@ainize/core 0.2.3 → 0.3.1

package/dist/browser.d.ts

@@ -11,6 +11,7 @@
  */
 export * from './types.js';
 export { verificationCount } from './catalog.js';
+export * from './scheme.js';
 export * from './delegation.js';
 export type { Ledger, LedgerEvents, LedgerInfo, PayoutRecord, PriceRecord, RecordBody, RetireRecord, SubscriptionRecord, SupersedeRecord, } from './ledger.js';
 //# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,cAAc,iBAAiB,CAAC;AAChC,YAAY,EACV,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EACvE,YAAY,EAAE,kBAAkB,EAAE,eAAe,GAClD,MAAM,aAAa,CAAC"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,YAAY,EACV,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EACvE,YAAY,EAAE,kBAAkB,EAAE,eAAe,GAClD,MAAM,aAAa,CAAC"}

package/dist/browser.js

@@ -15,5 +15,6 @@ export * from './types.js';
 export { verificationCount } from './catalog.js';
 // Delegation, for the AIN Wallet sign-in: `delegation.ts` imports NOTHING — the signature check is a parameter, so
 // the browser passes noble's and the node passes ain-util's, and the boundary above holds either way.
+export * from './scheme.js';
 export * from './delegation.js';
 //# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAC3B,iHAAiH;AACjH,2GAA2G;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,mHAAmH;AACnH,sGAAsG;AACtG,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAC3B,iHAAiH;AACjH,2GAA2G;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,mHAAmH;AACnH,sGAAsG;AACtG,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC"}

package/dist/config-schema.js

@@ -125,7 +125,7 @@ export const nodeConfigSchema = z.object({
      */
     operatorPasswordHash: z.string().optional(),
     /**
-     * Addresses that may sign in as this node's operator instead of typing the password.
+     * Addresses that may sign in as this node's operator, besides the node's own key.
      *
      * The node's OWN address is always allowed and is not listed here — whoever holds the node's key already owns
      * everything the node published, so requiring them to also type a password protects nothing. This list is for

package/dist/delegation.d.ts

@@ -1,11 +1,13 @@
 /**
  * Delegation — an AIN Wallet owner authorising a browser key, signed once.
  *
- * Its own module, and IMPORTING NOTHING, because the browser needs it. `browser.ts` is the boundary that keeps
- * `node:crypto` and ain-js out of the web bundle, and its rule is that a runtime value added there is how that
- * guarantee gets lost. This file has no imports to lose it with: `verifyDelegation` takes the signature check as a
- * parameter, so the node passes ain-util's and the browser passes noble's, and neither drags the other in.
+ * Its own module, and importing NO RUNTIME VALUE, because the browser needs it. `browser.ts` is the boundary that
+ * keeps `node:crypto` and ain-js out of the web bundle, and its rule is that a runtime value added there is how
+ * that guarantee gets lost. `verifyDelegation` takes the signature check as a parameter, so the node passes
+ * ain-util's and the browser passes noble's, and neither drags the other in. The one import here is a type, which
+ * erases at compile time and cannot carry anything with it.
  */
+import type { SignatureScheme } from './scheme.js';
 /** Header that carries the delegation, beside the ordinary `x-ainize-auth`. */
 export declare const DELEGATE_HEADER = "x-ainize-delegate";
 /** The longest a node will honour one delegation, however long the owner wrote. */
@@ -45,11 +47,31 @@ export interface Delegation {
     owner: string;
     expires: number;
     signature: string;
+    scheme: SignatureScheme;
 }
-/** Parse `x-ainize-delegate: <owner>:<expires>:<sig>`. Returns null on anything malformed. */
+/**
+ * Parse `x-ainize-delegate: <owner>:<expires>:<sig>[:<scheme>]`. Returns null on anything malformed.
+ *
+ * The scheme is a fourth field rather than something read off the signature's length — 97 bytes for `ain`, 65 for
+ * `eip191` would in fact tell them apart, and that is exactly the inference this must not make. Whoever presents
+ * a signature would then be choosing which rules verify it, and the two rules do not carry the same claim: one
+ * says a person approved a prompt, the other says a key acted alone.
+ *
+ * A header with no fourth field means `ain`, which is what every delegation written before wallets existed is.
+ */
 export declare function parseDelegation(header: string | undefined | null): Delegation | null;
-/** The header an owner's wallet produces once, and every delegated request then carries unchanged. */
-export declare function delegateHeader(d: Delegation): string;
+/**
+ * The header an owner's wallet produces once, and every delegated request then carries unchanged.
+ *
+ * An `ain` delegation is written with three fields, byte for byte what it was before there was a fourth. Nothing
+ * old has to be re-signed, and nothing old starts failing against a node that has learned to read a fourth field.
+ */
+export declare function delegateHeader(d: {
+    owner: string;
+    expires: number;
+    signature: string;
+    scheme?: SignatureScheme;
+}): string;
 /**
  * The address a delegated request acts as, or null.
  *
@@ -61,7 +83,7 @@ export declare function verifyDelegation(header: string | undefined | null, ctx:
     delegate: string;
     now?: number;
     maxMs?: number;
-}, verify: (message: string, signature: string, address: string) => boolean): string | null;
+}, verify: (message: string, signature: string, address: string, scheme: SignatureScheme) => boolean): string | null;
 /**
  * What an operator signs to prove who they are, instead of typing a password.
  *

