chit402-verify 0.1.0 → 0.2.0

package/README.md

@@ -48,7 +48,7 @@ curl -s https://api.chit402.com/receipt/task-123?format=json | npx chit402-verif
 | Check | Requires Network? | Description |
 |-------|-------------------|-------------|
 | Payment binding | No | Recompute commitment from receipt fields |
-| Issuer signature | No | ES256/JWKS verification |
+| Issuer signature | No, unless `--fetch-jwks` | ES256. Trusted via JWKS (by kid) or the pinned production kid. Embedded `issuer_jwk` alone is not enough. |
 | Output hash | No | Hash is on the receipt |
 | On-chain settlement | Yes | Query Base RPC for tx |
 | Nullifier anchor | Yes | Query ZKVerifierSP1 contract |

package/cli.js

@@ -8,6 +8,8 @@ import { createRequire } from 'node:module';
 import { spawn } from 'node:child_process';
 
 const require = createRequire(import.meta.url);
+// Resolve via the package exports map. Deep imports of dist/cli.js throw
+// ERR_PACKAGE_PATH_NOT_EXPORTED unless @xfuel/verify lists that subpath.
 const verifyCliPath = require.resolve('@xfuel/verify/dist/cli.js');
 
 const child = spawn(process.execPath, [verifyCliPath, ...process.argv.slice(2)], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chit402-verify",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Chit402 receipt verification — verify payment binding and output commitment offline.",
   "main": "./index.js",
   "types": "./index.d.ts",
@@ -54,6 +54,6 @@
     "directory": "packages/aliases/chit402-verify"
   },
   "dependencies": {
-    "@xfuel/verify": "^0.1.0"
+    "@xfuel/verify": "^0.2.0"
   }
 }