@cloudhal/release-verify 0.0.0-placeholder.0 → 0.10.0

package/package.json

@@ -1,10 +1,54 @@
 {
   "name": "@cloudhal/release-verify",
-  "version": "0.0.0-placeholder.0",
-  "description": "Placeholder that reserves the name for trusted publishing. Not usable; real versions are published by CI with provenance.",
+  "version": "0.10.0",
+  "description": "Verifies a Cloudhal release bundle (RFC-0046 §2, §7, §11a): the Ed25519 release statement against pinned keys, the manifest, and every part of the tarball. Worker-safe; the attestation check is a Node-only subpath.",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",
-  "repository": { "type": "git", "url": "git+https://github.com/cloudhal-dev/cloudhal.git", "directory": "packages/release-verify" },
-  "files": ["README.md"],
-  "publishConfig": { "access": "public", "tag": "placeholder" }
-}
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cloudhal-dev/cloudhal.git",
+    "directory": "packages/release-verify"
+  },
+  "bugs": {
+    "url": "https://github.com/cloudhal-dev/cloudhal/issues"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    },
+    "./attestation": {
+      "types": "./dist/src/attestation.d.ts",
+      "default": "./dist/src/attestation.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@noble/hashes": "2.4.0",
+    "ajv": "8.20.0",
+    "ajv-formats": "3.0.1"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^5.20261007.1",
+    "@cloudhal/core-contracts": "0.10.0",
+    "@types/node": "^26.6.5",
+    "typescript": "7.0.2",
+    "vitest": "5.1.0"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "gen:ts": "node scripts/gen-validators.ts",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vitest run",
+    "check": "pnpm typecheck && pnpm test"
+  }
+}