@xfuel/verify 0.2.1 → 0.3.0

package/README.md

@@ -25,6 +25,7 @@ console.log(result.matches); // true if binding verified
 // Full verification including on-chain nullifier check
 const fullResult = await verifyReceipt(receipt, { checkNullifier: true });
 console.log(fullResult.overall); // 'verified' | 'partial' | 'failed'
+console.log(fullResult.receipt_lane.freeze); // unsigned; does not change overall
 ```
 
 ### CLI
@@ -33,6 +34,15 @@ console.log(fullResult.overall); // 'verified' | 'partial' | 'failed'
 # Local binding verification (no network required)
 npx xfuel-verify receipt.json
 
+# Hash the canonical object (must match signed payload_hash) and read not_after
+# from a pinned issuer-history snapshot. Both flags are offline.
+npx xfuel-verify receipt.json --canonical-preimage preimage.json --issuer-history-file issuer-history.json
+
+# A signed refusal (schema chit402.refusal.v1) is not a payment.
+# The check proves the issuer refused, at the signed anchor, for that code.
+# It does not prove a payment or that the block still stands.
+npx xfuel-verify refusal.json
+
 # With on-chain nullifier check (requires network)
 npx xfuel-verify receipt.json --check-nullifier
 
@@ -41,6 +51,9 @@ npx xfuel-verify receipt.json --json
 
 # From stdin
 curl -s https://api.chit402.com/receipt/task-123?format=json | npx xfuel-verify -
+
+# Dual anchor: inclusion, Solana memo, Base calldata
+npx xfuel-verify receipt.json inclusion.json head.json --rpc
 ```
 
 ## What This Verifies
@@ -52,6 +65,9 @@ curl -s https://api.chit402.com/receipt/task-123?format=json | npx xfuel-verify
 | Output hash | No | Hash is on the receipt |
 | On-chain settlement | Yes | Query Base RPC for tx |
 | Nullifier anchor | Yes | Query ZKVerifierSP1 contract |
+| Anchored receipt root | Yes, with `--rpc` | Inclusion proof, then Solana memo and Base calldata for that root |
+| Canonical preimage | No | SHA-256 of `--canonical-preimage`, or the stored canonical object, matches signed `payload_hash` |
+| Issuer history | No, with `--issuer-history-file` | `iat` is inside the kid's `not_before` / `not_after`. A payload v10 pin must match the snapshot hash |
 
 ## Issuer Signature Verification (ES256)
 
@@ -73,6 +89,13 @@ including when `--jwks-file` points at the real JWKS.
 # Offline: default production pin, no network
 npx xfuel-verify receipt.json
 
+# Recompute published preimages and check the kid window.
+# A payload v10 receipt pins issuer_history. Hash the stored canonical object:
+curl -sS "https://api.chit402.com/receipt/RECEIPT_ID?format=json" -o receipt.json
+curl -sS "https://api.chit402.com/receipt/RECEIPT_ID/preimage" -o preimage.json
+curl -sS "https://api.chit402.com/.well-known/issuer-history.json?version=1" -o issuer-history.json
+npx xfuel-verify receipt.json --canonical-preimage preimage.json --issuer-history-file issuer-history.json
+
 # Trust the published JWKS instead of (or in addition to) the pin
 curl -o issuer-jwks.json https://api.chit402.com/.well-known/jwks.json
 npx xfuel-verify receipt.json --jwks-file issuer-jwks.json --no-trusted-kid
@@ -199,6 +222,10 @@ Full verification combining binding and optional nullifier check.
 }
 ```
 
+## Build digest
+
+`npm run digest` writes `BUILD_DIGEST.txt`. That file is the SHA-256 of the sorted `src/**/*.ts` listing, not a bit-reproducible `tsc` binary. The same sources produce the same digest. The receipt-tree genesis leaf copies this digest so a holder can see which verifier source the issuer vouches for. It does not prove the process that served the receipt ran that exact binary.
