@jterrazz/attestation 0.1.0

package/README.md

@@ -0,0 +1,27 @@
+# @jterrazz/attestation
+
+Cryptographic attestation for articles — an EIP-712 signature over the canonicalized content, anchored to Bitcoin via OpenTimestamps. Prove an article existed, unmodified, at a point in time, signed by its author.
+
+## Entries
+
+| Import                          | Runs in     | Carries                                                                          |
+| ------------------------------- | ----------- | -------------------------------------------------------------------------------- |
+| `@jterrazz/attestation`         | Node        | full surface: canonicalize, EIP-712 schema, create/sign/verify, serialize, audit |
+| `@jterrazz/attestation/browser` | any runtime | verify-only, pure ESM (noble-hashes + viem): `verifyFromUrl`, ENS helpers        |
+| `@jterrazz/attestation/node`    | Node        | OpenTimestamps: `stampDigest`, `upgradeProof`, `verifyOts`                       |
+| `npx attestation` (CLI)         | Node        | `sign`, `verify`, `upgrade`                                                      |
+
+## Flow
+
+1. **Sign** — canonicalize the article body, digest it (SHA-256), build the EIP-712 `AttestationMessage`, sign with the author key → `<article>.attestation.json`.
+2. **Stamp** — `stampDigest` submits the digest to OpenTimestamps calendars → `<article>.ots`.
+3. **Upgrade** — once anchored in a Bitcoin block, `upgradeProof` completes the proof.
+4. **Verify** — anywhere: signature (`verifyAttestation`), timestamp (`verifyOts`), or both from a URL in the browser (`verifyFromUrl`).
+
+## Tests
+
+`npm test` (offline, deterministic). `npm run test:network` opts into the OpenTimestamps-calendar e2e suite.
+
+Reference consumer: [`jterrazz-web`](https://github.com/jterrazz/jterrazz-web) (verify page, proof card, signing scripts).
+
+MIT © [Jean-Baptiste Terrazzoni](https://github.com/jterrazz)

package/bin/attestation

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import('../dist/cli.js');

package/dist/audit.cjs

@@ -0,0 +1,57 @@
+//#region src/core/audit.ts
+/**
+* Suspicious-character audit — runs at SIGN time, never at verify time.
+*
+* Verify must always remain a function of canonicalize() alone, never adding
+* stricter rules. Audit is a separate, mutable layer of advice for the author:
+* "you probably don't want these invisible chars in a published article".
+*/
+const SUSPICIOUS = /* @__PURE__ */ new Map([
+	[8203, "zero-width space"],
+	[8204, "zero-width non-joiner"],
+	[8205, "zero-width joiner"],
+	[8288, "word joiner"],
+	[65279, "zero-width no-break space (interior BOM)"],
+	[8234, "left-to-right embedding"],
+	[8235, "right-to-left embedding"],
+	[8236, "pop directional formatting"],
+	[8237, "left-to-right override"],
+	[8238, "right-to-left override"],
+	[8294, "left-to-right isolate"],
+	[8295, "right-to-left isolate"],
+	[8296, "first strong isolate"],
+	[8297, "pop directional isolate"]
+]);
+function audit(canonical) {
+	const text = new TextDecoder("utf-8", { fatal: true }).decode(canonical);
+	const findings = [];
+	let line = 1;
+	let column = 1;
+	for (const ch of text) {
+		const cp = ch.codePointAt(0);
+		if (cp === void 0) continue;
+		if (cp === 10) {
+			line++;
+			column = 1;
+			continue;
+		}
+		const name = SUSPICIOUS.get(cp);
+		if (name !== void 0) findings.push({
+			codepoint: cp,
+			column,
+			line,
+			name
+		});
+		column++;
+	}
+	return findings;
+}
+//#endregion
+Object.defineProperty(exports, "audit", {
+	enumerable: true,
+	get: function() {
+		return audit;
+	}
+});
+
+//# sourceMappingURL=audit.cjs.map

