@limboai/verifox-sdk-verifier 0.0.2 → 0.0.4

package/gen/napi/index.d.ts

@@ -1,19 +1,42 @@
 /* auto-generated by NAPI-RS */
 /* eslint-disable */
 export declare class AssetSdk {
-  static create(trustAnchors: Array<string>, registry?: string | undefined | null): AssetSdk
+  static create(options: AssetVerifierOptions): AssetSdk
   verify(input: Bytes | string, binding?: RecoverBinding | undefined | null): import('@contentauth/c2pa-types').ManifestStore[]
   recover(input: Bytes | string): Promise<Json>
 }
 export type AssetSdkJs = AssetSdk
 
 export declare class StreamSdk {
-  static create(trustAnchors: Array<string>, ledger: any): StreamSdk
+  static create(ledger: any, options: StreamVerifierOptions): StreamSdk
   validate(streamId: string, data: Bytes): Promise<Json>
   stop(streamId: string): Promise<void>
 }
 export type StreamSdkJs = StreamSdk
 
+/**
+ * r" Construction options for [`Sdk::new`] (and the `AssetSdk.create` JS
+ * r" binding). `trust_c2pa_anchors` defaults to `true` when omitted.
+ */
+export interface AssetVerifierOptions {
+  /** r" PEM trust anchors for the caller's own issuers. */
+  trustAnchors: Array<string>
+  /**
+   * r" Registry base URL (`https://api.trylimbo.com`) enabling recovery in
+   * r" `verify`. Omit for a verifier that only checks embedded manifests.
+   */
+  registry?: string
+  /**
+   * r" Also trust the bundled official C2PA anchors on top of `trust_anchors`.
+   * r" Defaults to `true`; set `false` to trust only `trust_anchors`.
+   */
+  trustC2PaAnchors?: boolean
+}
+
+export declare function C2PA_TRUST_LIST(): string
+
+export declare function C2PA_TSA_TRUST_LIST(): string
+
 export declare function DEV_CA(): string
 
 export declare const enum ErrorKind {
@@ -44,14 +67,29 @@ export interface LedgerHandle {
 }
 
 /**
- * A soft binding handed in from the JS boundary — e.g. the `binding` object
- * from the deployment's `/manifest/recover`.
+ * r" A soft binding handed in from the JS boundary — e.g. the `binding` object
+ * r" from the deployment's `/manifest/recover`.
  */
 export interface RecoverBinding {
   alg: string
   value: string
 }
 
+/**
+ * r" Construction options for [`StreamSdk::new`] (and the `StreamSdk.create`
+ * r" JS binding, where the ledger stays a separate argument).
+ * r" `trust_c2pa_anchors` defaults to `true` when omitted.
+ */
+export interface StreamVerifierOptions {
+  /** r" PEM trust anchors for the caller's own issuers. */
+  trustAnchors: Array<string>
+  /**
+   * r" Also trust the bundled official C2PA anchors on top of `trust_anchors`.
+   * r" Defaults to `true`; set `false` to trust only `trust_anchors`.
+   */
+  trustC2PaAnchors?: boolean
+}
+
 export interface ValidationError {
   kind: ErrorKind
   message: string

