@xfuel/verify 0.3.4 → 0.4.0

package/dist/cli.js

@@ -1,1479 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-/**
- * xfuel-verify CLI — Offline receipt verification.
- *
- * Usage:
- *   xfuel-verify receipt.json
- *   xfuel-verify receipt.json --check-nullifier
- *   xfuel-verify receipt.json --rpc https://mainnet.base.org
- *   xfuel-verify receipt.json inclusion.json head.json --rpc
- *   cat receipt.json | xfuel-verify -
- *
- * Exit codes:
- *   0 = verified
- *   1 = verification failed
- *   2 = partial (binding ok, nullifier not checked or pending)
- *   3 = input error
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-const node_module_1 = require("node:module");
-const node_fs_1 = require("node:fs");
-const index_js_1 = require("./index.js");
-const anchor_witness_js_1 = require("./anchor-witness.js");
-const jws_js_1 = require("./jws.js");
-const shell_js_1 = require("./shell.js");
-const preimage_js_1 = require("./preimage.js");
-const issuer_history_js_1 = require("./issuer-history.js");
-const canonical_preimage_js_1 = require("./canonical-preimage.js");
-const v11_receipt_js_1 = require("./v11-receipt.js");
-const issuer_pin_js_1 = require("./issuer-pin.js");
-const anchor_trust_js_1 = require("./anchor-trust.js");
-const HELP = `
-xfuel-verify — Offline verification for Chit402 receipts
-
-Usage:
-  xfuel-verify <receipt.json>           Verify binding locally
-  xfuel-verify <refusal.json>           Verify a chit402.refusal.v1 document
-                                        (issuer refused; not a payment)
-  xfuel-verify <receipt.json> --jwks-file <jwks.json>
-                                        Verify issuer signature with a JWKS file
-  xfuel-verify <receipt.json> --fetch-jwks
-                                        Fetch JWKS from an allowlisted issuer jwks_uri
-  xfuel-verify <receipt.json> --check-payer
-                                        Confirm payer, payee, asset, and amount on-chain
-  xfuel-verify - < receipt.json         Read from stdin
-  xfuel-verify --help                   Show this help
-
-Options:
-  --jwks-file <path>  JWKS file. Keys are trusted and matched by kid (no network)
-  --jwks-url <url>    Fetch this https JWKS and trust it (explicit; any host)
-  --fetch-jwks        Fetch receipt verification.jwks_uri when the host is allowlisted
-                      (default allowlist: api.chit402.com)
-  --trusted-kid <kid> Replace the default offline pin with this RFC 7638 kid
-                      (repeatable). Default pin: ${index_js_1.DEFAULT_TRUSTED_ISSUER_KIDS[0]}
-  --no-trusted-kid    Do not use the default offline pin (JWKS only)
-  --check-nullifier   Query Base RPC for nullifier anchor (requires network)
-  --check-payer       Query Base or Solana RPC. Base confirms payer, payee, asset, amount
-  --solana-rpc <url>  Solana RPC URL (default: https://api.mainnet-beta.solana.com or SOLANA_RPC_URL)
-  --rpc <url>         Base RPC URL (default: https://mainnet.base.org)
-  --version           Print @xfuel/verify version and exit
-  --rpc               With a receipt, an inclusion proof, and a tree head: check the
-                      leaf, then the Solana memo and the Base calldata for that root.
-                      The tree head must carry a valid ES256 issuer signature, and
-                      the anchor wallets must match the signed head.
-                      A v2 head also needs the signed epoch record.
-                      A tree-head file with --rpc enters this mode.
-                      The same files without --rpc check the head signature and the
-                      index/size-bound inclusion offline. They do not call chain RPC.
-  --epoch-record <f>  Signed epoch record JSON. Skips the network fetch.
-  --epoch-url <url>   GET this epoch record. Default: the receipt verify_url
-                      origin plus /v1/receipts/tree/epoch
-  --inclusion <file>  Inclusion proof JSON (chit402.inclusion.v1)
-  --head <file>       Signed tree head JSON (chit402.tree_head.v1 or v2)
-  --anchor-wallets-file <path>
-                      Signed chit402.anchor_wallets.v1 document. Wallets in a
-                      verified document are added to the package pin. A head
-                      that names any other wallet fails.
-  --carry-old-head <file>
-  --carry-old-inclusion <file>
-  --carry-head <file>
-  --carry-inclusion <file>
-                      Earlier signed head, its inclusion proof, the current
-                      signed head, and the current inclusion proof. Repeat
-                      --carry-inclusion for each current index of the leaf.
-                      The issued time and epoch are the earlier head's signed
-                      claims. The logged time, epoch, and leaf index are the
-                      current head's signed claims. A receipt in the current
-                      epoch does not use these flags.
-  --json              Output JSON instead of human-readable
-  --quiet             Only output errors
-  --strict-issuer-history
-                      Fail if the issuer key history cannot be fetched
-  --issuer-history-file <path>
-                      Read issuer history JSON instead of fetching it
-  --canonical-preimage <path>
-                      SHA-256 this file and match the signed payload_hash
-  --no-issuer-history Do not check the kid's not_before / not_after window
-  --no-preimage       Do not require published hash preimages
-
-Exit codes:
-  0 = verified
-  1 = verification failed
-  2 = partial verification
-  3 = input error
-
-Trust:
-  A signature counts only when the verifying key is trusted. Trust is a JWKS
-  entry matched by kid (file, --jwks-url, or --fetch-jwks), or an embedded
-  issuer_jwk whose RFC 7638 thumbprint equals a pinned trusted kid. The
-  embedded key alone is not a trust root. Untrusted keys report "key untrusted".
-
-  Amount, payer, payee, and tx are read from verified signed claims. Every
-  signed field is compared with the outer receipt at the same path. A mismatch
-  fails. Outer fields the signature does not cover are printed as UNVERIFIED.
-  The outer document schema is not a copy of the JWS schema. Log mode (a
-  receipt, an inclusion proof, and a tree head) runs these receipt checks too.
-
-Network behavior:
-  JWKS, nullifiers, and anchors are not fetched unless you pass a flag.
-  Issuer history is fetched by default when the receipt names a history URL
-  and neither --issuer-history-file nor --no-issuer-history is set. A payload
-  v10 receipt fails (exit 1) when that fetch cannot run. Offline mode is
-  --issuer-history-file <snapshot>, or --no-issuer-history to skip the window.
-  Other network uses:
-  - --fetch-jwks or --jwks-url
-  - --check-nullifier (Base RPC)
-  - --check-payer (Base or Solana RPC)
-  - --rpc with a receipt, an inclusion proof, and a tree head
-  - a v2 head, which fetches GET /v1/receipts/tree/epoch unless --epoch-record
-
-  Solana payer verify uses SOLANA_RPC_URL when set, else the public mainnet RPC.
-
-Anchored root:
-  xfuel-verify receipt.json inclusion.json head.json --rpc
-  xfuel-verify receipt.json --inclusion inclusion.json --head head.json --rpc https://mainnet.base.org
-
-  Also runs the single-receipt checks (issuer signature and signed-versus-outer
-  comparison). Those must pass before Overall can be VERIFIED. Then it checks
-  the tree head's ES256 issuer signature (production pin, issuer
-  history, or JWKS, same rules as a receipt). The signed root, size, epoch,
-  and anchors must match the head. Then it checks Merkle inclusion, requires
-  the Solana memo and fee payer, and requires the Base calldata and sender.
-  The sender and fee payer must be on the issuer anchor-wallet list (the
-  package pin, plus a verified /.well-known/anchor-wallets.json or
-  issuer-history anchor_wallets list). The on-chain issuer-root registry and
-  the DNS anchor are not read. Prints what this proves and what it does not
-  prove. Exit 0 when the receipt checks pass and both chains match, 2 when the
-  leaf is included but an anchor is still pending, or when the leaf is past
-  the anchored tree (PENDING, not a tamper failure), and the receipt checks
-  did not fail, 1 when a check fails. A pending leaf must sit at an index
-  at or past the anchored size, and PENDING applies only when the receipt
-  itself verifies. A failed signature, field, or preimage is a failure.
