aqta-verify-receipt 1.2.0 → 1.2.2

package/README.md

@@ -135,13 +135,41 @@ Default: `https://app.aqta.ai/security/pubkey.txt`. Same material as
 
 ## Test vectors
 
-Conformance suite (6 valid + 8 invalid):
+Conformance suite, covering receipts, agent action records and transparency proofs:
 [`test-vectors/`](https://github.com/Aqta-ai/attestation-spec/tree/main/test-vectors).
 
+## Transparency proofs
+
+A receipt signature answers what the issuer asserted. It cannot answer whether
+that entry is in the issuer's log, or whether the log has only ever grown.
+Those are different questions, so they get a different command.
+
+```bash
+npx -p aqta-verify-receipt aqta-verify-proof inclusion.json
+npx -p aqta-verify-receipt aqta-verify-proof consistency.json
+npx -p aqta-verify-receipt aqta-verify-proof sth.json --key <pinned>
+```
+
+RFC 6962 inclusion and consistency verification, plus the signed-tree-head
+signature. Written separately in TypeScript and Python rather than ported, and
+checked against the transparency vectors in the repository. Adds no dependency:
+hashing uses the runtime.
+
+```ts
+import { verifyInclusionProof, verifyConsistencyProof } from 'aqta-verify-receipt';
+
+const result = verifyInclusionProof(proof);
+if (!result.valid) throw new Error(result.reason);
+```
+
+An inclusion proof establishes that what you were shown is genuinely in the
+log. It does not establish that what you were **not** shown is irrelevant.
+That is omission, and it is open.
+
 ## What this is not
 
 Not a governance dashboard. Not a cost router. Not a chain explorer.
-A small verifier for one signed model-call receipt. The novel part is the
+A small verifier for signed decision records and the log proofs that accompany them. The novel part is the
 receipt format and offline verification model, not ASCII theatre.
 
 ## Security

package/dist/action.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * ACTION-v1 profile conformance tests.
+ *
+ * The vectors under test-vectors/action/ are the cross-language contract:
+ * the Python verifier's suite checks the same bytes, and the two
+ * implementations must return the same verdict (and the same reason) on
+ * every one. Run: `npm run build && node --test dist/action.test.js`.
+ */
+export {};
+//# sourceMappingURL=action.test.d.ts.map

package/dist/action.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.test.d.ts","sourceRoot":"","sources":["../src/action.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/action.test.js

@@ -0,0 +1,101 @@
+"use strict";
+/**
+ * ACTION-v1 profile conformance tests.
+ *
+ * The vectors under test-vectors/action/ are the cross-language contract:
+ * the Python verifier's suite checks the same bytes, and the two
+ * implementations must return the same verdict (and the same reason) on
+ * every one. Run: `npm run build && node --test dist/action.test.js`.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const index_js_1 = require("./index.js");
+/** Pinned issuer key for the action vector suite (test-vectors/action/README.md). */
+const ACTION_VECTOR_KEY = 'pOaccW6Csyo1POtxjixPH80oux9--YC1tzzaENT4vQ0';
+const ACTION_VECTOR_DIR = (0, node_path_1.join)(__dirname, '..', '..', '..', 'test-vectors', 'action');
+function loadVectors(kind) {
+    const dir = (0, node_path_1.join)(ACTION_VECTOR_DIR, kind);
+    return (0, node_fs_1.readdirSync)(dir)
+        .filter((f) => f.endsWith('.json'))
+        .sort()
+        .map((f) => [f, JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(dir, f), 'utf8'))]);
+}
+(0, node_test_1.test)('every valid action vector verifies under the pinned vector key', () => {
+    const vectors = loadVectors('valid');
+    strict_1.default.equal(vectors.length, 10, 'expected 10 valid action vectors');
+    for (const [name, record] of vectors) {
+        const result = (0, index_js_1.verifyReceipt)(record, {
+            trustedPublicKey: ACTION_VECTOR_KEY,
+            profile: 'ACTION-v1',
+        });
+        strict_1.default.equal(result.valid, true, `${name} must verify (${result.reason ?? 'no reason'})`);
+        strict_1.default.equal(result.envelope, 'ACTION-v1', `${name} must report the ACTION-v1 profile`);
+        strict_1.default.equal(result.keySource, 'pinned', `${name} must report a pinned key`);
+    }
+});
+(0, node_test_1.test)('every invalid action vector is rejected', () => {
+    const vectors = loadVectors('invalid');
+    strict_1.default.equal(vectors.length, 15, 'expected 15 invalid action vectors');
+    for (const [name, record] of vectors) {
+        const result = (0, index_js_1.verifyReceipt)(record, {
+            trustedPublicKey: ACTION_VECTOR_KEY,
+            profile: 'ACTION-v1',
+        });
+        strict_1.default.equal(result.valid, false, `${name} must be rejected`);
+    }
+});
+(0, node_test_1.test)('verifyActionRecord convenience wrapper selects the ACTION-v1 profile', () => {
+    const vectors = loadVectors('valid');
+    const [name, record] = vectors[0];
+    const result = (0, index_js_1.verifyActionRecord)(record, { trustedPublicKey: ACTION_VECTOR_KEY });
+    strict_1.default.equal(result.valid, true, `${name} must verify via verifyActionRecord`);
+    strict_1.default.equal(result.envelope, 'ACTION-v1');
+    strict_1.default.equal(result.keySource, 'pinned');
+});
+(0, node_test_1.test)('profile and envelope are mutually exclusive', () => {
+    const [, record] = loadVectors('valid')[0];
+    const result = (0, index_js_1.verifyReceipt)(record, {
+        trustedPublicKey: ACTION_VECTOR_KEY,
+        profile: 'ACTION-v1',
+        envelope: 'anchor-v1',
+    });
+    strict_1.default.equal(result.valid, false);
+    strict_1.default.equal(result.reason, 'profile and envelope are mutually exclusive');
+});
+(0, node_test_1.test)('ACTION-v1 cannot be named as a foreign envelope', () => {
+    // The foreign-envelope path is signature-only. Routing an action record
+    // through it would skip every structural and semantic rule, which is the
+    // bypass ACTION-v1 §7 exists to close.
+    const [, record] = loadVectors('valid')[0];
+    const result = (0, index_js_1.verifyReceipt)(record, {
+        trustedPublicKey: ACTION_VECTOR_KEY,
+        envelope: 'ACTION-v1',
+    });
+    strict_1.default.equal(result.valid, false);
+    strict_1.default.equal(result.reason, 'ACTION-v1 is a profile, not a foreign envelope; use the profile option');
+});
+(0, node_test_1.test)('a genuine ATTESTATION-v1 receipt fails the ACTION-v1 profile', () => {
+    // Invalid vector 007 is a complete, correctly signed ATTESTATION-v1
+    // receipt. Under the ACTION-v1 profile it must fail: accepting it would
+    // mean the verifier profile-sniffs by field shape.
+    const file = (0, node_path_1.join)(ACTION_VECTOR_DIR, 'invalid', '007-attestation-v1-receipt.json');
+    const receipt = JSON.parse((0, node_fs_1.readFileSync)(file, 'utf8'));
+    const asAction = (0, index_js_1.verifyActionRecord)(receipt, { trustedPublicKey: ACTION_VECTOR_KEY });
+    strict_1.default.equal(asAction.valid, false);
+    strict_1.default.equal(asAction.reason, 'missing required field: action_id');
+    // The same bytes remain a valid ATTESTATION-v1 receipt when the profile
+    // option is absent and its embedded key is pinned: the record itself is
+    // genuine, only the profile claim about it was wrong.
+    const asAttestation = (0, index_js_1.verifyReceipt)(receipt, {
+        trustedPublicKey: receipt.public_key,
+    });
+    strict_1.default.equal(asAttestation.valid, true, `007 must verify as ATTESTATION-v1 (${asAttestation.reason ?? 'no reason'})`);
+    strict_1.default.equal(asAttestation.envelope, 'ATTESTATION-v1');
+});
+//# sourceMappingURL=action.test.js.map

