{"_id":"@agenticprimitives/verification-receipts","_rev":"7-95e998d8b4f1822816aa8ac3c28d6e9a","name":"@agenticprimitives/verification-receipts","dist-tags":{"latest":"0.0.0-alpha.7"},"versions":{"0.0.0-alpha.1":{"name":"@agenticprimitives/verification-receipts","version":"0.0.0-alpha.1","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment"],"license":"MIT","_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.1","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verification-receipts","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"bin":{"ap-verify-receipt":"dist/cli.js"},"dist":{"shasum":"a3f7b440f55fb49bd2cdd491fc1bb337b9dd575b","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.1.tgz","fileCount":27,"integrity":"sha512-hf6Rm5I6JxWLVwdlGFOIbAcIpt/EGap/eK4TSdrXaluUscG8a6ry+13LGv7S3ncSqabHGWgrXAxb+RucAvRHWA==","signatures":[{"sig":"MEYCIQDDCTduQw79h11qAbODxXviVqz0rzNlf9AIJEp0N/NmlgIhAObpcybSLcxORUnQckFawB3vFXqlBkvaLgY+jEVKALNL","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":47165},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.1.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/86a1bdc701ab68e24838612b67d47345/agenticprimitives-verification-receipts-0.0.0-alpha.1.tgz","_integrity":"sha512-hf6Rm5I6JxWLVwdlGFOIbAcIpt/EGap/eK4TSdrXaluUscG8a6ry+13LGv7S3ncSqabHGWgrXAxb+RucAvRHWA==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.16.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0"},"_npmOperationalInternal":{"tmp":"tmp/verification-receipts_0.0.0-alpha.1_1784044324608_0.293523668120955","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.2":{"name":"@agenticprimitives/verification-receipts","version":"0.0.0-alpha.2","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment"],"license":"MIT","_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.2","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verification-receipts","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"bin":{"ap-verify-receipt":"dist/cli.js"},"dist":{"shasum":"e00558499448b17360b3dec592ec8abe1018b975","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.2.tgz","fileCount":27,"integrity":"sha512-b0kzKJA0oboiuUvMqMzOncKRtcTEXXBKCP9FRmS1ac21sDoWR3PrMc4wtt7FNuUaz8OqDgNnTBzL9h+nTrmxxg==","signatures":[{"sig":"MEQCIEfZ89txhfk7Q1VMaeizGVOKG3OaoBjQp7hRlu3g3NOSAiAEnt8ail4I2euzdCubF+BXvgziMlB/shn9hodzzIz+gg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46678},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.2.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:c9bd3ad9-df42-4633-b608-4912fc4403d9"}},"_resolved":"/tmp/8f66badc509ade506ff21a5c2a2b7cc6/agenticprimitives-verification-receipts-0.0.0-alpha.2.tgz","_integrity":"sha512-b0kzKJA0oboiuUvMqMzOncKRtcTEXXBKCP9FRmS1ac21sDoWR3PrMc4wtt7FNuUaz8OqDgNnTBzL9h+nTrmxxg==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.16.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"_nodeVersion":"24.18.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0","@agenticprimitives/types":"1.0.0-alpha.21"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.21"},"_npmOperationalInternal":{"tmp":"tmp/verification-receipts_0.0.0-alpha.2_1785727542108_0.4891487483627599","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.3":{"name":"@agenticprimitives/verification-receipts","version":"0.0.0-alpha.3","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment"],"license":"MIT","_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.3","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verification-receipts","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"bin":{"ap-verify-receipt":"dist/cli.js"},"dist":{"shasum":"0ff52ad31645fa0a12ce2951e416533e686486e0","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.3.tgz","fileCount":27,"integrity":"sha512-4s1azC5SEGvc81gGQ4F5iX2hphNUICE9DReGCfJhp8FvsvyUMNtmWtxlhacUYos/+iAXxmOi1oXKiNZwKeQ00Q==","signatures":[{"sig":"MEQCIG9uAKtYpYwDHZ6fNWRr34THPSS7IxXt25dmLv6/avWkAiAp6ksMOo/roD4GcTDNEzGrM7mG542icdXIvBgV5DI6vA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46678},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.3.