-  With --rpc, a claimed anchor must name a Solana fee payer that is on the
-  anchor-wallet list, and the head root must equal the newest memo that
-  payer actually paid. A memo from any other payer is ignored.
-
-  A receipt or head with issuer_key_pin is a pinned era. Pass the pin file
-  and its commit SHA plus SHA-256. The verifier does not fetch a branch.
-  --issuer-pin <file> --issuer-pin-commit <40-hex> --issuer-pin-sha256 <64-hex>
-  Optional with that pin: --issuer-pin-sig, --issuer-witnesses,
-  --issuer-prior-pin, --issuer-prior-commit, --issuer-prior-sha256, --issuer-control.
-  Those flags do not start the check on their own. A prior pin does not
-  replace the published specimen key. Sepolia only (eip155:84532).
-  See docs/product/issuer-key-pin.md.
-
-Receipt lane (unsigned, beside book_seq):
-  settled_by is observed_transfer when the USDC transfer was checked on Base
-  or Solana, and receipt when only the issuer asserts settlement. Unknown is
-  null. Ordering is seq + settled_by + (anchor_changed AND not settled).
-  Boundary: complete over registry marks, blind to payments the registry
-  never joined. freeze is true only when book_seq is set, settled_by is
-  receipt, the anchor changed after binding, and the row is not settled. An
-  anchor change alone does not freeze, and freeze does not change the
-  signature exit code. classification unverifiable_from_registry means the
-  binding is past expiry and settled_by, receipt_id, observed_tx_hash, and
-  observed_transfer_id are all null. That is not unpaid. local_check, when
-  set, is a Base USDC payee and amount a stranger can check. It does not
-  claim the row was paid. Design by Turbo on 1F916 (post 6579, comments
-  88201, 88403, and 88596).
-
-Examples:
-  # Skip the issuer-history fetch. A v10 receipt otherwise needs that network call.
-  xfuel-verify my-receipt.json --no-issuer-history
-
-  # Verify issuer signature with JWKS file
-  xfuel-verify my-receipt.json --jwks-file issuer-jwks.json
-
-  # Full verification including on-chain nullifier
-  xfuel-verify my-receipt.json --jwks-file issuer-jwks.json --check-nullifier
-
-  # Pipe from curl
-  curl -s https://api.chit402.com/receipt/task-123?format=json | xfuel-verify -
-
-  # Public shell. INCLUDED_SHELL is not VERIFIED.
-  xfuel-verify shell.json
-
-  # Owner view. VERIFIED needs a trusted issuer key, an inclusion proof,
-  # and a signed payment. The key inside the holder is not enough.
-  xfuel-verify shell.json --jws owner-view.json --inclusion inclusion.json --head head.json
-`;
-function parseArgs(args) {
-    const result = {
-        file: null,
-        jwksFile: null,
-        jwksUrl: null,
-        fetchJwks: false,
-        trustedKids: null,
-        noTrustedKid: false,
-        checkNullifier: false,
-        checkPayer: false,
-        rpcUrl: null,
-        solanaRpcUrl: null,
-        sawRpc: false,
-        anchorFlag: false,
-        inclusionFile: null,
-        headFile: null,
-        epochRecordFile: null,
-        epochUrl: null,
-        carryOldHeadFile: null,
-        carryOldInclusionFile: null,
-        carryHeadFile: null,
-        carryInclusionFiles: [],
-        positionals: [],
-        json: false,
-        quiet: false,
-        help: false,
-        strictIssuerHistory: false,
-        issuerHistoryFile: null,
-        canonicalPreimageFile: null,
-        noIssuerHistory: false,
-        noPreimage: false,
-        issuerPinFile: null,
-        issuerPinCommit: null,
-        issuerPinSha256: null,
-        issuerPinSigFile: null,
-        issuerWitnessesFile: null,
-        issuerPriorPinFile: null,
-        issuerPriorCommit: null,
-        issuerPriorSha256: null,
-        issuerControlFile: null,
-        version: false,
-        anchorWalletsFile: null,
-        acceptShell: false,
-        jwsFile: null,
-        salt: null,
-        open: [],
-        url: null,
-    };
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === '--version' || arg === '-V') {
-            result.version = true;
-        }
-        else if (arg === '--help' || arg === '-h') {
-            result.help = true;
-        }
-        else if (arg === '--check-nullifier') {
-            result.checkNullifier = true;
-        }
-        else if (arg === '--check-payer') {
-            result.checkPayer = true;
-        }
-        else if (arg === '--jwks-file' && args[i + 1]) {
-            result.jwksFile = args[++i];
-        }
-        else if (arg === '--jwks-url' && args[i + 1]) {
-            result.jwksUrl = args[++i];
-        }
-        else if (arg === '--fetch-jwks') {
-            result.fetchJwks = true;
-        }
-        else if (arg === '--trusted-kid' && args[i + 1]) {
-            result.trustedKids = result.trustedKids || [];
-            result.trustedKids.push(args[++i]);
-        }
-        else if (arg === '--no-trusted-kid') {
-            result.noTrustedKid = true;
-        }
-        else if (arg === '--rpc') {
-            result.sawRpc = true;
-            const next = args[i + 1];
-            if (next && /^https?:\/\//i.test(next))
-                result.rpcUrl = args[++i];
-            else
-                result.anchorFlag = true;
-        }
-        else if (arg === '--inclusion' && args[i + 1]) {
-            result.inclusionFile = args[++i];
-        }
-        else if (arg === '--head' && args[i + 1]) {
-            result.headFile = args[++i];
-        }
-        else if (arg === '--epoch-record' && args[i + 1]) {
-            result.epochRecordFile = args[++i];
-        }
-        else if (arg === '--epoch-url' && args[i + 1]) {
-            result.epochUrl = args[++i];
-        }
-        else if (arg === '--carry-old-head' && args[i + 1]) {
-            result.carryOldHeadFile = args[++i];
-        }
-        else if (arg === '--carry-old-inclusion' && args[i + 1]) {
-            result.carryOldInclusionFile = args[++i];
-        }
-        else if (arg === '--carry-head' && args[i + 1]) {
-            result.carryHeadFile = args[++i];
-        }
-        else if (arg === '--carry-inclusion' && args[i + 1]) {
-            result.carryInclusionFiles.push(args[++i]);
-        }
-        else if (arg === '--solana-rpc' && args[i + 1]) {
-            result.solanaRpcUrl = args[++i];
-        }
-        else if (arg === '--strict-issuer-history') {
-            result.strictIssuerHistory = true;
-        }
-        else if (arg === '--issuer-history-file' && args[i + 1]) {
-            result.issuerHistoryFile = args[++i];
-        }
-        else if (arg === '--salt' && args[i + 1]) {
-            result.salt = args[++i];
-        }
-        else if (arg === '--open' && args[i + 1]) {
-            result.open.push(args[++i]);
-        }
-        else if (arg === '--canonical-preimage' && args[i + 1]) {
-            result.canonicalPreimageFile = args[++i];
-        }
-        else if (arg === '--no-issuer-history') {
-            result.noIssuerHistory = true;
-        }
-        else if (arg === '--anchor-wallets-file' && args[i + 1]) {
-            result.anchorWalletsFile = args[++i];
-        }
-        else if (arg === '--no-preimage') {
-            result.noPreimage = true;
-        }
-        else if (arg === '--accept-shell') {
-            result.acceptShell = true;
-        }
-        else if (arg === '--jws' && args[i + 1]) {
-            result.jwsFile = args[++i];
-        }
-        else if (arg === '--url' && args[i + 1]) {
-            result.url = args[++i];
-        }
-        else if (arg === '--issuer-pin' && args[i + 1]) {
-            result.issuerPinFile = args[++i];
-        }
-        else if (arg === '--issuer-pin-commit' && args[i + 1]) {
-            result.issuerPinCommit = args[++i];
-        }
-        else if (arg === '--issuer-pin-sha256' && args[i + 1]) {
-            result.issuerPinSha256 = args[++i];
-        }
-        else if (arg === '--issuer-pin-sig' && args[i + 1]) {
