@xfuel/verify 0.1.0

package/dist/index.js

@@ -0,0 +1,405 @@
+"use strict";
+/**
+ * @xfuel/verify — Offline verification for Chit402 receipts.
+ *
+ * Verify payment binding and output commitment WITHOUT calling the Chit402 API.
+ * Third parties use this to confirm:
+ *   1. The receipt's payment binding matches on-chain settlement
+ *   2. The output hash commitment is correct
+ *   3. The issuer signature is valid (ES256/JWKS)
+ *   4. (Optional) The SP1 nullifier is anchored on-chain
+ *
+ * See docs/specs/RECEIPT_V2_SEMANTICS.md for the verification algorithm.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalSignedPayload = exports.BASE_SEPOLIA_RPC_URL = exports.BASE_RPC_URL = exports.ZK_VERIFIER_ADDRESS = exports.computeInferenceBinding = exports.computePaymentCommitment = void 0;
+exports.canonicalIssuerPayload = canonicalIssuerPayload;
+exports.verifyIssuerSignature = verifyIssuerSignature;
+exports.verifyIssuerSignatureWithJwks = verifyIssuerSignatureWithJwks;
+exports.verifyBinding = verifyBinding;
+exports.verifyNullifier = verifyNullifier;
+exports.hashCanonicalPayload = hashCanonicalPayload;
+exports.verifyReceipt = verifyReceipt;
+const ethers_1 = require("ethers");
+const node_crypto_1 = require("node:crypto");
+const binding_js_1 = require("./binding.js");
+Object.defineProperty(exports, "computePaymentCommitment", { enumerable: true, get: function () { return binding_js_1.computePaymentCommitment; } });
+Object.defineProperty(exports, "computeInferenceBinding", { enumerable: true, get: function () { return binding_js_1.computeInferenceBinding; } });
+/** ZKVerifierSP1 contract on Base mainnet. */
+exports.ZK_VERIFIER_ADDRESS = '0x9373499645292715a2275A78eD65B14215C41c06';
+/** Default Base mainnet RPC. */
+exports.BASE_RPC_URL = 'https://mainnet.base.org';
+/** Base Sepolia testnet RPC. */
+exports.BASE_SEPOLIA_RPC_URL = 'https://sepolia.base.org';
+/** Minimal ABI for nullifier check. */
+const ZK_VERIFIER_ABI = [
+    'function usedNullifiers(bytes32) view returns (bool)',
+];
+/**
+ * Canonical, order-stable payload an issuer signature covers.
+ * MUST match `canonicalSignedPayload` in services/gateway/src/receipt.js exactly.
+ *
+ * Signed fields (15 total):
+ *   1. task_id
+ *   2. payment.rail
+ *   3. payment.ref
+ *   4. payment.gross_amount
+ *   5. payment.net_amount
+ *   6. payment.fee_amount
+ *   7. payment.protocol_fee_bps ?? payment.fee_bps
+ *   8. payment.platform_fee
+ *   9. payment.platform_fee_bps
+ *  10. provider_cogs.actual
+ *  11. route.model
+ *  12. route.model_commitment.commitment
+ *  13. route.provider
+ *  14. output.hash
+ *  15. binding.expected_commitment
+ */
+function canonicalIssuerPayload(receipt) {
+    return JSON.stringify([
+        receipt.task_id ?? null,
+        receipt.payment?.rail ?? null,
+        receipt.payment?.ref ?? null,
+        receipt.payment?.gross_amount ?? null,
+        receipt.payment?.net_amount ?? null,
+        receipt.payment?.fee_amount ?? null,
+        receipt.payment?.protocol_fee_bps ?? receipt.payment?.fee_bps ?? null,
+        receipt.payment?.platform_fee ?? null,
+        receipt.payment?.platform_fee_bps ?? null,
+        receipt.provider_cogs?.actual ?? null,
+        receipt.route?.model ?? null,
+        receipt.route?.model_commitment?.commitment ?? null,
+        receipt.route?.provider ?? null,
+        receipt.output?.hash ?? null,
+        receipt.binding?.expected_commitment ?? null,
+    ]);
+}
+/**
+ * Verify a receipt's ES256 issuer signature against a JWK (public key).