package/dist/delegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,+EAA+E;AAC/E,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,mFAAmF;AACnF,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE9F;AAED,MAAM,WAAW,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAEjF,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CAQpF;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EACjC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EACrE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,GACvE,MAAM,GAAG,IAAI,CASf;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,QAAa,CAAC"}
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,+EAA+E;AAC/E,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,mFAAmF;AACnF,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE9F;AAED,MAAM,WAAW,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE;AAE1G;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CASpF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,eAAe,CAAA;CAAE,GAAG,MAAM,CAEzH;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EACjC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EACrE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,KAAK,OAAO,GAChG,MAAM,GAAG,IAAI,CASf;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,QAAa,CAAC"}

package/dist/delegation.js

@@ -1,11 +1,3 @@
-/**
- * Delegation — an AIN Wallet owner authorising a browser key, signed once.
- *
- * Its own module, and IMPORTING NOTHING, because the browser needs it. `browser.ts` is the boundary that keeps
- * `node:crypto` and ain-js out of the web bundle, and its rule is that a runtime value added there is how that
- * guarantee gets lost. This file has no imports to lose it with: `verifyDelegation` takes the signature check as a
- * parameter, so the node passes ain-util's and the browser passes noble's, and neither drags the other in.
- */
 /** Header that carries the delegation, beside the ordinary `x-ainize-auth`. */
 export const DELEGATE_HEADER = 'x-ainize-delegate';
 /** The longest a node will honour one delegation, however long the owner wrote. */
@@ -39,22 +31,37 @@ export const DELEGATION_MAX_MS = 24 * 60 * 60_000;
 export function delegateMessage(t) {
     return ['delegate', t.node, t.delegate.toLowerCase(), String(t.expires)].join(':');
 }
-/** Parse `x-ainize-delegate: <owner>:<expires>:<sig>`. Returns null on anything malformed. */
+/**
+ * Parse `x-ainize-delegate: <owner>:<expires>:<sig>[:<scheme>]`. Returns null on anything malformed.
+ *
+ * The scheme is a fourth field rather than something read off the signature's length — 97 bytes for `ain`, 65 for
+ * `eip191` would in fact tell them apart, and that is exactly the inference this must not make. Whoever presents
+ * a signature would then be choosing which rules verify it, and the two rules do not carry the same claim: one
+ * says a person approved a prompt, the other says a key acted alone.
+ *
+ * A header with no fourth field means `ain`, which is what every delegation written before wallets existed is.
+ */
 export function parseDelegation(header) {
     if (!header)
         return null;
     const parts = header.split(':');
-    if (parts.length !== 3)
+    if (parts.length !== 3 && parts.length !== 4)
         return null;
-    const [owner, expStr, signature] = parts;
+    const [owner, expStr, signature, schemeStr] = parts;
     const expires = Number(expStr);
-    if (!/^0x[0-9a-fA-F]{40}$/.test(owner ?? '') || !Number.isFinite(expires) || !signature)
+    const scheme = schemeStr === undefined ? 'ain' : schemeStr === 'ain' || schemeStr === 'eip191' ? schemeStr : null;
+    if (!/^0x[0-9a-fA-F]{40}$/.test(owner ?? '') || !Number.isFinite(expires) || !signature || !scheme)
         return null;
-    return { owner, expires, signature };
+    return { owner, expires, signature, scheme };
 }
-/** The header an owner's wallet produces once, and every delegated request then carries unchanged. */
+/**
+ * The header an owner's wallet produces once, and every delegated request then carries unchanged.
+ *
+ * An `ain` delegation is written with three fields, byte for byte what it was before there was a fourth. Nothing
+ * old has to be re-signed, and nothing old starts failing against a node that has learned to read a fourth field.
+ */
 export function delegateHeader(d) {
-    return `${d.owner}:${d.expires}:${d.signature}`;
+    return d.scheme === 'eip191' ? `${d.owner}:${d.expires}:${d.signature}:eip191` : `${d.owner}:${d.expires}:${d.signature}`;
 }
 /**
  * The address a delegated request acts as, or null.
@@ -74,7 +81,7 @@ export function verifyDelegation(header, ctx, verify) {
     if (d.owner.toLowerCase() === ctx.delegate.toLowerCase())
         return null; // a key delegating to itself proves nothing
     const message = delegateMessage({ node: ctx.node, delegate: ctx.delegate, expires: d.expires });
-    return verify(message, d.signature, d.owner) ? d.owner : null;
+    return verify(message, d.signature, d.owner, d.scheme) ? d.owner : null;
 }
 // ------------------------------------------------------------------ operator sign-in by signature
 /**