+
 ## License
 
 Apache-2.0

package/dist/anchor-witness.d.ts

@@ -0,0 +1,138 @@
+export declare const MEMO_PROGRAM_ID = "MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr";
+export declare const MEMO_PROGRAM_ID_V1 = "Memo1UhkJRfHyvLMcVucJwxXeuD728EqVDDwQDxFMNo";
+/** Genesis hashes from the Solana cluster CAIP-2 references. */
+export declare const SOLANA_GENESIS: Record<string, string>;
+export declare const BASE_MAINNET_CHAIN_ID = 8453;
+export declare const ANCHOR_PROVES: string[];
+export declare const ANCHOR_DOES_NOT_PROVE: string[];
+export interface InclusionStep {
+    hash: string;
+    position: string;
+}
+export interface AnchorReceipt {
+    task_id?: string;
+    row_hash?: string | null;
+    book_chain?: {
+        row_hash?: string | null;
+    } | null;
+}
+export interface AnchorInclusion {
+    task_id?: string;
+    leaf_index: number;
+    tree_size: number;
+    root: string;
+    leaf?: string;
+    row_hash?: string | null;
+    proof: InclusionStep[];
+}
+export interface AnchorHead {
+    root: string;
+    tree_size?: number;
+    anchor_tx?: string | null;
+    anchor?: {
+        tx?: string | null;
+        calldata?: string | null;
+        chain_id?: number | null;
+    } | null;
+    anchors?: {
+        base?: {
+            tx?: string | null;
+            calldata?: string | null;
+            chain_id?: number | null;
+            status?: string;
+        } | null;
+        solana?: {
+            signature?: string | null;
+            slot?: number | null;
+            cluster?: string | null;
+            memo?: string | null;
+            status?: string | null;
+        } | null;
+    } | null;
+}
+interface SolanaIx {
+    program?: string;
+    programId?: string;
+    parsed?: string | {
+        memo?: string;
+        info?: string;
+    };
+}
+export interface SolanaAnchorTx {
+    slot?: number;
+    meta?: {
+        err?: unknown;
+        logMessages?: string[];
+        innerInstructions?: Array<{
+            instructions?: SolanaIx[];
+        }>;
+    } | null;
+    transaction?: {
+        message?: {
+            instructions?: SolanaIx[];
+        };
+    };
+}
+export interface BaseAnchorTx {
+    hash?: string;
+    input?: string;
+    chainId?: number;
+}
+export interface AnchorWitnessResult {
+    overall: 'verified' | 'partial' | 'failed';
+    root: string | null;
+    inclusion: {
+        valid: boolean;
+        leaf: string | null;
+        leaf_source: string;
+        reason?: string;
+    };
+    solana: {
+        checked: boolean;
+        valid: boolean;
+        signature: string | null;
+        slot: number | null;
+        cluster: string | null;
+        memo: string | null;
+        reason?: string;
+    };
+    base: {
+        checked: boolean;
+        valid: boolean;
+        tx: string | null;
+        chain_id: number | null;
+        reason?: string;
+    };
+    proves: string[];
+    does_not_prove: string[];
+    errors: string[];
+}
+export declare function leafHash(bytes: Uint8Array): Buffer;
+export declare function normalizeRoot(root: string | null | undefined): string | null;
+/** RFC 6962-style inclusion. Same rule as the gateway tree. */
+export declare function verifyMerkleInclusion(leaf: Buffer, index: number, treeSize: number, rootHex: string, proof: InclusionStep[]): boolean;
+export declare function parseAnchorMemo(memo: string): {
+    scope: string;
+    day: string;
+    root: string;
+    prev: string;
+} | null;
+export declare function extractMemos(tx: SolanaAnchorTx | null | undefined): string[];
+export declare function fetchSolanaGenesisHash(rpcUrl: string): Promise<string>;
+export declare function fetchBaseAnchorTransaction(txHash: string, rpcUrl: string): Promise<BaseAnchorTx | null>;
+export interface VerifyAnchoredRootInput {
+    receipt: AnchorReceipt;
+    inclusion: AnchorInclusion;
+    head: AnchorHead;
+    baseRpcUrl?: string;
+    solanaRpcUrl?: string;
+    fetchSolanaTx?: (signature: string, rpcUrl: string) => Promise<SolanaAnchorTx | null>;
+    fetchGenesis?: (rpcUrl: string) => Promise<string>;
+    fetchBaseTx?: (txHash: string, rpcUrl: string) => Promise<BaseAnchorTx | null>;
+}
+/**
+ * Verify inclusion, then the Solana memo and the Base calldata for that root.
