burnledger 0.7.0 → 0.8.1

package/dist/cjs/customer-keys.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Customer key groups (ADR-025 §2), computed on the customer's own machine.
+ *
+ * WHY THIS IS CLIENT-SIDE AND NOT AN API CALL. The private halves never leave
+ * the customer's machines -- that is the entire point of the mechanism. What a
+ * customer needs from us is not a service that computes their key id, but the
+ * ability to compute it themselves and compare it against the id the enclave
+ * signed. An id returned over HTTP would be an id the parent could choose, and
+ * the one comparison this design rests on would be checking our answer against
+ * our answer.
+ *
+ * WHY IT MUST MATCH GO EXACTLY. `customer_key_id` is derived independently by
+ * the enclave and by the customer. If the two derivations disagree by so much
+ * as a JSON separator, enrollment SUCCEEDS, the enclave signs a statement
+ * naming an id, and the customer's comparison fails -- indistinguishable, from
+ * where they are standing, from a parent having substituted their key. Every
+ * expectation in tests/customer-key-parity.test.ts comes from a corpus the Go
+ * generator writes by calling core itself.
+ */
+import type { CryptoOps } from "./crypto.js";
+/**
+ * Mirrors core.CustomerKeyIDPrefix. It distinguishes a customer's key id from
+ * an issuer key id, which are otherwise the same shape and would be confusable
+ * in a log line at exactly the wrong moment.
+ */
+export declare const CUSTOMER_KEY_ID_PREFIX = "cust_k_";
+export declare const PAYLOAD_TYPE_KEY_ROTATION_REQUEST = "burnledger.key_rotation_request.v1";
+/** Mirrors core.MaxCustomerKeyGroupMembers. */
+export declare const MAX_CUSTOMER_KEY_GROUP_MEMBERS = 16;
+/** A group that cannot be enrolled, for a reason stated in the message. */
+export declare class InvalidKeyGroupError extends Error {
+    constructor(message: string);
+}
+export interface CustomerKeyGroup {
+    /** How many distinct members must sign. 1 <= threshold <= members.length. */
+    threshold: number;
+    /**
+     * The enrolled public keys. Order is not significant: the id sorts the
+     * fingerprints, so two customers who list the same keys in a different order
+     * enrol the same group rather than two indistinguishable ones.
+     */
+    members: Uint8Array[];
+}
+/** hex(SHA-256(public key)) -- a member's identity inside a group. */
+export declare function memberFingerprint(crypto: CryptoOps, publicKey: Uint8Array): Promise<string>;
+/** Throws InvalidKeyGroupError unless this group could ever be used. */
+export declare function validateKeyGroup(crypto: CryptoOps, group: CustomerKeyGroup): Promise<void>;
+/** The members' fingerprints, sorted, so the id does not depend on order. */
+export declare function memberFingerprints(crypto: CryptoOps, group: CustomerKeyGroup): Promise<string[]>;
+/**
+ * The id the enclave will compute for this group.
+ *
+ * Throws rather than returning an id for a group that could never be enrolled:
+ * an id for an unusable group is a value a caller would go on to compare
+ * against, and it would never match anything.
+ */
+export declare function customerKeyId(crypto: CryptoOps, group: CustomerKeyGroup): Promise<string>;
+/**
+ * The canonical bytes the OUTGOING group's members sign to authorise a rotation.
+ *
+ * This is the only payload in the scheme signed by the customer rather than by
+ * the enclave, so it is the only one where a signature captured elsewhere could
+ * be replayed into the mechanism -- hence its own payload type.
+ *
+ * Both ids are bound, not just the successor: a statement naming only the
+ * incoming key could be lifted onto a different predecessor, re-presenting the
+ * same signatures as though another group had approved it.
+ */
+export declare function buildKeyRotationRequestPayload(request: {
+    assertedTeamId: string;
+    prevKeyId: string;
+    nextKeyId: string;
+}): Uint8Array;
+//# sourceMappingURL=customer-keys.d.ts.map

package/dist/cjs/customer-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-keys.d.ts","sourceRoot":"","sources":["../../src/customer-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAShD,eAAO,MAAM,iCAAiC,uCAAuC,CAAC;AAEtF,+CAA+C;AAC/C,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAIjD,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAMD,sEAAsE;AACtE,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED,6EAA6E;AAC7E,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,UAAU,CAiBb"}

package/dist/cjs/customer-keys.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * Customer key groups (ADR-025 §2), computed on the customer's own machine.
