zklicensing 0.1.0-beta.2 → 0.1.0-beta.4

package/build/trustAnchorVerify.d.ts

@@ -0,0 +1,48 @@
+export type Finding = {
+    /** Machine-readable check identifier, stable across releases. */
+    name: string;
+    /** True iff the check passed. */
+    ok: boolean;
+    /** Human-readable one-line summary or reason. */
+    detail: string;
+};
+export type TrustAnchorReport = {
+    /** True iff every finding is ok. */
+    ok: boolean;
+    origin: string;
+    /** Address that was checked. Echoed from opts.address. */
+    address: string;
+    /** appId as declared in the signed manifest payload. Undefined if the fetch/signature failed. */
+    appId?: string;
+    /** Generation index the address maps to in the signed manifest (1-based). */
+    generation?: number;
+    findings: Finding[];
+};
+export interface VerifyTrustAnchorOpts {
+    /** Vendor origin, e.g. `https://store.example.com`. HTTPS required. */
+    origin: string;
+    /** zkApp address (base58 PublicKey) — the manifest lives at `/.well-known/zklicensing/<address>.json`. */
+    address: string;
+    /** Platform manifest Ed25519 public keys (base64). Comma-list from `VITE_MANIFEST_PUBKEYS`. */
+    pinnedPublicKeysBase64: readonly string[];
+    /** Mina GraphQL endpoint for on-chain reads. Ignored when `skipChainChecks` is true. */
+    minaGraphqlUrl?: string;
+    /** Optional Mina networkId — 'mainnet' or 'testnet'. Defaults to 'mainnet'. */
+    minaNetworkId?: 'mainnet' | 'testnet' | 'devnet';
+    /** Fetch timeout in ms for the manifest fetch. Default 15000. */
+    fetchTimeoutMs?: number;
+    /** When true, skips all `chain_*` checks. Useful for manifest-only audits. */
+    skipChainChecks?: boolean;
+    /**
+     * When true, runs an extra `manifest_matches_backend` finding: fetch the
+     * same signed payload from `https://zklicensing.com/apps/by-address/{address}`,
+     * verify it against the same pinned keys, then byte-compare canonicalized
+     * payloads (minus `signature`, `publicKey`, `issuedAt`, `app`). Catches a
+     * vendor serving a stale/rolled-back manifest even when its own signature
+     * is still valid. Not on by default — adds a second network fetch and
+     * couples the verifier to zklicensing.com being reachable.
+     */
+    crossCheck?: boolean;
+}
+export declare function verifyTrustAnchor(opts: VerifyTrustAnchorOpts): Promise<TrustAnchorReport>;
+//# sourceMappingURL=trustAnchorVerify.d.ts.map

package/build/trustAnchorVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchorVerify.d.ts","sourceRoot":"","sources":["../src/trustAnchorVerify.ts"],"names":[],"mappings":"AAyDA,MAAM,MAAM,OAAO,GAAG;IACpB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oCAAoC;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA8PD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA6L/F"}

package/build/trustAnchorVerify.js

@@ -0,0 +1,431 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * trustAnchorVerify.ts
+ *
+ * End-to-end trust-anchor verification for a single zkLicensing app.
+ *
+ * Given a vendor origin + a zkApp address + one or more pinned platform
+ * manifest public keys, this module performs the full "does this vendor
+ * page point at a real zkLicensing deployment for this vendor?" pipeline
+ * that the trust-anchor page walks a human buyer through — mechanically,
+ * with structured findings suitable for CI, monitoring, or a
+ * wallet/extension consumer.
+ *
+ * The verifier is address-keyed: buyers see zkApp addresses in their
+ * wallet popup, not opaque platform appIds, so the primary lookup is by
+ * address. The signed manifest served at
+ * `<origin>/.well-known/zklicensing/<zkAppAddress>.json` carries the
+ * appId inside its signed payload, so callers never need to know the
+ * appId out-of-band.
