chit402-verify 0.3.5 → 0.4.1

package/dist/jcs.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * RFC 8785 JSON Canonicalization.
+ * Same rules as `jcsCanonicalize` in services/gateway/src/offer-receipt.js.
+ * Issuer-history entry hashes and the receipt canonical object use this form.
+ * Per-field receipt hashes keep the encoding they were signed with.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jcsCanonicalize = jcsCanonicalize;
+function jcsCanonicalize(value) {
+    return jcsValue(value);
+}
+function jcsValue(value) {
+    if (value === null || value === undefined)
+        return 'null';
+    const type = typeof value;
+    if (type === 'boolean')
+        return value ? 'true' : 'false';
+    if (type === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('Cannot canonicalize Infinity or NaN');
+        if (Object.is(value, -0))
+            return '0';
+        return String(value);
+    }
+    if (type === 'string')
+        return jcsString(value);
+    if (Array.isArray(value))
+        return `[${value.map(jcsValue).join(',')}]`;
+    if (type === 'object')
+        return jcsObject(value);
+    throw new Error(`Cannot canonicalize value of type ${type}`);
+}
+function jcsString(str) {
+    let result = '"';
+    for (let i = 0; i < str.length; i += 1) {
+        const char = str[i];
+        const code = str.charCodeAt(i);
+        if (code < 32) {
+            result += `\\u${code.toString(16).padStart(4, '0')}`;
+        }
+        else if (char === '"') {
+            result += '\\"';
+        }
+        else if (char === '\\') {
+            result += '\\\\';
+        }
+        else {
+            result += char;
+        }
+    }
+    return `${result}"`;
+}
+function jcsObject(obj) {
+    const keys = Object.keys(obj).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+    const pairs = [];
+    for (const key of keys) {
+        const value = obj[key];
+        if (value !== undefined)
+            pairs.push(`${jcsString(key)}:${jcsValue(value)}`);
+    }
+    return `{${pairs.join(',')}}`;
+}
+//# sourceMappingURL=jcs.js.map

package/dist/jcs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jcs.js","sourceRoot":"","sources":["../src/jcs.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,0CAEC;AAFD,SAAgB,eAAe,CAAC,KAAc;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAe,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAe,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAgC,CAAC,CAAC;IAC1E,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACvD,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,MAAM,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,GAA4B;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,CAAC"}

package/dist/jws.d.ts

@@ -0,0 +1,46 @@
+export interface Es256Jwk {
+    kty: 'EC';
+    crv: 'P-256';
+    x: string;
+    y: string;
+    kid?: string;
+    alg?: string;
+    use?: string;
+}
+export interface ReceiptWithIssuerJwk {
+    issuer_signature?: {
+        kid?: string;
+        jws?: string;
+        issuer_jwk?: Es256Jwk;
+    };
+}
+/**
+ * Production issuer kid (RFC 7638 thumbprint of the api.chit402.com ES256 key).
+ * Offline default pin. Override with `trustedKids` / `--trusted-kid`.
+ */
+export declare const DEFAULT_TRUSTED_ISSUER_KIDS: readonly ["IvFpmC-vPhkY_v0vidsrWVT9uzlE5XWKZgAEOeJTq1Q"];
+/** Hosts whose published JWKS may be fetched and treated as a trust root. */
+export declare const DEFAULT_TRUSTED_JWKS_HOSTS: readonly ["api.chit402.com"];
+export declare const KEY_UNTRUSTED = "key untrusted";
+export declare function resolvePinnedIssuerJwk(receipt: ReceiptWithIssuerJwk): Es256Jwk | null;
+/**
+ * RFC 7638 JWK thumbprint (SHA-256, base64url).
+ * EC required members in lexicographic order: crv, kty, x, y.
+ */
+export declare function jwkThumbprint(jwk: Pick<Es256Jwk, 'kty' | 'crv' | 'x' | 'y'>): string;
+export declare function isEs256PublicJwk(jwk: Es256Jwk | null | undefined): jwk is Es256Jwk;
+/** True when the key's RFC 7638 thumbprint is one of the pinned trusted kids. */
+export declare function isPinnedTrustedJwk(jwk: Es256Jwk | null | undefined, trustedKids: readonly string[]): boolean;
+export declare function sameEs256Key(a: Es256Jwk, b: Es256Jwk): boolean;
+export declare function readJwsHeader(jws: string): {
+    alg?: string;
+    kid?: string;
+    jku?: string;
+} | null;
+export declare function jwksHostAllowed(uri: string, hosts: readonly string[]): boolean;
+export declare function verifyIssuerJws(jws: string, jwk: Es256Jwk): {
+    valid: boolean;
+    payload?: Record<string, unknown>;
+    reason?: string;
+};
+//# sourceMappingURL=jws.d.ts.map