package/gen/napi/index.js

@@ -81,8 +81,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-android-arm64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -97,8 +97,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-android-arm-eabi')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -118,8 +118,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-win32-x64-gnu')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -134,8 +134,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-win32-x64-msvc')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -151,8 +151,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-win32-ia32-msvc')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -167,8 +167,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-win32-arm64-msvc')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -186,8 +186,8 @@ function requireNative() {
     try {
       const binding = require('@limboai/verifox-sdk-verifier-darwin-universal')
       const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -202,8 +202,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-darwin-x64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -218,8 +218,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-darwin-arm64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -238,8 +238,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-freebsd-x64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -254,8 +254,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-freebsd-arm64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -275,8 +275,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-x64-musl')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -291,8 +291,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-x64-gnu')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -309,8 +309,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-arm64-musl')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -325,8 +325,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-arm64-gnu')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -343,8 +343,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-arm-musleabihf')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -359,8 +359,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -377,8 +377,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-loong64-musl')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -393,8 +393,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-loong64-gnu')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -411,8 +411,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-riscv64-musl')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -427,8 +427,8 @@ function requireNative() {
         try {
           const binding = require('@limboai/verifox-sdk-verifier-linux-riscv64-gnu')
           const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -444,8 +444,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-linux-ppc64-gnu')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -460,8 +460,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-linux-s390x-gnu')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -480,8 +480,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-openharmony-arm64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -496,8 +496,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-openharmony-x64')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -512,8 +512,8 @@ function requireNative() {
       try {
         const binding = require('@limboai/verifox-sdk-verifier-openharmony-arm')
         const bindingPackageVersion = require('@limboai/verifox-sdk-verifier-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.0.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.0.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.0.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -579,10 +579,12 @@ if (!nativeBinding) {
   throw new Error(`Failed to load native binding`)
 }
 
-const { AssetSdk, AssetSdkJs, StreamSdk, StreamSdkJs, DEV_CA, ErrorKind } = nativeBinding
+const { AssetSdk, AssetSdkJs, StreamSdk, StreamSdkJs, C2PA_TRUST_LIST, C2PA_TSA_TRUST_LIST, DEV_CA, ErrorKind } = nativeBinding
 export { AssetSdk }
 export { AssetSdkJs }
 export { StreamSdk }
 export { StreamSdkJs }
+export { C2PA_TRUST_LIST }
+export { C2PA_TSA_TRUST_LIST }
 export { DEV_CA }
 export { ErrorKind }

package/gen/wasm/verifox_sdk_verifier.d.ts

@@ -5,11 +5,15 @@ export class AssetSdk {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    static create(trust_anchors: string[], registry?: string | null): AssetSdk;
+    static create(options: any): AssetSdk;
     recover(_data: Uint8Array): Promise<any>;
     verify(data: Uint8Array, binding: any): Promise<import('@contentauth/c2pa-types').ManifestStore[]>;
 }
 
+export function C2PA_TRUST_LIST(): string;
+
+export function C2PA_TSA_TRUST_LIST(): string;
+
 export function DEV_CA(): string;
 
 export enum ErrorKind {
@@ -28,7 +32,7 @@ export class StreamSdk {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    static create(trust_anchors: string[], ledger: VerifierLedger): StreamSdk;
+    static create(ledger: VerifierLedger, options: any): StreamSdk;
     stop(stream_id: string): Promise<void>;
     validate(stream_id: string, data: Uint8Array): Promise<SegmentValidation>;
 }

package/gen/wasm/verifox_sdk_verifier.js

@@ -5,5 +5,5 @@ import { __wbg_set_wasm } from "./verifox_sdk_verifier_bg.js";
 __wbg_set_wasm(wasm);
 wasm.__wbindgen_start();
 export {
-    AssetSdk, DEV_CA, ErrorKind, StreamSdk, ValidationError, ValidationFailureCode, init_panic_hook
+    AssetSdk, C2PA_TRUST_LIST, C2PA_TSA_TRUST_LIST, DEV_CA, ErrorKind, StreamSdk, ValidationError, ValidationFailureCode, init_panic_hook
 } from "./verifox_sdk_verifier_bg.js";

package/gen/wasm/verifox_sdk_verifier_bg.js

@@ -16,16 +16,11 @@ export class AssetSdk {
         wasm.__wbg_assetsdk_free(ptr, 0);
     }
     /**
-     * @param {string[]} trust_anchors
-     * @param {string | null} [registry]
+     * @param {any} options
      * @returns {AssetSdk}
      */
-    static create(trust_anchors, registry) {
-        const ptr0 = passArrayJsValueToWasm0(trust_anchors, wasm.__wbindgen_malloc);
-        const len0 = WASM_VECTOR_LEN;
-        var ptr1 = isLikeNone(registry) ? 0 : passStringToWasm0(registry, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        var len1 = WASM_VECTOR_LEN;
-        const ret = wasm.assetsdk_create(ptr0, len0, ptr1, len1);
+    static create(options) {
+        const ret = wasm.assetsdk_create(options);
         if (ret[2]) {
             throw takeFromExternrefTable0(ret[1]);
         }
@@ -55,6 +50,38 @@ export class AssetSdk {
 }
 if (Symbol.dispose) AssetSdk.prototype[Symbol.dispose] = AssetSdk.prototype.free;
 