+ *
+ * Pipeline (each step yields a discrete Finding — no boolean collapse):
+ *
+ *   1.  manifest_fetch                    — GET https://<origin>/.well-known/zklicensing/<address>.json
+ *   2.  manifest_signature                — Ed25519 verify against caller-provided pinned keys
+ *   3.  manifest_address_in_generations   — opts.address appears in the signed generations[]
+ *   3b. manifest_matches_backend          — (opt-in, opts.crossCheck) vendor payload equals
+ *                                            zklicensing.com/apps/by-address/<address> after
+ *                                            independent signature-verify against same pins
+ *   4.  chain_account_exists              — fetchAccount succeeds at the address
+ *   5.  chain_zkapp_uri_match             — on-chain zkappUri equals opts.origin
+ *   6.  chain_vk_hash_pinned              — on-chain verification-key hash equals CANONICAL_VK_HASHES[generation]
+ *   7.  chain_set_zkapp_uri_impossible    — permissions.setZkappUri === Permissions.impossible()
+ *   8.  chain_set_permissions_impossible  — permissions.setPermissions === Permissions.impossible() (meta-freeze)
+ *   9.  chain_set_verification_key_locked — permissions.setVerificationKey.auth === Permissions.impossible()
+ *   10. chain_send_proof_only             — permissions.send === Permissions.proof()
+ *   11. chain_edit_state_proof_only       — permissions.editState === Permissions.proof()
+ *
+ * Steps 5 + 7 close the URI-binding loop: (5) proves the contract claims
+ * this origin, (7) proves nobody can rewrite that claim. Steps 8–11 verify
+ * the rest of LicensingApp.init()'s permission matrix — catching the case
+ * where a deployer used the correct VK but skipped/altered init(), leaving
+ * default `signature()` permissions that would still let the deploy key
+ * drain escrow, rewrite state, or swap the circuit.
+ *
+ * o1js is a peer dependency — this file imports it dynamically so callers
+ * that only want the manifest checks (no chain reads) can construct one
+ * with `skipChainChecks: true` and avoid the o1js install.
+ *
+ * The pinned pubkey list is caller-supplied — the SDK ships NO baked-in
+ * pin. Source it from https://zklicensing.com/trustanchor.html (published
+ * next to each generation's VK hash). See the SDK README for details.
+ */
+import { verifyManifestSignature, canonicalize } from './manifestVerify.js';
+// Production keeper is mounted under /api/keeper on zklicensing.com — the
+// bare /apps/... paths return 404 (they're not the app route, they're an
+// unrelated marketing route). This is the concrete URL prefix, not just an
+// origin.
+const BACKEND_URL_PREFIX = 'https://zklicensing.com/api/keeper';
+const DEFAULT_FETCH_TIMEOUT_MS = 15000;
+function normalizeOrigin(origin) {
+    return origin.replace(/\/+$/, '');
+}
+// Strip trailing slash / path from a URL so we can compare against zkappUri,
+// which vendors typically set to their bare origin.
+function urlOrigin(url) {
+    try {
+        const u = new URL(url);
+        return `${u.protocol}//${u.host}`;
+    }
+    catch {
+        return null;
+    }
+}
+async function fetchManifest(origin, address, timeoutMs) {
+    const originOk = origin.startsWith('https://');
+    if (!originOk) {
+        return { name: 'manifest_fetch', ok: false, detail: 'origin must be https://' };
+    }
+    let manifestUrl;
+    try {
+        manifestUrl = new URL(`/.well-known/zklicensing/${encodeURIComponent(address)}.json`, origin).href;
+    }
+    catch {
+        return { name: 'manifest_fetch', ok: false, detail: 'origin is not a valid URL' };
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const resp = await fetch(manifestUrl, { signal: controller.signal, redirect: 'follow' });
+        if (!resp.ok) {
+            return { name: 'manifest_fetch', ok: false, detail: `HTTP ${resp.status} from ${manifestUrl}` };
+        }
+        const text = await resp.text();
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            return { name: 'manifest_fetch', ok: false, detail: 'response is not valid JSON' };
+        }
+        return { name: 'manifest_fetch', ok: true, detail: `fetched ${manifestUrl}`, body: parsed };
+    }
+    catch (err) {
+        return { name: 'manifest_fetch', ok: false, detail: `fetch failed: ${err?.message ?? String(err)}` };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// Split a raw manifest JSON into { signature, payload }. The keeper writes the
+// payload fields at the top level plus { signature, publicKey } — we ignore
+// publicKey (never trust the payload's self-declared key; only the
+// caller-pinned list is authoritative). The same signed bytes are served at
+// every /.well-known/zklicensing/<address>.json — one file per generation
+// address, all carrying the same appId in the payload.
