@jterrazz/attestation 0.1.0

package/dist/verify.d.cts

@@ -0,0 +1,105 @@
+import { o as AttestationMessage } from "./eip712-schema.cjs";
+import { LocalAccount } from "viem";
+//#region src/core/canonicalize.d.ts
+/**
+ * Canonicalize an article body for attestation v1.
+ *
+ * FROZEN CONTRACT — v1 rules below must NEVER change. Any modification requires
+ * publishing a v2 alongside (and v1 verifiers stay alive forever).
+ *
+ * Rules applied in order:
+ *  1. Reject unpaired UTF-16 surrogates (corrupt input).
+ *  2. Strip a leading BOM (U+FEFF) if present.
+ *  3. Apply Unicode NFC normalization.
+ *  4. Convert CRLF and stray CR to LF.
+ *  5. Trim trailing whitespace and append exactly one LF.
+ *  6. Encode as UTF-8 bytes.
+ *
+ * No markdown parsing. No per-line whitespace trim (would break "  \n" soft breaks).
+ * No tab → space substitution (would break code blocks).
+ * No interior whitespace collapsing.
+ */
+declare function canonicalize(input: string): Uint8Array;
+declare class InvalidContentError extends Error {
+  name: string;
+}
+//#endregion
+//#region src/attestation/types.d.ts
+type SignedAttestation = AttestationMessage & {
+  signature: `0x${string}`;
+  signerAddress: `0x${string}`;
+};
+/**
+ * On-disk shape (JSON-safe). `publishedAt` is stringified because JSON has no
+ * native bigint. Parse / stringify helpers in serialize.ts.
+ */
+type StoredAttestation = {
+  schemaVersion: number;
+  subject: {
+    title: string;
+    contentDigest: `0x${string}`;
+    locale: string;
+  };
+  claims: {
+    slug: string;
+    publishedAt: string;
+    revision: number;
+    priorAttestation: `0x${string}`;
+  };
+  signature: `0x${string}`;
+  signerAddress: `0x${string}`;
+};
+type VerifyOk = {
+  ok: true;
+  signerAddress: `0x${string}`;
+};
+type VerifyError = {
+  kind: 'content-mismatch';
+  expectedDigest: `0x${string}`;
+  actualDigest: `0x${string}`;
+} | {
+  kind: 'invalid-signature';
+  reason: string;
+} | {
+  kind: 'schema-version-unsupported';
+  version: number;
+} | {
+  kind: 'signer-mismatch';
+  recovered: `0x${string}`;
+  declared: `0x${string}`;
+};
+type VerifyFail = {
+  ok: false;
+  error: VerifyError;
+};
+type VerifyResult = VerifyFail | VerifyOk;
+//#endregion
+//#region src/attestation/create.d.ts
+type CreateAttestationInput = {
+  content: string;
+  title: string;
+  slug: string;
+  locale: string;
+  publishedAt: bigint | Date | number;
+  revision?: number;
+  priorAttestation?: `0x${string}`;
+};
+declare function buildAttestationMessage(input: CreateAttestationInput): AttestationMessage;
+declare function signAttestation(message: AttestationMessage, account: LocalAccount): Promise<SignedAttestation>;
+declare function createAttestation(input: CreateAttestationInput, account: LocalAccount): Promise<SignedAttestation>;
+//#endregion
+//#region src/attestation/serialize.d.ts
+declare function toStored(att: SignedAttestation): StoredAttestation;
+declare function fromStored(stored: StoredAttestation): SignedAttestation;
+declare function stringify(att: SignedAttestation): string;
+declare function parse(json: string): SignedAttestation;
+//#endregion
+//#region src/attestation/verify.d.ts
+type VerifyInput = {
+  content: string;
+  attestation: SignedAttestation;
+};
+declare function verifyAttestation(input: VerifyInput): Promise<VerifyResult>;
+//#endregion
+export { InvalidContentError as _, stringify as a, buildAttestationMessage as c, SignedAttestation as d, StoredAttestation as f, VerifyResult as g, VerifyOk as h, parse as i, createAttestation as l, VerifyFail as m, verifyAttestation as n, toStored as o, VerifyError as p, fromStored as r, CreateAttestationInput as s, VerifyInput as t, signAttestation as u, canonicalize as v };
+//# sourceMappingURL=verify.d.cts.map

package/dist/verify.d.ts

@@ -0,0 +1,105 @@
+import { o as AttestationMessage } from "./eip712-schema.js";
+import { LocalAccount } from "viem";
+//#region src/core/canonicalize.d.ts
+/**
+ * Canonicalize an article body for attestation v1.