package/dist/jws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.d.ts","sourceRoot":"","sources":["../src/jws.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;CACH;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,0DAE9B,CAAC;AAEX,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,8BAA+B,CAAC;AAEvE,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,GAAG,QAAQ,GAAG,IAAI,CAMrF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,MAAM,CAQpF;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,IAAI,QAAQ,CAElF;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EAChC,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAGT;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAE9D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQ9F;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAQ9E;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,QAAQ,GACZ;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAyCxE"}

package/dist/jws.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KEY_UNTRUSTED = exports.DEFAULT_TRUSTED_JWKS_HOSTS = exports.DEFAULT_TRUSTED_ISSUER_KIDS = void 0;
+exports.resolvePinnedIssuerJwk = resolvePinnedIssuerJwk;
+exports.jwkThumbprint = jwkThumbprint;
+exports.isEs256PublicJwk = isEs256PublicJwk;
+exports.isPinnedTrustedJwk = isPinnedTrustedJwk;
+exports.sameEs256Key = sameEs256Key;
+exports.readJwsHeader = readJwsHeader;
+exports.jwksHostAllowed = jwksHostAllowed;
+exports.verifyIssuerJws = verifyIssuerJws;
+/**
+ * Compact JWS (ES256) verification for Chit402 receipts.
+ *
+ * A signature is only valid when the verifying key is trusted:
+ *   - it is the JWKS entry for the JWS `kid` (caller-supplied file, or a JWKS
+ *     fetched from an allowlisted issuer `jwks_uri`), or
+ *   - its RFC 7638 thumbprint equals a pinned trusted kid.
+ * The receipt's embedded `issuer_jwk` is not a trust root by itself.
+ */
+const node_crypto_1 = require("node:crypto");
+/**
+ * Production issuer kid (RFC 7638 thumbprint of the api.chit402.com ES256 key).
+ * Offline default pin. Override with `trustedKids` / `--trusted-kid`.
+ */
+exports.DEFAULT_TRUSTED_ISSUER_KIDS = [
+    'IvFpmC-vPhkY_v0vidsrWVT9uzlE5XWKZgAEOeJTq1Q',
+];
+/** Hosts whose published JWKS may be fetched and treated as a trust root. */
+exports.DEFAULT_TRUSTED_JWKS_HOSTS = ['api.chit402.com'];
+exports.KEY_UNTRUSTED = 'key untrusted';
+function resolvePinnedIssuerJwk(receipt) {
+    const jwk = receipt.issuer_signature?.issuer_jwk;
+    if (!jwk || jwk.kty !== 'EC' || jwk.crv !== 'P-256' || !jwk.x || !jwk.y)
+        return null;
+    const kid = receipt.issuer_signature?.kid;
+    if (kid && jwk.kid && kid !== jwk.kid)
+        return null;
+    return jwk;
+}
+/**
+ * RFC 7638 JWK thumbprint (SHA-256, base64url).
+ * EC required members in lexicographic order: crv, kty, x, y.
+ */
+function jwkThumbprint(jwk) {
+    const canonical = JSON.stringify({
+        crv: jwk.crv,
+        kty: jwk.kty,
+        x: jwk.x,
+        y: jwk.y,
+    });
+    return (0, node_crypto_1.createHash)('sha256').update(canonical).digest('base64url');
+}
+function isEs256PublicJwk(jwk) {
+    return !!jwk && jwk.kty === 'EC' && jwk.crv === 'P-256' && !!jwk.x && !!jwk.y;
+}
+/** True when the key's RFC 7638 thumbprint is one of the pinned trusted kids. */
+function isPinnedTrustedJwk(jwk, trustedKids) {
+    if (!isEs256PublicJwk(jwk) || trustedKids.length === 0)
+        return false;
+    return trustedKids.includes(jwkThumbprint(jwk));
+}
+function sameEs256Key(a, b) {
+    return a.x === b.x && a.y === b.y && a.crv === b.crv && a.kty === b.kty;
+}
+function readJwsHeader(jws) {
+    const headerB64 = jws.split('.')[0];
+    if (!headerB64)
+        return null;
+    try {
+        return JSON.parse(Buffer.from(headerB64, 'base64url').toString('utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function jwksHostAllowed(uri, hosts) {
+    try {
+        const url = new URL(uri);
+        if (url.protocol !== 'https:')
+            return false;
+        return hosts.some((host) => host.toLowerCase() === url.hostname.toLowerCase());
+    }
+    catch {
+        return false;
+    }
+}
+function verifyIssuerJws(jws, jwk) {
+    if (!jws || typeof jws !== 'string') {
+        return { valid: false, reason: 'invalid_jws' };
+    }
+    const parts = jws.split('.');
+    if (parts.length !== 3) {
+        return { valid: false, reason: 'malformed_jws' };
+    }
+    const [headerB64, payloadB64, signatureB64] = parts;
+    let header;
+    let payload;
+    try {
+        header = JSON.parse(Buffer.from(headerB64, 'base64url').toString('utf8'));
+        payload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString('utf8'));
+    }
+    catch {
+        return { valid: false, reason: 'json_parse_error' };
+    }
+    if (header.alg !== 'ES256') {
+        return { valid: false, reason: `unsupported_alg: ${header.alg}` };
+    }
+    if (header.kid && jwk.kid && header.kid !== jwk.kid) {
+        return { valid: false, reason: 'kid_mismatch' };
+    }
+    try {
+        const publicKey = (0, node_crypto_1.createPublicKey)({
+            key: { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y },
+            format: 'jwk',
+        });
+        const signature = Buffer.from(signatureB64, 'base64url');
+        const signingInput = `${headerB64}.${payloadB64}`;
+        const valid = (0, node_crypto_1.verify)('sha256', Buffer.from(signingInput, 'utf8'), {
+            key: publicKey,
+            dsaEncoding: 'ieee-p1363',
+        }, signature);
+        return valid ? { valid: true, payload } : { valid: false, reason: 'signature_invalid' };
+    }
+    catch (err) {
+        return { valid: false, reason: `verification_error: ${err.message}` };
+    }
+}
+//# sourceMappingURL=jws.js.map