+ */
+export declare function verifyAnchoredRoot(input: VerifyAnchoredRootInput): Promise<AnchorWitnessResult>;
+export {};
+//# sourceMappingURL=anchor-witness.d.ts.map

package/dist/anchor-witness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-witness.d.ts","sourceRoot":"","sources":["../src/anchor-witness.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,eAAe,gDAAgD,CAAC;AAC7E,eAAO,MAAM,kBAAkB,gDAAgD,CAAC;AAEhF,gEAAgE;AAChE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIjD,CAAC;AAEF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C,eAAO,MAAM,aAAa,UAIzB,CAAC;AAEF,eAAO,MAAM,qBAAqB,UAKjC,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3F,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAC1G,MAAM,CAAC,EAAE;YACP,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SACxB,GAAG,IAAI,CAAC;KACV,GAAG,IAAI,CAAC;CACV;AAED,UAAU,QAAQ;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,iBAAiB,CAAC,EAAE,KAAK,CAAC;YAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAA;SAAE,CAAC,CAAC;KAC1D,GAAG,IAAI,CAAC;IACT,WAAW,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAC3D;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzF,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,OAAO,CAAC;QACf,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAMD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAElD;AAMD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,aAAa,EAAE,GACrB,OAAO,CAUT;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAY/G;AAUD,wBAAgB,YAAY,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAqB5E;AAcD,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI5E;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAS7G;AAqBD,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACtF,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CAChF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwKrG"}

package/dist/anchor-witness.js

@@ -0,0 +1,365 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANCHOR_DOES_NOT_PROVE = exports.ANCHOR_PROVES = exports.BASE_MAINNET_CHAIN_ID = exports.SOLANA_GENESIS = exports.MEMO_PROGRAM_ID_V1 = exports.MEMO_PROGRAM_ID = void 0;
+exports.leafHash = leafHash;
+exports.normalizeRoot = normalizeRoot;
+exports.verifyMerkleInclusion = verifyMerkleInclusion;
+exports.parseAnchorMemo = parseAnchorMemo;
+exports.extractMemos = extractMemos;
+exports.fetchSolanaGenesisHash = fetchSolanaGenesisHash;
+exports.fetchBaseAnchorTransaction = fetchBaseAnchorTransaction;
+exports.verifyAnchoredRoot = verifyAnchoredRoot;
+/**
+ * Check a receipt leaf against a signed tree head, then against the two
+ * anchors that publish that root: an SPL Memo on Solana and calldata on Base.
+ *
+ * Inclusion is local. The chain checks use the RPC you pass. A matching memo
+ * and matching calldata show the issuer published this root. They do not show
+ * the payment.
+ */
+const node_crypto_1 = require("node:crypto");
+const base_payer_js_1 = require("./base-payer.js");
+const solana_payer_js_1 = require("./solana-payer.js");
+exports.MEMO_PROGRAM_ID = 'MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr';
+exports.MEMO_PROGRAM_ID_V1 = 'Memo1UhkJRfHyvLMcVucJwxXeuD728EqVDDwQDxFMNo';
+/** Genesis hashes from the Solana cluster CAIP-2 references. */
+exports.SOLANA_GENESIS = {
+    'mainnet-beta': '5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp',
+    devnet: 'EtWTRABZaYq6iMfeYKouRu166VU2xqa1wcaWoxPkrZBG',
+    testnet: '4uhcVJyU9pJkvQyS88uRDiswHXSCkY3zQawwpjk2NsNY',
+};
+exports.BASE_MAINNET_CHAIN_ID = 8453;
+exports.ANCHOR_PROVES = [
+    'This receipt leaf is inside the issuer append-only tree of the stated size, under the stated root.',
+    'The Solana transaction memo contains that root, and the RPC genesis hash is the cluster named on the head.',
+    'The Base transaction calldata is that same root, on chain id 8453.',
+];
+exports.ANCHOR_DOES_NOT_PROVE = [
+    'It does not prove the payment, the payer, the payee, or the model output.',
+    'It does not prove a receipt appended after this tree size is inside the root.',
+    'It does not prove the issuer included only honest rows. It proves this leaf hashes into the published root.',
+    'It does not prove the RPC itself is honest. It checks the transaction and genesis hash that RPC returned.',
+];
+function sha256(buf) {
+    return (0, node_crypto_1.createHash)('sha256').update(buf).digest();
+}
+function leafHash(bytes) {
+    return sha256(Buffer.concat([Buffer.from([0x00]), Buffer.from(bytes)]));
+}
+function nodeHash(left, right) {
+    return sha256(Buffer.concat([Buffer.from([0x01]), left, right]));
