@jterrazz/attestation 0.1.0

package/dist/browser.js

@@ -0,0 +1,168 @@
+import { a as toStored, d as canonicalize, i as stringify, l as sha256Hex, n as fromStored, o as buildAttestationMessage, r as parse, t as verifyAttestation, u as InvalidContentError } from "./verify.js";
+import { i as NO_PRIOR_ATTESTATION, n as ATTESTATION_PRIMARY_TYPE, r as ATTESTATION_TYPES_V1, t as ATTESTATION_DOMAIN_V1 } from "./eip712-schema.js";
+import { createPublicClient, http } from "viem";
+import { mainnet } from "viem/chains";
+//#region src/browser/ens.ts
+const client = createPublicClient({
+	chain: mainnet,
+	transport: http("https://ethereum-rpc.publicnode.com")
+});
+/**
+* Reverse-resolve an Ethereum address to its primary ENS name.
+*
+* Pure display concern — never persisted in the attestation file. The signer
+* lib operates on addresses; this is rendered dynamically by web consumers who
+* want a friendlier label.
+*
+* Returns null on any failure (network, no name set, malformed reply).
+*/
+async function resolveEnsName(address) {
+	try {
+		return await client.getEnsName({ address });
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/browser/verify-from-url.ts
+/**
+* End-to-end verify a published article from its public URL.
+*
+* Pipeline:
+*  1. Resolve the article URL → manifest URL (`{url}/proof.json`)
+*  2. Fetch manifest, then content (md), attestation (json), ots (bytes)
+*  3. Recompute SHA-256 of canonical content, recover EIP-712 signer
+*  4. Optionally verify the OTS proof (skipped in browser by default)
+*
+* The same call works in Node, Edge runtime, and modern browsers because the
+* underlying primitives (canonicalize, sha256, recoverTypedDataAddress) are all
+* platform-agnostic.
+*/
+async function verifyFromUrl(articleUrl, opts = {}) {
+	const fetchFn = opts.fetchFn ?? fetch;
+	const manifestUrl = resolveManifestUrl(articleUrl);
+	let manifest;
+	try {
+		manifest = await fetchJson(fetchFn, manifestUrl);
+	} catch (error) {
+		const details = error.message;
+		return {
+			authorship: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			},
+			date: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			}
+		};
+	}
+	const base = new URL(manifestUrl);
+	let content;
+	let attestationJson;
+	try {
+		[content, attestationJson] = await Promise.all([fetchText(fetchFn, new URL(manifest.content, base).toString()), fetchText(fetchFn, new URL(manifest.attestation, base).toString())]);
+	} catch (error) {
+		const details = error.message;
+		return {
+			authorship: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			},
+			date: {
+				details,
+				error: "fetch",
+				kind: "failed"
+			}
+		};
+	}
+	const attestation = parse(attestationJson);
+	const sig = await verifyAttestation({
+		attestation,
+		content
+	});
+	if (!sig.ok) return {
+		authorship: {
+			error: sig.error.kind,
+			kind: "failed"
+		},
+		date: {
+			kind: "skipped",
+			reason: "opt-out"
+		}
+	};
+	const authorship = {
+		kind: "verified",
+		signedAt: /* @__PURE__ */ new Date(Number(attestation.claims.publishedAt) * 1e3),
+		signerAddress: sig.signerAddress
+	};
+	if (opts.skipOts) return {
+		authorship,
+		date: {
+			kind: "skipped",
+			reason: "opt-out"
+		}
+	};
+	if (!manifest.otsVerifier) return {
+		authorship,
+		date: {
+			kind: "skipped",
+			reason: "no-ots-file"
+		}
+	};
+	try {
+		const result = await fetchJson(fetchFn, new URL(manifest.otsVerifier, base).toString());
+		if (result.ok) return {
+			authorship,
+			date: {
+				bitcoinTime: new Date(result.bitcoinTime),
+				kind: "verified"
+			}
+		};
+		if (result.reason === "pending-bitcoin") return {
+			authorship,
+			date: { kind: "pending" }
+		};
+		return {
+			authorship,
+			date: {
+				details: result.details,
+				error: result.reason,
+				kind: "failed"
+			}
+		};
+	} catch (error) {
+		return {
+			authorship,
+			date: {
+				details: error.message,
+				error: "fetch",
+				kind: "failed"
+			}
+		};
+	}
+}
+function resolveManifestUrl(articleUrl) {
+	const base = globalThis.location?.origin;
+	const url = new URL(articleUrl, base);
+	if (!url.pathname.endsWith("/")) url.pathname += "/";
+	url.pathname += "proof.json";
+	return url.toString();
+}
+async function fetchJson(fetchFn, url) {
+	const res = await fetchFn(url);
+	if (!res.ok) throw new Error(`GET ${url}: HTTP ${res.status}`);
+	return await res.json();
+}
+async function fetchText(fetchFn, url) {
+	const res = await fetchFn(url);
+	if (!res.ok) throw new Error(`GET ${url}: HTTP ${res.status}`);
+	return res.text();
+}
+//#endregion
+export { ATTESTATION_DOMAIN_V1, ATTESTATION_PRIMARY_TYPE, ATTESTATION_TYPES_V1, InvalidContentError, NO_PRIOR_ATTESTATION, buildAttestationMessage, canonicalize, fromStored, parse, resolveEnsName, sha256Hex, stringify, toStored, verifyAttestation, verifyFromUrl };
+
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","names":["g"],"sources":["../src/browser/ens.ts","../src/browser/verify-from-url.ts"],"sourcesContent":["import { createPublicClient, http } from 'viem';\nimport { mainnet } from 'viem/chains';\n\n// Default viem transport (cloudflare-eth.com) intermittently fails ENS reverse\n// Lookups (returns null even when a primary name is set). publicnode.com is a\n// CORS-friendly community RPC that resolves correctly.\nconst client = createPublicClient({\n    chain: mainnet,\n    transport: http('https://ethereum-rpc.publicnode.com'),\n});\n\n/**\n * Reverse-resolve an Ethereum address to its primary ENS name.\n *\n * Pure display concern — never persisted in the attestation file. The signer\n * lib operates on addresses; this is rendered dynamically by web consumers who\n * want a friendlier label.\n *\n * Returns null on any failure (network, no name set, malformed reply).