{"_id":"@agledger/verify-core","_rev":"23-b75fe34d8331bef5c40bd61940b5a147","name":"@agledger/verify-core","dist-tags":{"latest":"1.5.0"},"versions":{"0.1.0":{"name":"@agledger/verify-core","version":"0.1.0","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.0","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/agledger-agents/issues"},"dist":{"shasum":"8a2bd6d19c70a63e6b2409b4e9142df2650d9cd7","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.0.tgz","fileCount":23,"integrity":"sha512-2STMltLNJLhOJK1SlkpzNCpQPuHX3c+AlqlAxUEoP/3jGL2glvU5OJvv9zcpJBxySY2ap7vVw/dB6qWxuLRhRQ==","signatures":[{"sig":"MEYCIQD2+8h70xFZNonUwImfEWtI+cMe4NFgdUzhQV0pLB8IgAIhANX/I0mXiBDHP8qJR1tA8OT5sZHs01HG2AUdtRfbeDL1","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":111487},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"a41135c64e5d2683825a35ecc307ea017b272857","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"boisedude","email":"mcooper@mcooper.com"},"repository":{"url":"git+https://github.com/agledger-ai/agledger-agents.git","type":"git","directory":"packages/verify-core"},"_npmVersion":"11.12.1","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.14.1","dependencies":{"cborg":"5.1.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.0_1779892059509_0.6501152727914901","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@agledger/verify-core","version":"0.1.1","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.1","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/agledger-agents/issues"},"dist":{"shasum":"0a848c53efce901f314ff37f8764387d028d29c5","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.1.tgz","fileCount":23,"integrity":"sha512-NFNbGpjdbfdo5ijPbapOiWSDalH9M95EYeJ/J0ijeIDHUnv8PChV2CfF5ClD7Culip9d650NzBNV1+2mOscRvA==","signatures":[{"sig":"MEUCIQDobCy/NTStzvHC/a6BVdJTrmUz616B34nKOfcuQDbybAIgVkqMy0ikXcfK5ijv8KHXHXbw6e+Jtzfm0yM4mDPh/9E=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":117442},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"2178e5a6532b9ab2df4351be4a689f9bd1950259","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"boisedude","email":"mcooper@mcooper.com"},"repository":{"url":"git+https://github.com/agledger-ai/agledger-agents.git","type":"git","directory":"packages/verify-core"},"_npmVersion":"11.15.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.1_1779943732257_0.7674401736769147","host":"s3://npm-registry-packages-npm-production"}},"0.1.2":{"name":"@agledger/verify-core","version":"0.1.2","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.2","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/agledger-agents/issues"},"dist":{"shasum":"8b15edeeb37237133c3f214ea287cbeec2f431b1","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.2.tgz","fileCount":23,"integrity":"sha512-vFjhymnwRXu12uEIbaCVhE57Dz/VLLy2dLkxl9wfBMFMel5CQZ/GvBWds16n9kcgknXgOPufI56FCnZZcmvXGA==","signatures":[{"sig":"MEUCIExvyq2xZdlxpHxdUcEg+7da+r4Kie8Y9TFhD5deqkgCAiEAivJO3hCK73VFLkGqcK4P5Y/rNKv0/t0WiqtzP2RN05I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":124783},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"01c475e0c8770d8d14675860a96c9dfe196d7bdd","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"boisedude","email":"mcooper@mcooper.com"},"repository":{"url":"git+https://github.com/agledger-ai/agledger-agents.git","type":"git","directory":"packages/verify-core"},"_npmVersion":"11.15.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.2_1779994497641_0.6547764272768346","host":"s3://npm-registry-packages-npm-production"}},"0.1.3":{"name":"@agledger/verify-core","version":"0.1.3","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.3","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/agledger-agents/issues"},"dist":{"shasum":"5eb25258bef0b8cd82c89eb67af5a613b01adb7b","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.3.tgz","fileCount":23,"integrity":"sha512-PrFjB0Yv34ja1hqIoa4s6vU8Cd4K6sVnnom9MNfF/juVZ58Qd0BJYujbu1/bgEkM04t0Z/yyHOS+SYoGi03nZA==","signatures":[{"sig":"MEUCIBzOZ9yXZIbxNe/d15OrvvPOiKPXF0GmWfBY7V7J9tk9AiEAwygFyWSid9nPgBG1tDJLDM3U3VQ0SOVi3z5jESVYSKU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":127773},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"539bf2c127ba9bbb5b1d7b554417a5f00e972d70","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"boisedude","email":"mcooper@mcooper.com"},"repository":{"url":"git+https://github.com/agledger-ai/agledger-agents.git","type":"git","directory":"packages/verify-core"},"_npmVersion":"11.15.