@agentplat/mesh-crypto 0.3.0-alpha.1 → 0.3.0-alpha.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -3
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -32,9 +32,10 @@ Public-key import and export use the provider-neutral raw 32-byte Ed25519
|
|
|
32
32
|
representation. Private-key import and export are intentionally outside this
|
|
33
33
|
package's public surface.
|
|
34
34
|
|
|
35
|
-
Verification establishes payload integrity, signature validity and
|
|
36
|
-
|
|
37
|
-
|
|
35
|
+
Verification establishes payload integrity, signature validity and
|
|
36
|
+
authentication of possession of a live locally bound key. It does not provide
|
|
37
|
+
confidentiality or establish the truth of a sender claim; it does not admit a
|
|
38
|
+
peer, authorize a message, apply replay state or mutate domain state.
|
|
38
39
|
|
|
39
40
|
Private keys are never protocol payloads, fixtures or telemetry. Signing tests
|
|
40
41
|
generate temporary key pairs at runtime; public fixtures contain only a raw
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@agentplat/mesh-crypto",
|
|
3
|
-
"version": "0.3.0-alpha.
|
|
3
|
+
"version": "0.3.0-alpha.3",
|
|
4
4
|
"description": "Web Crypto signing and verification contracts for AgentPlat Mesh envelopes.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "Apache-2.0",
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"README.md"
|
|
20
20
|
],
|
|
21
21
|
"dependencies": {
|
|
22
|
-
"@agentplat/mesh-protocol": "^0.3.0-alpha.
|
|
22
|
+
"@agentplat/mesh-protocol": "^0.3.0-alpha.3"
|
|
23
23
|
},
|
|
24
24
|
"engines": {
|
|
25
25
|
"node": ">=20.19.3"
|