package/dist/audit.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.cjs","names":[],"sources":["../src/core/audit.ts"],"sourcesContent":["/**\n * Suspicious-character audit — runs at SIGN time, never at verify time.\n *\n * Verify must always remain a function of canonicalize() alone, never adding\n * stricter rules. Audit is a separate, mutable layer of advice for the author:\n * \"you probably don't want these invisible chars in a published article\".\n */\n\nconst SUSPICIOUS: ReadonlyMap<number, string> = new Map([\n    [0x20_0b, 'zero-width space'],\n    [0x200c, 'zero-width non-joiner'],\n    [0x200d, 'zero-width joiner'],\n    [0x20_60, 'word joiner'],\n    [0xfeff, 'zero-width no-break space (interior BOM)'],\n    [0x20_2a, 'left-to-right embedding'],\n    [0x202b, 'right-to-left embedding'],\n    [0x202c, 'pop directional formatting'],\n    [0x202d, 'left-to-right override'],\n    [0x202e, 'right-to-left override'],\n    [0x20_66, 'left-to-right isolate'],\n    [0x20_67, 'right-to-left isolate'],\n    [0x20_68, 'first strong isolate'],\n    [0x20_69, 'pop directional isolate'],\n]);\n\nexport type AuditFinding = {\n    line: number;\n    column: number;\n    codepoint: number;\n    name: string;\n};\n\nexport function audit(canonical: Uint8Array): AuditFinding[] {\n    const text = new TextDecoder('utf-8', { fatal: true }).decode(canonical);\n    const findings: AuditFinding[] = [];\n    let line = 1;\n    let column = 1;\n\n    for (const ch of text) {\n        const cp = ch.codePointAt(0);\n        if (cp === undefined) {\n            continue;\n        }\n        if (cp === 0x0a) {\n            line++;\n            column = 1;\n            continue;\n        }\n        const name = SUSPICIOUS.get(cp);\n        if (name !== undefined) {\n            findings.push({ codepoint: cp, column, line, name });\n        }\n        column++;\n    }\n\n    return findings;\n}\n"],"mappings":";;;;;;;;AAQA,MAAM,6BAA0C,IAAI,IAAI;CACpD,CAAC,MAAS,kBAAkB;CAC5B,CAAC,MAAQ,uBAAuB;CAChC,CAAC,MAAQ,mBAAmB;CAC5B,CAAC,MAAS,aAAa;CACvB,CAAC,OAAQ,0CAA0C;CACnD,CAAC,MAAS,yBAAyB;CACnC,CAAC,MAAQ,yBAAyB;CAClC,CAAC,MAAQ,4BAA4B;CACrC,CAAC,MAAQ,wBAAwB;CACjC,CAAC,MAAQ,wBAAwB;CACjC,CAAC,MAAS,uBAAuB;CACjC,CAAC,MAAS,uBAAuB;CACjC,CAAC,MAAS,sBAAsB;CAChC,CAAC,MAAS,yBAAyB;AACvC,CAAC;AASD,SAAgB,MAAM,WAAuC;CACzD,MAAM,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS;CACvE,MAAM,WAA2B,CAAC;CAClC,IAAI,OAAO;CACX,IAAI,SAAS;CAEb,KAAK,MAAM,MAAM,MAAM;EACnB,MAAM,KAAK,GAAG,YAAY,CAAC;EAC3B,IAAI,OAAO,KAAA,GACP;EAEJ,IAAI,OAAO,IAAM;GACb;GACA,SAAS;GACT;EACJ;EACA,MAAM,OAAO,WAAW,IAAI,EAAE;EAC9B,IAAI,SAAS,KAAA,GACT,SAAS,KAAK;GAAE,WAAW;GAAI;GAAQ;GAAM;EAAK,CAAC;EAEvD;CACJ;CAEA,OAAO;AACX"}