-            result.issuerPinSigFile = args[++i];
-        }
-        else if (arg === '--issuer-witnesses' && args[i + 1]) {
-            result.issuerWitnessesFile = args[++i];
-        }
-        else if (arg === '--issuer-prior-pin' && args[i + 1]) {
-            result.issuerPriorPinFile = args[++i];
-        }
-        else if (arg === '--issuer-prior-commit' && args[i + 1]) {
-            result.issuerPriorCommit = args[++i];
-        }
-        else if (arg === '--issuer-prior-sha256' && args[i + 1]) {
-            result.issuerPriorSha256 = args[++i];
-        }
-        else if (arg === '--issuer-control' && args[i + 1]) {
-            result.issuerControlFile = args[++i];
-        }
-        else if (arg === '--json') {
-            result.json = true;
-        }
-        else if (arg === '--quiet' || arg === '-q') {
-            result.quiet = true;
-        }
-        else if (!arg.startsWith('-')) {
-            result.positionals.push(arg);
-            if (!result.file)
-                result.file = arg;
-        }
-    }
-    return result;
-}
-function readReceipt(file) {
-    let content;
-    if (file === '-') {
-        content = (0, node_fs_1.readFileSync)(0, 'utf8');
-    }
-    else {
-        content = (0, node_fs_1.readFileSync)(file, 'utf8');
-    }
-    return JSON.parse(content);
-}
-function formatAmount(units) {
-    if (!units)
-        return '—';
-    const n = Number(units);
-    if (!Number.isFinite(n))
-        return units;
-    const usd = n / 1e6;
-    return `$${usd.toFixed(usd >= 0.01 ? 2 : 6)} (${units} units)`;
-}
-function readJson(file) {
-    const content = file === '-' ? (0, node_fs_1.readFileSync)(0, 'utf8') : (0, node_fs_1.readFileSync)(file, 'utf8');
-    return JSON.parse(content);
-}
-function headStatus(file) {
-    try {
-        const doc = readJson(file);
-        return typeof doc?.status === 'string' ? doc.status : null;
-    }
-    catch {
-        return null;
-    }
-}
-function printLane(lane) {
-    const bit = (value) => (value == null ? 'unknown' : (value ? 'true' : 'false'));
-    console.log(`  Receipt lane (unsigned)`);
-    console.log(`  ─────────────────────────────────────────────────`);
-    console.log(`  book_seq:      ${lane.book_seq ?? '—'}`);
-    console.log(`  settled_by:    ${lane.settled_by ?? 'null'}`);
-    console.log(`  settled:       ${bit(lane.settled)}`);
-    console.log(`  anchor_changed_since_binding: ${bit(lane.anchor_changed_since_binding)}`);
-    console.log(`  freeze:        ${lane.freeze ? 'YES' : 'no'}`);
-    if (lane.reason)
-        console.log(`  reason:        ${lane.reason}`);
-    console.log(`  classification:${lane.classification}`);
-    console.log(`  ordering:      ${lane.ordering}`);
-    console.log(`  boundary:      ${lane.boundary}`);
-    if (lane.local_check) {
-        console.log(`  local_check:   payee ${lane.local_check.payee} amount ${lane.local_check.amount_atomic} (not a payment)`);
-    }
-    console.log(`  ${lane.rule}`);
-    console.log('');
-}
-function printAnchor(result, json, quiet) {
-    if (json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-    }
-    if (quiet && result.overall !== 'failed')
-        return;
-    const mark = (ok) => (ok ? '✓ YES' : '✗ NO');
-    console.log('');
-    console.log('  Anchored receipt root');
-    console.log('  ─────────────────────────────────────────────────');
-    console.log(`  Root:          ${result.root || '—'}`);
-    console.log(`  Head signature:${result.head_signature.valid ? ' ✓ YES' : ' ✗ NO'}${result.head_signature.trust ? ` (${result.head_signature.trust})` : ''}`);
-    if (result.head_signature.kid)
-        console.log(`  Head kid:      ${result.head_signature.kid}`);
-    if (result.head_signature.message)
-        console.log(`  Head reason:   ${result.head_signature.message}`);
-    const unlogged = result.inclusion.unlogged_reason ? ` unlogged:${result.inclusion.unlogged_reason}` : '';
-    if (result.overall === 'pending') {
-        console.log(`  Inclusion:     PENDING${result.inclusion.reason ? ` (${result.inclusion.reason})` : ''}`);
-    }
-    else {
-        console.log(`  Inclusion:     ${mark(result.inclusion.valid)}${result.inclusion.reason ? ` (${result.inclusion.reason})` : ''}${unlogged}`);
-    }
-    console.log(`  Leaf source:   ${result.inclusion.leaf_source}`);
-    console.log(`  Solana:        ${result.solana.checked ? mark(result.solana.valid) : (result.solana.reason || 'not checked')}`);
-    if (result.solana.signature)
-        console.log(`  Signature:     ${result.solana.signature}`);
-    if (result.solana.slot != null)
-        console.log(`  Slot:          ${result.solana.slot}`);
-    if (result.solana.cluster)
-        console.log(`  Cluster:       ${result.solana.cluster}`);
-    if (result.solana.fee_payer)
-        console.log(`  Fee payer:     ${result.solana.fee_payer}`);
-    if (result.solana.memo)
-        console.log(`  Memo:          ${result.solana.memo}`);
-    if (result.solana.reason && !result.solana.valid)
-        console.log(`  Solana reason: ${result.solana.reason}`);
-    if (result.issuer_pin?.checked) {
-        console.log(`  Issuer pin:    ${result.issuer_pin.ok ? '✓ YES' : '✗ NO'}${result.issuer_pin.code ? ` (${result.issuer_pin.code})` : ''}`);
-    }
-    console.log(`  Base:          ${result.base.checked ? mark(result.base.valid) : (result.base.reason || 'not checked')}`);
-    if (result.base.from)
-        console.log(`  Base from:     ${result.base.from}`);
-    if (result.base.tx)
-        console.log(`  Base tx:       ${result.base.tx}`);
-    if (result.base.chain_id != null)
-        console.log(`  Chain id:      ${result.base.chain_id}`);
-    if (result.base.reason && !result.base.valid)
-        console.log(`  Base reason:   ${result.base.reason}`);
-    console.log('');
-    console.log('  What this proves');
-    console.log('  ─────────────────────────────────────────────────');
-    for (const line of result.proves)
-        console.log(`  ${line}`);
-    console.log('');
-    console.log('  What this does not prove');
-    console.log('  ─────────────────────────────────────────────────');
-    for (const line of result.does_not_prove)
-        console.log(`  ${line}`);
-    console.log('');
-    if (result.overall === 'pending') {
-        console.log(`  Anchored size: ${result.inclusion.anchored_tree_size ?? '—'}`);
-        console.log(`  Live size:     ${result.inclusion.live_tree_size ?? '—'}`);
-    }
-    console.log(`  Overall: ${result.overall.toUpperCase()}`);
-    if (result.errors.length > 0)
-        console.log(`  Errors:  ${result.errors.join(', ')}`);
-    if (result.errors.includes(anchor_trust_js_1.LEGACY_HEAD_UNPINNED_SIGNER)) {
-        console.log(`  ${anchor_trust_js_1.HEAD_TRUST_MESSAGES[anchor_trust_js_1.LEGACY_HEAD_UNPINNED_SIGNER]}`);
-    }
-    console.log('');
-}
-function headNeedsEpochRecord(head) {
-    const schema = head.schema;
-    const version = head.payload_version;
-    return head.epoch != null || schema === 'chit402.tree_head.v2' || version === 2;
-}
-function epochUrlFromReceipt(receipt) {
-    const raw = receipt?.verify_url;
-    if (!raw)
-        return null;
-    try {
-        return `${new URL(raw).origin}/v1/receipts/tree/epoch`;
-    }
-    catch {
-        return null;
-    }
-}
-async function loadEpochRecord(args, receipt) {
-    if (args.epochRecordFile) {
-        return JSON.parse((0, node_fs_1.readFileSync)(args.epochRecordFile, 'utf8'));
-    }
-    const url = args.epochUrl || epochUrlFromReceipt(receipt);
-    if (!url)
-        return null;
-    const res = await fetch(url);
-    if (!res.ok)
-        return null;
-    const body = await res.json();
-    if (!body?.issuer_signature?.jws)
-        return null;
-    return body;
-}
-function epochSignatureOk(record, jws, jwks, trustedKids) {
-    const sig = record.issuer_signature;
