agentverify 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AI Blockchain Ventures LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,86 @@
+# agentverify
+
+**Execution trust analysis for AI agents — CLI and SDK**
+
+Scan AI agent configurations for security issues, credential exposure, and governance gaps. Results save automatically to your Agent Verify dashboard.
+
+## Install
+
+```bash
+npm install -g agentverify
+```
+
+## CLI Usage
+
+### Scan a directory
+
+```bash
+agentverify scan ./agents --key av_your_key
+```
+
+### Scan a single file
+
+```bash
+agentverify scan --file agent.json --key av_your_key
+```
+
+### Use environment variable
+
+```bash
+export AGENTVERIFY_API_KEY=av_your_key
+agentverify scan ./agents
+```
+
+### JSON output (for CI/CD)
+
+```bash
+agentverify scan . --key av_your_key --json
+```
+
+## SDK Usage
+
+```ts
+import { scan, scanMany } from 'agentverify'
+```
+
+### Scan a single file
+
+```ts
+const result = await scan(
+  { content: agentCode, fileName: 'agent.js' },
+  { apiKey: process.env.AGENTVERIFY_API_KEY }
+)
+
+console.log(result.verdict)    // 'VERIFIED' | 'NOT VERIFIED'
+console.log(result.riskScore)  // 0-100
+console.log(result.findings)   // Array of security findings
+```
+
+### Scan multiple files
+
+```ts
+const results = await scanMany(
+  [
+    { content: agent1Code, fileName: 'agent1.js' },
+    { content: agent2Code, fileName: 'agent2.js' },
+  ],
+  { apiKey: process.env.AGENTVERIFY_API_KEY }
+)
+```
+
+## CI/CD Integration
+
+### GitHub Actions
+
+```yaml
+- name: Scan agents
+  run: npx agentverify scan ./agents --key ${{ secrets.AGENTVERIFY_API_KEY }} --json
+```
+
+## Get your API key
+
+Sign up at https://agentverify.ai and go to Dashboard → API
+
+## License
+
+MIT — AI Blockchain Ventures LLC

package/dist/chunk-JWWQ7MRK.mjs

@@ -0,0 +1,75 @@
+// src/sdk.ts
+var DEFAULT_API_URL = "https://agentverify-api.agentverify.workers.dev/v1/scan";
+var DEFAULT_TIMEOUT = 3e4;
+async function scan(input, options) {
+  const { apiKey, apiUrl = DEFAULT_API_URL, timeout = DEFAULT_TIMEOUT } = options;
+  if (!apiKey) {
+    throw new Error(
+      "API key required. Generate one at https://agentverify.ai/dashboard"
+    );
+  }
+  if (!input.content || input.content.trim().length === 0) {
+    throw new Error("content is required and cannot be empty");
+  }
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeout);
+  try {
+    const response = await fetch(apiUrl, {
+      method: "POST",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+        "User-Agent": "agentverify-sdk/1.0.0"
+      },
+      body: JSON.stringify({
+        content: input.content,
+        fileName: input.fileName ?? "agent",
+        platform: input.platform
+      }),
+      signal: controller.signal
+    });
+    if (response.status === 401) {
+      throw new Error(
+        "Invalid API key. Generate one at https://agentverify.ai/dashboard"
+      );
+    }
+    if (response.status === 400) {
+      const err = await response.json().catch(() => ({}));
+      throw new Error(err.error ?? "Invalid request");
+    }
+    if (!response.ok) {
+      throw new Error(`API error: ${response.status} ${response.statusText}`);
+    }
+    const data = await response.json();
+    return data;
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new Error(`Request timed out after ${timeout}ms`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function scanMany(inputs, options, concurrency = 3) {
+  const results = [];
+  for (let i = 0; i < inputs.length; i += concurrency) {
+    const batch = inputs.slice(i, i + concurrency);
+    const batchResults = await Promise.allSettled(
+      batch.map((input) => scan(input, options))
+    );
+    batchResults.forEach((res, j) => {
+      if (res.status === "fulfilled") {
+        results.push({ input: batch[j], result: res.value, error: null });
+      } else {
+        results.push({ input: batch[j], result: null, error: res.reason instanceof Error ? res.reason.message : String(res.reason) });
+      }
+    });
+  }
+  return results;
+}
+
+export {
+  scan,
+  scanMany
+};

package/dist/cli.d.mts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/cli.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/cli.js