package/dist/action.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.test.js","sourceRoot":"","sources":["../src/action.test.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;AAEH,yCAAiC;AACjC,gEAAwC;AACxC,qCAAoD;AACpD,yCAAiC;AACjC,yCAA+D;AAE/D,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,6CAA6C,CAAC;AACxE,MAAM,iBAAiB,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;AAEtF,SAAS,WAAW,CAAC,IAAyB;IAC5C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,IAAA,gBAAI,EAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,kCAAkC,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,MAAM,EAAE;YACnC,gBAAgB,EAAE,iBAAiB;YACnC,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,iBAAiB,MAAM,CAAC,MAAM,IAAI,WAAW,GAAG,CAAC,CAAC;QAC1F,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,oCAAoC,CAAC,CAAC;QACxF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,2BAA2B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,MAAM,EAAE;YACnC,gBAAgB,EAAE,iBAAiB;YACnC,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAChE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAA,6BAAkB,EAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACnF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,qCAAqC,CAAC,CAAC;IAC/E,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,MAAM,EAAE;QACnC,gBAAgB,EAAE,iBAAiB;QACnC,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,wEAAwE;IACxE,yEAAyE;IACzE,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,MAAM,EAAE;QACnC,gBAAgB,EAAE,iBAAiB;QACnC,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,gBAAM,CAAC,KAAK,CACV,MAAM,CAAC,MAAM,EACb,wEAAwE,CACzE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,iBAAiB,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IAElF,MAAM,QAAQ,GAAG,IAAA,6BAAkB,EAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACtF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;IAEnE,wEAAwE;IACxE,wEAAwE;IACxE,sDAAsD;IACtD,MAAM,aAAa,GAAG,IAAA,wBAAa,EAAC,OAAO,EAAE;QAC3C,gBAAgB,EAAE,OAAO,CAAC,UAAoB;KAC/C,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CACV,aAAa,CAAC,KAAK,EACnB,IAAI,EACJ,sCAAsC,aAAa,CAAC,MAAM,IAAI,WAAW,GAAG,CAC7E,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC"}

package/dist/envelope.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Multi-envelope tests.
+ *
+ * The claim being defended: an auditor installs one verifier, not one per
+ * issuer. These cover envelope detection and the shared signature path for
+ * anchor-v1 receipts, which the ATTESTATION-v1 tests do not reach.
+ */
+export {};
+//# sourceMappingURL=envelope.test.d.ts.map

package/dist/envelope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.test.d.ts","sourceRoot":"","sources":["../src/envelope.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/envelope.test.js

