burnledger 0.4.0 → 0.6.0

package/src/web-verifier.ts

@@ -4,9 +4,9 @@
  * Imports the leaf modules directly rather than re-exporting from
  * `index.browser.ts`: that entry pulls in the HTTP client, which imports
  * `node:fs/promises` and cannot be bundled for a browser at all. The page needs
- * four functions, so this exposes four functions — the surface a relying party's
- * browser is handed is then something you can read in one screen instead of
- * inferring from a minified artifact.
+ * a handful of functions and two error codes, so that is what this exposes — the surface
+ * a relying party's browser is handed is then something you can read in one
+ * screen instead of inferring from a minified artifact.
  *
  * Built by `scripts/build-web-verifier.mjs`. The bundle this replaces was built
  * by hand once and never regenerated, and had drifted into disagreeing with the
@@ -15,14 +15,24 @@
  * offset (#457). It also contained `ed25519Supported`, which existed in no
  * source file anywhere in the repository.
  */
+import {
+  ANCHOR_CONFIRMED,
+  ANCHOR_INCONSISTENT,
+  ANCHOR_UNVERIFIED,
+  checkStatementAnchor as _checkStatementAnchor,
+} from "./anchor.js";
+import type { AnchorResult } from "./anchor.js";
 import { browserCrypto } from "./crypto-browser.js";
+import { CERTIFICATE_REVOKED, UNSUPPORTED_FORMAT_VERSION } from "./errors.js";
 import {
   verifyCertificate as _verifyCertificate,
   verifyCertificateWithStatus as _verifyCertificateWithStatus,
   verifyTransparency as _verifyTransparency,
   publicKeyFromHex as _publicKeyFromHex,
 } from "./verify.js";
-import type { PublicKeyInfo } from "./verify.js";
+import type { PublicKeyInfo, PublicKeyOptions } from "./verify.js";
+import { parseKeyListDocument, verifyKeyList as _verifyKeyList } from "./keys.js";
+import type { KeyListDocument, KeyListEvidence } from "./keys.js";
 import type { VerificationResult, TransparencyResult } from "./models.js";
 
 type Cert = Record<string, unknown>;
@@ -50,6 +60,33 @@ export function verifyCertificateWithStatus(
   return _verifyCertificateWithStatus(browserCrypto, certificate, publicKeys, status, now);
 }
 
+/**
+ * The `code` a VerificationError carries when a status statement verified and
+ * says REVOKED. The page needs it to tell that fact apart from a statement it
+ * could not authenticate, which is a different claim and must not be painted
+ * as a revocation.
+ */
+export { CERTIFICATE_REVOKED, UNSUPPORTED_FORMAT_VERSION };
+
+/**
+ * Test a status statement's signed log anchor against the log's own signed
+ * head, exactly as `burnledger check --online` does (see anchor.ts). The page
+ * calls this after it has fetched and authenticated a statement, with `apiUrl`
+ * empty so the requests are same-origin like the status fetch itself. Until
+ * this was exported the browser re-verified the statement's signature and
+ * nothing else, so a statement anchored to a tree the log never had passed
+ * here and failed in every CLI.
+ */
+export function checkStatementAnchor(
+  apiUrl: string,
+  statement: Record<string, unknown>,
+  key: PublicKeyInfo,
+): Promise<AnchorResult> {
+  return _checkStatementAnchor(browserCrypto, apiUrl, statement, key);
+}
+
+export { ANCHOR_CONFIRMED, ANCHOR_INCONSISTENT, ANCHOR_UNVERIFIED };
+
 /** Verify the transparency proof embedded in a certificate. */
 export function verifyTransparency(
   certificate: Cert,
@@ -58,10 +95,26 @@ export function verifyTransparency(
   return _verifyTransparency(browserCrypto, certificate, publicKeys);
 }
 
+/**
+ * Read the published key set in any shape the endpoint has served, keeping
+ * the signed key_list.v3 statement fields when present (ADR-017 §5a).
+ */
+export { parseKeyListDocument };
+
+/**
+ * What the published key set establishes about the key STATUSES: whether it
+ * carried a signed statement, and how that statement verified at `now`
+ * against the key it names inside itself. The key identities are
+ * self-checking either way; this is about the mutable half.
+ */
+export function verifyKeyList(doc: KeyListDocument, now?: Date): Promise<KeyListEvidence> {
+  return _verifyKeyList(browserCrypto, doc, now ?? new Date());
+}
+
 /** Construct a PublicKeyInfo from a hex-encoded Ed25519 public key. */
 export function publicKeyFromHex(
   hexKey: string,
-  opts?: { revoked?: boolean },
+  opts?: PublicKeyOptions,
 ): Promise<PublicKeyInfo> {
   return _publicKeyFromHex(browserCrypto, hexKey, opts);
 }