@treeship/verify 0.31.11 → 0.31.12

package/dist/index.d.ts

@@ -14,6 +14,8 @@ export interface TrustRootInput {
      * not offered here. See TrustRootKind in packages/core/src/trust/mod.rs.
      */
     kind: 'hub_checkpoint' | 'hub_org' | 'cert_issuer' | 'revoker' | 'agent_cert' | 'session_host';
+    /** For `agent_cert`: the agent URI this key is pinned as. A card is key-bound only to that agent. */
+    agent?: string;
     label?: string;
     added_at?: string;
 }
@@ -177,8 +179,10 @@ export interface ResolutionBundleInput {
 export interface ResolutionVerdict {
     /** Card signature verified against your roots (directly or via the chain). */
     sig_ok: boolean;
-    /** Card is key-bound: signer pinned under AgentCert, or chain-certified. */
+    /** Card is key-bound: signer pinned under AgentCert as the card's agent, or chain-certified. */
     key_bound: boolean;
+    /** Why not key-bound: `key_not_verified` | `not_pinned` | `pin_unscoped` | `pin_scoped_to_other`; null when bound. */
+    key_bound_reason?: string | null;
     /** If verified via the certificate chain, the cert artifact that vouched. */
     chain_cert_id: string | null;
     /** An authorized, verifying revocation was found. */
@@ -220,6 +224,8 @@ export interface PresentationVerdict {
     /** Card signature verified against your roots (directly or via the chain). */
     sig_ok: boolean;
     key_bound: boolean;
+    /** Why not key-bound: `key_not_verified` | `not_pinned` | `pin_unscoped` | `pin_scoped_to_other`; null when bound. */
+    key_bound_reason?: string | null;
     via_chain: boolean;
     revoked: string | null;
     challenge: PresentationChallenge;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeship/verify",
-  "version": "0.31.11",
+  "version": "0.31.12",
   "description": "Zero-dependency cryptographic verification for Treeship receipts and certificates. Runs anywhere WASM runs: Node, browser, Vercel Edge, Cloudflare Workers, AWS Lambda.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,11 +40,11 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@treeship/core-wasm": "0.31.11"
+    "@treeship/core-wasm": "0.31.12"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.11"
   }
 }