JSPM

  • ESM via JSPM
  • ES Module Entrypoint
  • Export Map
  • Keywords
  • License
  • Repository URL
  • TypeScript Types
  • README
  • Created
  • Published
  • Downloads 17
  • Score
    100M100P100Q93397F
  • License MIT

CLI for verifying repository integrity roots against the TIP registry.

Package Exports

    This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (tip-verify) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

    Readme

    tip-verify

    Verify a local Git checkout against integrity roots published on Ternoa zkEVM.

    Hermes Agent is the first indexed repository. The package installs a tip-verify binary, so the intended one-shot command is:

    npx tip-verify verify

    Quick Start

    From a local Hermes Agent checkout:

    npx tip-verify verify

    Explicit path:

    npx tip-verify verify --path ./hermes-agent

    Check the latest registered root:

    npx tip-verify status github:NousResearch/hermes-agent

    Generate a local manifest without reading the chain:

    npx tip-verify manifest --path ./hermes-agent

    Configuration

    By default the CLI reads from Ternoa zkEVM mainnet:

    TERNOA_MAINNET_RPC_URL=https://rpc-mainnet.zkevm.ternoa.network/

    The current v1 registry address is:

    TIP_REGISTRY_ADDRESS=0x536625F6c65FBF7cC053Fb47ccc240aF9cF1bdFf

    The package has the v1 registry address built in. You only need env vars if you want to override the registry or RPC:

    export TIP_REGISTRY_ADDRESS=0x536625F6c65FBF7cC053Fb47ccc240aF9cF1bdFf
export TERNOA_MAINNET_RPC_URL=https://rpc-mainnet.zkevm.ternoa.network/

    Commands

    tip-verify verify [--path <dir>] [--source <subject>] [--commit <sha>] [--policy <id>] [--json]
tip-verify status <subject> [--policy <id>] [--json]
tip-verify manifest [--path <dir>] [--source <subject>] [--commit <sha>] [--json]

    Exit Codes

    • 0: verified
    • 1: not verified, missing root, mismatch, or revoked root
    • 2: tool, config, network, or RPC error

    Dirty-file reporting is best-effort. If a partial or unusual Git checkout cannot run git status, verification still compares the deterministic tracked-file root.

    Troubleshooting

    If verify says the repository has no origin remote, either add the upstream remote:

    git remote add origin https://github.com/NousResearch/hermes-agent.git

    Or pass the subject explicitly:

    npx tip-verify verify --source github:NousResearch/hermes-agent

    What Gets Hashed

    tip-verify hashes Git-tracked source files only. It excludes local-only files such as .git, .env, caches, virtualenvs, node_modules, and local Hermes memory/config data.

    The manifest includes each file path, Git mode, byte size, and SHA-256 digest. The final Merkle root is stored on-chain.

    Published Registry

    • Chain: Ternoa zkEVM mainnet
    • Chain ID: 752025
    • Registry: 0x536625F6c65FBF7cC053Fb47ccc240aF9cF1bdFf
    • Explorer: https://explorer-mainnet.zkevm.ternoa.network/address/0x536625f6c65fbf7cc053fb47ccc240af9cf1bdff