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.3_1780085498989_0.11757151203828986","host":"s3://npm-registry-packages-npm-production"}},"0.1.4":{"name":"@agledger/verify-core","version":"0.1.4","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.4","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"b287ff628e4792a6b6ded25c4469f0045dd36ac2","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.4.tgz","fileCount":23,"integrity":"sha512-sB3ZWqVkdGFOazvFTQrXREqjUaHqZeC7XkGzBXtSjYxmUAk3usbxQ6lH/2rfpMb9XAje1KnOjqHh82coDx3AVw==","signatures":[{"sig":"MEUCIQDHcT+/3qYie4OY2UVxeL5xlM+yAMLY+gjy3qWwdkbfsQIgD1/t7/LlgwBnl1CzJO2PPM3NhWozV4Vsm8u+48S5kbM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@0.1.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":127894},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"6ce056d1598ffc0d987ecc3b68955c67828d1825","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.16.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","typescript":"^6.0.0","@types/node":"^24.0.0"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.4_1780551741124_0.36256050403355355","host":"s3://npm-registry-packages-npm-production"}},"0.1.5":{"name":"@agledger/verify-core","version":"0.1.5","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.5","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"cb4b271e32f4a4f455a27fd01494eef94aabb3fb","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.5.tgz","fileCount":23,"integrity":"sha512-JN90GYCRLLUmKx1kmaFrWbIpA9waghAccttlBLQX+0L7l7S2h4c4j241zPl7/7ZH8n7ZhD37Ln2g/T+O/f5f/A==","signatures":[{"sig":"MEYCIQDqqOm3pmx3brLrSkeEUO4Eg8dESbHdLOVN05Lx7FBA0wIhAOEb48G9pfWXp4ZmSX4dxl6SvCRbPZYvMEhGmMyzv0Y1","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@0.1.5","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":127894},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"197f597328508fcca19ad62d18c6d64fdd1e05a1","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.16.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","typescript":"^6.0.0","@types/node":"^24.0.0"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.5_1780555059976_0.9782064779727657","host":"s3://npm-registry-packages-npm-production"}},"0.1.6":{"name":"@agledger/verify-core","version":"0.1.6","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.6","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"7a561942d306439b7cb56f83e00cf158efbbe5f7","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.6.tgz","fileCount":23,"integrity":"sha512-aMx+Q6qJgNNZDsbfzTLktvYYuVKUYB8JyA8BYmOJdKUtkScY5ER+Psjf7uiJtPSxYAcuMoBzrATXD/ZH0zmJTA==","signatures":[{"sig":"MEQCICuGCbQI5G+VgvwKSb9IIh2F3LTluBoIw8QNbHG+3FBSAiAWyG5yti4nPskLTyRBWb5OminFyStPC30zDNA9B6VARQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@0.1.6","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":127894},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"0414fd4ea65768c6a8c1fef6b5dce5b2683c651a","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","prebuild":"rm -rf dist","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.16.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","typescript":"^6.0.0","@types/node":"^24.0.0"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.6_1780599529135_0.003132472747973125","host":"s3://npm-registry-packages-npm-production"}},"0.1.7":{"name":"@agledger/verify-core","version":"0.1.7","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.7","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"c9d65e0b032c82133a647210c8b4bd3adcc9aac7","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.7.tgz","fileCount":23,"integrity":"sha512-POTtqv7RELeYQZO7/x8/DLqfF20TdPgRz4Nz2TWzOztNk1EYWX+YZx6WW99AcljfbYmqt7npnF2HlGReLdBAXQ==","signatures":[{"sig":"MEUCIEOVSzV4FD59XoJnd1H7jySnUfS10pXbHcR3bWprTohVAiEAxNlwVd5M9iFSJB8tEqnLaI+upBNdaDfCMNFsm+CI5lk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@0.1.7","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":128121},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"17452539201c3fc95ee56910e0a85ee32e180f12","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.16.