-    const embedded = sig && 'issuer_jwk' in sig
-        ? sig.issuer_jwk
-        : undefined;
-    const kid = (0, jws_js_1.readJwsHeader)(jws)?.kid;
-    const keys = [];
-    for (const key of jwks?.keys || []) {
-        if (!key || key.kty !== 'EC')
-            continue;
-        const jwk = key;
-        if (kid && jwk.kid !== kid)
-            continue;
-        keys.push(jwk);
-    }
-    if (embedded && trustedKids?.includes((0, jws_js_1.jwkThumbprint)(embedded)))
-        keys.push(embedded);
-    for (const key of keys) {
-        const verified = (0, jws_js_1.verifyIssuerJws)(jws, key);
-        if (!verified.valid || !verified.payload)
-            continue;
-        const payload = verified.payload;
-        if (JSON.stringify(payload.epochs ?? null) !== JSON.stringify(record.epochs ?? null))
-            return false;
-        if (JSON.stringify(payload.orphans ?? []) !== JSON.stringify(record.orphans ?? []))
-            return false;
-        const payloadUnlogged = payload.unlogged === undefined ? null : payload.unlogged;
-        const recordUnlogged = record.unlogged === undefined ? null : record.unlogged;
-        if (JSON.stringify(payloadUnlogged) !== JSON.stringify(recordUnlogged))
-            return false;
-        return true;
-    }
-    return false;
-}
-function packageVersion() {
-    const require = (0, node_module_1.createRequire)(__filename);
-    const pkg = require('../package.json');
-    return pkg.version || '0.0.0';
-}
-function looksLikeTreeHead(value) {
-    if (!value || typeof value !== 'object')
-        return false;
-    const doc = value;
-    if (doc.status === 'not_yet_published')
-        return true;
-    if (typeof doc.schema === 'string' && doc.schema.startsWith('chit402.tree_head.'))
-        return true;
-    return Boolean(doc.anchors && doc.root && !doc.task_id);
-}
-function readOfflineWitness(args) {
-    let head = null;
-    let inclusion = null;
-    for (const file of args.positionals.slice(1)) {
-        let doc;
-        try {
-            doc = readJson(file);
-        }
-        catch (err) {
-            throw new Error(`Error reading ${file}: ${err instanceof Error ? err.message : String(err)}`);
-        }
-        const row = doc;
-        if (looksLikeTreeHead(doc))
-            head = doc;
-        else if (doc && typeof doc === 'object' && (Array.isArray(row.proof) || row.leaf_index != null)) {
-            inclusion = doc;
-        }
-    }
-    return { head, inclusion };
-}
-function fileLooksLikeHead(file) {
-    if (!file)
-        return false;
-    try {
-        return looksLikeTreeHead(readJson(file));
-    }
-    catch {
-        return false;
-    }
-}
-function historyHostAllowed(url) {
-    try {
-        const parsed = new URL(url);
-        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:')
-            return false;
-        if (parsed.protocol === 'http:' && parsed.hostname !== '127.0.0.1' && parsed.hostname !== 'localhost')
-            return false;
-        if (parsed.protocol === 'https:') {
-            return index_js_1.DEFAULT_TRUSTED_JWKS_HOSTS.some((host) => host.toLowerCase() === parsed.hostname.toLowerCase());
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-async function loadAnchorIssuerHistory(args, receipt) {
-    if (args.issuerHistoryFile) {
-        return JSON.parse((0, node_fs_1.readFileSync)(args.issuerHistoryFile, 'utf8'));
-    }
-    if (args.noIssuerHistory)
-        return null;
-    const url = (0, issuer_history_js_1.historyUrlFromReceipt)(receipt);
-    if (!url || !historyHostAllowed(url))
-        return null;
-    try {
-        const res = await fetch(url, { signal: AbortSignal.timeout(4000) });
-        if (!res.ok)
-            return null;
-        return await res.json();
-    }
-    catch {
-        return null;
-    }
-}
-async function loadAnchorWalletDocument(args, receipt) {
-    if (args.anchorWalletsFile) {
-        return JSON.parse((0, node_fs_1.readFileSync)(args.anchorWalletsFile, 'utf8'));
-    }
-    if (args.noIssuerHistory)
-        return null;
-    const historyUrl = (0, issuer_history_js_1.historyUrlFromReceipt)(receipt);
-    const epochOrigin = (() => {
-        if (!args.epochUrl)
-            return null;
-        try {
-            return new URL(args.epochUrl).origin;
-        }
-        catch {
-            return null;
-        }
-    })();
-    const origin = epochOrigin || (historyUrl ? new URL(historyUrl).origin : null);
-    if (!origin)
-        return null;
-    const url = `${origin}/.well-known/anchor-wallets.json`;
-    if (!historyHostAllowed(url))
-        return null;
-    try {
-        const res = await fetch(url, { signal: AbortSignal.timeout(4000) });
-        if (res.status === 404)
-            return null;
-        if (!res.ok)
-            return null;
-        return await res.json();
-    }
-    catch {
-        return null;
-    }
-}
-async function runAnchor(args) {
-    const receiptPath = args.file;
-    const inclusionPath = args.inclusionFile || args.positionals[1] || null;
-    const headPath = args.headFile || (args.inclusionFile ? null : args.positionals[2]) || null;
-    const headCandidates = [args.headFile, headPath, ...args.positionals];
-    if (headCandidates.some((file) => file && headStatus(file) === 'not_yet_published')) {
-        console.error('Tree head is not_yet_published.');
-        return 3;
-    }
-    if (!receiptPath || !inclusionPath || !headPath) {
-        console.error('Anchor check needs a receipt, an inclusion proof, and a tree head.');
-        console.error('  xfuel-verify receipt.json inclusion.json head.json --rpc');
-        return 3;
-    }
-    let receipt;
-    let inclusion;
-    let head;
-    try {
-        receipt = readJson(receiptPath);
-        inclusion = readJson(inclusionPath);
-        head = readJson(headPath);
-    }
-    catch (err) {
-        console.error(`Error reading anchor inputs: ${err instanceof Error ? err.message : String(err)}`);
-        return 3;
-    }
-    let fileJwks;
-    if (args.jwksFile) {
-        try {
-            fileJwks = JSON.parse((0, node_fs_1.readFileSync)(args.jwksFile, 'utf8'));
-        }
-        catch (err) {
-            console.error(`Error reading JWKS file: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-    }
-    const loaded = await (0, index_js_1.loadIssuerJwks)(receipt, {
-        jwks: fileJwks,
-        jwksUri: args.jwksUrl || undefined,
-        fetchJwks: args.fetchJwks,
-    });
-    const trustedKids = args.noTrustedKid
-        ? []
-        : (args.trustedKids ?? [...index_js_1.DEFAULT_TRUSTED_ISSUER_KIDS]);
-    let issuerHistory = null;
-    let anchorWalletDocument = null;
-    try {
-        issuerHistory = await loadAnchorIssuerHistory(args, receipt);
-        anchorWalletDocument = await loadAnchorWalletDocument(args, receipt);
-    }
-    catch (err) {
-        console.error(`Error reading issuer trust files: ${err instanceof Error ? err.message : String(err)}`);
-        return 3;
-    }
-    let epochRecord = null;
-    let verifyEpochSignature;
-    if (headNeedsEpochRecord(head)) {
-        try {
-            epochRecord = await loadEpochRecord(args, receipt);
-        }
-        catch {
-            epochRecord = null;
-        }
-        if (epochRecord?.issuer_signature?.jws) {
-            verifyEpochSignature = (jws) => epochSignatureOk(epochRecord, jws, loaded.jwks, trustedKids);
-        }
-    }
-    let issuerPin;
-    const pinClaim = (0, issuer_pin_js_1.readIssuerPinClaim)(receipt).claimed || (0, issuer_pin_js_1.readIssuerPinClaim)(head).claimed;
-    const pinRequested = Boolean(args.issuerPinFile) || pinClaim;
-    if (pinRequested) {
-        try {
-            const claimRef = (0, issuer_pin_js_1.readIssuerPinClaim)(receipt).ref || (0, issuer_pin_js_1.readIssuerPinClaim)(head).ref;
-            const ref = (args.issuerPinCommit || args.issuerPinSha256 || claimRef)