+}
+function normalizeRoot(root) {
+    const hex = String(root || '').replace(/^0x/, '').toLowerCase();
+    return /^[0-9a-f]{64}$/.test(hex) ? hex : null;
+}
+/** RFC 6962-style inclusion. Same rule as the gateway tree. */
+function verifyMerkleInclusion(leaf, index, treeSize, rootHex, proof) {
+    if (!Array.isArray(proof) || index < 0 || index >= treeSize)
+        return false;
+    let hash = new Uint8Array(leaf);
+    for (const step of proof) {
+        if (!step || !/^[0-9a-fA-F]{64}$/.test(step.hash))
+            return false;
+        const sib = Buffer.from(step.hash, 'hex');
+        const next = step.position === 'left' ? nodeHash(sib, hash) : nodeHash(hash, sib);
+        hash = new Uint8Array(next);
+    }
+    return Buffer.from(hash).toString('hex') === String(rootHex).replace(/^0x/, '').toLowerCase();
+}
+function parseAnchorMemo(memo) {
+    const parts = String(memo || '').split(':');
+    if (parts.length !== 7)
+        return null;
+    if (parts[0] !== 'chit402' || parts[1] !== 'root' || parts[2] !== 'v1')
+        return null;
+    const scope = parts[3];
+    const day = parts[4];
+    const root = parts[5];
+    const prev = parts[6];
+    if (!/^[A-Za-z0-9_-]{1,64}$/.test(scope))
+        return null;
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(day))
+        return null;
+    if (!/^[0-9a-f]{64}$/.test(root) || !/^[0-9a-f]{64}$/.test(prev))
+        return null;
+    return { scope, day, root, prev };
+}
+function isMemoIx(ix) {
+    const program = ix.program || '';
+    const programId = ix.programId || '';
+    return program === 'spl-memo'
+        || programId === exports.MEMO_PROGRAM_ID
+        || programId === exports.MEMO_PROGRAM_ID_V1;
+}
+function extractMemos(tx) {
+    if (!tx)
+        return [];
+    const found = [];
+    const push = (value) => {
+        if (value && !found.includes(value))
+            found.push(value);
+    };
+    const visit = (ix) => {
+        if (!ix || !isMemoIx(ix))
+            return;
+        if (typeof ix.parsed === 'string')
+            push(ix.parsed);
+        else if (ix.parsed && typeof ix.parsed.memo === 'string')
+            push(ix.parsed.memo);
+        else if (ix.parsed && typeof ix.parsed.info === 'string')
+            push(ix.parsed.info);
+    };
+    for (const ix of tx.transaction?.message?.instructions || [])
+        visit(ix);
+    for (const inner of tx.meta?.innerInstructions || []) {
+        for (const ix of inner.instructions || [])
+            visit(ix);
+    }
+    for (const line of tx.meta?.logMessages || []) {
+        const match = /Memo \(len \d+\): "(.*)"/.exec(line);
+        if (match)
+            push(match[1]);
+    }
+    return found;
+}
+async function defaultRpc(url, method, params) {
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }),
+    });
+    if (!res.ok)
+        throw new Error(`HTTP ${res.status}`);
+    const json = await res.json();
+    if (json.error)
+        throw new Error(json.error.message || 'rpc_error');
+    return json.result ?? null;
+}
+async function fetchSolanaGenesisHash(rpcUrl) {
+    const result = await defaultRpc(rpcUrl, 'getGenesisHash', []);
+    if (typeof result !== 'string' || result.length === 0)
+        throw new Error('no_genesis');
+    return result;
+}
+async function fetchBaseAnchorTransaction(txHash, rpcUrl) {
+    const tx = await defaultRpc(rpcUrl, 'eth_getTransactionByHash', [txHash]);
+    const chainHex = await defaultRpc(rpcUrl, 'eth_chainId', []);
+    if (!tx)
+        return null;
+    return {
+        hash: tx.hash,
+        input: tx.input,
+        chainId: chainHex ? Number(chainHex) : undefined,
+    };
+}
+function rowHashFrom(receipt, inclusion) {
+    if (typeof receipt.row_hash === 'string')
+        return { rowHash: receipt.row_hash, source: 'receipt' };
+    if (typeof receipt.book_chain?.row_hash === 'string')
+        return { rowHash: receipt.book_chain.row_hash, source: 'receipt' };
+    if (typeof inclusion.row_hash === 'string')
+        return { rowHash: inclusion.row_hash, source: 'inclusion' };
+    return null;
+}
+function solanaSignature(head) {
+    const sol = head.anchors?.solana;
+    if (!sol || sol.status === 'pending')
+        return null;
+    return sol.signature || null;
+}
+function baseTxHash(head) {
+    const base = head.anchors?.base;
+    if (base?.status === 'pending')
+        return null;
+    return base?.tx || head.anchor?.tx || head.anchor_tx || null;
+}
+/**
+ * Verify inclusion, then the Solana memo and the Base calldata for that root.