+/**
+ * @returns {string}
+ */
+export function C2PA_TRUST_LIST() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const ret = wasm.C2PA_TRUST_LIST();
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+
+/**
+ * @returns {string}
+ */
+export function C2PA_TSA_TRUST_LIST() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const ret = wasm.C2PA_TSA_TRUST_LIST();
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+
 /**
  * @returns {string}
  */
@@ -104,14 +131,12 @@ export class StreamSdk {
         wasm.__wbg_streamsdk_free(ptr, 0);
     }
     /**
-     * @param {string[]} trust_anchors
      * @param {VerifierLedger} ledger
+     * @param {any} options
      * @returns {StreamSdk}
      */
-    static create(trust_anchors, ledger) {
-        const ptr0 = passArrayJsValueToWasm0(trust_anchors, wasm.__wbindgen_malloc);
-        const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.streamsdk_create(ptr0, len0, ledger);
+    static create(ledger, options) {
+        const ret = wasm.streamsdk_create(ledger, options);
         if (ret[2]) {
             throw takeFromExternrefTable0(ret[1]);
         }
@@ -328,7 +353,7 @@ export function __wbg_fetch_9dad4fe911207b37(arg0) {
     const ret = fetch(arg0);
     return ret;
 }
-export function __wbg_forget_daf6800667578948() { return handleError(function (arg0, arg1, arg2) {
+export function __wbg_forget_bf008fe81806769f() { return handleError(function (arg0, arg1, arg2) {
     const ret = arg0.forget(getStringFromWasm0(arg1, arg2));
     return ret;
 }, arguments); }
@@ -340,6 +365,10 @@ export function __wbg_getTime_ef2e115ede346a26(arg0) {
     const ret = arg0.getTime();
     return ret;
 }
+export function __wbg_get_2e5523a43d58f630() { return handleError(function (arg0, arg1, arg2) {
+    const ret = arg0.get(getStringFromWasm0(arg1, arg2));
+    return ret;
+}, arguments); }
 export function __wbg_get_44e98e27bda25b5b() { return handleError(function (arg0, arg1) {
     const ret = Reflect.get(arg0, arg1);
     return ret;
@@ -348,10 +377,6 @@ export function __wbg_get_52a8a619f7b88df6() { return handleError(function (arg0
     const ret = Reflect.get(arg0, arg1);
     return ret;
 }, arguments); }
-export function __wbg_get_8caeb69f730f110c() { return handleError(function (arg0, arg1, arg2) {
-    const ret = arg0.get(getStringFromWasm0(arg1, arg2));
-    return ret;
-}, arguments); }
 export function __wbg_get_unchecked_46e778e3cec74b5e(arg0, arg1) {
     const ret = arg0[arg1 >>> 0];
     return ret;
@@ -495,7 +520,7 @@ export function __wbg_parse_a5c06e19bc1187fd(arg0, arg1) {
 export function __wbg_prototypesetcall_956c7493c68e29b4(arg0, arg1, arg2) {
     Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
 }
-export function __wbg_put_81e391b67f1ab483() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
+export function __wbg_put_96e4dfd5bd94ad57() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
     var v0 = getArrayU8FromWasm0(arg3, arg4).slice();
     wasm.__wbindgen_free(arg3, arg4 * 1, 1);
     const ret = arg0.put(getStringFromWasm0(arg1, arg2), v0);
@@ -606,12 +631,12 @@ export function __wbg_value_3d3defe09fb1ffca(arg0) {
     return ret;
 }
 export function __wbindgen_cast_0000000000000001(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1663, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1694, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hd9b417d7eb72bae4);
     return ret;
 }
 export function __wbindgen_cast_0000000000000002(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 1318, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 1349, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hd892d6a6211634ef);
     return ret;
 }
@@ -830,16 +855,6 @@ function passArray8ToWasm0(arg, malloc) {
     return ptr;
 }
 
