@trylimbo/sdk-verifier 0.2.8 → 0.2.9

package/gen/ffi/index.d.ts

@@ -1889,14 +1889,15 @@ export declare const RecoveryIssue: Readonly<{
   defaults: () => Partial<RecoveryIssue>;
 }>;
 /**
- * Registry recovery outcome, including the strongest successfully validated candidate and every
+ * Registry recovery outcome, including an unambiguous candidate, when one exists, and every
  * non-fatal issue encountered on the way.
  */
 export type RecoverySummary = {
   status: RecoveryStatus;
   /**
-   * Index into [`AssetVerification::credentials`]. Ranking is strongest-first, so this is the
-   * C2PA golden-flow candidate rather than an implicit positional convention.
+   * Index into [`AssetVerification::credentials`]. Present only when recovery produced one
+   * candidate, or a golden comparison found the embedded active manifest exactly. Multiple
+   * soft-binding matches otherwise remain a list without an SDK-selected verdict.
    */
   bestCredentialIndex?: number;
   issues: Array<RecoveryIssue>;
@@ -2148,9 +2149,9 @@ export declare const AssetVerification: Readonly<{
  */
 export declare enum RecoveryPolicy {
   /**
-   * Only when the asset carries no manifest of its own, the stripped or never-embedded copy
-   * whose credential lives only in the registry. An asset that is still signed costs no round
-   * trip, which is why this is the default.
+   * When the asset has no embedded manifest or its active manifest is invalid. This includes
+   * stripped assets and invalid manifests, for which C2PA 2.4 permits soft-binding discovery.
+   * A valid embedded manifest costs no registry round trip, which is why this is the default.
    */
   WhenMissing = 0,
   /**

package/gen/ffi/index.js

@@ -4887,9 +4887,9 @@ const FfiConverterTypeAssetVerification = (() => {
 */
 let RecoveryPolicy = /* @__PURE__ */ function(RecoveryPolicy) {
 	/**
-	* Only when the asset carries no manifest of its own, the stripped or never-embedded copy
-	* whose credential lives only in the registry. An asset that is still signed costs no round
-	* trip, which is why this is the default.
+	* When the asset has no embedded manifest or its active manifest is invalid. This includes
+	* stripped assets and invalid manifests, for which C2PA 2.4 permits soft-binding discovery.
+	* A valid embedded manifest costs no registry round trip, which is why this is the default.
 	*/
 	RecoveryPolicy[RecoveryPolicy["WhenMissing"] = 0] = "WhenMissing";
 	/**

package/package.json

@@ -1,12 +1,12 @@
 {
   "optionalDependencies": {
-    "@trylimbo/sdk-verifier-linux-arm64-gnu": "0.2.8",
-    "@trylimbo/sdk-verifier-linux-x64-gnu": "0.2.8",
+    "@trylimbo/sdk-verifier-linux-arm64-gnu": "0.2.9",
+    "@trylimbo/sdk-verifier-linux-x64-gnu": "0.2.9",
     "@ubjs/node-linux-arm64-gnu": "0.31.0-5",
     "@ubjs/node-linux-x64-gnu": "0.31.0-5"
   },
   "name": "@trylimbo/sdk-verifier",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",