{
  "name": "@pipobscure/bundle",
  "version": "0.2.2",
  "description": "Record what an application reads, archive it, sign it with sigstore, verify it, and mount it as a verifying node:vfs provider so only signed archives run.",
  "keywords": [
    "SEA",
    "VFS",
    "signing",
    "sigstore",
    "bundle",
    "zip",
    "provenance"
  ],
  "license": "EUPL-1.2",
  "author": "Philipp Dunkel <pip@pipobscure.com>",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/pipobscure/bundles.git"
  },
  "type": "module",
  "types": "./dist/index.d.ts",
  "main": "./dist/main.js",
  "bin": {
    "bundle": "bundle.nzip"
  },
  "exports": {
    ".": "./dist/index.js",
    "./cli": "./dist/cli.js",
    "./provider": "./dist/provider.js",
    "./register": "./dist/register.js",
    "./recorder": "./dist/recorder.js",
    "./record": "./dist/record.js",
    "./sea": "./dist/sea.js",
    "./launch": "./dist/launch.js",
    "./manifest": "./dist/manifest.js",
    "./integrity": "./dist/integrity.js",
    "./archive": "./dist/archive.js",
    "./skill": "./dist/skill.js",
    "./audit": "./dist/audit.js",
    "./files": "./dist/files.js",
    "./sigstore": "./dist/sigstore.js",
    "./attestation": "./dist/attestation.js",
    "./atproto": "./dist/atproto.js",
    "./policy": "./dist/policy.js",
    "./review": "./dist/review.js",
    "./install": "./dist/install.js",
    "./policy.schema.json": "./schemas/policy.schema.json",
    "./oidc": "./dist/oidc.js",
    "./oauth": "./dist/oauth.js",
    "./lexicon": "./dist/lexicon.js",
    "./listing": "./dist/listing.js",
    "./suite": "./dist/suite.js",
    "./plugins": "./dist/plugins.js",
    "./package.json": "./package.json"
  },
  "files": [
    "dist/",
    "src/",
    "skills/",
    "schemas/",
    "lexicons/",
    "icons/",
    "bundle.nzip",
    "shell-base",
    "README.md",
    "HISTORY.md"
  ],
  "engines": {
    "node": ">=26.11.1"
  },
  "scripts": {
    "build": "tsc && chmod +x dist/main.js",
    "typecheck": "tsc --noEmit -p tsconfig.test.json",
    "test": "npm run build && npm run typecheck && node --no-warnings --experimental-vfs --test test/*.test.ts",
    "manifest:cli": "node --no-warnings --experimental-vfs tools/manifest.ts",
    "pack:cli": "node --no-warnings dist/main.js create --base . --files build/cli.manifest --launcher --output build/cli.unsigned.nzip",
    "baseline:cli": "node --no-warnings --experimental-vfs tools/baseline.ts --allow-missing",
    "audit:cli": "node --no-warnings --experimental-vfs dist/main.js audit --baseline build/baseline.nzip --verdict build/cli.audit.json build/cli.unsigned.nzip",
    "approve:cli": "node --no-warnings --experimental-vfs dist/main.js audit --approve --baseline build/baseline.nzip --verdict build/cli.audit.json build/cli.unsigned.nzip",
    "sign:cli": "node --no-warnings --experimental-vfs dist/main.js audit --check --baseline build/baseline.nzip --verdict build/cli.audit.json build/cli.unsigned.nzip && node --no-warnings dist/main.js sign --output bundle.nzip build/cli.unsigned.nzip",
    "sign:cli:local": "npm run testpki && node --no-warnings --experimental-vfs dist/main.js audit --check --baseline build/baseline.nzip --verdict build/cli.audit.json build/cli.unsigned.nzip && node --no-warnings dist/main.js sign --key build/certs/leaf.key --chain build/certs/chain.pem --output bundle.nzip build/cli.unsigned.nzip",
    "verify:cli": "node --no-warnings dist/main.js verify bundle.nzip",
    "release:cli": "npm run build && npm run manifest:cli && npm run pack:cli && npm run baseline:cli && npm run audit:cli",
    "trust": "node --no-warnings dist/main.js trust",
    "schema:release": "node --no-warnings tools/schema.ts build/policy.schema.json",
    "prepublishOnly": "node --no-warnings --experimental-vfs tools/prepublish.ts",
    "testpki": "node --no-warnings --experimental-vfs tools/testpki.ts",
    "icons": "node --no-warnings tools/icons.ts"
  },
  "dependencies": {
    "@sigstore/bundle": "^5.0.0",
    "@sigstore/protobuf-specs": "^0.5.2",
    "@sigstore/sign": "^5.0.0",
    "@sigstore/tuf": "^5.0.0",
    "@sigstore/verify": "^4.1.2"
  },
  "devDependencies": {
    "@anthropic-ai/claude-agent-sdk": "0.3.302",
    "@types/node": "^26.6.2",
    "typescript": "^7.0.2"
  }
}