+ */
+async function verifyAnchoredRoot(input) {
+    const errors = [];
+    const doesNotProve = [...exports.ANCHOR_DOES_NOT_PROVE];
+    const root = normalizeRoot(input.head?.root);
+    const inclusionRoot = normalizeRoot(input.inclusion?.root);
+    let leafHex = null;
+    let leafSource = 'none';
+    let inclusionValid = false;
+    let inclusionReason;
+    const taskId = input.receipt?.task_id ? String(input.receipt.task_id) : '';
+    if (!taskId) {
+        inclusionReason = 'missing_task_id';
+    }
+    else if (input.inclusion?.task_id && String(input.inclusion.task_id) !== taskId) {
+        inclusionReason = 'task_mismatch';
+    }
+    else if (!root || !inclusionRoot) {
+        inclusionReason = 'bad_root';
+    }
+    else if (root !== inclusionRoot) {
+        inclusionReason = 'root_mismatch';
+    }
+    else if (input.head.tree_size != null && Number(input.head.tree_size) !== Number(input.inclusion.tree_size)) {
+        inclusionReason = 'tree_size_mismatch';
+    }
+    else {
+        const row = rowHashFrom(input.receipt, input.inclusion);
+        let leaf = null;
+        if (row) {
+            leaf = leafHash(Buffer.from(`${taskId}|${row.rowHash}`));
+            leafSource = row.source;
+            if (input.inclusion.leaf && input.inclusion.leaf.toLowerCase() !== leaf.toString('hex')) {
+                inclusionReason = 'leaf_mismatch';
+                leaf = null;
+            }
+        }
+        else if (input.inclusion.leaf && /^[0-9a-fA-F]{64}$/.test(input.inclusion.leaf)) {
+            leaf = Buffer.from(input.inclusion.leaf, 'hex');
+            leafSource = 'inclusion';
+            doesNotProve.push('The leaf was taken from the inclusion object. The receipt had no row_hash, so this check did not recompute the leaf from the receipt bytes.');
+        }
+        else {
+            inclusionReason = 'no_leaf';
+        }
+        if (leaf) {
+            leafHex = leaf.toString('hex');
+            inclusionValid = verifyMerkleInclusion(leaf, Number(input.inclusion.leaf_index), Number(input.inclusion.tree_size), root, input.inclusion.proof || []);
+            if (!inclusionValid)
+                inclusionReason = 'inclusion_failed';
+        }
+    }
+    if (!inclusionValid && inclusionReason)
+        errors.push(inclusionReason);
+    const solanaRpc = input.solanaRpcUrl || process.env.SOLANA_RPC_URL || solana_payer_js_1.SOLANA_RPC_URL;
+    const baseRpc = input.baseRpcUrl || base_payer_js_1.BASE_RPC_URL;
+    const signature = root && inclusionValid ? solanaSignature(input.head) : null;
+    const txHash = root && inclusionValid ? baseTxHash(input.head) : null;
+    const solana = {
+        checked: false,
+        valid: false,
+        signature: input.head?.anchors?.solana?.signature ?? null,
+        slot: input.head?.anchors?.solana?.slot ?? null,
+        cluster: input.head?.anchors?.solana?.cluster ?? null,
+        memo: input.head?.anchors?.solana?.memo ?? null,
+        reason: undefined,
+    };
+    const base = {
+        checked: false,
+        valid: false,
+        tx: input.head?.anchors?.base?.tx || input.head?.anchor?.tx || input.head?.anchor_tx || null,
+        chain_id: input.head?.anchors?.base?.chain_id ?? input.head?.anchor?.chain_id ?? null,
+        reason: undefined,
+    };
+    if (!inclusionValid) {
+        solana.reason = 'inclusion_failed';
+        base.reason = 'inclusion_failed';
+    }
+    else {
+        if (!signature) {
+            solana.reason = 'pending';
+            errors.push('solana_pending');
+        }
+        else {
+            solana.checked = true;
+            try {
+                const fetchTx = input.fetchSolanaTx || ((sig, url) => (0, solana_payer_js_1.fetchSolanaTransaction)(sig, url));
+                const fetchGenesis = input.fetchGenesis || fetchSolanaGenesisHash;
+                const tx = await fetchTx(signature, solanaRpc);
+                if (!tx) {
+                    solana.reason = 'tx_not_found';
+                }
+                else if (tx.meta?.err) {
+                    solana.reason = 'tx_failed';
+                }
+                else {
+                    const memos = extractMemos(tx);
+                    const recorded = input.head.anchors?.solana?.memo || null;
+                    const matched = memos.filter((memo) => {
+                        const parsed = parseAnchorMemo(memo);
+                        return Boolean(parsed && parsed.root === root && memo.includes(root) && (!recorded || memo === recorded));