package/dist/audit.js

@@ -0,0 +1,52 @@
+//#region src/core/audit.ts
+/**
+* Suspicious-character audit — runs at SIGN time, never at verify time.
+*
+* Verify must always remain a function of canonicalize() alone, never adding
+* stricter rules. Audit is a separate, mutable layer of advice for the author:
+* "you probably don't want these invisible chars in a published article".
+*/
+const SUSPICIOUS = /* @__PURE__ */ new Map([
+	[8203, "zero-width space"],
+	[8204, "zero-width non-joiner"],
+	[8205, "zero-width joiner"],
+	[8288, "word joiner"],
+	[65279, "zero-width no-break space (interior BOM)"],
+	[8234, "left-to-right embedding"],
+	[8235, "right-to-left embedding"],
+	[8236, "pop directional formatting"],
+	[8237, "left-to-right override"],
+	[8238, "right-to-left override"],
+	[8294, "left-to-right isolate"],
+	[8295, "right-to-left isolate"],
+	[8296, "first strong isolate"],
+	[8297, "pop directional isolate"]
+]);
+function audit(canonical) {
+	const text = new TextDecoder("utf-8", { fatal: true }).decode(canonical);
+	const findings = [];
+	let line = 1;
+	let column = 1;
+	for (const ch of text) {
+		const cp = ch.codePointAt(0);
+		if (cp === void 0) continue;
+		if (cp === 10) {
+			line++;
+			column = 1;
+			continue;
+		}
+		const name = SUSPICIOUS.get(cp);
+		if (name !== void 0) findings.push({
+			codepoint: cp,
+			column,
+			line,
+			name
+		});
+		column++;
+	}
+	return findings;
+}
+//#endregion
+export { audit as t };
+
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","names":[],"sources":["../src/core/audit.ts"],"sourcesContent":["/**\n * Suspicious-character audit — runs at SIGN time, never at verify time.\n *\n * Verify must always remain a function of canonicalize() alone, never adding\n * stricter rules. Audit is a separate, mutable layer of advice for the author:\n * \"you probably don't want these invisible chars in a published article\".\n */\n\nconst SUSPICIOUS: ReadonlyMap<number, string> = new Map([\n    [0x20_0b, 'zero-width space'],\n    [0x200c, 'zero-width non-joiner'],\n    [0x200d, 'zero-width joiner'],\n    [0x20_60, 'word joiner'],\n    [0xfeff, 'zero-width no-break space (interior BOM)'],\n    [0x20_2a, 'left-to-right embedding'],\n    [0x202b, 'right-to-left embedding'],\n    [0x202c, 'pop directional formatting'],\n    [0x202d, 'left-to-right override'],\n    [0x202e, 'right-to-left override'],\n    [0x20_66, 'left-to-right isolate'],\n    [0x20_67, 'right-to-left isolate'],\n    [0x20_68, 'first strong isolate'],\n    [0x20_69, 'pop directional isolate'],\n]);\n\nexport type AuditFinding = {\n    line: number;\n    column: number;\n    codepoint: number;\n    name: string;\n};\n\nexport function audit(canonical: Uint8Array): AuditFinding[] {\n    const text = new TextDecoder('utf-8', { fatal: true }).decode(canonical);\n    const findings: AuditFinding[] = [];\n    let line = 1;\n    let column = 1;\n\n    for (const ch of text) {\n        const cp = ch.codePointAt(0);\n        if (cp === undefined) {\n            continue;\n        }\n        if (cp === 0x0a) {\n            line++;\n            column = 1;\n            continue;\n        }\n        const name = SUSPICIOUS.get(cp);\n        if (name !== undefined) {\n            findings.push({ codepoint: cp, column, line, name });\n        }\n        column++;\n    }\n\n    return findings;\n}\n"],"mappings":";;;;;;;;AAQA,MAAM,6BAA0C,IAAI,IAAI;CACpD,CAAC,MAAS,kBAAkB;CAC5B,CAAC,MAAQ,uBAAuB;CAChC,CAAC,MAAQ,mBAAmB;CAC5B,CAAC,MAAS,aAAa;CACvB,CAAC,OAAQ,0CAA0C;CACnD,CAAC,MAAS,yBAAyB;CACnC,CAAC,MAAQ,yBAAyB;CAClC,CAAC,MAAQ,4BAA4B;CACrC,CAAC,MAAQ,wBAAwB;CACjC,CAAC,MAAQ,wBAAwB;CACjC,CAAC,MAAS,uBAAuB;CACjC,CAAC,MAAS,uBAAuB;CACjC,CAAC,MAAS,sBAAsB;CAChC,CAAC,MAAS,yBAAyB;AACvC,CAAC;AASD,SAAgB,MAAM,WAAuC;CACzD,MAAM,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS;CACvE,MAAM,WAA2B,CAAC;CAClC,IAAI,OAAO;CACX,IAAI,SAAS;CAEb,KAAK,MAAM,MAAM,MAAM;EACnB,MAAM,KAAK,GAAG,YAAY,CAAC;EAC3B,IAAI,OAAO,KAAA,GACP;EAEJ,IAAI,OAAO,IAAM;GACb;GACA,SAAS;GACT;EACJ;EACA,MAAM,OAAO,WAAW,IAAI,EAAE;EAC9B,IAAI,SAAS,KAAA,GACT,SAAS,KAAK;GAAE,WAAW;GAAI;GAAQ;GAAM;EAAK,CAAC;EAEvD;CACJ;CAEA,OAAO;AACX"}