package/dist/jws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.js","sourceRoot":"","sources":["../src/jws.ts"],"names":[],"mappings":";;;AA0CA,wDAMC;AAMD,sCAQC;AAED,4CAEC;AAGD,gDAMC;AAED,oCAEC;AAED,sCAQC;AAED,0CAQC;AAED,0CA4CC;AAjJD;;;;;;;;GAQG;AACH,6CAAkF;AAoBlF;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IACzC,6CAA6C;CACrC,CAAC;AAEX,6EAA6E;AAChE,QAAA,0BAA0B,GAAG,CAAC,iBAAiB,CAAU,CAAC;AAE1D,QAAA,aAAa,GAAG,eAAe,CAAC;AAE7C,SAAgB,sBAAsB,CAAC,OAA6B;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,EAAE,UAAkC,CAAC;IACzE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;IAC1C,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,GAA8C;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,CAAC,EAAE,GAAG,CAAC,CAAC;KACT,CAAC,CAAC;IACH,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAgC;IAC/D,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,iFAAiF;AACjF,SAAgB,kBAAkB,CAChC,GAAgC,EAChC,WAA8B;IAE9B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,YAAY,CAAC,CAAW,EAAE,CAAW;IACnD,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;AAC1E,CAAC;AAED,SAAgB,aAAa,CAAC,GAAW;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW,EAAE,KAAwB;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAC7B,GAAW,EACX,GAAa;IAEb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;IACpD,IAAI,MAAsC,CAAC;IAC3C,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAc,IAAA,6BAAe,EAAC;YAC3C,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;YACvD,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAA,oBAAM,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;YAChE,GAAG,EAAE,SAAS;YACd,WAAW,EAAE,YAAY;SAC1B,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACnF,CAAC;AACH,CAAC"}

