@pregen/verify 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,45 @@
+# @pregen/verify
+
+Checks that a PRE-GEN decision or license was really signed by the registry
+that owns its PG code, using the signed registry directory at
+[pregen.org](https://www.pregen.org/registries.json). The PRE-GEN steward key
+is built in; no dependencies (Web Crypto, Node 20+ or a modern browser).
+
+```js
+import { loadDirectory, verifyDecision } from "@pregen/verify";
+
+const directory = await loadDirectory({ minSequence: savedSequence });
+saveSequence(directory.sequence);              // refuse older copies next time
+
+// decision: the JSON a registry returned from /v1/verify
+// code: the PG code you asked about (the license id, or the subject code)
+if (!(await verifyDecision(decision, code, { directory }))) throw new Error("not genuine");
+```
+
+The chain it checks:
+
+1. the directory is signed by the PRE-GEN steward key
+   (`pg-ed25519:dcdd244659e6d0e2426f2b504cb11590`) and is not older than one
+   you have seen;
+2. the code's namespace (bare `PG-…` or a four-letter prefix) belongs to one
+   listed registry;
+3. the decision's `operator_key_id` is one of that registry's listed keys, and
+   the key its key set serves hashes to that fingerprint;
+4. the Ed25519 signature over the canonical JSON verifies.
+
+What it does **not** check, and you still must (`PRE-GEN-SPEC.md` §5.4):
+that the decision answers your own request (V-4), has not expired (V-3),
+carries a verified user binding when you named a user (V-13), and that
+`disposition` is `allow` before you generate (P-5). A listing in the directory
+proves which registry may issue a code, not that it holds any right over a
+person or a work.
+
+Also exported: `verifyDirectory`, `Directory.checkSigner` / `registryFor` /
+`publicKey`, `verifyLicense` (subject signature plus operator countersignature),
+`verifySigned`, `canonicalJson`, `fingerprint`, `issuerOf`.
+
+Tests: `npm test` runs the unit tests and the PRE-GEN Level 1 conformance
+vectors with every verifier operation required.
+
+Apache-2.0. Part of the PRE-GEN standard,
+[github.com/Pastheroza/PRE-GEN-site](https://github.com/Pastheroza/PRE-GEN-site).

package/index.d.ts

@@ -0,0 +1,43 @@
+export const STEWARD_PUBLIC_KEY_HEX: string;
+export const DIRECTORY_URL: string;
+
+export class PregenError extends Error {}
+
+export interface RegistryEntry {
+  name: string;
+  prefix: string;
+  api: string;
+  keys: string;
+  key_fingerprints: string[];
+  [member: string]: unknown;
+}
+
+type Fetch = (url: string, init?: { redirect?: "error" }) => Promise<{ ok: boolean; status: number; json(): Promise<any> }>;
+
+export class Directory {
+  private constructor();
+  /** Store it and pass it back as `minSequence`, so an older directory is refused. */
+  readonly sequence: number;
+  readonly registries: RegistryEntry[];
+  /** The registry that owns a code's namespace (resolve codes only there), or null. */
+  registryFor(code: string): RegistryEntry | null;
+  /** V-10: may this operator key sign objects carrying this code? */
+  checkSigner(code: string, signerKeyId: string): "valid" | "unknown_issuer" | "issuer_mismatch";
+  /** The owner's public key for `keyId`, fetched from its key set and checked against the listed fingerprint. */
+  publicKey(code: string, keyId: string, options?: { fetch?: Fetch }): Promise<string>;
+}
+
+export function canonicalJson(value: unknown): string;
+export function sha256Hex(data: string | Uint8Array): Promise<string>;
+export function fingerprint(publicKeyHex: string): Promise<string>;
+export function verifyBytes(publicKeyHex: string, signatureHex: string, message: Uint8Array): Promise<boolean>;
+export function verifySigned(obj: Record<string, unknown>, publicKeyHex: string, signatureField: string, exclude?: string[]): Promise<boolean>;
+export function verifyLicense(license: {
+  body: Record<string, unknown>; licenseId: string;
+  subjectPublicKeyHex: string; subjectSignatureHex: string;
+  operatorPublicKeyHex: string; operatorSignatureHex: string;
+}): Promise<{ subjectValid: boolean; operatorValid: boolean }>;
+export function issuerOf(code: string): string;
+export function verifyDirectory(directory: unknown, options?: { stewardPublicKeyHex?: string; minSequence?: number }): Promise<Directory>;
+export function loadDirectory(options?: { url?: string; minSequence?: number; fetch?: Fetch }): Promise<Directory>;
+export function verifyDecision(decision: Record<string, unknown>, code: string, options?: { directory?: Directory; fetch?: Fetch }): Promise<boolean>;

package/index.js

@@ -0,0 +1,207 @@
+// @pregen/verify — check PRE-GEN signatures against the signed registry
+// directory (PG-CODE.md §9.1, PRE-GEN-SPEC.md §2, V-9 to V-12).