@@ -0,0 +1,284 @@
+#!/usr/bin/env node
+"use strict";
+
+// src/cli.ts
+var import_fs = require("fs");
+var import_path = require("path");
+
+// src/sdk.ts
+var DEFAULT_API_URL = "https://agentverify-api.agentverify.workers.dev/v1/scan";
+var DEFAULT_TIMEOUT = 3e4;
+async function scan(input, options) {
+  const { apiKey, apiUrl = DEFAULT_API_URL, timeout = DEFAULT_TIMEOUT } = options;
+  if (!apiKey) {
+    throw new Error(
+      "API key required. Generate one at https://agentverify.ai/dashboard"
+    );
+  }
+  if (!input.content || input.content.trim().length === 0) {
+    throw new Error("content is required and cannot be empty");
+  }
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeout);
+  try {
+    const response = await fetch(apiUrl, {
+      method: "POST",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+        "User-Agent": "agentverify-sdk/1.0.0"
+      },
+      body: JSON.stringify({
+        content: input.content,
+        fileName: input.fileName ?? "agent",
+        platform: input.platform
+      }),
+      signal: controller.signal
+    });
+    if (response.status === 401) {
+      throw new Error(
+        "Invalid API key. Generate one at https://agentverify.ai/dashboard"
+      );
+    }
+    if (response.status === 400) {
+      const err = await response.json().catch(() => ({}));
+      throw new Error(err.error ?? "Invalid request");
+    }
+    if (!response.ok) {
+      throw new Error(`API error: ${response.status} ${response.statusText}`);
+    }
+    const data = await response.json();
+    return data;
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new Error(`Request timed out after ${timeout}ms`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/cli.ts
+var VERSION = "1.0.0";
+var API_URL = "https://agentverify-api.agentverify.workers.dev/v1/scan";
+var c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  red: "\x1B[31m",
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  cyan: "\x1B[36m",
+  white: "\x1B[37m",
+  gray: "\x1B[90m"
+};
+var SUPPORTED_EXTENSIONS = /* @__PURE__ */ new Set([".js", ".ts", ".py", ".json", ".yaml", ".yml", ".md", ".mjs", ".cjs"]);
+var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", ".next", "vendor", "coverage", ".cache"]);
+function collectFiles(dir) {
+  const files = [];
+  try {
+    const entries = (0, import_fs.readdirSync)(dir);
+    for (const entry of entries) {
+      if (SKIP_DIRS.has(entry)) continue;
+      const fullPath = (0, import_path.join)(dir, entry);
+      const stat = (0, import_fs.statSync)(fullPath);
+      if (stat.isDirectory()) {
+        files.push(...collectFiles(fullPath));
+      } else if (SUPPORTED_EXTENSIONS.has((0, import_path.extname)(entry).toLowerCase())) {
+        files.push(fullPath);
+      }
+    }
+  } catch {
+  }
+  return files;
+}
+function parseArgs(argv) {
+  const args = argv.slice(2);
+  const result = {
+    command: args[0] ?? "",
+    dir: ".",
+    key: "",
+    file: "",
+    json: false,
+    help: false,
+    version: false
+  };
+  if (result.command === "--help" || result.command === "-h") {
+    result.command = "";
+    result.help = true;
+  }
+  if (result.command === "--version" || result.command === "-v") {
+    result.command = "";
+    result.version = true;
+  }
