@blink-authority-com/claude-code-plugin 1.0.0

package/dist/tools/test-vectors.js

@@ -0,0 +1,169 @@
+/**
+ * blink_generate_test_vectors tool handler.
+ *
+ * Generates deterministic mock BLINK envelopes for unit testing.
+ * Uses seed-based pseudorandom generation for reproducibility.
+ */
+import { createHash } from 'node:crypto';
+// ---------------------------------------------------------------------------
+// Seeded PRNG (deterministic)
+// ---------------------------------------------------------------------------
+class SeededRandom {
+    state;
+    constructor(seed) {
+        // Simple hash-based seed
+        let h = 0;
+        for (let i = 0; i < seed.length; i++) {
+            h = ((h << 5) - h + seed.charCodeAt(i)) | 0;
+        }
+        this.state = Math.abs(h) || 1;
+    }
+    next() {
+        // xorshift32
+        this.state ^= this.state << 13;
+        this.state ^= this.state >> 17;
+        this.state ^= this.state << 5;
+        return (this.state >>> 0) / 0xFFFFFFFF;
+    }
+    bytes(n) {
+        const buf = Buffer.alloc(n);
+        for (let i = 0; i < n; i++) {
+            buf[i] = Math.floor(this.next() * 256);
+        }
+        return buf;
+    }
+}
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const ALGO_SIZES = {
+    ed25519: { sig: 64, pubkey: 32, proof: 80, pderive: 32 },
+    'ml-dsa-44': { sig: 2420, pubkey: 1312, proof: 80, pderive: 32 },
+};
+const ALGO_DISPLAY = {
+    ed25519: 'Ed25519',
+    'ml-dsa-44': 'ML-DSA-44',
+};
+// ---------------------------------------------------------------------------
+// Handler
+// ---------------------------------------------------------------------------
+export function handleGenerateTestVectors(args) {
+    const count = Math.min(Math.max(Number(args.count) || 3, 1), 20);
+    const algorithm = (args.algorithm || 'ed25519').toLowerCase().replace(/_/g, '-');
+    const scenario = (args.scenario || 'valid').toLowerCase();
+    if (!ALGO_SIZES[algorithm]) {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: `Unsupported algorithm: "${algorithm}". Use "ed25519" or "ml-dsa-44".`,
+                    }),
+                }],
+        };
+    }
+    if (!['valid', 'expired', 'tampered', 'wrong-key'].includes(scenario)) {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: `Unknown scenario: "${scenario}". Use "valid", "expired", "tampered", or "wrong-key".`,
+                    }),
+                }],
+        };
+    }
+    const sizes = ALGO_SIZES[algorithm];
+    const vectors = [];
+    for (let i = 0; i < count; i++) {
+        const seed = `blink-test-vector-${algorithm}-${scenario}-${i}`;
+        const rng = new SeededRandom(seed);
+        // Generate payload
+        const payload = `test-payload-${scenario}-${i}-${algorithm}`;
+        const payloadHash = createHash('sha256').update(payload).digest('hex');
+        // Generate mock cryptographic fields
+        const signature = rng.bytes(sizes.sig).toString('base64');
+        const ephemeralPublicKey = rng.bytes(sizes.pubkey).toString('base64');
+        const vrfProof = rng.bytes(sizes.proof).toString('base64');
+        const pDerive = rng.bytes(sizes.pderive).toString('base64');
+        // Build timestamp based on scenario
+        let timestamp;
+        const now = new Date();
+        switch (scenario) {
+            case 'expired':
+                timestamp = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000).toISOString();
+                break;
+            default:
+                timestamp = now.toISOString();
+                break;
+        }
+        // Build domain_input
+        const domainInput = `signing:test-identity-${i}:${timestamp}`;
+        // Determine final payload_hash (tampered scenario modifies it)
+        let finalPayloadHash = payloadHash;
+        if (scenario === 'tampered') {
+            // Flip some characters to simulate tampering
+            finalPayloadHash = createHash('sha256').update(payload + '-tampered').digest('hex');
+        }
+        // For wrong-key scenario, use a different P_derive
+        let finalPDerive = pDerive;
+        if (scenario === 'wrong-key') {
+            const wrongRng = new SeededRandom(`wrong-key-${seed}`);
+            finalPDerive = wrongRng.bytes(sizes.pderive).toString('base64');
+        }
+        // Build envelope
+        const envelope = {
+            signature,
+            ephemeral_public_key: ephemeralPublicKey,
+            vrf_proof: vrfProof,
+            p_derive: scenario === 'wrong-key' ? pDerive : finalPDerive, // original in envelope