+                    });
+                    const cluster = input.head.anchors?.solana?.cluster || null;
+                    const expectedGenesis = cluster ? exports.SOLANA_GENESIS[cluster] : null;
+                    if (matched.length === 0)
+                        solana.reason = 'memo_mismatch';
+                    else if (!cluster)
+                        solana.reason = 'no_cluster';
+                    else if (!expectedGenesis)
+                        solana.reason = 'unknown_cluster';
+                    else {
+                        const genesis = await fetchGenesis(solanaRpc);
+                        if (genesis !== expectedGenesis)
+                            solana.reason = 'cluster_mismatch';
+                    }
+                    const headSlot = input.head.anchors?.solana?.slot;
+                    if (!solana.reason && headSlot != null && tx.slot != null && Number(tx.slot) !== Number(headSlot)) {
+                        solana.reason = 'slot_mismatch';
+                    }
+                    if (!solana.reason) {
+                        solana.valid = true;
+                        solana.memo = matched[0];
+                        if (tx.slot != null)
+                            solana.slot = tx.slot;
+                    }
+                }
+            }
+            catch (err) {
+                solana.reason = err instanceof Error ? err.message : 'solana_rpc_error';
+            }
+            if (!solana.valid && solana.reason)
+                errors.push(`solana:${solana.reason}`);
+        }
+        if (!txHash) {
+            base.reason = 'pending';
+            errors.push('base_pending');
+        }
+        else {
+            base.checked = true;
+            try {
+                const fetchBase = input.fetchBaseTx || fetchBaseAnchorTransaction;
+                const tx = await fetchBase(txHash, baseRpc);
+                const expectedChain = input.head.anchors?.base?.chain_id || input.head.anchor?.chain_id || exports.BASE_MAINNET_CHAIN_ID;
+                if (!tx) {
+                    base.reason = 'tx_not_found';
+                }
+                else if (tx.chainId != null && Number(tx.chainId) !== Number(expectedChain)) {
+                    base.reason = 'chain_mismatch';
+                    base.chain_id = Number(tx.chainId);
+                }
+                else {
+                    const inputData = String(tx.input || '').toLowerCase().replace(/^0x/, '');
+                    if (inputData !== root)
+                        base.reason = 'calldata_mismatch';
+                    else {
+                        base.valid = true;
+                        base.tx = tx.hash || txHash;
+                        base.chain_id = tx.chainId ?? expectedChain;
+                    }
+                }
+            }
+            catch (err) {
+                base.reason = err instanceof Error ? err.message : 'base_rpc_error';
+            }
+            if (!base.valid && base.reason)
+                errors.push(`base:${base.reason}`);
+        }
+    }
+    let overall;
+    if (!inclusionValid || (solana.checked && !solana.valid) || (base.checked && !base.valid))
+        overall = 'failed';
+    else if (solana.valid && base.valid)
+        overall = 'verified';
+    else
+        overall = 'partial';
+    return {
+        overall,
+        root,
+        inclusion: { valid: inclusionValid, leaf: leafHex, leaf_source: leafSource, reason: inclusionReason },
+        solana,
+        base,
+        proves: exports.ANCHOR_PROVES,
+        does_not_prove: doesNotProve,
+        errors,
+    };
+}
+//# sourceMappingURL=anchor-witness.js.map

package/dist/anchor-witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-witness.js","sourceRoot":"","sources":["../src/anchor-witness.ts"],"names":[],"mappings":";;;AA8HA,4BAEC;AAMD,sCAGC;AAGD,sDAgBC;AAED,0CAYC;AAUD,oCAqBC;AAcD,wDAIC;AAED,gEASC;AAmCD,gDAwKC;AAjbD;;;;;;;GAOG;AACH,6CAAyC;AACzC,mDAA+C;AAC/C,uDAA2E;AAE9D,QAAA,eAAe,GAAG,6CAA6C,CAAC;AAChE,QAAA,kBAAkB,GAAG,6CAA6C,CAAC;AAEhF,gEAAgE;AACnD,QAAA,cAAc,GAA2B;IACpD,cAAc,EAAE,kCAAkC;IAClD,MAAM,EAAE,8CAA8C;IACtD,OAAO,EAAE,8CAA8C;CACxD,CAAC;AAEW,QAAA,qBAAqB,GAAG,IAAI,CAAC;AAE7B,QAAA,aAAa,GAAG;IAC3B,oGAAoG;IACpG,4GAA4G;IAC5G,oEAAoE;CACrE,CAAC;AAEW,QAAA,qBAAqB,GAAG;IACnC,2EAA2E;IAC3E,+EAA+E;IAC/E,6GAA6G;IAC7G,2GAA2G;CAC5G,CAAC;AAuFF,SAAS,MAAM,CAAC,GAAe;IAC7B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAiB;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB,EAAE,KAAiB;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