chit402-verify 0.3.5 → 0.4.1

package/dist/carry-forward.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CARRY_FORWARD_STATUS = exports.PINNED_ANCHOR_EPOCHS = void 0;
+exports.verifyCarryForward = verifyCarryForward;
+/**
+ * A receipt leaf that was included under an earlier epoch head and later
+ * included under the current epoch head.
+ *
+ * The issued time and the issued epoch come from the earlier head's signed
+ * claims. The logged time, epoch, and leaf index come from the current
+ * head's signed claims and from the inclusion proof that binds that leaf
+ * to the current root. Unsigned receipt fields, request fields, and the
+ * local clock are not a source for either date.
+ *
+ * Lockstep with `assessCarryForward` in services/gateway/src/receipt-merkle.js.
+ */
+const anchor_witness_js_1 = require("./anchor-witness.js");
+const jws_js_1 = require("./jws.js");
+/** Epoch ids named by the committed receipt-log pin anchors. */
+exports.PINNED_ANCHOR_EPOCHS = [1, 2];
+exports.CARRY_FORWARD_STATUS = 'VERIFIED_CARRIED_FORWARD';
+const SIGNED_TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?Z$/;
+function signedTime(value) {
+    if (typeof value !== 'string' || !SIGNED_TIME.test(value))
+        return null;
+    const ms = Date.parse(value);
+    if (!Number.isFinite(ms))
+        return null;
+    return value;
+}
+function fail(reason) {
+    return { applicable: true, ok: false, status: null, reason };
+}
+function jwksCandidates(jwks, kid) {
+    const keys = jwks?.keys || [];
+    const es256 = keys.filter((key) => (0, jws_js_1.isEs256PublicJwk)(key) && (key.alg == null || key.alg === 'ES256'));
+    if (!kid)
+        return es256;
+    return es256.filter((key) => key.kid === kid);
+}
+function verifyHeadJws(head, options) {
+    const jws = head?.issuer_signature?.jws;
+    if (!jws)
+        return { ok: false, reason: 'epoch_signature_missing' };
+    const header = (0, jws_js_1.readJwsHeader)(jws);
+    const kid = header?.kid || head?.issuer_signature?.kid;
+    const trustedKids = options.trustedKids ?? [];
+    const embedded = (0, jws_js_1.resolvePinnedIssuerJwk)({ issuer_signature: head?.issuer_signature || undefined });
+    const pinned = !!(embedded && (0, jws_js_1.isPinnedTrustedJwk)(embedded, trustedKids));
+    const candidates = jwksCandidates(options.jwks, kid);
+    for (const jwk of candidates) {
+        const result = (0, jws_js_1.verifyIssuerJws)(jws, jwk);
+        if (result.valid && result.payload)
+            return { ok: true, payload: result.payload };
+    }
+    if (pinned && embedded) {
+        const result = (0, jws_js_1.verifyIssuerJws)(jws, embedded);
+        if (result.valid && result.payload)
+            return { ok: true, payload: result.payload };
+    }
+    return { ok: false, reason: 'signature_invalid' };
+}
+function sameJson(a, b) {
+    return JSON.stringify(a ?? null) === JSON.stringify(b ?? null);
+}
+function hexLeaf(value) {
+    if (typeof value !== 'string')
+        return null;
+    const hex = value.replace(/^0x/i, '').toLowerCase();
+    return /^[0-9a-f]{64}$/.test(hex) ? hex : null;
+}
+function readSignedHead(head, options, pinned) {
+    const verified = verifyHeadJws(head, options);
+    if (!verified.ok)
+        return fail(verified.reason);
+    const payload = verified.payload;
+    const publishedAt = signedTime(payload.published_at);
+    if (!publishedAt)
+        return fail('head_mismatch');
+    if (head && Object.prototype.hasOwnProperty.call(head, 'published_at')
+        && head.published_at != null
+        && head.published_at !== publishedAt) {
+        return fail('head_mismatch');
+    }
+    const epoch = Number(payload.epoch);
+    if (!Number.isInteger(epoch) || epoch < 1)
+        return fail('bad_epoch');
+    if (!pinned.has(epoch))
+        return fail('bad_epoch');
+    if (head && Object.prototype.hasOwnProperty.call(head, 'epoch')
+        && head.epoch != null
+        && Number(head.epoch) !== epoch) {
+        return fail('head_mismatch');
+    }
+    const root = typeof payload.root === 'string' ? payload.root.replace(/^0x/i, '').toLowerCase() : '';
+    if (!/^[0-9a-f]{64}$/.test(root))
+        return fail('head_mismatch');
+    if (head?.root != null && String(head.root).replace(/^0x/i, '').toLowerCase() !== root) {
+        return fail('head_mismatch');
+    }
+    const treeSize = Number(payload.tree_size);
+    if (!Number.isSafeInteger(treeSize) || treeSize < 1)
+        return fail('head_mismatch');
+    if (head?.tree_size != null && Number(head.tree_size) !== treeSize)
+        return fail('head_mismatch');
+    if (payload.schema != null && head && 'schema' in head && head.schema != null
+        && !sameJson(payload.schema, head.schema)) {
+        return fail('head_mismatch');
+    }
+    return { ok: true, published_at: publishedAt, epoch, root, tree_size: treeSize };
+}
+function inclusionOf(leaf, inclusion, root, treeSize) {
+    if (!inclusion || inclusion.error === 'not_in_tree')
+        return fail('not_in_tree');
+    if (!Array.isArray(inclusion.proof))
+        return fail('not_in_tree');
+    const claimed = hexLeaf(inclusion.leaf);
+    const got = Buffer.from(leaf).toString('hex');
+    if (claimed && claimed !== got)
+        return fail('tree_head_mismatch');
+    if (inclusion.tree_size != null && Number(inclusion.tree_size) !== treeSize)
+        return fail('inclusion_failed');
+    const index = Number(inclusion.leaf_index);
+    if (!Number.isSafeInteger(index))
+        return fail('inclusion_failed');
+    const proved = (0, anchor_witness_js_1.verifyMerkleInclusion)(Buffer.from(leaf), index, treeSize, root, inclusion.proof);
+    if (!proved)
+        return fail('inclusion_failed');
+    return { ok: true, leaf_index: index };
+}
+/**
+ * Verify a cross-epoch carry. A pair of heads in the same epoch is not a
+ * carry: the caller leaves the receipt result unchanged.