+            domain_input: domainInput,
+            timestamp,
+            algorithm: ALGO_DISPLAY[algorithm],
+            payload_hash: scenario === 'tampered' ? finalPayloadHash : payloadHash,
+        };
+        const envelopeB64 = Buffer.from(JSON.stringify(envelope)).toString('base64');
+        // Expected result
+        let expectedValid = true;
+        let expectedReason = 'All fields valid, timestamp fresh, format correct';
+        switch (scenario) {
+            case 'expired':
+                expectedValid = false;
+                expectedReason = 'Envelope timestamp is 7 days old — outside freshness window';
+                break;
+            case 'tampered':
+                expectedValid = false;
+                expectedReason =
+                    'payload_hash does not match the original payload — document was modified after signing';
+                break;
+            case 'wrong-key':
+                expectedValid = false;
+                expectedReason =
+                    'P_derive in the envelope does not match the signing key — signature was produced by a different identity';
+                break;
+        }
+        vectors.push({
+            id: `tv-${String(i + 1).padStart(3, '0')}`,
+            payload,
+            envelope_b64: envelopeB64,
+            p_derive_b64: finalPDerive,
+            expected_valid: expectedValid,
+            expected_reason: expectedReason,
+            algorithm: ALGO_DISPLAY[algorithm],
+        });
+    }
+    const usageHint = 'Use these test vectors in your unit tests:\n' +
+        '1. Decode envelope_b64 with Buffer.from(envelope_b64, "base64")\n' +
+        '2. JSON.parse the decoded buffer to get the envelope object\n' +
+        '3. Pass the envelope to your verification function\n' +
+        '4. Assert the result matches expected_valid\n\n' +
+        'Note: These are mock vectors with random (but deterministic) cryptographic data. ' +
+        'They are suitable for testing parsers and format validators, but the signatures ' +
+        'are not cryptographically valid. For real signature testing, use blink_sign_test ' +
+        'with a live BSEC instance.';
+    return {
+        content: [{
+                type: 'text',
+                text: JSON.stringify({ vectors, usage_hint: usageHint }, null, 2),
+            }],
+    };
+}
+//# sourceMappingURL=test-vectors.js.map

package/dist/tools/test-vectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vectors.js","sourceRoot":"","sources":["../../src/tools/test-vectors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAC9E,MAAM,YAAY;IACR,KAAK,CAAS;IAEtB,YAAY,IAAY;QACtB,yBAAyB;QACzB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI;QACF,aAAa;QACb,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,CAAS;QACb,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAC9E,MAAM,UAAU,GAAoF;IAClG,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACxD,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;CACjE,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,WAAW;CACzB,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAC9E,MAAM,UAAU,yBAAyB,CACvC,IAA6B;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,CAAE,IAAI,CAAC,SAAoB,IAAI,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,CAAE,IAAI,CAAC,QAAmB,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,2BAA2B,SAAS,kCAAkC;qBAC9E,CAAC;iBACH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,sBAAsB,QAAQ,wDAAwD;qBAC9F,CAAC;iBACH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,OAAO,GAAmC,EAAE,CAAC;IAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,qBAAqB,SAAS,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAEnC,mBAAmB;QACnB,MAAM,OAAO,GAAG,gBAAgB,QAAQ,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEvE,qCAAqC;QACrC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE5D,oCAAoC;QACpC,IAAI,SAAiB,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS;gBACZ,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5E,MAAM;YACR;gBACE,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC9B,MAAM;QACV,CAAC;QAED,qBAAqB;QACrB,MAAM,WAAW,GAAG,yBAAyB,CAAC,IAAI,SAAS,EAAE,CAAC;QAE9D,+DAA+D;QAC/D,IAAI,gBAAgB,GAAG,WAAW,CAAC;QACnC,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,6CAA6C;YAC7C,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC;QAED,mDAAmD;QACnD,IAAI,YAAY,GAAG,OAAO,CAAC;QAC3B,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YACvD,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG;YACf,SAAS;YACT,oBAAoB,EAAE,kBAAkB;YACxC,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,uBAAuB;YACpF,YAAY,EAAE,WAAW;YACzB,SAAS;YACT,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;YAClC,YAAY,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW;SACvE,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE7E,kBAAkB;QAClB,IAAI,aAAa,GAAG,IAAI,CAAC;QACzB,IAAI,cAAc,GAAG,mDAAmD,CAAC;QAEzE,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS;gBACZ,aAAa,GAAG,KAAK,CAAC;gBACtB,cAAc,GAAG,6DAA6D,CAAC;gBAC/E,MAAM;YACR,KAAK,UAAU;gBACb,aAAa,GAAG,KAAK,CAAC;gBACtB,cAAc;oBACZ,wFAAwF,CAAC;gBAC3F,MAAM;YACR,KAAK,WAAW;gBACd,aAAa,GAAG,KAAK,CAAC;gBACtB,cAAc;oBACZ,0GAA0G,CAAC;gBAC7G,MAAM;QACV,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAC1C,OAAO;YACP,YAAY,EAAE,WAAW;YACzB,YAAY,EAAE,YAAY;YAC1B,cAAc,EAAE,aAAa;YAC7B,eAAe,EAAE,cAAc;YAC/B,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GACb,8CAA8C;QAC9C,mEAAmE;QACnE,+DAA+D;QAC/D,sDAAsD;QACtD,iDAAiD;QACjD,mFAAmF;QACnF,kFAAkF;QAClF,mFAAmF;QACnF,4BAA4B,CAAC;IAE/B,OAAO;QACL,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;aAClE,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/tools/verify-local.d.ts

@@ -0,0 +1,17 @@
+/**
+ * blink_verify_local tool handler.
+ *
+ * Offline format verification of a BLINK envelope.
+ * Validates structure, field formats, lengths, timestamp freshness,
+ * domain_input format, and algorithm support.
+ *
+ * Note: Full cryptographic VRF proof chain verification requires the
+ * BLINK Verifier SDK. This check validates envelope format and structure.
+ */
+export declare function handleVerifyLocal(args: Record<string, unknown>): {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+};
+//# sourceMappingURL=verify-local.d.ts.map

package/dist/tools/verify-local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-local.d.ts","sourceRoot":"","sources":["../../src/tools/verify-local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgDH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAoMpD"}

package/dist/tools/verify-local.js

@@ -0,0 +1,233 @@
+/**
+ * blink_verify_local tool handler.
+ *
+ * Offline format verification of a BLINK envelope.
+ * Validates structure, field formats, lengths, timestamp freshness,
+ * domain_input format, and algorithm support.
+ *
+ * Note: Full cryptographic VRF proof chain verification requires the
+ * BLINK Verifier SDK. This check validates envelope format and structure.
+ */
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const REQUIRED_FIELDS = [
+    'signature',
+    'ephemeral_public_key',
+    'vrf_proof',
+    'p_derive',
+    'domain_input',
+    'timestamp',
+    'algorithm',
+    'payload_hash',
+];
+const BINARY_FIELDS = ['signature', 'ephemeral_public_key', 'vrf_proof', 'p_derive'];
+const EXPECTED_SIZES = {
+    ed25519: { signature: 64, ephemeral_public_key: 32, vrf_proof: 80, p_derive: 32 },
+    'ml-dsa-44': { signature: 2420, ephemeral_public_key: 1312, vrf_proof: 80, p_derive: 32 },
+};
+const SUPPORTED_ALGORITHMS = ['ed25519', 'ml-dsa-44'];
+// 5 minute freshness window
+const FRESHNESS_MS = 5 * 60 * 1000;
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function isValidBase64(s) {
+    if (typeof s !== 'string' || s.length === 0)
+        return false;
+    try {
+        const buf = Buffer.from(s, 'base64');
+        return buf.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+function normaliseAlgo(algo) {
+    return algo.toLowerCase().replace(/[_\s]/g, '-');
+}
+// ---------------------------------------------------------------------------
+// Handler
+// ---------------------------------------------------------------------------
+export function handleVerifyLocal(args) {
+    const envelopeB64 = args.envelope;
+    const pDeriveB64 = args.p_derive;
+    if (!envelopeB64 || typeof envelopeB64 !== 'string' || envelopeB64.trim() === '') {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        format_valid: false,
+                        error: 'Missing or empty "envelope" parameter.',
+                    }),
+                }],
+        };
+    }
+    if (!pDeriveB64 || typeof pDeriveB64 !== 'string' || pDeriveB64.trim() === '') {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        format_valid: false,
+                        error: 'Missing or empty "p_derive" parameter.',
+                    }),
+                }],
+        };
+    }
+    const notes = [];
+    // Step 1: Decode envelope
+    let decoded;
+    try {
+        decoded = Buffer.from(envelopeB64, 'base64').toString('utf-8');
+    }
+    catch {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        format_valid: false,
+                        error: 'Failed to base64-decode the envelope.',