@@ -0,0 +1,110 @@
+"use strict";
+/**
+ * Multi-envelope tests.
+ *
+ * The claim being defended: an auditor installs one verifier, not one per
+ * issuer. These cover envelope detection and the shared signature path for
+ * anchor-v1 receipts, which the ATTESTATION-v1 tests do not reach.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const index_js_1 = require("./index.js");
+/** The canonical form both envelopes share: sorted keys, no whitespace. */
+function canonical(v) {
+    if (v === null || typeof v !== 'object')
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(',')}]`;
+    const e = Object.entries(v)
+        .filter(([, x]) => x !== undefined)
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${e.map(([k, x]) => `${JSON.stringify(k)}:${canonical(x)}`).join(',')}}`;
+}
+const b64 = (u) => Buffer.from(u).toString('base64');
+/** Mint a signed anchor-v1 receipt with a throwaway key. */
+function makeAnchor(overrides = {}) {
+    const kp = tweetnacl_1.default.sign.keyPair();
+    const signed = {
+        checked_at: '2026-07-22T21:00:00Z',
+        transcript_sha256: 'a'.repeat(64),
+        summary_sha256: 'b'.repeat(64),
+        bound: 7,
+        gaps: 1,
+        public_key_b64: b64(kp.publicKey),
+        ...overrides,
+    };
+    const sig = tweetnacl_1.default.sign.detached(Buffer.from(canonical(signed), 'utf8'), kp.secretKey);
+    return { receipt: { ...signed, signature_b64: b64(sig) }, key: signed.public_key_b64 };
+}
+(0, node_test_1.test)('detectEnvelope identifies ATTESTATION-v1 by its field names', () => {
+    strict_1.default.equal((0, index_js_1.detectEnvelope)({ signature: 'x', public_key: 'y' }), 'ATTESTATION-v1');
+});
+(0, node_test_1.test)('detectEnvelope identifies anchor-v1 by its field names', () => {
+    strict_1.default.equal((0, index_js_1.detectEnvelope)({ signature_b64: 'x', public_key_b64: 'y' }), 'anchor-v1');
+});
+(0, node_test_1.test)('detectEnvelope returns null rather than guessing', () => {
+    strict_1.default.equal((0, index_js_1.detectEnvelope)({ hello: 'world' }), null);
+    strict_1.default.equal((0, index_js_1.detectEnvelope)(null), null);
+    strict_1.default.equal((0, index_js_1.detectEnvelope)('a string'), null);
+    // present but wrong type must not be treated as an envelope
+    strict_1.default.equal((0, index_js_1.detectEnvelope)({ signature: 1, public_key: 2 }), null);
+});
+(0, node_test_1.test)('a genuine anchor-v1 receipt verifies against its pinned key', () => {
+    const { receipt, key } = makeAnchor();
+    const r = (0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: key, envelope: 'anchor-v1' });
+    strict_1.default.equal(r.valid, true);
+    strict_1.default.equal(r.envelope, 'anchor-v1');
+    strict_1.default.equal(r.keySource, 'pinned');
+});
+(0, node_test_1.test)('altering any signed field breaks an anchor-v1 receipt', () => {
+    const { receipt, key } = makeAnchor();
+    const r = (0, index_js_1.verifyReceipt)({ ...receipt, bound: 99 }, { trustedPublicKey: key, envelope: 'anchor-v1' });
+    strict_1.default.equal(r.valid, false);
+    strict_1.default.equal(r.reason, 'signature check failed');
+});
+(0, node_test_1.test)('anchor-v1 will not verify against a key it was not signed with', () => {
+    const { receipt } = makeAnchor();
+    const other = makeAnchor().key;
+    const r = (0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: other, envelope: 'anchor-v1' });
+    strict_1.default.equal(r.valid, false);
+    strict_1.default.equal(r.reason, 'public key does not match trusted key');
+});
+(0, node_test_1.test)('anchor-v1 refuses to run without a pinned key', () => {
+    const { receipt } = makeAnchor();
+    const r = (0, index_js_1.verifyReceipt)(receipt, { envelope: 'anchor-v1' });
+    strict_1.default.equal(r.valid, false);
+    strict_1.default.match(r.reason ?? '', /trustedPublicKey required/);
+});
+(0, node_test_1.test)('anchor-v1 integrity-only mode reports the key as untrusted', () => {
+    const { receipt } = makeAnchor();
+    const r = (0, index_js_1.verifyReceipt)(receipt, { allowUntrustedEmbeddedKey: true, envelope: 'anchor-v1' });
+    strict_1.default.equal(r.valid, true);
+    strict_1.default.equal(r.keySource, 'untrusted');
+});
+(0, node_test_1.test)('non-ASCII in an anchor-v1 field still verifies', () => {
+    const { receipt, key } = makeAnchor({ note: 'Größe · héllo · 世界' });
+    strict_1.default.equal((0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: key, envelope: 'anchor-v1' }).valid, true);
+});
+(0, node_test_1.test)('an unrecognised envelope is rejected, not assumed', () => {
+    const r = (0, index_js_1.verifyReceipt)({ some: 'object' }, { trustedPublicKey: 'k' });
+    strict_1.default.equal(r.valid, false);
+    strict_1.default.match(r.reason ?? '', /unrecognised envelope/);
+});
+(0, node_test_1.test)('a foreign envelope needs explicit opt-in', () => {
+    // Envelopes were detected purely by field name, so any object naming its
+    // fields signature_b64/public_key_b64 skipped every structural and semantic
+    // check: an object that was not a receipt at all verified. Exit 0 then
+    // answered 'were these bytes signed by that key' rather than 'is this a
+    // conformant receipt'.
+    const { receipt, key } = makeAnchor();
+    const without = (0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: key });
+    strict_1.default.equal(without.valid, false);
+    strict_1.default.match(without.reason ?? '', /explicit opt-in/);
+    strict_1.default.equal((0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: key, envelope: 'anchor-v1' }).valid, true);
+});
+//# sourceMappingURL=envelope.test.js.map

package/dist/envelope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.test.js","sourceRoot":"","sources":["../src/envelope.test.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;AAEH,yCAAiC;AACjC,gEAAwC;AACxC,0DAA6B;AAC7B,yCAA2D;AAE3D,2EAA2E;AAC3E,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;SACnD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACpF,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAEjE,4DAA4D;AAC5D,SAAS,UAAU,CAAC,YAAqC,EAAE;IACzD,MAAM,EAAE,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,sBAAsB;QAClC,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC;QACP,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC;QACjC,GAAG,SAAS;KACb,CAAC;IACF,MAAM,GAAG,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACrF,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;AACzF,CAAC;AAED,IAAA,gBAAI,EAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACvD,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,4DAA4D;IAC5D,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5B,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,IAAA,wBAAa,EAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACrG,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7B,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,GAAG,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACrF,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7B,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5D,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7B,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7F,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5B,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACpE,gBAAM,CAAC,KAAK,CAAC,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,CAAC,GAAG,IAAA,wBAAa,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7B,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,0CAA0C,EAAE,GAAG,EAAE;IACpD,yEAAyE;IACzE,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,uBAAuB;IACvB,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtD,gBAAM,CAAC,KAAK,CACV,IAAA,wBAAa,EAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAC9E,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/index.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Interop tests: verify a receipt produced by the Python reference implementation
+ * against this TypeScript verifier. Run: `npm run build && node --test dist/index.test.js`.
+ */
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/index.test.js