\n */\nexport async function resolveEnsName(address: `0x${string}`): Promise<null | string> {\n    try {\n        return await client.getEnsName({ address });\n    } catch {\n        return null;\n    }\n}\n","import { parse } from '../attestation/serialize.js';\nimport { verifyAttestation } from '../attestation/verify.js';\nimport { type AuthorshipState, type DateState, type ProofManifest } from './types.js';\n\nexport type VerifyFromUrlOptions = {\n    /**\n     * Skip Bitcoin/OTS verification entirely. Default false — verifyFromUrl\n     * lazy-loads `javascript-opentimestamps` (~200kB) and validates the proof\n     * against a public Bitcoin block API. Fails open: bundling/polyfill issues\n     * fall back to `skipped` rather than throwing.\n     */\n    skipOts?: boolean;\n    /**\n     * Custom fetch (useful for tests or proxies). Defaults to global fetch.\n     */\n    fetchFn?: typeof fetch;\n};\n\nexport type VerifyFromUrlReport = {\n    authorship: AuthorshipState;\n    date: DateState;\n};\n\n/**\n * End-to-end verify a published article from its public URL.\n *\n * Pipeline:\n *  1. Resolve the article URL → manifest URL (`{url}/proof.json`)\n *  2. Fetch manifest, then content (md), attestation (json), ots (bytes)\n *  3. Recompute SHA-256 of canonical content, recover EIP-712 signer\n *  4. Optionally verify the OTS proof (skipped in browser by default)\n *\n * The same call works in Node, Edge runtime, and modern browsers because the\n * underlying primitives (canonicalize, sha256, recoverTypedDataAddress) are all\n * platform-agnostic.\n */\nexport async function verifyFromUrl(\n    articleUrl: string,\n    opts: VerifyFromUrlOptions = {},\n): Promise<VerifyFromUrlReport> {\n    const fetchFn = opts.fetchFn ?? fetch;\n\n    const manifestUrl = resolveManifestUrl(articleUrl);\n    let manifest: ProofManifest;\n    try {\n        manifest = await fetchJson<ProofManifest>(fetchFn, manifestUrl);\n    } catch (error) {\n        const details = (error as Error).message;\n        return {\n            authorship: { details, error: 'fetch', kind: 'failed' },\n            date: { details, error: 'fetch', kind: 'failed' },\n        };\n    }\n\n    const base = new URL(manifestUrl);\n    let content: string;\n    let attestationJson: string;\n    try {\n        [content, attestationJson] = await Promise.all([\n            fetchText(fetchFn, new URL(manifest.content, base).toString()),\n            fetchText(fetchFn, new URL(manifest.attestation, base).toString()),\n        ]);\n    } catch (error) {\n        const details = (error as Error).message;\n        return {\n            authorship: { details, error: 'fetch', kind: 'failed' },\n            date: { details, error: 'fetch', kind: 'failed' },\n        };\n    }\n\n    const attestation = parse(attestationJson);\n    const sig = await verifyAttestation({ attestation, content });\n\n    if (!sig.ok) {\n        return {\n            authorship: { error: sig.error.kind, kind: 'failed' },\n            date: { kind: 'skipped', reason: 'opt-out' },\n        };\n    }\n\n    const authorship: AuthorshipState = {\n        kind: 'verified',\n        signedAt: new Date(Number(attestation.claims.publishedAt) * 1000),\n        signerAddress: sig.signerAddress,\n    };\n\n    if (opts.skipOts) {\n        return { authorship, date: { kind: 'skipped', reason: 'opt-out' } };\n    }\n\n    // OTS verification needs Node-only deps (fs, crypto) so it runs on the\n    // Server. The manifest may point to a verifier endpoint that returns the\n    // Result as JSON. If absent, browser falls back to \"skipped\".\n    if (!manifest.otsVerifier) {\n        return { authorship, date: { kind: 'skipped', reason: 'no-ots-file' } };\n    }\n\n    try {\n        const verifierUrl = new URL(manifest.otsVerifier, base).toString();\n        const result = await fetchJson<OtsVerifierResponse>(fetchFn, verifierUrl);\n        if (result.ok) {\n            return {\n                authorship,\n                date: { bitcoinTime: new Date(result.bitcoinTime), kind: 'verified' },\n            };\n        }\n        if (result.reason === 'pending-bitcoin') {\n            return { authorship, date: { kind: 'pending' } };\n        }\n        return {\n            authorship,\n            date: { details: result.details, error: result.reason, kind: 'failed' },\n        };\n    } catch (error) {\n        return {\n            authorship,\n            date: {\n                details: (error as Error).message,\n                error: 'fetch',\n                kind: 'failed',\n            },\n        };\n    }\n}\n\ntype OtsVerifierResponse =\n    | {\n          ok: false;\n          reason: 'digest-mismatch' | 'invalid-proof' | 'pending-bitcoin';\n          details?: string;\n      }\n    | { ok: true; bitcoinTime: string };\n\nfunction resolveManifestUrl(articleUrl: string): string {\n    // Accept absolute URLs and relative paths (browser uses location.origin).\n    const g = globalThis as { location?: { origin: string } };\n    const base = g.location?.origin;\n    const url = new URL(articleUrl, base);\n    if (!url.pathname.endsWith('/')) {\n        url.pathname += '/';\n    }\n    url.pathname += 'proof.json';\n    return url.toString();\n}\n\nasync function fetchJson<T>(fetchFn: typeof fetch, url: string): Promise<T> {\n    const res = await fetchFn(url);\n    if (!res.ok) {\n        throw new Error(`GET ${url}: HTTP ${res.status}`);\n    }\n    return (await res.json()) as T;\n}\n\nasync function fetchText(fetchFn: typeof fetch, url: string): Promise<string> {\n    const res = await fetchFn(url);\n    if (!res.ok) {\n        throw new Error(`GET ${url}: HTTP ${res.status}`);\n    }\n    return