+ * This is the public-key verification path — no shared secret required.
+ *
+ * Verification steps:
+ *   1. GET /receipt/:taskId?format=json → receipt.issuer_signature
+ *   2. GET /.well-known/jwks.json → find key matching issuer_signature.kid
+ *   3. ES256 verify canonicalIssuerPayload(receipt) against the signature
+ *
+ * @param receipt - Receipt JSON with issuer_signature
+ * @param jwk - JWK public key { kty: 'EC', crv: 'P-256', x, y }
+ */
+function verifyIssuerSignature(receipt, jwk) {
+    const sig = receipt.issuer_signature;
+    if (!sig || !sig.value) {
+        return { checked: false, valid: false, reason: 'no_issuer_signature' };
+    }
+    if (sig.alg !== 'ES256') {
+        return { checked: false, valid: false, reason: `unsupported_alg: ${sig.alg}` };
+    }
+    if (!jwk || jwk.kty !== 'EC' || jwk.crv !== 'P-256') {
+        return { checked: false, valid: false, reason: 'invalid_jwk' };
+    }
+    if (sig.kid && jwk.kid && sig.kid !== jwk.kid) {
+        return { checked: false, valid: false, reason: 'kid_mismatch' };
+    }
+    try {
+        const jwkInput = { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y };
+        const publicKey = (0, node_crypto_1.createPublicKey)({ key: jwkInput, format: 'jwk' });
+        const signature = Buffer.from(sig.value, 'base64url');
+        const payload = canonicalIssuerPayload(receipt);
+        const valid = (0, node_crypto_1.verify)('sha256', Buffer.from(payload, 'utf8'), {
+            key: publicKey,
+            dsaEncoding: 'ieee-p1363',
+        }, signature);
+        return { checked: true, valid, kid: sig.kid };
+    }
+    catch (err) {
+        return { checked: true, valid: false, kid: sig.kid, reason: `verify_error: ${err.message}` };
+    }
+}
+/**
+ * Verify a receipt's ES256 issuer signature against a JWKS (key set).
+ * Finds the matching key by kid and verifies.
+ *
+ * @param receipt - Receipt JSON with issuer_signature
+ * @param jwks - JWKS with keys array
+ */
+function verifyIssuerSignatureWithJwks(receipt, jwks) {
+    const sig = receipt.issuer_signature;
+    if (!sig || !sig.value) {
+        return { checked: false, valid: false, reason: 'no_issuer_signature' };
+    }
+    if (!jwks || !Array.isArray(jwks.keys) || jwks.keys.length === 0) {
+        return { checked: false, valid: false, reason: 'empty_jwks' };
+    }
+    // Find matching key by kid, or try all ES256 keys if no kid on signature
+    const candidates = sig.kid
+        ? jwks.keys.filter(k => k.kid === sig.kid && k.alg === 'ES256')
+        : jwks.keys.filter(k => k.alg === 'ES256');
+    if (candidates.length === 0) {
+        return { checked: false, valid: false, reason: 'no_matching_key' };
+    }
+    for (const jwk of candidates) {
+        const result = verifyIssuerSignature(receipt, jwk);
+        if (result.valid) {
+            return result;
+        }
+    }
+    return { checked: true, valid: false, reason: 'signature_invalid' };
+}
+/**
+ * Verify a receipt's payment binding locally (no network required).
+ *
+ * This recomputes the commitment from the receipt's fields and compares
+ * it to the stored `binding.expected_commitment`.
