agentverify 1.3.0 → 1.6.0

package/dist/sdk.d.ts

@@ -2,6 +2,27 @@ interface ScanInput {
     content: string;
     fileName?: string;
     platform?: string;
+    /** One of the built-in policy profile ids (e.g. "financial-agent") — evaluated server-side against this scan's evidence, in addition to (never instead of) the scanner's own verdict. */
+    policyId?: string;
+}
+interface ArtifactFingerprint {
+    artifactHash: string;
+    artifactHashAlgorithm: string;
+    artifactFingerprintVersion: string;
+}
+interface ReportIntegrity {
+    reportHash: string;
+    algorithm: string;
+    schemaVersion: string;
+    scannerVersion: string;
+    scanId: string;
+    timestamp: string;
+}
+interface SignedAttestation {
+    payload: Record<string, unknown>;
+    signature: string;
+    algorithm: string;
+    publicKey: Record<string, unknown>;
 }
 type Verdict = 'VERIFIED' | 'NOT_VERIFIED' | 'NOT_ASSESSED';
 type RiskLevel = 'Low Risk' | 'Moderate Risk' | 'High Risk';
@@ -31,6 +52,8 @@ interface Finding {
     recommendedFix: string;
     fixCode?: string;
     quickFix?: string;
+    /** Set by the API when this finding has a fix your plan does not include (Pro). */
+    fixLocked?: boolean;
     compliance?: {
         owasp?: string[];
         nist?: string[];
@@ -103,6 +126,11 @@ interface ScanResult {
     };
     saved: boolean;
     reportUrl?: string | null;
+    artifactFingerprint?: ArtifactFingerprint;
+    reportIntegrity?: ReportIntegrity;
+    policyProfile?: string | null;
+    policyResult?: string | null;
+    attestation?: SignedAttestation | null;
 }
 interface ScanOptions {
     apiKey: string;

package/dist/sdk.js

@@ -73,7 +73,12 @@ function normalizeScanResult(data) {
       scanDuration: 0
     },
     saved: data.saved === true,
-    reportUrl: data.reportUrl ?? null
+    reportUrl: data.reportUrl ?? null,
+    artifactFingerprint: data.artifactFingerprint,
+    reportIntegrity: data.reportIntegrity,
+    policyProfile: data.policyProfile ?? null,
+    policyResult: data.policyResult ?? null,
+    attestation: data.attestation ?? null
   };
 }
 async function scan(input, options) {
@@ -99,7 +104,8 @@ async function scan(input, options) {
       body: JSON.stringify({
         content: input.content,
         fileName: input.fileName ?? "agent",
-        platform: input.platform
+        platform: input.platform,
+        policyId: input.policyId
       }),
       signal: controller.signal
     });

package/dist/sdk.mjs

@@ -1,7 +1,7 @@
 import {
   scan,
   scanMany
-} from "./chunk-PY3NS2YH.mjs";
+} from "./chunk-XVA2M2HS.mjs";
 export {
   scan,
   scanMany

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "agentverify",
-  "version": "1.3.0",
+  "version": "1.6.0",
   "description": "CLI and SDK for Agent Verify — execution trust analysis for AI agents",
   "bin": {
-    "agentverify": "./dist/cli.js"
+    "agentverify": "dist/cli.js"
   },
   "main": "./dist/sdk.js",
   "module": "./dist/sdk.mjs",
@@ -16,11 +16,11 @@
     },
     "./cli": "./dist/cli.js"
   },
-  "files": ["dist", "README.md", "LICENSE"],
+  "files": ["dist", "README.md", "LICENSE", "CHANGELOG.md"],
   "scripts": {
     "build": "tsup src/cli.ts src/sdk.ts --format cjs,esm --dts --clean",
     "dev": "tsup src/cli.ts src/sdk.ts --format cjs,esm --dts --watch",
-    "test": "npm run build && node test/cli.test.mjs",
+    "test": "npm run build && node test/cli.test.mjs && node --test test/profile.test.mjs",
     "prepublishOnly": "npm run build"
   },
   "engines": { "node": ">=18.0.0" },