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:c9bd3ad9-df42-4633-b608-4912fc4403d9"}},"_resolved":"/tmp/d168020619d4ebdded13982511ee2089/agenticprimitives-verification-receipts-0.0.0-alpha.3.tgz","_integrity":"sha512-4s1azC5SEGvc81gGQ4F5iX2hphNUICE9DReGCfJhp8FvsvyUMNtmWtxlhacUYos/+iAXxmOi1oXKiNZwKeQ00Q==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.17.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"_nodeVersion":"24.19.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0","@agenticprimitives/types":"1.0.0-alpha.22"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.22"},"_npmOperationalInternal":{"tmp":"tmp/verification-receipts_0.0.0-alpha.3_1787775729645_0.39131650459505796","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.4":{"name":"@agenticprimitives/verification-receipts","version":"0.0.0-alpha.4","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment"],"license":"MIT","_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.4","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verification-receipts","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"bin":{"ap-verify-receipt":"dist/cli.js"},"dist":{"shasum":"218e5bb0ba4cb7cd4aa2c3e022aba2f57f8772da","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.4.tgz","fileCount":27,"integrity":"sha512-ofaiLfmVZmljnHE/iAjPs+Ieu6McpOcaM0MecRPL+MKkOJ3Z/GcM5fAiSbpYyug5orc9RG7zSwGXHX97Tmjt3Q==","signatures":[{"sig":"MEQCIDUsPfy7yP5eBLvBnwGzFooLMEqreNSwP7nqlY6+W3svAiAPkCYnK0CcIW/q1169fMIUziA4WZlJ34jZdKJRLXgmHQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQDM5oUAazInfTa+tXdj0aSn/Gl3aH8AHyQP+Uk9jeibnwIhANaAYbaIM1MIW4UoSaD0AhZpFaQk2y/ER2PLFJD+h+s1","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46678},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.4.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:c9bd3ad9-df42-4633-b608-4912fc4403d9"}},"_resolved":"/tmp/d2cb75ab9c0ef544bbef1b6f8747a264/agenticprimitives-verification-receipts-0.0.0-alpha.4.tgz","_integrity":"sha512-ofaiLfmVZmljnHE/iAjPs+Ieu6McpOcaM0MecRPL+MKkOJ3Z/GcM5fAiSbpYyug5orc9RG7zSwGXHX97Tmjt3Q==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.19.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0","@agenticprimitives/types":"1.0.0-alpha.23"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.23"},"_npmOperationalInternal":{"tmp":"tmp/verification-receipts_0.0.0-alpha.4_1789164250065_0.4630218774404822","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.5":{"name":"@agenticprimitives/verification-receipts","version":"0.0.0-alpha.5","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment"],"license":"MIT","_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.5","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verification-receipts","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"bin":{"ap-verify-receipt":"dist/cli.js"},"dist":{"shasum":"0ceddd0154b59406995777ba772f153838c2747f","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.5.tgz","fileCount":27,"integrity":"sha512-5H0Y5zexj9bonJNuAxn4zraamSyrejwqlSh1gP10PLH4yAHXJelcwgpKBG8iyvDtq9PwgFGbrzO+D3ev8DeGng==","signatures":[{"sig":"MEUCIQDNqU3cfOZEgyjvzLlucM5+J+61n4UhuD7nkirRN3L0QgIgTg0gogIOKVo9IUZnNFjjWKl1U7hIcc/8ZSdMtlSlGR4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQC0JcBHXBGWrXWuEz+fQhiwyti4ZcExmkhV12ytRrH6pwIhAM43Zu7yN0+wJpixjuiFGjOGI9DqFllHk1HZ/RRqQiFz","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46678},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.5.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:c9bd3ad9-df42-4633-b608-4912fc4403d9"}},"_resolved":"/tmp/45e6b5e432bff58222e8641fd52e348b/agenticprimitives-verification-receipts-0.0.0-alpha.5.tgz","_integrity":"sha512-5H0Y5zexj9bonJNuAxn4zraamSyrejwqlSh1gP10PLH4yAHXJelcwgpKBG8iyvDtq9PwgFGbrzO+D3ev8DeGng==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.19.