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^6.0.0","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.7_1780600098272_0.6030107810735588","host":"s3://npm-registry-packages-npm-production"}},"0.1.8":{"name":"@agledger/verify-core","version":"0.1.8","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.8","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"41a70a20692b6f643ee3ffdccf0038c066e21563","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.8.tgz","fileCount":23,"integrity":"sha512-9euNP+lFwLlqHH0JWNkt5NlVW9pCOXnXP0kzpZd+4CXU7U4M9VGiODENBcca+tpfVObE7VSixvEckojW7Po7ZA==","signatures":[{"sig":"MEQCIDIMujvYywTi6DHNghzZZ+K8kGgXHz5b0e7ZNp8BnjAPAiA60tJVdsCp/aUm69Ef8z5HGe85Aqcsd3Ftt7OAbqgHLQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@0.1.8","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":128755},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"d3f41a831e93cb28389f80d999dc4dc88d0b92bf","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.16.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^6.0.0","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.8_1780607105668_0.07597963475422209","host":"s3://npm-registry-packages-npm-production"}},"0.1.9":{"name":"@agledger/verify-core","version":"0.1.9","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@0.1.9","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"d997e426726984dda64d8ff57ede77de8227eeb1","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-0.1.9.tgz","fileCount":23,"integrity":"sha512-VrQAtMh7HXkIGc0PQx2+gwtn9hmYTsr2J8JSf3LUdrxxXihqsgxCvVBa4PCChbT0+bISXHCbhvce4t6ZIqxadQ==","signatures":[{"sig":"MEUCIFWJx8GTJCw87072nmA57MqG0ThwN6QsnttUhjQas/D8AiEAyOrifwZp2KzXehFQIT5D1QLwTUoJNpadwQ7LtbOl/2U=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@0.1.9","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":129210},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"b6d214240419314df2876a9b0953a87c50ed1a3a","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.16.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^6.0.0","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_0.1.9_1781050799943_0.27433330387543786","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"@agledger/verify-core","version":"1.0.0","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.0.0","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"fce8621ca4801af00d27ffbac8706cd8063c5537","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.0.0.tgz","fileCount":23,"integrity":"sha512-UITqsqUNt/ah8LZD6+2DgcjY26Ibb935WaA9Xn1pLOiokgONhSjYhN3fvRUUjE8C7XOrRgQ1lJbD3U6vi8IJ8Q==","signatures":[{"sig":"MEYCIQD8XBaDb+86E0byZJPnBYIV8Di8TgcZy7IvMSxn9Uj4wgIhANbFtdz2HYUoFNDdVwJk8ayyfm8+8YfuztKWhqI1meLm","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":129210},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"93b6007f81d9979281946e1182be8e8573287e43","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.17.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^6.0.0","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.0.0_1781999039214_0.26894679124433085","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"@agledger/verify-core","version":"1.0.1","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.0.1","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"8d159626b90d8b366ce3fb698d37aa04687f3a50","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.0.1.tgz","fileCount":23,"integrity":"sha512-Cqf/U7tmo1dtCxXqOAiDF562vQ7LTBPfy4U9AMRaJrx96XWdoqvsAwSowiGqCBgRpDSTGeqYWqDYVXBB6WM8yg==","signatures":[{"sig":"MEUCIQD+jS1XPkllXAW83hPhb7xAOMJQ2WFiFP1HzWeM7MJAOwIgf6ZPl5dZGYwh0hqwt/RTs1gvgIi4tDsLEyy5fxA25AE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":130529},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"388d6a97d73b902ec71a735c4ae24643e7312ded","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.17.0","description":"Shared offline verification core for AGLedger audit chains — COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP","directories":{},"_nodeVersion":"24.16.