@@ -0,0 +1,161 @@
+"use strict";
+/**
+ * Interop tests: verify a receipt produced by the Python reference implementation
+ * against this TypeScript verifier. Run: `npm run build && node --test dist/index.test.js`.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const index_js_1 = require("./index.js");
+/**
+ * Fixture receipt shape, used here to exercise the structural checks.
+ * Full signature-level interop is covered by the cross-implementation
+ * runner at `scripts/make-interop-fixture.mjs`, which generates a receipt
+ * with the reference issuer and verifies it with this library.
+ */
+const FIXTURE_RECEIPT = {
+    v: 1,
+    attestation_id: 'a3f2b1c4-9d87-4e6f-b012-34567890abcd',
+    trace_id: 'trace-fixture-v1',
+    org_id: 'org-test',
+    request_hash: '8f3a7e2b9c4d5f6a1b0c9d8e7f6a5b4c3d2e1f0a9b8c7d6e5f4a3b2c1d0e9f8a',
+    model: 'gpt-4o',
+    outcome: 'ALLOWED',
+    policy_applied: ['budget_guard', 'loop_guard'],
+    cost_prevented_eur: 0.0,
+    timestamp: '2026-04-23T10:15:30.123456+00:00',
+    public_key: '', // populated by make-test-fixture.py
+    signature: '', // populated by make-test-fixture.py
+};
+(0, node_test_1.test)('rejects empty object', () => {
+    const res = (0, index_js_1.verifyReceipt)({});
+    strict_1.default.equal(res.valid, false);
+});
+(0, node_test_1.test)('rejects missing required field', () => {
+    const bad = { ...FIXTURE_RECEIPT };
+    delete bad.outcome;
+    const res = (0, index_js_1.verifyReceipt)(bad);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /missing required field/);
+});
+(0, node_test_1.test)('rejects unknown top-level field (strict mode)', () => {
+    const bad = { ...FIXTURE_RECEIPT, extra: 'foo' };
+    const res = (0, index_js_1.verifyReceipt)(bad, { allowUntrustedEmbeddedKey: true });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /unknown top-level field/);
+});
+(0, node_test_1.test)('rejects unsupported version', () => {
+    const bad = { ...FIXTURE_RECEIPT, v: 2 };
+    const res = (0, index_js_1.verifyReceipt)(bad, { allowUntrustedEmbeddedKey: true });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /unsupported version/);
+});
+(0, node_test_1.test)('rejects invalid outcome', () => {
+    const bad = { ...FIXTURE_RECEIPT, outcome: 'YOLO' };
+    const res = (0, index_js_1.verifyReceipt)(bad, { allowUntrustedEmbeddedKey: true });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /invalid outcome/);
+});
+(0, node_test_1.test)('rejects malformed request_hash', () => {
+    const bad = { ...FIXTURE_RECEIPT, request_hash: 'not-a-hash' };
+    const res = (0, index_js_1.verifyReceipt)(bad, { allowUntrustedEmbeddedKey: true });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /request_hash/);
+});
+(0, node_test_1.test)('rejects when trustedPublicKey omitted', () => {
+    const res = (0, index_js_1.verifyReceipt)(FIXTURE_RECEIPT);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /trustedPublicKey required/);
+});
+(0, node_test_1.test)('rejects pinned-key mismatch', () => {
+    const res = (0, index_js_1.verifyReceipt)(FIXTURE_RECEIPT, {
+        trustedPublicKey: 'different_key_000000000000000000000000000000',
+    });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /does not match trusted key/);
+});
+// Note: full signature-verification interop test requires the fixture to be
+// populated by `scripts/make-test-fixture.py` before running this suite.
+// When FIXTURE_RECEIPT.signature is empty, the signature check is skipped.
+(0, node_test_1.test)('signature decoder rejects empty signature when integrity-only', () => {
+    const res = (0, index_js_1.verifyReceipt)(FIXTURE_RECEIPT, {
+        allowUntrustedEmbeddedKey: true,
+    });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.ok(/signature/.test(res.reason ?? '') ||
+        /signature length/.test(res.reason ?? ''));
+});
+/**
+ * Conformance against the published test vectors.
+ *
+ * These files are the cross-language contract: the same bytes are checked by
+ * the Python verifier's suite. Running them here is what catches a
+ * canonicalisation change that one language accepts and the other rejects,
+ * which unit tests written against a locally-built fixture cannot see.
+ */
+const VECTOR_KEY = 'alWzEnrA_z9McN9z_MFfQCnH9mVgOwRZ26wrI7oix4E';
+const VECTOR_DIR = (0, node_path_1.join)(__dirname, '..', '..', '..', 'test-vectors');
+function loadVectors(kind) {
+    const dir = (0, node_path_1.join)(VECTOR_DIR, kind);
+    return (0, node_fs_1.readdirSync)(dir)
+        .filter((f) => f.endsWith('.json'))
+        .map((f) => [f, JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(dir, f), 'utf8'))]);
+}
+(0, node_test_1.test)('every valid test vector verifies under the pinned vector key', () => {
+    const vectors = loadVectors('valid');
+    strict_1.default.ok(vectors.length > 0, 'no valid vectors found');
+    for (const [name, receipt] of vectors) {
+        const result = (0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: VECTOR_KEY });
+        strict_1.default.equal(result.valid, true, `${name} must verify (${result.reason ?? 'no reason'})`);
+    }
+});
+(0, node_test_1.test)('every invalid test vector is rejected', () => {
+    const vectors = loadVectors('invalid');
+    strict_1.default.ok(vectors.length > 0, 'no invalid vectors found');
+    for (const [name, receipt] of vectors) {
+        const result = (0, index_js_1.verifyReceipt)(receipt, { trustedPublicKey: VECTOR_KEY });
+        strict_1.default.equal(result.valid, false, `${name} must be rejected`);
+    }
+});
+/**
+ * Parse-layer input handling, exercised through the real CLI entry point.
+ *
+ * These cannot be shared test vectors: the vector runner parses each file
+ * before verifying, and a defect in the parse step does not survive being
+ * parsed. Duplicate member names collapse to one, and NaN is not JSON at
+ * all. Both languages must reject them the same way, so both packages
+ * carry the same cases.
+ */
+(0, node_test_1.test)('CLI rejects malformed input at the parse layer', async () => {
+    const { execFileSync } = await import('node:child_process');
+    const { writeFileSync, mkdtempSync } = await import('node:fs');
+    const { tmpdir } = await import('node:os');
+    const dir = mkdtempSync((0, node_path_1.join)(tmpdir(), 'aqta-cli-'));
+    const bin = (0, node_path_1.join)(__dirname, '..', 'bin', 'aqta-verify-receipt.js');
+    const cases = [
+        ['duplicate member name', '{"v":1,"v":1,"outcome":"ALLOWED"}'],
+        ['NaN literal', '{"v":1,"cost_prevented_eur":NaN}'],
+        ['Infinity literal', '{"v":1,"cost_prevented_eur":Infinity}'],
+        ['-Infinity literal', '{"v":1,"cost_prevented_eur":-Infinity}'],
+    ];
+    for (const [label, body] of cases) {
+        const file = (0, node_path_1.join)(dir, 'receipt.json');
+        writeFileSync(file, body);
+        let code = 0;
+        try {
+            execFileSync(process.execPath, [bin, file, '--integrity-only'], { stdio: 'pipe' });
+        }
+        catch (err) {
+            code = err.status;
+        }
+        // Exit 2 is usage/IO: malformed input, not an invalid receipt. Exit 1
+        // would mean the bytes parsed and the receipt merely failed to verify.
+        strict_1.default.equal(code, 2, `${label} must exit 2, got ${code}`);
+    }
+});
+//# sourceMappingURL=index.test.js.map