package/dist/browser.cjs

@@ -0,0 +1,183 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_verify = require("./verify.cjs");
+const require_eip712_schema = require("./eip712-schema.cjs");
+let viem = require("viem");
+let viem_chains = require("viem/chains");
+//#region src/browser/ens.ts
+const client = (0, viem.createPublicClient)({
+	chain: viem_chains.mainnet,
+	transport: (0, viem.http)("https://ethereum-rpc.publicnode.com")
+});
+/**
+* Reverse-resolve an Ethereum address to its primary ENS name.
+*
+* Pure display concern — never persisted in the attestation file. The signer
+* lib operates on addresses; this is rendered dynamically by web consumers who
+* want a friendlier label.
+*
+* Returns null on any failure (network, no name set, malformed reply).
+*/
+async function resolveEnsName(address) {
+	try {
+		return await client.getEnsName({ address });
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/browser/verify-from-url.ts
+/**
+* End-to-end verify a published article from its public URL.
+*
+* Pipeline:
+*  1. Resolve the article URL → manifest URL (`{url}/proof.json`)
+*  2. Fetch manifest, then content (md), attestation (json), ots (bytes)
+*  3. Recompute SHA-256 of canonical content, recover EIP-712 signer
+*  4. Optionally verify the OTS proof (skipped in browser by default)
+*
+* The same call works in Node, Edge runtime, and modern browsers because the
+* underlying primitives (canonicalize, sha256, recoverTypedDataAddress) are all
+* platform-agnostic.
+*/
+async function verifyFromUrl(articleUrl, opts = {}) {
+	const fetchFn = opts.fetchFn ?? fetch;
+	const manifestUrl = resolveManifestUrl(articleUrl);
+	let manifest;
+	try {
+		manifest = await fetchJson(fetchFn, manifestUrl);
+	} catch (error) {
+		const details = error.message;
+		return {
+			authorship: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			},
+			date: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			}
+		};
+	}
+	const base = new URL(manifestUrl);
+	let content;
+	let attestationJson;
+	try {
+		[content, attestationJson] = await Promise.all([fetchText(fetchFn, new URL(manifest.content, base).toString()), fetchText(fetchFn, new URL(manifest.attestation, base).toString())]);
+	} catch (error) {
+		const details = error.message;
+		return {
+			authorship: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			},
+			date: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			}
+		};
+	}
+	const attestation = require_verify.parse(attestationJson);
+	const sig = await require_verify.verifyAttestation({
+		attestation,
+		content
+	});
+	if (!sig.ok) return {
+		authorship: {
+			error: sig.error.kind,
+			kind: "failed"
+		},
+		date: {
+			kind: "skipped",
+			reason: "opt-out"
+		}
+	};
+	const authorship = {
+		kind: "verified",
+		signedAt: /* @__PURE__ */ new Date(Number(attestation.claims.publishedAt) * 1e3),
+		signerAddress: sig.signerAddress
+	};
+	if (opts.skipOts) return {
+		authorship,
+		date: {
+			kind: "skipped",
+			reason: "opt-out"
+		}
+	};
+	if (!manifest.otsVerifier) return {
+		authorship,
+		date: {
+			kind: "skipped",
+			reason: "no-ots-file"
+		}
+	};
+	try {
+		const result = await fetchJson(fetchFn, new URL(manifest.otsVerifier, base).toString());
+		if (result.ok) return {
+			authorship,
+			date: {
+				bitcoinTime: new Date(result.bitcoinTime),
+				kind: "verified"
+			}
+		};
+		if (result.reason === "pending-bitcoin") return {
+			authorship,
+			date: { kind: "pending" }
+		};
+		return {
+			authorship,
+			date: {
+				details: result.details,
+				error: result.reason,
+				kind: "failed"
+			}
+		};
+	} catch (error) {
+		return {
+			authorship,
+			date: {
+				details: error.message,
+				error: "fetch",
+				kind: "failed"
+			}
+		};
+	}
+}
+function resolveManifestUrl(articleUrl) {
+	const base = globalThis.location?.origin;
+	const url = new URL(articleUrl, base);
+	if (!url.pathname.endsWith("/")) url.pathname += "/";
+	url.pathname += "proof.json";
+	return url.toString();
+}
+async function fetchJson(fetchFn, url) {
+	const res = await fetchFn(url);
+	if (!res.ok) throw new Error(`GET ${url}: HTTP ${res.status}`);
+	return await res.json();
+}
+async function fetchText(fetchFn, url) {
+	const res = await fetchFn(url);
+	if (!res.ok) throw new Error(`GET ${url}: HTTP ${res.status}`);
+	return res.text();
+}
+//#endregion
+exports.ATTESTATION_DOMAIN_V1 = require_eip712_schema.ATTESTATION_DOMAIN_V1;
+exports.ATTESTATION_PRIMARY_TYPE = require_eip712_schema.ATTESTATION_PRIMARY_TYPE;
+exports.ATTESTATION_TYPES_V1 = require_eip712_schema.ATTESTATION_TYPES_V1;
+exports.InvalidContentError = require_verify.InvalidContentError;
+exports.NO_PRIOR_ATTESTATION = require_eip712_schema.NO_PRIOR_ATTESTATION;
+exports.buildAttestationMessage = require_verify.buildAttestationMessage;
+exports.canonicalize = require_verify.canonicalize;
+exports.fromStored = require_verify.fromStored;
+exports.parse = require_verify.parse;
+exports.resolveEnsName = resolveEnsName;
+exports.sha256Hex = require_verify.sha256Hex;
+exports.stringify = require_verify.stringify;
+exports.toStored = require_verify.toStored;
+exports.verifyAttestation = require_verify.verifyAttestation;
+exports.verifyFromUrl = verifyFromUrl;
+
+//# sourceMappingURL=browser.cjs.map