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0","@agenticprimitives/types":"1.0.0-alpha.24"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.24"},"_npmOperationalInternal":{"tmp":"tmp/verification-receipts_0.0.0-alpha.5_1789230665732_0.9547929721385398","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.6":{"name":"@agenticprimitives/verification-receipts","version":"0.0.0-alpha.6","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment"],"license":"MIT","_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.6","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verification-receipts","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"bin":{"ap-verify-receipt":"dist/cli.js"},"dist":{"shasum":"84d52f4bd07d1ea84b562c6b6d6ceba845492aaf","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.6.tgz","fileCount":27,"integrity":"sha512-essFhOva0E5fDV+D20aYP2A8GH5h0T2wNu6N4YkUpvVKp1cAmrnnEs9o3RA9YUZxxhUVIJ7SeflZs91vEf52uA==","signatures":[{"sig":"MEUCIAPMuzKmcf7DjEfY8SnJ6915eK2CXBz5mBTi6nFjG5qtAiEA5Js2rUN4M8gpbMA0yKRNywwcPJUCgtWX7dtom5s/zsU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIFZaifsOQ6CFlEnDM85WvVNn4Bq7Q9NVyIFCvjyty6C+AiEA7uQzAztsCJNs+eClCJ9en03AC2FnXKmlcse9oQ2QADE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46678},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.6.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/5409ab3b24ef2942ce72c0d52e096456/agenticprimitives-verification-receipts-0.0.0-alpha.6.tgz","_integrity":"sha512-essFhOva0E5fDV+D20aYP2A8GH5h0T2wNu6N4YkUpvVKp1cAmrnnEs9o3RA9YUZxxhUVIJ7SeflZs91vEf52uA==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.16.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0","@agenticprimitives/types":"1.0.0-alpha.25"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.25"},"_npmOperationalInternal":{"tmp":"tmp/verification-receipts_0.0.0-alpha.6_1789497910857_0.775363804588739","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.7":{"_id":"@agenticprimitives/verification-receipts@0.0.0-alpha.7","bin":{"ap-verify-receipt":"dist/cli.js"},"bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"30e53f35adc67957390e9ed016cf13b70b247cd5","tarball":"https://registry.npmjs.org/@agenticprimitives/verification-receipts/-/verification-receipts-0.0.0-alpha.7.tgz","fileCount":27,"integrity":"sha512-IvwB7wK7UkrxeBFnxJYjZW0Yq0hRVGlYVM2sYindQA4ev6qiqokbPG/0YTrJTdvB3us8XuQNAfWmvVSVbM93Mg==","signatures":[{"sig":"MEUCIAZG6Xi4z92sHUUJ8/VfeLRMy0tT5eniXZHGBqon+5doAiEAmliFDZO1kz3zY9QBa5Qr7xRXIUGAkTU6s5iTKj2A3J0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQCBAG0v14Fta7EKVtUyU1YT6SrL5lO8o7acp5y/2de5+AIhAOQKk6hoGuIZIY++pOQ4wrTpSfKgaq3WhyZrpJhVY/Va"}],"unpackedSize":47467},"main":"./dist/index.js","name":"@agenticprimitives/verification-receipts","type":"module","_from":"file:agenticprimitives-verification-receipts-0.0.0-alpha.7.tgz","types":"./dist/index.d.ts","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"license":"MIT","scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"version":"0.0.0-alpha.7","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:c9bd3ad9-df42-4633-b608-4912fc4403d9"}},"homepage":"https://agenticprimitives.dev","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"_resolved":"/tmp/12f082959144c254459e796875dcf5fa/agenticprimitives-verification-receipts-0.0.0-alpha.7.tgz","_integrity":"sha512-IvwB7wK7UkrxeBFnxJYjZW0Yq0hRVGlYVM2sYindQA4ev6qiqokbPG/0YTrJTdvB3us8XuQNAfWmvVSVbM93Mg==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"_npmVersion":"11.19.0","description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","directories":{},"maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@types/node":"^22.7.0","@agenticprimitives/types":"1.0.0-alpha.26"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.26"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/verification-receipts_0.0.0-alpha.7_1789815031073_0.5328426722387567"}}},"time":{"created":"2026-07-14T15:52:04.458Z","modified":"2026-09-19T10:50:31.457Z","0.0.0-alpha.1":"2026-07-14T15:52:04.748Z","0.0.0-alpha.2":"2026-08-03T03:25:42.245Z","0.0.0-alpha.3":"2026-08-26T20:22:09.779Z","0.0.0-alpha.4":"2026-09-11T22:04:10.167Z","0.0.0-alpha.5":"2026-09-12T16:31:05.847Z","0.0.0-alpha.6":"2026-09-15T18:45:10.927Z","0.0.0-alpha.7":"2026-09-19T10:50:31.176Z"},"bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"license":"MIT","homepage":"https://agenticprimitives.dev","keywords":["agentic","primitives","verification-receipt","evidence","privacy","commitment","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/verification-receipts"},"description":"Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"readme":"# @agenticprimitives/verification-receipts\n\n> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)\n\n**Verifier-retained