+ *
+ * WHY THIS IS CLIENT-SIDE AND NOT AN API CALL. The private halves never leave
+ * the customer's machines -- that is the entire point of the mechanism. What a
+ * customer needs from us is not a service that computes their key id, but the
+ * ability to compute it themselves and compare it against the id the enclave
+ * signed. An id returned over HTTP would be an id the parent could choose, and
+ * the one comparison this design rests on would be checking our answer against
+ * our answer.
+ *
+ * WHY IT MUST MATCH GO EXACTLY. `customer_key_id` is derived independently by
+ * the enclave and by the customer. If the two derivations disagree by so much
+ * as a JSON separator, enrollment SUCCEEDS, the enclave signs a statement
+ * naming an id, and the customer's comparison fails -- indistinguishable, from
+ * where they are standing, from a parent having substituted their key. Every
+ * expectation in tests/customer-key-parity.test.ts comes from a corpus the Go
+ * generator writes by calling core itself.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidKeyGroupError = exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS = exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST = exports.CUSTOMER_KEY_ID_PREFIX = void 0;
+exports.memberFingerprint = memberFingerprint;
+exports.validateKeyGroup = validateKeyGroup;
+exports.memberFingerprints = memberFingerprints;
+exports.customerKeyId = customerKeyId;
+exports.buildKeyRotationRequestPayload = buildKeyRotationRequestPayload;
+const verify_js_1 = require("./verify.js");
+/**
+ * Mirrors core.CustomerKeyIDPrefix. It distinguishes a customer's key id from
+ * an issuer key id, which are otherwise the same shape and would be confusable
+ * in a log line at exactly the wrong moment.
+ */
+exports.CUSTOMER_KEY_ID_PREFIX = "cust_k_";
+/**
+ * Mirrors core.payloadTypeCustomerKeyGroup. Unexported in Go because it is
+ * never signed or transmitted -- only hashed -- but it IS inside the hash, so a
+ * reimplementation that omits it computes a different id for every group.
+ */
+const PAYLOAD_TYPE_CUSTOMER_KEY_GROUP = "burnledger.customer_key_group.v1";
+exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST = "burnledger.key_rotation_request.v1";
+/** Mirrors core.MaxCustomerKeyGroupMembers. */
+exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS = 16;
+const ED25519_PUBLIC_KEY_SIZE = 32;
+/** A group that cannot be enrolled, for a reason stated in the message. */
+class InvalidKeyGroupError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidKeyGroupError";
+    }
+}
+exports.InvalidKeyGroupError = InvalidKeyGroupError;
+function toHex(bytes) {
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+/** hex(SHA-256(public key)) -- a member's identity inside a group. */
+async function memberFingerprint(crypto, publicKey) {
+    return toHex(await crypto.sha256(publicKey));
+}
+/** Throws InvalidKeyGroupError unless this group could ever be used. */
+async function validateKeyGroup(crypto, group) {
+    if (group.members.length === 0) {
+        throw new InvalidKeyGroupError("a customer key group needs at least one member");
+    }
+    if (group.members.length > exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS) {
+        throw new InvalidKeyGroupError(`a customer key group may have at most ${exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS} members, ` +
+            `got ${group.members.length}`);
+    }
+    if (!Number.isInteger(group.threshold) ||
+        group.threshold < 1 ||
+        group.threshold > group.members.length) {
+        throw new InvalidKeyGroupError(`threshold ${group.threshold} is not between 1 and the ${group.members.length} members`);
+    }
+    const seen = new Set();
+    for (const member of group.members) {
+        if (member.length !== ED25519_PUBLIC_KEY_SIZE) {
+            throw new InvalidKeyGroupError(`every member must be a ${ED25519_PUBLIC_KEY_SIZE}-byte Ed25519 key`);
+        }
+        const fingerprint = await memberFingerprint(crypto, member);
+        if (seen.has(fingerprint)) {
+            // A repeated member would let one holder satisfy a threshold meant to
+            // require several, which is the entire point of one.
+            throw new InvalidKeyGroupError("the same member key is listed twice");
+        }
+        seen.add(fingerprint);
+    }
+}
+/** The members' fingerprints, sorted, so the id does not depend on order. */
+async function memberFingerprints(crypto, group) {
+    const out = [];
+    for (const member of group.members) {
+        out.push(await memberFingerprint(crypto, member));
+    }
+    return out.sort();
+}
+/**
+ * The id the enclave will compute for this group.