package/dist/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAEH,yCAAiC;AACjC,gEAAwC;AACxC,qCAAoD;AACpD,yCAAiC;AACjC,yCAA2C;AAE3C;;;;;GAKG;AACH,MAAM,eAAe,GAAG;IACtB,CAAC,EAAE,CAAC;IACJ,cAAc,EAAE,sCAAsC;IACtD,QAAQ,EAAE,kBAAkB;IAC5B,MAAM,EAAE,UAAU;IAClB,YAAY,EAAE,kEAAkE;IAChF,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,SAAkB;IAC3B,cAAc,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC;IAC9C,kBAAkB,EAAE,GAAG;IACvB,SAAS,EAAE,kCAAkC;IAC7C,UAAU,EAAE,EAAE,EAAE,oCAAoC;IACpD,SAAS,EAAE,EAAE,EAAG,oCAAoC;CACrD,CAAC;AAEF,IAAA,gBAAI,EAAC,sBAAsB,EAAE,GAAG,EAAE;IAChC,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,CAAC;IAC9B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAS,CAAC;IAC1C,OAAO,GAAG,CAAC,OAAO,CAAC;IACnB,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,KAAK,EAAE,KAAK,EAAS,CAAC;IACxD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,6BAA6B,EAAE,GAAG,EAAE;IACvC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC,EAAE,CAAC,EAAS,CAAC;IAChD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,yBAAyB,EAAE,GAAG,EAAE;IACnC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,MAAM,EAAS,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,YAAY,EAAE,YAAY,EAAS,CAAC;IACtE,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,eAAe,CAAC,CAAC;IAC3C,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,6BAA6B,EAAE,GAAG,EAAE;IACvC,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,eAAe,EAAE;QACzC,gBAAgB,EAAE,8CAA8C;KACjE,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,IAAA,gBAAI,EAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,eAAe,EAAE;QACzC,yBAAyB,EAAE,IAAI;KAChC,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,EAAE,CACP,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAC5C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,6CAA6C,CAAC;AACjE,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAErE,SAAS,WAAW,CAAC,IAAyB;IAC5C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,IAAA,gBAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,OAAgB,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,iBAAiB,MAAM,CAAC,MAAM,IAAI,WAAW,GAAG,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,OAAgB,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAChE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,IAAA,gBAAI,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;IAChE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5D,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAEnE,MAAM,KAAK,GAA4B;QACrC,CAAC,uBAAuB,EAAE,mCAAmC,CAAC;QAC9D,CAAC,aAAa,EAAE,kCAAkC,CAAC;QACnD,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;QAC7D,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;KAChE,CAAC;IAEF,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACvC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QACD,sEAAsE;QACtE,uEAAuE;QACvE,gBAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/transparency.d.ts