package/dist/browser.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.cjs","names":["mainnet","parse","verifyAttestation","g"],"sources":["../src/browser/ens.ts","../src/browser/verify-from-url.ts"],"sourcesContent":["import { createPublicClient, http } from 'viem';\nimport { mainnet } from 'viem/chains';\n\n// Default viem transport (cloudflare-eth.com) intermittently fails ENS reverse\n// Lookups (returns null even when a primary name is set). publicnode.com is a\n// CORS-friendly community RPC that resolves correctly.\nconst client = createPublicClient({\n    chain: mainnet,\n    transport: http('https://ethereum-rpc.publicnode.com'),\n});\n\n/**\n * Reverse-resolve an Ethereum address to its primary ENS name.\n *\n * Pure display concern — never persisted in the attestation file. The signer\n * lib operates on addresses; this is rendered dynamically by web consumers who\n * want a friendlier label.\n *\n * Returns null on any failure (network, no name set, malformed reply).\n */\nexport async function resolveEnsName(address: `0x${string}`): Promise<null | string> {\n    try {\n        return await client.getEnsName({ address });\n    } catch {\n        return null;\n    }\n}\n","import { parse } from '../attestation/serialize.js';\nimport { verifyAttestation } from '../attestation/verify.js';\nimport { type AuthorshipState, type DateState, type ProofManifest } from './types.js';\n\nexport type VerifyFromUrlOptions = {\n    /**\n     * Skip Bitcoin/OTS verification entirely. Default false — verifyFromUrl\n     * lazy-loads `javascript-opentimestamps` (~200kB) and validates the proof\n     * against a public Bitcoin block API. Fails open: bundling/polyfill issues\n     * fall back to `skipped` rather than throwing.\n     */\n    skipOts?: boolean;\n    /**\n     * Custom fetch (useful for tests or proxies). Defaults to global fetch.\n     */\n    fetchFn?: typeof fetch;\n};\n\nexport type VerifyFromUrlReport = {\n    authorship: AuthorshipState;\n    date: DateState;\n};\n\n/**\n * End-to-end verify a published article from its public URL.\n *\n * Pipeline:\n *  1. Resolve the article URL → manifest URL (`{url}/proof.json`)\n *  2. Fetch manifest, then content (md), attestation (json), ots (bytes)\n *  3. Recompute SHA-256 of canonical content, recover EIP-712 signer\n *  4. Optionally verify the OTS proof (skipped in browser by default)\n *\n * The same call works in Node, Edge runtime, and modern browsers because the\n * underlying primitives (canonicalize, sha256, recoverTypedDataAddress) are all\n * platform-agnostic.\n */\nexport async function verifyFromUrl(\n    articleUrl: string,\n    opts: VerifyFromUrlOptions = {},\n): Promise<VerifyFromUrlReport> {\n    const fetchFn = opts.fetchFn ?? fetch;\n\n    const manifestUrl = resolveManifestUrl(articleUrl);\n    let manifest: ProofManifest;\n    try {\n        manifest = await fetchJson<ProofManifest>(fetchFn, manifestUrl);\n    } catch (error) {\n        const details = (error as Error).message;\n        return {\n            authorship: { details, error: 'fetch', kind: 'failed' },\n            date: { details, error: 'fetch', kind: 'failed' },\n        };\n    }\n\n    const base = new URL(manifestUrl);\n    let content: string;\n    let attestationJson: string;\n    try {\n        [content, attestationJson] = await Promise.all([\n            fetchText(fetchFn, new URL(manifest.content, base).toString()),\n            fetchText(fetchFn, new URL(manifest.attestation, base).toString()),\n        ]);\n    } catch (error) {\n        const details = (error as Error).message;\n        return {\n            authorship: { details, error: 'fetch', kind: 'failed' },\n            date: { details, error: 'fetch', kind: 'failed' },\n        };\n    }\n\n    const attestation = parse(attestationJson);\n    const sig = await verifyAttestation({ attestation, content });\n\n    if (!sig.ok) {\n        return {\n            authorship: { error: sig.error.kind, kind: 'failed' },\n            date: { kind: 'skipped', reason: 'opt-out' },\n        };\n    }\n\n    const authorship: AuthorshipState = {\n        kind: 'verified',\n        signedAt: new Date(Number(attestation.claims.publishedAt) * 1000),\n        signerAddress: sig.signerAddress,\n    };\n\n    if (opts.skipOts) {\n        return { authorship, date: { kind: 'skipped', reason: 'opt-out' } };\n    }\n\n    // OTS verification needs Node-only deps (fs, crypto) so it runs on the\n    // Server. The manifest may point to a verifier endpoint that returns the\n    // Result as JSON. If absent, browser falls back to \"skipped\".