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^6.0.0","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.0.1_1782173448199_0.399213023293131","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"@agledger/verify-core","version":"1.0.2","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.0.2","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"7f2f0761e60a0778b8ee3503d8fc6ac5430fe885","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.0.2.tgz","fileCount":23,"integrity":"sha512-HltUYR4AbK0gFTnvjM1fzEIwAH5zJZ1UeDkyc/mxUdq75KQzS/GOXfji0dM53ZcQsraLv+YOUd8pLiiWzmqKkw==","signatures":[{"sig":"MEYCIQDuY1GU/w1Iv8e1MAgiiznAWmbW3t+P4Z24D4qTO2/eOQIhAO8to5B9SQ4ttVBQfFnCix2pr9JOLMXU/HuRkMOVj3at","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":130499},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"779a3ed54dd9f9c62ac5cfdafc8b8a4430c0add0","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"11.18.0","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP ","directories":{},"_nodeVersion":"24.17.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^6.0.0","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.0.2_1782794246677_0.9887747949180552","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"@agledger/verify-core","version":"1.0.3","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.0.3","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"06ec0198cf7ffdd1a208ac0c07c04b881788d410","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.0.3.tgz","fileCount":23,"integrity":"sha512-uY8gFYivUVpbhjvzq8T4vzKw0PgsAdbASIoHzNoXkV4DmDOIKCYhb9QZ+h9Bke+GOU/FZ9310DvC4rOgOVCmmA==","signatures":[{"sig":"MEYCIQCg+hybQetcJPA9ptorDEwFJf8Do4nqSpID5WtyiTUAZQIhAKAIX3MsWumURebCXH7bRjBi1OcuQlZm+NXMN1hl1GBX","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":130514},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"ed9f6921c27a766bd09d59c562c5cfc6eb54d446","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.1","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP ","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"5.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.21","typescript":"^7.0.2","@types/node":"^24.0.0","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.0.3_1784249260579_0.056062234594845384","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"@agledger/verify-core","version":"1.0.4","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.0.4","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"085da42b59225d6e6931342239d3d9551bbce978","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.0.4.tgz","fileCount":23,"integrity":"sha512-vLNw1FRa/3SyC+X3FB4vs4NKQIvhdCGuDjuFdZ/HV5YrL9PTaz0QVpnQ6iO3ix43f9Pn4LwH+w8rDCt7ey2fng==","signatures":[{"sig":"MEYCIQDX1RHTyqMKe098uiamqTWa8yhzevsKEpnGxXicwdfZ0wIhAI9QuTi3D0Y7vCVCeQ/ZOpX+4Q3Ep85D9cE+t8Z8het+","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.0.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":130621},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"bc1b395efad8ec20701df35391883268d3e5147a","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP ","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.0.4_1785816730487_0.08077634087792673","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@agledger/verify-core","version":"1.1.0","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.1.0","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"a2267dd8786a38ddf0f432129560cde7db176dfb","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.1.0.tgz","fileCount":23,"integrity":"sha512-nCxGNKJvrM1X1KTAPCJAowMev5Mn2C0SytAUmFclUMWcss66LlUnvkHOxKducom1tyNSrd/xhSKa1XJie3tmBw==","signatures":[{"sig":"MEUCIDGDCJno+u0sq3rvub+cSkLcBoYG9FTtI+F1Xmovkn4zAiEAjoJfYCqQ3u6NDOIEirwHGqQoxyEmLkFOo1tVvqrebts=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":149041},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"646e9dcd3204c59a4660f573eb70ef77337c4717","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP ","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.1.0_1785952518414_0.6167067476353891","host":"s3://npm-registry-packages-npm-production"}},"1.1.1":{"name":"@agledger/verify-core","version":"1.1.1","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.1.1","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"edefecf0e1339a4454175422f746cdcbf352e335","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.1.1.tgz","fileCount":23,"integrity":"sha512-3Fn36QVr0PQyICE+iR+vkk4XeS/kREFp1ibu2XB8RfUc1Oo8MTyyFOJsQEaG13if8N2D2GkdabK8I0+nAB1WzQ==","signatures":[{"sig":"MEUCIQDU8JHvA8faL205FpHcfyGIZwRReXZDmaOWK6VPQF8DMQIgUrGEEezxGBT06kQDkkavGapxawrT11vCi01l4Db2niI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":149418},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"8a1bf19f851ca1d43fa68bbf7582c16c01caccdd","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, CLI, MCP ","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.1.1_1785954929325_0.22418246081229887","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@agledger/verify-core","version":"1.2.0","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.2.0","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"441299a025f13b02c714dd202feab155634a8abe","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.2.0.tgz","fileCount":23,"integrity":"sha512-ipTl06nvqjpszU8mx7ZNBQQtJnb6LqgAmMKRHxBFv2tMkUDbQY6Tjc1ivyMp1kc8Ghn1XBNzggjOwSPXoO0YIg==","signatures":[{"sig":"MEYCIQCwPNA7tyRBs0bWRroQ9idS1T6umAUZomy7IXq46gDmZAIhAL59GBYVluoIJn3SPcc6rtMTvfH2rt980Aylo1S/zXoB","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":156047},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"73ea8db924e4f0e659d96f4e71a5208abd33a0a5","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.2.0_1786085162850_0.6486338619652832","host":"s3://npm-registry-packages-npm-production"}},"1.3.0":{"name":"@agledger/verify-core","version":"1.3.0","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.3.0","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"1ca8d64b62ec2f7f9751c2a8c8664a07e7a3719f","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.3.0.tgz","fileCount":23,"integrity":"sha512-ldfG5CiQyfAqo1jmRnrhguDAG0lGLxyndIgwMjP8wE9yVH8SV2zh/dSVaUETLoNtn1JLNo2GNPZsFn4OC7RkOw==","signatures":[{"sig":"MEUCIQCcZmb9uiEbKmr7lc5t3ggJznQ3ox3pg4+ZNHOTcVu0/wIgO+6hj4KJmGEKoMqSHscqAu1Do7cborYOJCKjZJCF4dE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":157655},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"aeaa87e703f327b3d1cc4e9d2a18f7519c5618ee","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.3.0_1786090017419_0.41019719155628453","host":"s3://npm-registry-packages-npm-production"}},"1.4.0":{"name":"@agledger/verify-core","version":"1.4.0","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.4.0","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"e4b06c58ada0b64f28a2fad3df80fba978896405","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.4.0.tgz","fileCount":13,"integrity":"sha512-omhlDHE7ffdtHzW8cFxi8g34L4I+MJfpYqnKUe0iyIfIKN/30uBvGNBCBmRfi1jYt8N33Jg1MKBY/+cUzQV5+g==","signatures":[{"sig":"MEYCIQCYuMMfyytOnL1Xe6Jhb/6dx/UIea0HnNBtc8dXvW+MkAIhAIY6iPj/cK2duEuYCmUaAeu+7V7Q6YNQfOMczrsgvUtr","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":124976},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"dcacb2ac5164eb38cba2678a64b77894c76cc506","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","directories":{},"_nodeVersion":"24.18.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.4.0_1786249870424_0.15493416481057376","host":"s3://npm-registry-packages-npm-production"}},"1.4.1":{"name":"@agledger/verify-core","version":"1.4.1","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.4.1","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"97901b1b6e99356424d52567cb24741e9a8264fd","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.4.1.tgz","fileCount":13,"integrity":"sha512-0qfPl1955s9mTytqsgXpFUx8KZUcovLXL0i07O2RLxNbxRHImU5EsTADhThDwGSJKttnEyFoEMIlkfTgeF5tmA==","signatures":[{"sig":"MEQCIF5yRgVPJrC9lG1ON4qkbqHkQ/Dyc16xRVjuniWRheCBAiBYfN4ms/7w4oNRk8M5Ldv0xqSHm1paepH/pSz814JECQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.4.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":124934},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"22926301fc18ac0e43ae2434dca6eb756c4cca22","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","directories":{},"_nodeVersion":"24.19.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.4.1_1788152079451_0.36498647947891394","host":"s3://npm-registry-packages-npm-production"}},"1.4.2":{"name":"@agledger/verify-core","version":"1.4.2","author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","_id":"@agledger/verify-core@1.4.2","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"homepage":"https://agledger.ai","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"40a9463441f342f43d6238a24388e87aaa12de99","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.4.2.tgz","fileCount":13,"integrity":"sha512-Lm2ys10ovI6t/glOA2CPzMiN7XyBK1XL6/bUi6KuktSu/vTDTiirGuga3moUkbqCAVx6rMUytTxicyRboM771A==","signatures":[{"sig":"MEUCIQCGXuS5kM/BNU2ja1FqIflztyPOreiw43t9u71eyNuWKgIgGsh+zeXUUTjuXuu4eMEntYZ0mdkWX1g92rIW+3EuT0w=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIE1v4dL7UKVlUlin4SAVWfdF+mfIBphu9lmQVxeW5+4ZAiAI1RvMiF2WxXifwMM9Oc7sZKcO9L7F6025QiJ1KJYhrQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.4.