@ainize/core 0.1.0

package/dist/config.d.ts

@@ -0,0 +1,128 @@
+import type { NodeConfig, NodeRole, TeachConfig, TeachEffort } from './types.js';
+export declare const VERSION = "0.1.0";
+export declare function buildStamp(): string | undefined;
+export declare const DEFAULT_HOME: string;
+export declare function configPath(home?: string): string;
+export interface InitOptions {
+    home?: string;
+    name?: string;
+    port?: number;
+    host?: string;
+    roles?: NodeRole[];
+    peers?: string[];
+    ledger?: 'local' | 'ain';
+    ainProviderUrl?: string;
+    ainEventUrl?: string | null;
+    ainChainId?: number;
+    privateKey?: string;
+    runtimeRepo?: string;
+    runtimeApi?: string;
+    runtimePatchDir?: string;
+    currency?: 'AIN' | 'CREDIT';
+    publicUrl?: string;
+}
+/** Twelve fixed locality prompts (prose / code / digits / general knowledge). Greedy answers must stay identical on ≥ minSame. */
+export declare const DEFAULT_LOCALITY_PROMPTS: string[];
+/** Teach-mode defaults (spec §7.4): disabled, review-before-publish, gradient trainer in the `flashtrain` container. */
+export declare const DEFAULT_TEACH_CONFIG: TeachConfig;
+/**
+ * What a verifier will spend on unpaid work for strangers (items 332 / 333 / 336). Every one of these was
+ * unbounded: the round verified hidden test listings, held the shared model in front of the node's own visitors,
+ * and kept every body it ever downloaded.
+ */
+export declare const DEFAULT_VERIFIER_BUDGET: {
+    /**
+     * Stop attesting below this balance where the chain charges gas (item 341). An attestation is a write the VERIFIER
+     * signs and pays for — the plan's "seller pays gas" cannot hold for a record the verifier signs — so the unpaid
+     * role becomes a net-paying one the moment gas is real, and `verifier.auto` would spend the account to nothing,
+     * taking announce, settle and payout with it. No effect on the local ledger, which has no gas.
+     */
+    readonly minBalance: 1;
+    readonly includeTest: false;
+    readonly minPrice: "0";
+    readonly maxPerHour: 40;
+    readonly maxModelMinutesPerHour: 10;
+    readonly window: null;
+    readonly retainBodies: false;
+};
+/** `cfg.verifier` with the budget defaults filled in (a config.json written before they existed has none of them). */
+export declare function verifierConfig(cfg: Pick<NodeConfig, 'verifier'>): NonNullable<NodeConfig['verifier']>;
+/** Operator ceiling for `dataset.maxBytes` — a node may not accept an upload larger than this whatever the config says. */
+export declare const DATASET_MAX_BYTES_CEILING = 20000000;
+/** Effective teach config: `cfg.teach` merged over the defaults (older config.json files have no `teach` block). */
+export declare function teachConfig(cfg: Pick<NodeConfig, 'teach'>): TeachConfig;
+/** One measured lesson, as `teach_stats` records it (design §6.5). Only `backend: 'gradient'` rows may drive a visitor-facing number. */
+export interface TeachTimingSample {
+    total_s: number;
+    load_s: number | null;
+    steps: number | null;
+    rows_trained: number | null;
+    sentences: number | null;
+}
+/** How many questions per lesson, and whether the number was measured (design §D1). */
+export interface RowsPerJobResult {
+    rows: number;
+    source: 'default' | 'measured' | 'operator';
+    /** p50 seconds per question per pass, gradient samples only; null until the fit exists. */
+    s_per_row_p50: number | null;
+    s_per_row_p90: number | null;
+    load_s_p50: number | null;
+    samples: number;
+}
+export declare const ETA_MIN_SAMPLES = 3;
+export declare function percentileOf(xs: number[], p: number): number | null;
+/**
+ * How many questions one lesson may train on this node (design §D1).
+ *
+ *   s_per_row_p90 = p90( (total_s − load_s) / (rows_trained × steps) )   over gradient samples only
+ *   max_rows      = floor( (timeoutMs/1000 − load_s_p90) / (passes × s_per_row_p90) / safetyFactor )
+ *   rowsPerJob    = clamp(floor, max_rows, ceiling)
+ *
+ * The whole derivation is skipped — the floor is used — while fewer than `ETA_MIN_SAMPLES` gradient samples exist, or
+ * while the trainer has not shown that it supports sampled evaluation (design §16: an unsampled eval at 100 questions
+ * would spend more time probing than training). An operator override disables the derivation entirely.
+ */
+export declare function deriveRowsPerJob(cfg: TeachConfig, samples: TeachTimingSample[], opts?: {
+    effort?: TeachEffort;
+    override?: number | null;
+    trainerSupportsSampling?: boolean;
+}): RowsPerJobResult;
+/** `"4,5"` / `"0,1,2,3"` → a set of GPU indices; anything unparseable is simply not in the set. */
+export declare function gpuSet(spec: string | undefined | null): Set<string>;
+/**
+ * The GPUs `teach.trainer.gpus` and `runtime.gpus` have in common (item 145).
+ *
+ * deploy/README states the rule — "never let the two sets overlap: the trainer loads a second copy of the model's
+ * memory table and would starve vLLM" — and nothing in the code checked it. The shipped default named the very GPUs
+ * the shipped cluster serves on, and the README then invited the operator to switch gradient training on.