+  for (let i = 1; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--key" || arg === "-k") result.key = args[++i] ?? "";
+    else if (arg === "--file" || arg === "-f") result.file = args[++i] ?? "";
+    else if (arg === "--json") result.json = true;
+    else if (arg === "--help" || arg === "-h") result.help = true;
+    else if (arg === "--version" || arg === "-v") result.version = true;
+    else if (!arg.startsWith("-")) result.dir = arg;
+  }
+  if (!result.key) result.key = process.env.AGENTVERIFY_API_KEY ?? "";
+  return result;
+}
+function printHelp() {
+  console.log(`
+${c.bold}${c.cyan}Agent Verify${c.reset} ${c.gray}v${VERSION}${c.reset}
+${c.gray}Execution trust analysis for AI agents${c.reset}
+
+${c.bold}Usage:${c.reset}
+  agentverify scan [dir] --key <api-key>
+  agentverify scan --file <file> --key <api-key>
+
+${c.bold}Commands:${c.reset}
+  scan          Scan agent files in a directory or a single file
+
+${c.bold}Options:${c.reset}
+  --key, -k     API key (or set AGENTVERIFY_API_KEY env var)
+  --file, -f    Scan a single file instead of a directory
+  --json        Output results as JSON
+  --version, -v Print version
+  --help, -h    Show this help message
+
+${c.bold}Examples:${c.reset}
+  ${c.gray}# Scan all agent files in current directory${c.reset}
+  agentverify scan . --key av_your_key
+
+  ${c.gray}# Scan a specific file${c.reset}
+  agentverify scan --file agent.json --key av_your_key
+
+  ${c.gray}# Use environment variable for key${c.reset}
+  AGENTVERIFY_API_KEY=av_your_key agentverify scan ./agents
+
+  ${c.gray}# Output as JSON (useful for CI/CD)${c.reset}
+  agentverify scan . --key av_your_key --json
+
+${c.bold}Get your API key:${c.reset}
+  https://agentverify.ai/dashboard
+
+${c.bold}Docs:${c.reset}
+  https://github.com/AI-Blockchain-Ventures/agentverify
+`);
+}
+function printVerdict(result, fileName) {
+  const verified = result.verdict === "VERIFIED";
+  const icon = verified ? `${c.green}\u2713${c.reset}` : `${c.red}\u2717${c.reset}`;
+  const verdict = verified ? `${c.green}VERIFIED${c.reset}    ` : `${c.red}NOT VERIFIED${c.reset}`;
+  const score = verified ? `${c.green}${result.riskScore}/100${c.reset}` : result.riskScore >= 50 ? `${c.yellow}${result.riskScore}/100${c.reset}` : `${c.red}${result.riskScore}/100${c.reset}`;
+  const findings = result.findings.length > 0 ? `${c.gray}\u2014 ${result.findings.length} finding${result.findings.length === 1 ? "" : "s"}${c.reset}` : "";
+  const name = fileName.padEnd(30);
+  console.log(`  ${icon} ${verdict}  ${name}  score: ${score}  ${findings}`);
+  if (result.saved && result.reportId) {
+    console.log(`    ${c.gray}\u2192 Report: https://agentverify.ai/report/${result.reportId}${c.reset}`);
+  }
+}
+async function runScan(args) {
+  if (!args.key) {
+    console.error(`
+${c.red}Error:${c.reset} API key required
+`);
+    console.error(`  Set with --key av_your_key or AGENTVERIFY_API_KEY env var`);
+    console.error(`  Get your key at https://agentverify.ai/dashboard
+`);
+    process.exit(1);
+  }
+  let files = [];
+  if (args.file) {
+    files = [args.file];
+  } else {
+    const dir = args.dir;
+    console.log(`
+${c.bold}Agent Verify${c.reset} ${c.gray}v${VERSION}${c.reset}`);
+    console.log(`${c.gray}Scanning ${dir}...${c.reset}
+`);