-                ? {
-                    commit: args.issuerPinCommit || claimRef?.commit || '',
-                    path: claimRef?.path || 'docs/well-known/issuer-key.json',
-                    sha256: (args.issuerPinSha256 || claimRef?.sha256 || '').toLowerCase(),
-                }
-                : null;
-            let witnesses;
-            if (args.issuerWitnessesFile)
-                witnesses = JSON.parse((0, node_fs_1.readFileSync)(args.issuerWitnessesFile, 'utf8'));
-            const priorRef = args.issuerPriorPinFile
-                ? {
-                    commit: args.issuerPriorCommit || '',
-                    path: 'docs/well-known/issuer-key.json',
-                    sha256: (args.issuerPriorSha256 || '').toLowerCase(),
-                }
-                : null;
-            issuerPin = {
-                pinBytes: args.issuerPinFile ? (0, node_fs_1.readFileSync)(args.issuerPinFile, 'utf8') : null,
-                sigBytes: args.issuerPinSigFile ? (0, node_fs_1.readFileSync)(args.issuerPinSigFile, 'utf8') : null,
-                ref,
-                witnesses,
-                priorPinBytes: args.issuerPriorPinFile ? (0, node_fs_1.readFileSync)(args.issuerPriorPinFile, 'utf8') : null,
-                priorRef,
-                controlJws: args.issuerControlFile ? (0, node_fs_1.readFileSync)(args.issuerControlFile, 'utf8').trim() : null,
-                required: true,
-            };
-        }
-        catch (err) {
-            console.error(`Error reading issuer pin: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-    }
-    const result = await (0, anchor_witness_js_1.verifyAnchoredRoot)({
-        receipt,
-        inclusion,
-        head,
-        baseRpcUrl: args.rpcUrl || undefined,
-        solanaRpcUrl: args.solanaRpcUrl || undefined,
-        checkNewestAnchor: args.sawRpc,
-        epochRecord,
-        verifyEpochSignature,
-        issuerPin,
-        jwks: loaded.jwks,
-        trustedKids,
-        issuerHistory,
-        strictIssuerHistory: args.strictIssuerHistory,
-        anchorWalletDocument: anchorWalletDocument,
-    });
-    let canonicalPreimage = null;
-    if (args.canonicalPreimageFile) {
-        canonicalPreimage = (0, node_fs_1.readFileSync)(args.canonicalPreimageFile, 'utf8');
-    }
-    const historyBytes = args.issuerHistoryFile ? (0, node_fs_1.readFileSync)(args.issuerHistoryFile, 'utf8') : null;
-    const verified = await (0, index_js_1.verifyReceipt)(receipt, {
-        jwks: loaded.jwks,
-        jwksUri: args.jwksUrl || undefined,
-        fetchJwks: args.fetchJwks,
-        trustedKids,
-        checkNullifier: args.checkNullifier,
-        checkPayer: args.checkPayer,
-        rpcUrl: args.rpcUrl || undefined,
-        solanaRpcUrl: args.solanaRpcUrl || undefined,
-        requirePreimages: !args.noPreimage,
-        issuerHistory: args.issuerHistoryFile ? issuerHistory : null,
-        issuerHistoryBytes: historyBytes,
-        fetchIssuerHistory: !args.noIssuerHistory && !args.issuerHistoryFile,
-        strictIssuerHistory: args.strictIssuerHistory,
-        skipIssuerHistory: args.noIssuerHistory,
-        canonicalPreimage,
-        head,
-    });
-    // Inclusion was already checked above. Passing it again re-derives the leaf
-    // from book_chain.row_hash only, which rejects a receipt that stores row_hash
-    // at the top level. Log mode still requires the receipt itself. A missing or
-    // stripped issuer signature, a partial check, or a signed-versus-outer
-    // mismatch fails the combined result. An inclusion match is not VERIFIED.
-    const issuerSig = receipt.issuer_signature;
-    const signaturePresent = Boolean(issuerSig?.jws || issuerSig?.value);
-    const receiptVerified = signaturePresent
-        && verified.issuer_signature.valid === true
-        && (verified.overall === 'verified' || verified.overall === 'verified_carried_forward')
-        && verified.claim_mismatches.length === 0;
-    const receiptFailed = !receiptVerified;
-    const receiptErrors = [...verified.errors];
-    if (!signaturePresent) {
-        receiptErrors.push(verified.issuer_signature.reason || 'receipt_signature_missing');
-    }
-    else if (verified.overall === 'partial') {
-        receiptErrors.push(verified.issuer_signature.reason || 'receipt_check_partial');
-    }
-    const errors = receiptFailed
-        ? [...result.errors, ...receiptErrors.filter((err) => !result.errors.includes(err))]
-        : result.errors;
-    const combined = {
-        ...result,
-        errors,
-        overall: receiptFailed ? 'failed' : result.overall,
-        receipt_lane: verified.receipt_lane,
-        receipt_check: {
-            overall: result.overall === 'pending' && !receiptFailed ? 'pending' : verified.overall,
-            verified_scope: verified.verified_scope,
-            claim_mismatches: verified.claim_mismatches,
-            unsigned_fields: verified.unsigned_fields,
-            errors: verified.errors,
-        },
-    };
-    if (args.json) {
-        console.log(JSON.stringify(combined, null, 2));
-    }
-    else {
-        printAnchor(combined, false, args.quiet);
-        if (!args.quiet || receiptFailed) {
-            const anchorPending = result.overall === 'pending';
-            const receiptLabel = anchorPending && !receiptFailed
-                ? 'PENDING'
-                : verified.overall.toUpperCase();
-            console.log(`  Receipt checks: ${receiptLabel} (signed claims only)`);
-            if (verified.claim_mismatches.length > 0) {
-                for (const mismatch of verified.claim_mismatches) {
-                    console.log(`  ${mismatch.field}: outer ${mismatch.outer} ≠ signed ${mismatch.signed}`);
-                }
-            }
-            if (!(anchorPending && !receiptFailed))
-                printUnsigned(verified.unsigned_fields);
-            console.log('');
-        }
-        if (!args.quiet)
-            printLane(verified.receipt_lane);
-    }
-    if (combined.overall === 'verified')
-        return 0;
-    if (combined.overall === 'partial' || combined.overall === 'pending')
-        return 2;
-    return 1;
-}
-function printUnsigned(fields) {
-    console.log('  Scope:         signed claims only. Unsigned fields are UNVERIFIED.');
-    if (fields.length === 0)
-        return;
-    console.log(`  Unsigned fields (${fields.length})`);
-    console.log('  ─────────────────────────────────────────────────');
-    for (const field of fields)
-        console.log(`  UNVERIFIED     ${field}`);
-}
-async function runRefusal(doc, args) {
-    const trustedKids = args.trustedKids ?? index_js_1.DEFAULT_TRUSTED_ISSUER_KIDS;
-    const result = (0, index_js_1.verifyRefusal)(doc, {
-        jwks: args.jwks,
-        trustedKids,
-    });
-    const preimages = await (0, preimage_js_1.verifyPublishedPreimages)(doc, {
-        requirePreimages: args.requirePreimages,
-    });
-    let canonicalFailed = false;
-    if (args.canonicalPreimage != null) {
-        const canonical = (0, canonical_preimage_js_1.verifyCanonicalPreimageBytes)(args.canonicalPreimage, result.payload_hash);
-        canonicalFailed = !canonical.ok;
-        if (canonicalFailed)
-            preimages.errors.push(`canonical preimage: ${canonical.reason}`);
-        if (canonicalFailed)
-            preimages.ok = false;
-    }
-    const pin = result.valid ? (0, issuer_history_js_1.readIssuerHistoryPin)({
-        issuer_history: result.issuer_history,
-    }) : null;
-    const history = args.skipIssuerHistory
-        ? { checked: false, ok: true, unreachable: false, warning: null, reason: null, kid: result.kid ?? null, document: null, loaded: false }
-        : await (0, issuer_history_js_1.checkReceiptIssuerHistory)(doc, {
-            document: args.issuerHistory,
-            documentBytes: args.issuerHistoryBytes,
-            fetchHistory: args.fetchIssuerHistory,