+ */
+export declare function gpuOverlap(servingGpus: string | undefined | null, trainerGpus: string | undefined | null): string[];
+/** How long raw `events` rows are kept when the operator has not said otherwise (item 128). */
+export declare const DEFAULT_EVENTS_RETENTION_DAYS = 90;
+/**
+ * What a fresh node accepts from peer exchange (items 136/137). Discovery stays ON — a marketplace whose nodes only
+ * ever talk to a hand-written list is not a network — but it is now bounded, marked and reversible: learned peers
+ * are labelled `learned` in `ainize peers ls`, capped at `maxPeers`, dropped when they stop answering, and an
+ * endpoint the operator removes stays removed until they add it back.
+ */
+export declare const DEFAULT_P2P_CONFIG: {
+    acceptExchange: boolean;
+    maxPeers: number;
+    evictAfterFailures: number;
+    staleDays: number;
+};
+export declare function defaultConfig(opts?: InitOptions): NodeConfig;
+export declare function loadConfig(home?: string): NodeConfig | null;
+export declare function saveConfig(cfg: NodeConfig, home?: string): string;
+/**
+ * Fold the changes a running node made to its own config (`boot` → `live`: the operator password, a peer added or
+ * removed in the console, a display name) onto whatever is on disk NOW, instead of writing the node's whole
+ * start-up snapshot over it. Without this, one click in the console silently reverted every `ainize config set`
+ * made since the node started (item 124).
+ */
+export declare function mergeConfigChanges(onDisk: NodeConfig, boot: NodeConfig, live: NodeConfig): NodeConfig;
+/** Environment overrides (handy for docker / multi-node demos). */
+export declare function applyEnv(cfg: NodeConfig, env?: NodeJS.ProcessEnv): NodeConfig;
+/** `AINIZE_TRUST_PROXY`: `0|false` → off, `1|2|…` → hop count, `true` → every proxy (only behind a proxy that overwrites X-Forwarded-For), anything else → Express IP/CIDR/`loopback` list. */
+export declare function parseTrustProxy(v: string): boolean | number | string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEjF,eAAO,MAAM,OAAO,UAAU,CAAC;AAa/B,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAAwB;AACxE,eAAO,MAAM,YAAY,QAAwD,CAAC;AAElF,wBAAgB,UAAU,CAAC,IAAI,SAAe,GAAG,MAAM,CAEtD;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kIAAkI;AAClI,eAAO,MAAM,wBAAwB,EAAE,MAAM,EAa5C,CAAC;AAEF,wHAAwH;AACxH,eAAO,MAAM,oBAAoB,EAAE,WA+BlC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;IAClC;;;;;OAKG;;;;;;;;CAQK,CAAC;AAEX,sHAAsH;AACtH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAGrG;AAED,2HAA2H;AAC3H,eAAO,MAAM,yBAAyB,WAAa,CAAC;AAEpD,oHAAoH;AACpH,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,WAAW,CAsBvE;AAED,yIAAyI;AACzI,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAC5C,2FAA2F;IAC3F,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAInE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,iBAAiB,EAAE,EAC5B,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/F,gBAAgB,CAgBlB;AAED,mGAAmG;AACnG,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAEnE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CAGnH;AAED,+FAA+F;AAC/F,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;CAA+E,CAAC;AAE/G,wBAAgB,aAAa,CAAC,IAAI,GAAE,WAAgB,GAAG,UAAU,CAiDhE;AAED,wBAAgB,UAAU,CAAC,IAAI,SAAe,GAAG,UAAU,GAAG,IAAI,CAOjE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,SAAe,GAAG,MAAM,CAMvE;AAID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAkBrG;AAED,mEAAmE;AACnE,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,oBAAc,GAAG,UAAU,CAgBvE;AAED,+LAA+L;AAC/L,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAMpE"}

package/dist/config.js

@@ -0,0 +1,330 @@
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { join, resolve } from 'node:path';
+import { createIdentity, identityFromPrivateKey } from './identity.js';
+import { NETWORK_MIN_ROYALTY_SHARE, NETWORK_MIN_VERIFIER_SHARE } from './types.js';
+export const VERSION = '0.1.0';
+/**
+ * When the running code was last built. Measured — the mtime of this very module — never a string frozen into a
+ * config file: after an upgrade `version` alone (unchanged for a year) cannot tell two builds apart (item 141).
+ *
+ * Measured ONCE, when the module is loaded: the file is read then, so that is the code this process runs. A
+ * `npm run build` under a running node replaces the file on disk but not the code in memory — stat'ing it again
+ * on every call made a node started at 09:04 report the 11:36 build it had never loaded.
