@parmanasystems/crypto 1.83.0 → 1.86.0

package/README.md

@@ -1,4 +1,4 @@
-# @parmanasystems/crypto
+# @parmanasystems/crypto
 
 Ed25519 signing and verification primitives for governance artifacts.
 
@@ -10,7 +10,7 @@ Ed25519 signing and verification primitives for governance artifacts.
 
 `@parmanasystems/crypto` provides the low-level cryptographic operations used across the Parmana Systems governance pipeline: signing and verifying bundle manifests, loading trust root keys from disk, and packaging bundles with Ed25519 signatures.
 
-Most applications should use `@parmanasystems/core` or `@parmanasystems/governance`. Use this package directly only when building tooling that needs the raw signing primitives — for example, a CI step that signs a bundle before deployment.
+Most applications should use `@parmanasystems/core` or `@parmanasystems/governance`. Use this package directly only when building tooling that needs the raw signing primitives - for example, a CI step that signs a bundle before deployment.
 
 ---
 
@@ -35,13 +35,13 @@ const { privateKey, publicKey } = crypto.generateKeyPairSync("ed25519", {
   publicKeyEncoding:  { type: "spki",  format: "pem" },
 });
 
-// Store keys — in production use a secrets manager, not plain files
+// Store keys - in production use a secrets manager, not plain files
 fs.mkdirSync("trust", { recursive: true });
 fs.writeFileSync("trust/root.key", privateKey, { mode: 0o600 });
 fs.writeFileSync("trust/root.pub", publicKey);
 ```
 
-Pass paths **explicitly** to all signing and verification functions — there is no implicit key discovery.
+Pass paths **explicitly** to all signing and verification functions - there is no implicit key discovery.
 
 ---
 
@@ -52,7 +52,7 @@ Pass paths **explicitly** to all signing and verification functions — there is
 ```typescript
 import { loadPrivateKey, loadPublicKey } from "@parmanasystems/crypto";
 
-// Both functions require an explicit path — there is no default path fallback
+// Both functions require an explicit path - there is no default path fallback
 const privateKeyPem = loadPrivateKey("./trust/root.key");
 const publicKeyPem  = loadPublicKey("./trust/root.pub");
 ```
@@ -108,7 +108,7 @@ await signBundle({
 | `verifySignature` | Verify a base64 signature over a manifest file using a public key path |
 | `verifyPayloadSignature` | Verify a base64 signature over an arbitrary UTF-8 payload string |
 | `verifyManifestSignature` | Verify a `bundle.sig` file against a manifest on disk |
-| `signBundle` | Sign a bundle directory — reads manifest, writes `bundle.sig` |
+| `signBundle` | Sign a bundle directory - reads manifest, writes `bundle.sig` |
 | `writeSignature` | Write a base64 signature string to `bundle.sig` in a directory |
 | `readSignature` | Read a `bundle.sig` file and return the base64 signature string |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parmanasystems/crypto",
-  "version": "1.83.0",
+  "version": "1.86.0",
   "private": false,
   "type": "module",
   "scripts": {
@@ -18,7 +18,7 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@parmanasystems/bundle": "^1.83.0"
+    "@parmanasystems/bundle": "^1.86.0"
   },
   "description": "Signing and verification primitives for deterministic governance infrastructure.",
   "license": "Apache-2.0",