-            strict: args.strictIssuerHistory,
-            jwks: args.jwks,
-            trustedKids,
-            issuedAt: doc.issued_at ?? null,
-            kid: result.kid ?? doc.issuer_signature?.kid ?? null,
-            pin,
-            requirePin: result.valid && Number(result.payload_version) >= 2,
-        });
-    const historyFailed = history.checked && !history.ok;
-    const failed = !result.valid || !preimages.ok || historyFailed || canonicalFailed;
-    if (args.json) {
-        console.log(JSON.stringify({ ...result, preimages, issuer_history: history }, null, 2));
-    }
-    else if (!args.quiet || failed) {
-        console.log('');
-        console.log('  Chit402 Refusal Verification');
-        console.log('  ─────────────────────────────────────────────────');
-        console.log(`  Schema:        ${result.schema}`);
-        console.log(`  Refusal ID:    ${result.refusal_id || doc.refusal_id || '—'}`);
-        console.log(`  Code:          ${result.refusal_code || doc.refusal_code || '—'}`);
-        console.log(`  Nonce:         ${result.nonce || '—'}`);
-        console.log(`  Chain:         ${result.chain_id ?? 'null'}`);
-        console.log(`  Charged:       false`);
-        console.log('');
-        console.log('  Issuer Signature');
-        console.log('  ─────────────────────────────────────────────────');
-        console.log(`  Valid:         ${result.valid ? '✓ YES' : '✗ NO'}`);
-        if (result.kid)
-            console.log(`  Kid:           ${result.kid}`);
-        if (!result.valid && result.reason)
-            console.log(`  Reason:        ${result.reason}`);
-        console.log('');
-        console.log('  What this proves');
-        console.log('  ─────────────────────────────────────────────────');
-        for (const line of result.proves)
-            console.log(`  ${line}`);
-        console.log('');
-        console.log('  What this does not prove');
-        console.log('  ─────────────────────────────────────────────────');
-        for (const line of result.does_not_prove)
-            console.log(`  ${line}`);
-        console.log('');
-        console.log(`  Overall: ${failed ? 'FAILED' : 'VERIFIED'}`);
-        if (!preimages.ok)
-            console.log(`  Preimages:     ${preimages.errors.join('; ')}`);
-        if (history.warning)
-            console.log(`  Issuer history: ${history.warning}`);
-        if (historyFailed && history.reason)
-            console.log(`  Issuer history: ${history.reason}`);
-        console.log('');
-    }
-    return failed ? 1 : 0;
-}
-async function main() {
-    const args = parseArgs(process.argv.slice(2));
-    if (args.version) {
-        console.log(`@xfuel/verify ${packageVersion()}`);
-        return 0;
-    }
-    let anchorMode = args.anchorFlag
-        || Boolean(args.inclusionFile || args.headFile)
-        || (args.positionals.length >= 3 && args.sawRpc);
-    if (!anchorMode && args.sawRpc && args.positionals.some((file) => fileLooksLikeHead(file))) {
-        anchorMode = true;
-    }
-    if (args.help) {
-        console.log(HELP);
-        return 0;
-    }
-    if (args.url && !args.jwsFile) {
-        try {
-            const response = await fetch(args.url);
-            await response.arrayBuffer();
-        }
-        catch {
-            // A failed fetch is still not a pass.
-        }
-        console.log('owner_proof_required');
-        console.log('  Overall: OWNER_PROOF_REQUIRED');
-        return 1;
-    }
-    let offlineWitness = null;
-    if (!anchorMode) {
-        try {
-            offlineWitness = readOfflineWitness(args);
-        }
-        catch (err) {
-            console.error(err instanceof Error ? err.message : String(err));
-            return 3;
-        }
-    }
-    // A shell plus a holder is not anchor mode. Inclusion is checked with the
-    // holder. Anchor mode would verify the unsigned shell and skip the key.
-    if (anchorMode && !args.jwsFile && !args.acceptShell)
-        return runAnchor(args);
-    if (!args.file) {
-        console.log(HELP);
-        return 3;
-    }
-    let receipt;
-    try {
-        receipt = readReceipt(args.file);
-    }
-    catch (err) {
-        console.error(`Error reading receipt: ${err instanceof Error ? err.message : String(err)}`);
-        return 3;
-    }
-    if ((0, shell_js_1.isReceiptShell)(receipt) || args.acceptShell || args.jwsFile) {
-        if (!(0, shell_js_1.isReceiptShell)(receipt)) {
-            console.error('Invalid shell: schema is not chit402.receipt_shell.v1');
-            return 3;
-        }
-        if (!args.jwsFile) {
-            console.log(shell_js_1.INCLUDED_SHELL_LINE);
-            console.log('  Overall: INCLUDED_SHELL');
-            return args.acceptShell ? 0 : 1;
-        }
-        let holder;
-        try {
-            const text = (0, node_fs_1.readFileSync)(args.jwsFile, 'utf8');
-            let parsed = text;
-            try {
-                parsed = JSON.parse(text);
-            }
-            catch {
-                parsed = text;
-            }
-            holder = (0, shell_js_1.holderDocumentFromOwnerView)(parsed);
-        }
-        catch (err) {
-            console.error(`Error reading JWS: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-        const shellDoc = receipt;
-        const compared = (0, shell_js_1.compareShellToJws)(shellDoc, holder);
-        if (!compared.ok) {
-            console.log('shell_jws_mismatch');
-            if (compared.field)
-                console.log(`  Field:         ${compared.field}`);
-            console.log('  Overall: FAILED');
-            return 1;
-        }
-        let jwks;
-        if (args.jwksFile) {
-            try {
-                jwks = JSON.parse((0, node_fs_1.readFileSync)(args.jwksFile, 'utf8'));
-            }
-            catch (err) {
-                console.error(`Error reading JWKS file: ${err instanceof Error ? err.message : String(err)}`);
-                return 3;
-            }
-        }
-        let inclusion = offlineWitness?.inclusion ?? null;
-        let head = offlineWitness?.head ?? null;
-        try {
-            if (args.inclusionFile)
-                inclusion = readJson(args.inclusionFile);
-            if (args.headFile)
-                head = readJson(args.headFile);
-        }
-        catch (err) {
-            console.error(`Error reading inclusion: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-        const trustedKids = args.noTrustedKid
-            ? []
-            : (args.trustedKids ?? [...index_js_1.DEFAULT_TRUSTED_ISSUER_KIDS]);
-        const result = await (0, index_js_1.verifyReceipt)(holder, {
-            jwks,
-            jwksUri: args.jwksUrl || undefined,
-            fetchJwks: args.fetchJwks,
-            trustedKids,
-            checkPayer: args.checkPayer,
-            rpcUrl: args.rpcUrl || undefined,
-            solanaRpcUrl: args.solanaRpcUrl || undefined,
-            requirePreimages: false,
-            skipIssuerHistory: args.noIssuerHistory || !args.issuerHistoryFile,
-            issuerHistory: null,
-            fetchIssuerHistory: false,
-            salt: args.salt,
-            head: head ?? undefined,
-            inclusion: inclusion ?? undefined,
-        });
-        const inclusionErrors = result.errors.filter((err) => /inclusion|leaf|row_hash|bad_root|tree_size|tree_head|no_leaf/.test(err));
-        const shellLeaf = (shellDoc.inclusion && typeof shellDoc.inclusion === 'object')
-            ? shellDoc.inclusion.leaf_hash
-            : null;
-        const provedLeaf = inclusion && typeof inclusion.leaf === 'string'
-            ? inclusion.leaf
-            : null;
-        // A head the user wrote by hand ({root, tree_size}) is not a log. The
-        // inclusion only counts against a head that carries an issuer JWS;
-        // verifyReceipt() checks that JWS against the same trust set.