+ */
+const BUILD_STAMP = (() => {
+    try {
+        return statSync(fileURLToPath(import.meta.url)).mtime.toISOString();
+    }
+    catch {
+        return undefined;
+    }
+})();
+export function buildStamp() { return BUILD_STAMP; }
+export const DEFAULT_HOME = process.env.AINIZE_HOME ?? join(homedir(), '.ainize');
+export function configPath(home = DEFAULT_HOME) {
+    return join(home, 'config.json');
+}
+/** Twelve fixed locality prompts (prose / code / digits / general knowledge). Greedy answers must stay identical on ≥ minSame. */
+export const DEFAULT_LOCALITY_PROMPTS = [
+    'What is the capital of France?',
+    'Write one sentence about the ocean.',
+    'Translate "good morning" into Spanish.',
+    'What is 17 + 25?',
+    'Name three primary colors.',
+    'Write a Python function that returns the square of a number.',
+    'What year did the first human land on the Moon?',
+    'Summarize the water cycle in one sentence.',
+    'What is the chemical symbol for gold?',
+    'List the days of the week.',
+    '대한민국의 수도는 어디입니까?',
+    '1부터 10까지 더하면 얼마입니까?',
+];
+/** Teach-mode defaults (spec §7.4): disabled, review-before-publish, gradient trainer in the `flashtrain` container. */
+export const DEFAULT_TEACH_CONFIG = {
+    enabled: false,
+    publish: 'review',
+    factsPerJob: 8,
+    jobsPerKeyPerDay: 3,
+    jobsPerIpPerDay: 5,
+    queueMax: 10,
+    contributorShare: 0.7,
+    draftTtlDays: 7,
+    backend: 'gradient',
+    stubOffline: false,
+    // `gpus` is deliberately UNSET (item 145). It used to ship as '4,5,6' — a claim about one host that was wrong for
+    // the cluster this repo ships, which serves the model on GPUs 4,5: the trainer's own free-memory pre-check then
+    // watched the GPUs vLLM was holding and blocked every lesson with a megabyte figure that never named the cause.
+    // An operator naming the trainer's GPUs is the only way this can be right, and gradient training refuses without it.
+    trainer: { container: 'flashtrain', script: 'train/teach.py', gpus: '', maxSteps: 20, timeoutMs: 1_800_000, minFreeGpuMb: 20_000, idleStopMin: 30 },
+    locality: { prompts: DEFAULT_LOCALITY_PROMPTS, minSame: 11 },
+    dataset: {
+        maxBytes: 4_000_000, maxSourceLines: 50_000, maxRows: 2_000,
+        perKeyPerDay: 10, keptPerKey: 20,
+        rowsPerKeyPerDay: 300, rowsPerIpPerDay: 500, bytesPerKeyPerDay: 20_000_000,
+        ttlDays: 7, stagedTtlHours: 24, createsPerIpPerMin: 10, declarationRows: 100,
+    },
+    rowsPerJob: { floorGradient: 8, floorStub: 200, ceiling: 1_000, safetyFactor: 2 },
+    effort: { quick: { maxSteps: 8, evalEvery: 2 }, balanced: { maxSteps: 20, evalEvery: 2 }, thorough: { maxSteps: 40, evalEvery: 4 }, lr: 2e-3 },
+    check: { callBudget: 68, sampleRows: 24, chatFormRows: 8, parentSamplesMax: 20, lockTargetMs: 300_000, lockAbortMs: 480_000, lockGraceMs: 30 * 60_000 },
+    preflight: { sampleRows: 24, perCall: 8 },
+    queuedRowsMax: 2_000,
+    checkStubLessons: false,
+    trustedKeys: [],
+    lineage: false,
+};
+/**
+ * What a verifier will spend on unpaid work for strangers (items 332 / 333 / 336). Every one of these was
+ * unbounded: the round verified hidden test listings, held the shared model in front of the node's own visitors,
+ * and kept every body it ever downloaded.
+ */
+export const DEFAULT_VERIFIER_BUDGET = {
+    /**
+     * Stop attesting below this balance where the chain charges gas (item 341). An attestation is a write the VERIFIER
+     * signs and pays for — the plan's "seller pays gas" cannot hold for a record the verifier signs — so the unpaid
+     * role becomes a net-paying one the moment gas is real, and `verifier.auto` would spend the account to nothing,
+     * taking announce, settle and payout with it. No effect on the local ledger, which has no gas.
+     */
+    minBalance: 1,
+    includeTest: false,
+    minPrice: '0',
+    maxPerHour: 40,
+    maxModelMinutesPerHour: 10,
+    window: null,
+    retainBodies: false,
+};
+/** `cfg.verifier` with the budget defaults filled in (a config.json written before they existed has none of them). */
+export function verifierConfig(cfg) {
+    const v = cfg.verifier ?? { quorum: 2, allowSelfAttest: false, intervalMs: 5000 };
+    return { ...DEFAULT_VERIFIER_BUDGET, ...v };
+}
+/** Operator ceiling for `dataset.maxBytes` — a node may not accept an upload larger than this whatever the config says. */
+export const DATASET_MAX_BYTES_CEILING = 20_000_000;
+/** Effective teach config: `cfg.teach` merged over the defaults (older config.json files have no `teach` block). */
+export function teachConfig(cfg) {
+    const t = (cfg.teach ?? {});
+    const d = DEFAULT_TEACH_CONFIG;
+    return {
+        ...d, ...t,
+        trainer: { ...d.trainer, ...(t.trainer ?? {}) },
+        locality: { ...d.locality, ...(t.locality ?? {}) },
+        dataset: { ...d.dataset, ...(t.dataset ?? {}) },
+        rowsPerJob: { ...d.rowsPerJob, ...(t.rowsPerJob ?? {}) },
+        effort: {
+            ...d.effort, ...(t.effort ?? {}),
+            quick: { ...d.effort.quick, ...(t.effort?.quick ?? {}) },
+            balanced: { ...d.effort.balanced, ...(t.effort?.balanced ?? {}) },
+            thorough: { ...d.effort.thorough, ...(t.effort?.thorough ?? {}) },
+        },
+        check: { ...d.check, ...(t.check ?? {}) },
+        preflight: { ...d.preflight, ...(t.preflight ?? {}) },
+        queuedRowsMax: t.queuedRowsMax ?? d.queuedRowsMax,
+        checkStubLessons: t.checkStubLessons ?? d.checkStubLessons,
+        trustedKeys: t.trustedKeys ?? d.trustedKeys,
+        lineage: t.lineage ?? d.lineage,
+    };
+}
+export const ETA_MIN_SAMPLES = 3;
+export function percentileOf(xs, p) {
+    if (!xs.length)
+        return null;
+    const s = [...xs].sort((a, b) => a - b);
+    return s[Math.min(s.length - 1, Math.floor(p * (s.length - 1)))];
+}
+/**
+ * How many questions one lesson may train on this node (design §D1).