@@ -0,0 +1,52 @@
+/** SHA-256(0x00 || entry). Exported so a caller can derive a leaf from receipt bytes. */
+export declare function leafHash(entry: Uint8Array): Uint8Array;
+export interface InclusionProof {
+    leaf_hash: string;
+    leaf_index: number;
+    tree_size: number;
+    root_hash: string;
+    audit_path: string[];
+}
+export interface ConsistencyProof {
+    old_size: number;
+    new_size: number;
+    old_root: string;
+    new_root: string;
+    consistency_path: string[];
+}
+export interface SignedTreeHead {
+    org_id: string;
+    tree_size: number;
+    root_hash: string;
+    signature: string;
+}
+export interface ProofResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Verify that a leaf is in a tree of the stated size with the stated root.
+ *
+ * Follows RFC 6962 §2.1.1. The walk consumes the audit path exactly; a path
+ * with a node left over, or one that runs out early, fails rather than being
+ * tolerated, because a verifier that accepts a sloppy proof accepts a forged
+ * one built the same way.
+ */
+export declare function verifyInclusionProof(proof: unknown): ProofResult;
+/**
+ * Verify that a later tree is an append-only extension of an earlier one.
+ *
+ * Follows RFC 6962 §2.1.2. This is the check that makes a log a log: without
+ * it, an issuer can publish a head, then publish another that quietly drops or
+ * reorders what came before.
+ */
+export declare function verifyConsistencyProof(proof: unknown): ProofResult;
+/**
+ * Verify the Ed25519 signature on a signed tree head.
+ *
+ * The head is signed over a fixed byte string rather than JSON, so there is no
+ * canonicalisation question here and no opportunity for the encoding-level
+ * divergence that JSON payloads invite.
+ */
+export declare function verifySignedTreeHead(head: unknown, trustedPublicKey: string): ProofResult;
+//# sourceMappingURL=transparency.d.ts.map

package/dist/transparency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transparency.d.ts","sourceRoot":"","sources":["../src/transparency.ts"],"names":[],"mappings":"AA0DA,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAKtD;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAmDhE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CA0ElE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,GAAG,WAAW,CA4CzF"}