res.text();\n}\n"],"mappings":";;;;;AAMA,MAAM,SAAS,mBAAmB;CAC9B,OAAO;CACP,WAAW,KAAK,qCAAqC;AACzD,CAAC;;;;;;;;;;AAWD,eAAsB,eAAe,SAAgD;CACjF,IAAI;EACA,OAAO,MAAM,OAAO,WAAW,EAAE,QAAQ,CAAC;CAC9C,QAAQ;EACJ,OAAO;CACX;AACJ;;;;;;;;;;;;;;;;ACUA,eAAsB,cAClB,YACA,OAA6B,CAAC,GACF;CAC5B,MAAM,UAAU,KAAK,WAAW;CAEhC,MAAM,cAAc,mBAAmB,UAAU;CACjD,IAAI;CACJ,IAAI;EACA,WAAW,MAAM,UAAyB,SAAS,WAAW;CAClE,SAAS,OAAO;EACZ,MAAM,UAAW,MAAgB;EACjC,OAAO;GACH,YAAY;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;GACtD,MAAM;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;EACpD;CACJ;CAEA,MAAM,OAAO,IAAI,IAAI,WAAW;CAChC,IAAI;CACJ,IAAI;CACJ,IAAI;EACA,CAAC,SAAS,mBAAmB,MAAM,QAAQ,IAAI,CAC3C,UAAU,SAAS,IAAI,IAAI,SAAS,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,GAC7D,UAAU,SAAS,IAAI,IAAI,SAAS,aAAa,IAAI,CAAC,CAAC,SAAS,CAAC,CACrE,CAAC;CACL,SAAS,OAAO;EACZ,MAAM,UAAW,MAAgB;EACjC,OAAO;GACH,YAAY;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;GACtD,MAAM;IAAE;IAAS,OAAO;IAAS,MAAM;GAAS;EACpD;CACJ;CAEA,MAAM,cAAc,MAAM,eAAe;CACzC,MAAM,MAAM,MAAM,kBAAkB;EAAE;EAAa;CAAQ,CAAC;CAE5D,IAAI,CAAC,IAAI,IACL,OAAO;EACH,YAAY;GAAE,OAAO,IAAI,MAAM;GAAM,MAAM;EAAS;EACpD,MAAM;GAAE,MAAM;GAAW,QAAQ;EAAU;CAC/C;CAGJ,MAAM,aAA8B;EAChC,MAAM;EACN,0BAAU,IAAI,KAAK,OAAO,YAAY,OAAO,WAAW,IAAI,GAAI;EAChE,eAAe,IAAI;CACvB;CAEA,IAAI,KAAK,SACL,OAAO;EAAE;EAAY,MAAM;GAAE,MAAM;GAAW,QAAQ;EAAU;CAAE;CAMtE,IAAI,CAAC,SAAS,aACV,OAAO;EAAE;EAAY,MAAM;GAAE,MAAM;GAAW,QAAQ;EAAc;CAAE;CAG1E,IAAI;EAEA,MAAM,SAAS,MAAM,UAA+B,SADhC,IAAI,IAAI,SAAS,aAAa,IAAI,CAAC,CAAC,SACe,CAAC;EACxE,IAAI,OAAO,IACP,OAAO;GACH;GACA,MAAM;IAAE,aAAa,IAAI,KAAK,OAAO,WAAW;IAAG,MAAM;GAAW;EACxE;EAEJ,IAAI,OAAO,WAAW,mBAClB,OAAO;GAAE;GAAY,MAAM,EAAE,MAAM,UAAU;EAAE;EAEnD,OAAO;GACH;GACA,MAAM;IAAE,SAAS,OAAO;IAAS,OAAO,OAAO;IAAQ,MAAM;GAAS;EAC1E;CACJ,SAAS,OAAO;EACZ,OAAO;GACH;GACA,MAAM;IACF,SAAU,MAAgB;IAC1B,OAAO;IACP,MAAM;GACV;EACJ;CACJ;AACJ;AAUA,SAAS,mBAAmB,YAA4B;CAGpD,MAAM,OAAOA,WAAE,UAAU;CACzB,MAAM,MAAM,IAAI,IAAI,YAAY,IAAI;CACpC,IAAI,CAAC,IAAI,SAAS,SAAS,GAAG,GAC1B,IAAI,YAAY;CAEpB,IAAI,YAAY;CAChB,OAAO,IAAI,SAAS;AACxB;AAEA,eAAe,UAAa,SAAuB,KAAyB;CACxE,MAAM,MAAM,MAAM,QAAQ,GAAG;CAC7B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,OAAO,IAAI,SAAS,IAAI,QAAQ;CAEpD,OAAQ,MAAM,IAAI,KAAK;AAC3B;AAEA,eAAe,UAAU,SAAuB,KAA8B;CAC1E,MAAM,MAAM,MAAM,QAAQ,GAAG;CAC7B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,OAAO,IAAI,SAAS,IAAI,QAAQ;CAEpD,OAAO,IAAI,KAAK;AACpB"}

package/dist/cli.cjs

@@ -0,0 +1,284 @@
+const require_sign_flow = require("./sign-flow.cjs");
+const require_verify = require("./verify.cjs");
+const require_audit = require("./audit.cjs");
+let node_util = require("node:util");
+let node_fs_promises = require("node:fs/promises");
+let node_path = require("node:path");
+//#region src/cli/io.ts
+const supportsColor = process.stdout.isTTY === true && !process.env.NO_COLOR;
+const fmt = {
+	bold: (s) => supportsColor ? `\x1b[1m${s}\x1b[0m` : s,
+	dim: (s) => supportsColor ? `\x1b[2m${s}\x1b[0m` : s,
+	fail: (s) => supportsColor ? `\x1b[31m${s}\x1b[0m` : s,
+	info: (s) => supportsColor ? `\x1b[36m${s}\x1b[0m` : s,
+	ok: (s) => supportsColor ? `\x1b[32m${s}\x1b[0m` : s,
+	warn: (s) => supportsColor ? `\x1b[33m${s}\x1b[0m` : s
+};
+function checkmark() {
+	return fmt.ok("✓");
+}
+function crossmark() {
+	return fmt.fail("✗");
+}
+//#endregion
+//#region src/cli/sign.ts
+async function runSign(args) {
+	const content = await (0, node_fs_promises.readFile)(args.file, "utf8");
+	const locale = args.locale ?? deriveLocale(args.file);
+	const publishedAt = args.publishedAt ? new Date(args.publishedAt) : /* @__PURE__ */ new Date();
+	const canonical = require_verify.canonicalize(content);
+	process.stdout.write(`${checkmark()} Canonicalized ${canonical.length} bytes (${locale})\n`);
+	if (!args.skipAudit) {
+		const findings = require_audit.audit(canonical);
+		if (findings.length > 0) {
+			process.stdout.write(`${fmt.warn("!")} ${findings.length} suspicious char(s) found:\n`);
+			for (const f of findings) process.stdout.write(`  line ${f.line}, col ${f.column}: U+${f.codepoint.toString(16).toUpperCase().padStart(4, "0")} (${f.name})\n`);
+			process.stdout.write(`  Pass --skip-audit to sign anyway.\n`);
+			throw new Error("Audit failed: clean up suspicious characters first.");
+		}
+	}
+	const message = require_verify.buildAttestationMessage({
+		content,
+		locale,
+		priorAttestation: args.priorAttestation,
+		publishedAt,
+		revision: args.revision,
+		slug: args.slug,
+		title: args.title
+	});
+	process.stdout.write(`${fmt.info("→")} Content digest: ${message.subject.contentDigest}\n`);
+	process.stdout.write(`${fmt.info("→")} Opening browser to sign with your wallet…\n`);
+	const { signature, signerAddress } = await require_sign_flow.signViaBrowser({ message });
+	const signed = {
+		...message,
+		signature,
+		signerAddress
+	};
+	process.stdout.write(`${checkmark()} Signed by ${fmt.bold(signerAddress)}\n`);
+	const baseName = (0, node_path.basename)(args.file, (0, node_path.extname)(args.file));
+	const dir = (0, node_path.dirname)(args.file);
+	const attestationPath = (0, node_path.join)(dir, `${baseName}.attestation.json`);
+	await (0, node_fs_promises.writeFile)(attestationPath, require_verify.stringify(signed), "utf8");
+	process.stdout.write(`${checkmark()} Wrote ${attestationPath}\n`);
+	if (!args.skipStamp) {
+		process.stdout.write(`${fmt.info("→")} Submitting to OpenTimestamps calendars…\n`);
+		const otsBytes = await require_sign_flow.stampDigest(hexToBytes$1(message.subject.contentDigest));
+		const otsPath = (0, node_path.join)(dir, `${baseName}.ots`);
+		await (0, node_fs_promises.writeFile)(otsPath, Buffer.from(otsBytes));
+		process.stdout.write(`${checkmark()} Wrote ${otsPath} (${otsBytes.length} bytes, calendar-only)\n`);
+		process.stdout.write(`  ${fmt.dim("Run `attestation upgrade` in ~24h to anchor in Bitcoin.")}\n`);
+	}
+}
+function deriveLocale(file) {
+	const name = (0, node_path.basename)(file, (0, node_path.extname)(file));
+	if (/^[a-z]{2}$/.test(name)) return name;
+	throw new Error(`Cannot derive locale from filename "${(0, node_path.basename)(file)}". Pass --locale explicitly.`);
+}
+function hexToBytes$1(hex) {
+	const stripped = hex.slice(2);
+	const out = new Uint8Array(stripped.length / 2);
+	for (let i = 0; i < out.length; i++) out[i] = parseInt(stripped.slice(i * 2, i * 2 + 2), 16);
+	return out;
+}
+//#endregion
+//#region src/cli/upgrade.ts
+async function runUpgrade(args) {
+	if (args.files.length === 0) throw new Error("No .ots files provided.");
+	for (const path of args.files) {
+		process.stdout.write(`${fmt.info("→")} ${path}\n`);