-        const headSig = head && typeof head === 'object'
-            ? head.issuer_signature
-            : null;
-        const headSigned = !!headSig && typeof headSig.jws === 'string' && headSig.jws.split('.').length === 3;
-        const verdict = (0, shell_js_1.shellHolderVerdict)({
-            signatureValid: result.issuer_signature.valid === true,
-            keyTrusted: result.issuer_signature.key_trusted === true,
-            signatureReason: result.issuer_signature.reason || (result.issuer_signature.key_trusted ? null : 'key untrusted'),
-            inclusionSupplied: inclusion != null,
-            inclusionOk: inclusion != null && inclusionErrors.length === 0,
-            inclusionReason: inclusion == null ? 'inclusion_missing' : (inclusionErrors[0] || null),
-            headSigned,
-            paymentRef: result.tx,
-            bindingExpected: !!result.binding.expected,
-            bindingMatches: result.binding.matches === true,
-            shellLeaf: shellLeaf == null ? null : String(shellLeaf),
-            provedLeaf,
-        });
-        if (!verdict.verified || (result.overall !== 'verified' && result.overall !== 'verified_carried_forward')) {
-            const reason = verdict.reason || result.errors[0] || 'failed';
-            console.log(reason);
-            console.log('  Overall: FAILED');
-            return 1;
-        }
-        if (args.checkPayer && !result.payer.valid) {
-            console.log(result.payer.reason || 'payment_unchecked');
-            console.log('  Overall: FAILED');
-            return 1;
-        }
-        const issuer = holder.issuer_signature;
-        if (args.salt) {
-            const opened = (0, shell_js_1.openV11Commitment)({
-                payload: (0, shell_js_1.decodeJwsPayload)(issuer?.jws),
-                saltHex: args.salt || '',
-                body: Buffer.alloc(0),
-            });
-            if (!opened.ok) {
-                console.log(opened.reason || 'commitment_mismatch');
-                console.log('  Overall: FAILED');
-                return 1;
-            }
-        }
-        console.log('  Overall: VERIFIED');
-        return 0;
-    }
-    const v11 = receipt.v === 11 || (receipt.issuer_signature?.jws
-        ? (() => {
-            try {
-                const part = String(receipt.issuer_signature.jws).split('.')[1];
-                const payload = JSON.parse(Buffer.from(part, 'base64url').toString('utf8'));
-                return payload?.v === 11;
-            }
-            catch {
-                return false;
-            }
-        })()
-        : false);
-    if (!receipt.task_id && !v11) {
-        console.error('Invalid receipt: missing task_id');
-        return 3;
-    }
-    // Load JWKS if provided
-    let jwks;
-    if (args.jwksFile) {
-        try {
-            const jwksContent = (0, node_fs_1.readFileSync)(args.jwksFile, 'utf8');
-            jwks = JSON.parse(jwksContent);
-        }
-        catch (err) {
-            console.error(`Error reading JWKS file: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-    }
-    const trustedKids = args.noTrustedKid
-        ? []
-        : (args.trustedKids ?? index_js_1.DEFAULT_TRUSTED_ISSUER_KIDS);
-    if ((0, index_js_1.isRefusalDocument)(receipt)) {
-        let issuerHistory = null;
-        let issuerHistoryBytes = null;
-        if (args.issuerHistoryFile) {
-            issuerHistoryBytes = (0, node_fs_1.readFileSync)(args.issuerHistoryFile, 'utf8');
-            issuerHistory = JSON.parse(issuerHistoryBytes);
-        }
-        let canonicalPreimage = null;
-        if (args.canonicalPreimageFile) {
-            canonicalPreimage = (0, node_fs_1.readFileSync)(args.canonicalPreimageFile, 'utf8');
-        }
-        return runRefusal(receipt, {
-            jwks,
-            trustedKids,
-            json: args.json,
-            quiet: args.quiet,
-            requirePreimages: !args.noPreimage,
-            issuerHistory,
-            issuerHistoryBytes,
-            fetchIssuerHistory: !args.noIssuerHistory && !issuerHistory,
-            strictIssuerHistory: args.strictIssuerHistory,
-            skipIssuerHistory: args.noIssuerHistory,
-            canonicalPreimage,
-        });
-    }
-    let issuerHistory = null;
-    let issuerHistoryBytes = null;
-    if (args.issuerHistoryFile) {
-        try {
-            issuerHistoryBytes = (0, node_fs_1.readFileSync)(args.issuerHistoryFile, 'utf8');
-            issuerHistory = JSON.parse(issuerHistoryBytes);
-        }
-        catch (err) {
-            console.error(`Error reading issuer history: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-    }
-    let canonicalPreimage = null;
-    if (args.canonicalPreimageFile) {
-        try {
-            canonicalPreimage = (0, node_fs_1.readFileSync)(args.canonicalPreimageFile, 'utf8');
-        }
-        catch (err) {
-            console.error(`Error reading canonical preimage: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-    }
-    const carryAsked = args.carryOldHeadFile || args.carryOldInclusionFile
-        || args.carryHeadFile || args.carryInclusionFiles.length > 0;
-    let carry = null;
-    if (carryAsked) {
-        try {
-            carry = {
-                oldHead: args.carryOldHeadFile ? readJson(args.carryOldHeadFile) : {},
-                oldInclusion: args.carryOldInclusionFile ? readJson(args.carryOldInclusionFile) : { error: 'not_in_tree' },
-                currentHead: args.carryHeadFile ? readJson(args.carryHeadFile) : {},
-                currentInclusions: args.carryInclusionFiles.length > 0
-                    ? args.carryInclusionFiles.map((file) => readJson(file))
-                    : [{ error: 'not_in_tree' }],
-            };
-        }
-        catch (err) {
-            console.error(`Error reading carry-forward files: ${err instanceof Error ? err.message : String(err)}`);
-            return 3;
-        }
-    }
-    let open;
-    if (args.open.length > 0) {
-        open = {};
-        try {
-            for (const spec of args.open) {
-                const opened = (0, v11_receipt_js_1.readOpenFile)(spec);
-                if (opened.kind === 'output')
-                    open.output = opened.bytes;
-                else
-                    open[opened.kind] = opened.text;
-            }
-        }
-        catch (err) {
-            console.error(err instanceof Error ? err.message : String(err));
-            return 3;
-        }
-    }
-    const result = await (0, index_js_1.verifyReceipt)(receipt, {
-        jwks,
-        jwksUri: args.jwksUrl || undefined,
-        fetchJwks: args.fetchJwks,
-        trustedKids,
-        checkNullifier: args.checkNullifier,
-        checkPayer: args.checkPayer,
-        rpcUrl: args.rpcUrl || undefined,
-        solanaRpcUrl: args.solanaRpcUrl || undefined,
-        requirePreimages: !args.noPreimage,
-        issuerHistory,
-        issuerHistoryBytes,
-        fetchIssuerHistory: !args.noIssuerHistory && !issuerHistory,
-        strictIssuerHistory: args.strictIssuerHistory,
-        skipIssuerHistory: args.noIssuerHistory,
-        canonicalPreimage,
-        salt: args.salt,
-        open,
-        head: offlineWitness?.head ?? undefined,
-        inclusion: offlineWitness?.inclusion ?? undefined,
-        carry,
-    });
-    if (args.json) {
-        console.log(JSON.stringify(result, null, 2));
-    }
-    else if (!args.quiet || result.overall === 'failed') {
-        console.log('');
-        console.log(`  Chit402 Receipt Verification`);
-        console.log(`  ─────────────────────────────────────────────────`);