package/dist/transparency.js

@@ -0,0 +1,273 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.leafHash = leafHash;
+exports.verifyInclusionProof = verifyInclusionProof;
+exports.verifyConsistencyProof = verifyConsistencyProof;
+exports.verifySignedTreeHead = verifySignedTreeHead;
+/**
+ * Transparency proof verification: RFC 6962 inclusion and consistency.
+ *
+ * A receipt signature answers "did this issuer assert this". It cannot answer
+ * "is this one of the entries the issuer has committed to, and has that
+ * commitment only ever grown". Those are log questions, and answering them
+ * needs a signed tree head plus a proof, verified without holding the log.
+ *
+ * Nothing here contacts a server. A reviewer holding a proof, a head and the
+ * published key can settle both questions offline, which is the only reason
+ * the proofs are worth issuing.
+ *
+ * What these proofs do NOT establish, and no proof in this file claims:
+ * that the entries you were not shown are irrelevant. Inclusion proves that
+ * what you were shown is genuinely in the log. Omission stays open.
+ */
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const node_crypto_1 = require("node:crypto");
+/**
+ * SHA-256 via the Node runtime rather than a new dependency. A verifier's
+ * value is inversely proportional to how much code a reviewer has to trust,
+ * so this module adds no third-party hashing. The receipt module stays free
+ * of Node built-ins and remains isomorphic; proof checking is a CLI job.
+ */
+function sha256(data) {
+    return new Uint8Array((0, node_crypto_1.createHash)('sha256').update(data).digest());
+}
+/** RFC 6962 §2.1 domain separation. */
+const LEAF_PREFIX = 0x00;
+const NODE_PREFIX = 0x01;
+function hexToBytes(hex) {
+    if (typeof hex !== 'string' || hex.length % 2 !== 0 || !/^[0-9a-f]*$/.test(hex)) {
+        throw new Error('not lowercase hex');
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a[i] ^ b[i];
+    return diff === 0;
+}
+/** SHA-256(0x01 || left || right). */
+function nodeHash(left, right) {
+    const buf = new Uint8Array(1 + left.length + right.length);
+    buf[0] = NODE_PREFIX;
+    buf.set(left, 1);
+    buf.set(right, 1 + left.length);
+    return sha256(buf);
+}
+/** SHA-256(0x00 || entry). Exported so a caller can derive a leaf from receipt bytes. */
+function leafHash(entry) {
+    const buf = new Uint8Array(1 + entry.length);
+    buf[0] = LEAF_PREFIX;
+    buf.set(entry, 1);
+    return sha256(buf);
+}
+function isSafeSize(n) {
+    return typeof n === 'number' && Number.isSafeInteger(n) && n >= 0;
+}
+/**
+ * Verify that a leaf is in a tree of the stated size with the stated root.
+ *
+ * Follows RFC 6962 §2.1.1. The walk consumes the audit path exactly; a path
+ * with a node left over, or one that runs out early, fails rather than being
+ * tolerated, because a verifier that accepts a sloppy proof accepts a forged
+ * one built the same way.
+ */
+function verifyInclusionProof(proof) {
+    if (typeof proof !== 'object' || proof === null) {
+        return { valid: false, reason: 'proof is not an object' };
+    }
+    const p = proof;
+    if (!isSafeSize(p.tree_size) || p.tree_size < 1) {
+        return { valid: false, reason: 'tree_size must be a positive integer' };
+    }
+    if (!isSafeSize(p.leaf_index) || p.leaf_index >= p.tree_size) {
+        return { valid: false, reason: 'leaf_index must be an integer inside the tree' };
+    }
+    if (!Array.isArray(p.audit_path)) {
+        return { valid: false, reason: 'audit_path must be an array' };
+    }
+    let leaf;
+    let root;
+    let path;
+    try {
+        leaf = hexToBytes(p.leaf_hash);
+        root = hexToBytes(p.root_hash);
+        path = p.audit_path.map(hexToBytes);
+    }
+    catch {
+        return { valid: false, reason: 'hashes must be lowercase hex' };
+    }
+    if (leaf.length !== 32 || root.length !== 32 || path.some((n) => n.length !== 32)) {
+        return { valid: false, reason: 'every hash must be 32 bytes' };
+    }
+    let fn = p.leaf_index;
+    let sn = p.tree_size - 1;
+    let r = leaf;
+    for (const sibling of path) {
+        if (sn === 0)
+            return { valid: false, reason: 'audit_path is longer than the tree allows' };
+        if (fn % 2 === 1 || fn === sn) {
+            r = nodeHash(sibling, r);
+            while (fn !== 0 && fn % 2 === 0) {
+                fn >>= 1;
+                sn >>= 1;
+            }
+        }
+        else {
+            r = nodeHash(r, sibling);
+        }
+        fn >>= 1;
+        sn >>= 1;
+    }
+    if (sn !== 0)
+        return { valid: false, reason: 'audit_path is shorter than the tree requires' };
+    if (!bytesEqual(r, root))
+        return { valid: false, reason: 'computed root does not match root_hash' };
+    return { valid: true };
+}
+/**
+ * Verify that a later tree is an append-only extension of an earlier one.
+ *
+ * Follows RFC 6962 §2.1.2. This is the check that makes a log a log: without
+ * it, an issuer can publish a head, then publish another that quietly drops or
+ * reorders what came before.
+ */
+function verifyConsistencyProof(proof) {
+    if (typeof proof !== 'object' || proof === null) {
+        return { valid: false, reason: 'proof is not an object' };
+    }
+    const p = proof;
+    if (!isSafeSize(p.old_size) || p.old_size < 1) {
+        return { valid: false, reason: 'old_size must be a positive integer' };
+    }
+    if (!isSafeSize(p.new_size) || p.new_size < p.old_size) {
+        return { valid: false, reason: 'new_size must be an integer at least old_size' };
+    }
+    if (!Array.isArray(p.consistency_path)) {
+        return { valid: false, reason: 'consistency_path must be an array' };
+    }
+    let oldRoot;
+    let newRoot;
+    let nodes;
+    try {
+        oldRoot = hexToBytes(p.old_root);
+        newRoot = hexToBytes(p.new_root);
+        nodes = p.consistency_path.map(hexToBytes);
+    }
+    catch {
+        return { valid: false, reason: 'hashes must be lowercase hex' };
+    }
+    if (oldRoot.length !== 32 || newRoot.length !== 32 || nodes.some((n) => n.length !== 32)) {
+        return { valid: false, reason: 'every hash must be 32 bytes' };
+    }
+    const oldSize = p.old_size;
+    const newSize = p.new_size;
+    if (oldSize === newSize) {
+        // Nothing appended. The roots must be identical and a proof would be noise.
+        if (nodes.length > 0)
+            return { valid: false, reason: 'no consistency_path is expected when the tree has not grown' };
+        if (!bytesEqual(oldRoot, newRoot))
+            return { valid: false, reason: 'tree did not grow but roots differ' };
+        return { valid: true };
+    }
+    // When old_size is an exact power of two its root is the first node of the
+    // path, and RFC 6962 omits it because the verifier already holds it.
+    if ((oldSize & (oldSize - 1)) === 0)
+        nodes = [oldRoot, ...nodes];
+    if (nodes.length === 0)
+        return { valid: false, reason: 'consistency_path is empty' };
+    let fn = oldSize - 1;
+    let sn = newSize - 1;
+    while (fn % 2 === 1) {
+        fn >>= 1;
+        sn >>= 1;
+    }
+    let fr = nodes[0];
+    let sr = nodes[0];
+    for (const node of nodes.slice(1)) {
+        if (sn === 0)
+            return { valid: false, reason: 'consistency_path is longer than the trees allow' };
+        if (fn % 2 === 1 || fn === sn) {
+            fr = nodeHash(node, fr);
+            sr = nodeHash(node, sr);
+            while (fn !== 0 && fn % 2 === 0) {
+                fn >>= 1;
+                sn >>= 1;
+            }
+        }
+        else {
+            sr = nodeHash(sr, node);
+        }
+        fn >>= 1;
+        sn >>= 1;
+    }
+    if (sn !== 0)
+        return { valid: false, reason: 'consistency_path is shorter than the trees require' };
+    if (!bytesEqual(fr, oldRoot))
+        return { valid: false, reason: 'computed old root does not match old_root' };
+    if (!bytesEqual(sr, newRoot))
+        return { valid: false, reason: 'computed new root does not match new_root' };
+    return { valid: true };
+}
+/**
+ * Verify the Ed25519 signature on a signed tree head.
+ *
+ * The head is signed over a fixed byte string rather than JSON, so there is no
+ * canonicalisation question here and no opportunity for the encoding-level
+ * divergence that JSON payloads invite.
+ */
+function verifySignedTreeHead(head, trustedPublicKey) {
+    if (typeof head !== 'object' || head === null) {
+        return { valid: false, reason: 'head is not an object' };
+    }
+    const h = head;
+    if (typeof h.org_id !== 'string' || !isSafeSize(h.tree_size)) {
+        return { valid: false, reason: 'head must carry org_id and an integer tree_size' };
+    }
+    if (typeof h.root_hash !== 'string' || typeof h.signature !== 'string') {
+        return { valid: false, reason: 'head must carry root_hash and signature' };
+    }
+    if (!/^[A-Za-z0-9_-]+$/.test(h.signature) || !/^[A-Za-z0-9_-]+$/.test(trustedPublicKey)) {
+        return { valid: false, reason: 'signature and key must be base64url without padding' };
+    }
+    let root;
+    try {
+        root = hexToBytes(h.root_hash);
+    }
+    catch {
+        return { valid: false, reason: 'root_hash must be lowercase hex' };
+    }
+    if (root.length !== 32)
+        return { valid: false, reason: 'root_hash must be 32 bytes' };
+    const prefix = new TextEncoder().encode(`aqta-sth-v1|${h.org_id}|${h.tree_size}|`);
+    const signed = new Uint8Array(prefix.length + root.length);
+    signed.set(prefix, 0);
+    signed.set(root, prefix.length);
+    const b64url = (s) => new Uint8Array(Buffer.from(s, 'base64url'));
+    let sig;
+    let pub;
+    try {
+        sig = b64url(h.signature);
+        pub = b64url(trustedPublicKey);
+    }
+    catch {
+        return { valid: false, reason: 'signature decode error' };
+    }
+    if (sig.length !== 64)
+        return { valid: false, reason: 'signature length != 64 bytes' };
+    if (pub.length !== 32)
+        return { valid: false, reason: 'public key length != 32 bytes' };
+    if (!tweetnacl_1.default.sign.detached.verify(signed, sig, pub)) {
+        return { valid: false, reason: 'tree head signature check failed' };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=transparency.js.map

