@sentropic/oauth-verify

Framework-free OAuth2/OIDC access-token and DPoP-proof verification core for Sentropic: verify-only primitives, pluggable key source (remote JWKS or in-process), and canonical claim types. No issuer/signing/PRM logic; no MCP scope grammar.