package/dist/delegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AACnD,mFAAmF;AACnF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe,CAAC,CAAsD;IACpF,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAID,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,MAAiC;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,cAAc,CAAC,CAAa;IAC1C,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiC,EACjC,GAAqE,EACrE,MAAwE;IAExE,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC,CAAG,4CAA4C;IACrH,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,mGAAmG;AAEnG;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAkC;IACrE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC"}
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAUA,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AACnD,mFAAmF;AACnF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe,CAAC,CAAsD;IACpF,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAID;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,MAAiC;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,MAAM,GAA2B,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1I,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAkF;IAC/G,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AAC5H,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiC,EACjC,GAAqE,EACrE,MAAiG;IAEjG,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC,CAAG,4CAA4C;IACrH,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,mGAAmG;AAEnG;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAkC;IACrE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC"}

package/dist/identity.d.ts

@@ -1,3 +1,4 @@
+import type { SignatureScheme } from './scheme.js';
 export interface Identity {
     privateKey: string;
     publicKey: string;
@@ -7,9 +8,55 @@ export declare function createIdentity(): Identity;
 export declare function identityFromPrivateKey(privHex: string): Identity;
 export declare function signMessage(message: string, privHex: string): string;
 export declare function verifyMessage(message: string, signature: string, address: string): boolean;
+/**
+ * ─── HUMANS SIGN EIP-191, KEYS SIGN AIN ───────────────────────────────────────────────────────────────────
+ *
+ * `verifyMessage` above is the product's universal scheme and it is deliberately NOT widened. It verifies
+ * teach headers, delegations, publish claims, x402 payment proofs, p2p headers and every local-ledger record —
+ * all of them produced by a key this product generated, several of them firing per minute. Making that one
+ * function accept a second signature shape would widen every one of those surfaces at once.
+ *
+ * What a browser wallet gives us is different in kind: a PERSON, present, approving one thing, with a prompt
+ * in front of them. That happens a handful of times — sign-in, claiming a node, approving a device — so it
+ * gets its own verifier and its own call sites.
+ *
+ * The two schemes differ twice over, and both differences are fatal to interop:
+ *
+ *   AIN      keccak256(keccak256( varint(26) ‖ 'AINetwork Signed Message:\n' ‖ varint(str.length) ‖ bytes ))
+ *            wire: 0x ‖ hash(32) ‖ r(32) ‖ s(32) ‖ v(1)   — the digest travels WITH the signature
+ *   EIP-191  keccak256( '\x19Ethereum Signed Message:\n' ‖ byteLength ‖ bytes )
+ *            wire: 0x ‖ r(32) ‖ s(32) ‖ v(1)              — 65 bytes, no embedded digest
+ *
+ * Note the length: AIN counts UTF-16 code units (JS `.length`), EIP-191 counts UTF-8 bytes. For "한글" that is
+ * 2 against 6, so a Korean message hashes differently even before the prefix is considered.
+ *
+ * The ADDRESS is the same in both worlds — same curve, same keccak-of-pubkey derivation — which is the whole
+ * reason this works: a MetaMask account names exactly one AIN address. Measured, not assumed: the same private
+ * key yields 0x00ADEc28… under both `privateToAddress` and Ethereum's rules.
+ */
+/** The EIP-191 personal-message digest MetaMask signs. Byte length, not string length. */
+export declare function hashEip191(message: string): Buffer;
+/**
+ * Did `address` sign `message` with a browser wallet (MetaMask and every EIP-1193 wallet)?
+ *
+ * Rejects anything that is not a bare 65-byte signature, so an AIN signature — which carries its own 32-byte
+ * digest in front and is therefore 97 bytes — cannot be smuggled in here and silently verified under the wrong
+ * rules. `v` is accepted as 27/28 (what wallets send) or 0/1 (what some libraries send).
+ */
+export declare function verifyEip191(message: string, signature: string, address: string): boolean;
+/**
+ * Which scheme produced a signature. The definition lives in `scheme.ts`, which imports nothing, because
+ * `delegation.ts` needs the same name and that file is what keeps node:crypto out of the browser bundle.
+ */
+export type AuthScheme = SignatureScheme;
+/**
+ * Verify a signature under a NAMED scheme.
+ *
+ * The scheme is always stated by the caller and never guessed from the signature's shape. A verifier that
+ * tried both would accept whichever passed, which means an attacker picks the scheme — and the two have
+ * different security properties at the call site (a wallet prompt a human saw, versus a key acting on its own).
+ */
+export declare function verifyAuth(scheme: AuthScheme, message: string, signature: string, address: string): boolean;
 export declare function isAddress(value: string): boolean;
 export declare function checksum(address: string): string;
-/** Operator password hashing (scrypt) for the web console login. */
-export declare function hashPassword(password: string): string;
-export declare function verifyPassword(password: string, stored: string): boolean;
 //# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,cAAc,IAAI,QAAQ,CAKzC;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAKhE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAMxE"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAMnD,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,cAAc,IAAI,QAAQ,CAKzC;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAKhE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAezF;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,eAAe,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3G;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/identity.js