-function passArrayJsValueToWasm0(array, malloc) {
-    const ptr = malloc(array.length * 4, 4) >>> 0;
-    for (let i = 0; i < array.length; i++) {
-        const add = addToExternrefTable0(array[i]);
-        getDataViewMemory0().setUint32(ptr + 4 * i, add, true);
-    }
-    WASM_VECTOR_LEN = array.length;
-    return ptr;
-}
-
 function passStringToWasm0(arg, malloc, realloc) {
     if (realloc === undefined) {
         const buf = cachedTextEncoder.encode(arg);

package/gen/wasm/verifox_sdk_verifier_bg.wasm.d.ts

@@ -1,16 +1,18 @@
 /* tslint:disable */
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
+export const C2PA_TRUST_LIST: () => [number, number];
+export const C2PA_TSA_TRUST_LIST: () => [number, number];
 export const DEV_CA: () => [number, number];
 export const __wbg_assetsdk_free: (a: number, b: number) => void;
 export const __wbg_get_validationerror_kind: (a: number) => number;
 export const __wbg_get_validationerror_message: (a: number) => [number, number];
 export const __wbg_streamsdk_free: (a: number, b: number) => void;
 export const __wbg_validationerror_free: (a: number, b: number) => void;
-export const assetsdk_create: (a: number, b: number, c: number, d: number) => [number, number, number];
+export const assetsdk_create: (a: any) => [number, number, number];
 export const assetsdk_recover: (a: number, b: number, c: number) => any;
 export const assetsdk_verify: (a: number, b: number, c: number, d: any) => any;
-export const streamsdk_create: (a: number, b: number, c: any) => [number, number, number];
+export const streamsdk_create: (a: any, b: any) => [number, number, number];
 export const streamsdk_stop: (a: number, b: number, c: number) => any;
 export const streamsdk_validate: (a: number, b: number, c: number, d: number, e: number) => any;
 export const init_panic_hook: () => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@limboai/verifox-sdk-verifier",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",
@@ -44,15 +44,15 @@
     "prepublishOnly": "napi prepublish -t npm --no-gh-release --skip-optional-publish"
   },
   "dependencies": {
-    "@contentauth/c2pa-types": "^0.4.4"
+    "@contentauth/c2pa-types": "^0.7.0"
   },
   "devDependencies": {
     "@napi-rs/cli": "^3.6.2"
   },
   "optionalDependencies": {
-    "@limboai/verifox-sdk-verifier-darwin-arm64": "0.0.2",
-    "@limboai/verifox-sdk-verifier-darwin-x64": "0.0.2",
-    "@limboai/verifox-sdk-verifier-linux-x64-gnu": "0.0.2",
-    "@limboai/verifox-sdk-verifier-linux-arm64-gnu": "0.0.2"
+    "@limboai/verifox-sdk-verifier-darwin-arm64": "0.0.4",
+    "@limboai/verifox-sdk-verifier-darwin-x64": "0.0.4",
+    "@limboai/verifox-sdk-verifier-linux-x64-gnu": "0.0.4",
+    "@limboai/verifox-sdk-verifier-linux-arm64-gnu": "0.0.4"
   }
 }

package/types/asset.d.ts

@@ -2,21 +2,39 @@
 
 import type { Reader } from "./shared.js";
 
