@orangecheck/agent-core / VerifyDelegationInput
Interface: VerifyDelegationInput
Defined in: agent-core/src/verify.ts:86
Extends
Properties
| Property | Type | Description | Inherited from | Defined in |
|---|---|---|---|---|
<a id="property-decryptscopeswith"></a> decryptScopesWith? | { device_id: string; secretKey: Uint8Array; } | v1.2 private-scope decryption key. When the envelope carries scopes_encrypted, the verifier MUST supply a device key matching one of the recipient entries to recover the plaintext scope list. Without this, verification returns E_SCOPES_UNREADABLE. | - | agent-core/src/verify.ts:98 |
decryptScopesWith.device_id | string | - | - | agent-core/src/verify.ts:99 |
decryptScopesWith.secretKey | Uint8Array | - | - | agent-core/src/verify.ts:100 |
<a id="property-envelope"></a> envelope | DelegationEnvelope | - | - | agent-core/src/verify.ts:87 |
<a id="property-now"></a> now? | Date | Current time for temporal checks; defaults to new Date(). | - | agent-core/src/verify.ts:89 |
<a id="property-revocations"></a> revocations? | RevocationEnvelope[] | Revocations to evaluate against the delegation (or, for an action, every link in its chain). Fetch kind-30085 events with "#t": [<delegation id>] (SPEC §9.4); relays do not index the multi-letter delegation tag. Pass [] only when a relay answered with EOSE and none matched (SPEC §10.4). | VerifyBase.revocations | agent-core/src/verify.ts:70 |
<a id="property-scopemode"></a> scopeMode? | "strict" | "permissive" | - | VerifyBase.scopeMode | agent-core/src/verify.ts:50 |
<a id="property-skiprevocationcheck"></a> skipRevocationCheck? | boolean | Verify WITHOUT consulting revocation feeds. Required to be explicit. SECURITY §5 item 7: "Query revocation feeds (Nostr kind-30085 by #t with the cited delegation id) before reporting OK, unless the caller explicitly opts out." The default was inverted — revocations were checked only when supplied, and omitting them skipped the check silently, so "checked, clean" was indistinguishable from "never checked". This library has no network by design, so the caller fetches the feed and passes revocations. Declining to is a decision they must state. | VerifyBase.skipRevocationCheck | agent-core/src/verify.ts:63 |
<a id="property-skipsignatureverification"></a> skipSignatureVerification? | boolean | - | VerifyBase.skipSignatureVerification | agent-core/src/verify.ts:49 |
<a id="property-skiptemporalcheck"></a> skipTemporalCheck? | boolean | Skip temporal checks entirely (useful for inspecting historical envelopes). | - | agent-core/src/verify.ts:91 |
<a id="property-verifybip322"></a> verifyBip322? | (msg: string, signatureB64: string, address: string) => Promise<boolean> | - | VerifyBase.verifyBip322 | agent-core/src/verify.ts:48 |