+		const before = await (0, node_fs_promises.readFile)(path);
+		const { bytes, upgraded } = await require_sign_flow.upgradeProof(new Uint8Array(before));
+		if (upgraded) {
+			await (0, node_fs_promises.writeFile)(path, Buffer.from(bytes));
+			process.stdout.write(`  ${checkmark()} Upgraded to Bitcoin attestation (${bytes.length} bytes)\n`);
+		} else process.stdout.write(`  ${fmt.dim("· No new attestation available yet, leaving file untouched.")}\n`);
+	}
+}
+//#endregion
+//#region src/cli/verify.ts
+async function runVerify(args) {
+	const sources = await loadSources(args);
+	const attestation = require_verify.parse(sources.attestationJson);
+	const sigResult = await require_verify.verifyAttestation({
+		attestation,
+		content: sources.content
+	});
+	if (!sigResult.ok) {
+		printSignatureFailure(sigResult.error);
+		return false;
+	}
+	process.stdout.write(`${checkmark()} Content digest matches signature\n`);
+	process.stdout.write(`${checkmark()} Signature valid — signed by ${fmt.bold(sigResult.signerAddress)}\n`);
+	if (args.skipOts || sources.otsBytes === null) {
+		process.stdout.write(`${fmt.dim("· OTS verification skipped")}\n`);
+		return true;
+	}
+	const otsResult = await require_sign_flow.verifyOts(hexToBytes(attestation.subject.contentDigest), sources.otsBytes);
+	if (!otsResult.ok) {
+		process.stdout.write(`${crossmark()} OTS: ${otsResult.reason}`);
+		if (otsResult.details) process.stdout.write(` — ${otsResult.details}`);
+		process.stdout.write(`\n`);
+		return otsResult.reason === "pending-bitcoin";
+	}
+	process.stdout.write(`${checkmark()} Bitcoin timestamp confirmed at ${otsResult.bitcoinBlockTime.toISOString()}\n`);
+	return true;
+}
+async function loadSources(args) {
+	if (/^https?:\/\//.test(args.target)) return loadFromUrl(args.target);
+	return loadFromFile(args.target);
+}
+async function loadFromFile(filePath) {
+	const content = await (0, node_fs_promises.readFile)(filePath, "utf8");
+	const dir = (0, node_path.dirname)(filePath);
+	const base = (0, node_path.basename)(filePath, (0, node_path.extname)(filePath));
+	const attestationJson = await (0, node_fs_promises.readFile)((0, node_path.join)(dir, `${base}.attestation.json`), "utf8");
+	let otsBytes = null;
+	try {
+		const buf = await (0, node_fs_promises.readFile)((0, node_path.join)(dir, `${base}.ots`));
+		otsBytes = new Uint8Array(buf);
+	} catch {
+		otsBytes = null;
+	}
+	return {
+		attestationJson,
+		content,
+		otsBytes
+	};
+}
+async function loadFromUrl(url) {
+	const proofManifestUrl = await resolveManifestUrl(url);
+	const manifest = await fetchJson(proofManifestUrl);
+	const base = new URL(proofManifestUrl);
+	const [content, attestationJson, otsBuf] = await Promise.all([
+		fetchText(new URL(manifest.content, base).toString()),
+		fetchText(new URL(manifest.attestation, base).toString()),
+		fetchBytes(new URL(manifest.ots, base).toString()).catch(() => null)
+	]);
+	return {
+		attestationJson,
+		content,
+		otsBytes: otsBuf
+	};
+}
+async function resolveManifestUrl(articleUrl) {
+	const url = new URL(articleUrl);
+	if (!url.pathname.endsWith("/")) url.pathname += "/";
+	url.pathname += "proof.json";
+	return url.toString();
+}
+async function fetchJson(url) {
+	const res = await fetch(url);
+	if (!res.ok) throw new Error(`Fetch ${url} failed: HTTP ${res.status}`);
+	return await res.json();
+}
+async function fetchText(url) {
+	const res = await fetch(url);
+	if (!res.ok) throw new Error(`Fetch ${url} failed: HTTP ${res.status}`);
+	return res.text();
+}
+async function fetchBytes(url) {
+	const res = await fetch(url);
+	if (!res.ok) throw new Error(`Fetch ${url} failed: HTTP ${res.status}`);
+	return new Uint8Array(await res.arrayBuffer());
+}
+function printSignatureFailure(error) {
+	process.stdout.write(`${crossmark()} ${fmt.fail("Verification failed")}: ${error.kind}\n`);
+	for (const [k, v] of Object.entries(error)) {
+		if (k === "kind") continue;
+		process.stdout.write(`  ${k}: ${String(v)}\n`);
+	}
+}
+function hexToBytes(hex) {
+	const stripped = hex.slice(2);
+	const out = new Uint8Array(stripped.length / 2);
+	for (let i = 0; i < out.length; i++) out[i] = parseInt(stripped.slice(i * 2, i * 2 + 2), 16);
+	return out;
+}
+//#endregion
+//#region src/cli/index.ts
+const HELP = `${fmt.bold("attestation")} — sign articles with EIP-712 + Bitcoin (OpenTimestamps).
+
+Usage:
+  attestation sign <file> --title <t> --slug <s> [--published-at <iso>]
+  attestation verify <url|file> [--skip-ots]
+  attestation upgrade <ots-file> [<ots-file> …]
+
+Run \`attestation <command> --help\` for command-specific options.
+`;
+async function runCli(argv) {
+	const [command, ...rest] = argv;
+	if (command === void 0 || command === "-h" || command === "--help" || command === "help") {
+		process.stdout.write(HELP);
+		return 0;
+	}
+	try {
+		if (command === "sign") return await dispatchSign(rest);
+		if (command === "verify") return await dispatchVerify(rest);
+		if (command === "upgrade") return await dispatchUpgrade(rest);
+		process.stderr.write(`Unknown command: ${command}\n${HELP}`);
+		return 2;
+	} catch (error) {
+		process.stderr.write(`${fmt.fail("Error:")} ${error.message}\n`);
+		return 1;
+	}
+}
+async function dispatchSign(argv) {
+	const { positionals, values } = (0, node_util.parseArgs)({
+		allowPositionals: true,
+		args: argv,
+		options: {
+			locale: { type: "string" },
+			"prior-attestation": { type: "string" },
+			"published-at": { type: "string" },
+			revision: { type: "string" },
+			"skip-audit": { type: "boolean" },
+			"skip-stamp": { type: "boolean" },
+			slug: { type: "string" },
+			title: { type: "string" }
+		}
+	});
+	const file = positionals[0];
+	if (!file) throw new Error("Missing required <file> argument.");
+	if (!values.title) throw new Error("Missing required --title.");
+	if (!values.slug) throw new Error("Missing required --slug.");
+	await runSign({
+		file,
+		locale: values.locale,
+		priorAttestation: values["prior-attestation"],