+ */
+function verifyCarryForward(input) {
+    const pinned = new Set(input.pinnedEpochs ?? exports.PINNED_ANCHOR_EPOCHS);
+    const trust = { trustedKids: input.trustedKids, jwks: input.jwks };
+    const oldHead = readSignedHead(input.oldHead, trust, pinned);
+    if (!('published_at' in oldHead))
+        return oldHead;
+    const currentHead = readSignedHead(input.currentHead, trust, pinned);
+    if (!('published_at' in currentHead))
+        return currentHead;
+    if (oldHead.epoch === currentHead.epoch) {
+        return { applicable: false, ok: true, status: null };
+    }
+    if (currentHead.epoch < oldHead.epoch)
+        return fail('head_mismatch');
+    const oldMs = Date.parse(oldHead.published_at);
+    const currentMs = Date.parse(currentHead.published_at);
+    if (!(currentMs >= oldMs))
+        return fail('head_mismatch');
+    const oldLeaf = hexLeaf(input.oldInclusion?.leaf);
+    const currentLeaves = (input.currentInclusions || []).map((row) => hexLeaf(row?.leaf)).filter((row) => !!row);
+    if (oldLeaf && currentLeaves.some((row) => row !== oldLeaf))
+        return fail('tree_head_mismatch');
+    const oldIncluded = inclusionOf(input.leaf, input.oldInclusion, oldHead.root, oldHead.tree_size);
+    if (!oldIncluded.ok)
+        return oldIncluded;
+    const inclusions = input.currentInclusions;
+    if (!Array.isArray(inclusions) || inclusions.length === 0)
+        return fail('not_in_tree');
+    const positions = new Set();
+    for (const row of inclusions) {
+        const included = inclusionOf(input.leaf, row, currentHead.root, currentHead.tree_size);
+        if (!included.ok)
+            return included;
+        positions.add(included.leaf_index);
+    }
+    if (positions.size !== 1)
+        return fail('inclusion_failed');
+    const leafIndex = [...positions][0];
+    return {
+        applicable: true,
+        ok: true,
+        status: exports.CARRY_FORWARD_STATUS,
+        issued_at: oldHead.published_at,
+        issued_epoch: oldHead.epoch,
+        logged_at: currentHead.published_at,
+        logged_epoch: currentHead.epoch,
+        leaf_index: leafIndex,
+    };
+}
+//# sourceMappingURL=carry-forward.js.map

package/dist/carry-forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"carry-forward.js","sourceRoot":"","sources":["../src/carry-forward.ts"],"names":[],"mappings":";;;AAqNA,gDA0CC;AA/PD;;;;;;;;;;;GAWG;AACH,2DAAgF;AAChF,qCAOkB;AAMlB,gEAAgE;AACnD,QAAA,oBAAoB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAU,CAAC;AAEvC,QAAA,oBAAoB,GAAG,0BAAmC,CAAC;AAsExE,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAE3E,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,IAAsB,EAAE,GAAuB;IACrE,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,yBAAgB,EAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC;IACtG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CACpB,IAAkC,EAClC,OAAyD;IAEzD,MAAM,GAAG,GAAG,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAA,+BAAsB,EAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,IAAI,SAAS,EAAE,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAA,2BAAkB,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,CAAU;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CACrB,IAAkC,EAClC,OAAyD,EACzD,MAA2B;IAE3B,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;WACjE,IAAI,CAAC,YAAY,IAAI,IAAI;WACzB,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;WAC1D,IAAI,CAAC,KAAK,IAAI,IAAI;WAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAClF,IAAI,IAAI,EAAE,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI,IAAK,IAA4B,CAAC,MAAM,IAAI,IAAI;WACjG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAG,IAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,WAAW,CAClB,IAAgB,EAChB,SAA4C,EAC5C,IAAY,EACZ,QAAgB;IAEhB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClE,IAAI,SAAS,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAA,yCAAqB,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,KAAwB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,4BAAoB,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,cAAc,IAAI,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7H,IAAI,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAE/F,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,MAAM,UAAU,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,4BAAoB;QAC5B,SAAS,EAAE,OAAO,CAAC,YAAY;QAC/B,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,SAAS,EAAE,WAAW,CAAC,YAAY;QACnC,YAAY,EAAE,WAAW,CAAC,KAAK;QAC/B,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+/**
+ * xfuel-verify CLI — Offline receipt verification.
+ *
+ * Usage:
+ *   xfuel-verify receipt.json
+ *   xfuel-verify receipt.json --check-nullifier
+ *   xfuel-verify receipt.json --rpc https://mainnet.base.org
+ *   xfuel-verify receipt.json inclusion.json head.json --rpc
+ *   cat receipt.json | xfuel-verify -
+ *
+ * Exit codes:
+ *   0 = VERIFIED (every check passed)
+ *   1 = INVALID
+ *   2 = COULD_NOT_CHECK
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG"}