@treeship/verify 0.12.0 → 0.13.0

package/dist/index.d.ts

@@ -103,3 +103,31 @@ export declare function verifyCertificate(target: VerifyTarget, now?: Date | str
  * be accepted.
  */
 export declare function crossVerify(receipt: VerifyTarget, certificate: VerifyTarget, now?: Date | string, trustRoots?: TrustRootsBundle | TrustRootInput[]): Promise<CrossVerifyResult>;
+/** Result of {@link verifyCapability}. Mirrors the WASM JSON output. */
+export interface CapabilityVerifyResult {
+    outcome: 'pass' | 'fail' | 'error';
+    /** The actor the card claims, e.g. `agent://deployer`. */
+    agent?: string;
+    /** True iff the card's keyid is its signer AND pinned under AgentCert. */
+    key_bound?: boolean;
+    declared_tools?: string[];
+    in_scope?: number;
+    out_of_scope?: number;
+    violations?: {
+        tool: string;
+    }[];
+    status?: 'verified' | 'self-asserted' | 'violations';
+    error_code?: string;
+    message?: string;
+}
+/**
+ * Verify an agent_card.v1 capability card in the browser, the same check
+ * `treeship verify-capability` runs (shared Rust logic via
+ * `treeship_core::capability`). Pass the card envelope and the action
+ * envelopes to cross-check; `trustRoots` is required for `key_bound` to be
+ * true (otherwise the card is reported self-asserted).
+ *
+ * Honest contract: this is consistency over the actions you provide, not a
+ * completeness guarantee. It cannot prove the agent took no off-card action.
+ */
+export declare function verifyCapability(card: VerifyTarget, actions: VerifyTarget[], trustRoots?: TrustRootsBundle | TrustRootInput[]): Promise<CapabilityVerifyResult>;

package/dist/index.js

@@ -104,3 +104,21 @@ export async function crossVerify(receipt, certificate, now, trustRoots) {
     const wasm = await loadWasm();
     return JSON.parse(wasm.cross_verify(receiptJson, certJson, nowStr, serializeTrustRoots(trustRoots)));
 }
+/**
+ * Verify an agent_card.v1 capability card in the browser, the same check
+ * `treeship verify-capability` runs (shared Rust logic via
+ * `treeship_core::capability`). Pass the card envelope and the action
+ * envelopes to cross-check; `trustRoots` is required for `key_bound` to be
+ * true (otherwise the card is reported self-asserted).
+ *
+ * Honest contract: this is consistency over the actions you provide, not a
+ * completeness guarantee. It cannot prove the agent took no off-card action.
+ */
+export async function verifyCapability(card, actions, trustRoots) {
+    const cardJson = await normalizeToJson(card);
+    const actionJsons = await Promise.all((actions ?? []).map(normalizeToJson));
+    // Each normalized action is a JSON object; assemble them into a JSON array.
+    const actionsJson = `[${actionJsons.join(',')}]`;
+    const wasm = await loadWasm();
+    return JSON.parse(wasm.verify_capability(cardJson, actionsJson, serializeTrustRoots(trustRoots)));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeship/verify",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Zero-dependency cryptographic verification for Treeship receipts and certificates. Runs anywhere WASM runs: Node, browser, Vercel Edge, Cloudflare Workers, AWS Lambda.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,7 +40,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@treeship/core-wasm": "0.12.0"
+    "@treeship/core-wasm": "0.13.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",