@motebit/verify 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Motebit
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,64 @@
+# @motebit/verify
+
+Standalone verifier for `motebit.md` agent identity files.
+
+Implements the verification algorithm from the [motebit/identity@1.0](https://github.com/hakimlabs/motebit/blob/main/spec/identity-v1.md) specification. Zero monorepo dependencies — only [`@noble/ed25519`](https://github.com/paulmillr/noble-ed25519) for cryptography.
+
+## Install
+
+```bash
+npm install @motebit/verify
+```
+
+## Usage
+
+```typescript
+import { verify } from "@motebit/verify";
+import fs from "node:fs";
+
+const content = fs.readFileSync("motebit.md", "utf-8");
+const result = await verify(content);
+
+if (result.valid) {
+  console.log("Verified:", result.identity.motebit_id);
+  console.log("Owner:", result.identity.owner_id);
+  console.log("Trust:", result.identity.governance.trust_mode);
+} else {
+  console.error("Verification failed:", result.error);
+}
+```
+
+### Parse without verifying
+
+```typescript
+import { parse } from "@motebit/verify";
+
+const { frontmatter, signature, rawFrontmatter } = parse(content);
+console.log(frontmatter.motebit_id);
+```
+
+## API
+
+### `verify(content: string): Promise<VerifyResult>`
+
+Verify a `motebit.md` file's Ed25519 signature.
+
+Returns `{ valid: true, identity }` on success, or `{ valid: false, identity: null, error }` on failure.
+
+### `parse(content: string): { frontmatter, signature, rawFrontmatter }`
+
+Parse a `motebit.md` file into its components. Does not verify the signature.
+
+Throws if the file is malformed (missing frontmatter delimiters or signature).
+
+## What is a motebit.md?
+
+A `motebit.md` is a human-readable, cryptographically signed agent identity file. It contains YAML frontmatter with identity, governance, privacy, and memory configuration, followed by an Ed25519 signature in an HTML comment.
+
+See the [motebit/identity@1.0 specification](https://github.com/hakimlabs/motebit/blob/main/spec/identity-v1.md) for details.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).
+
+"Motebit" is a trademark. The MIT License grants rights to this software, not to any Motebit trademarks, logos, or branding. You may not use Motebit branding in a way that suggests endorsement or affiliation without written permission.

package/dist/index.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @motebit/verify — Standalone verifier for motebit.md agent identity files.
+ *
+ * Implements the verification algorithm from the motebit/identity@1.0 spec.
+ * Zero monorepo dependencies — only @noble/ed25519 for cryptography.
+ *
+ * Usage:
+ *   import { verify } from "@motebit/verify";
+ *   const result = await verify(fs.readFileSync("motebit.md", "utf-8"));
+ *   if (result.valid) console.log(result.identity.motebit_id);
+ */
+export interface MotebitIdentityFile {
+    spec: string;
+    motebit_id: string;
+    created_at: string;
+    owner_id: string;
+    type?: "personal" | "service" | "collaborative";
+    service_name?: string;
+    service_description?: string;
+    service_url?: string;
+    capabilities?: string[];
+    terms_url?: string;
+    identity: {
+        algorithm: "Ed25519";
+        public_key: string;
+    };
+    governance: {
+        trust_mode: "full" | "guarded" | "minimal";
+        max_risk_auto: string;
+        require_approval_above: string;
+        deny_above: string;
+        operator_mode: boolean;
+    };
+    privacy: {
+        default_sensitivity: string;
+        retention_days: Record<string, number>;
+        fail_closed: boolean;
+    };
+    memory: {
+        half_life_days: number;
+        confidence_threshold: number;
+        per_turn_limit: number;
+    };
+    devices: Array<{
+        device_id: string;
+        name: string;
+        public_key: string;
+        registered_at: string;
+    }>;
+}
+export interface VerifyResult {
+    valid: boolean;
+    identity: MotebitIdentityFile | null;
+    error?: string;
+}
+/**
+ * Parse a motebit.md file into its components.