+		publishedAt: values["published-at"],
+		revision: values.revision ? Number(values.revision) : void 0,
+		skipAudit: values["skip-audit"],
+		skipStamp: values["skip-stamp"],
+		slug: values.slug,
+		title: values.title
+	});
+	return 0;
+}
+async function dispatchVerify(argv) {
+	const { positionals, values } = (0, node_util.parseArgs)({
+		allowPositionals: true,
+		args: argv,
+		options: { "skip-ots": { type: "boolean" } }
+	});
+	const target = positionals[0];
+	if (!target) throw new Error("Missing required <url|file> argument.");
+	return await runVerify({
+		skipOts: values["skip-ots"],
+		target
+	}) ? 0 : 1;
+}
+async function dispatchUpgrade(argv) {
+	const { positionals } = (0, node_util.parseArgs)({
+		allowPositionals: true,
+		args: argv,
+		options: {}
+	});
+	await runUpgrade({ files: positionals });
+	return 0;
+}
+//#endregion
+//#region src/cli.ts
+runCli(process.argv.slice(2)).then((code) => process.exit(code));
+//#endregion
+
+//# sourceMappingURL=cli.cjs.map

package/dist/cli.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.cjs","names":["canonicalize","audit","buildAttestationMessage","signViaBrowser","stringify","stampDigest","hexToBytes","upgradeProof","parse","verifyAttestation","verifyOts"],"sources":["../src/cli/io.ts","../src/cli/sign.ts","../src/cli/upgrade.ts","../src/cli/verify.ts","../src/cli/index.ts","../src/cli.ts"],"sourcesContent":["/* ANSI helpers — kept tiny so we don't pull in chalk. */\n\nconst supportsColor = process.stdout.isTTY === true && !process.env.NO_COLOR;\n\nexport const fmt = {\n    bold: (s: string) => (supportsColor ? `\\x1b[1m${s}\\x1b[0m` : s),\n    dim: (s: string) => (supportsColor ? `\\x1b[2m${s}\\x1b[0m` : s),\n    fail: (s: string) => (supportsColor ? `\\x1b[31m${s}\\x1b[0m` : s),\n    info: (s: string) => (supportsColor ? `\\x1b[36m${s}\\x1b[0m` : s),\n    ok: (s: string) => (supportsColor ? `\\x1b[32m${s}\\x1b[0m` : s),\n    warn: (s: string) => (supportsColor ? `\\x1b[33m${s}\\x1b[0m` : s),\n};\n\nexport function checkmark(): string {\n    return fmt.ok('✓');\n}\n\nexport function crossmark(): string {\n    return fmt.fail('✗');\n}\n","import { readFile, writeFile } from 'node:fs/promises';\nimport { basename, dirname, extname, join } from 'node:path';\n\nimport { buildAttestationMessage } from '../attestation/create.js';\nimport { stringify } from '../attestation/serialize.js';\nimport { type SignedAttestation } from '../attestation/types.js';\nimport { audit } from '../core/audit.js';\nimport { canonicalize } from '../core/canonicalize.js';\nimport { signViaBrowser } from '../eth/sign-flow.js';\nimport { stampDigest } from '../ots/stamp.js';\nimport { checkmark, fmt } from './io.js';\n\nexport type SignArgs = {\n    file: string;\n    title: string;\n    slug: string;\n    locale?: string;\n    publishedAt?: string;\n    revision?: number;\n    priorAttestation?: `0x${string}`;\n    skipStamp?: boolean;\n    skipAudit?: boolean;\n};\n\nexport async function runSign(args: SignArgs): Promise<void> {\n    const content = await readFile(args.file, 'utf8');\n    const locale = args.locale ?? deriveLocale(args.file);\n    const publishedAt = args.publishedAt ? new Date(args.publishedAt) : new Date();\n\n    const canonical = canonicalize(content);\n    process.stdout.write(`${checkmark()} Canonicalized ${canonical.length} bytes (${locale})\\n`);\n\n    if (!args.skipAudit) {\n        const findings = audit(canonical);\n        if (findings.length > 0) {\n            process.stdout.write(`${fmt.warn('!')} ${findings.length} suspicious char(s) found:\\n`);\n            for (const f of findings) {\n                process.stdout.write(\n                    `  line ${f.line}, col ${f.column}: U+${f.codepoint\n                        .toString(16)\n                        .toUpperCase()\n                        .padStart(4, '0')} (${f.name})\\n`,\n                );\n            }\n            process.stdout.write(`  Pass --skip-audit to sign anyway.\\n`);\n            throw new Error('Audit failed: clean up suspicious characters first.');\n        }\n    }\n\n    const message = buildAttestationMessage({\n        content,\n        locale,\n        priorAttestation: args.priorAttestation,\n        publishedAt,\n        revision: args.revision,\n        slug: args.slug,\n        title: args.title,\n    });\n\n    process.stdout.write(`${fmt.info('→')} Content digest: ${message.subject.contentDigest}\\n`);\n    process.stdout.write(`${fmt.info('→')} Opening browser to sign with your wallet…\\n`);\n\n    const { signature, signerAddress } = await signViaBrowser({ message });\n    const signed: SignedAttestation = { ...message, signature, signerAddress };\n\n    process.stdout.write(`${checkmark()} Signed by ${fmt.bold(signerAddress)}\\n`);\n\n    const baseName = basename(args.file, extname(args.file));\n    const dir = dirname(args.file);\n    const attestationPath = join(dir, `${baseName}.attestation.json`);\n    await writeFile(attestationPath, stringify(signed), 'utf8');\n    process.stdout.write(`${checkmark()} Wrote ${attestationPath}\\n`);\n\n    if (!args.skipStamp) {\n        process.stdout.write(`${fmt.info('→')} Submitting to OpenTimestamps calendars…\\n`);\n        const digest = hexToBytes(message.subject.contentDigest);\n        const otsBytes = await stampDigest(digest);\n        const otsPath = join(dir, `${baseName}.ots`);\n        await writeFile(otsPath, Buffer.from(otsBytes));\n        process.stdout.write(\n            `${checkmark()} Wrote ${otsPath} (${otsBytes.length} bytes, calendar-only)\\n`,\n        );\n        process.stdout.write(\n            `  ${fmt.dim('Run `attestation upgrade` in ~24h to anchor in Bitcoin.')}\\n`,\n        );\n    }\n}\n\nfunction deriveLocale(file: string): string {\n    const name = basename(file, extname(file));\n    if (/^[a-z]{2}$/.test(name)) {\n        return name;\n    }\n    throw new Error(\n        `Cannot derive locale from filename \"${basename(file)}\". Pass --locale explicitly.