+// No dependencies: Ed25519 and SHA-256 come from Web Crypto (Node >= 20, browsers).
+
+export const STEWARD_PUBLIC_KEY_HEX = "5cb949aab04186e3e216ec541b847c912fc3f78138c0ec3cb2560b2dad0d1f1b";
+export const DIRECTORY_URL = "https://www.pregen.org/registries.json";
+const SCHEMA = "pregen.registries.v2";
+const MAX_INT = 2 ** 53 - 1;
+const PREFIX = /^[ABCDEFGHJKMNPQRSTVWXYZ]{4}$/;
+const FINGERPRINT = /^pg-ed25519:[0-9a-f]{32}$/;
+const ISSUER_IN_CODE = /^PG-([ABCDEFGHJKMNPQRSTVWXYZ]{4})-/;
+const BARE_CODE = /^PG-(?:(?:STD|SUB|PRM|RND)-)?[0-9]/;
+
+export class PregenError extends Error {
+  constructor(message) { super(message); this.name = "PregenError"; }
+}
+const fail = (message) => { throw new PregenError(message); };
+const utf8 = new TextEncoder();
+
+function bytesCompare(a, b) {
+  for (let i = 0; i < a.length && i < b.length; i++) if (a[i] !== b[i]) return a[i] - b[i];
+  return a.length - b.length;
+}
+
+function hexBytes(hex, length) {
+  if (typeof hex !== "string" || hex.length !== length * 2 || !/^[0-9a-fA-F]*$/.test(hex)) {
+    fail(`expected ${length} bytes of hex`);
+  }
+  return Uint8Array.from(hex.match(/../g), (h) => parseInt(h, 16));
+}
+
+const toHex = (bytes) => Array.from(new Uint8Array(bytes), (b) => b.toString(16).padStart(2, "0")).join("");
+
+/** Canonical JSON (PRE-GEN-SPEC.md §2) as a string; encode with UTF-8 to sign. */
+export function canonicalJson(value) {
+  if (value === null || typeof value === "boolean") return JSON.stringify(value);
+  if (typeof value === "number") {
+    if (!Number.isSafeInteger(value)) fail("signed JSON numbers must be safe integers");
+    return String(value);
+  }
+  if (typeof value === "string") {
+    if (!value.isWellFormed()) fail("invalid Unicode in signed JSON");
+    return JSON.stringify(value); // escapes exactly as §2 requires
+  }
+  if (Array.isArray(value)) {
+    for (let i = 0; i < value.length; i++) if (!(i in value)) fail("sparse arrays are not JSON");
+    return "[" + value.map(canonicalJson).join(",") + "]";
+  }
+  if (typeof value === "object" && [Object.prototype, null].includes(Object.getPrototypeOf(value))) {
+    // UTF-8 byte order is Unicode code point order.