+ * Does not verify the signature — use `verify()` for that.
+ */
+export declare function parse(content: string): {
+    frontmatter: MotebitIdentityFile;
+    signature: string;
+    rawFrontmatter: string;
+};
+/**
+ * Verify a motebit.md file's Ed25519 signature.
+ *
+ * Returns `{ valid: true, identity }` if the signature is valid,
+ * or `{ valid: false, identity: null, error }` if verification fails.
+ *
+ * Implements the motebit/identity@1.0 verification algorithm (spec §4.3).
+ */
+export declare function verify(content: string): Promise<VerifyResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAcH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IAGjB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,eAAe,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,QAAQ,EAAE;QACR,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAEF,UAAU,EAAE;QACV,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;QAC3C,aAAa,EAAE,MAAM,CAAC;QACtB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAEF,OAAO,EAAE;QACP,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IAEF,MAAM,EAAE;QACN,cAAc,EAAE,MAAM,CAAC;QACvB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IAEF,OAAO,EAAE,KAAK,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAiKD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG;IACtC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAqBA;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmDnE"}

package/dist/index.js

@@ -0,0 +1,243 @@
+/**
+ * @motebit/verify — Standalone verifier for motebit.md agent identity files.
+ *
+ * Implements the verification algorithm from the motebit/identity@1.0 spec.
+ * Zero monorepo dependencies — only @noble/ed25519 for cryptography.
+ *
+ * Usage:
+ *   import { verify } from "@motebit/verify";
+ *   const result = await verify(fs.readFileSync("motebit.md", "utf-8"));
+ *   if (result.valid) console.log(result.identity.motebit_id);
+ */
+import * as ed from "@noble/ed25519";
+import { sha512 } from "@noble/hashes/sha512";
+// @noble/ed25519 v3 requires explicit SHA-512 binding
+if (!ed.hashes.sha512) {
+    ed.hashes.sha512 = (msg) => sha512(msg);
+}
+// ---------------------------------------------------------------------------
+// Minimal YAML parser — handles only the motebit identity schema
+// ---------------------------------------------------------------------------
+function parseYamlValue(raw) {
+    const trimmed = raw.trim();
+    if (trimmed === "null")
+        return null;
+    if (trimmed === "true")
+        return true;
+    if (trimmed === "false")
+        return false;
+    if (trimmed === "[]")
+        return [];
+    if (trimmed === "{}")
+        return ({});
+    if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
+        (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
+        return JSON.parse(trimmed);
+    }
+    const num = Number(trimmed);
+    if (trimmed !== "" && !isNaN(num) && isFinite(num))
+        return num;
+    return trimmed;
+}
+function parseYaml(text) {
+    const lines = text.split("\n");
+    const root = {};
+    const stack = [{ obj: root, indent: -1 }];
+    let currentArray = null;
+    let currentArrayIndent = -1;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (line.trim() === "" || line.trim().startsWith("#"))
+            continue;
+        const lineIndent = line.length - line.trimStart().length;
+        const trimmed = line.trimStart();
+        if (trimmed.startsWith("- ")) {
+            const itemContent = trimmed.slice(2);
+            const colonIdx = itemContent.indexOf(": ");
+            if (colonIdx !== -1) {
+                const obj = {};
+                const key = itemContent.slice(0, colonIdx);
+                const val = itemContent.slice(colonIdx + 2);
+                obj[key] = parseYamlValue(val);
+                for (let j = i + 1; j < lines.length; j++) {
+                    const nextLine = lines[j];
+                    if (nextLine.trim() === "")
+                        continue;
+                    const nextIndent = nextLine.length - nextLine.trimStart().length;
+                    const nextTrimmed = nextLine.trimStart();
+                    if (nextIndent > lineIndent && !nextTrimmed.startsWith("- ")) {
+                        const nextColonIdx = nextTrimmed.indexOf(": ");