+function splitManifest(raw) {
+    if (!raw || typeof raw !== 'object')
+        return { signature: null, payload: null };
+    const r = raw;
+    const signature = typeof r.signature === 'string' ? r.signature : null;
+    const { signature: _s, publicKey: _p, ...rest } = r;
+    const payload = rest;
+    if (typeof payload.appId !== 'string' ||
+        typeof payload.current !== 'number' ||
+        !Array.isArray(payload.generations) ||
+        typeof payload.issuedAt !== 'string') {
+        return { signature, payload: null };
+    }
+    return { signature, payload };
+}
+// Optional cross-check against the zkLicensing backend's own copy of the
+// signed generation list. Fetches `https://zklicensing.com/apps/by-address/
+// {address}`, verifies its signature against the same caller-pinned keys (so
+// a compromised backend URL cannot lie), strips signature/publicKey/issuedAt/
+// app, and byte-compares canonicalized payloads against the vendor's
+// `.well-known` copy. `issuedAt` is stripped because the backend re-stamps on
+// every call; `app` is stripped because it is an unsigned envelope field the
+// by-address endpoint tacks on.
+async function checkBackendMatch(args) {
+    const name = 'manifest_matches_backend';
+    const url = `${BACKEND_URL_PREFIX}/apps/by-address/${encodeURIComponent(args.address)}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), args.timeoutMs);
+    let body;
+    try {
+        const resp = await fetch(url, { signal: controller.signal, redirect: 'follow' });
+        if (!resp.ok)
+            return { name, ok: false, detail: `backend HTTP ${resp.status} from ${url}` };
+        body = await resp.json();
+    }
+    catch (err) {
+        return { name, ok: false, detail: `backend fetch failed: ${err?.message ?? String(err)}` };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (!body || typeof body !== 'object') {
+        return { name, ok: false, detail: 'backend response is not a JSON object' };
+    }
+    const { signature, publicKey: _pub, app: _app, ...backendPayload } = body;
+    if (typeof signature !== 'string') {
+        return { name, ok: false, detail: 'backend response missing signature' };
+    }
+    const kSigOk = await verifyManifestSignature(backendPayload, signature, args.pinnedPublicKeysBase64);
+    if (!kSigOk) {
+        return { name, ok: false, detail: 'backend response signature does not verify against pinned keys' };
+    }
+    const { issuedAt: _kIA, ...kRest } = backendPayload;
+    const { issuedAt: _vIA, ...vRest } = args.vendorPayload;
+    if (canonicalize(kRest) !== canonicalize(vRest)) {
+        return { name, ok: false, detail: 'vendor manifest content diverges from backend record (stale or drifted)' };
+    }
+    return { name, ok: true, detail: `vendor payload matches backend /apps/by-address/${args.address}` };
+}
+// Converts an o1js-decoded Permission (three booleans) back to its canonical
+// enum string. Mirrors the switch inside o1js's own AuthRequired.toJSON — kept
+// inline because o1js doesn't publicly export it.
+function permToString(p) {
+    const b = (v) => (typeof v?.toBoolean === 'function' ? v.toBoolean() : Boolean(v)) ? 1 : 0;
+    const key = `${b(p?.constant)}${b(p?.signatureNecessary)}${b(p?.signatureSufficient)}`;
+    switch (key) {
+        case '110': return 'Impossible';
+        case '101': return 'None';
+        case '000': return 'Proof';
+        case '011': return 'Signature';
+        case '001': return 'Either';
+        default: return undefined;
+    }
+}
+// Reads the on-chain facts needed to close the trust loop for a single
+// zkApp address. o1js is imported dynamically so this file can be pulled in
+// by callers that don't need chain reads (e.g. an offline manifest audit).
+async function readChainState(address, minaGraphqlUrl, minaNetworkId) {
+    let o1js;
+    try {
+        o1js = await import('o1js');
+    }
+    catch (err) {
+        return {
+            accountFound: false,
+            fetchError: `o1js not installed — chain checks require o1js as a peer dep (${err?.message ?? err})`,
+        };
+    }
+    try {
+        // setActiveInstance mutates o1js global state. This is acceptable for a
+        // one-shot CLI; long-lived hosts should confine the call to their own
+        // network singleton and not use this helper.