@@ -4,7 +4,7 @@
  * so a node's signature over a ledger record is verifiable by any peer with only the address.
  */
 import { createRequire } from 'node:module';
-import { randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';
+import { randomBytes } from 'node:crypto';
 const require = createRequire(import.meta.url);
 // ain-util is CommonJS
 const ainUtil = require('@ainblockchain/ain-util');
@@ -31,6 +31,73 @@ export function verifyMessage(message, signature, address) {
         return false;
     }
 }
+/**
+ * ─── HUMANS SIGN EIP-191, KEYS SIGN AIN ───────────────────────────────────────────────────────────────────
+ *
+ * `verifyMessage` above is the product's universal scheme and it is deliberately NOT widened. It verifies
+ * teach headers, delegations, publish claims, x402 payment proofs, p2p headers and every local-ledger record —
+ * all of them produced by a key this product generated, several of them firing per minute. Making that one
+ * function accept a second signature shape would widen every one of those surfaces at once.
+ *
+ * What a browser wallet gives us is different in kind: a PERSON, present, approving one thing, with a prompt
+ * in front of them. That happens a handful of times — sign-in, claiming a node, approving a device — so it
+ * gets its own verifier and its own call sites.
+ *
+ * The two schemes differ twice over, and both differences are fatal to interop:
+ *
+ *   AIN      keccak256(keccak256( varint(26) ‖ 'AINetwork Signed Message:\n' ‖ varint(str.length) ‖ bytes ))
+ *            wire: 0x ‖ hash(32) ‖ r(32) ‖ s(32) ‖ v(1)   — the digest travels WITH the signature
+ *   EIP-191  keccak256( '\x19Ethereum Signed Message:\n' ‖ byteLength ‖ bytes )
+ *            wire: 0x ‖ r(32) ‖ s(32) ‖ v(1)              — 65 bytes, no embedded digest
+ *
+ * Note the length: AIN counts UTF-16 code units (JS `.length`), EIP-191 counts UTF-8 bytes. For "한글" that is
+ * 2 against 6, so a Korean message hashes differently even before the prefix is considered.
+ *
+ * The ADDRESS is the same in both worlds — same curve, same keccak-of-pubkey derivation — which is the whole
+ * reason this works: a MetaMask account names exactly one AIN address. Measured, not assumed: the same private
+ * key yields 0x00ADEc28… under both `privateToAddress` and Ethereum's rules.
+ */
+/** The EIP-191 personal-message digest MetaMask signs. Byte length, not string length. */
+export function hashEip191(message) {
+    const bytes = Buffer.from(message, 'utf8');
+    return ainUtil.keccak(Buffer.concat([Buffer.from(`\x19Ethereum Signed Message:\n${bytes.length}`, 'utf8'), bytes]));
+}
+/**
+ * Did `address` sign `message` with a browser wallet (MetaMask and every EIP-1193 wallet)?
+ *
+ * Rejects anything that is not a bare 65-byte signature, so an AIN signature — which carries its own 32-byte
+ * digest in front and is therefore 97 bytes — cannot be smuggled in here and silently verified under the wrong
+ * rules. `v` is accepted as 27/28 (what wallets send) or 0/1 (what some libraries send).
+ */
+export function verifyEip191(message, signature, address) {
+    try {
+        const raw = Buffer.from(signature.replace(/^0x/, ''), 'hex');
+        if (raw.length !== 65)
+            return false;
+        const r = raw.subarray(0, 32);
+        const s = raw.subarray(32, 64);
