twzrd-receipt-verifier 1.0.5 → 1.0.7

package/package.json

@@ -1,8 +1,18 @@
 {
   "name": "twzrd-receipt-verifier",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "description": "Standalone offline verifier for TWZRD AO-Receipt V5 (Ed25519-signed keccak256 leaf). No trust in TWZRD servers or code.",
-  "keywords": ["twzrd", "x402", "solana", "ed25519", "keccak256", "receipt", "verifier", "agent", "attestation"],
+  "keywords": [
+    "twzrd",
+    "x402",
+    "solana",
+    "ed25519",
+    "keccak256",
+    "receipt",
+    "verifier",
+    "agent",
+    "attestation"
+  ],
   "homepage": "https://intel.twzrd.xyz",
   "bugs": {
     "url": "https://github.com/twzrd-sol/wzrd-final/issues"

package/verify_twzrd_receipt.js

@@ -37,6 +37,29 @@ function b58decode(s) { return Buffer.from(bs58.decode(s)); }
 
 function u16le(n) { const b = Buffer.alloc(2); b.writeUInt16LE(n & 0xffff, 0); return b; }
 function u64le(n) { const b = Buffer.alloc(8); b.writeBigUInt64LE(BigInt(n), 0); return b; }
+function i64le(n) { const b = Buffer.alloc(8); b.writeBigInt64LE(BigInt(n), 0); return b; }
+
+// V6 reputation block: 1-byte presence flag (0x00 null / 0x01 present) + fixed-width
+// value when present. reputation_score is i64 LE (null-vs-0 safe); version/quality
+// are u16-len-prefixed UTF-8; feature_window is u64 LE. "" is present (distinct from
+// null). Mirrors the issuer's RECEIPT_V6_LEAF_SPEC.md byte layout exactly.
+function encodeReputationBlockV6(pre) {
+  const optInt = (v, enc) => (v === null || v === undefined)
+    ? Buffer.from([0x00])
+    : Buffer.concat([Buffer.from([0x01]), enc(v)]);
+  const optStr = (v) => {
+    if (v === null || v === undefined) return Buffer.from([0x00]);
+    const raw = Buffer.from(String(v), 'utf8');
+    return Buffer.concat([Buffer.from([0x01]), u16le(raw.length), raw]);
+  };
+  return Buffer.concat([
+    optInt(pre.reputation_score, i64le),
+    optInt(pre.reputation_confidence_bps, u16le),
+    optStr(pre.reputation_score_version),
+    optInt(pre.reputation_feature_window_start_unix, u64le),
+    optStr(pre.reputation_data_quality),
+  ]);
+}
 
 function payer32(payer) {
   try { const raw = b58decode(payer); if (raw.length === 32) return raw; } catch (_) {}
@@ -51,12 +74,19 @@ function anchor32(tx) {
 }
 
 function recomputeLeaf(pre) {
+  // Use the exact domain the receipt carries. V6 binds reputation_* into the leaf
+  // (V5 left them unsigned/forgeable); a V6 receipt verified with V5 rules would
+  // fail on a legitimate receipt, so the block is appended whenever domain is _V6.
   const dom = String(pre.domain || '').toUpperCase();
+  const isV6 = dom.includes('_V6');
   const isAttention = dom.includes('ATTENTION');
-  const domain = Buffer.from(isAttention ? 'TWZRD:AO_ATTENTION_RECEIPT_V5' : 'TWZRD:AO_REPUTATION_RECEIPT_V5', 'ascii');
+  const domainStr = isAttention
+    ? (isV6 ? 'TWZRD:AO_ATTENTION_RECEIPT_V6' : 'TWZRD:AO_ATTENTION_RECEIPT_V5')
+    : (isV6 ? 'TWZRD:AO_REPUTATION_RECEIPT_V6' : 'TWZRD:AO_REPUTATION_RECEIPT_V5');
+  const domain = Buffer.from(domainStr, 'ascii');
   const score = isAttention ? (pre.attention_score || 0) : (pre.score || 0);
   const agent = Buffer.from(pre.agent_id, 'utf8');
-  const msg = Buffer.concat([
+  const parts = [
     domain,
     u16le(agent.length), agent,
     u16le(score),
@@ -64,8 +94,9 @@ function recomputeLeaf(pre) {
     u64le(pre.timestamp_unix),
     payer32(pre.payer),
     anchor32(pre.settlement_tx || pre.settlement_anchor),
-  ]);
-  return Buffer.from(keccak256.arrayBuffer(msg));
+  ];
+  if (isV6) parts.push(encodeReputationBlockV6(pre));
+  return Buffer.from(keccak256.arrayBuffer(Buffer.concat(parts)));
 }
 
 function fetchPublishedPubkey(baseUrl) {