+ *
+ * Throws rather than returning an id for a group that could never be enrolled:
+ * an id for an unusable group is a value a caller would go on to compare
+ * against, and it would never match anything.
+ */
+async function customerKeyId(crypto, group) {
+    await validateKeyGroup(crypto, group);
+    const document = {
+        member_key_ids: await memberFingerprints(crypto, group),
+        payload_type: PAYLOAD_TYPE_CUSTOMER_KEY_GROUP,
+        threshold: group.threshold,
+    };
+    return exports.CUSTOMER_KEY_ID_PREFIX + toHex(await crypto.sha256((0, verify_js_1.canonicalJson)(document)));
+}
+/**
+ * The canonical bytes the OUTGOING group's members sign to authorise a rotation.
+ *
+ * This is the only payload in the scheme signed by the customer rather than by
+ * the enclave, so it is the only one where a signature captured elsewhere could
+ * be replayed into the mechanism -- hence its own payload type.
+ *
+ * Both ids are bound, not just the successor: a statement naming only the
+ * incoming key could be lifted onto a different predecessor, re-presenting the
+ * same signatures as though another group had approved it.
+ */
+function buildKeyRotationRequestPayload(request) {
+    if (!request.prevKeyId || !request.nextKeyId) {
+        throw new Error("a rotation request names both the key being replaced and its replacement");
+    }
+    if (request.prevKeyId === request.nextKeyId) {
+        // A self-rotation is a cycle in the chain the enclave walks, and it walks
+        // without a visited set.
+        throw new Error("a rotation request cannot name the same key as both predecessor and successor");
+    }
+    return (0, verify_js_1.canonicalJson)({
+        asserted_team_id: request.assertedTeamId,
+        next_key_id: request.nextKeyId,
+        payload_type: exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST,
+        prev_key_id: request.prevKeyId,
+    });
+}
+//# sourceMappingURL=customer-keys.js.map

package/dist/cjs/customer-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-keys.js","sourceRoot":"","sources":["../../src/customer-keys.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;AAEH,2CAA4C;AAG5C;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,SAAS,CAAC;AAEhD;;;;GAIG;AACH,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE9D,QAAA,iCAAiC,GAAG,oCAAoC,CAAC;AAEtF,+CAA+C;AAClC,QAAA,8BAA8B,GAAG,EAAE,CAAC;AAEjD,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,2EAA2E;AAC3E,0BAAkC,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;;AAaD,SAAS,KAAK,CAAC,KAAiB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,sEAAsE;AAC/D,KAAK,4BACV,MAAiB,EACjB,SAAqB;IAErB,OAAO,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,wEAAwE;AACjE,KAAK,2BACV,MAAiB,EACjB,KAAuB;IAEvB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,oBAAoB,CAAC,gDAAgD,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,QAAA,8BAA8B,EAAE,CAAC;QAC1D,MAAM,IAAI,oBAAoB,CAC5B,yCAAyC,QAAA,8BAA8B,YAAY;YACjF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAChC,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,CAAC;QACnB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EACtC,CAAC;QACD,MAAM,IAAI,oBAAoB,CAC5B,aAAa,KAAK,CAAC,SAAS,6BAA6B,KAAK,CAAC,OAAO,CAAC,MAAM,UAAU,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC9C,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,uBAAuB,mBAAmB,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1B,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,6EAA6E;AACtE,KAAK,6BACV,MAAiB,EACjB,KAAuB;IAEvB