verification receipts** — the portable evidence that a verifier checked an\nagent's authority at execution time (signature, scope vs. transaction parameters, current\nrevocation status), retained independently by the counterparty.\n\nSpec: [`specs/303-verification-receipts.md`](../../specs/303-verification-receipts.md) · Doctrine:\nADR-0010 amendment 2026-07-07 (\"the Smart Agent address is the accountability root, not the default\npresentation identifier\") · Standing measurement:\n[acting-on-behalf alignment audit](../../docs/architecture/acting-on-behalf-alignment-audit.md).\n\n## Why\n\nWhen an agent transacts before its principal reviews the action, the counterparty's protection is\nthe verifier's diligence — and diligence that leaves no retained artifact is unprovable. This\npackage produces that artifact. Naively, a rich receipt (principal address, tool name, args hash,\nexact timestamp) would also be a correlation surface; receipts here are **born privacy-split**:\n\n- **Public receipt** (`VerificationReceiptV1`) — exportable, counterparty-retained. Carries the\n  verifier identity (services are public), the decision, coarse reason, revocation evidence\n  (chain/block), a UTC-day time bucket, already-public artifact hashes (delegation / invocation\n  proof), and **HMAC commitments** — never raw values — for the principal and arguments.\n- **Private detail** (`VerificationReceiptDetailV1`) — vault-resident. Raw principal, tool, args\n  hash, exact time, and the `receiptKey` that opens the public commitments. Destroying the key and\n  detail degrades the public receipt to an anonymous verdict whose signature still verifies — the\n  GDPR-erasure-friendly path.\n\n## Use\n\n```ts\nimport {\n  mintVerificationReceipt,\n  verifyVerificationReceipt,\n  openReceipt,\n} from '@agenticprimitives/verification-receipts';\n\n// At the verify pipeline's terminal point (allow AND deny):\nconst { receipt, detail } = await mintVerificationReceipt(\n  {\n    verifier: serviceSa,\n    decision: 'allow',\n    reasonCode: 'verified',\n    principal, toolName, argsHash,\n    delegationHash, invocationProofHash,\n    scopeDecision: 'in_scope',\n    status: { revocation: 'active', chainId, blockNumber, blockHash },\n    verifiedAt: new Date().toISOString(),\n    verifierPolicyVersion: 'policy-v1',\n  },\n  { sign: (receiptHash) => hostSigner.sign(receiptHash) }, // injected — KMS/EIP-712/ECDSA\n);\n// → receipt: return to the caller (`_meta.ap_receipt`) + durable sink\n// → detail:  write to the principal's vault (classification `receipt.private`)\n\n// Counterparty, offline, no AP runtime:\nconst ok = await verifyVerificationReceipt(receipt, { verifySignature });\n\n// Dispute: does the vault detail open this receipt?\nconst opens = await openReceipt(receipt, detail);\n```\n\nSigning and signature verification are **injected ports** — this package is dependency-free\n(WebCrypto only) and never picks a crypto mechanism for you. One scheme per deployment, no\nfallbacks.\n\n## Non-goals\n\nThe mint-point wiring, durable storage, and vault residency belong to `mcp-runtime` and consuming\napps (spec 303 W2). Audit events remain `@agenticprimitives/audit`'s job — receipts share hashes\nwith audit rows (one incident, joinable evidence) but face the counterparty, not the substrate.\n\n## Status\n\n`w1-mint-verify` — types, commitment profile, canonical hashing, mint/verify/open, unit suite.\nRuntime wiring (W2), A2A task receipts + `ap verify-receipt` CLI (W3), and relationship-record\nanchoring (W4) are tracked in the spec.\n","readmeFilename":"README.md","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"}}