package/dist/transparency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transparency.js","sourceRoot":"","sources":["../src/transparency.ts"],"names":[],"mappings":";;;;;AA2DA,4BAKC;AA0CD,oDAmDC;AASD,wDA0EC;AASD,oDA4CC;AArSD;;;;;;;;;;;;;;;GAeG;AACH,0DAA6B;AAC7B,6CAAyC;AAEzC;;;;;GAKG;AACH,SAAS,MAAM,CAAC,IAAgB;IAC9B,OAAO,IAAI,UAAU,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,uCAAuC;AACvC,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,sCAAsC;AACtC,SAAS,QAAQ,CAAC,IAAgB,EAAE,KAAiB;IACnD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,yFAAyF;AACzF,SAAgB,QAAQ,CAAC,KAAiB;IACxC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AA8BD,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAK,CAAC,CAAC,UAAqB,IAAK,CAAC,CAAC,SAAoB,EAAE,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,IAAgB,CAAC;IACrB,IAAI,IAAgB,CAAC;IACrB,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,SAAmB,CAAC,CAAC;QACzC,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,SAAmB,CAAC,CAAC;QACzC,IAAI,GAAI,CAAC,CAAC,UAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,EAAE,GAAG,CAAC,CAAC,UAAoB,CAAC;IAChC,IAAI,EAAE,GAAI,CAAC,CAAC,SAAoB,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEb,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAC3F,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzB,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,EAAE,KAAK,CAAC,CAAC;gBACT,EAAE,KAAK,CAAC,CAAC;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,EAAE,KAAK,CAAC,CAAC;QACT,EAAE,KAAK,CAAC,CAAC;IACX,CAAC;IAED,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC9F,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACpG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB,CAAC,KAAc;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,CAAC,QAAmB,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,CAAC,QAAmB,GAAI,CAAC,CAAC,QAAmB,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,OAAmB,CAAC;IACxB,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAkB,CAAC,CAAC;QAC3C,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAkB,CAAC,CAAC;QAC3C,KAAK,GAAI,CAAC,CAAC,gBAA6B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,QAAkB,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,CAAC,QAAkB,CAAC;IAErC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,4EAA4E;QAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QACrH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QACzG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,KAAK,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAErF,IAAI,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC;IACrB,IAAI,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC;IACrB,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,EAAE,KAAK,CAAC,CAAC;QACT,EAAE,KAAK,CAAC,CAAC;IACX,CAAC;IAED,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;QACjG,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxB,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,EAAE,KAAK,CAAC,CAAC;gBACT,EAAE,KAAK,CAAC,CAAC;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,EAAE,KAAK,CAAC,CAAC;QACT,EAAE,KAAK,CAAC,CAAC;IACX,CAAC;IAED,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IACpG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC3G,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC3G,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,IAAa,EAAE,gBAAwB;IAC1E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAEtF,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAE1E,IAAI,GAAe,CAAC;IACpB,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1B,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACvF,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACxF,IAAI,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/verify-proof.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=verify-proof.d.ts.map

package/dist/verify-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-proof.d.ts","sourceRoot":"","sources":["../src/verify-proof.ts"],"names":[],"mappings":""}

package/dist/verify-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-proof.js","sourceRoot":"","sources":["../src/verify-proof.ts"],"names":[],"mappings":";;;AACA;;;;;;;;;;;;;;;GAeG;AACH,2BAAkC;AAClC,uDAI2B;AAE3B,MAAM,KAAK,GAAG;;;;;;;;;CASb,CAAC;AAEF,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,GAAuB,CAAC;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,OAAO;YAAE,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9B,IAAI,CAAC,KAAK,QAAQ;YAAE,MAAM,GAAG,IAAI,CAAC;aAClC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,KAAK,GAAG,IAAI,CAAC;aAChD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,CAAC,CAAC;aACtB,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,qEAAqE;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAA4B,CAAC;IAE5G,IAAI,IAAY,CAAC;IACjB,IAAI,MAA2C,CAAC;IAEhD,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,GAAG,iBAAiB,CAAC;QACzB,MAAM,GAAG,IAAA,sCAAoB,EAAC,KAAK,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,kBAAkB,IAAI,KAAK,EAAE,CAAC;QACvC,IAAI,GAAG,mBAAmB,CAAC;QAC3B,MAAM,GAAG,IAAA,wCAAsB,EAAC,KAAK,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,WAAW,IAAI,KAAK,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;QACxD,IAAI,GAAG,kBAAkB,CAAC;QAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,IAAA,sCAAoB,EAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0GAA0G,CAC3G,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI;gBACJ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,qBAAqB;aACrE,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,IAAI,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aqta-verify-receipt",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Offline CLI and library for Seal records: ATTESTATION-v1 for what an AI decided, ACTION-v1 for what an agent was allowed to do, refusals included. Ed25519, checked against a published key with no account and no Aqta server.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -10,14 +10,7 @@
   },
   "files": [
     "bin/",
-    "dist/cli.js",
-    "dist/cli.js.map",
-    "dist/cli.d.ts",
-    "dist/cli.d.ts.map",
-    "dist/index.js",
-    "dist/index.js.map",
-    "dist/index.d.ts",
-    "dist/index.d.ts.map",
+    "dist/",
     "README.md",
     "LICENSE"
   ],