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACI,KAAK,wBACV,MAAiB,EACjB,KAAuB;IAEvB,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG;QACf,cAAc,EAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;QACvD,YAAY,EAAE,+BAA+B;QAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,QAAA,sBAAsB,GAAG,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,yBAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;;;;;GAUG;AACH,wCAA+C,OAI9C;IACC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,yBAAa,EAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC,cAAc;QACxC,WAAW,EAAE,OAAO,CAAC,SAAS;QAC9B,YAAY,EAAE,QAAA,iCAAiC;QAC/C,WAAW,EAAE,OAAO,CAAC,SAAS;KAC/B,CAAC,CAAC;AACL,CAAC"}

package/dist/cjs/index.d.ts

@@ -48,4 +48,6 @@ export { verifyWebhookSignature, isTimestampFresh } from "./webhooks.js";
  */
 export { EnclaveAttestationError, ENVELOPE_MAGIC, HEADER_SIZE, NITRO_ROOT_G1_PEM, sealConnectionConfig, sealToKey, verifyEnclaveConfigSealKey, } from "./enclave-seal.js";
 export type { SealOptions } from "./enclave-seal.js";
+export { CUSTOMER_KEY_ID_PREFIX, InvalidKeyGroupError, MAX_CUSTOMER_KEY_GROUP_MEMBERS, PAYLOAD_TYPE_KEY_ROTATION_REQUEST, buildKeyRotationRequestPayload, customerKeyId, memberFingerprint, memberFingerprints, validateKeyGroup, } from "./customer-keys.js";
+export type { CustomerKeyGroup } from "./customer-keys.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,MAAM,EACN,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,OAAO,EACP,cAAc,EACd,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,YAAY,GACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAElF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUpE,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE1E,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;;;GAOG;AACH,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,MAAM,EACN,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,OAAO,EACP,cAAc,EACd,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,YAAY,GACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAElF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUpE,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE1E,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;;;GAOG;AACH,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,8BAA8B,EAC9B,iCAAiC,EACjC,8BAA8B,EAC9B,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/cjs/index.js

@@ -1,7 +1,7 @@
 "use strict";
 /** BurnLedger TypeScript SDK — public API (Node.js entry point). */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyEnclaveConfigSealKey = exports.sealToKey = exports.sealConnectionConfig = exports.NITRO_ROOT_G1_PEM = exports.HEADER_SIZE = exports.ENVELOPE_MAGIC = exports.EnclaveAttestationError = exports.isTimestampFresh = exports.verifyWebhookSignature = exports.bytesToHex = exports.hexToBytes = exports.issuanceBytes = exports.Paginator = exports.parseWebhook = exports.parseCertificateResponse = exports.parseSystem = exports.Transport = exports.UNSUPPORTED_FORMAT_VERSION = exports.CERTIFICATE_REVOKED = exports.VerificationError = exports.TimeoutError = exports.ServerError = exports.RateLimitError = exports.ValidationError = exports.ConflictError = exports.NotFoundError = exports.AuthenticationError = exports.ApiError = exports.BurnLedgerError = exports.MAX_BATCH_REVOKE = exports.BurnLedger = void 0;