,aAAa,CAAC,IAA+B;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,+DAA+D;AAC/D,SAAgB,qBAAqB,CACnC,IAAY,EACZ,KAAa,EACb,QAAgB,EAChB,OAAe,EACf,KAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,IAAI,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClF,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChG,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,EAAY;IAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;IACrC,OAAO,OAAO,KAAK,UAAU;WACxB,SAAS,KAAK,uBAAe;WAC7B,SAAS,KAAK,0BAAkB,CAAC;AACxC,CAAC;AAED,SAAgB,YAAY,CAAC,EAAqC;IAChE,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;QAC7B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,EAAwB,EAAE,EAAE;QACzC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO;QACjC,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;aAC9C,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aAC1E,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACxE,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;QACrD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE;YAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,MAAc,EAAE,MAAiB;IACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAwD,CAAC;IACpF,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,MAAc;IACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,MAAc,EAAE,MAAc;IAC7E,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,MAAM,CAAC,CAA6C,CAAC;IACtH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,CAAkB,CAAC;IAC9E,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB,EAAE,SAA0B;IACrE,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClG,IAAI,OAAO,OAAO,CAAC,UAAU,EAAE,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzH,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACxG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;IAChC,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;AAC/D,CAAC;AAaD;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAG,CAAC,GAAG,6BAAqB,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,UAAU,GAAG,MAAM,CAAC;IACxB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,eAAmC,CAAC;IAExC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,eAAe,GAAG,iBAAiB,CAAC;IACtC,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;QAClF,eAAe,GAAG,eAAe,CAAC;IACpC,CAAC;SAAM,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,eAAe,GAAG,UAAU,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,eAAe,GAAG,eAAe,CAAC;IACpC,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9G,eAAe,GAAG,oBAAoB,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;YACxB,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxF,eAAe,GAAG,eAAe,CAAC;gBAClC,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAClF,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,UAAU,GAAG,WAAW,CAAC;YACzB,YAAY,CAAC,IAAI,CAAC,6IAA6I,CAAC,CAAC;QACnK,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,cAAc,GAAG,qBAAqB,CACpC,IAAI,EACJ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EACjC,IAAI,EACJ,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAC5B,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,eAAe,GAAG,kBAAkB,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,cAAc,IAAI,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAErE,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,gCAAc,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,IAAI,4BAAY,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,IAAI,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtE,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;QAC/C,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;QAC/C,MAAM,EAAE,SAA+B;KACxC,CAAC;IACF,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK;QACZ,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI;QAC5F,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;QACrF,MAAM,EAAE,SAA+B;KACxC,CAAC;IAEF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAA,wCAAsB,EAAC,GAAG,EAAE,GAAG,CAAmC,CAAC,CAAC;gBAC1H,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,sBAAsB,CAAC;gBAClE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC;gBACjC,CAAC;qBAAM,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;oBACxB,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;oBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;oBAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;wBACpC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;wBACrC,OAAO,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;oBAC5G,CAAC,CAAC,CAAC;oBACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;oBAC5D,MAAM,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