\n    if (!manifest.otsVerifier) {\n        return { authorship, date: { kind: 'skipped', reason: 'no-ots-file' } };\n    }\n\n    try {\n        const verifierUrl = new URL(manifest.otsVerifier, base).toString();\n        const result = await fetchJson<OtsVerifierResponse>(fetchFn, verifierUrl);\n        if (result.ok) {\n            return {\n                authorship,\n                date: { bitcoinTime: new Date(result.bitcoinTime), kind: 'verified' },\n            };\n        }\n        if (result.reason === 'pending-bitcoin') {\n            return { authorship, date: { kind: 'pending' } };\n        }\n        return {\n            authorship,\n            date: { details: result.details, error: result.reason, kind: 'failed' },\n        };\n    } catch (error) {\n        return {\n            authorship,\n            date: {\n                details: (error as Error).message,\n                error: 'fetch',\n                kind: 'failed',\n            },\n        };\n    }\n}\n\ntype OtsVerifierResponse =\n    | {\n          ok: false;\n          reason: 'digest-mismatch' | 'invalid-proof' | 'pending-bitcoin';\n          details?: string;\n      }\n    | { ok: true; bitcoinTime: string };\n\nfunction resolveManifestUrl(articleUrl: string): string {\n    // Accept absolute URLs and relative paths (browser uses location.origin).\n    const g = globalThis as { location?: { origin: string } };\n    const base = g.location?.origin;\n    const url = new URL(articleUrl, base);\n    if (!url.pathname.endsWith('/')) {\n        url.pathname += '/';\n    }\n    url.pathname += 'proof.json';\n    return url.toString();\n}\n\nasync function fetchJson<T>(fetchFn: typeof fetch, url: string): Promise<T> {\n    const res = await fetchFn(url);\n    if (!res.ok) {\n        throw new Error(`GET ${url}: HTTP ${res.status}`);\n    }\n    return (await res.json()) as T;\n}\n\nasync function fetchText(fetchFn: typeof fetch, url: string): Promise<string> {\n    const res = await fetchFn(url);\n    if (!res.ok) {\n        throw new Error(`GET ${url}: HTTP ${res.status}`);\n    }\n    return res.text();\n}\n"],"mappings":";;;;;;AAMA,MAAM,UAAA,GAAA,KAAA,mBAAA,CAA4B;CAC9B,OAAOA,YAAAA;CACP,YAAA,GAAA,KAAA,KAAA,CAAgB,qCAAqC;AACzD,CAAC;;;;;;;;;;AAWD,eAAsB,eAAe,SAAgD;CACjF,IAAI;EACA,OAAO,MAAM,OAAO,WAAW,EAAE,QAAQ,CAAC;CAC9C,QAAQ;EACJ,OAAO;CACX;AACJ;;;;;;;;;;;;;;;;ACUA,eAAsB,cAClB,YACA,OAA6B,CAAC,GACF;CAC5B,MAAM,UAAU,KAAK,WAAW;CAEhC,MAAM,cAAc,mBAAmB,UAAU;CACjD,IAAI;CACJ,IAAI;EACA,WAAW,MAAM,UAAyB,SAAS,WAAW;CAClE,SAAS,OAAO;EACZ,MAAM,UAAW,MAAgB;EACjC,OAAO;GACH,YAAY;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;GACtD,MAAM;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;EACpD;CACJ;CAEA,MAAM,OAAO,IAAI,IAAI,WAAW;CAChC,IAAI;CACJ,IAAI;CACJ,IAAI;EACA,CAAC,SAAS,mBAAmB,MAAM,QAAQ,IAAI,CAC3C,UAAU,SAAS,IAAI,IAAI,SAAS,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,GAC7D,UAAU,SAAS,IAAI,IAAI,SAAS,aAAa,IAAI,CAAC,CAAC,SAAS,CAAC,CACrE,CAAC;CACL,SAAS,OAAO;EACZ,MAAM,UAAW,MAAgB;EACjC,OAAO;GACH,YAAY;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;GACtD,MAAM;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;EACpD;CACJ;CAEA,MAAM,cAAcC,eAAAA,MAAM,eAAe;CACzC,MAAM,MAAM,MAAMC,eAAAA,kBAAkB;EAAE;EAAa;CAAQ,CAAC;CAE5D,IAAI,CAAC,IAAI,IACL,OAAO;EACH,YAAY;GAAE,OAAO,IAAI,MAAM;GAAM,MAAM;EAAS;EACpD,MAAM;GAAE,MAAM;GAAW,QAAQ;EAAU;CAC/C;CAGJ,MAAM,aAA8B;EAChC,MAAM;EACN,0BAAU,IAAI,KAAK,OAAO,YAAY,OAAO,WAAW,IAAI,GAAI;EAChE,eAAe,IAAI;CACvB;CAEA,IAAI,KAAK,SACL,OAAO;EAAE;EAAY,MAAM;GAAE,MAAM;GAAW,QAAQ;EAAU;CAAE;CAMtE,IAAI,CAAC,SAAS,aACV,OAAO;EAAE;EAAY,MAAM;GAAE,MAAM;GAAW,QAAQ;EAAc;CAAE;CAG1E,IAAI;EAEA,MAAM,SAAS,MAAM,UAA+B,SADhC,IAAI,IAAI,SAAS,aAAa,IAAI,CAAC,CAAC,SACe,CAAC;EACxE,IAAI,OAAO,IACP,OAAO;GACH;GACA,MAAM;IAAE,aAAa,IAAI,KAAK,OAAO,WAAW;IAAG,MAAM;GAAW;EACxE;EAEJ,IAAI,OAAO,WAAW,mBAClB,OAAO;GAAE;GAAY,MAAM,EAAE,MAAM,UAAU;EAAE;EAEnD,OAAO;GACH;GACA,MAAM;IAAE,SAAS,OAAO;IAAS,OAAO,OAAO;IAAQ,MAAM;GAAS;EAC1E;CACJ,SAAS,OAAO;EACZ,OAAO;GACH;GACA,MAAM;IACF,SAAU,MAAgB;IAC1B,OAAO;IACP,MAAM;GACV;EACJ;CACJ;AACJ;AAUA,SAAS,mBAAmB,YAA4B;CAGpD,MAAM,OAAOC,WAAE,UAAU;CACzB,MAAM,MAAM,IAAI,IAAI,YAAY,IAAI;CACpC,IAAI,CAAC,IAAI,SAAS,SAAS,GAAG,GAC1B,IAAI,YAAY;CAEpB,IAAI,YAAY;CAChB,OAAO,IAAI,SAAS;AACxB;AAEA,eAAe,UAAa,SAAuB,KAAyB;CACxE,MAAM,MAAM,MAAM,QAAQ,GAAG;CAC7B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,OAAO,IAAI,SAAS,IAAI,QAAQ;CAEpD,OAAQ,MAAM,IAAI,KAAK;AAC3B;AAEA,eAAe,UAAU,SAAuB,KAA8B;CAC1E,MAAM,MAAM,MAAM,QAAQ,GAAG;CAC7B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,OAAO,IAAI,SAAS,IAAI,QAAQ;CAEpD,OAAO,IAAI,KAAK;AACpB"}