+ *
+ *   s_per_row_p90 = p90( (total_s − load_s) / (rows_trained × steps) )   over gradient samples only
+ *   max_rows      = floor( (timeoutMs/1000 − load_s_p90) / (passes × s_per_row_p90) / safetyFactor )
+ *   rowsPerJob    = clamp(floor, max_rows, ceiling)
+ *
+ * The whole derivation is skipped — the floor is used — while fewer than `ETA_MIN_SAMPLES` gradient samples exist, or
+ * while the trainer has not shown that it supports sampled evaluation (design §16: an unsampled eval at 100 questions
+ * would spend more time probing than training). An operator override disables the derivation entirely.
+ */
+export function deriveRowsPerJob(cfg, samples, opts = {}) {
+    const floor = cfg.backend === 'stub' ? cfg.rowsPerJob.floorStub : cfg.rowsPerJob.floorGradient;
+    const ceiling = Math.max(floor, cfg.rowsPerJob.ceiling);
+    const passes = cfg.effort[opts.effort ?? 'balanced'].maxSteps;
+    const usable = samples.filter((s) => Number.isFinite(s.total_s) && (s.rows_trained ?? 0) > 0 && (s.steps ?? 0) > 0);
+    const perRow = usable.map((s) => (s.total_s - (s.load_s ?? 0)) / (s.rows_trained * s.steps)).filter((x) => Number.isFinite(x) && x > 0);
+    const loads = usable.map((s) => s.load_s).filter((x) => typeof x === 'number' && Number.isFinite(x));
+    const s50 = percentileOf(perRow, 0.5);
+    const s90 = percentileOf(perRow, 0.9);
+    const l50 = percentileOf(loads, 0.5);
+    const base = { s_per_row_p50: s50, s_per_row_p90: s90, load_s_p50: l50, samples: perRow.length };
+    if (typeof opts.override === 'number' && opts.override > 0)
+        return { rows: Math.min(ceiling, Math.max(1, Math.floor(opts.override))), source: 'operator', ...base };
+    if (perRow.length < ETA_MIN_SAMPLES || s90 === null || opts.trainerSupportsSampling !== true)
+        return { rows: floor, source: 'default', ...base };
+    const budget_s = cfg.trainer.timeoutMs / 1000 - (l50 ?? 0);
+    const maxRows = Math.floor(budget_s / (passes * s90) / Math.max(1, cfg.rowsPerJob.safetyFactor));
+    return { rows: Math.min(ceiling, Math.max(floor, maxRows)), source: 'measured', ...base };
+}
+/** `"4,5"` / `"0,1,2,3"` → a set of GPU indices; anything unparseable is simply not in the set. */
+export function gpuSet(spec) {
+    return new Set((spec ?? '').split(',').map((s) => s.trim()).filter(Boolean));
+}
+/**
+ * The GPUs `teach.trainer.gpus` and `runtime.gpus` have in common (item 145).
+ *
+ * deploy/README states the rule — "never let the two sets overlap: the trainer loads a second copy of the model's
+ * memory table and would starve vLLM" — and nothing in the code checked it. The shipped default named the very GPUs
+ * the shipped cluster serves on, and the README then invited the operator to switch gradient training on.
+ */
+export function gpuOverlap(servingGpus, trainerGpus) {
+    const serving = gpuSet(servingGpus);
+    return [...gpuSet(trainerGpus)].filter((g) => serving.has(g));
+}
+/** How long raw `events` rows are kept when the operator has not said otherwise (item 128). */
+export const DEFAULT_EVENTS_RETENTION_DAYS = 90;
+/**
+ * What a fresh node accepts from peer exchange (items 136/137). Discovery stays ON — a marketplace whose nodes only
+ * ever talk to a hand-written list is not a network — but it is now bounded, marked and reversible: learned peers
+ * are labelled `learned` in `ainize peers ls`, capped at `maxPeers`, dropped when they stop answering, and an
+ * endpoint the operator removes stays removed until they add it back.