+ *
+ * FROZEN CONTRACT — v1 rules below must NEVER change. Any modification requires
+ * publishing a v2 alongside (and v1 verifiers stay alive forever).
+ *
+ * Rules applied in order:
+ *  1. Reject unpaired UTF-16 surrogates (corrupt input).
+ *  2. Strip a leading BOM (U+FEFF) if present.
+ *  3. Apply Unicode NFC normalization.
+ *  4. Convert CRLF and stray CR to LF.
+ *  5. Trim trailing whitespace and append exactly one LF.
+ *  6. Encode as UTF-8 bytes.
+ *
+ * No markdown parsing. No per-line whitespace trim (would break "  \n" soft breaks).
+ * No tab → space substitution (would break code blocks).
+ * No interior whitespace collapsing.
+ */
+declare function canonicalize(input: string): Uint8Array;
+declare class InvalidContentError extends Error {
+  name: string;
+}
+//#endregion
+//#region src/attestation/types.d.ts
+type SignedAttestation = AttestationMessage & {
+  signature: `0x${string}`;
+  signerAddress: `0x${string}`;
+};
+/**
+ * On-disk shape (JSON-safe). `publishedAt` is stringified because JSON has no
+ * native bigint. Parse / stringify helpers in serialize.ts.
+ */
+type StoredAttestation = {
+  schemaVersion: number;
+  subject: {
+    title: string;
+    contentDigest: `0x${string}`;
+    locale: string;
+  };
+  claims: {
+    slug: string;
+    publishedAt: string;
+    revision: number;
+    priorAttestation: `0x${string}`;
+  };
+  signature: `0x${string}`;
+  signerAddress: `0x${string}`;
+};
+type VerifyOk = {
+  ok: true;
+  signerAddress: `0x${string}`;
+};
+type VerifyError = {
+  kind: 'content-mismatch';
+  expectedDigest: `0x${string}`;
+  actualDigest: `0x${string}`;
+} | {
+  kind: 'invalid-signature';
+  reason: string;
+} | {
+  kind: 'schema-version-unsupported';
+  version: number;
+} | {
+  kind: 'signer-mismatch';
+  recovered: `0x${string}`;
+  declared: `0x${string}`;
+};
+type VerifyFail = {
+  ok: false;
+  error: VerifyError;
+};
+type VerifyResult = VerifyFail | VerifyOk;
+//#endregion
+//#region src/attestation/create.d.ts
+type CreateAttestationInput = {
+  content: string;
+  title: string;
+  slug: string;
+  locale: string;
+  publishedAt: bigint | Date | number;
+  revision?: number;
+  priorAttestation?: `0x${string}`;
+};
+declare function buildAttestationMessage(input: CreateAttestationInput): AttestationMessage;
+declare function signAttestation(message: AttestationMessage, account: LocalAccount): Promise<SignedAttestation>;
+declare function createAttestation(input: CreateAttestationInput, account: LocalAccount): Promise<SignedAttestation>;
+//#endregion
+//#region src/attestation/serialize.d.ts
+declare function toStored(att: SignedAttestation): StoredAttestation;
+declare function fromStored(stored: StoredAttestation): SignedAttestation;
+declare function stringify(att: SignedAttestation): string;
+declare function parse(json: string): SignedAttestation;
+//#endregion
+//#region src/attestation/verify.d.ts
+type VerifyInput = {
+  content: string;
+  attestation: SignedAttestation;
+};
+declare function verifyAttestation(input: VerifyInput): Promise<VerifyResult>;
+//#endregion
+export { InvalidContentError as _, stringify as a, buildAttestationMessage as c, SignedAttestation as d, StoredAttestation as f, VerifyResult as g, VerifyOk as h, parse as i, createAttestation as l, VerifyFail as m, verifyAttestation as n, toStored as o, VerifyError as p, fromStored as r, CreateAttestationInput as s, VerifyInput as t, signAttestation as u, canonicalize as v };
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.js

@@ -0,0 +1,199 @@
+import { n as ATTESTATION_PRIMARY_TYPE, r as ATTESTATION_TYPES_V1, t as ATTESTATION_DOMAIN_V1 } from "./eip712-schema.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { recoverTypedDataAddress } from "viem";
+//#region src/version.ts
+const SCHEMA_VERSION = 1;
+const CANONICAL_VERSION = 1;
+//#endregion
+//#region src/core/canonicalize.ts
+/**
+* Canonicalize an article body for attestation v1.