+    const keys = Object.keys(value).sort((a, b) => bytesCompare(utf8.encode(a), utf8.encode(b)));
+    return "{" + keys.map((k) => canonicalJson(k) + ":" + canonicalJson(value[k])).join(",") + "}";
+  }
+  fail("signed JSON must contain only JSON values");
+}
+
+export async function sha256Hex(data) {
+  return toHex(await crypto.subtle.digest("SHA-256", typeof data === "string" ? utf8.encode(data) : data));
+}
+
+/** "pg-ed25519:" + first 32 hex of SHA-256(raw public key) (§2.1). */
+export async function fingerprint(publicKeyHex) {
+  return "pg-ed25519:" + (await sha256Hex(hexBytes(publicKeyHex, 32))).slice(0, 32);
+}
+
+/** Ed25519 over raw bytes. False on any bad signature or key encoding. */
+export async function verifyBytes(publicKeyHex, signatureHex, message) {
+  try {
+    const key = await crypto.subtle.importKey("raw", hexBytes(publicKeyHex, 32), { name: "Ed25519" }, false, ["verify"]);
+    return await crypto.subtle.verify({ name: "Ed25519" }, key, hexBytes(signatureHex, 64), message);
+  } catch {
+    return false;
+  }
+}
+
+/** Verify `obj[signatureField]` over the canonical JSON of `obj` without the excluded fields. */
+export async function verifySigned(obj, publicKeyHex, signatureField, exclude = [signatureField]) {
+  if (!obj || typeof obj !== "object") return false;
+  const body = Object.fromEntries(Object.entries(obj).filter(([k]) => !exclude.includes(k)));
+  return verifyBytes(publicKeyHex, obj[signatureField], utf8.encode(canonicalJson(body)));
+}
+
+/** A license (§1.2): subject signature over the body, operator countersignature over
+ * canonical body || subject signature (64 raw bytes) || license id (ASCII). */
+export async function verifyLicense({ body, licenseId, subjectPublicKeyHex, subjectSignatureHex,
+  operatorPublicKeyHex, operatorSignatureHex }) {
+  const bodyBytes = utf8.encode(canonicalJson(body));
+  const subjectValid = await verifyBytes(subjectPublicKeyHex, subjectSignatureHex, bodyBytes);
+  let operatorValid = false;
+  try {
+    const sig = hexBytes(subjectSignatureHex, 64);
+    const id = utf8.encode(String(licenseId));
+    const message = new Uint8Array(bodyBytes.length + 64 + id.length);
+    message.set(bodyBytes); message.set(sig, bodyBytes.length); message.set(id, bodyBytes.length + 64);
+    operatorValid = await verifyBytes(operatorPublicKeyHex, operatorSignatureHex, message);
+  } catch { /* bad encoding: invalid */ }
+  return { subjectValid, operatorValid };
+}
+
+/** The namespace of a PG code: its four-letter prefix, or "" for the bare namespace. */
+export function issuerOf(code) {
+  if (typeof code !== "string") fail("PG code must be a string");
+  const c = code.trim().toUpperCase();
+  const m = ISSUER_IN_CODE.exec(c);
+  if (m) return m[1];
+  if (!BARE_CODE.test(c)) fail("unrecognized PG namespace");
+  return "";
+}
+
+function httpsUrl(value, field) {
+  let url;
+  try { url = new URL(value); } catch { fail(`registry ${field} must be a URL`); }
+  if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) {
+    fail(`registry ${field} must use HTTPS without credentials, query or fragment`);
+  }
+}
+
+function checkInvariants(d) {
+  if (!d || typeof d !== "object" || Array.isArray(d)) fail("directory must be an object");
+  if (d.schema !== SCHEMA) fail(`schema must be ${SCHEMA}`);
+  if (!Number.isSafeInteger(d.sequence) || d.sequence < 1) fail("sequence must be a positive integer");
+  if (!FINGERPRINT.test(String(d.steward_key_id))) fail("steward_key_id must be a pg-ed25519 fingerprint");
+  if (!Array.isArray(d.registries) || d.registries.length === 0) fail("registries must be a non-empty list");
+  const seen = new Set();
+  for (const r of d.registries) {
+    if (!r || typeof r !== "object") fail("registry entry must be an object");
+    if (typeof r.name !== "string" || !r.name.trim()) fail("registry name must be nonempty");
+    httpsUrl(r.api, "api");
+    httpsUrl(r.keys, "keys");
+    if (r.prefix !== "" && !(typeof r.prefix === "string" && PREFIX.test(r.prefix))) fail(`bad prefix ${r.prefix}`);
+    if (seen.has(r.prefix)) fail(r.prefix === "" ? "the bare namespace is listed twice" : `prefix ${r.prefix} is listed twice`);
+    seen.add(r.prefix);
+    if (!Array.isArray(r.key_fingerprints) || !r.key_fingerprints.length
+        || !r.key_fingerprints.every((f) => FINGERPRINT.test(String(f)))) {
+      fail(`registry ${r.name}: key_fingerprints must list pg-ed25519 fingerprints`);
+    }
+  }
+  if (!seen.has("")) fail("no registry holds the bare namespace");
+}
+
+/** A directory accepted under V-12. Build one with verifyDirectory() or loadDirectory(). */
+export class Directory {
+  #d;
+  constructor(token, directory) {
+    if (token !== Directory.#token) fail("use verifyDirectory() or loadDirectory()");
+    this.#d = structuredClone(directory);
+  }
+  static #token = Symbol();
+  static _make(directory) { return new Directory(Directory.#token, directory); }
+
+  /** Store this and pass it as minSequence next time, so an older copy is refused. */
+  get sequence() { return this.#d.sequence; }
+  get registries() { return structuredClone(this.#d.registries); }
+
+  /** The registry that owns a code's namespace (resolve codes only there, V-11), or null. */
+  registryFor(code) {
+    let issuer;
+    try { issuer = issuerOf(code); } catch { return null; }
+    const r = this.#d.registries.find((x) => x.prefix === issuer);
+    return r ? structuredClone(r) : null;
+  }
+
+  /** V-10: "valid", "unknown_issuer" or "issuer_mismatch". */
+  checkSigner(code, signerKeyId) {
+    const r = this.registryFor(code);
+    if (!r) return "unknown_issuer";
+    return r.key_fingerprints.includes(signerKeyId) ? "valid" : "issuer_mismatch";
+  }
+
+  /** The public key behind `keyId`, which must belong to the owner of `code`'s namespace.