+                        if (nextColonIdx !== -1) {
+                            const nk = nextTrimmed.slice(0, nextColonIdx);
+                            const nv = nextTrimmed.slice(nextColonIdx + 2);
+                            obj[nk] = parseYamlValue(nv);
+                            i = j;
+                        }
+                    }
+                    else {
+                        break;
+                    }
+                }
+                if (currentArray)
+                    currentArray.push(obj);
+            }
+            else {
+                if (currentArray)
+                    currentArray.push(parseYamlValue(itemContent));
+            }
+            continue;
+        }
+        const colonIdx = trimmed.indexOf(": ");
+        const endsWithColon = trimmed.endsWith(":") && colonIdx === -1;
+        if (endsWithColon) {
+            const key = trimmed.slice(0, -1);
+            if (currentArray && lineIndent <= currentArrayIndent) {
+                currentArray = null;
+                currentArrayIndent = -1;
+            }
+            while (stack.length > 1 && stack[stack.length - 1].indent >= lineIndent) {
+                stack.pop();
+            }
+            const parent = stack[stack.length - 1].obj;
+            let nextIdx = i + 1;
+            while (nextIdx < lines.length && lines[nextIdx].trim() === "")
+                nextIdx++;
+            if (nextIdx < lines.length && lines[nextIdx].trimStart().startsWith("- ")) {
+                const arr = [];
+                parent[key] = arr;
+                currentArray = arr;
+                currentArrayIndent = lineIndent;
+            }
+            else {
+                const nested = {};
+                parent[key] = nested;
+                stack.push({ obj: nested, indent: lineIndent });
+            }
+            continue;
+        }
+        if (colonIdx !== -1) {
+            if (currentArray && lineIndent <= currentArrayIndent) {
+                currentArray = null;
+                currentArrayIndent = -1;
+            }
+            while (stack.length > 1 && stack[stack.length - 1].indent >= lineIndent) {
+                stack.pop();
+            }
+            const key = trimmed.slice(0, colonIdx);
+            const val = trimmed.slice(colonIdx + 2);
+            const parent = stack[stack.length - 1].obj;
+            parent[key] = parseYamlValue(val);
+        }
+    }
+    return root;
+}
+// ---------------------------------------------------------------------------
+// Encoding helpers
+// ---------------------------------------------------------------------------
+function hexToBytes(hex) {
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+    }
+    return bytes;
+}
+function fromBase64Url(str) {
+    const padded = str.replace(/-/g, "+").replace(/_/g, "/");
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const SIG_PREFIX = "<!-- motebit:sig:Ed25519:";
+const SIG_SUFFIX = " -->";
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Parse a motebit.md file into its components.
+ * Does not verify the signature — use `verify()` for that.
+ */
+export function parse(content) {
+    const firstDash = content.indexOf("---\n");
+    if (firstDash === -1)
+        throw new Error("Missing frontmatter opening ---");
+    const bodyStart = firstDash + 4;
+    const secondDash = content.indexOf("\n---", bodyStart);
+    if (secondDash === -1)
+        throw new Error("Missing frontmatter closing ---");
+    const rawFrontmatter = content.slice(bodyStart, secondDash);
+    const frontmatter = parseYaml(rawFrontmatter);
+    const sigStart = content.indexOf(SIG_PREFIX);
+    if (sigStart === -1)
+        throw new Error("Missing signature");
+    const sigValueStart = sigStart + SIG_PREFIX.length;
+    const sigEnd = content.indexOf(SIG_SUFFIX, sigValueStart);
+    if (sigEnd === -1)
+        throw new Error("Malformed signature");
+    const signature = content.slice(sigValueStart, sigEnd);
+    return { frontmatter, signature, rawFrontmatter };
+}
+/**
+ * Verify a motebit.md file's Ed25519 signature.
+ *
+ * Returns `{ valid: true, identity }` if the signature is valid,
+ * or `{ valid: false, identity: null, error }` if verification fails.
+ *
+ * Implements the motebit/identity@1.0 verification algorithm (spec §4.3).