+    files = collectFiles(dir);
+    if (files.length === 0) {
+      console.log(`${c.yellow}No agent files found in ${dir}${c.reset}`);
+      console.log(`${c.gray}Supported: .js .ts .py .json .yaml .yml .md${c.reset}
+`);
+      process.exit(0);
+    }
+  }
+  const jsonResults = [];
+  let verified = 0;
+  let notVerified = 0;
+  let errors = 0;
+  const CONCURRENCY = 3;
+  for (let i = 0; i < files.length; i += CONCURRENCY) {
+    const batch = files.slice(i, i + CONCURRENCY);
+    const batchResults = await Promise.allSettled(
+      batch.map(async (filePath) => {
+        const content = (0, import_fs.readFileSync)(filePath, "utf-8");
+        const relPath = (0, import_path.relative)(args.dir === "." ? process.cwd() : args.dir, filePath);
+        const result = await scan(
+          { content, fileName: relPath },
+          { apiKey: args.key, apiUrl: API_URL }
+        );
+        return { filePath, relPath, result };
+      })
+    );
+    for (let j = 0; j < batchResults.length; j++) {
+      const outcome = batchResults[j];
+      if (outcome.status === "fulfilled") {
+        const { relPath, result } = outcome.value;
+        if (!args.json) printVerdict(result, relPath);
+        jsonResults.push({ file: relPath, result, error: null });
+        if (result.verdict === "VERIFIED") verified++;
+        else notVerified++;
+      } else {
+        const filePath = batch[j];
+        const relPath = (0, import_path.relative)(args.dir, filePath);
+        const errMsg = outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason);
+        if (!args.json) {
+          console.log(`  ${c.yellow}\u26A0${c.reset}  ${c.yellow}WARNING${c.reset}      ${relPath.padEnd(30)}  ${c.gray}${errMsg}${c.reset}`);
+        }
+        jsonResults.push({ file: relPath, result: null, error: errMsg });
+        errors++;
+      }
+    }
+  }
+  if (args.json) {
+    console.log(JSON.stringify({ results: jsonResults, summary: { total: files.length, verified, notVerified, errors } }, null, 2));
+    return;
+  }
+  console.log(`
+${c.gray}${"\u2500".repeat(60)}${c.reset}`);
+  console.log(`${c.bold}Agent Verify Scan Complete${c.reset}`);
+  console.log(`${c.gray}Files scanned:${c.reset}   ${files.length}`);
+  console.log(`${c.green}Verified:${c.reset}        ${verified}`);
+  if (notVerified > 0) console.log(`${c.red}Not Verified:${c.reset}    ${notVerified}`);
+  if (errors > 0) console.log(`${c.yellow}Errors:${c.reset}          ${errors}`);
+  console.log(`${c.gray}${"\u2500".repeat(60)}${c.reset}`);
+  console.log(`
+${c.gray}View reports: https://agentverify.ai/dashboard${c.reset}
+`);
+  if (notVerified > 0) process.exit(1);
+}
+async function main() {
+  const args = parseArgs(process.argv);
+  if (args.version) {
+    console.log(`agentverify v${VERSION}`);
+    process.exit(0);
+  }
+  if (args.help || !args.command) {
+    printHelp();
+    process.exit(0);
+  }
+  if (args.command === "scan") {
+    await runScan(args);
+  } else {
+    console.error(`
+${c.red}Unknown command: ${args.command}${c.reset}`);
+    console.error(`Run ${c.cyan}agentverify --help${c.reset} for usage
+`);
+    process.exit(1);
+  }
+}
+main().catch((err) => {
+  console.error(`
+${c.red}Fatal error:${c.reset}`, err instanceof Error ? err.message : err);
+  process.exit(1);
+});

