Module official 

Official catalog license — pure types + signing/verification (no I/O).

Model mirrors fleet_bundle.rs: canonical sign input = the struct serialized as JSON with sig cleared; Ed25519 over those bytes. The license binds an official catalog item to one app.mur.run account. Expiry gates downloads/updates only — never installed content.

Structs

OfficialLicense

A signed record binding an official catalog item to one app.mur.run account.

Enums

LicenseCheck

Outcome of a full license check. Order of checks: signature → signer identity → item binding → user binding (fail-closed at the first miss).

Constants

DISTRIBUTION_OFFICIAL

Value of the distribution marker stamped inside official bundle manifests.

OFFICIAL_LICENSE_FORMAT

License wire-format version. Bump on any breaking change.

Functions

check_license

Full check against an expected item + logged-in user + official key fp. official_fp is a parameter for testability; production callers pass MUR_OFFICIAL_PUBLISHER_KEY_FP. Expiry is deliberately NOT checked here.

license_key_fp

Publisher-trust-style fingerprint (ed25519-<8hex>) of the embedded key.

license_sign_input

Canonical signing input: the license serialized with sig cleared.

sign_license

Sign in place: fills signer_pubkey from key and sets sig.

verify_license_sig

Verify sig against the embedded signer_pubkey. False on any failure.