CAAC;KACV,CAAC;IACF,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,aAAa,CAAC,EAAE;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE;QACV,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,yCAAyC;AACzC,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,2BAA2B;IAC1C,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C,SAAS,EAAE,qBAAqB,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAkBpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,QAAQ,GACZ,2BAA2B,CA4B7B;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,IAAI,GACT,2BAA2B,CAyB7B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAsExE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,+BAAyB,CAAC;AAE7D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAElE;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,GACL,OAAO,CAAC,mBAAmB,CAAC,CAyG9B;;;;;;;;;;;;;;;;AAED,wBAcE"}