package/dist/cli.mjs

@@ -0,0 +1,230 @@
+#!/usr/bin/env node
+import {
+  scan
+} from "./chunk-JWWQ7MRK.mjs";
+
+// src/cli.ts
+import { readFileSync, readdirSync, statSync } from "fs";
+import { join, relative, extname } from "path";
+var VERSION = "1.0.0";
+var API_URL = "https://agentverify-api.agentverify.workers.dev/v1/scan";
+var c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  red: "\x1B[31m",
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  cyan: "\x1B[36m",
+  white: "\x1B[37m",
+  gray: "\x1B[90m"
+};
+var SUPPORTED_EXTENSIONS = /* @__PURE__ */ new Set([".js", ".ts", ".py", ".json", ".yaml", ".yml", ".md", ".mjs", ".cjs"]);
+var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", ".next", "vendor", "coverage", ".cache"]);
+function collectFiles(dir) {
+  const files = [];
+  try {
+    const entries = readdirSync(dir);
+    for (const entry of entries) {
+      if (SKIP_DIRS.has(entry)) continue;
+      const fullPath = join(dir, entry);
+      const stat = statSync(fullPath);
+      if (stat.isDirectory()) {
+        files.push(...collectFiles(fullPath));
+      } else if (SUPPORTED_EXTENSIONS.has(extname(entry).toLowerCase())) {
+        files.push(fullPath);
+      }
+    }
+  } catch {
+  }
+  return files;
+}
+function parseArgs(argv) {
+  const args = argv.slice(2);
+  const result = {
+    command: args[0] ?? "",
+    dir: ".",
+    key: "",
+    file: "",
+    json: false,
+    help: false,
+    version: false
+  };
+  if (result.command === "--help" || result.command === "-h") {
+    result.command = "";
+    result.help = true;
+  }
+  if (result.command === "--version" || result.command === "-v") {
+    result.command = "";
+    result.version = true;
+  }
+  for (let i = 1; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--key" || arg === "-k") result.key = args[++i] ?? "";
+    else if (arg === "--file" || arg === "-f") result.file = args[++i] ?? "";
+    else if (arg === "--json") result.json = true;
+    else if (arg === "--help" || arg === "-h") result.help = true;
+    else if (arg === "--version" || arg === "-v") result.version = true;
+    else if (!arg.startsWith("-")) result.dir = arg;
+  }
+  if (!result.key) result.key = process.env.AGENTVERIFY_API_KEY ?? "";
+  return result;
+}
+function printHelp() {
+  console.log(`
+${c.bold}${c.cyan}Agent Verify${c.reset} ${c.gray}v${VERSION}${c.reset}
+${c.gray}Execution trust analysis for AI agents${c.reset}
+
+${c.bold}Usage:${c.reset}
+  agentverify scan [dir] --key <api-key>
+  agentverify scan --file <file> --key <api-key>
+
+${c.bold}Commands:${c.reset}
+  scan          Scan agent files in a directory or a single file
+
+${c.bold}Options:${c.reset}
+  --key, -k     API key (or set AGENTVERIFY_API_KEY env var)
+  --file, -f    Scan a single file instead of a directory
+  --json        Output results as JSON
+  --version, -v Print version
+  --help, -h    Show this help message
+
+${c.bold}Examples:${c.reset}
+  ${c.gray}# Scan all agent files in current directory${c.reset}
+  agentverify scan . --key av_your_key
+
+  ${c.gray}# Scan a specific file${c.reset}
+  agentverify scan --file agent.json --key av_your_key
+
+  ${c.gray}# Use environment variable for key${c.reset}
+  AGENTVERIFY_API_KEY=av_your_key agentverify scan ./agents
+
+  ${c.gray}# Output as JSON (useful for CI/CD)${c.reset}
+  agentverify scan . --key av_your_key --json
+
+${c.bold}Get your API key:${c.reset}
+  https://agentverify.ai/dashboard
+
+${c.bold}Docs:${c.reset}
+  https://github.com/AI-Blockchain-Ventures/agentverify
+`);
+}
+function printVerdict(result, fileName) {
+  const verified = result.verdict === "VERIFIED";
+  const icon = verified ? `${c.green}\u2713${c.reset}` : `${c.red}\u2717${c.reset}`;
+  const verdict = verified ? `${c.green}VERIFIED${c.reset}    ` : `${c.red}NOT VERIFIED${c.reset}`;
+  const score = verified ? `${c.green}${result.riskScore}/100${c.reset}` : result.riskScore >= 50 ? `${c.yellow}${result.riskScore}/100${c.reset}` : `${c.red}${result.riskScore}/100${c.reset}`;
+  const findings = result.findings.length > 0 ? `${c.gray}\u2014 ${result.findings.length} finding${result.findings.length === 1 ? "" : "s"}${c.reset}` : "";