+*
+* FROZEN CONTRACT — v1 rules below must NEVER change. Any modification requires
+* publishing a v2 alongside (and v1 verifiers stay alive forever).
+*
+* Rules applied in order:
+*  1. Reject unpaired UTF-16 surrogates (corrupt input).
+*  2. Strip a leading BOM (U+FEFF) if present.
+*  3. Apply Unicode NFC normalization.
+*  4. Convert CRLF and stray CR to LF.
+*  5. Trim trailing whitespace and append exactly one LF.
+*  6. Encode as UTF-8 bytes.
+*
+* No markdown parsing. No per-line whitespace trim (would break "  \n" soft breaks).
+* No tab → space substitution (would break code blocks).
+* No interior whitespace collapsing.
+*/
+function canonicalize(input) {
+	assertValidUtf16(input);
+	let s = input;
+	if (s.charCodeAt(0) === 65279) s = s.slice(1);
+	s = s.normalize("NFC");
+	s = s.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+	s = `${s.replace(/\s+$/u, "")}\n`;
+	return new TextEncoder().encode(s);
+}
+var InvalidContentError = class extends Error {
+	name = "InvalidContentError";
+};
+function assertValidUtf16(s) {
+	for (let i = 0; i < s.length; i++) {
+		const code = s.charCodeAt(i);
+		if (code >= 55296 && code <= 56319) {
+			const next = s.charCodeAt(i + 1);
+			if (!(next >= 56320 && next <= 57343)) throw new InvalidContentError(`Unpaired high surrogate at index ${i}`);
+			i++;
+		} else if (code >= 56320 && code <= 57343) throw new InvalidContentError(`Unpaired low surrogate at index ${i}`);
+	}
+}
+//#endregion
+//#region src/core/sha256.ts
+/**
+* SHA-256 of bytes, returned as bare hex (no 0x prefix).
+*
+* Uses @noble/hashes — pure JS, sync, audited, runs identically in Node, Bun,
+* Deno, and every modern browser. This is the only hash primitive used by the
+* package, so swapping the implementation here is the single point of change.
+*/
+function sha256Hex(bytes) {
+	const out = sha256(bytes);
+	let hex = "";
+	for (const byte of out) hex += byte.toString(16).padStart(2, "0");
+	return hex;
+}
+//#endregion
+//#region src/attestation/create.ts
+function buildAttestationMessage(input) {
+	const digest = sha256Hex(canonicalize(input.content));
+	return {
+		claims: {
+			priorAttestation: input.priorAttestation ?? "0x0000000000000000000000000000000000000000000000000000000000000000",
+			publishedAt: toUnixSeconds(input.publishedAt),
+			revision: input.revision ?? 1,
+			slug: input.slug
+		},
+		schemaVersion: 1,
+		subject: {
+			contentDigest: `0x${digest}`,
+			locale: input.locale,
+			title: input.title
+		}
+	};
+}
+async function signAttestation(message, account) {
+	const signature = await account.signTypedData({
+		domain: ATTESTATION_DOMAIN_V1,
+		message,
+		primaryType: ATTESTATION_PRIMARY_TYPE,
+		types: ATTESTATION_TYPES_V1
+	});
+	return {
+		...message,
+		signature,
+		signerAddress: account.address
+	};
+}
+async function createAttestation(input, account) {
+	return signAttestation(buildAttestationMessage(input), account);
+}
+function toUnixSeconds(value) {
+	if (typeof value === "bigint") return value;
+	if (typeof value === "number") return BigInt(Math.floor(value));
+	return BigInt(Math.floor(value.getTime() / 1e3));
+}
+//#endregion
+//#region src/attestation/serialize.ts