+ */
+export const DEFAULT_P2P_CONFIG = { acceptExchange: true, maxPeers: 50, evictAfterFailures: 60, staleDays: 7 };
+export function defaultConfig(opts = {}) {
+    const home = opts.home ?? DEFAULT_HOME;
+    const identity = opts.privateKey ? identityFromPrivateKey(opts.privateKey) : createIdentity();
+    const ledger = opts.ledger ?? 'local';
+    return {
+        name: opts.name ?? `node-${identity.address.slice(2, 8).toLowerCase()}`,
+        dataDir: join(home, 'data'),
+        port: opts.port ?? 3402,
+        // Loopback by default (item 121). Between `start` and the first `login` a node has no operator password, and a
+        // node bound to every interface is claimed by whoever scans the port first — `POST /api/auth/setup` hands them
+        // a session that can announce, buy, spend the wallet and change the payout address. Going public is a decision
+        // the operator makes on purpose: `ainize init --host 0.0.0.0` (or `--public`), or AINIZE_HOST.
+        host: opts.host ?? '127.0.0.1',
+        publicUrl: opts.publicUrl,
+        roles: opts.roles ?? ['seller', 'verifier', 'serving'],
+        peers: opts.peers ?? [],
+        ledger: {
+            kind: ledger,
+            ain: {
+                providerUrl: opts.ainProviderUrl ?? 'http://localhost:8081',
+                eventHandlerUrl: opts.ainEventUrl ?? null,
+                chainId: opts.ainChainId ?? 0,
+                appName: 'knowledge',
+            },
+        },
+        identity,
+        runtime: {
+            repo: opts.runtimeRepo ?? (existsSync('/mnt/newdata/qwen3.8') ? '/mnt/newdata/qwen3.8' : undefined),
+            api: opts.runtimeApi ?? 'http://localhost:8000',
+            patchDir: opts.runtimePatchDir,
+            hookApi: 'http://localhost:8001',
+            python: 'python3',
+        },
+        verifier: { quorum: 2, allowSelfAttest: false, intervalMs: 5000, auto: true, ...DEFAULT_VERIFIER_BUDGET },
+        market: {
+            currency: opts.currency ?? (ledger === 'ain' ? 'AIN' : 'CREDIT'),
+            defaultPrice: '0.1',
+            royaltyShare: NETWORK_MIN_ROYALTY_SHARE,
+            verifierShare: NETWORK_MIN_VERIFIER_SHARE,
+            initialCredit: '100',
+            creditGrants: 100,
+        },
+        teach: structuredClone(DEFAULT_TEACH_CONFIG),
+        p2p: { ...DEFAULT_P2P_CONFIG },
+        server: { trustProxy: false },
+        events: { retentionDays: DEFAULT_EVENTS_RETENTION_DAYS },
+        gossipIntervalMs: 4000,
+        version: VERSION,
+    };
+}
+export function loadConfig(home = DEFAULT_HOME) {
+    const p = configPath(home);
+    if (!existsSync(p))
+        return null;
+    const cfg = JSON.parse(readFileSync(p, 'utf8'));
+    cfg.dataDir = resolve(cfg.dataDir);
+    cfg.teach = teachConfig(cfg);
+    return cfg;
+}
+export function saveConfig(cfg, home = DEFAULT_HOME) {
+    mkdirSync(home, { recursive: true });
+    mkdirSync(cfg.dataDir, { recursive: true });
+    const p = configPath(home);
+    writeFileSync(p, JSON.stringify(cfg, null, 2) + '\n', { mode: 0o600 });
+    return p;
+}
+const isPlainObject = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+/**
+ * Fold the changes a running node made to its own config (`boot` → `live`: the operator password, a peer added or
+ * removed in the console, a display name) onto whatever is on disk NOW, instead of writing the node's whole
+ * start-up snapshot over it. Without this, one click in the console silently reverted every `ainize config set`
+ * made since the node started (item 124).
+ */
+export function mergeConfigChanges(onDisk, boot, live) {
+    const out = structuredClone(onDisk);
+    const walk = (b, l, target) => {
+        for (const k of new Set([...Object.keys(b ?? {}), ...Object.keys(l ?? {})])) {
+            const bv = b?.[k];
+            const lv = l?.[k];
+            if (JSON.stringify(bv) === JSON.stringify(lv))
+                continue; // the node did not touch it — the disk wins
+            if (lv === undefined) {
+                delete target[k];
+                continue;
+            }
+            if (isPlainObject(bv) && isPlainObject(lv)) {
+                if (!isPlainObject(target[k]))
+                    target[k] = {};
+                walk(bv, lv, target[k]);
+            }
+            else {
+                target[k] = structuredClone(lv);
+            }
+        }
+    };
+    walk(boot, live, out);
+    return out;
+}
+/** Environment overrides (handy for docker / multi-node demos). */
+export function applyEnv(cfg, env = process.env) {
+    if (env.AINIZE_PORT)
+        cfg.port = Number(env.AINIZE_PORT);
+    if (env.AINIZE_HOST)
+        cfg.host = env.AINIZE_HOST;
+    if (env.AINIZE_PEERS)
+        cfg.peers = env.AINIZE_PEERS.split(',').map((s) => s.trim()).filter(Boolean);
+    if (env.AINIZE_LEDGER === 'ain' || env.AINIZE_LEDGER === 'local')
+        cfg.ledger.kind = env.AINIZE_LEDGER;
+    if (env.AIN_PROVIDER_URL)
+        cfg.ledger.ain.providerUrl = env.AIN_PROVIDER_URL;
+    if (env.AINIZE_ROLES)
+        cfg.roles = env.AINIZE_ROLES.split(',');
+    if (env.AINIZE_PUBLIC_URL)
+        cfg.publicUrl = env.AINIZE_PUBLIC_URL;
+    if (env.AINIZE_RUNTIME_REPO)
+        cfg.runtime = { ...cfg.runtime, repo: env.AINIZE_RUNTIME_REPO };
+    if (env.AINIZE_RUNTIME_API)