;yBACrD,IAAI,CAAC,OAAO;wBAAE,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;yBAC3C,IAAI,CAAC,eAAe;wBAAE,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAC;yBACxD,CAAC;wBACJ,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;wBAC9C,IAAI,OAAO,KAAK,eAAe;4BAAE,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC;oBACtE,CAAC;oBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC;oBAClD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClG,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;oBAClC,CAAC;oBACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;wBACnB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;wBACpB,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;wBACzB,IAAI,EAAE,CAAC,IAAI,IAAI,IAAI;4BAAE,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,IAAI,0BAA0B,CAAC;gBAClE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,6BAAqB,CAAC;gBACjH,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;gBAC/B,CAAC;qBAAM,IAAI,EAAE,CAAC,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC9E,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC;oBAC/B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC1E,IAAI,SAAS,KAAK,IAAI;wBAAE,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC;yBACrD,CAAC;wBACJ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;wBAClB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC;wBAC5B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,OAAO,IAAI,aAAa,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,OAAuC,CAAC;IAC5C,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,QAAQ,CAAC;SACzG,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,UAAU,CAAC;;QACrD,OAAO,GAAG,SAAS,CAAC;IAEzB,OAAO;QACL,OAAO;QACP,IAAI;QACJ,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE;QACrG,MAAM;QACN,IAAI;QACJ,MAAM,EAAE,qBAAa;QACrB,cAAc,EAAE,YAAY;QAC5B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/canonical-preimage.d.ts

@@ -0,0 +1,9 @@
+/** Payment receipts at this version sign payload_hash and issuer_history. */
+export declare const CANONICAL_PAYLOAD_VERSION = 10;
+export declare function sha256Utf8(text: string): string;
+export declare function verifyCanonicalPreimageBytes(bytes: string, payloadHash: unknown): {
+    ok: boolean;
+    hash: string;
+    reason: string | null;
+};
+//# sourceMappingURL=canonical-preimage.d.ts.map

package/dist/canonical-preimage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-preimage.d.ts","sourceRoot":"","sources":["../src/canonical-preimage.ts"],"names":[],"mappings":"AAMA,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,GACnB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAOtD"}

package/dist/canonical-preimage.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CANONICAL_PAYLOAD_VERSION = void 0;
+exports.sha256Utf8 = sha256Utf8;
+exports.verifyCanonicalPreimageBytes = verifyCanonicalPreimageBytes;
+/**
+ * SHA-256 of the stored JCS canonical object.
+ * The bytes are not rebuilt here. The caller passes the stored string.
+ */
+const node_crypto_1 = require("node:crypto");
+/** Payment receipts at this version sign payload_hash and issuer_history. */
+exports.CANONICAL_PAYLOAD_VERSION = 10;
+function sha256Utf8(text) {
+    return (0, node_crypto_1.createHash)('sha256').update(text, 'utf8').digest('hex');
+}
+function verifyCanonicalPreimageBytes(bytes, payloadHash) {
+    const hash = sha256Utf8(bytes);
+    if (typeof payloadHash !== 'string' || !/^[0-9a-f]{64}$/.test(payloadHash)) {
+        return { ok: false, hash, reason: 'payload_hash_missing' };
+    }
+    if (hash !== payloadHash)
+        return { ok: false, hash, reason: 'payload_hash_mismatch' };
+    return { ok: true, hash, reason: null };
+}
+//# sourceMappingURL=canonical-preimage.js.map

package/dist/canonical-preimage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-preimage.js","sourceRoot":"","sources":["../src/canonical-preimage.ts"],"names":[],"mappings":";;;AASA,gCAEC;AAED,oEAUC;AAvBD;;;GAGG;AACH,6CAAyC;AAEzC,6EAA6E;AAChE,QAAA,yBAAyB,GAAG,EAAE,CAAC;AAE5C,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,4BAA4B,CAC1C,KAAa,EACb,WAAoB;IAEpB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC"}

package/dist/cli.d.ts

@@ -6,6 +6,7 @@
  *   xfuel-verify receipt.json
  *   xfuel-verify receipt.json --check-nullifier
  *   xfuel-verify receipt.json --rpc https://mainnet.base.org
+ *   xfuel-verify receipt.json inclusion.json head.json --rpc
  *   cat receipt.json | xfuel-verify -
  *
  * Exit codes:

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG"}