+        const network = o1js.Mina.Network({
+            networkId: minaNetworkId === 'mainnet' ? 'mainnet' : 'testnet',
+            mina: minaGraphqlUrl,
+        });
+        o1js.Mina.setActiveInstance(network);
+        const publicKey = o1js.PublicKey.fromBase58(address);
+        const { account, error } = await o1js.fetchAccount({ publicKey });
+        if (!account) {
+            const detail = error
+                ? `${error.statusCode ?? ''} ${error.statusText ?? ''} ${error.errors ? JSON.stringify(error.errors) : ''}`.trim() || JSON.stringify(error)
+                : 'no account and no error returned';
+            return { accountFound: false, fetchError: `fetchAccount(${address}) via ${minaGraphqlUrl}: ${detail}` };
+        }
+        const zkappUri = account.zkapp?.zkappUri;
+        const vkHash = account.zkapp?.verificationKey?.hash?.toString?.();
+        const perms = account.permissions;
+        const setVkAuth = permToString(perms?.setVerificationKey?.auth);
+        const rawTxnVersion = perms?.setVerificationKey?.txnVersion;
+        const setVkTxnVersion = rawTxnVersion?.toString ? Number(rawTxnVersion.toString()) : undefined;
+        return {
+            accountFound: true,
+            zkappUri,
+            vkHash,
+            setZkappUriIsImpossible: permToString(perms?.setZkappUri) === 'Impossible',
+            setPermissionsIsImpossible: permToString(perms?.setPermissions) === 'Impossible',
+            setVerificationKeyAuth: setVkAuth,
+            setVerificationKeyTxnVersion: Number.isFinite(setVkTxnVersion) ? setVkTxnVersion : undefined,
+            sendIsProof: permToString(perms?.send) === 'Proof',
+            editStateIsProof: permToString(perms?.editState) === 'Proof',
+        };
+    }
+    catch (err) {
+        return { accountFound: false, fetchError: err?.message ?? String(err) };
+    }
+}
+async function loadCanonicalVkHashes() {
+    try {
+        const m = await import('./contractInterface.js');
+        return m.CANONICAL_VK_HASHES ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function verifyTrustAnchor(opts) {
+    const origin = normalizeOrigin(opts.origin);
+    const address = opts.address;
+    const findings = [];
+    const timeoutMs = opts.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS;
+    // 1. manifest_fetch
+    const fetchResult = await fetchManifest(origin, address, timeoutMs);
+    findings.push({ name: fetchResult.name, ok: fetchResult.ok, detail: fetchResult.detail });
+    if (!fetchResult.ok) {
+        return { ok: false, origin, address, findings };
+    }
+    const { signature, payload } = splitManifest(fetchResult.body);
+    // 2. manifest_signature
+    if (!signature || !payload) {
+        findings.push({ name: 'manifest_signature', ok: false, detail: 'manifest missing signature or payload fields' });
+        return { ok: false, origin, address, findings };
+    }
+    const sigOk = await verifyManifestSignature(payload, signature, opts.pinnedPublicKeysBase64);
+    findings.push({
+        name: 'manifest_signature',
+        ok: sigOk,
+        detail: sigOk
+            ? `Ed25519 verified against pinned key (1 of ${opts.pinnedPublicKeysBase64.length})`
+            : 'signature does not verify against any pinned key',
+    });
+    if (!sigOk) {
+        return { ok: false, origin, address, findings };
+    }
+    // appId is trusted only after signature verifies — it comes from the signed
+    // payload, not the caller.