+        cfg.runtime = { ...cfg.runtime, api: env.AINIZE_RUNTIME_API };
+    if (env.AINIZE_RUNTIME_PATCH_DIR)
+        cfg.runtime = { ...cfg.runtime, patchDir: env.AINIZE_RUNTIME_PATCH_DIR };
+    if (env.AINIZE_TEACH_BACKEND === 'stub' || env.AINIZE_TEACH_BACKEND === 'gradient')
+        cfg.teach = { ...teachConfig(cfg), backend: env.AINIZE_TEACH_BACKEND };
+    if (env.AINIZE_TEACH_ENABLED === '1' || env.AINIZE_TEACH_ENABLED === '0')
+        cfg.teach = { ...teachConfig(cfg), enabled: env.AINIZE_TEACH_ENABLED === '1' };
+    if (env.AINIZE_TRUST_PROXY !== undefined)
+        cfg.server = { ...(cfg.server ?? {}), trustProxy: parseTrustProxy(env.AINIZE_TRUST_PROXY) };
+    if (env.AINIZE_TEACH_STUB_OFFLINE === '1' || env.AINIZE_TEACH_STUB_OFFLINE === '0')
+        cfg.teach = { ...teachConfig(cfg), stubOffline: env.AINIZE_TEACH_STUB_OFFLINE === '1' };
+    return cfg;
+}
+/** `AINIZE_TRUST_PROXY`: `0|false` → off, `1|2|…` → hop count, `true` → every proxy (only behind a proxy that overwrites X-Forwarded-For), anything else → Express IP/CIDR/`loopback` list. */
+export function parseTrustProxy(v) {
+    const s = v.trim();
+    if (s === '' || s === '0' || s.toLowerCase() === 'false')
+        return false;
+    if (s.toLowerCase() === 'true')
+        return true;
+    if (/^\d+$/.test(s))
+        return Number(s);
+    return s;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAGnF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,WAAW,GAAuB,CAAC,GAAG,EAAE;IAC5C,IAAI,CAAC;QAAC,OAAO,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC1G,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,UAAU,UAAU,KAAyB,OAAO,WAAW,CAAC,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAElF,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,YAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAqBD,kIAAkI;AAClI,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,gCAAgC;IAChC,qCAAqC;IACrC,wCAAwC;IACxC,kBAAkB;IAClB,4BAA4B;IAC5B,8DAA8D;IAC9D,iDAAiD;IACjD,4CAA4C;IAC5C,uCAAuC;IACvC,4BAA4B;IAC5B,kBAAkB;IAClB,qBAAqB;CACtB,CAAC;AAEF,wHAAwH;AACxH,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,CAAC;IACd,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,CAAC;IAClB,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,GAAG;IACrB,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,UAAU;IACnB,WAAW,EAAE,KAAK;IAClB,kHAAkH;IAClH,gHAAgH;IAChH,gHAAgH;IAChH,qHAAqH;IACrH,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IACnJ,QAAQ,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,OAAO,EAAE;QACP,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;QAC3D,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;QAChC,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,UAAU;QAC1E,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG;KAC7E;IACD,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE;IACjF,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;IAC9I,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE;IACvJ,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;IACzC,aAAa,EAAE,KAAK;IACpB,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC;;;;;OAKG;IACH,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,GAAG;IACb,UAAU,EAAE,EAAE;IACd,sBAAsB,EAAE,EAAE;IAC1B,MAAM,EAAE,IAAI;IACZ,YAAY,EAAE,KAAK;CACX,CAAC;AAEX,sHAAsH;AACtH,MAAM,UAAU,cAAc,CAAC,GAAiC;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,GAAG,uBAAuB,EAAE,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,MAAM,yBAAyB,GAAG,UAAU,CAAC;AAEpD,oHAAoH;AACpH,MAAM,UAAU,WAAW,CAAC,GAA8B;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAyB,CAAC;IACpD,MAAM,CAAC,GAAG,oBAAoB,CAAC;IAC/B,OAAO;QACL,GAAG,CAAC,EAAE,GAAG,CAAC;QACV,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QAC/C,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;QAClD,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QAC/C,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;QACxD,MAAM,EAAE;YACN,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;YAChC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACxD,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;YACjE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;SAClE;QACD,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;QACzC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE;QACrD,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa;QACjD,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,gBAAgB;QAC1D,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW;QAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;KAChC,CAAC;AACJ,CAAC;AAsBD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC,MAAM,UAAU,YAAY,CAAC,EAAY,EAAE,CAAS;IAClD,IAAI,CAAC,EAAE,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAgB,EAChB,OAA4B,EAC5B,OAA8F,EAAE;IAEhG,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;IAC/F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,QAAQ,CAAC;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAa,GAAG,CAAC,CAAC,KAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAA8C,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5I,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC;IACpK,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,uBAAuB,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;IACjJ,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACjG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,MAAM,CAAC,IAA+B;IACpD,OAAO,