-        console.log(`  Receipt ID:    ${result.receipt_id}`);
-        console.log(`  Hub:           ${result.hub || '—'}`);
-        console.log(`  Model:         ${result.model || '—'}`);
-        console.log(`  Amount:        ${result.issuer_signature.valid ? formatAmount(result.amount_usdc) : '— (not verified)'}`);
-        console.log(`  TX:            ${result.tx || '—'}`);
-        console.log(`  Output Hash:   ${result.output_hash ? result.output_hash.slice(0, 18) + '…' : '—'}`);
-        console.log('');
-        console.log(`  Binding`);
-        console.log(`  ─────────────────────────────────────────────────`);
-        if (result.binding.expected) {
-            console.log(`  Expected:      ${result.binding.expected.slice(0, 18)}…`);
-            console.log(`  Recomputed:    ${result.binding.recomputed?.slice(0, 18)}…`);
-            console.log(`  Match:         ${result.binding.matches ? '✓ YES' : '✗ NO'}`);
-            console.log(`  Covers:        ${result.binding.covers.join(', ')}`);
-        }
-        else {
-            console.log(`  Status:        ${result.binding.reason || 'No payment-binding commitment'}`);
-        }
-        console.log('');
-        console.log(`  Issuer Signature`);
-        console.log(`  ─────────────────────────────────────────────────`);
-        if (result.issuer_signature.checked) {
-            console.log(`  Kid:           ${result.issuer_signature.kid || '—'}`);
-            console.log(`  Valid:         ${result.issuer_signature.valid ? '✓ YES' : '✗ NO'}`);
-            console.log(`  Key trusted:   ${result.issuer_signature.key_trusted ? '✓ YES' : '✗ NO'}${result.issuer_signature.trust ? ` (${result.issuer_signature.trust})` : ''}`);
-            if (!result.issuer_signature.valid && result.issuer_signature.reason) {
-                console.log(`  Reason:        ${result.issuer_signature.reason}`);
-            }
-        }
-        else {
-            console.log(`  Status:        ${result.issuer_signature.reason || 'Not checked'}`);
-            if (receipt.issuer_signature && !args.jwksFile && !args.fetchJwks && !args.jwksUrl) {
-                console.log(`                 (pass --jwks-file, --fetch-jwks, or rely on the default trusted kid)`);
-            }
-        }
-        console.log('');
-        console.log(`  Payer (on-chain)`);
-        console.log(`  ─────────────────────────────────────────────────`);
-        if (result.payer.checked) {
-            console.log(`  Rail:          ${result.payer.rail || '—'}`);
-            console.log(`  Payer:         ${result.payer.payer_wallet || '—'}`);
-            console.log(`  Payee:         ${result.payer.payee || '—'}`);
-            console.log(`  Asset:         ${result.payer.asset || '—'}`);
-            console.log(`  Amount:        ${formatAmount(result.payer.amount || null)}`);
-            console.log(`  Valid:         ${result.payer.valid ? '✓ YES' : '✗ NO'}`);
-            if (!result.payer.valid && result.payer.reason) {
-                console.log(`  Reason:        ${result.payer.reason}`);
-            }
-        }
-        else {
-            console.log(`  Status:        ${result.payer.reason || 'Not checked'}`);
-            if (result.issuer_signature.valid && result.payer.payer_wallet && result.tx && !args.checkPayer) {
-                console.log(`                 (pass --check-payer to verify payer, payee, asset, and amount on-chain)`);
-            }
-        }
-        if (result.claim_mismatches.length > 0) {
-            console.log('');
-            console.log(`  Outer / signed mismatches`);
-            console.log(`  ─────────────────────────────────────────────────`);
-            for (const mismatch of result.claim_mismatches) {
-                console.log(`  ${mismatch.field}: outer ${mismatch.outer} ≠ signed ${mismatch.signed}`);
-            }
-        }
-        console.log('');
-        printUnsigned(result.unsigned_fields);
-        console.log('');
-        console.log(`  Nullifier`);
-        console.log(`  ─────────────────────────────────────────────────`);
-        if (result.nullifier.nullifier) {
-            console.log(`  Value:         ${result.nullifier.nullifier.slice(0, 18)}…`);
-            if (args.checkNullifier) {
-                console.log(`  On-chain:      ${result.nullifier.anchored ? '✓ ANCHORED' : '✗ NOT FOUND'}`);
-            }
-            else {
-                console.log(`  On-chain:      (not checked — use --check-nullifier)`);
-            }
-        }
-        else {
-            console.log(`  Status:        No nullifier (Tier-1 receipt)`);
-        }
-        console.log('');
-        printLane(result.receipt_lane);
-        if (result.preimages.checked) {
-            console.log(`  Preimages:     ${result.preimages.ok ? '✓ MATCH' : '✗ ' + result.preimages.errors.join('; ')}`);
-        }
-        if (result.issuer_history.checked) {
-            console.log(`  Issuer history: ${result.issuer_history.ok ? '✓ kid in window' : '✗ ' + (result.issuer_history.reason || 'failed')}`);
-        }
-        else if (result.issuer_history.warning) {
-            console.log(`  Issuer history: ${result.issuer_history.warning}`);
-        }
-        if (result.carry_forward?.status === 'VERIFIED_CARRIED_FORWARD') {
-            const carried = result.carry_forward;
-            console.log(`  Log`);
-            console.log(`  ─────────────────────────────────────────────────`);
-            console.log(`  Status:        ${carried.status}`);
-            console.log(`  Issued at:     ${carried.issued_at}`);
-            console.log(`  Issued epoch:  ${carried.issued_epoch}`);
-            console.log(`  Logged at:     ${carried.logged_at}`);
-            console.log(`  Logged epoch:  ${carried.logged_epoch}`);
-            console.log(`  Leaf index:    ${carried.leaf_index}`);
-            console.log('');
-        }
-        console.log(`  Overall: ${result.overall.toUpperCase()}`);
-        if (result.errors.length > 0) {
-            console.log(`  Errors:  ${result.errors.join(', ')}`);
-        }
-        console.log('');
-    }
-    switch (result.overall) {
-        case 'verified':
-        case 'verified_carried_forward':
-            return 0;
-        case 'failed':
-            return 1;
-        case 'partial':
-            return 2;
-        default:
-            return 1;
-    }
-}
-/**
- * Node's fetch keeps its undici agent on this symbol after the first request.
- * There is no public handle for that pool. Closing it lets the loop drain.
- */
-const UNDICI_GLOBAL_DISPATCHER = Symbol.for('undici.globalDispatcher.1');
-function fetchDispatcher() {
-    const bag = globalThis;
-    return bag[UNDICI_GLOBAL_DISPATCHER];
-}
-/**
- * process.exit() while a fetch keep-alive socket is already CLOSING aborts
- * on Windows: Assertion failed: !(handle->flags & UV_HANDLE_CLOSING)
- * (src/win/async.c). Set the code and close the pool so the loop can drain.
- */
-async function finish(code) {
-    process.exitCode = code;
-    const dispatcher = fetchDispatcher();
-    if (!dispatcher)
-        return;
-    try {
-        const closing = dispatcher.close?.();
-        if (closing)
-            await closing;
-    }
-    catch {
-        try {
-            await dispatcher.destroy?.();
-        }
-        catch {
-            // The verification result is already the exit code.
-        }
-    }
-}
-main()
-    .then((code) => finish(code))
-    .catch((err) => {
-    console.error('Unexpected error:', err);
-    return finish(3);
-});
-//# sourceMappingURL=cli.js.map