+    const appId = payload.appId;
+    // 3. manifest_address_in_generations
+    const entry = payload.generations.find((g) => g.zkAppAddress === address);
+    findings.push({
+        name: 'manifest_address_in_generations',
+        ok: !!entry,
+        detail: entry
+            ? `address maps to gen ${entry.gen} (${entry.status})`
+            : `address ${address} not in manifest generations for app "${appId}"`,
+    });
+    const generation = entry?.gen;
+    // 3b. manifest_matches_backend (opt-in)
+    if (opts.crossCheck) {
+        findings.push(await checkBackendMatch({
+            address,
+            vendorPayload: payload,
+            pinnedPublicKeysBase64: opts.pinnedPublicKeysBase64,
+            timeoutMs,
+        }));
+    }
+    if (opts.skipChainChecks) {
+        const allOk = findings.every((f) => f.ok);
+        return { ok: allOk, origin, appId, address, generation, findings };
+    }
+    if (!opts.minaGraphqlUrl) {
+        findings.push({ name: 'chain_account_exists', ok: false, detail: 'minaGraphqlUrl is required for chain checks' });
+        return { ok: false, origin, appId, address, generation, findings };
+    }
+    // 4-11: chain reads
+    const state = await readChainState(address, opts.minaGraphqlUrl, opts.minaNetworkId ?? 'mainnet');
+    findings.push({
+        name: 'chain_account_exists',
+        ok: state.accountFound,
+        detail: state.accountFound ? `account ${address.slice(0, 12)}… found` : (state.fetchError ?? 'account not found'),
+    });
+    if (!state.accountFound) {
+        return { ok: false, origin, appId, address, generation, findings };
+    }
+    const onChainOrigin = state.zkappUri ? urlOrigin(state.zkappUri) : null;
+    const originClean = urlOrigin(origin);
+    const uriOk = !!state.zkappUri && !!onChainOrigin && !!originClean && onChainOrigin === originClean;
+    findings.push({
+        name: 'chain_zkapp_uri_match',
+        ok: uriOk,
+        detail: state.zkappUri
+            ? (uriOk ? `zkappUri "${state.zkappUri}" origin matches` : `zkappUri "${state.zkappUri}" origin ≠ "${originClean ?? origin}"`)
+            : 'zkappUri is empty on chain',
+    });
+    const canonicalVks = await loadCanonicalVkHashes();
+    const expectedVk = generation !== undefined ? canonicalVks?.[generation] : undefined;
+    const vkOk = !!state.vkHash && !!expectedVk && state.vkHash === expectedVk;
+    findings.push({
+        name: 'chain_vk_hash_pinned',
+        ok: vkOk,
+        detail: vkOk
+            ? `gen ${generation} hash matches CANONICAL_VK_HASHES[${generation}]`
+            : !expectedVk
+                ? `no CANONICAL_VK_HASHES entry for gen ${generation ?? '?'}`
+                : `on-chain vkHash "${state.vkHash?.slice(0, 16)}…" ≠ pinned "${expectedVk.slice(0, 16)}…"`,
+    });
+    findings.push({
+        name: 'chain_set_zkapp_uri_impossible',
+        ok: !!state.setZkappUriIsImpossible,
+        detail: state.setZkappUriIsImpossible
+            ? 'permissions.setZkappUri = impossible (zkappUri is frozen)'
+            : 'permissions.setZkappUri ≠ impossible — vendor could rewrite the URI',
+    });
+    // The meta-freeze: without this, every other permission lock below is
+    // reversible with a single signature. Priority #1 among the extras.
+    findings.push({
+        name: 'chain_set_permissions_impossible',
+        ok: !!state.setPermissionsIsImpossible,
+        detail: state.setPermissionsIsImpossible
+            ? 'permissions.setPermissions = impossible (permission matrix is meta-frozen)'
+            : 'permissions.setPermissions ≠ impossible — every other lock could be relaxed later',
+    });
+    // setVerificationKey lock, with hardfork-aware softening.
+    //
+    // The contract deploys with VerificationKey.impossibleDuringCurrentVersion(),
+    // which stores {auth: Impossible, txnVersion: <chain's txnVersion at deploy
+    // time>}. After a Mina hardfork the chain's current txnVersion advances
+    // past the stored value and the effective enforcement falls back to
+    // signature() — but the deploy key was discarded (LicensingApp.ts:546-547),
+    // so no one can sign the fallback update.
+    //
+    // The keeper records the deploy-time txnVersion in the signed manifest as
+    // deployTxnVersion. We accept two states as OK, provided the on-chain
+    // stored txnVersion still matches the manifest-recorded value (which proves
+    // no one has re-set the permission since deploy):
+    //
+    //   - auth = Impossible  → normal, pre-hardfork state
+    //   - auth = Signature   → post-hardfork fallback (see above)
+    //
+    // Any mismatch — different txnVersion, or auth is some other string, or
+    // deployTxnVersion missing from an old manifest — falls back to the strict
+    // rule (auth === 'Impossible').