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":124998},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"d61ebf0ffa8d9a9c61b75b681726f25fcca4ad56","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","directories":{},"_nodeVersion":"24.20.0","dependencies":{"cborg":"6.1.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^5.0.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"tmp":"tmp/verify-core_1.4.2_1789213946567_0.06446729927195372","host":"s3://npm-registry-packages-npm-production"}},"1.5.0":{"_id":"@agledger/verify-core@1.5.0","bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"dist":{"shasum":"31db54a312355f4b760cf710a797a02a21b2d702","tarball":"https://registry.npmjs.org/@agledger/verify-core/-/verify-core-1.5.0.tgz","fileCount":13,"integrity":"sha512-q+pkOpB8u/GLvX07Quf7Jf5elVPjqu1b2TGkfCncfc0GAVuG6IKrgz9LoUenUOj9gBXNCFlTPBUB5jX2nAH+/w==","signatures":[{"sig":"MEUCIQDrZXCEkrw2Z7/cKHxurYp/l/5byxOPrfql+j3+/c6T+wIgBtls0w4cXxS8XBv1HIgybluaJNtVVML6lnw2P9AJSE4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIDCR5b47s+wVypNjaZS8H5LIsJAgA+eLV7v9Z2jOCXQQAiAwW4CFGwBJyip/lpCk/UNqIGUNIUj4lLXRLM4tnR+Baw=="}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@agledger%2fverify-core@1.5.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":156407},"main":"./dist/index.js","name":"@agledger/verify-core","type":"module","types":"./dist/index.d.ts","author":{"name":"AGLedger LLC"},"engines":{"node":">=24.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"63a596a676d7ed77f15688ac3b571624e994ccb4","license":"SEE LICENSE IN LICENSE","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc","clean":"rm -rf dist *.tsbuildinfo","deps:lag":"node scripts/dep-lag.mjs","lint:pkg":"publint --strict && attw --pack . --ignore-rules cjs-resolves-to-esm no-resolution","prebuild":"rm -rf dist","typecheck":"tsc --noEmit","deps:refresh":"npm update && node scripts/dep-lag.mjs","prepublishOnly":"npm run build && npm run lint:pkg"},"version":"1.5.0","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ad8504bd-6e8f-43fc-bab3-7c1e539ad40f"}},"homepage":"https://agledger.ai","repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"_npmVersion":"12.0.2","description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","directories":{},"maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"_nodeVersion":"24.20.0","dependencies":{"cborg":"6.1.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^5.0.0","publint":"^0.3.22","typescript":"^7.0.2","@types/node":"^24.13.3","@arethetypeswrong/cli":"^0.18.3"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/verify-core_1.5.0_1790062960904_0.4131893598543077"}}},"time":{"created":"2026-05-27T14:27:39.334Z","modified":"2026-09-22T07:42:41.424Z","0.1.0":"2026-05-27T14:27:39.646Z","0.1.1":"2026-05-28T04:48:52.402Z","0.1.2":"2026-05-28T18:54:57.782Z","0.1.3":"2026-05-29T20:11:39.149Z","0.1.4":"2026-06-04T05:42:21.291Z","0.1.5":"2026-06-04T06:37:40.161Z","0.1.6":"2026-06-04T18:58:49.278Z","0.1.7":"2026-06-04T19:08:18.422Z","0.1.8":"2026-06-04T21:05:05.833Z","0.1.9":"2026-06-10T00:20:00.095Z","1.0.0":"2026-06-20T23:43:59.355Z","1.0.1":"2026-06-23T00:10:48.349Z","1.0.2":"2026-06-30T04:37:26.903Z","1.0.3":"2026-07-17T00:47:40.707Z","1.0.4":"2026-08-04T04:12:10.625Z","1.1.0":"2026-08-05T17:55:18.584Z","1.1.1":"2026-08-05T18:35:29.494Z","1.2.0":"2026-08-07T06:46:03.013Z","1.3.0":"2026-08-07T08:06:57.605Z","1.4.0":"2026-08-09T04:31:10.572Z","1.4.1":"2026-08-31T04:54:39.576Z","1.4.2":"2026-09-12T11:52:26.669Z","1.5.0":"2026-09-22T07:42:41.026Z"},"bugs":{"url":"https://github.com/agledger-ai/verify-core/issues"},"author":{"name":"AGLedger LLC"},"license":"SEE LICENSE IN LICENSE","homepage":"https://agledger.ai","repository":{"url":"git+https://github.com/agledger-ai/verify-core.git","type":"git"},"description":"Shared offline verification core for AGLedger audit chains: COSE_Sign1 (RFC 9052) decode/verify, Ed25519 + ES256, hash-chain walk, Merkle proofs, and the canonical failure taxonomy. One dependency (cborg); no network. The single source of truth the SDK, C","maintainers":[{"name":"boisedude","email":"mcooper@mcooper.com"}],"readme":"# @agledger/verify-core\n\nThe shared offline verification core for AGLedger audit chains. Decodes\ncanonical **COSE_Sign1** envelopes (RFC 9052, tag 18) over in-toto v1\nStatement payloads, walks the per-record hash chain, and verifies the\nsignature over each `Sig_structure` under the algorithm the verification key\ncommits to (Ed25519 or ES256), with no engine, no database, and no network.