+  const name = fileName.padEnd(30);
+  console.log(`  ${icon} ${verdict}  ${name}  score: ${score}  ${findings}`);
+  if (result.saved && result.reportId) {
+    console.log(`    ${c.gray}\u2192 Report: https://agentverify.ai/report/${result.reportId}${c.reset}`);
+  }
+}
+async function runScan(args) {
+  if (!args.key) {
+    console.error(`
+${c.red}Error:${c.reset} API key required
+`);
+    console.error(`  Set with --key av_your_key or AGENTVERIFY_API_KEY env var`);
+    console.error(`  Get your key at https://agentverify.ai/dashboard
+`);
+    process.exit(1);
+  }
+  let files = [];
+  if (args.file) {
+    files = [args.file];
+  } else {
+    const dir = args.dir;
+    console.log(`
+${c.bold}Agent Verify${c.reset} ${c.gray}v${VERSION}${c.reset}`);
+    console.log(`${c.gray}Scanning ${dir}...${c.reset}
+`);
+    files = collectFiles(dir);
+    if (files.length === 0) {
+      console.log(`${c.yellow}No agent files found in ${dir}${c.reset}`);
+      console.log(`${c.gray}Supported: .js .ts .py .json .yaml .yml .md${c.reset}
+`);
+      process.exit(0);
+    }
+  }
+  const jsonResults = [];
+  let verified = 0;
+  let notVerified = 0;
+  let errors = 0;
+  const CONCURRENCY = 3;
+  for (let i = 0; i < files.length; i += CONCURRENCY) {
+    const batch = files.slice(i, i + CONCURRENCY);
+    const batchResults = await Promise.allSettled(
+      batch.map(async (filePath) => {
+        const content = readFileSync(filePath, "utf-8");
+        const relPath = relative(args.dir === "." ? process.cwd() : args.dir, filePath);
+        const result = await scan(
+          { content, fileName: relPath },
+          { apiKey: args.key, apiUrl: API_URL }
+        );
+        return { filePath, relPath, result };
+      })
+    );
+    for (let j = 0; j < batchResults.length; j++) {
+      const outcome = batchResults[j];
+      if (outcome.status === "fulfilled") {
+        const { relPath, result } = outcome.value;
+        if (!args.json) printVerdict(result, relPath);
+        jsonResults.push({ file: relPath, result, error: null });
+        if (result.verdict === "VERIFIED") verified++;
+        else notVerified++;
+      } else {
+        const filePath = batch[j];
+        const relPath = relative(args.dir, filePath);
+        const errMsg = outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason);
+        if (!args.json) {
+          console.log(`  ${c.yellow}\u26A0${c.reset}  ${c.yellow}WARNING${c.reset}      ${relPath.padEnd(30)}  ${c.gray}${errMsg}${c.reset}`);
+        }
+        jsonResults.push({ file: relPath, result: null, error: errMsg });
+        errors++;
+      }
+    }
+  }
+  if (args.json) {
+    console.log(JSON.stringify({ results: jsonResults, summary: { total: files.length, verified, notVerified, errors } }, null, 2));
+    return;
+  }
+  console.log(`
+${c.gray}${"\u2500".repeat(60)}${c.reset}`);
+  console.log(`${c.bold}Agent Verify Scan Complete${c.reset}`);
+  console.log(`${c.gray}Files scanned:${c.reset}   ${files.length}`);
+  console.log(`${c.green}Verified:${c.reset}        ${verified}`);
+  if (notVerified > 0) console.log(`${c.red}Not Verified:${c.reset}    ${notVerified}`);
+  if (errors > 0) console.log(`${c.yellow}Errors:${c.reset}          ${errors}`);
+  console.log(`${c.gray}${"\u2500".repeat(60)}${c.reset}`);
+  console.log(`
+${c.gray}View reports: https://agentverify.ai/dashboard${c.reset}
+`);
+  if (notVerified > 0) process.exit(1);
+}
+async function main() {
+  const args = parseArgs(process.argv);
+  if (args.version) {
+    console.log(`agentverify v${VERSION}`);
+    process.exit(0);
+  }
+  if (args.help || !args.command) {
+    printHelp();
+    process.exit(0);
+  }
+  if (args.command === "scan") {
+    await runScan(args);
+  } else {
+    console.error(`
+${c.red}Unknown command: ${args.command}${c.reset}`);
+    console.error(`Run ${c.cyan}agentverify --help${c.reset} for usage
+`);
+    process.exit(1);
+  }
+}
+main().catch((err) => {
+  console.error(`
+${c.red}Fatal error:${c.reset}`, err instanceof Error ? err.message : err);
+  process.exit(1);
+});