+    const onChainAuth = state.setVerificationKeyAuth;
+    const onChainTxnVersion = state.setVerificationKeyTxnVersion;
+    const manifestDeployTxnVersion = entry?.deployTxnVersion;
+    let vkLockOk = false;
+    let vkLockDetail;
+    if (manifestDeployTxnVersion !== undefined && onChainTxnVersion !== undefined && onChainTxnVersion === manifestDeployTxnVersion) {
+        if (onChainAuth === 'Impossible') {
+            vkLockOk = true;
+            vkLockDetail = `permissions.setVerificationKey.auth = impossible (circuit cannot be swapped; txnVersion ${onChainTxnVersion} matches deploy)`;
+        }
+        else if (onChainAuth === 'Signature') {
+            vkLockOk = true;
+            vkLockDetail = `permissions.setVerificationKey.auth = signature (post-hardfork fallback; deploy key was destroyed at deploy time; txnVersion ${onChainTxnVersion} matches deploy)`;
+        }
+        else {
+            vkLockDetail = `permissions.setVerificationKey.auth = "${onChainAuth ?? '?'}" — expected impossible or signature`;
+        }
+    }
+    else if (manifestDeployTxnVersion === undefined) {
+        // Older manifest without deployTxnVersion — fall back to strict.
+        vkLockOk = onChainAuth === 'Impossible';
+        vkLockDetail = vkLockOk
+            ? 'permissions.setVerificationKey.auth = impossible (circuit cannot be swapped; manifest omits deployTxnVersion — strict rule applied)'
+            : `permissions.setVerificationKey.auth = "${onChainAuth ?? '?'}" ≠ impossible — vendor could swap the circuit (manifest omits deployTxnVersion — strict rule applied)`;
+    }
+    else {
+        vkLockDetail = `on-chain setVerificationKey.txnVersion (${onChainTxnVersion ?? 'unknown'}) ≠ manifest deployTxnVersion (${manifestDeployTxnVersion}) — permission may have been re-set since deploy`;
+    }
+    findings.push({
+        name: 'chain_set_verification_key_locked',
+        ok: vkLockOk,
+        detail: vkLockDetail,
+    });
+    // send + editState must be proof() (not signature()): withdrawals and Merkle
+    // root advances only happen via a valid LicensingApp proof.
+    findings.push({
+        name: 'chain_send_proof_only',
+        ok: !!state.sendIsProof,
+        detail: state.sendIsProof
+            ? 'permissions.send = proof() (escrow only leaves via a refund proof)'
+            : 'permissions.send ≠ proof() — vendor could drain escrow with a signature',
+    });
+    findings.push({
+        name: 'chain_edit_state_proof_only',
+        ok: !!state.editStateIsProof,
+        detail: state.editStateIsProof
+            ? 'permissions.editState = proof() (Merkle root advances only via a proof)'
+            : 'permissions.editState ≠ proof() — vendor could rewrite the license root',
+    });
+    const allOk = findings.every((f) => f.ok);
+    return { ok: allOk, origin, appId, address, generation, findings };
+}
+//# sourceMappingURL=trustAnchorVerify.js.map

package/build/trustAnchorVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchorVerify.js","sourceRoot":"","sources":["../src/trustAnchorVerify.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAmD5E,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,UAAU;AACV,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAEhE,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,6EAA6E;AAC7E,oDAAoD;AACpD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAsBD,KAAK,UAAU,aAAa,CAC1B,MAAc,EACd,OAAe,EACf,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,4BAA4B,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,SAAS,WAAW,EAAE,EAAE,CAAC;QAClG,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAClC,MAAM,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACvG,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,mEAAmE;AACnE,4EAA4E;AAC5E,0EAA0E;AAC1E,uDAAuD;AACvD,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAkC,CAAC;IACnD,IACE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACnC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EACpC,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAC9E,6EAA6E;AAC7E,gCAAgC;AAChC,KAAK,UAAU,iBAAiB,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,0BAA0B,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,kBAAkB,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,IAAI,CAAC,MAAM,SAAS,GAAG,EAAE,EAAE,CAAC;QAC5F,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC7F,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