+                    }),
+                }],
+        };
+    }
+    let envelope;
+    try {
+        envelope = JSON.parse(decoded);
+    }
+    catch {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        format_valid: false,
+                        error: 'Decoded data is not valid JSON.',
+                    }),
+                }],
+        };
+    }
+    // Step 2: Validate required fields present
+    const presentFields = [];
+    const missingFields = [];
+    for (const field of REQUIRED_FIELDS) {
+        if (envelope[field] !== undefined && envelope[field] !== null) {
+            presentFields.push(field);
+        }
+        else {
+            missingFields.push(field);
+        }
+    }
+    const fieldsPresent = missingFields.length === 0;
+    if (!fieldsPresent) {
+        notes.push(`Missing fields: ${missingFields.join(', ')}`);
+    }
+    // Step 3: Check field formats (base64 validity, correct lengths)
+    let fieldsValid = true;
+    const fieldDetails = {};
+    const algo = normaliseAlgo(envelope.algorithm || 'ed25519');
+    const expectedSizes = EXPECTED_SIZES[algo] || EXPECTED_SIZES['ed25519'];
+    for (const field of BINARY_FIELDS) {
+        const val = envelope[field];
+        if (!val || typeof val !== 'string') {
+            fieldDetails[field] = { valid: false, reason: 'Missing or not a string' };
+            fieldsValid = false;
+            continue;
+        }
+        if (!isValidBase64(val)) {
+            fieldDetails[field] = { valid: false, reason: 'Invalid base64 encoding' };
+            fieldsValid = false;
+            continue;
+        }
+        const bytes = Buffer.from(val, 'base64').length;
+        const expected = expectedSizes[field];
+        if (expected && bytes !== expected) {
+            fieldDetails[field] = {
+                valid: false,
+                reason: `Expected ${expected} bytes for ${algo}, got ${bytes}`,
+            };
+            fieldsValid = false;
+        }
+        else {
+            fieldDetails[field] = { valid: true };
+        }
+    }
+    // payload_hash: should be 64-char hex
+    const payloadHash = envelope.payload_hash;
+    if (payloadHash && typeof payloadHash === 'string') {
+        if (/^[0-9a-fA-F]{64}$/.test(payloadHash)) {
+            fieldDetails['payload_hash'] = { valid: true };
+        }
+        else {
+            fieldDetails['payload_hash'] = { valid: false, reason: 'Not a 64-character hex SHA-256 hash' };
+            fieldsValid = false;
+        }
+    }
+    // Step 4: Check timestamp freshness
+    let timestampValid = false;
+    const timestamp = envelope.timestamp;
+    if (timestamp && typeof timestamp === 'string') {
+        const parsed = new Date(timestamp);
+        if (isNaN(parsed.getTime())) {
+            notes.push('Timestamp is not a valid ISO 8601 date');
+        }
+        else {
+            const age = Math.abs(Date.now() - parsed.getTime());
+            timestampValid = age <= FRESHNESS_MS;
+            if (!timestampValid) {
+                notes.push(`Timestamp age: ${Math.round(age / 1000)}s (window: ${FRESHNESS_MS / 1000}s)`);
+            }
+        }
+    }
+    // Step 5: Validate domain_input format
+    let domainValid = false;
+    const domainInput = envelope.domain_input;
+    if (domainInput && typeof domainInput === 'string') {
+        const parts = domainInput.split(':');
+        domainValid = parts.length >= 3 && parts[0].length > 0 && parts[1].length > 0;
+        if (!domainValid) {
+            notes.push('domain_input should follow format "purpose:identity:timestamp"');
+        }
+    }
+    // Step 6: Check algorithm is supported
+    let algorithmValid = false;
+    const algorithmValue = envelope.algorithm;
+    if (algorithmValue && typeof algorithmValue === 'string') {
+        algorithmValid = SUPPORTED_ALGORITHMS.includes(normaliseAlgo(algorithmValue));
+        if (!algorithmValid) {
+            notes.push(`Unsupported algorithm: "${algorithmValue}". Supported: Ed25519, ML-DSA-44`);
+        }
+    }
+    // Step 7: Check P_derive match
+    let pDeriveMatch = false;
+    const envelopePDerive = envelope.p_derive;
+    if (envelopePDerive && pDeriveB64) {
+        pDeriveMatch = envelopePDerive === pDeriveB64;
+        if (!pDeriveMatch) {
+            notes.push('Provided P_derive does not match the P_derive in the envelope. ' +
+                'This may indicate the envelope was signed by a different identity.');
+        }
+    }
+    // Add standard note
+    notes.push('Full cryptographic VRF proof chain verification requires the BLINK Verifier SDK. ' +