+ */
+function verifyBinding(receipt) {
+    const binding = receipt.binding;
+    if (!binding) {
+        return {
+            verified: false,
+            expected: null,
+            recomputed: null,
+            matches: false,
+            covers: [],
+            reason: 'No binding present on receipt (may be unmetered or TFUEL rail)',
+        };
+    }
+    const paymentRef = receipt.payment?.ref ?? null;
+    const taskId = receipt.task_id;
+    const rail = (binding.rail || receipt.payment?.rail || 'usdc');
+    const amount = binding.amount || receipt.payment?.net_amount || '0';
+    const covers = binding.covers || ['payment', 'settlement'];
+    // Determine if this is a PBR (includes model + output)
+    const bindsInference = covers.includes('inference') ||
+        !!(binding.model_commitment && binding.output_hash);
+    let recomputed;
+    try {
+        if (bindsInference) {
+            const result = (0, binding_js_1.computeInferenceBinding)({
+                paymentRef,
+                taskId,
+                rail,
+                amount,
+                modelCommitment: binding.model_commitment,
+                outputHash: binding.output_hash,
+            });
+            recomputed = result.commitment;
+        }
+        else {
+            const result = (0, binding_js_1.computePaymentCommitment)({
+                paymentRef,
+                taskId,
+                rail,
+                amount,
+            });
+            recomputed = result.commitment;
+        }
+    }
+    catch (err) {
+        return {
+            verified: false,
+            expected: binding.expected_commitment || null,
+            recomputed: null,
+            matches: false,
+            covers,
+            reason: `Failed to recompute commitment: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const expected = binding.expected_commitment || null;
+    const matches = !!(expected &&
+        recomputed &&
+        expected.toLowerCase() === recomputed.toLowerCase());
+    return {
+        verified: true,
+        expected,
+        recomputed,
+        matches,
+        covers,
+        reason: matches ? undefined : 'Commitment mismatch — receipt may be tampered',
+    };
+}
+/**
+ * Verify a receipt's nullifier is anchored on-chain.
+ *
+ * Requires network access to the Base RPC.
+ */
+async function verifyNullifier(receipt, options = {}) {
+    const nullifier = receipt.proof?.nullifier ?? null;
+    if (!nullifier) {
+        return {
+            verified: false,
+            nullifier: null,
+            anchored: null,
+            reason: 'No nullifier present (Tier-1 receipt or proof pending)',
+        };
+    }
+    if (!/^0x[0-9a-fA-F]{64}$/.test(nullifier)) {
+        return {
+            verified: false,
+            nullifier,
+            anchored: null,
+            reason: 'Invalid nullifier format',
+        };
+    }
+    const rpcUrl = options.rpcUrl || exports.BASE_RPC_URL;
+    const verifierAddress = options.verifierAddress || exports.ZK_VERIFIER_ADDRESS;
+    try {
+        const provider = new ethers_1.JsonRpcProvider(rpcUrl);
+        const contract = new ethers_1.Contract(verifierAddress, ZK_VERIFIER_ABI, provider);
+        const isUsed = await contract.usedNullifiers(nullifier);
+        return {
+            verified: true,
+            nullifier,
+            anchored: isUsed,
+            reason: isUsed ? undefined : 'Nullifier not found on-chain (proof may not be submitted yet)',
+        };
+    }
+    catch (err) {
+        return {
+            verified: false,
+            nullifier,
+            anchored: null,
+            reason: `Chain query failed: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+}
+/**
+ * Canonical signed payload for HMAC verification.
+ * Alias of canonicalIssuerPayload — both must produce identical bytes.
+ */
+exports.canonicalSignedPayload = canonicalIssuerPayload;
+/**
+ * Hash the canonical payload (for ERC-8004 response_hash).
+ */
+function hashCanonicalPayload(receipt) {
+    return (0, ethers_1.keccak256)((0, ethers_1.toUtf8Bytes)((0, exports.canonicalSignedPayload)(receipt)));
+}
+/**
+ * Full receipt verification — binding + issuer signature + optional nullifier check.