package/dist/sdk.d.mts

@@ -0,0 +1,61 @@
+interface ScanInput {
+    content: string;
+    fileName?: string;
+    platform?: string;
+}
+interface Finding {
+    title: string;
+    category: 'A' | 'B';
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    whatIsWrong: string;
+    whyItMatters: string;
+    recommendedFix: string;
+    evidence?: string;
+}
+interface ScanResult {
+    verdict: 'VERIFIED' | 'NOT VERIFIED';
+    riskScore: number;
+    riskLevel: 'Low Risk' | 'Moderate Risk' | 'High Risk';
+    findings: Finding[];
+    reportId: string;
+    scannedAt: string;
+    saved: boolean;
+    reportUrl?: string;
+}
+interface ScanOptions {
+    apiKey: string;
+    apiUrl?: string;
+    timeout?: number;
+}
+
+/**
+ * Scan an agent configuration for execution trust issues.
+ *
+ * @example
+ * import { scan } from 'agentverify'
+ *
+ * const result = await scan(
+ *   { content: agentCode, fileName: 'agent.js' },
+ *   { apiKey: process.env.AGENTVERIFY_API_KEY }
+ * )
+ *
+ * console.log(result.verdict)    // 'VERIFIED' | 'NOT VERIFIED'
+ * console.log(result.riskScore)  // 0-100
+ * console.log(result.findings)   // Array of findings
+ */
+declare function scan(input: ScanInput, options: ScanOptions): Promise<ScanResult>;
+/**
+ * Scan multiple files concurrently.
+ *
+ * @example
+ * import { scanMany } from 'agentverify'
+ *
+ * const results = await scanMany(files, { apiKey: 'av_...' })
+ */
+declare function scanMany(inputs: ScanInput[], options: ScanOptions, concurrency?: number): Promise<Array<{
+    input: ScanInput;
+    result: ScanResult | null;
+    error: string | null;
+}>>;
+
+export { type Finding, type ScanInput, type ScanOptions, type ScanResult, scan, scanMany };

package/dist/sdk.d.ts

@@ -0,0 +1,61 @@
+interface ScanInput {
+    content: string;
+    fileName?: string;
+    platform?: string;
+}
+interface Finding {
+    title: string;
+    category: 'A' | 'B';
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    whatIsWrong: string;
+    whyItMatters: string;
+    recommendedFix: string;
+    evidence?: string;
+}
+interface ScanResult {
+    verdict: 'VERIFIED' | 'NOT VERIFIED';
+    riskScore: number;
+    riskLevel: 'Low Risk' | 'Moderate Risk' | 'High Risk';
+    findings: Finding[];
+    reportId: string;
+    scannedAt: string;
+    saved: boolean;
+    reportUrl?: string;
+}
+interface ScanOptions {
+    apiKey: string;
+    apiUrl?: string;
+    timeout?: number;
+}
+
+/**
+ * Scan an agent configuration for execution trust issues.
+ *
+ * @example
+ * import { scan } from 'agentverify'
+ *
+ * const result = await scan(
+ *   { content: agentCode, fileName: 'agent.js' },
+ *   { apiKey: process.env.AGENTVERIFY_API_KEY }
+ * )
+ *
+ * console.log(result.verdict)    // 'VERIFIED' | 'NOT VERIFIED'
+ * console.log(result.riskScore)  // 0-100
+ * console.log(result.findings)   // Array of findings
+ */
+declare function scan(input: ScanInput, options: ScanOptions): Promise<ScanResult>;
+/**
+ * Scan multiple files concurrently.
+ *
+ * @example
+ * import { scanMany } from 'agentverify'
+ *
+ * const results = await scanMany(files, { apiKey: 'av_...' })
+ */
+declare function scanMany(inputs: ScanInput[], options: ScanOptions, concurrency?: number): Promise<Array<{
+    input: ScanInput;
+    result: ScanResult | null;
+    error: string | null;
+}>>;
+
+export { type Finding, type ScanInput, type ScanOptions, type ScanResult, scan, scanMany };