package/dist/browser.d.cts

@@ -0,0 +1,111 @@
+import { _ as InvalidContentError, a as stringify, c as buildAttestationMessage, d as SignedAttestation, f as StoredAttestation, g as VerifyResult, h as VerifyOk, i as parse, m as VerifyFail, n as verifyAttestation, o as toStored, p as VerifyError, r as fromStored, s as CreateAttestationInput, t as VerifyInput, v as canonicalize } from "./verify.cjs";
+import { a as ArticleSubject, i as ArticleClaims, n as ATTESTATION_PRIMARY_TYPE, o as AttestationMessage, r as ATTESTATION_TYPES_V1, s as NO_PRIOR_ATTESTATION, t as ATTESTATION_DOMAIN_V1 } from "./eip712-schema.cjs";
+//#region src/core/sha256.d.ts
+/**
+ * SHA-256 of bytes, returned as bare hex (no 0x prefix).
+ *
+ * Uses @noble/hashes — pure JS, sync, audited, runs identically in Node, Bun,
+ * Deno, and every modern browser. This is the only hash primitive used by the
+ * package, so swapping the implementation here is the single point of change.
+ */
+declare function sha256Hex(bytes: Uint8Array): string;
+//#endregion
+//#region src/browser/ens.d.ts
+/**
+ * Reverse-resolve an Ethereum address to its primary ENS name.
+ *
+ * Pure display concern — never persisted in the attestation file. The signer
+ * lib operates on addresses; this is rendered dynamically by web consumers who
+ * want a friendlier label.
+ *
+ * Returns null on any failure (network, no name set, malformed reply).
+ */
+declare function resolveEnsName(address: `0x${string}`): Promise<null | string>;
+//#endregion
+//#region src/browser/types.d.ts
+type ProofManifest = {
+  schemaVersion: number;
+  slug: string;
+  content: string;
+  attestation: string;
+  ots: string;
+  /**
+   * Optional URL of a server-side OTS verifier. The browser cannot validate
+   * OpenTimestamps proofs locally (the lib needs Node `fs` + `crypto`), so
+   * publishers expose this endpoint to delegate the Bitcoin check.
+   *
+   * Returns: { ok: true; bitcoinTime: ISO } | { ok: false; reason; details? }
+   */
+  otsVerifier?: string;
+};
+type AuthorshipState = {
+  kind: 'failed';
+  error: 'fetch' | VerifyError['kind'];
+  details?: string;
+} | {
+  kind: 'fetching';
+} | {
+  kind: 'idle';
+} | {
+  kind: 'verified';
+  signerAddress: `0x${string}`;
+  signerEns?: string;
+  signedAt: Date;
+} | {
+  kind: 'verifying';
+};
+type DateState = {
+  kind: 'failed';
+  error: 'digest-mismatch' | 'fetch' | 'invalid-proof';
+  details?: string;
+} | {
+  kind: 'fetching';
+} | {
+  kind: 'idle';
+} | {
+  kind: 'pending';
+} | {
+  kind: 'skipped';
+  reason: 'browser-runtime' | 'no-ots-file' | 'opt-out';
+} | {
+  kind: 'verified';
+  bitcoinTime: Date;
+} | {
+  kind: 'verifying';
+};
+//#endregion
+//#region src/browser/verify-from-url.d.ts
+type VerifyFromUrlOptions = {
+  /**
+   * Skip Bitcoin/OTS verification entirely. Default false — verifyFromUrl
+   * lazy-loads `javascript-opentimestamps` (~200kB) and validates the proof
+   * against a public Bitcoin block API. Fails open: bundling/polyfill issues
+   * fall back to `skipped` rather than throwing.
+   */
+  skipOts?: boolean;
+  /**
+   * Custom fetch (useful for tests or proxies). Defaults to global fetch.
+   */
+  fetchFn?: typeof fetch;
+};
+type VerifyFromUrlReport = {
+  authorship: AuthorshipState;
+  date: DateState;
+};
+/**
+ * End-to-end verify a published article from its public URL.
+ *
+ * Pipeline:
+ *  1. Resolve the article URL → manifest URL (`{url}/proof.json`)
+ *  2. Fetch manifest, then content (md), attestation (json), ots (bytes)
+ *  3. Recompute SHA-256 of canonical content, recover EIP-712 signer
+ *  4. Optionally verify the OTS proof (skipped in browser by default)
+ *
+ * The same call works in Node, Edge runtime, and modern browsers because the
+ * underlying primitives (canonicalize, sha256, recoverTypedDataAddress) are all
+ * platform-agnostic.
+ */
+declare function verifyFromUrl(articleUrl: string, opts?: VerifyFromUrlOptions): Promise<VerifyFromUrlReport>;
+//#endregion
+export { ATTESTATION_DOMAIN_V1, ATTESTATION_PRIMARY_TYPE, ATTESTATION_TYPES_V1, type ArticleClaims, type ArticleSubject, type AttestationMessage, type AuthorshipState, type CreateAttestationInput, type DateState, InvalidContentError, NO_PRIOR_ATTESTATION, type ProofManifest, type SignedAttestation, type StoredAttestation, type VerifyError, type VerifyFail, type VerifyFromUrlOptions, type VerifyFromUrlReport, type VerifyInput, type VerifyOk, type VerifyResult, buildAttestationMessage, canonicalize, fromStored, parse, resolveEnsName, sha256Hex, stringify, toStored, verifyAttestation, verifyFromUrl };
+//# sourceMappingURL=browser.d.cts.map