+exports.validateKeyGroup = exports.memberFingerprints = exports.memberFingerprint = exports.customerKeyId = exports.buildKeyRotationRequestPayload = exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST = exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS = exports.InvalidKeyGroupError = exports.CUSTOMER_KEY_ID_PREFIX = exports.verifyEnclaveConfigSealKey = exports.sealToKey = exports.sealConnectionConfig = exports.NITRO_ROOT_G1_PEM = exports.HEADER_SIZE = exports.ENVELOPE_MAGIC = exports.EnclaveAttestationError = exports.isTimestampFresh = exports.verifyWebhookSignature = exports.bytesToHex = exports.hexToBytes = exports.issuanceBytes = exports.Paginator = exports.parseWebhook = exports.parseCertificateResponse = exports.parseSystem = exports.Transport = exports.UNSUPPORTED_FORMAT_VERSION = exports.CERTIFICATE_REVOKED = exports.VerificationError = exports.TimeoutError = exports.ServerError = exports.RateLimitError = exports.ValidationError = exports.ConflictError = exports.NotFoundError = exports.AuthenticationError = exports.ApiError = exports.BurnLedgerError = exports.MAX_BATCH_REVOKE = exports.BurnLedger = void 0;
 exports.verifyCertificate = verifyCertificate;
 exports.verifyCertificateWithStatus = verifyCertificateWithStatus;
 exports.verifyTransparency = verifyTransparency;
@@ -91,4 +91,14 @@ Object.defineProperty(exports, "NITRO_ROOT_G1_PEM", { enumerable: true, get: fun
 Object.defineProperty(exports, "sealConnectionConfig", { enumerable: true, get: function () { return enclave_seal_js_1.sealConnectionConfig; } });
 Object.defineProperty(exports, "sealToKey", { enumerable: true, get: function () { return enclave_seal_js_1.sealToKey; } });
 Object.defineProperty(exports, "verifyEnclaveConfigSealKey", { enumerable: true, get: function () { return enclave_seal_js_1.verifyEnclaveConfigSealKey; } });
+var customer_keys_js_1 = require("./customer-keys.js");
+Object.defineProperty(exports, "CUSTOMER_KEY_ID_PREFIX", { enumerable: true, get: function () { return customer_keys_js_1.CUSTOMER_KEY_ID_PREFIX; } });
+Object.defineProperty(exports, "InvalidKeyGroupError", { enumerable: true, get: function () { return customer_keys_js_1.InvalidKeyGroupError; } });
+Object.defineProperty(exports, "MAX_CUSTOMER_KEY_GROUP_MEMBERS", { enumerable: true, get: function () { return customer_keys_js_1.MAX_CUSTOMER_KEY_GROUP_MEMBERS; } });
+Object.defineProperty(exports, "PAYLOAD_TYPE_KEY_ROTATION_REQUEST", { enumerable: true, get: function () { return customer_keys_js_1.PAYLOAD_TYPE_KEY_ROTATION_REQUEST; } });
+Object.defineProperty(exports, "buildKeyRotationRequestPayload", { enumerable: true, get: function () { return customer_keys_js_1.buildKeyRotationRequestPayload; } });
+Object.defineProperty(exports, "customerKeyId", { enumerable: true, get: function () { return customer_keys_js_1.customerKeyId; } });
+Object.defineProperty(exports, "memberFingerprint", { enumerable: true, get: function () { return customer_keys_js_1.memberFingerprint; } });
+Object.defineProperty(exports, "memberFingerprints", { enumerable: true, get: function () { return customer_keys_js_1.memberFingerprints; } });
+Object.defineProperty(exports, "validateKeyGroup", { enumerable: true, get: function () { return customer_keys_js_1.validateKeyGroup; } });