+function toStored(att) {
+	return {
+		claims: {
+			priorAttestation: att.claims.priorAttestation,
+			publishedAt: att.claims.publishedAt.toString(),
+			revision: att.claims.revision,
+			slug: att.claims.slug
+		},
+		schemaVersion: att.schemaVersion,
+		signature: att.signature,
+		signerAddress: att.signerAddress,
+		subject: att.subject
+	};
+}
+function fromStored(stored) {
+	return {
+		claims: {
+			priorAttestation: stored.claims.priorAttestation,
+			publishedAt: BigInt(stored.claims.publishedAt),
+			revision: stored.claims.revision,
+			slug: stored.claims.slug
+		},
+		schemaVersion: stored.schemaVersion,
+		signature: stored.signature,
+		signerAddress: stored.signerAddress,
+		subject: stored.subject
+	};
+}
+function stringify(att) {
+	return `${JSON.stringify(toStored(att), null, 2)}\n`;
+}
+function parse(json) {
+	return fromStored(JSON.parse(json));
+}
+//#endregion
+//#region src/attestation/verify.ts
+async function verifyAttestation(input) {
+	const att = input.attestation;
+	if (att.schemaVersion !== 1) return {
+		error: {
+			kind: "schema-version-unsupported",
+			version: att.schemaVersion
+		},
+		ok: false
+	};
+	const expected = att.subject.contentDigest;
+	const actual = `0x${sha256Hex(canonicalize(input.content))}`;
+	if (actual !== expected) return {
+		error: {
+			actualDigest: actual,
+			expectedDigest: expected,
+			kind: "content-mismatch"
+		},
+		ok: false
+	};
+	let recovered;
+	try {
+		recovered = await recoverTypedDataAddress({
+			domain: ATTESTATION_DOMAIN_V1,
+			message: {
+				claims: att.claims,
+				schemaVersion: att.schemaVersion,
+				subject: att.subject
+			},
+			primaryType: ATTESTATION_PRIMARY_TYPE,
+			signature: att.signature,
+			types: ATTESTATION_TYPES_V1
+		});
+	} catch (error) {
+		return {
+			error: {
+				kind: "invalid-signature",
+				reason: error.message
+			},
+			ok: false
+		};
+	}
+	if (recovered.toLowerCase() !== att.signerAddress.toLowerCase()) return {
+		error: {
+			declared: att.signerAddress,
+			kind: "signer-mismatch",
+			recovered
+		},
+		ok: false
+	};
+	return {
+		ok: true,
+		signerAddress: recovered
+	};
+}
+//#endregion
+export { toStored as a, signAttestation as c, canonicalize as d, CANONICAL_VERSION as f, stringify as i, sha256Hex as l, fromStored as n, buildAttestationMessage as o, SCHEMA_VERSION as p, parse as r, createAttestation as s, verifyAttestation as t, InvalidContentError as u };
+
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","names":[],"sources":["../src/version.ts","../src/core/canonicalize.ts","../src/core/sha256.ts","../src/attestation/create.ts","../src/attestation/serialize.ts","../src/attestation/verify.ts"],"sourcesContent":["// Frozen on first published attestation. Bump only by adding v2 alongside v1.\nexport const SCHEMA_VERSION = 1 as const;\nexport const CANONICAL_VERSION = 1 as const;\n","/**\n * Canonicalize an article body for attestation v1.\n *\n * FROZEN CONTRACT — v1 rules below must NEVER change. Any modification requires\n * publishing a v2 alongside (and v1 verifiers stay alive forever).\n *\n * Rules applied in order:\n *  1. Reject unpaired UTF-16 surrogates (corrupt input).