+        'This check validates envelope format and structure only.');
+    const formatValid = fieldsPresent && fieldsValid && algorithmValid && domainValid;
+    const result = {
+        format_valid: formatValid,
+        fields_present: fieldsPresent,
+        fields_valid: fieldsValid,
+        field_details: fieldDetails,
+        timestamp_valid: timestampValid,
+        domain_valid: domainValid,
+        algorithm_valid: algorithmValid,
+        p_derive_match: pDeriveMatch,
+        missing_fields: missingFields.length > 0 ? missingFields : undefined,
+        notes,
+    };
+    return {
+        content: [{
+                type: 'text',
+                text: JSON.stringify(result, null, 2),
+            }],
+    };
+}
+//# sourceMappingURL=verify-local.js.map

package/dist/tools/verify-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-local.js","sourceRoot":"","sources":["../../src/tools/verify-local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAC9E,MAAM,eAAe,GAAG;IACtB,WAAW;IACX,sBAAsB;IACtB,WAAW;IACX,UAAU;IACV,cAAc;IACd,WAAW;IACX,WAAW;IACX,cAAc;CACf,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,sBAAsB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAErF,MAAM,cAAc,GAA2C;IAC7D,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjF,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;CAC1F,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAEtD,4BAA4B;AAC5B,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAC9E,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAC/B,IAA6B;IAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,QAA8B,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,QAA8B,CAAC;IAEvD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjF,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,YAAY,EAAE,KAAK;wBACnB,KAAK,EAAE,wCAAwC;qBAChD,CAAC;iBACH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9E,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,YAAY,EAAE,KAAK;wBACnB,KAAK,EAAE,wCAAwC;qBAChD,CAAC;iBACH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,0BAA0B;IAC1B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,YAAY,EAAE,KAAK;wBACnB,KAAK,EAAE,uCAAuC;qBAC/C,CAAC;iBACH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,YAAY,EAAE,KAAK;wBACnB,KAAK,EAAE,iCAAiC;qBACzC,CAAC;iBACH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,iEAAiE;IACjE,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,MAAM,YAAY,GAAwD,EAAE,CAAC;IAE7E,MAAM,IAAI,GAAG,aAAa,CAAE,QAAQ,CAAC,SAAoB,IAAI,SAAS,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;IAExE,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAuB,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAC1E,WAAW,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAC1E,WAAW,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,YAAY,CAAC,KAAK,CAAC,GAAG;gBACpB,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,YAAY,QAAQ,cAAc,IAAI,SAAS,KAAK,EAAE;aAC/D,CAAC;YACF,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAkC,CAAC;IAChE,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnD,IAAI,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,YAAY,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;YAC/F,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA+B,CAAC;IAC3D,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,cAAc,GAAG,GAAG,IAAI,YAAY,CAAC;YACrC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,cAAc,YAAY,GAAG,IAAI,IAAI,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAkC,CAAC;IAChE,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9E,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,SAA+B,CAAC;IAChE,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACzD,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,2BAA2B,cAAc,kCAAkC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,eAAe,GAAG,QAAQ,CAAC,QAA8B,CAAC;IAChE,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;QAClC,YAAY,GAAG,eAAe,KAAK,UAAU,CAAC;QAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CACR,iEAAiE;gBACjE,oEAAoE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,IAAI,CACR,mFAAmF;QACnF,0DAA0D,CAC3D,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,IAAI,WAAW,IAAI,cAAc,IAAI,WAAW,CAAC;IAElF,MAAM,MAAM,GAAG;QACb,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,cAAc;QAC/B,cAAc,EAAE,YAAY;QAC5B,cAAc,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACpE,KAAK;KACN,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;aACtC,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/tools/verify-test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * blink_verify_test tool handler.