`,\n    );\n}\n\nfunction hexToBytes(hex: `0x${string}`): Uint8Array {\n    const stripped = hex.slice(2);\n    const out = new Uint8Array(stripped.length / 2);\n    for (let i = 0; i < out.length; i++) {\n        out[i] = parseInt(stripped.slice(i * 2, i * 2 + 2), 16);\n    }\n    return out;\n}\n","import { readFile, writeFile } from 'node:fs/promises';\n\nimport { upgradeProof } from '../ots/stamp.js';\nimport { checkmark, fmt } from './io.js';\n\nexport type UpgradeArgs = {\n    files: string[];\n};\n\nexport async function runUpgrade(args: UpgradeArgs): Promise<void> {\n    if (args.files.length === 0) {\n        throw new Error('No .ots files provided.');\n    }\n\n    for (const path of args.files) {\n        process.stdout.write(`${fmt.info('→')} ${path}\\n`);\n        const before = await readFile(path);\n        const { bytes, upgraded } = await upgradeProof(new Uint8Array(before));\n\n        if (upgraded) {\n            await writeFile(path, Buffer.from(bytes));\n            process.stdout.write(\n                `  ${checkmark()} Upgraded to Bitcoin attestation (${bytes.length} bytes)\\n`,\n            );\n        } else {\n            process.stdout.write(\n                `  ${fmt.dim('· No new attestation available yet, leaving file untouched.')}\\n`,\n            );\n        }\n    }\n}\n","import { readFile } from 'node:fs/promises';\nimport { basename, dirname, extname, join } from 'node:path';\n\nimport { parse } from '../attestation/serialize.js';\nimport { verifyAttestation } from '../attestation/verify.js';\nimport { verifyOts } from '../ots/verify.js';\nimport { checkmark, crossmark, fmt } from './io.js';\n\nexport type VerifyArgs = {\n    /** A URL to an article, or a path to a local markdown file. */\n    target: string;\n    /** Skip OTS Bitcoin verification (signature-only). */\n    skipOts?: boolean;\n};\n\ntype Sources = {\n    content: string;\n    attestationJson: string;\n    otsBytes: null | Uint8Array;\n};\n\nexport async function runVerify(args: VerifyArgs): Promise<boolean> {\n    const sources = await loadSources(args);\n\n    const attestation = parse(sources.attestationJson);\n    const sigResult = await verifyAttestation({ attestation, content: sources.content });\n\n    if (!sigResult.ok) {\n        printSignatureFailure(sigResult.error);\n        return false;\n    }\n\n    process.stdout.write(`${checkmark()} Content digest matches signature\\n`);\n    process.stdout.write(\n        `${checkmark()} Signature valid — signed by ${fmt.bold(sigResult.signerAddress)}\\n`,\n    );\n\n    if (args.skipOts || sources.otsBytes === null) {\n        process.stdout.write(`${fmt.dim('· OTS verification skipped')}\\n`);\n        return true;\n    }\n\n    const digest = hexToBytes(attestation.subject.contentDigest);\n    const otsResult = await verifyOts(digest, sources.otsBytes);\n\n    if (!otsResult.ok) {\n        process.stdout.write(`${crossmark()} OTS: ${otsResult.reason}`);\n        if (otsResult.details) {\n            process.stdout.write(` — ${otsResult.details}`);\n        }\n        process.stdout.write(`\\n`);\n        return otsResult.reason === 'pending-bitcoin'; // Pending is not a hard fail\n    }\n\n    process.stdout.write(\n        `${checkmark()} Bitcoin timestamp confirmed at ${otsResult.bitcoinBlockTime.toISOString()}\\n`,\n    );\n    return true;\n}\n\nasync function loadSources(args: VerifyArgs): Promise<Sources> {\n    if (/^https?:\\/\\//.test(args.target)) {\n        return loadFromUrl(args.target);\n    }\n    return loadFromFile(args.target);\n}\n\nasync function loadFromFile(filePath: string): Promise<Sources> {\n    const content = await readFile(filePath, 'utf8');\n    const dir = dirname(filePath);\n    const base = basename(filePath, extname(filePath));\n    const attestationJson = await readFile(join(dir, `${base}.attestation.json`), 'utf8');\n    let otsBytes: null | Uint8Array = null;\n    try {\n        const buf = await readFile(join(dir, `${base}.ots`));\n        otsBytes = new Uint8Array(buf);\n    } catch {\n        otsBytes = null;\n    }\n    return { attestationJson, content, otsBytes };\n}\n\nasync function loadFromUrl(url: string): Promise<Sources> {\n    const proofManifestUrl = await resolveManifestUrl(url);\n    const manifest = await fetchJson<ProofManifest>(proofManifestUrl);\n\n    const base = new URL(proofManifestUrl);\n    const [content, attestationJson, otsBuf] = await Promise.all([\n        fetchText(new URL(manifest.content, base).toString()),\n        fetchText(new URL(manifest.attestation, base).toString()),\n        fetchBytes(new URL(manifest.ots, base).toString()).catch(() => null),\n    ]);\n    return { attestationJson, content, otsBytes: otsBuf };\n}\n\ntype ProofManifest = {\n    schemaVersion: number;\n    slug: string;\n    content: string;\n    attestation: string;\n    ots: string;\n};\n\nasync function resolveManifestUrl(articleUrl: string): Promise<string> {\n    // Convention: append /proof.json to the article URL (trailing slash tolerated).\n    const url = new URL(articleUrl);\n    if (!url.pathname.endsWith('/')) {\n        url.pathname += '/';\n    }\n    url.pathname += 'proof.json';\n    return url.toString();\n}\n\nasync function fetchJson<T>(url: string): Promise<T> {\n    const res = await fetch(url);\n    if (!res.ok) {\n        throw new Error(`Fetch ${url} failed: HTTP ${res.status}`);\n    }\n    return (await res.json()) as T;\n}\n\nasync function fetchText(url: string): Promise<string> {\n    const res = await fetch(url);\n    if (!res.ok) {\n        throw new Error(`Fetch ${url} failed: HTTP ${res.status}`);\n    }\n    return res.text();\n}\n\nasync function fetchBytes(url: string): Promise<Uint8Array> {\n    const res = await fetch(url);\n    if (!res.ok) {\n        throw new Error(`Fetch ${url} failed: HTTP ${res.status}`);\n    }\n    return new Uint8Array(await res.arrayBuffer());\n}\n\nfunction printSignatureFailure(error: Record<string, unknown> & { kind: string }): void {\n    process.stdout.write(`${crossmark()} ${fmt.fail('Verification failed')}: ${error.kind}\\n`);\n    for (const [k, v] of Object.entries(error)) {\n        if (k === 'kind') {\n            continue;\n        }\n        process.stdout.write(`  ${k}: ${String(v)}\\n`);\n    }\n}\n\nfunction hexToBytes(hex: `0x${string}`): Uint8Array {\n    const stripped = hex.slice(2);\n    const out = new Uint8Array(stripped.length / 2);\n    for (let i = 0; i < out.length; i++) {\n        out[i] = parseInt(stripped.slice(i * 2, i * 2 + 2), 16);\n    }\n    return out;\n}\n","import { parseArgs } from 'node:util';\n\nimport { fmt } from './io.js';\nimport { runSign } from './sign.js';\nimport { runUpgrade } from './upgrade.js';\nimport { runVerify } from './verify.js';\n\nconst HELP = `${fmt.bold('attestation')} — sign articles with EIP-712 + Bitcoin (OpenTimestamps).