+ */
+export async function verify(content) {
+    let parsed;
+    try {
+        parsed = parse(content);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { valid: false, identity: null, error: msg };
+    }
+    // Step 6: Extract and validate public key
+    const pubKeyHex = parsed.frontmatter.identity?.public_key;
+    if (!pubKeyHex) {
+        return { valid: false, identity: null, error: "No public key in frontmatter" };
+    }
+    let pubKey;
+    try {
+        pubKey = hexToBytes(pubKeyHex);
+    }
+    catch {
+        return { valid: false, identity: null, error: "Invalid public key hex" };
+    }
+    if (pubKey.length !== 32) {
+        return { valid: false, identity: null, error: "Public key must be 32 bytes" };
+    }
+    // Step 5: Extract and validate signature
+    let sigBytes;
+    try {
+        sigBytes = fromBase64Url(parsed.signature);
+    }
+    catch {
+        return { valid: false, identity: null, error: "Invalid signature encoding" };
+    }
+    if (sigBytes.length !== 64) {
+        return { valid: false, identity: null, error: "Signature must be 64 bytes" };
+    }
+    // Steps 7-8: Verify Ed25519 signature over frontmatter bytes
+    const frontmatterBytes = new TextEncoder().encode(parsed.rawFrontmatter);
+    let valid;
+    try {
+        valid = await ed.verifyAsync(sigBytes, frontmatterBytes, pubKey);
+    }
+    catch {
+        valid = false;
+    }
+    return {
+        valid,
+        identity: valid ? parsed.frontmatter : null,
+        error: valid ? undefined : "Signature verification failed",
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,sDAAsD;AACtD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAe,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AA2DD,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAElC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAE/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,MAAM,KAAK,GAA4D,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,YAAY,GAAqB,IAAI,CAAC;IAC1C,IAAI,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAEhE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC3B,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;wBAAE,SAAS;oBACrC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;oBACjE,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;oBAEzC,IAAI,UAAU,GAAG,UAAU,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7D,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC/C,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;4BACxB,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;4BAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;4BAC/C,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;4BAC7B,CAAC,GAAG,CAAC,CAAC;wBACR,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY;oBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,IAAI,YAAY;oBAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC;QAE/D,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAEjC,IAAI,YAAY,IAAI,UAAU,IAAI,kBAAkB,EAAE,CAAC;gBACrD,YAAY,GAAG,IAAI,CAAC;gBACpB,kBAAkB,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;gBACzE,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC;YAE5C,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,EAAE,CAAC;YAE1E,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAE,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3E,MAAM,GAAG,GAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;gBAClB,YAAY,GAAG,GAAG,CAAC;gBACnB,kBAAkB,GAAG,UAAU,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAA4B,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,IAAI,YAAY,IAAI,UAAU,IAAI,kBAAkB,EAAE,CAAC;gBACrD,YAAY,GAAG,IAAI,CAAC;gBACpB,kBAAkB,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;gBACzE,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;YAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,IAAsC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAC/C,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe;IAKnC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAEzE,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAE1E,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAE1D,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAe;IAC1C,IAAI,MAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACtD,CAAC;IAED,0CAA0C;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAChF,CAAC;IAED,yCAAyC;IACzC,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IAC/E,CAAC;IAED,6DAA6D;IAC7D,MAAM,gBAAgB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAEzE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAC3C,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B;KAC3D,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@motebit/verify",
+  "version": "0.1.0",
+  "description": "Verify motebit.md agent identity files — Ed25519 signature verification for the motebit/identity@1.0 spec",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "license": "MIT",
+  "keywords": [
+    "motebit",
+    "agent",
+    "identity",
+    "ed25519",
+    "verify",
+    "signature"
+  ],
+  "homepage": "https://github.com/hakimlabs/motebit/tree/main/packages/verify#readme",
+  "bugs": {
+    "url": "https://github.com/hakimlabs/motebit/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hakimlabs/motebit",
+    "directory": "packages/verify"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@noble/ed25519": "^3.0.0",
+    "@noble/hashes": "^1.6.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.0",
+    "vitest": "^3.0.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist .turbo *.tsbuildinfo"
+  }
+}