burnledger 0.2.2 → 0.3.0

package/dist/esm/verify.d.ts

@@ -9,7 +9,9 @@
  *   - The payload builders normalize both formats to lowercase hex strings.
  *   - Timestamps in payloads use second-precision UTC: "YYYY-MM-DDTHH:MM:SSZ".
  *   - RFC 8785 canonical JSON: sorted keys recursively, no whitespace.
- *   - Transparency leaf = SHA-256(0x00 || issuanceBytes(cert)), NOT the
+ *   - Transparency leaf = SHA-256(0x00 || logLeafPayload), where the payload
+ *     commits to entry_type, certificate_id, SHA-256(issuanceBytes(cert)) and
+ *     appended_at (ADR-016 §4). NOT the
  *     certificate signing payload. issuanceBytes reconstructs json.Marshal
  *     output at issuance time (transparency_status=PENDING, no transparency).
  */
@@ -41,10 +43,62 @@ export declare function verifyTransparency(crypto: CryptoOps, certificate: Cert,
  * verification (#C-01).
  */
 export declare function issuanceBytes(certificate: Cert): Uint8Array;
+/** Normalize a certificate timestamp to the UTC form Go signs.
+ *
+ * Go builds every payload timestamp as `t.UTC().Format("2006-01-02T15:04:05Z")`
+ * (core/payload.go) on a value encoding/json already parsed as strict RFC 3339.
+ * This reproduces both halves — the same acceptance rules and the same
+ * conversion — because the two are one contract, not two.
+ *
+ * It must convert, never truncate. `12:00:00+05:00` and `12:00:00Z` are six
+ * hours apart; treating them as the same string made this verifier accept a
+ * certificate whose attestation window had been re-labelled to a different
+ * instant, and reject genuine certificates issued by a server on local time
+ * (#452). Input Go would refuse to parse is refused here rather than
+ * string-surgered into something that verifies.
+ *
+ * `null`/`undefined` — an explicit JSON null, or a key Go's struct has and the
+ * document does not — is Go's zero time, not an error.
+ *
+ * Exported from this module so the timestamp_vectors.json suite can diff it
+ * against Go directly. It is deliberately not re-exported from index.ts, so it
+ * is not part of the published package surface.
+ */
+export declare function formatTimestamp(ts: unknown): string;
 /** Verify a Merkle consistency proof (RFC 6962 Section 2.1.4).
  *
  * Port of Go's VerifyConsistency / Python's _verify_consistency.
  */
 export declare function verifyConsistency(crypto: CryptoOps, oldSize: number, newSize: number, oldRoot: Uint8Array, newRoot: Uint8Array, proof: Uint8Array[]): Promise<boolean>;
+/**
+ * Port of Go's BuildCertificateStatusPayload.
+ *
+ * Optional fields are omitted, never emitted as null: the issuer omits them, so
+ * a verifier that emitted nulls would rebuild different bytes and reject a
+ * genuine statement.
+ */
+export declare function buildCertificateStatusPayload(stmt: Record<string, unknown>): Uint8Array;
+/** The verdict when a certificate verified but nothing said whether it was revoked. */
+export declare const VALID_REVOCATION_UNKNOWN = "VALID_REVOCATION_UNKNOWN";
+/**
+ * Verify a certificate and, separately, what a statement says about its
+ * revocation.
+ *
+ * A signature commits to bytes at an instant; revocation is discovered later,
+ * so no edit to the signed certificate can express it. The statement is a
+ * separate short-lived document — fetch it from
+ * `GET /v1/certificates/{id}/status`, or read `status_statement` from the
+ * certificate response, where it is stapled for exactly this purpose.
+ *
+ * | input | result |
+ * |---|---|
+ * | fresh statement, REVOKED | throws VerificationError |
+ * | fresh statement, ACTIVE | `"VALID"` |
+ * | absent or expired statement | `"VALID_REVOCATION_UNKNOWN"` |
+ *
+ * The last row is the point: `verifyCertificate` answers VALID there, which
+ * reads as "not revoked" and is not something it checked.
+ */
+export declare function verifyCertificateWithStatus(crypto: CryptoOps, certificate: Cert, publicKeys: Map<string, PublicKeyInfo>, status?: Record<string, unknown> | null, now?: Date): Promise<string>;
 export {};
 //# sourceMappingURL=verify.d.ts.map

package/dist/esm/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAe1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CASlD;AAYD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQpD;AAoCD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3B,OAAO,CAAC,aAAa,CAAC,CAQxB;AAMD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAsD7B;AAED,+DAA+D;AAC/D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAwC7B;AAMD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAK3D;AAsSD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAgDlB"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAkB1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CASlD;AAYD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQpD;AAoCD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3B,OAAO,CAAC,aAAa,CAAC,CAQxB;AAMD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CA2F7B;AAKD,+DAA+D;AAC/D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAyE7B;AAMD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAK3D;AAoFD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAMnD;AAgVD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAGD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,UAAU,CAoBZ;AAED,uFAAuF;AACvF,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAkDjB"}