+ *
+ * Live verification against a BSEC instance (connected mode).
+ * Falls back to format-only verification when BSEC is unavailable.
+ */
+import { PluginBsecClient } from '../bsec-client.js';
+type ToolResult = {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    isError?: boolean;
+};
+export declare function handleVerifyTest(args: Record<string, unknown>, bsecClient: PluginBsecClient | null): ToolResult | Promise<ToolResult>;
+export {};
+//# sourceMappingURL=verify-test.d.ts.map

package/dist/tools/verify-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-test.d.ts","sourceRoot":"","sources":["../../src/tools/verify-test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AAMtE,KAAK,UAAU,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAKxF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,gBAAgB,GAAG,IAAI,GAClC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CA8ClC"}

package/dist/tools/verify-test.js

@@ -0,0 +1,107 @@
+/**
+ * blink_verify_test tool handler.
+ *
+ * Live verification against a BSEC instance (connected mode).
+ * Falls back to format-only verification when BSEC is unavailable.
+ */
+import { BsecClientError } from '../bsec-client.js';
+import { handleVerifyLocal } from './verify-local.js';
+// ---------------------------------------------------------------------------
+// Handler
+// ---------------------------------------------------------------------------
+export function handleVerifyTest(args, bsecClient) {
+    const envelopeB64 = args.envelope;
+    const pDeriveB64 = args.p_derive;
+    if (!envelopeB64 || typeof envelopeB64 !== 'string' || envelopeB64.trim() === '') {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({ error: 'Missing or empty "envelope" parameter.' }),
+                }],
+            isError: true,
+        };
+    }
+    if (!pDeriveB64 || typeof pDeriveB64 !== 'string' || pDeriveB64.trim() === '') {
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({ error: 'Missing or empty "p_derive" parameter.' }),
+                }],
+            isError: true,
+        };
+    }
+    // Step 1: Always run local format verification
+    const localResult = handleVerifyLocal({ envelope: envelopeB64, p_derive: pDeriveB64 });
+    const localData = JSON.parse(localResult.content[0].text);
+    // Step 2: If BSEC connected, attempt server-side verification
+    if (bsecClient) {
+        return doServerVerify(bsecClient, envelopeB64, pDeriveB64, localData);
+    }
+    // Step 3: No BSEC — return format-only result
+    return {
+        content: [{
+                type: 'text',
+                text: JSON.stringify({
+                    mode: 'offline',
+                    format_verification: localData,
+                    cryptographic_verification: null,
+                    note: 'Full cryptographic VRF proof chain verification requires a connected BSEC instance. ' +
+                        'Start the plugin with --bsec-url and --bsec-token to enable live verification.',
+                }, null, 2),
+            }],
+    };
+}
+// ---------------------------------------------------------------------------
+// Server-side verification
+// ---------------------------------------------------------------------------
+async function doServerVerify(client, envelopeB64, pDeriveB64, localData) {
+    const startMs = Date.now();
+    try {
+        const serverResult = await client.verify(envelopeB64, pDeriveB64);
+        const elapsedMs = Date.now() - startMs;
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        warning: 'Data was sent to an external BSEC instance for verification.',
+                        mode: 'connected',
+                        format_verification: localData,
+                        cryptographic_verification: {
+                            valid: serverResult.valid,
+                            details: serverResult.details,
+                        },
+                        timing: {
+                            elapsed_ms: elapsedMs,
+                        },
+                        summary: serverResult.valid
+                            ? 'Envelope is valid. Both format and cryptographic checks passed.'