+   * The key comes from the owner's key set and must hash to the listed fingerprint. */
+  async publicKey(code, keyId, { fetch: fetchFn = globalThis.fetch } = {}) {
+    const verdict = this.checkSigner(code, keyId);
+    if (verdict !== "valid") fail(`${keyId} may not sign ${code}: ${verdict}`);
+    const res = await fetchFn(this.registryFor(code).keys, { redirect: "error" });
+    if (!res.ok) fail(`key set: HTTP ${res.status}`);
+    const entry = ((await res.json()).keys || []).find((k) => k && k.key_id === keyId);
+    if (!entry || (await fingerprint(entry.public_key_hex)) !== keyId) fail(`no key ${keyId} in the key set`);
+    return entry.public_key_hex;
+  }
+}
+
+/** V-12: accept the directory only with the pinned steward's signature, its
+ * invariants, and a sequence no lower than one already seen. */
+export async function verifyDirectory(directory, { stewardPublicKeyHex = STEWARD_PUBLIC_KEY_HEX, minSequence = 0 } = {}) {
+  if (!Number.isSafeInteger(minSequence) || minSequence < 0) fail("minSequence must be a nonnegative integer");
+  checkInvariants(directory);
+  if (directory.steward_key_id !== (await fingerprint(stewardPublicKeyHex))) fail("signed by a different steward key");
+  if (!(await verifySigned(directory, stewardPublicKeyHex, "signature"))) fail("bad steward signature");
+  if (directory.sequence < minSequence) fail(`sequence ${directory.sequence} is older than ${minSequence} already seen`);
+  return Directory._make(directory);
+}
+
+/** Download and verify the directory from pregen.org. */
+export async function loadDirectory({ url = DIRECTORY_URL, minSequence = 0, fetch: fetchFn = globalThis.fetch } = {}) {
+  const res = await fetchFn(url, { redirect: "error" });
+  if (!res.ok) fail(`directory: HTTP ${res.status}`);
+  return verifyDirectory(await res.json(), { minSequence });
+}
+
+/** Step 4 in one call: is this registry decision genuine, and signed by a key of the
+ * registry that owns `code`? Request matching and expiry (V-3, V-4, V-13) stay with the caller. */
+export async function verifyDecision(decision, code, { directory, fetch: fetchFn = globalThis.fetch } = {}) {
+  const dir = directory || (await loadDirectory({ fetch: fetchFn }));
+  const key = await dir.publicKey(code, decision && decision.operator_key_id, { fetch: fetchFn });
+  return verifySigned(decision, key, "operator_signature");
+}

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@pregen/verify",
+  "version": "0.1.0",
+  "description": "Verify PRE-GEN signatures against the signed registry directory, with the PRE-GEN steward key built in",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./index.js"
+    }
+  },
+  "files": ["index.js", "index.d.ts", "README.md", "LICENSE"],
+  "engines": { "node": ">=20" },
+  "scripts": {
+    "test": "node --test test/*.test.js && cd ../.. && python3 spec/conformance/level1/run_conformance.py --adapter \"node packages/verify-js/test/conformance-adapter.js\" --require-op canonical_json --require-op verify_signature --require-op verify_license --require-op verify_directory --require-op check_namespace"
+  },
+  "keywords": ["pre-gen", "pregen", "pre-generation authorization", "ed25519", "verification"],
+  "homepage": "https://www.pregen.org",
+  "repository": { "type": "git", "url": "git+https://github.com/Pastheroza/PRE-GEN-site.git", "directory": "packages/verify-js" },
+  "license": "Apache-2.0",
+  "author": "Valerii Egorov (Pastheroza)",
+  "publishConfig": { "access": "public" }
+}