\n\nThis is the single body of logic that underpins the SDK `/verify` subpath\n(`@agledger/sdk/verify`), the [`@agledger/cli`](https://github.com/agledger-ai/cli)\n`verify` command, the\n[`@agledger/mcp-server`](https://github.com/agledger-ai/mcp-server) `agledger_verify`\ntool, and the full-vault [`@agledger/verify`](https://github.com/agledger-ai/verify)\nauditor package. Each of those\nconsumes this core rather than carrying its own copy, so a chain that passes in\none surface passes identically in all of them.\n\nOne dependency: [`cborg`](https://www.npmjs.com/package/cborg), for COSE_Sign1\nCBOR decoding.\n\n## Install\n\n```bash\nnpm install @agledger/verify-core\n```\n\nNode 24 or newer. If you want a ready-made verifier rather than a library, use\n[`@agledger/verify`](https://github.com/agledger-ai/verify) for a full-vault dump\nor the `verify` command in [`@agledger/cli`](https://github.com/agledger-ai/cli)\nfor a single record export.\n\n## Usage\n\n```ts\nimport { verifyAuditExport } from '@agledger/verify-core';\n\nconst result = verifyAuditExport(exportDocument, {\n  publicKeys,             // optional out-of-band keys (see \"Out-of-band keys\" below)\n  requireOutOfBandKeys: true, // optional: refuse the export's embedded keys\n});\n\nif (!result.valid) {\n  console.error(`Broken at position ${result.brokenAt?.position}: ${result.brokenAt?.code}`);\n  process.exit(1);\n}\n// { valid: true, verifiedEntries, totalEntries, keyProvenance: { outOfBand, embedded }, ... }\n```\n\n## What it verifies\n\n- **`chainPosition` monotonicity**: gap-free, in order.\n- **`payload_hash` = sha256(cose_sign1)**: the visible row hash binds the\n  signed envelope bytes.\n- **`previous_hash` linkage**: each entry chains to its predecessor.\n- **Signed chain-claim cross-check**: the chain position and linkage claimed in\n  the COSE protected header match the row columns.\n- **Envelope signature**: over the reconstructed `Sig_structure`, against the\n  matched verification key, under the algorithm its SPKI commits to (Ed25519\n  or ES256; anything else fails closed as `CHAIN_UNSUPPORTED_ALGORITHM`).\n- **Signed-kid binding**: the row's `signingKeyId` names the key the protected\n  header signed.\n- **Payload binding**: each entry's human-readable `payload` still matches the\n  predicate inside the signed bytes, so a rewritten view of the record fails\n  `CHAIN_PAYLOAD_BINDING_MISMATCH`.\n- **OIDC actor**: the row's `actorOidcIss` / `actorOidcSub` match the identity\n  signed in `predicate.on_behalf_of`.\n- **Actor attribution**: the row's `actorId`, `actorRole` and `actorOwnerId`,\n  the attribution an export's own guide tells an auditor to rely on, match the\n  actor claim signed in the protected header, so an export re-attributed to\n  another actor fails `CHAIN_ACTOR_ATTRIBUTION_MISMATCH`.\n- **Key validity windows**: each entry was written inside its signing key's\n  activation window.\n- **Agent signatures**, when you supply the agent's cert key (below).\n\nThe payload, OIDC, attribution and key-window checks run when the export\ncarries their inputs, which every current Server does. The result's `optionalChecks` says\nwhich ran, so \"not checked\" never reads as \"passed\".\n\n## Agent signatures\n\nAn agent that authenticates with an ephemeral cert can sign each request body\nit sends. The Server checks that signature, then seals it into the chain entry\nas `predicate.on_behalf_of.agent_signature`, beside the RFC 7638 thumbprint of\nthe cert's public key. The envelope signature proves the Server wrote that. To\nprove the agent itself signed, without taking the Server's word for it,\nre-verify the agent signature against the cert's public key.