,GAAG,IAA+B,CAAC;IACrG,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gEAAgE,EAAE,CAAC;IACvG,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,cAAyC,CAAC;IAC/E,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,aAAmD,CAAC;IAC9F,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yEAAyE,EAAE,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mDAAmD,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;AACvG,CAAC;AA0BD,6EAA6E;AAC7E,+EAA+E;AAC/E,kDAAkD;AAClD,SAAS,YAAY,CAAC,CAAM;IAC1B,MAAM,CAAC,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAC;IACvF,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC,CAAC,OAAO,YAAY,CAAC;QAChC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC;QAC1B,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,CAAC;QAC3B,KAAK,KAAK,CAAC,CAAC,OAAO,WAAW,CAAC;QAC/B,KAAK,KAAK,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC5B,OAAO,CAAC,CAAI,OAAO,SAAS,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,4EAA4E;AAC5E,2EAA2E;AAC3E,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,cAAsB,EACtB,aAA+C;IAE/C,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,iEAAiE,GAAG,EAAE,OAAO,IAAI,GAAG,GAAG;SACpG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,wEAAwE;QACxE,sEAAsE;QACtE,6CAA6C;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,SAAS,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9D,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,KAAK;gBAClB,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC3I,CAAC,CAAC,kCAAkC,CAAC;YACvC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,OAAO,SAAS,cAAc,KAAK,MAAM,EAAE,EAAE,CAAC;QAC1G,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,QAA8B,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;QAClC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,KAAK,EAAE,kBAAkB,EAAE,UAAU,CAAC;QAC5D,MAAM,eAAe,GAAG,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,QAAQ;YACR,MAAM;YACN,uBAAuB,EAAO,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,YAAY;YAC/E,0BAA0B,EAAI,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,YAAY;YAClF,sBAAsB,EAAQ,SAAS;YACvC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YAC5F,WAAW,EAAmB,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,OAAO;YACnE,gBAAgB,EAAc,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,OAAO;SACzE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,mBAAmB,IAAI,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA2B;IACjE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAElE,oBAAoB;IACpB,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAE/D,wBAAwB;IACxB,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACjH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7F,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,oBAAoB;QAC1B,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,KAAK;YACX,CAAC,CAAC,6CAA6C,IAAI,CAAC,sBAAsB,CAAC,MAAM,GAAG;YACpF,CAAC,CAAC,kDAAkD;KACvD,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IAED,4EAA4E;IAC5E,2BAA2B;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAE5B,qCAAqC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC;IAC1E,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,iCAAiC;QACvC,EAAE,EAAE,CAAC,CAAC,KAAK;QACX,MAAM,EAAE,KAAK;YACX,CAAC,CAAC,uBAAuB,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG;YACtD,CAAC,CAAC,WAAW,OAAO,yCAAyC,KAAK,GAAG;KACxE,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,KAAK,EAAE,GAAG,CAAC;IAE9B,wCAAwC;IACxC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC;YACpC,OAAO;YACP,aAAa,EAAE,OAAO;YACtB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,SAAS;SACV,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAC;QAClH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;IAED,oBAAoB;IACpB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC;IAClG,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,sBAAsB;QAC5B,EAAE,EAAE,KAAK,CAAC,YAAY;QACtB,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,mBAAmB,CAAC;KAClH,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,WAAW,IAAI,aAAa,KAAK,WAAW,CAAC;IACpG,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,uBAAuB;QAC7B,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,KAAK,CAAC,QAAQ;YACpB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,QAAQ,eAAe,WAAW,IAAI,MAAM,GAAG,CAAC;YAC9H,CAAC,CAAC,4BAA4B;KACjC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;IAC3E,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,sBAAsB;QAC5