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,WAAsC,EAAE,WAAsC;IACvG,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAE/G,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IACtC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE;QACvE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,+GAA+G;QAC/G,+GAA+G;QAC/G,+GAA+G;QAC/G,+FAA+F;QAC/F,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,WAAW;QAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;QACtD,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE;gBACH,WAAW,EAAE,IAAI,CAAC,cAAc,IAAI,uBAAuB;gBAC3D,eAAe,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;gBACzC,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;gBAC7B,OAAO,EAAE,WAAW;aACrB;SACF;QACD,QAAQ;QACR,OAAO,EAAE;YACP,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,GAAG,EAAE,IAAI,CAAC,UAAU,IAAI,uBAAuB;YAC/C,QAAQ,EAAE,IAAI,CAAC,eAAe;YAC9B,OAAO,EAAE,uBAAuB;YAChC,MAAM,EAAE,SAAS;SAClB;QACD,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,EAAE;QACzG,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChE,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,yBAAyB;YACvC,aAAa,EAAE,0BAA0B;YACzC,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,GAAG;SAClB;QACD,KAAK,EAAE,eAAe,CAAC,oBAAoB,CAAC;QAC5C,GAAG,EAAE,EAAE,GAAG,kBAAkB,EAAE;QAC9B,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;QAC7B,MAAM,EAAE,EAAE,aAAa,EAAE,6BAA6B,EAAE;QACxD,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,YAAY;IAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;IAC9D,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAe,EAAE,IAAI,GAAG,YAAY;IAC7D,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtH;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,IAAgB,EAAE,IAAgB;IACvF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAuC,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,CAAsC,EAAE,CAAsC,EAAE,MAA+B,EAAE,EAAE;QAC/H,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAM,4CAA4C;YAC1G,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrD,IAAI,aAAa,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC9C,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAA4B,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAA0C,EAAE,IAA0C,EAAE,GAAG,CAAC,CAAC;IAClG,OAAO,GAA4B,CAAC;AACtC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,GAAe,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG;IACzD,IAAI,GAAG,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;IAChD,IAAI,GAAG,CAAC,YAAY;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnG,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,IAAI,GAAG,CAAC,aAAa,KAAK,OAAO;QAAE,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC;IACtG,IAAI,GAAG,CAAC,gBAAgB;QAAE,GAAG,CAAC,MAAM,CAAC,GAAI,CAAC,WAAW,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC7E,IAAI,GAAG,CAAC,YAAY;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IAC5E,IAAI,GAAG,CAAC,iBAAiB;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACjE,IAAI,GAAG,CAAC,mBAAmB;QAAE,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC;IAC7F,IAAI,GAAG,CAAC,kBAAkB;QAAE,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;IAC1F,IAAI,GAAG,CAAC,wBAAwB;QAAE,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,wBAAwB,EAAE,CAAC;IAC3G,IAAI,GAAG,CAAC,oBAAoB,KAAK,MAAM,IAAI,GAAG,CAAC,oBAAoB,KAAK,UAAU;QAAE,GAAG,CAAC,KAAK,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC;IAC3J,IAAI,GAAG,CAAC,oBAAoB,KAAK,GAAG,IAAI,GAAG,CAAC,oBAAoB,KAAK,GAAG;QAAE,GAAG,CAAC,KAAK,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,oBAAoB,KAAK,GAAG,EAAE,CAAC;IACzJ,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACtI,IAAI,GAAG,CAAC,yBAAyB,KAAK,GAAG,IAAI,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAAE,GAAG,CAAC,KAAK,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;IAC5K,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+LAA+L;AAC/L,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/events.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The vocabulary of a node's event log, in core because the things that READ the log are not the node.
+ *
+ * `ainize logs --kind` offers exactly this list, so a mistyped kind is refused with the list instead of
+ * printing an empty screen that looks like an idle node (items 116/132) — and the CLI has to know the list
+ * to do that. It used to import it from `@ainize/node`, which meant a terminal that only ever talks to a
+ * remote node over HTTP still had to install express, sqlite and the trainer to spell-check a flag.
+ */
+/** Severity order (low → high): a `level` filter means "this level and worse". */
+export declare const EVENT_LEVELS: readonly ["debug", "info", "warn", "error"];
+export type EventLevel = (typeof EVENT_LEVELS)[number];
+/** Every `kind` a node writes events under. */
+export declare const EVENT_KINDS: readonly ["blob", "branch", "buy", "challenge", "config", "drive", "lineage", "node", "p2p", "patch", "payout", "publish", "royalty", "runtime", "seed", "settings", "teach", "trade", "usage", "verifier", "verify"];
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kFAAkF;AAClF,eAAO,MAAM,YAAY,6CAA8C,CAAC;AACxE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,+CAA+C;AAC/C,eAAO,MAAM,WAAW,uNAOd,CAAC"}

package/dist/events.js

@@ -0,0 +1,20 @@
+/**
+ * The vocabulary of a node's event log, in core because the things that READ the log are not the node.