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,oEAAoE;;;;;;;;AAEpE,yCAA2D;AAAlD,uGAAA,UAAU,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAGrC,yCAaqB;AAZnB,4GAAA,eAAe,OAAA;AACf,qGAAA,QAAQ,OAAA;AACR,gHAAA,mBAAmB,OAAA;AACnB,0GAAA,aAAa,OAAA;AACb,0GAAA,aAAa,OAAA;AACb,4GAAA,eAAe,OAAA;AACf,2GAAA,cAAc,OAAA;AACd,wGAAA,WAAW,OAAA;AACX,yGAAA,YAAY,OAAA;AACZ,8GAAA,iBAAiB,OAAA;AACjB,gHAAA,mBAAmB,OAAA;AACnB,uHAAA,0BAA0B,OAAA;AAG5B,qCAAsC;AAA7B,oGAAA,SAAS,OAAA;AA8ClB,2EAA2E;AAC3E,0EAA0E;AAC1E,yCAAkF;AAAzE,wGAAA,WAAW,OAAA;AAAE,qHAAA,wBAAwB,OAAA;AAAE,yGAAA,YAAY,OAAA;AAE5D,iDAA4C;AAAnC,0GAAA,SAAS,OAAA;AAIlB,yCAAoE;AAA3D,0GAAA,aAAa,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,uGAAA,UAAU,OAAA;AAE9C,qDAA8C;AAC9C,2CAMqB;AAMrB,+DAA+D;AAC/D,2BACE,WAAiB,EACjB,UAAsC;IAEtC,OAAO,IAAA,6BAAkB,EAAC,2BAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,qCACE,WAAiB,EACjB,UAAsC,EACtC,MAAuC,EACvC,GAAU;IAEV,OAAO,IAAA,uCAA4B,EAAC,2BAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,+DAA+D;AAC/D,4BACE,WAAiB,EACjB,UAAsC;IAEtC,OAAO,IAAA,8BAAmB,EAAC,2BAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,0BACE,MAAc,EACd,IAAuB;IAEvB,OAAO,IAAA,4BAAiB,EAAC,2BAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,2BACE,OAAe,EACf,OAAe,EACf,OAAmB,EACnB,OAAmB,EACnB,KAAmB;IAEnB,OAAO,IAAA,6BAAkB,EAAC,2BAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,6CAAyE;AAAhE,qHAAA,sBAAsB,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAEjD;;;;;;;GAOG;AACH,qDAQ2B;AAPzB,0HAAA,uBAAuB,OAAA;AACvB,iHAAA,cAAc,OAAA;AACd,8GAAA,WAAW,OAAA;AACX,oHAAA,iBAAiB,OAAA;AACjB,uHAAA,oBAAoB,OAAA;AACpB,4GAAA,SAAS,OAAA;AACT,6HAAA,0BAA0B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,oEAAoE;;;;;;;;AAEpE,yCAA2D;AAAlD,uGAAA,UAAU,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAGrC,yCAaqB;AAZnB,4GAAA,eAAe,OAAA;AACf,qGAAA,QAAQ,OAAA;AACR,gHAAA,mBAAmB,OAAA;AACnB,0GAAA,aAAa,OAAA;AACb,0GAAA,aAAa,OAAA;AACb,4GAAA,eAAe,OAAA;AACf,2GAAA,cAAc,OAAA;AACd,wGAAA,WAAW,OAAA;AACX,yGAAA,YAAY,OAAA;AACZ,8GAAA,iBAAiB,OAAA;AACjB,gHAAA,mBAAmB,OAAA;AACnB,uHAAA,0BAA0B,OAAA;AAG5B,qCAAsC;AAA7B,oGAAA,SAAS,OAAA;AA8ClB,2EAA2E;AAC3E,0EAA0E;AAC1E,yCAAkF;AAAzE,wGAAA,WAAW,OAAA;AAAE,qHAAA,wBAAwB,OAAA;AAAE,yGAAA,YAAY,OAAA;AAE5D,iDAA4C;AAAnC,0GAAA,SAAS,OAAA;AAIlB,yCAAoE;AAA3D,0GAAA,aAAa,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,uGAAA,UAAU,OAAA;AAE9C,qDAA8C;AAC9C,2CAMqB;AAMrB,+DAA+D;AAC/D,2BACE,WAAiB,EACjB,UAAsC;IAEtC,OAAO,IAAA,6BAAkB,EAAC,2BAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,qCACE,WAAiB,EACjB,UAAsC,EACtC,MAAuC,EACvC,GAAU;IAEV,OAAO,IAAA,uCAA4B,EAAC,2BAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,+DAA+D;AAC/D,4BACE,WAAiB,EACjB,UAAsC;IAEtC,OAAO,IAAA,8BAAmB,EAAC,2BAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,0BACE,MAAc,EACd,IAAuB;IAEvB,OAAO,IAAA,4BAAiB,EAAC,2BAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,2BACE,OAAe,EACf,OAAe,EACf,OAAmB,EACnB,OAAmB,EACnB,KAAmB;IAEnB,OAAO,IAAA,6BAAkB,EAAC,2BAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,6CAAyE;AAAhE,qHAAA,sBAAsB,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAEjD;;;;;;;GAOG;AACH,qDAQ2B;AAPzB,0HAAA,uBAAuB,OAAA;AACvB,iHAAA,cAAc,OAAA;AACd,8GAAA,WAAW,OAAA;AACX,oHAAA,iBAAiB,OAAA;AACjB,uHAAA,oBAAoB,OAAA;AACpB,4GAAA,SAAS,OAAA;AACT,6HAAA,0BAA0B,OAAA;AAI5B,uDAU4B;AAT1B,0HAAA,sBAAsB,OAAA;AACtB,wHAAA,oBAAoB,OAAA;AACpB,kIAAA,8BAA8B,OAAA;AAC9B,qIAAA,iCAAiC,OAAA;AACjC,kIAAA,8BAA8B,OAAA;AAC9B,iHAAA,aAAa,OAAA;AACb,qHAAA,iBAAiB,OAAA;AACjB,sHAAA,kBAAkB,OAAA;AAClB,oHAAA,gBAAgB,OAAA"}

package/dist/cjs/verify.d.ts

@@ -125,6 +125,10 @@ export declare function verifyTransparency(crypto: CryptoOps, certificate: Cert,
  * verification (#C-01).
  */
 export declare function issuanceBytes(certificate: Cert): Uint8Array;
+/** Exported for tests/verify.test.ts, which keeps a second implementation of
+ * this and must be able to prove the two agree. Not re-exported from index.ts,
+ * so it stays off the published API. */
+export declare function canonicalJson(obj: unknown): Uint8Array;
 /** Normalize a certificate timestamp to the UTC form Go signs.