+        const vRaw = raw[64];
+        const v = vRaw >= 27 ? vRaw : vRaw + 27;
+        if (v !== 27 && v !== 28)
+            return false;
+        const pub = ainUtil.ecRecoverPub(hashEip191(message), r, s, v);
+        const recovered = ainUtil.toChecksumAddress(ainUtil.bufferToHex(ainUtil.pubToAddress(pub.subarray(1))));
+        return recovered.toLowerCase() === address.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify a signature under a NAMED scheme.
+ *
+ * The scheme is always stated by the caller and never guessed from the signature's shape. A verifier that
+ * tried both would accept whichever passed, which means an attacker picks the scheme — and the two have
+ * different security properties at the call site (a wallet prompt a human saw, versus a key acting on its own).
+ */
+export function verifyAuth(scheme, message, signature, address) {
+    return scheme === 'eip191' ? verifyEip191(message, signature, address) : verifyMessage(message, signature, address);
+}
 export function isAddress(value) {
     try {
         return ainUtil.isValidAddress(value);
@@ -42,18 +109,4 @@ export function isAddress(value) {
 export function checksum(address) {
     return ainUtil.toChecksumAddress(address);
 }
-/** Operator password hashing (scrypt) for the web console login. */
-export function hashPassword(password) {
-    const salt = randomBytes(16);
-    const key = scryptSync(password, salt, 32);
-    return `scrypt$${salt.toString('hex')}$${key.toString('hex')}`;
-}
-export function verifyPassword(password, stored) {
-    const [alg, saltHex, keyHex] = stored.split('$');
-    if (alg !== 'scrypt' || !saltHex || !keyHex)
-        return false;
-    const key = scryptSync(password, Buffer.from(saltHex, 'hex'), 32);
-    const expected = Buffer.from(keyHex, 'hex');
-    return key.length === expected.length && timingSafeEqual(key, expected);
-}
 //# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,uBAAuB;AACvB,MAAM,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAA6C,CAAC;AAQ/F,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe;IAC1D,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAe;IAC/E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,uBAAuB;AACvB,MAAM,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAA6C,CAAC;AAQ/F,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe;IAC1D,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAe;IAC/E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAW,CAAC;AAChI,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAe;IAC9E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,OAAO,SAAS,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAAkB,EAAE,OAAe,EAAE,SAAiB,EAAE,OAAe;IAChG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export * from './config-schema.js';
 export * from './events.js';
 export * from './bytes.js';
 export * from './teach-auth.js';
+export * from './scheme.js';
 export * from './delegation.js';
 export * from './ops.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -13,6 +13,7 @@ export * from './config-schema.js';
 export * from './events.js';
 export * from './bytes.js';
 export * from './teach-auth.js';
+export * from './scheme.js';
 export * from './delegation.js';
 export * from './ops.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC"}