\n\nThe export does not carry cert public keys. Supply them as the Ed25519 JWK the\nagent sent to `POST /v1/auth/oidc/cert` (the same key is the `cnf.jwk` claim\ninside the `certJws` it got back):\n\n```ts\nimport { verifyAuditExport } from '@agledger/verify-core';\n\nconst agentKey = { kty: 'OKP', crv: 'Ed25519', x: 'BKOgK3KibE8BZH8SXTX9dmAXcwgocTMHIv-R_eRB2lo' } as const;\nconst result = verifyAuditExport(exportDocument, { agentKeys: [agentKey] });\n\nconsole.log(result.optionalChecks.agent_signature); // 'applied'\nconsole.log(result.agentSignatures); // e.g. { present: 6, verified: 6 }\n```\n\nA key is matched to an entry only through the thumbprint that entry signed, so\na key for some other cert is never checked against it and where the key came\nfrom needs no trust. `present` counts entries carrying an agent signature and\n`verified` those re-checked and found good; `present > verified` on a valid\nresult means some were not checked, never that they failed. One that does not\nverify fails `CHAIN_AGENT_SIGNATURE_INVALID`. The check runs only where\n`on_behalf_of.validated` is `true`: on a caller-asserted identity the two fields\nmay be passthrough from an older Server, and the export cannot tell which.\n\nThe Server's own chain verification also compares each sealed cert against its\nlive cert record (`cert_missing`, `cert_actor_drift`, `cert_window_drift`,\n`cert_expired`). That record is not exported, so those checks have no offline\ncounterpart; the signed bytes already fix the cert id, thumbprint and expiry an\nentry sealed.\n\n## Verifying on a FIPS-locked host\n\nThis package has no crypto of its own: it verifies through the host's Node\nruntime. An active OpenSSL FIPS provider carries no EdDSA, so **an Ed25519\nchain cannot be verified on a FIPS-locked host**. ES256 chains can.\n\nThat is reported as `CHAIN_UNSUPPORTED_ALGORITHM`, never as a signature\nfailure. The distinction is the whole point: \"I could not check this\" and \"I\nchecked this and it failed\" lead to opposite conclusions, and only one of them\nis grounds for a tamper investigation. The result still fails closed, because\nan unverified chain is not a verified one. To actually verify an Ed25519 chain,\nre-run on a host without the restriction; the export and keys are portable and\nthe verification is entirely offline, so this costs nothing but a second host.\n\n### Asking about an algorithm directly\n\n`CHAIN_UNSUPPORTED_ALGORITHM` covers two causes with different remedies (this\nbuild does not implement the algorithm, versus this host refuses to compute it),\nso a consumer writing its own report can ask about either:\n\n```ts\nimport { algorithmByName, runtimeCanCompute, describeUnsupportedAlgorithm } from '@agledger/verify-core';\n\n// runtimeCanCompute takes a KeyAlgorithm from this build's table, NOT a name\n// string. Look one up with algorithmByName ('Ed25519', 'ES256', 'ES384',\n// 'ES512', 'ES256K'); it returns null for anything else.\nconst ed25519 = algorithmByName('Ed25519');\nif (ed25519 && !runtimeCanCompute(ed25519)) {\n  console.warn('This host cannot verify Ed25519 chains.');\n}\n\n// Or ask about a specific key, given its SPKI DER base64. Safe to call without\n// having established that a gap exists: a key that verifies fine here says so\n// rather than asserting a refusal that did not happen.\nconsole.log(describeUnsupportedAlgorithm(spkiBase64));\n```\n\n`algorithmByName` exists for the case `resolveKeyAlgorithm` cannot serve: a host\nthat refuses to *load* a key of some algorithm produces no key object to\nresolve, which is exactly when the question matters most.\n\n## Out-of-band keys\n\n`options.publicKeys` accepts either of two shapes:\n\n- a **`Record<keyId, base64SpkiDer>`** map (compact, keyed by key id), or\n- an **`OutOfBandKeyEntry[]`** array, the natural shape returned by\n  `client.verificationKeys.list().data` and SCITT COSE_KeySet listings, where\n  each entry is `{ keyId, publicKey, activatedAt?, retiredAt? }` (`publicKey`\n  is SPKI DER base64).\n\nBoth are normalized at the boundary; anything else throws `TypeError`\n(fail-closed: the verifier never silently falls back to embedded keys).\n\n## Canonical failure taxonomy\n\nEvery failure is a canonical SCREAMING_SNAKE `FailureCode`. Importing the\ntaxonomy from one place keeps every verifier reporting the same code for the\nsame fault, so an auditor reads `CHAIN_LINK_BROKEN` whether the\nchain was checked by the SDK, the CLI, the MCP tool, or `@agledger/verify`.\n\n## Key provenance\n\nThe result distinguishes keys supplied **out of band** (by the caller) from keys\n**embedded in the export** under inspection. High-assurance audits can require\nout-of-band keys and fail closed on a self-attesting export.\n\n## License\n\nProprietary. See [LICENSE](./LICENSE). © AGLedger LLC. All rights reserved.\n","readmeFilename":"README.md"}