\n\nUsage:\n  attestation sign <file> --title <t> --slug <s> [--published-at <iso>]\n  attestation verify <url|file> [--skip-ots]\n  attestation upgrade <ots-file> [<ots-file> …]\n\nRun \\`attestation <command> --help\\` for command-specific options.\n`;\n\nexport async function runCli(argv: string[]): Promise<number> {\n    const [command, ...rest] = argv;\n\n    if (command === undefined || command === '-h' || command === '--help' || command === 'help') {\n        process.stdout.write(HELP);\n        return 0;\n    }\n\n    try {\n        if (command === 'sign') {\n            return await dispatchSign(rest);\n        }\n        if (command === 'verify') {\n            return await dispatchVerify(rest);\n        }\n        if (command === 'upgrade') {\n            return await dispatchUpgrade(rest);\n        }\n        process.stderr.write(`Unknown command: ${command}\\n${HELP}`);\n        return 2;\n    } catch (error) {\n        process.stderr.write(`${fmt.fail('Error:')} ${(error as Error).message}\\n`);\n        return 1;\n    }\n}\n\nasync function dispatchSign(argv: string[]): Promise<number> {\n    const { positionals, values } = parseArgs({\n        allowPositionals: true,\n        args: argv,\n        options: {\n            locale: { type: 'string' },\n            'prior-attestation': { type: 'string' },\n            'published-at': { type: 'string' },\n            revision: { type: 'string' },\n            'skip-audit': { type: 'boolean' },\n            'skip-stamp': { type: 'boolean' },\n            slug: { type: 'string' },\n            title: { type: 'string' },\n        },\n    });\n\n    const file = positionals[0];\n    if (!file) {\n        throw new Error('Missing required <file> argument.');\n    }\n    if (!values.title) {\n        throw new Error('Missing required --title.');\n    }\n    if (!values.slug) {\n        throw new Error('Missing required --slug.');\n    }\n\n    await runSign({\n        file,\n        locale: values.locale,\n        priorAttestation: values['prior-attestation'] as `0x${string}` | undefined,\n        publishedAt: values['published-at'],\n        revision: values.revision ? Number(values.revision) : undefined,\n        skipAudit: values['skip-audit'],\n        skipStamp: values['skip-stamp'],\n        slug: values.slug,\n        title: values.title,\n    });\n    return 0;\n}\n\nasync function dispatchVerify(argv: string[]): Promise<number> {\n    const { positionals, values } = parseArgs({\n        allowPositionals: true,\n        args: argv,\n        options: {\n            'skip-ots': { type: 'boolean' },\n        },\n    });\n\n    const target = positionals[0];\n    if (!target) {\n        throw new Error('Missing required <url|file> argument.');\n    }\n\n    const ok = await runVerify({ skipOts: values['skip-ots'], target });\n    return ok ? 0 : 1;\n}\n\nasync function dispatchUpgrade(argv: string[]): Promise<number> {\n    const { positionals } = parseArgs({ allowPositionals: true, args: argv, options: {} });\n    await runUpgrade({ files: positionals });\n    return 0;\n}\n","import { runCli } from './cli/index.js';\n\nvoid runCli(process.argv.slice(2)).then((code) => process.exit(code));\n"],"mappings":";;;;;;;AAEA,MAAM,gBAAgB,QAAQ,OAAO,UAAU,QAAQ,CAAC,QAAQ,IAAI;AAEpE,MAAa,MAAM;CACf,OAAO,MAAe,gBAAgB,UAAU,EAAE,WAAW;CAC7D,MAAM,MAAe,gBAAgB,UAAU,EAAE,WAAW;CAC5D,OAAO,MAAe,gBAAgB,WAAW,EAAE,WAAW;CAC9D,OAAO,MAAe,gBAAgB,WAAW,EAAE,WAAW;CAC9D,KAAK,MAAe,gBAAgB,WAAW,EAAE,WAAW;CAC5D,OAAO,MAAe,gBAAgB,WAAW,EAAE,WAAW;AAClE;AAEA,SAAgB,YAAoB;CAChC,OAAO,IAAI,GAAG,GAAG;AACrB;AAEA,SAAgB,YAAoB;CAChC,OAAO,IAAI,KAAK,GAAG;AACvB;;;ACKA,eAAsB,QAAQ,MAA+B;CACzD,MAAM,UAAU,OAAA,GAAA,iBAAA,SAAA,CAAe,KAAK,MAAM,MAAM;CAChD,MAAM,SAAS,KAAK,UAAU,aAAa,KAAK,IAAI;CACpD,MAAM,cAAc,KAAK,cAAc,IAAI,KAAK,KAAK,WAAW,oBAAI,IAAI,KAAK;CAE7E,MAAM,YAAYA,eAAAA,aAAa,OAAO;CACtC,QAAQ,OAAO,MAAM,GAAG,UAAU,EAAE,iBAAiB,UAAU,OAAO,UAAU,OAAO,IAAI;CAE3F,IAAI,CAAC,KAAK,WAAW;EACjB,MAAM,WAAWC,cAAAA,MAAM,SAAS;EAChC,IAAI,SAAS,SAAS,GAAG;GACrB,QAAQ,OAAO,MAAM,GAAG,IAAI,KAAK,GAAG,EAAE,GAAG,SAAS,OAAO,6BAA6B;GACtF,KAAK,MAAM,KAAK,UACZ,QAAQ,OAAO,MACX,UAAU,EAAE,KAAK,QAAQ,EAAE,OAAO,MAAM,EAAE,UACrC,SAAS,EAAE,CAAC,CACZ,YAAY,CAAC,CACb,SAAS,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,IACrC;GAEJ,QAAQ,OAAO,MAAM,uCAAuC;GAC5D,MAAM,IAAI,MAAM,qDAAqD;EACzE;CACJ;CAEA,MAAM,UAAUC,eAAAA,wBAAwB;EACpC;EACA;EACA,kBAAkB,KAAK;EACvB;EACA,UAAU,KAAK;EACf,MAAM,KAAK;EACX,OAAO,KAAK;CAChB,CAAC;CAED,QAAQ,OAAO,MAAM,GAAG,IAAI,KAAK,GAAG,EAAE,mBAAmB,QAAQ,QAAQ,cAAc,GAAG;CAC1F,QAAQ,OAAO,MAAM,GAAG,IAAI,KAAK,GAAG,EAAE,6CAA6C;CAEnF,MAAM,EAAE,WAAW,kBAAkB,MAAMC,kBAAAA,eAAe,EAAE,QAAQ,CAAC;CACrE,MAAM,SAA4B;EAAE,GAAG;EAAS;EAAW;CAAc;CAEzE,QAAQ,OAAO,MAAM,GAAG,UAAU,EAAE,aAAa,IAAI,KAAK,aAAa,EAAE,GAAG;CAE5E,MAAM,YAAA,GAAA,UAAA,SAAA,CAAoB,KAAK,OAAA,GAAA,UAAA,QAAA,CAAc,KAAK,IAAI,CAAC;CACvD,MAAM,OAAA,GAAA,UAAA,QAAA,CAAc,KAAK,IAAI;CAC7B,MAAM,mBAAA,GAAA,UAAA,KAAA,CAAuB,KAAK,GAAG,SAAS,kBAAkB;CAChE,OAAA,GAAA,iBAAA,UAAA,CAAgB,iBAAiBC,eAAAA,UAAU,MAAM,GAAG,MAAM;CAC1D,QAAQ,OAAO,MAAM,GAAG,UAAU,EAAE,SAAS,gBAAgB,GAAG;CAEhE,IAAI,CAAC,KAAK,WAAW;EACjB,QAAQ,OAAO,MAAM,GAAG,IAAI,KAAK,GAAG,EAAE,2CAA2C;EAEjF,MAAM,WAAW,