package/dist/scheme.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Which rules a signature was made under. One name, in a file that imports nothing, because both sides need it.
+ *
+ * `ain` is `@ainblockchain/ain-util`'s personal-message scheme: keccak256 twice over a length-prefixed message,
+ * with the length counted in UTF-16 code units, and a 97-byte wire form that carries its own digest. Every key
+ * this product generates signs that way — teaching keys, node identities, the CLI.
+ *
+ * `eip191` is what a browser wallet produces for `personal_sign`: keccak256 once over
+ * `\x19Ethereum Signed Message:\n<byte length>`, UTF-8, and a bare 65-byte r‖s‖v. MetaMask signs only this.
+ *
+ * Same curve and the same address from one key, so the two are easy to mistake for interchangeable. They are not:
+ * a signature valid under one verifies under neither the other's rules. And they do not mean the same thing —
+ * `eip191` says a person read a prompt and approved it, `ain` says a key acted on its own — which is why the
+ * scheme travels as a NAME beside the signature and is never inferred from its shape. A verifier that tried both
+ * would let whoever presents a signature choose which of those two claims gets recorded.
+ *
+ * It lives here rather than in `identity.ts` because `delegation.ts` needs it and imports nothing on purpose:
+ * that file is what keeps `node:crypto` and ain-js out of the browser bundle.
+ */
+export type SignatureScheme = 'ain' | 'eip191';
+/** The scheme a header or body means when it names none. Everything written before schemas existed is `ain`. */
+export declare const DEFAULT_SCHEME: SignatureScheme;
+/** Narrow an untrusted string to a scheme, or null. Never defaults: a caller that sent junk did not mean `ain`. */
+export declare function asScheme(value: unknown): SignatureScheme | null;
+//# sourceMappingURL=scheme.d.ts.map

package/dist/scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheme.d.ts","sourceRoot":"","sources":["../src/scheme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE/C,gHAAgH;AAChH,eAAO,MAAM,cAAc,EAAE,eAAuB,CAAC;AAErD,mHAAmH;AACnH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAE/D"}

package/dist/scheme.js

@@ -0,0 +1,7 @@
+/** The scheme a header or body means when it names none. Everything written before schemas existed is `ain`. */
+export const DEFAULT_SCHEME = 'ain';
+/** Narrow an untrusted string to a scheme, or null. Never defaults: a caller that sent junk did not mean `ain`. */
+export function asScheme(value) {
+    return value === 'ain' || value === 'eip191' ? value : null;
+}
+//# sourceMappingURL=scheme.js.map

package/dist/scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheme.js","sourceRoot":"","sources":["../src/scheme.ts"],"names":[],"mappings":"AAqBA,gHAAgH;AAChH,MAAM,CAAC,MAAM,cAAc,GAAoB,KAAK,CAAC;AAErD,mHAAmH;AACnH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ainize/core",
-  "version": "0.2.3",
-  "description": "Ainize core \u2014 knowledge-patch schemas, lineage, verification and ledger (AIN) bindings shared by @ainize/node and @ainize/cli",
+  "version": "0.3.1",
+  "description": "Ainize core — knowledge-patch schemas, lineage, verification and ledger (AIN) bindings shared by @ainize/node and @ainize/cli",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -42,8 +42,9 @@
     "zod": "^4.5.4"
   },
   "devDependencies": {
+    "@noble/secp256k1": "^2.3.0",
     "@types/node": "^24.10.0",
     "tsx": "^4.23.13",
     "typescript": "^5.9.3"
   }
-}
+}