+ *
+ * @param receipt The Chit402 receipt JSON
+ * @param options.jwks JWKS for issuer signature verification (no network fetch)
+ * @param options.checkNullifier Whether to verify nullifier on-chain (requires network)
+ * @param options.rpcUrl RPC URL for on-chain checks
+ */
+async function verifyReceipt(receipt, options = {}) {
+    const errors = [];
+    // Verify binding locally
+    const binding = verifyBinding(receipt);
+    if (!binding.matches && binding.expected) {
+        errors.push('Payment binding mismatch');
+    }
+    // Verify issuer signature if JWKS provided
+    let issuer_signature;
+    if (options.jwks) {
+        issuer_signature = verifyIssuerSignatureWithJwks(receipt, options.jwks);
+        if (issuer_signature.checked && !issuer_signature.valid) {
+            errors.push(`Issuer signature invalid: ${issuer_signature.reason}`);
+        }
+    }
+    else if (receipt.issuer_signature) {
+        issuer_signature = {
+            checked: false,
+            valid: false,
+            kid: receipt.issuer_signature.kid,
+            reason: 'JWKS not provided — pass jwks option to verify issuer signature',
+        };
+    }
+    else {
+        issuer_signature = {
+            checked: false,
+            valid: false,
+            reason: 'No issuer signature present on receipt',
+        };
+    }
+    // Verify nullifier on-chain if requested
+    let nullifier;
+    if (options.checkNullifier && receipt.proof?.nullifier) {
+        nullifier = await verifyNullifier(receipt, {
+            rpcUrl: options.rpcUrl,
+            verifierAddress: options.verifierAddress,
+        });
+        if (nullifier.verified && nullifier.anchored === false) {
+            errors.push('Nullifier not anchored on-chain');
+        }
+    }
+    else {
+        nullifier = {
+            verified: false,
+            nullifier: receipt.proof?.nullifier ?? null,
+            anchored: null,
+            reason: options.checkNullifier
+                ? 'No nullifier present'
+                : 'On-chain check not requested',
+        };
+    }
+    // Extract frozen fields
+    const hub = receipt.route?.provider ?? null;
+    const model = receipt.route?.model ?? null;
+    const amount_usdc = receipt.payment?.gross_amount ?? null;
+    const tx = receipt.payment?.ref ?? null;
+    const output_hash = receipt.output?.hash ?? null;
+    // Determine overall status with strict signature semantics:
+    // - If JWKS provided and signature invalid/kid mismatch/no matching key → 'failed'
+    // - If receipt has issuer_signature but no JWKS provided → 'partial' (cannot verify)
+    // - Unsigned receipts can be 'partial' or 'verified' based on binding
+    let overall;
+    // Check for signature verification failure (JWKS provided but signature invalid)
+    const jwksProvided = !!options.jwks;
+    const hasIssuerSig = !!receipt.issuer_signature;
+    const issuerSigInvalid = jwksProvided && hasIssuerSig && !issuer_signature.valid;
+    // Binding failure
+    const bindingFailed = binding.expected && !binding.matches;
+    if (issuerSigInvalid || bindingFailed) {
+        // JWKS provided but signature invalid, OR binding mismatch → failed
+        overall = 'failed';
+    }
+    else if (hasIssuerSig && !jwksProvided) {
+        // Receipt has signature but no JWKS provided → partial (cannot verify signature)
+        overall = 'partial';
+    }
+    else if (binding.matches && (!options.checkNullifier || nullifier.anchored)) {
+        // Binding matches, signature OK (or no signature), nullifier OK → verified
+        overall = 'verified';
+    }
+    else if (binding.matches || issuer_signature.valid || (nullifier.verified && nullifier.anchored)) {
+        // At least one check passed → partial
+        overall = 'partial';
+    }
+    else if (!binding.expected && !receipt.proof?.nullifier && !hasIssuerSig) {
+        // No binding/sig/nullifier to verify (unmetered/demo) → partial
+        overall = 'partial';
+    }
+    else {
+        overall = 'failed';
+    }
+    return {
+        receipt_id: receipt.task_id,