package/dist/browser.d.ts

@@ -0,0 +1,111 @@
+import { _ as InvalidContentError, a as stringify, c as buildAttestationMessage, d as SignedAttestation, f as StoredAttestation, g as VerifyResult, h as VerifyOk, i as parse, m as VerifyFail, n as verifyAttestation, o as toStored, p as VerifyError, r as fromStored, s as CreateAttestationInput, t as VerifyInput, v as canonicalize } from "./verify.js";
+import { a as ArticleSubject, i as ArticleClaims, n as ATTESTATION_PRIMARY_TYPE, o as AttestationMessage, r as ATTESTATION_TYPES_V1, s as NO_PRIOR_ATTESTATION, t as ATTESTATION_DOMAIN_V1 } from "./eip712-schema.js";
+//#region src/core/sha256.d.ts
+/**
+ * SHA-256 of bytes, returned as bare hex (no 0x prefix).
+ *
+ * Uses @noble/hashes — pure JS, sync, audited, runs identically in Node, Bun,
+ * Deno, and every modern browser. This is the only hash primitive used by the
+ * package, so swapping the implementation here is the single point of change.
+ */
+declare function sha256Hex(bytes: Uint8Array): string;
+//#endregion
+//#region src/browser/ens.d.ts
+/**
+ * Reverse-resolve an Ethereum address to its primary ENS name.
+ *
+ * Pure display concern — never persisted in the attestation file. The signer
+ * lib operates on addresses; this is rendered dynamically by web consumers who
+ * want a friendlier label.
+ *
+ * Returns null on any failure (network, no name set, malformed reply).
+ */
+declare function resolveEnsName(address: `0x${string}`): Promise<null | string>;
+//#endregion
+//#region src/browser/types.d.ts
+type ProofManifest = {
+  schemaVersion: number;
+  slug: string;
+  content: string;
+  attestation: string;
+  ots: string;
+  /**
+   * Optional URL of a server-side OTS verifier. The browser cannot validate
+   * OpenTimestamps proofs locally (the lib needs Node `fs` + `crypto`), so
+   * publishers expose this endpoint to delegate the Bitcoin check.
+   *
+   * Returns: { ok: true; bitcoinTime: ISO } | { ok: false; reason; details? }
+   */
+  otsVerifier?: string;
+};
+type AuthorshipState = {
+  kind: 'failed';
+  error: 'fetch' | VerifyError['kind'];
+  details?: string;
+} | {
+  kind: 'fetching';
+} | {
+  kind: 'idle';
+} | {
+  kind: 'verified';
+  signerAddress: `0x${string}`;
+  signerEns?: string;
+  signedAt: Date;
+} | {
+  kind: 'verifying';
+};
+type DateState = {
+  kind: 'failed';
+  error: 'digest-mismatch' | 'fetch' | 'invalid-proof';
+  details?: string;
+} | {
+  kind: 'fetching';
+} | {
+  kind: 'idle';
+} | {
+  kind: 'pending';
+} | {
+  kind: 'skipped';
+  reason: 'browser-runtime' | 'no-ots-file' | 'opt-out';
+} | {
+  kind: 'verified';
+  bitcoinTime: Date;
+} | {
+  kind: 'verifying';
+};
+//#endregion
+//#region src/browser/verify-from-url.d.ts
+type VerifyFromUrlOptions = {
+  /**
+   * Skip Bitcoin/OTS verification entirely. Default false — verifyFromUrl
+   * lazy-loads `javascript-opentimestamps` (~200kB) and validates the proof
+   * against a public Bitcoin block API. Fails open: bundling/polyfill issues
+   * fall back to `skipped` rather than throwing.
+   */
+  skipOts?: boolean;
+  /**
+   * Custom fetch (useful for tests or proxies). Defaults to global fetch.
+   */
+  fetchFn?: typeof fetch;
+};
+type VerifyFromUrlReport = {
+  authorship: AuthorshipState;
+  date: DateState;
+};
+/**
+ * End-to-end verify a published article from its public URL.
+ *
+ * Pipeline:
+ *  1. Resolve the article URL → manifest URL (`{url}/proof.json`)
+ *  2. Fetch manifest, then content (md), attestation (json), ots (bytes)
+ *  3. Recompute SHA-256 of canonical content, recover EIP-712 signer
+ *  4. Optionally verify the OTS proof (skipped in browser by default)
+ *
+ * The same call works in Node, Edge runtime, and modern browsers because the
+ * underlying primitives (canonicalize, sha256, recoverTypedDataAddress) are all
+ * platform-agnostic.
+ */
+declare function verifyFromUrl(articleUrl: string, opts?: VerifyFromUrlOptions): Promise<VerifyFromUrlReport>;
+//#endregion
+export { ATTESTATION_DOMAIN_V1, ATTESTATION_PRIMARY_TYPE, ATTESTATION_TYPES_V1, type ArticleClaims, type ArticleSubject, type AttestationMessage, type AuthorshipState, type CreateAttestationInput, type DateState, InvalidContentError, NO_PRIOR_ATTESTATION, type ProofManifest, type SignedAttestation, type StoredAttestation, type VerifyError, type VerifyFail, type VerifyFromUrlOptions, type VerifyFromUrlReport, type VerifyInput, type VerifyOk, type VerifyResult, buildAttestationMessage, canonicalize, fromStored, parse, resolveEnsName, sha256Hex, stringify, toStored, verifyAttestation, verifyFromUrl };
+//# sourceMappingURL=browser.d.ts.map