\n *  2. Strip a leading BOM (U+FEFF) if present.\n *  3. Apply Unicode NFC normalization.\n *  4. Convert CRLF and stray CR to LF.\n *  5. Trim trailing whitespace and append exactly one LF.\n *  6. Encode as UTF-8 bytes.\n *\n * No markdown parsing. No per-line whitespace trim (would break \"  \\n\" soft breaks).\n * No tab → space substitution (would break code blocks).\n * No interior whitespace collapsing.\n */\nexport function canonicalize(input: string): Uint8Array {\n    assertValidUtf16(input);\n\n    let s = input;\n    if (s.charCodeAt(0) === 0xfeff) {\n        s = s.slice(1);\n    }\n    s = s.normalize('NFC');\n    s = s.replace(/\\r\\n/g, '\\n').replace(/\\r/g, '\\n');\n    // \\s with /u flag covers all ECMAScript whitespace, including U+00A0 and U+FEFF.\n    s = `${s.replace(/\\s+$/u, '')}\\n`;\n\n    return new TextEncoder().encode(s);\n}\n\n/**\n * Version of the canonicalization algorithm that produced bytes.\n * Embedded into every attestation so future verifiers can dispatch correctly.\n */\nexport { CANONICAL_VERSION as canonicalVersion } from '../version.js';\n\nexport class InvalidContentError extends Error {\n    override name = 'InvalidContentError';\n}\n\nfunction assertValidUtf16(s: string): void {\n    for (let i = 0; i < s.length; i++) {\n        const code = s.charCodeAt(i);\n        if (code >= 0xd800 && code <= 0xdbff) {\n            const next = s.charCodeAt(i + 1);\n            if (!(next >= 0xdc00 && next <= 0xdfff)) {\n                throw new InvalidContentError(`Unpaired high surrogate at index ${i}`);\n            }\n            i++;\n        } else if (code >= 0xdc00 && code <= 0xdfff) {\n            throw new InvalidContentError(`Unpaired low surrogate at index ${i}`);\n        }\n    }\n}\n","import { sha256 } from '@noble/hashes/sha2.js';\n\n/**\n * SHA-256 of bytes, returned as bare hex (no 0x prefix).\n *\n * Uses @noble/hashes — pure JS, sync, audited, runs identically in Node, Bun,\n * Deno, and every modern browser. This is the only hash primitive used by the\n * package, so swapping the implementation here is the single point of change.\n */\nexport function sha256Hex(bytes: Uint8Array): string {\n    const out = sha256(bytes);\n    let hex = '';\n    for (const byte of out) {\n        hex += byte.toString(16).padStart(2, '0');\n    }\n    return hex;\n}\n","import { type LocalAccount } from 'viem';\n\nimport { canonicalize } from '../core/canonicalize.js';\nimport {\n    ATTESTATION_DOMAIN_V1,\n    ATTESTATION_PRIMARY_TYPE,\n    ATTESTATION_TYPES_V1,\n    type AttestationMessage,\n    NO_PRIOR_ATTESTATION,\n} from '../core/eip712-schema.js';\nimport { sha256Hex } from '../core/sha256.js';\nimport { SCHEMA_VERSION } from '../version.js';\nimport { type SignedAttestation } from './types.js';\n\nexport type CreateAttestationInput = {\n    content: string;\n    title: string;\n    slug: string;\n    locale: string;\n    publishedAt: bigint | Date | number;\n    revision?: number;\n    priorAttestation?: `0x${string}`;\n};\n\nexport function buildAttestationMessage(input: CreateAttestationInput): AttestationMessage {\n    const bytes = canonicalize(input.content);\n    const digest = sha256Hex(bytes);\n\n    return {\n        claims: {\n            priorAttestation: input.priorAttestation ?? NO_PRIOR_ATTESTATION,\n            publishedAt: toUnixSeconds(input.publishedAt),\n            revision: input.revision ?? 