package/dist/sdk.js

@@ -0,0 +1,100 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/sdk.ts
+var sdk_exports = {};
+__export(sdk_exports, {
+  scan: () => scan,
+  scanMany: () => scanMany
+});
+module.exports = __toCommonJS(sdk_exports);
+var DEFAULT_API_URL = "https://agentverify-api.agentverify.workers.dev/v1/scan";
+var DEFAULT_TIMEOUT = 3e4;
+async function scan(input, options) {
+  const { apiKey, apiUrl = DEFAULT_API_URL, timeout = DEFAULT_TIMEOUT } = options;
+  if (!apiKey) {
+    throw new Error(
+      "API key required. Generate one at https://agentverify.ai/dashboard"
+    );
+  }
+  if (!input.content || input.content.trim().length === 0) {
+    throw new Error("content is required and cannot be empty");
+  }
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeout);
+  try {
+    const response = await fetch(apiUrl, {
+      method: "POST",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+        "User-Agent": "agentverify-sdk/1.0.0"
+      },
+      body: JSON.stringify({
+        content: input.content,
+        fileName: input.fileName ?? "agent",
+        platform: input.platform
+      }),
+      signal: controller.signal
+    });
+    if (response.status === 401) {
+      throw new Error(
+        "Invalid API key. Generate one at https://agentverify.ai/dashboard"
+      );
+    }
+    if (response.status === 400) {
+      const err = await response.json().catch(() => ({}));
+      throw new Error(err.error ?? "Invalid request");
+    }
+    if (!response.ok) {
+      throw new Error(`API error: ${response.status} ${response.statusText}`);
+    }
+    const data = await response.json();
+    return data;
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new Error(`Request timed out after ${timeout}ms`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function scanMany(inputs, options, concurrency = 3) {
+  const results = [];
+  for (let i = 0; i < inputs.length; i += concurrency) {
+    const batch = inputs.slice(i, i + concurrency);
+    const batchResults = await Promise.allSettled(
+      batch.map((input) => scan(input, options))
+    );
+    batchResults.forEach((res, j) => {
+      if (res.status === "fulfilled") {
+        results.push({ input: batch[j], result: res.value, error: null });
+      } else {
+        results.push({ input: batch[j], result: null, error: res.reason instanceof Error ? res.reason.message : String(res.reason) });
+      }
+    });
+  }
+  return results;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  scan,
+  scanMany
+});

package/dist/sdk.mjs

@@ -0,0 +1,8 @@
+import {
+  scan,
+  scanMany
+} from "./chunk-JWWQ7MRK.mjs";
+export {
+  scan,
+  scanMany
+};

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "agentverify",
+  "version": "1.0.0",
+  "description": "CLI and SDK for Agent Verify — execution trust analysis for AI agents",
+  "bin": {
+    "agentverify": "./dist/cli.js"
+  },
+  "main": "./dist/sdk.js",
+  "module": "./dist/sdk.mjs",
+  "types": "./dist/sdk.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/sdk.d.ts",
+      "import": "./dist/sdk.mjs",
+      "require": "./dist/sdk.js"
+    },
+    "./cli": "./dist/cli.js"
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsup src/cli.ts src/sdk.ts --format cjs,esm --dts --clean",
+    "dev": "tsup src/cli.ts src/sdk.ts --format cjs,esm --dts --watch",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": { "node": ">=18.0.0" },
+  "keywords": [
+    "ai", "agents", "security", "verification", "a2spa",
+    "agent-security", "llm", "ai-safety", "cli"
+  ],
+  "author": "AI Blockchain Ventures LLC",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/AI-Blockchain-Ventures/agentverify"
+  },
+  "homepage": "https://agentverify.ai",
+  "devDependencies": {
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0",
+    "@types/node": "^20.0.0"
+  }
+}