MAAMC,kBAAAA,YADRC,aAAW,QAAQ,QAAQ,aACF,CAAC;EACzC,MAAM,WAAA,GAAA,UAAA,KAAA,CAAe,KAAK,GAAG,SAAS,KAAK;EAC3C,OAAA,GAAA,iBAAA,UAAA,CAAgB,SAAS,OAAO,KAAK,QAAQ,CAAC;EAC9C,QAAQ,OAAO,MACX,GAAG,UAAU,EAAE,SAAS,QAAQ,IAAI,SAAS,OAAO,yBACxD;EACA,QAAQ,OAAO,MACX,KAAK,IAAI,IAAI,yDAAyD,EAAE,GAC5E;CACJ;AACJ;AAEA,SAAS,aAAa,MAAsB;CACxC,MAAM,QAAA,GAAA,UAAA,SAAA,CAAgB,OAAA,GAAA,UAAA,QAAA,CAAc,IAAI,CAAC;CACzC,IAAI,aAAa,KAAK,IAAI,GACtB,OAAO;CAEX,MAAM,IAAI,MACN,wCAAA,GAAA,UAAA,SAAA,CAAgD,IAAI,EAAE,6BAC1D;AACJ;AAEA,SAASA,aAAW,KAAgC;CAChD,MAAM,WAAW,IAAI,MAAM,CAAC;CAC5B,MAAM,MAAM,IAAI,WAAW,SAAS,SAAS,CAAC;CAC9C,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAC5B,IAAI,KAAK,SAAS,SAAS,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;CAE1D,OAAO;AACX;;;AChGA,eAAsB,WAAW,MAAkC;CAC/D,IAAI,KAAK,MAAM,WAAW,GACtB,MAAM,IAAI,MAAM,yBAAyB;CAG7C,KAAK,MAAM,QAAQ,KAAK,OAAO;EAC3B,QAAQ,OAAO,MAAM,GAAG,IAAI,KAAK,GAAG,EAAE,GAAG,KAAK,GAAG;EACjD,MAAM,SAAS,OAAA,GAAA,iBAAA,SAAA,CAAe,IAAI;EAClC,MAAM,EAAE,OAAO,aAAa,MAAMC,kBAAAA,aAAa,IAAI,WAAW,MAAM,CAAC;EAErE,IAAI,UAAU;GACV,OAAA,GAAA,iBAAA,UAAA,CAAgB,MAAM,OAAO,KAAK,KAAK,CAAC;GACxC,QAAQ,OAAO,MACX,KAAK,UAAU,EAAE,oCAAoC,MAAM,OAAO,UACtE;EACJ,OACI,QAAQ,OAAO,MACX,KAAK,IAAI,IAAI,6DAA6D,EAAE,GAChF;CAER;AACJ;;;ACTA,eAAsB,UAAU,MAAoC;CAChE,MAAM,UAAU,MAAM,YAAY,IAAI;CAEtC,MAAM,cAAcC,eAAAA,MAAM,QAAQ,eAAe;CACjD,MAAM,YAAY,MAAMC,eAAAA,kBAAkB;EAAE;EAAa,SAAS,QAAQ;CAAQ,CAAC;CAEnF,IAAI,CAAC,UAAU,IAAI;EACf,sBAAsB,UAAU,KAAK;EACrC,OAAO;CACX;CAEA,QAAQ,OAAO,MAAM,GAAG,UAAU,EAAE,oCAAoC;CACxE,QAAQ,OAAO,MACX,GAAG,UAAU,EAAE,+BAA+B,IAAI,KAAK,UAAU,aAAa,EAAE,GACpF;CAEA,IAAI,KAAK,WAAW,QAAQ,aAAa,MAAM;EAC3C,QAAQ,OAAO,MAAM,GAAG,IAAI,IAAI,4BAA4B,EAAE,GAAG;EACjE,OAAO;CACX;CAGA,MAAM,YAAY,MAAMC,kBAAAA,UADT,WAAW,YAAY,QAAQ,aACP,GAAG,QAAQ,QAAQ;CAE1D,IAAI,CAAC,UAAU,IAAI;EACf,QAAQ,OAAO,MAAM,GAAG,UAAU,EAAE,QAAQ,UAAU,QAAQ;EAC9D,IAAI,UAAU,SACV,QAAQ,OAAO,MAAM,MAAM,UAAU,SAAS;EAElD,QAAQ,OAAO,MAAM,IAAI;EACzB,OAAO,UAAU,WAAW;CAChC;CAEA,QAAQ,OAAO,MACX,GAAG,UAAU,EAAE,kCAAkC,UAAU,iBAAiB,YAAY,EAAE,GAC9F;CACA,OAAO;AACX;AAEA,eAAe,YAAY,MAAoC;CAC3D,IAAI,eAAe,KAAK,KAAK,MAAM,GAC/B,OAAO,YAAY,KAAK,MAAM;CAElC,OAAO,aAAa,KAAK,MAAM;AACnC;AAEA,eAAe,aAAa,UAAoC;CAC5D,MAAM,UAAU,OAAA,GAAA,iBAAA,SAAA,CAAe,UAAU,MAAM;CAC/C,MAAM,OAAA,GAAA,UAAA,QAAA,CAAc,QAAQ;CAC5B,MAAM,QAAA,GAAA,UAAA,SAAA,CAAgB,WAAA,GAAA,UAAA,QAAA,CAAkB,QAAQ,CAAC;CACjD,MAAM,kBAAkB,OAAA,GAAA,iBAAA,SAAA,EAAA,GAAA,UAAA,KAAA,CAAoB,KAAK,GAAG,KAAK,kBAAkB,GAAG,MAAM;CACpF,IAAI,WAA8B;CAClC,IAAI;EACA,MAAM,MAAM,OAAA,GAAA,iBAAA,SAAA,EAAA,GAAA,UAAA,KAAA,CAAoB,KAAK,GAAG,KAAK,KAAK,CAAC;EACnD,WAAW,IAAI,WAAW,GAAG;CACjC,QAAQ;EACJ,WAAW;CACf;CACA,OAAO;EAAE;EAAiB;EAAS;CAAS;AAChD;AAEA,eAAe,YAAY,KAA+B;CACtD,MAAM,mBAAmB,MAAM,mBAAmB,GAAG;CACrD,MAAM,WAAW,MAAM,UAAyB,gBAAgB;CAEhE,MAAM,OAAO,IAAI,IAAI,gBAAgB;CACrC,MAAM,CAAC,SAAS,iBAAiB,UAAU,MAAM,QAAQ,IAAI;EACzD,UAAU,IAAI,IAAI,SAAS,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;EACpD,UAAU,IAAI,IAAI,SAAS,aAAa,IAAI,CAAC,CAAC,SAAS,CAAC;EACxD,WAAW,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI;CACvE,CAAC;CACD,OAAO;EAAE;EAAiB;EAAS,UAAU;CAAO;AACxD;AAUA,eAAe,mBAAmB,YAAqC;CAEnE,MAAM,MAAM,IAAI,IAAI,UAAU;CAC9B,IAAI,CAAC,IAAI,SAAS,SAAS,GAAG,GAC1B,IAAI,YAAY;CAEpB,IAAI,YAAY;CAChB,OAAO,IAAI,SAAS;AACxB;AAEA,eAAe,UAAa,KAAyB;CACjD,MAAM,MAAM,MAAM,MAAM,GAAG;CAC3B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,SAAS,IAAI,gBAAgB,IAAI,QAAQ;CAE7D,OAAQ,MAAM,IAAI,KAAK;AAC3B;AAEA,eAAe,UAAU,KAA8B;CACnD,MAAM,MAAM,MAAM,MAAM,GAAG;CAC3B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,SAAS,IAAI,gBAAgB,IAAI,QAAQ;CAE7D,OAAO,IAAI,KAAK;AACpB;AAEA,eAAe,WAAW,KAAkC;CACxD,MAAM,MAAM,MAAM,MAAM,GAAG;CAC3B,IAAI,CAAC,IAAI,IACL,MAAM,IAAI,MAAM,SAAS,IAAI,gBAAgB,IAAI,QAAQ;CAE7D,OAAO,IAAI,WAAW,MAAM,IAAI,YAAY,CAAC;AACjD;AAEA,SAAS,sBAAsB,OAAyD;CACpF,QAAQ,OAAO,MAAM,GAAG,UAAU,EAAE,GAAG,IAAI,KAAK,qBAAqB,EAAE,IAAI,MAAM,KAAK,GAAG;CACzF,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,KAAK,GAAG;EACxC,IAAI,MAAM,QACN;EAEJ,QAAQ,OAAO,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,EAAE,GAAG;CACjD;AACJ;AAEA,SAAS,WAAW,KAAgC;CAChD,MAAM,WAAW,IAAI,MAAM,CAAC;CAC5B,MAAM,MAAM,IAAI,WAAW,SAAS,SAAS,CAAC;CAC9C,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAC5B,IAAI,KAAK,SAAS,SAAS,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;CAE1D,OAAO;AACX;;;ACnJA,MAAM,OAAO,GAAG,IAAI,KAAK,aAAa,EAAE;;;;;;;;;AAUxC,eAAsB,OAAO,MAAiC;CAC1D,MAAM,CAAC,SAAS,GAAG,QAAQ;CAE3B,IAAI,YAAY,KAAA,KAAa,YAAY,QAAQ,YAAY,YAAY,YAAY,QAAQ;EACzF,QAAQ,OAAO,MAAM,IAAI;EACzB,OAAO;CACX;CAEA,IAAI;EACA,IAAI,YAAY,QACZ,OAAO,MAAM,aAAa,IAAI;EAElC,IAAI,YAAY,UACZ,OAAO,MAAM,eAAe,IAAI;EAEpC,IAAI,YAAY,WACZ,OAAO,MAAM,gBAAgB,IAAI;EAErC,QAAQ,OAAO,MAAM,oBAAoB,QAAQ,IAAI,MAAM;EAC3D,OAAO;CACX,SAAS,OAAO;EACZ,QAAQ,OAAO,MAAM,GAAG,IAAI,KAAK,QAAQ,EAAE,GAAI,MAAgB,QAAQ,GAAG;EAC1E,OAAO;CACX;AACJ;AAEA,eAAe,aAAa,MAAiC;CACzD,MAAM,EAAE,aAAa,YAAA,GAAA,UAAA,UAAA,CAAqB;EACtC,kBAAkB;EAClB,MAAM;EACN,SAAS;GACL,QAAQ,EAAE,MAAM,SAAS;GACzB,qBAAqB,EAAE,MAAM,SAAS;GACtC,gBAAgB,EAAE,MAAM,SAAS;GACjC,UAAU,EAAE,MAAM,SAAS;GAC3B,cAAc,EAAE,MAAM,UAAU;GAChC,cAAc,EAAE,MAAM,UAAU;GAChC,MAAM,EAAE,MAAM,SAAS;GACvB,OAAO,EAAE,MAAM,SAAS;EAC5B;CACJ,CAAC;CAED,MAAM,OAAO,YAAY;CACzB,IAAI,CAAC,MACD,MAAM,IAAI,MAAM,mCAAmC;CAEvD,IAAI,CAAC,OAAO,OACR,MAAM,IAAI,MAAM,2BAA2B;CAE/C,IAAI,CAAC,OAAO,MACR,MAAM,IAAI,MAAM,0BAA0B;CAG9C,MAAM,QAAQ;EACV;EACA,QAAQ,OAAO;EACf,kBAAkB,OAAO;EACzB,aAAa,OAAO;EACpB,UAAU,OAAO,WAAW,OAAO,OAAO,QAAQ,IAAI,KAAA;EACtD,WAAW,OAAO;EAClB,WAAW,OAAO;EAClB,MAAM,OAAO;EACb,OAAO,OAAO;CAClB,CAAC;CACD,OAAO;AACX;AAEA,eAAe,eAAe,MAAiC;CAC3D,MAAM,EAAE,aAAa,YAAA,GAAA,UAAA,UAAA,CAAqB;EACtC,kBAAkB;EAClB,MAAM;EACN,SAAS,EACL,YAAY,EAAE,MAAM,UAAU,EAClC;CACJ,CAAC;CAED,MAAM,SAAS,YAAY;CAC3B,IAAI,CAAC,QACD,MAAM,IAAI,MAAM,uCAAuC;CAI3D,OAAO,MADU,UAAU;EAAE,SAAS,OAAO;EAAa;CAAO,CAAC,IACtD,IAAI;AACpB;AAEA,eAAe,gBAAgB,MAAiC;CAC5D,MAAM,EAAE,iBAAA,GAAA,UAAA,UAAA,CAA0B;EAAE,kBAAkB;EAAM,MAAM;EAAM,SAAS,CAAC;CAAE,CAAC;CACrF,MAAM,WAAW,EAAE,OAAO,YAAY,CAAC;CACvC,OAAO;AACX;;;ACxGK,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,QAAQ,KAAK,IAAI,CAAC"}

package/dist/cli.d.cts

@@ -0,0 +1 @@
+export { };

package/dist/cli.d.ts

@@ -0,0 +1 @@
+export { };