package/dist/payer.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Unified offline payer binding verification (Base + Solana).
+ */
+import { type BasePayerVerification, type BaseReceiptFetcher } from './base-payer.js';
+import { type SolanaPayerVerification, type SolanaRpcFetcher } from './solana-payer.js';
+export type PayerRail = 'base' | 'solana' | 'unknown';
+export interface PayerBindingVerification {
+    checked: boolean;
+    valid: boolean;
+    rail: PayerRail;
+    payerWallet?: string | null;
+    paymentRef?: string | null;
+    expectedAmount?: string | null;
+    base?: BasePayerVerification;
+    solana?: SolanaPayerVerification;
+    reason?: string;
+}
+export interface ReceiptPayerClaims {
+    payment?: {
+        ref?: string | null;
+        gross_amount?: string | null;
+        payee?: string | null;
+        asset?: string | null;
+        rail?: string | null;
+    } | null;
+    caller_binding?: {
+        payer_wallet?: string | null;
+    } | null;
+}
+export interface VerifyPayerBindingOptions {
+    rpcUrl?: string;
+    solanaRpcUrl?: string;
+    fetchSolanaTransaction?: SolanaRpcFetcher;
+    fetchBaseReceipt?: BaseReceiptFetcher;
+}
+/** Decode the payload segment of a compact JWS (no signature check). */
+export declare function decodeJwsPayload(jws: string): Record<string, unknown> | null;
+interface PaymentClaim {
+    ref?: string | null;
+    gross_amount?: string | null;
+    payee?: string | null;
+    asset?: string | null;
+    rail?: string | null;
+}
+/**
+ * Payer facts from the JWS payload when one is present.
+ * The outer `payment` / `caller_binding` copies are unsigned and are used only
+ * when the receipt has no JWS. Callers that need verified facts must check the
+ * issuer signature first; this decode does not itself prove the signature.
+ */
+export declare function receiptPayerClaimsFromEnvelope(receipt: {
+    payment?: PaymentClaim | null;
+    caller_binding?: {
+        payer_wallet?: string | null;
+    } | null;
+    issuer_signature?: {
+        jws?: string;
+    } | null;
+}): ReceiptPayerClaims;
+/**
+ * Verify caller_binding.payer_wallet against on-chain settlement in payment.ref.
+ */
+export declare function verifyPayerBinding(claims: ReceiptPayerClaims, options?: VerifyPayerBindingOptions): Promise<PayerBindingVerification>;
+export {};
+//# sourceMappingURL=payer.d.ts.map

package/dist/payer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payer.d.ts","sourceRoot":"","sources":["../src/payer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAmB,KAAK,qBAAqB,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACvG,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,GAAG,IAAI,CAAC;IACT,cAAc,CAAC,EAAE;QACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;CACvC;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAQ5E;AAED,UAAU,YAAY;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAYD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACzD,gBAAgB,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC5C,GAAG,kBAAkB,CAyBrB;AAYD;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CA2EnC"}

