@signet-auth/core 0.1.0

package/dist/src/index.d.ts

@@ -0,0 +1,28 @@
+export interface SignetKeypair {
+    secretKey: string;
+    publicKey: string;
+}
+export interface SignetAction {
+    tool: string;
+    params: unknown;
+    params_hash: string;
+    target: string;
+    transport: string;
+}
+export interface SignetSigner {
+    pubkey: string;
+    name: string;
+    owner: string;
+}
+export interface SignetReceipt {
+    v: number;
+    id: string;
+    action: SignetAction;
+    signer: SignetSigner;
+    ts: string;
+    nonce: string;
+    sig: string;
+}
+export declare function generateKeypair(): SignetKeypair;
+export declare function sign(secretKey: string, action: SignetAction, signerName: string, signerOwner: string): SignetReceipt;
+export declare function verify(receipt: SignetReceipt, publicKey: string): boolean;

package/dist/src/index.js

@@ -0,0 +1,18 @@
+// @signet/core — TypeScript wrapper for signet WASM
+import { wasm_generate_keypair, wasm_sign, wasm_verify } from '../wasm/signet_wasm.js';
+export function generateKeypair() {
+    const json = wasm_generate_keypair();
+    const result = JSON.parse(json);
+    return {
+        secretKey: result.secret_key,
+        publicKey: result.public_key,
+    };
+}
+export function sign(secretKey, action, signerName, signerOwner) {
+    const actionJson = JSON.stringify(action);
+    const receiptJson = wasm_sign(secretKey, actionJson, signerName, signerOwner);
+    return JSON.parse(receiptJson);
+}
+export function verify(receipt, publicKey) {
+    return wasm_verify(JSON.stringify(receipt), publicKey);
+}

package/dist/tests/core.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/core.test.js

@@ -0,0 +1,52 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert';
+import { generateKeypair, sign, verify } from '../src/index.js';
+describe('@signet/core', () => {
+    const testAction = {
+        tool: 'github_create_issue',
+        params: { title: 'fix bug', body: 'details' },
+        params_hash: '',
+        target: 'mcp://github.local',
+        transport: 'stdio',
+    };
+    it('generateKeypair returns secretKey and publicKey', () => {
+        const kp = generateKeypair();
+        assert(kp.secretKey, 'secretKey should be non-empty');
+        assert(kp.publicKey, 'publicKey should be non-empty');
+        assert(typeof kp.secretKey === 'string');
+        assert(typeof kp.publicKey === 'string');
+    });
+    it('sign produces receipt with all fields', () => {
+        const kp = generateKeypair();
+        const receipt = sign(kp.secretKey, testAction, 'test-agent', 'owner');
+        assert.strictEqual(receipt.v, 1);
+        assert(receipt.id.startsWith('rec_'));
+        assert(receipt.sig.startsWith('ed25519:'));
+        assert(receipt.nonce.startsWith('rnd_'));
+        assert.strictEqual(receipt.signer.name, 'test-agent');
+        assert.strictEqual(receipt.action.tool, 'github_create_issue');
+    });
+    it('sign then verify roundtrip succeeds', () => {
+        const kp = generateKeypair();
+        const receipt = sign(kp.secretKey, testAction, 'agent', 'owner');
+        assert.strictEqual(verify(receipt, kp.publicKey), true);
+    });
+    it('verify with wrong key returns false', () => {
+        const kp1 = generateKeypair();
+        const kp2 = generateKeypair();
+        const receipt = sign(kp1.secretKey, testAction, 'agent', 'owner');
+        assert.strictEqual(verify(receipt, kp2.publicKey), false);
+    });
+    it('verify tampered receipt returns false', () => {
+        const kp = generateKeypair();
+        const receipt = sign(kp.secretKey, testAction, 'agent', 'owner');
+        const tampered = { ...receipt, action: { ...receipt.action, tool: 'evil_tool' } };
+        assert.strictEqual(verify(tampered, kp.publicKey), false);
+    });
+    it('params_hash is computed automatically', () => {
+        const kp = generateKeypair();
+        const receipt = sign(kp.secretKey, testAction, 'agent', 'owner');
+        assert(receipt.action.params_hash.startsWith('sha256:'));
+        assert(receipt.action.params_hash.length > 10);
+    });
+});

package/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "@signet-auth/core",
+  "version": "0.1.0",
+  "description": "Cryptographic action receipts for AI agents",
+  "type": "module",
+  "main": "dist/src/index.js",
+  "types": "dist/src/index.d.ts",
+  "files": [
+    "dist/",
+    "wasm/"
+  ],
+  "scripts": {
+    "build": "npx tsc && cp -r wasm dist/wasm",
+    "test": "npx tsc && cp -r wasm dist/wasm && node --test dist/tests/core.test.js"
+  },
+  "license": "Apache-2.0 OR MIT",
+  "devDependencies": {
+    "@types/node": "^25.5.0"
+  }
+}