samartomar/aih-scan ? reverse-engineered prompt

Build me a Node 20 TypeScript package called @aihq/scan with a small CLI and library for capturing and verifying scanner evidence. It should work on real files, sign and verify bundles, and run a few detector profiles, including a built in Cisco identity path and a strict registration based path. I want it to produce bounded evidence only, not make approval or install decisions, and to have clear refusal behavior when a detector or environment is not allowed.

Please include a clean command line tool, a public library entry point, and runnable examples that show how to run a detector and verify a capture bundle. Add tests for the main flows, type checking, linting, and a build that packs as an npm package. Keep it Node only, no browser support, and make sure the scanner uses safe file handling and detached verification behavior. If you need current docs for any tooling details, look them up online first.