  *
  * Go builds every payload timestamp as `t.UTC().Format("2006-01-02T15:04:05Z")`

package/dist/cjs/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAO7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA2D1E;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAOjD,CAAC;AA2EH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CASlD;AAYD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQpD;AAoCD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;8CAE0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CAqBxB;AAED,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AACzE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAoBnE;;;sEAGsE;AACtE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAyB7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAUrF;AAiFD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CA0H7B;AAKD,+DAA+D;AAC/D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAwF7B;AAMD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAK3D;AAoFD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAMnD;AAiaD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAW9E;AAqFD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAGD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,UAAU,CAoBZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAqB5E;AAED,uFAAuF;AACvF,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CA8FjB"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAO7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAwE1E;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAQjD,CAAC;AAqIH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CASlD;AAYD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQpD;AAoCD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;8CAE0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CAqBxB;AAED,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AACzE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAoBnE;;;sEAGsE;AACtE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAyB7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAUrF;AAiFD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CA0H7B;AAKD,+DAA+D;AAC/D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAwF7B;AAMD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAK3D;AAMD;;wCAEwC;AACxC,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEtD;AA4ED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAMnD;AAyaD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAW9E;AAqFD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAGD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,UAAU,CAoBZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAqB5E;AAED,uFAAuF;AACvF,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CA8FjB"}

package/dist/cjs/verify.js

@@ -27,6 +27,7 @@ exports.certificateAnchor = certificateAnchor;
 exports.verifyCertificate = verifyCertificate;
 exports.verifyTransparency = verifyTransparency;
 exports.issuanceBytes = issuanceBytes;
+exports.canonicalJson = canonicalJson;
 exports.formatTimestamp = formatTimestamp;
 exports.buildTreeHeadPayload = buildTreeHeadPayload;
 exports.verifyConsistency = verifyConsistency;
@@ -80,6 +81,19 @@ const FORMAT_VERSION_V7 = "7.0";
 const PAYLOAD_TYPE_ATTESTATION_V8 = "burnledger.attestation.v8";
 const PAYLOAD_TYPE_VERIFICATION_RECORD_V8 = "burnledger.verification_record.v8";
 const FORMAT_VERSION_V8 = "8.0";
+// v9 adds two per-system fields, authorization and customer_key_id: whether the
+// enclave checked this system against a customer-signed registration
+// certificate (ADR-025 §4), and under which customer key group if it did.
+//
+// The attestation gains NO field at v9. Its tag still moves, because the tag
+// follows the record's version and the record's bytes changed — a v9
+// attestation rebuilt under burnledger.attestation.v8 is a different preimage.
+//
+// READ-ONLY IN THIS BUILD, mirroring core, for the same runbook-invariant-5
+// reason spelled out for v8 above.
+const PAYLOAD_TYPE_ATTESTATION_V9 = "burnledger.attestation.v9";
+const PAYLOAD_TYPE_VERIFICATION_RECORD_V9 = "burnledger.verification_record.v9";
+const FORMAT_VERSION_V9 = "9.0";
 const FORMAT_VERSION_V3 = "3.0";
 /**
  * The only signature scheme this SDK can check. A v7 record names its own
@@ -104,6 +118,7 @@ exports.KNOWN_FORMAT_VERSIONS = Object.freeze([
     FORMAT_VERSION_V6,
     FORMAT_VERSION_V7,
     FORMAT_VERSION_V8,
+    FORMAT_VERSION_V9,
 ]);
 /**
  * Returns the version, or throws if this SDK cannot read it.
@@ -160,6 +175,50 @@ function signatureCoversMeasuredTransport(version) {
 function signatureCoversRecoverableState(version) {
     return formatAtLeast(version, FORMAT_VERSION_V8);
 }
+/**
+ * Does this format sign the per-system authorization and customer_key_id?
+ *
+ * v9 onward. `authorization` is always present on a v9 record; `customer_key_id`
+ * only when it is certified, and OMITTED rather than empty when it is not — a
+ * key id of "" would sign as a value, and a reader comparing against their own
+ * key id must not have to know that "" means "nobody".
+ */
+function signatureCoversAuthorization(version) {
+    return formatAtLeast(version, FORMAT_VERSION_V9);
+}
+/** The two values a v9 record's per-system authorization may take. */
+const AUTHORIZATION_CERTIFIED = "certified";
+const AUTHORIZATION_NONE = "none";
+/**
+ * Read a v9 system's authorization and key id, refusing what core refuses.