+        binding,
+        issuer_signature,
+        nullifier,
+        output_hash,
+        hub,
+        model,
+        amount_usdc,
+        tx,
+        overall,
+        errors,
+    };
+}
+exports.default = {
+    verifyBinding,
+    verifyIssuerSignature,
+    verifyIssuerSignatureWithJwks,
+    verifyNullifier,
+    verifyReceipt,
+    computePaymentCommitment: binding_js_1.computePaymentCommitment,
+    computeInferenceBinding: binding_js_1.computeInferenceBinding,
+    canonicalIssuerPayload,
+    canonicalSignedPayload: exports.canonicalSignedPayload,
+    hashCanonicalPayload,
+    ZK_VERIFIER_ADDRESS: exports.ZK_VERIFIER_ADDRESS,
+    BASE_RPC_URL: exports.BASE_RPC_URL,
+    BASE_SEPOLIA_RPC_URL: exports.BASE_SEPOLIA_RPC_URL,
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAyKH,wDAkBC;AAcD,sDA+BC;AASD,sEA4BC;AAQD,sCAsEC;AAOD,0CA8CC;AAWD,oDAEC;AAUD,sCAiHC;AAthBD,mCAA2E;AAC3E,6CAAsE;AACtE,6CAKsB;AAGpB,yGAPA,qCAAwB,OAOA;AACxB,wGAPA,oCAAuB,OAOA;AAKzB,8CAA8C;AACjC,QAAA,mBAAmB,GAAG,4CAA4C,CAAC;AAEhF,gCAAgC;AACnB,QAAA,YAAY,GAAG,0BAA0B,CAAC;AAEvD,gCAAgC;AACnB,QAAA,oBAAoB,GAAG,0BAA0B,CAAC;AAE/D,uCAAuC;AACvC,MAAM,eAAe,GAAG;IACtB,sDAAsD;CACvD,CAAC;AAsHF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,sBAAsB,CAAC,OAAqB;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,CAAC,OAAO,IAAI,IAAI;QACvB,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI;QAC7B,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI;QAC5B,OAAO,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;QACrC,OAAO,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;QACnC,OAAO,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;QACnC,OAAO,CAAC,OAAO,EAAE,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI;QACrE,OAAO,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;QACrC,OAAO,CAAC,OAAO,EAAE,gBAAgB,IAAI,IAAI;QACzC,OAAO,CAAC,aAAa,EAAE,MAAM,IAAI,IAAI;QACrC,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI;QAC5B,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,UAAU,IAAI,IAAI;QACnD,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI;QAC/B,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI;QAC5B,OAAO,CAAC,OAAO,EAAE,mBAAmB,IAAI,IAAI;KAC7C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,qBAAqB,CACnC,OAAqB,EACrB,GAAa;IAEb,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAW,CAAC;QAC7E,MAAM,SAAS,GAAc,IAAA,6BAAe,EAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAA,oBAAM,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;YAC3D,GAAG,EAAE,SAAS;YACd,WAAW,EAAE,YAAY;SAC1B,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1G,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,6BAA6B,CAC3C,OAAqB,EACrB,IAAU;IAEV,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAChE,CAAC;IAED,yEAAyE;IACzE,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG;QACxB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,OAAqB;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,gEAAgE;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,MAAM,CAAqB,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,UAAU,IAAI,GAAG,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE3D,uDAAuD;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEtD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,IAAA,oCAAuB,EAAC;gBACrC,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,MAAM;gBACN,eAAe,EAAE,OAAO,CAAC,gBAAgB;gBACzC,UAAU,EAAE,OAAO,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAA,qCAAwB,EAAC;gBACtC,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,MAAM;aACP,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;YAC7C,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,KAAK;YACd,MAAM;YACN,MAAM,EAAE,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC9F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,CAAC,CAChB,QAAQ;QACR,UAAU;QACV,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,CACpD,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ;QACR,UAAU;QACV,OAAO;QACP,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+CAA+C;KAC9E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CACnC,OAAqB,EACrB,UAAyD,EAAE;IAE3D