+ *
+ * `ainize logs --kind` offers exactly this list, so a mistyped kind is refused with the list instead of
+ * printing an empty screen that looks like an idle node (items 116/132) — and the CLI has to know the list
+ * to do that. It used to import it from `@ainize/node`, which meant a terminal that only ever talks to a
+ * remote node over HTTP still had to install express, sqlite and the trainer to spell-check a flag.
+ */
+/** Severity order (low → high): a `level` filter means "this level and worse". */
+export const EVENT_LEVELS = ['debug', 'info', 'warn', 'error'];
+/** Every `kind` a node writes events under. */
+export const EVENT_KINDS = [
+    'blob', 'branch', 'buy', 'challenge', 'config', 'drive',
+    // `lineage` = somebody published a knowledge built on one of ours; `royalty` = a sale of theirs paid us for it
+    // (items 183, 195, 318, 319). Both are derived from the catalogue, so `ainize logs --kind lineage` works on
+    // whichever route the record took.
+    'lineage', 'node', 'p2p', 'patch', 'payout', 'publish', 'royalty',
+    'runtime', 'seed', 'settings', 'teach', 'trade', 'usage', 'verifier', 'verify',
+];
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAGxE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO;IACvD,+GAA+G;IAC/G,4GAA4G;IAC5G,mCAAmC;IACnC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;IACjE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ;CACtE,CAAC"}

package/dist/identity.d.ts

@@ -0,0 +1,15 @@
+export interface Identity {
+    privateKey: string;
+    publicKey: string;
+    address: string;
+}
+export declare function createIdentity(): Identity;
+export declare function identityFromPrivateKey(privHex: string): Identity;
+export declare function signMessage(message: string, privHex: string): string;
+export declare function verifyMessage(message: string, signature: string, address: string): boolean;
+export declare function isAddress(value: string): boolean;
+export declare function checksum(address: string): string;
+/** Operator password hashing (scrypt) for the web console login. */
+export declare function hashPassword(password: string): string;
+export declare function verifyPassword(password: string, stored: string): boolean;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,cAAc,IAAI,QAAQ,CAKzC;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAKhE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAMxE"}

package/dist/identity.js

@@ -0,0 +1,59 @@
+/**
+ * Node identity = an AIN blockchain account (secp256k1). We reuse @ainblockchain/ain-util
+ * exactly like the original ainize-cli did for request signing (ecSignMessage / ecVerifySig),
+ * so a node's signature over a ledger record is verifiable by any peer with only the address.
+ */
+import { createRequire } from 'node:module';
+import { randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';
+const require = createRequire(import.meta.url);
+// ain-util is CommonJS
+const ainUtil = require('@ainblockchain/ain-util');
+export function createIdentity() {
+    const priv = randomBytes(32);
+    const pub = ainUtil.privateToPublic(priv);
+    const address = ainUtil.toChecksumAddress(ainUtil.bufferToHex(ainUtil.pubToAddress(pub)));
+    return { privateKey: priv.toString('hex'), publicKey: pub.toString('hex'), address };
+}
+export function identityFromPrivateKey(privHex) {
+    const priv = Buffer.from(privHex.replace(/^0x/, ''), 'hex');
+    const pub = ainUtil.privateToPublic(priv);
+    const address = ainUtil.toChecksumAddress(ainUtil.bufferToHex(ainUtil.pubToAddress(pub)));
+    return { privateKey: priv.toString('hex'), publicKey: pub.toString('hex'), address };
+}
+export function signMessage(message, privHex) {
+    return ainUtil.ecSignMessage(message, Buffer.from(privHex.replace(/^0x/, ''), 'hex'));
+}
+export function verifyMessage(message, signature, address) {
+    try {
+        return ainUtil.ecVerifySig(message, signature, address);
+    }
+    catch {
+        return false;
+    }
+}
+export function isAddress(value) {
+    try {
+        return ainUtil.isValidAddress(value);
+    }
+    catch {
+        return false;
+    }
+}
+export function checksum(address) {
+    return ainUtil.toChecksumAddress(address);
+}
+/** Operator password hashing (scrypt) for the web console login. */
+export function hashPassword(password) {
+    const salt = randomBytes(16);
+    const key = scryptSync(password, salt, 32);
+    return `scrypt$${salt.toString('hex')}$${key.toString('hex')}`;
+}
+export function verifyPassword(password, stored) {
+    const [alg, saltHex, keyHex] = stored.split('$');
+    if (alg !== 'scrypt' || !saltHex || !keyHex)
+        return false;
+    const key = scryptSync(password, Buffer.from(saltHex, 'hex'), 32);
+    const expected = Buffer.from(keyHex, 'hex');
+    return key.length === expected.length && timingSafeEqual(key, expected);
+}
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,uBAAuB;AACvB,MAAM,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAA6C,CAAC;AAQ/F,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe;IAC1D,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAe;IAC/E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export * from './types.js';
+export * from './canonical.js';
+export * from './identity.js';
+export * from './npz.js';
+export * from './x402.js';
+export * from './ledger.js';
+export * from './local-ledger.js';
+export * from './ain-ledger.js';
+export * from './catalog.js';
+export * from './lineage.js';
+export * from './config.js';
+export * from './config-schema.js';
+export * from './events.js';
+export * from './bytes.js';
+export * from './teach-auth.js';
+export * from './ops.js';
+//# sourceMappingURL=index.d.ts.map