1,\n            slug: input.slug,\n        },\n        schemaVersion: SCHEMA_VERSION,\n        subject: {\n            contentDigest: `0x${digest}` as const,\n            locale: input.locale,\n            title: input.title,\n        },\n    };\n}\n\nexport async function signAttestation(\n    message: AttestationMessage,\n    account: LocalAccount,\n): Promise<SignedAttestation> {\n    const signature = await account.signTypedData({\n        domain: ATTESTATION_DOMAIN_V1,\n        message,\n        primaryType: ATTESTATION_PRIMARY_TYPE,\n        types: ATTESTATION_TYPES_V1,\n    });\n\n    return {\n        ...message,\n        signature,\n        signerAddress: account.address,\n    };\n}\n\nexport async function createAttestation(\n    input: CreateAttestationInput,\n    account: LocalAccount,\n): Promise<SignedAttestation> {\n    return signAttestation(buildAttestationMessage(input), account);\n}\n\nfunction toUnixSeconds(value: bigint | Date | number): bigint {\n    if (typeof value === 'bigint') {\n        return value;\n    }\n    if (typeof value === 'number') {\n        return BigInt(Math.floor(value));\n    }\n    return BigInt(Math.floor(value.getTime() / 1000));\n}\n","import { type SignedAttestation, type StoredAttestation } from './types.js';\n\nexport function toStored(att: SignedAttestation): StoredAttestation {\n    return {\n        claims: {\n            priorAttestation: att.claims.priorAttestation,\n            publishedAt: att.claims.publishedAt.toString(),\n            revision: att.claims.revision,\n            slug: att.claims.slug,\n        },\n        schemaVersion: att.schemaVersion,\n        signature: att.signature,\n        signerAddress: att.signerAddress,\n        subject: att.subject,\n    };\n}\n\nexport function fromStored(stored: StoredAttestation): SignedAttestation {\n    return {\n        claims: {\n            priorAttestation: stored.claims.priorAttestation,\n            publishedAt: BigInt(stored.claims.publishedAt),\n            revision: stored.claims.revision,\n            slug: stored.claims.slug,\n        },\n        schemaVersion: stored.schemaVersion,\n        signature: stored.signature,\n        signerAddress: stored.signerAddress,\n        subject: stored.subject,\n    };\n}\n\nexport function stringify(att: SignedAttestation): string {\n    return `${JSON.stringify(toStored(att), null, 2)}\\n`;\n}\n\nexport function parse(json: string): SignedAttestation {\n    const parsed = JSON.parse(json) as StoredAttestation;\n    return fromStored(parsed);\n}\n","import { recoverTypedDataAddress } from 'viem';\n\nimport { canonicalize } from '../core/canonicalize.js';\nimport {\n    ATTESTATION_DOMAIN_V1,\n    ATTESTATION_PRIMARY_TYPE,\n    ATTESTATION_TYPES_V1,\n} from '../core/eip712-schema.js';\nimport { sha256Hex } from '../core/sha256.js';\nimport { SCHEMA_VERSION } from '../version.js';\nimport { type SignedAttestation, type VerifyResult } from './types.js';\n\nexport type VerifyInput = {\n    content: string;\n    attestation: SignedAttestation;\n};\n\nexport async function verifyAttestation(input: VerifyInput): Promise<VerifyResult> {\n    const att = input.attestation;\n\n    if (att.schemaVersion !