+                            : 'Cryptographic verification failed. The VRF proof chain could not be validated.',
+                    }, null, 2),
+                }],
+        };
+    }
+    catch (err) {
+        const elapsedMs = Date.now() - startMs;
+        const errorMsg = err instanceof BsecClientError
+            ? `BSEC returned status ${err.status}`
+            : 'Failed to connect to BSEC instance for verification';
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        mode: 'connected-fallback',
+                        format_verification: localData,
+                        cryptographic_verification: {
+                            valid: null,
+                            error: errorMsg,
+                        },
+                        timing: {
+                            elapsed_ms: elapsedMs,
+                        },
+                        note: 'Server-side verification failed. Format verification results are still valid.',
+                    }, null, 2),
+                }],
+        };
+    }
+}
+//# sourceMappingURL=verify-test.js.map

package/dist/tools/verify-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-test.js","sourceRoot":"","sources":["../../src/tools/verify-test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAoB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAOtD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAC9B,IAA6B,EAC7B,UAAmC;IAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,QAA8B,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,QAA8B,CAAC;IAEvD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjF,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;iBAC1E,CAAC;YACF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9E,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;iBAC1E,CAAC;YACF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;IAErF,8DAA8D;IAC9D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IAED,8CAA8C;IAC9C,OAAO;QACL,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,SAAS;oBACf,mBAAmB,EAAE,SAAS;oBAC9B,0BAA0B,EAAE,IAAI;oBAChC,IAAI,EAAE,sFAAsF;wBACtF,gFAAgF;iBACvF,EAAE,IAAI,EAAE,CAAC,CAAC;aACZ,CAAC;KACH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAC9E,KAAK,UAAU,cAAc,CAC3B,MAAwB,EACxB,WAAmB,EACnB,UAAkB,EAClB,SAAkC;IAElC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAEvC,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,OAAO,EAAE,8DAA8D;wBACvE,IAAI,EAAE,WAAW;wBACjB,mBAAmB,EAAE,SAAS;wBAC9B,0BAA0B,EAAE;4BAC1B,KAAK,EAAE,YAAY,CAAC,KAAK;4BACzB,OAAO,EAAE,YAAY,CAAC,OAAO;yBAC9B;wBACD,MAAM,EAAE;4BACN,UAAU,EAAE,SAAS;yBACtB;wBACD,OAAO,EAAE,YAAY,CAAC,KAAK;4BACzB,CAAC,CAAC,iEAAiE;4BACnE,CAAC,CAAC,gFAAgF;qBACrF,EAAE,IAAI,EAAE,CAAC,CAAC;iBACZ,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAEvC,MAAM,QAAQ,GAAG,GAAG,YAAY,eAAe;YAC7C,CAAC,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE;YACtC,CAAC,CAAC,qDAAqD,CAAC;QAE1D,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,IAAI,EAAE,oBAAoB;wBAC1B,mBAAmB,EAAE,SAAS;wBAC9B,0BAA0B,EAAE;4BAC1B,KAAK,EAAE,IAAI;4BACX,KAAK,EAAE,QAAQ;yBAChB;wBACD,MAAM,EAAE;4BACN,UAAU,EAAE,SAAS;yBACtB;wBACD,IAAI,EAAE,+EAA+E;qBACtF,EAAE,IAAI,EAAE,CAAC,CAAC;iBACZ,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@blink-authority-com/claude-code-plugin",
+  "version": "1.0.0",
+  "description": "BLINK Authority Claude Code Plugin — AI-native BLINK integration tools for Claude",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "blink-claude-plugin": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "test": "node dist/test.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "blink",
+    "mcp",
+    "claude",
+    "claude-code",
+    "cryptography",
+    "vrf",
+    "signing",
+    "ephemeral-keys",
+    "bsec",
+    "model-context-protocol"
+  ],
+  "author": "BLINK Authority",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/blink-authority/claude-code-plugin"
+  },
+  "homepage": "https://blink-authority.com",
+  "bugs": {
+    "url": "https://github.com/blink-authority/claude-code-plugin/issues"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.2",
+    "typescript": "^5.8.3"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ]
+}