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IAEnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,0BAA0B;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,oBAAY,CAAC;IAC9C,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,2BAAmB,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,wBAAe,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,iBAAQ,CAAC,eAAe,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAEjE,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+DAA+D;SAC7F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACU,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;GAEG;AACH,SAAgB,oBAAoB,CAAC,OAAqB;IACxD,OAAO,IAAA,kBAAS,EAAC,IAAA,oBAAW,EAAC,IAAA,8BAAsB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,aAAa,CACjC,OAAqB,EACrB,UAKI,EAAE;IAEN,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,yBAAyB;IACzB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;IAED,2CAA2C;IAC3C,IAAI,gBAA6C,CAAC;IAClD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,gBAAgB,GAAG,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,gBAAgB,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,6BAA6B,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACpC,gBAAgB,GAAG;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG;YACjC,MAAM,EAAE,iEAAiE;SAC1E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,wCAAwC;SACjD,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,IAAI,SAAgC,CAAC;IACrC,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QACvD,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE;YACzC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,GAAG;YACV,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,IAAI;YAC3C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,cAAc;gBAC5B,CAAC,CAAC,sBAAsB;gBACxB,CAAC,CAAC,8BAA8B;SACnC,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;IAEjD,4DAA4D;IAC5D,mFAAmF;IACnF,qFAAqF;IACrF,sEAAsE;IACtE,IAAI,OAA0C,CAAC;IAE/C,iFAAiF;IACjF,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAChD,MAAM,gBAAgB,GAAG,YAAY,IAAI,YAAY,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;IAEjF,kBAAkB;IAClB,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAE3D,IAAI,gBAAgB,IAAI,aAAa,EAAE,CAAC;QACtC,oEAAoE;QACpE,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;SAAM,IAAI,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,iFAAiF;QACjF,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,2EAA2E;QAC3E,OAAO,GAAG,UAAU,CAAC;IACvB,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnG,sCAAsC;QACtC,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3E,gEAAgE;QAChE,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,OAAO;QAC3B,OAAO;QACP,gBAAgB;QAChB,SAAS;QACT,WAAW;QACX,GAAG;QACH,KAAK;QACL,WAAW;QACX,EAAE;QACF,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC;AAED,kBAAe;IACb,aAAa;IACb,qBAAqB;IACrB,6BAA6B;IAC7B,eAAe;IACf,aAAa;IACb,wBAAwB,EAAxB,qCAAwB;IACxB,uBAAuB,EAAvB,oCAAuB;IACvB,sBAAsB;IACtB,sBAAsB,EAAtB,8BAAsB;IACtB,oBAAoB;IACpB,mBAAmB,EAAnB,2BAAmB;IACnB,YAAY,EAAZ,oBAAY;IACZ,oBAAoB,EAApB,4BAAoB;CACrB,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@xfuel/verify",
+  "version": "0.1.0",
+  "description": "Offline verification for Chit402 receipts — verify payment binding and output hash without calling the API",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "xfuel-verify": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    }
+  },
+  "sideEffects": false,
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://github.com/XFuel-Lab/chit402/tree/main/packages/verify#readme",
+  "bugs": {
+    "url": "https://github.com/XFuel-Lab/chit402/issues"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test test/*.test.mjs",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "chit402",
+    "xfuel",
+    "verify",
+    "receipt",
+    "x402",
+    "usdc",
+    "base",
+    "offline",
+    "zk"
+  ],
+  "author": "XFuel Lab",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/XFuel-Lab/chit402.git",
+    "directory": "packages/verify"
+  },
+  "dependencies": {
+    "ethers": "^6.16.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.9.3"
+  }
+}