== SCHEMA_VERSION) {\n        return {\n            error: { kind: 'schema-version-unsupported', version: att.schemaVersion },\n            ok: false,\n        };\n    }\n\n    const expected = att.subject.contentDigest;\n    const actual = `0x${sha256Hex(canonicalize(input.content))}` as const;\n    if (actual !== expected) {\n        return {\n            error: { actualDigest: actual, expectedDigest: expected, kind: 'content-mismatch' },\n            ok: false,\n        };\n    }\n\n    let recovered: `0x${string}`;\n    try {\n        recovered = await recoverTypedDataAddress({\n            domain: ATTESTATION_DOMAIN_V1,\n            message: { claims: att.claims, schemaVersion: att.schemaVersion, subject: att.subject },\n            primaryType: ATTESTATION_PRIMARY_TYPE,\n            signature: att.signature,\n            types: ATTESTATION_TYPES_V1,\n        });\n    } catch (error) {\n        return {\n            error: { kind: 'invalid-signature', reason: (error as Error).message },\n            ok: false,\n        };\n    }\n\n    if (recovered.toLowerCase() !== att.signerAddress.toLowerCase()) {\n        return {\n            error: { declared: att.signerAddress, kind: 'signer-mismatch', recovered },\n            ok: false,\n        };\n    }\n\n    return { ok: true, signerAddress: recovered };\n}\n"],"mappings":";;;;AACA,MAAa,iBAAiB;AAC9B,MAAa,oBAAoB;;;;;;;;;;;;;;;;;;;;;ACgBjC,SAAgB,aAAa,OAA2B;CACpD,iBAAiB,KAAK;CAEtB,IAAI,IAAI;CACR,IAAI,EAAE,WAAW,CAAC,MAAM,OACpB,IAAI,EAAE,MAAM,CAAC;CAEjB,IAAI,EAAE,UAAU,KAAK;CACrB,IAAI,EAAE,QAAQ,SAAS,IAAI,CAAC,CAAC,QAAQ,OAAO,IAAI;CAEhD,IAAI,GAAG,EAAE,QAAQ,SAAS,EAAE,EAAE;CAE9B,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC;AACrC;AAQA,IAAa,sBAAb,cAAyC,MAAM;CAC3C,OAAgB;AACpB;AAEA,SAAS,iBAAiB,GAAiB;CACvC,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;EAC/B,MAAM,OAAO,EAAE,WAAW,CAAC;EAC3B,IAAI,QAAQ,SAAU,QAAQ,OAAQ;GAClC,MAAM,OAAO,EAAE,WAAW,IAAI,CAAC;GAC/B,IAAI,EAAE,QAAQ,SAAU,QAAQ,QAC5B,MAAM,IAAI,oBAAoB,oCAAoC,GAAG;GAEzE;EACJ,OAAO,IAAI,QAAQ,SAAU,QAAQ,OACjC,MAAM,IAAI,oBAAoB,mCAAmC,GAAG;CAE5E;AACJ;;;;;;;;;;AC/CA,SAAgB,UAAU,OAA2B;CACjD,MAAM,MAAM,OAAO,KAAK;CACxB,IAAI,MAAM;CACV,KAAK,MAAM,QAAQ,KACf,OAAO,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5C,OAAO;AACX;;;ACQA,SAAgB,wBAAwB,OAAmD;CAEvF,MAAM,SAAS,UADD,aAAa,MAAM,OACJ,CAAC;CAE9B,OAAO;EACH,QAAQ;GACJ,kBAAkB,MAAM,oBAAA;GACxB,aAAa,cAAc,MAAM,WAAW;GAC5C,UAAU,MAAM,YAAY;GAC5B,MAAM,MAAM;EAChB;EACA,eAAA;EACA,SAAS;GACL,eAAe,KAAK;GACpB,QAAQ,MAAM;GACd,OAAO,MAAM;EACjB;CACJ;AACJ;AAEA,eAAsB,gBAClB,SACA,SAC0B;CAC1B,MAAM,YAAY,MAAM,QAAQ,cAAc;EAC1C,QAAQ;EACR;EACA,aAAa;EACb,OAAO;CACX,CAAC;CAED,OAAO;EACH,GAAG;EACH;EACA,eAAe,QAAQ;CAC3B;AACJ;AAEA,eAAsB,kBAClB,OACA,SAC0B;CAC1B,OAAO,gBAAgB,wBAAwB,KAAK,GAAG,OAAO;AAClE;AAEA,SAAS,cAAc,OAAuC;CAC1D,IAAI,OAAO,UAAU,UACjB,OAAO;CAEX,IAAI,OAAO,UAAU,UACjB,OAAO,OAAO,KAAK,MAAM,KAAK,CAAC;CAEnC,OAAO,OAAO,KAAK,MAAM,MAAM,QAAQ,IAAI,GAAI,CAAC;AACpD;;;AC3EA,SAAgB,