+/** Construction options for {@link AssetSdk.create}. */
+export interface AssetVerifierOptions {
+    /** PEM trust anchors used to decide which credentials to honor. */
+    trustAnchors: string[];
+    /**
+     * Base URL of the Verifox registry — `https://api.trylimbo.com`. Configured
+     * once here, it enables content recovery in {@link AssetSdk.verify}. Omit it
+     * for a verifier that only checks embedded manifests.
+     */
+    registry?: string;
+    /**
+     * Whether to also trust the official C2PA Conformance Program anchors
+     * ({@link C2PA_TRUST_LIST} + {@link C2PA_TSA_TRUST_LIST}) on top of
+     * `trustAnchors`. Defaults to `true`; set `false` to trust only
+     * `trustAnchors`.
+     */
+    trustC2paAnchors?: boolean;
+}
+
 export declare class AssetSdk {
     /**
-     * @param trustAnchors PEM trust anchors used to decide which credentials to
-     *   honor.
-     * @param registry Base URL of the Verifox registry — `https://api.trylimbo.com`.
-     *   Configured once here, it enables content recovery in
-     *   {@link AssetSdk.verify}. Omit it for a verifier that only checks
-     *   embedded manifests.
+     * @param options {@link AssetVerifierOptions} — trust anchors plus optional
+     *   registry and C2PA-trust toggle.
      *
      * @example
      * ```ts
-     * const sdk = AssetSdk.create([trustAnchorPem], "https://api.trylimbo.com");
+     * const sdk = AssetSdk.create({
+     *   trustAnchors: [trustAnchorPem],
+     *   registry: "https://api.trylimbo.com",
+     * });
      * ```
      */
-    static create(trustAnchors: string[], registry?: string): AssetSdk;
+    static create(options: AssetVerifierOptions): AssetSdk;
     /**
      * Verify an asset and return **every** credential found for it.
      *

package/types/shared.d.ts

@@ -28,3 +28,19 @@ export declare class ValidationError {
  * credentials; use your production trust anchors otherwise.
  */
 export declare function DEV_CA(): string;
+
+/**
+ * The official C2PA Conformance Program trust anchors (signing CAs), bundled
+ * from `c2pa-org/conformance-public`. Trusted by default by
+ * {@link AssetSdk.create} / {@link StreamSdk.create} (pass
+ * `trustC2paAnchors: false` to opt out). Exposed for callers who want to inspect
+ * or combine the list explicitly. Refreshed periodically; may be stale.
+ */
+export declare function C2PA_TRUST_LIST(): string;
+
+/**
+ * The official C2PA time-stamping-authority (TSA) trust anchors, bundled from
+ * `c2pa-org/conformance-public`. Applied together with {@link C2PA_TRUST_LIST}
+ * under the same default-on trust policy so timestamp certificates validate.
+ */
+export declare function C2PA_TSA_TRUST_LIST(): string;

package/types/stream.d.ts

@@ -57,8 +57,25 @@ export interface UnknownSegment {
 
 export type SegmentValidation = InitValidation | MediaValidation | UnknownSegment;
 
+/** Construction options for {@link StreamSdk.create}. */
+export interface StreamVerifierOptions {
+    /** PEM trust anchors used to decide which credentials to honor. */
+    trustAnchors: string[];
+    /**
+     * Whether to also trust the official C2PA Conformance Program anchors on top
+     * of `trustAnchors`. Defaults to `true`; set `false` to trust only
+     * `trustAnchors`.
+     */
+    trustC2paAnchors?: boolean;
+}
+
 export declare class StreamSdk {
-    static create(trustAnchors: string[], ledger: VerifierLedger): StreamSdk;
+    /**
+     * @param ledger The caller-provided {@link VerifierLedger} for per-stream state.
+     * @param options {@link StreamVerifierOptions} — trust anchors plus the
+     *   C2PA-trust toggle. Always the last argument.
+     */
+    static create(ledger: VerifierLedger, options: StreamVerifierOptions): StreamSdk;
     validate(streamId: string, data: Uint8Array): Promise<SegmentValidation>;
     stop(streamId: string): Promise<void>;
 }