package/dist/payer.js

@@ -0,0 +1,148 @@
+"use strict";
+/**
+ * Unified offline payer binding verification (Base + Solana).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeJwsPayload = decodeJwsPayload;
+exports.receiptPayerClaimsFromEnvelope = receiptPayerClaimsFromEnvelope;
+exports.verifyPayerBinding = verifyPayerBinding;
+const base_payer_js_1 = require("./base-payer.js");
+const solana_payer_js_1 = require("./solana-payer.js");
+/** Decode the payload segment of a compact JWS (no signature check). */
+function decodeJwsPayload(jws) {
+    const parts = jws.split('.');
+    if (parts.length < 2)
+        return null;
+    try {
+        return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function paymentClaims(payment) {
+    return {
+        ref: payment?.ref ?? null,
+        gross_amount: payment?.gross_amount != null ? String(payment.gross_amount) : null,
+        payee: payment?.payee ?? null,
+        asset: payment?.asset ?? null,
+        rail: payment?.rail ?? null,
+    };
+}
+/**
+ * Payer facts from the JWS payload when one is present.
+ * The outer `payment` / `caller_binding` copies are unsigned and are used only
+ * when the receipt has no JWS. Callers that need verified facts must check the
+ * issuer signature first; this decode does not itself prove the signature.
+ */
+function receiptPayerClaimsFromEnvelope(receipt) {
+    const jws = receipt.issuer_signature?.jws;
+    if (jws) {
+        const claims = decodeJwsPayload(jws);
+        if (claims) {
+            const payment = claims.payment;
+            const callerBinding = claims.caller_binding;
+            return {
+                payment: paymentClaims(payment),
+                caller_binding: callerBinding ?? null,
+            };
+        }
+    }
+    if (receipt.payment?.ref || receipt.caller_binding?.payer_wallet) {
+        return {
+            payment: paymentClaims(receipt.payment),
+            caller_binding: receipt.caller_binding ?? null,
+        };
+    }
+    return {
+        payment: { ref: null, gross_amount: null, payee: null, asset: null, rail: null },
+        caller_binding: null,
+    };
+}
+function detectRail(paymentRef) {
+    if (!paymentRef)
+        return 'unknown';
+    const lower = paymentRef.toLowerCase();
+    if (lower.startsWith('solana:'))
+        return 'solana';
+    if (lower.startsWith('base:') || lower.startsWith('base-sepolia:') || lower.startsWith('eip155:')) {
+        return 'base';
+    }
+    return 'unknown';
+}
+/**
+ * Verify caller_binding.payer_wallet against on-chain settlement in payment.ref.
+ */
+async function verifyPayerBinding(claims, options = {}) {
+    const paymentRef = claims.payment?.ref ?? null;
+    const payerWallet = claims.caller_binding?.payer_wallet ?? null;
+    const grossAmount = claims.payment?.gross_amount ?? null;
+    const payee = claims.payment?.payee ?? null;
+    const asset = claims.payment?.asset ?? null;
+    const rail = detectRail(paymentRef);
+    if (!paymentRef) {
+        return { checked: false, valid: false, rail, reason: 'no_payment_ref' };
+    }
+    if (!payerWallet) {
+        return { checked: false, valid: false, rail, paymentRef, reason: 'no_payer_wallet' };
+    }
+    if (grossAmount == null || grossAmount === '') {
+        return { checked: false, valid: false, rail, paymentRef, payerWallet, reason: 'no_gross_amount' };
+    }
+    if (rail === 'solana') {
+        const solana = await (0, solana_payer_js_1.verifySolanaPayer)({
+            paymentRef,
+            payerWallet,
+            grossAmount,
+            rpcUrl: options.solanaRpcUrl || options.rpcUrl,
+            fetchTransaction: options.fetchSolanaTransaction,
+        });
+        return {
+            checked: solana.checked,
+            valid: solana.valid,
+            rail: 'solana',
+            payerWallet,
+            paymentRef,
+            expectedAmount: grossAmount,
+            solana,
+            reason: solana.reason,
+        };
+    }
+    if (rail === 'base') {
+        if (!payee) {
+            return { checked: false, valid: false, rail, paymentRef, payerWallet, expectedAmount: grossAmount, reason: 'no_payee' };
+        }
+        if (!asset) {
+            return { checked: false, valid: false, rail, paymentRef, payerWallet, expectedAmount: grossAmount, reason: 'no_asset' };
+        }
+        const base = await (0, base_payer_js_1.verifyBasePayer)({
+            paymentRef,
+            payerWallet,
+            grossAmount,
+            payee,
+            asset,
+            rpcUrl: options.rpcUrl,
+            fetchReceipt: options.fetchBaseReceipt,
+        });
+        return {
+            checked: base.checked,
+            valid: base.valid,
+            rail: 'base',
+            payerWallet,
+            paymentRef,
+            expectedAmount: grossAmount,
+            base,
+            reason: base.reason,
+        };
+    }
+    return {
+        checked: false,
+        valid: false,
+        rail: 'unknown',
+        payerWallet,
+        paymentRef,
+        expectedAmount: grossAmount,
+        reason: `unsupported_payment_ref: ${paymentRef}`,
+    };
+}
+//# sourceMappingURL=payer.js.map

package/dist/payer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payer.js","sourceRoot":"","sources":["../src/payer.ts"],"names":[],"mappings":";AAAA;;GAEG;;AA4CH,4CAQC;AA0BD,wEA6BC;AAeD,gDA8EC;AAtMD,mDAAuG;AACvG,uDAI2B;AAoC3B,wEAAwE;AACxE,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,SAAS,aAAa,CAAC,OAAwC;IAC7D,OAAO;QACL,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI;QACzB,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QACjF,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;QAC7B,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;QAC7B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,8BAA8B,CAAC,OAI9C;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;IAC1C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAmC,CAAC;YAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,cAAuD,CAAC;YACrF,OAAO;gBACL,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;gBAC/B,cAAc,EAAE,aAAa,IAAI,IAAI;aACtC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;SAC/C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAChF,cAAc,EAAE,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,UAAqC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClG,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAA0B,EAC1B,UAAqC,EAAE;IAEvC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,YAAY,IAAI,IAAI,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,WAAW,IAAI,IAAI,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACpG,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAiB,EAAC;YACrC,UAAU;YACV,WAAW;YACX,WAAW;YACX,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM;YAC9C,gBAAgB,EAAE,OAAO,CAAC,sBAAsB;SACjD,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,QAAQ;YACd,WAAW;YACX,UAAU;YACV,cAAc,EAAE,WAAW;YAC3B,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC1H,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC1H,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,+BAAe,EAAC;YACjC,UAAU;YACV,WAAW;YACX,WAAW;YACX,KAAK;YACL,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,gBAAgB;SACvC,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,MAAM;YACZ,WAAW;YACX,UAAU;YACV,cAAc,EAAE,WAAW;YAC3B,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,SAAS;QACf,WAAW;QACX,UAAU;QACV,cAAc,EAAE,WAAW;QAC3B,MAAM,EAAE,4BAA4B,UAAU,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/dist/preimage.d.ts