B,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,IAAI;YACV,CAAC,CAAC,OAAO,UAAU,qCAAqC,UAAU,GAAG;YACrE,CAAC,CAAC,CAAC,UAAU;gBACX,CAAC,CAAC,wCAAwC,UAAU,IAAI,GAAG,EAAE;gBAC7D,CAAC,CAAC,oBAAoB,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;KAChG,CAAC,CAAC;IAEH,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,gCAAgC;QACtC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB;QACnC,MAAM,EAAE,KAAK,CAAC,uBAAuB;YACnC,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,qEAAqE;KAC1E,CAAC,CAAC;IAEH,sEAAsE;IACtE,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,kCAAkC;QACxC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B;QACtC,MAAM,EAAE,KAAK,CAAC,0BAA0B;YACtC,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,mFAAmF;KACxF,CAAC,CAAC;IAEH,0DAA0D;IAC1D,EAAE;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,wEAAwE;IACxE,oEAAoE;IACpE,4EAA4E;IAC5E,0CAA0C;IAC1C,EAAE;IACF,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,kDAAkD;IAClD,EAAE;IACF,sDAAsD;IACtD,8DAA8D;IAC9D,EAAE;IACF,wEAAwE;IACxE,2EAA2E;IAC3E,gCAAgC;IAChC,MAAM,WAAW,GAAG,KAAK,CAAC,sBAAsB,CAAC;IACjD,MAAM,iBAAiB,GAAG,KAAK,CAAC,4BAA4B,CAAC;IAC7D,MAAM,wBAAwB,GAAG,KAAK,EAAE,gBAAgB,CAAC;IACzD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,YAAoB,CAAC;IACzB,IAAI,wBAAwB,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,wBAAwB,EAAE,CAAC;QAChI,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,GAAG,2FAA2F,iBAAiB,kBAAkB,CAAC;QAChJ,CAAC;aAAM,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,GAAG,gIAAgI,iBAAiB,kBAAkB,CAAC;QACrL,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,0CAA0C,WAAW,IAAI,GAAG,sCAAsC,CAAC;QACpH,CAAC;IACH,CAAC;SAAM,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;QAClD,iEAAiE;QACjE,QAAQ,GAAG,WAAW,KAAK,YAAY,CAAC;QACxC,YAAY,GAAG,QAAQ;YACrB,CAAC,CAAC,qIAAqI;YACvI,CAAC,CAAC,0CAA0C,WAAW,IAAI,GAAG,wGAAwG,CAAC;IAC3K,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,2CAA2C,iBAAiB,IAAI,SAAS,kCAAkC,wBAAwB,kDAAkD,CAAC;IACvM,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,mCAAmC;QACzC,EAAE,EAAE,QAAQ;QACZ,MAAM,EAAE,YAAY;KACrB,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,uBAAuB;QAC7B,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW;QACvB,MAAM,EAAE,KAAK,CAAC,WAAW;YACvB,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,yEAAyE;KAC9E,CAAC,CAAC;IAEH,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,6BAA6B;QACnC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB;QAC5B,MAAM,EAAE,KAAK,CAAC,gBAAgB;YAC5B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,yEAAyE;KAC9E,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACrE,CAAC"}

package/build/trustAnchorVerifyCli.d.ts

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * trustAnchorVerifyCli.ts
+ *
+ * Command-line front-end for verifyTrustAnchor(). Ships as the `zklicensing-verify-trust`
+ * bin — the sibling of `zklicensing-verify` (which is the verifyService HTTP daemon).
+ *
+ * Usage:
+ *   zklicensing-verify-trust \
+ *     --origin https://store.example.com \
+ *     --address B62q... \
+ *     --pinned-key <base64-ed25519-pubkey> \
+ *     [--mina-graphql https://api.minascan.io/node/mainnet/v1/graphql] \
+ *     [--mina-network-id mainnet|testnet|devnet] \
+ *     [--skip-chain-checks] \
+ *     [--json]
+ *
+ * The manifest lives at `<origin>/.well-known/zklicensing/<address>.json` —
+ * one file per generation address, all signed by the same platform key. The
+ * appId is read out of the signed payload; callers never need to know it
+ * out-of-band, which lets buyers verify from just the address their wallet
+ * shows them (including addresses for retired generations).
+ *
+ * Exit codes:
+ *   0 — every finding passed
+ *   1 — one or more findings failed
+ *   2 — invalid arguments
+ *
+ * --pinned-key is required and may be repeated; the CLI ships NO baked-in
+ * pin. Source it from https://zklicensing.com/trustanchor.html (published
+ * next to each generation's VK hash). See the SDK README for details.
+ */
+import { type Finding } from './trustAnchorVerify.js';
+export type { Finding };
+//# sourceMappingURL=trustAnchorVerifyCli.d.ts.map

package/build/trustAnchorVerifyCli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchorVerifyCli.d.ts","sourceRoot":"","sources":["../src/trustAnchorVerifyCli.ts"],"names":[],"mappings":";AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAqB,KAAK,OAAO,EAA0B,MAAM,wBAAwB,CAAC;AA8IjG,YAAY,EAAE,OAAO,EAAE,CAAC"}