+ *
+ * Port of checkAuthorization in core/payload.go. It runs on the VERIFY side
+ * too, and must: an unset or unrecognized value is not something to rebuild
+ * bytes from and report as a bad signature — the record is malformed. The two
+ * refused combinations are the ones that would be a lie rather than a shape
+ * error: certified naming nobody is ADR-025 §2's second-key attack with the
+ * evidence removed, and none naming somebody claims an authority that was
+ * never checked.
+ */
+function requireAuthorization(s, systemName) {
+    const a = s.authorization;
+    if (a !== AUTHORIZATION_CERTIFIED && a !== AUTHORIZATION_NONE) {
+        throw new errors_js_1.VerificationError(`system ${JSON.stringify(systemName)}: authorization is ${JSON.stringify(a ?? null)}, ` +
+            `which format ${FORMAT_VERSION_V9} requires to be one of certified, none`);
+    }
+    const raw = s.customer_key_id;
+    if (raw !== undefined && raw !== null && typeof raw !== "string") {
+        throw new errors_js_1.VerificationError(`system ${JSON.stringify(systemName)}: customer_key_id is not a string`);
+    }
+    const customerKeyId = typeof raw === "string" ? raw : "";
+    if (a === AUTHORIZATION_CERTIFIED && customerKeyId === "") {
+        throw new errors_js_1.VerificationError(`system ${JSON.stringify(systemName)}: authorization is certified but customer_key_id is empty`);
+    }
+    if (a === AUTHORIZATION_NONE && customerKeyId !== "") {
+        throw new errors_js_1.VerificationError(`system ${JSON.stringify(systemName)}: authorization is none but customer_key_id is set`);
+    }
+    return { authorization: a, customerKeyId };
+}
 const PAYLOAD_TYPE_TREE_HEAD = "burnledger.sth.v3";
 // The domain for a tree head that names its log. See buildTreeHeadPayload.
 const PAYLOAD_TYPE_TREE_HEAD_V7 = "burnledger.sth.v7";
@@ -594,6 +653,9 @@ function issuanceBytes(certificate) {
 // ---------------------------------------------------------------------------
 // RFC 8785 Canonical JSON
 // ---------------------------------------------------------------------------
+/** Exported for tests/verify.test.ts, which keeps a second implementation of
+ * this and must be able to prove the two agree. Not re-exported from index.ts,
+ * so it stays off the published API. */
 function canonicalJson(obj) {
     return textToBytes(canonicalStringify(obj));
 }
@@ -867,6 +929,8 @@ function requireMeasured(value, field, systemName, version) {
 /** Domain separator for the record itself, by certificate format version. */
 function certificatePayloadType(version) {
     checkFormatVersion(version);
+    if (version === FORMAT_VERSION_V9)
+        return PAYLOAD_TYPE_VERIFICATION_RECORD_V9;
     if (version === FORMAT_VERSION_V8)
         return PAYLOAD_TYPE_VERIFICATION_RECORD_V8;
     if (version === FORMAT_VERSION_V7)
@@ -890,6 +954,8 @@ function attestationPayloadType(version) {
     // Equality here, deliberately: each format has its OWN separator, so this is
     // a lookup rather than a "this version onward" question. v3 and v4 share one
     // because their attestation bytes are identical.
+    if (version === FORMAT_VERSION_V9)
+        return PAYLOAD_TYPE_ATTESTATION_V9;
     if (version === FORMAT_VERSION_V8)
         return PAYLOAD_TYPE_ATTESTATION_V8;
     if (version === FORMAT_VERSION_V7)
@@ -910,6 +976,7 @@ function buildCertificatePayload(cert) {
     const version = cert.certificate_format_version;
     const coversMeasured = signatureCoversMeasuredTransport(version);
     const coversRecoverable = signatureCoversRecoverableState(version);
+    const coversAuthorization = signatureCoversAuthorization(version);
     const systems = (cert.systems ?? []).map((s) => {
         const sys = {
             attested_at: formatTimestamp(s.attested_at),
@@ -931,6 +998,12 @@ function buildCertificatePayload(cert) {
         if (coversRecoverable) {
             sys.recoverable_state = requireMeasured(s.recoverable_state, "recoverable_state", s.system_name, version);
         }
+        if (coversAuthorization) {
+            const { authorization, customerKeyId } = requireAuthorization(s, s.system_name);
+            sys.authorization = authorization;
+            if (customerKeyId !== "")
+                sys.customer_key_id = customerKeyId;
+        }
         return sys;
     });
     // The attestation block carries no system list of its own: the merged list