rootcard 0.0.0-stage → 0.0.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog: rootcard (npm)
+
+All notable changes to this package are recorded here.
+
+## Unreleased
+
+- Repository skeleton (phase 0).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hexagon and the rootcard contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,6 @@
-# Temporary Holding Version
+# rootcard (npm)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Core library of [rootcard](https://github.com/Hexagon/rootcard) in plain ES modules: a portable, self-certifying identity for
+online logins. Zero dependencies, no build step, runs in browsers and Node (WebCrypto).
+
+Status: skeleton. See the repository's `docs/PLAN.md`.

package/package.json

@@ -1,6 +1,21 @@
 {
   "name": "rootcard",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.0.0",
+  "description": "A portable, self-certifying identity for online logins (core library, zero dependencies, WebCrypto)",
+  "keywords": ["identity", "authentication", "login", "ed25519", "webcrypto", "self-certifying"],
+  "license": "MIT",
+  "homepage": "https://github.com/Hexagon/rootcard",
+  "repository": { "type": "git", "url": "git+https://github.com/Hexagon/rootcard.git", "directory": "packages/rootcard" },
+  "bugs": "https://github.com/Hexagon/rootcard/issues",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.js",
+    "./package.json": "./package.json"
+  },
+  "files": ["src/", "README.md", "CHANGELOG.md", "LICENSE"],
+  "sideEffects": false,
+  "engines": { "node": ">=20" },
+  "scripts": {
+    "test": "node --test"
+  }
+}

package/src/index.js

@@ -0,0 +1,22 @@
+// rootcard: a portable, self-certifying identity for online logins.
+//
+// This package mirrors the `rootcard` Rust crate byte for byte. The normative format is spec/SPEC.md in the repository,
+// and spec/vectors/ holds the shared test vectors both implementations must reproduce.
+//
+// Status: skeleton (phase 0). Nothing here is stable.
+
+/** Version of the wire and storage format described by the specification. */
+export const FORMAT_VERSION = 1;
+
+/** Prefix of every domain-separation label (`rootcard/<purpose>/v<n>`). */
+export const LABEL_PREFIX = "rootcard/";
+
+/**
+ * Build a domain-separation label, e.g. `label("id", 1) === "rootcard/id/v1"`.
+ * @param {string} purpose
+ * @param {number} version
+ * @returns {string}
+ */
+export function label(purpose, version) {
+  return `${LABEL_PREFIX}${purpose}/v${version}`;
+}