SAAS,KAA2C;CAChE,OAAO;EACH,QAAQ;GACJ,kBAAkB,IAAI,OAAO;GAC7B,aAAa,IAAI,OAAO,YAAY,SAAS;GAC7C,UAAU,IAAI,OAAO;GACrB,MAAM,IAAI,OAAO;EACrB;EACA,eAAe,IAAI;EACnB,WAAW,IAAI;EACf,eAAe,IAAI;EACnB,SAAS,IAAI;CACjB;AACJ;AAEA,SAAgB,WAAW,QAA8C;CACrE,OAAO;EACH,QAAQ;GACJ,kBAAkB,OAAO,OAAO;GAChC,aAAa,OAAO,OAAO,OAAO,WAAW;GAC7C,UAAU,OAAO,OAAO;GACxB,MAAM,OAAO,OAAO;EACxB;EACA,eAAe,OAAO;EACtB,WAAW,OAAO;EAClB,eAAe,OAAO;EACtB,SAAS,OAAO;CACpB;AACJ;AAEA,SAAgB,UAAU,KAAgC;CACtD,OAAO,GAAG,KAAK,UAAU,SAAS,GAAG,GAAG,MAAM,CAAC,EAAE;AACrD;AAEA,SAAgB,MAAM,MAAiC;CAEnD,OAAO,WADQ,KAAK,MAAM,IACH,CAAC;AAC5B;;;ACtBA,eAAsB,kBAAkB,OAA2C;CAC/E,MAAM,MAAM,MAAM;CAElB,IAAI,IAAI,kBAAA,GACJ,OAAO;EACH,OAAO;GAAE,MAAM;GAA8B,SAAS,IAAI;EAAc;EACxE,IAAI;CACR;CAGJ,MAAM,WAAW,IAAI,QAAQ;CAC7B,MAAM,SAAS,KAAK,UAAU,aAAa,MAAM,OAAO,CAAC;CACzD,IAAI,WAAW,UACX,OAAO;EACH,OAAO;GAAE,cAAc;GAAQ,gBAAgB;GAAU,MAAM;EAAmB;EAClF,IAAI;CACR;CAGJ,IAAI;CACJ,IAAI;EACA,YAAY,MAAM,wBAAwB;GACtC,QAAQ;GACR,SAAS;IAAE,QAAQ,IAAI;IAAQ,eAAe,IAAI;IAAe,SAAS,IAAI;GAAQ;GACtF,aAAa;GACb,WAAW,IAAI;GACf,OAAO;EACX,CAAC;CACL,SAAS,OAAO;EACZ,OAAO;GACH,OAAO;IAAE,MAAM;IAAqB,QAAS,MAAgB;GAAQ;GACrE,IAAI;EACR;CACJ;CAEA,IAAI,UAAU,YAAY,MAAM,IAAI,cAAc,YAAY,GAC1D,OAAO;EACH,OAAO;GAAE,UAAU,IAAI;GAAe,MAAM;GAAmB;EAAU;EACzE,IAAI;CACR;CAGJ,OAAO;EAAE,IAAI;EAAM,eAAe;CAAU;AAChD"}

package/package.json

@@ -0,0 +1,67 @@
+{
+    "name": "@jterrazz/attestation",
+    "version": "0.1.0",
+    "description": "Cryptographic attestation for articles — EIP-712 signature anchored to Bitcoin via OpenTimestamps.",
+    "license": "MIT",
+    "author": "Jean-Baptiste Terrazzoni <contact@jterrazz.com>",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/jterrazz/package-attestation.git"
+    },
+    "bin": {
+        "attestation": "bin/attestation"
+    },
+    "files": [
+        "dist",
+        "bin"
+    ],
+    "type": "module",
+    "exports": {
+        ".": {
+            "require": "./dist/index.cjs",
+            "import": "./dist/index.js"
+        },
+        "./browser": {
+            "require": "./dist/browser.cjs",
+            "import": "./dist/browser.js"
+        },
+        "./node": {
+            "require": "./dist/node.cjs",
+            "import": "./dist/node.js"
+        },
+        "./cli": {
+            "require": "./dist/cli.cjs",
+            "import": "./dist/cli.js"
+        }
+    },
+    "scripts": {
+        "build": "tsdown --config tsdown.config.ts",
+        "prepare": "tsdown --config tsdown.config.ts",
+        "lint": "typescript check",
+        "lint:fix": "typescript fix",
+        "test": "vitest --run",
+        "test:network": "ATTEST_E2E_NETWORK=1 vitest --run --project e2e-network"
+    },
+    "dependencies": {
+        "@noble/hashes": "^2.2.0",
+        "javascript-opentimestamps": "^0.4.5",
+        "open": "^11.0.0",
+        "viem": "^2.54.1"
+    },
+    "devDependencies": {
+        "@jterrazz/test": "^8.0.0",
+        "@jterrazz/typescript": "^6.1.0",
+        "@types/node": "^24.13.2",
+        "tsdown": "^0.22.3",
+        "vitest": "^4.1.9"
+    },
+    "engines": {
+        "node": ">=24"
+    },
+    "knip": {
+        "ignoreBinaries": [
+            "tsdown",
+            "vitest"
+        ]
+    }
+}