@@ -0,0 +1,78 @@
+export interface PreimageLeaf {
+    preimage_utf8?: string;
+    preimage_hex?: string;
+}
+export interface AuditSibling {
+    hash?: string;
+    /** Ignored. Index and tree size choose the side. */
+    position?: string;
+}
+export interface AuditPath {
+    index?: number;
+    tree_size?: number;
+    siblings?: AuditSibling[];
+    root?: string;
+}
+export interface PreimageEntry {
+    field?: string;
+    alg?: string;
+    recomputable?: boolean;
+    preimage_utf8?: string;
+    preimage_hex?: string;
+    hash?: string;
+    merkle?: string;
+    /** Old public shape: every leaf body in the prefix. Still accepted. */
+    leaves?: PreimageLeaf[];
+    /** This receipt's leaf body. Other leaves are not on this object. */
+    leaf?: PreimageLeaf & {
+        index?: number;
+        task_id?: string;
+        kind?: string;
+    };
+    audit_path?: AuditPath;
+    url?: string;
+}
+export interface PreimageBlock {
+    schema?: string;
+    fields?: Record<string, PreimageEntry>;
+    not_recomputable?: {
+        field?: string;
+        hash?: string | null;
+        reason?: string;
+    }[];
+    links?: {
+        preimage?: string;
+    };
+}
+export interface PreimageCheck {
+    checked: boolean;
+    ok: boolean;
+    errors: string[];
+    fields: {
+        field: string;
+        ok: boolean;
+        reason?: string;
+    }[];
+}
+/** The audit path folds to this receipt's leaf. A different leaf in the same prefix is not this receipt. */
+export declare const LEAF_NOT_BOUND = "leaf_not_bound";
+/**
+ * Bind an audit path to this receipt. Returns `leaf_not_bound` when any
+ * check fails, including when the agreed row hash is null, empty, or
+ * disagreed, or the leaf encoding does not canonicalize to `task_id|row_hash`.
+ * Inclusion leaf hash and leaf index are checked only when that field is present.
+ * Inclusion tree size is not compared: the witness can cover a longer log.
+ */
+export declare function auditLeafBinding(receipt: Record<string, unknown>, entry: PreimageEntry): string | null;
+/**
+ * Fields a stranger is expected to recompute when they are present.
+ * Coverage and tree_head_hash count only when the issuer published a preimage.
+ * Output, HMAC, and book-row universe hashes do not.
+ */
+export declare function requiredPreimageFields(receipt: Record<string, unknown>): string[];
+export declare function verifyPublishedPreimages(receipt: Record<string, unknown>, { requirePreimages, fetchImpl, trustedHosts, }?: {
+    requirePreimages?: boolean;
+    fetchImpl?: typeof fetch;
+    trustedHosts?: readonly string[];
+}): Promise<PreimageCheck>;
+//# sourceMappingURL=preimage.d.ts.map

package/dist/preimage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preimage.d.ts","sourceRoot":"","sources":["../src/preimage.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,qEAAqE;IACrE,IAAI,CAAC,EAAE,YAAY,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,gBAAgB,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/E,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3D;AA6DD,4GAA4G;AAC5G,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAqE/C;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CA6BtG;AAyED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAUjF;AAmBD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,EACE,gBAAwB,EACxB,SAA4B,EAC5B,YAAkC,GACnC,GAAE;IACD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,GACL,OAAO,CAAC,aAAa,CAAC,CA4DxB"}