hbsig 0.2.8 → 0.3.1

package/cjs/signer.js

@@ -21,12 +21,13 @@ var _aoconnect = require("@permaweb/aoconnect");
 var _send = require("./send.js");
 var _signerUtils = require("./signer-utils.js");
 var _excluded = ["body"],
-  _excluded2 = ["path", "method"],
-  _excluded3 = ["body"];
-function _objectWithoutProperties(e, t) { if (null == e) return {}; var o, r, i = _objectWithoutPropertiesLoose(e, t); if (Object.getOwnPropertySymbols) { var n = Object.getOwnPropertySymbols(e); for (r = 0; r < n.length; r++) o = n[r], -1 === t.indexOf(o) && {}.propertyIsEnumerable.call(e, o) && (i[o] = e[o]); } return i; }
-function _objectWithoutPropertiesLoose(r, e) { if (null == r) return {}; var t = {}; for (var n in r) if ({}.hasOwnProperty.call(r, n)) { if (-1 !== e.indexOf(n)) continue; t[n] = r[n]; } return t; }
+  _excluded2 = ["method"],
+  _excluded3 = ["path"],
+  _excluded4 = ["body"];
 function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
 function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function _objectWithoutProperties(e, t) { if (null == e) return {}; var o, r, i = _objectWithoutPropertiesLoose(e, t); if (Object.getOwnPropertySymbols) { var n = Object.getOwnPropertySymbols(e); for (r = 0; r < n.length; r++) o = n[r], -1 === t.indexOf(o) && {}.propertyIsEnumerable.call(e, o) && (i[o] = e[o]); } return i; }
+function _objectWithoutPropertiesLoose(r, e) { if (null == r) return {}; var t = {}; for (var n in r) if ({}.hasOwnProperty.call(r, n)) { if (-1 !== e.indexOf(n)) continue; t[n] = r[n]; } return t; }
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
@@ -124,285 +125,112 @@ var hasBinaryData = function hasBinaryData(obj) {
   return false;
 };
 
-// Helper to check if value is a simple array that should use structured fields
-var isSimpleArray = function isSimpleArray(value) {
-  if (!Array.isArray(value)) return false;
-  return value.every(function (item) {
-    // Simple types that can be in structured field lists
-    if (typeof item === "string") return true;
-    if (typeof item === "number") return true;
-    if (typeof item === "boolean") return true;
-    if ((0, _encodeUtils.isBytes)(item)) return true;
-
-    // Complex types cannot be in structured field lists
-    if (item && _typeof(item) === "object") return false;
-    return true;
-  });
-};
-
-// Helper to encode array as structured field list
-var encodeAsStructuredFieldList = function encodeAsStructuredFieldList(arr) {
-  return arr.map(function (item) {
-    if (typeof item === "string") {
-      // String values are quoted
-      return "\"".concat(item.replace(/\\/g, "\\\\").replace(/"/g, '\\"'), "\"");
-    } else if (typeof item === "number") {
-      // Numbers are bare
-      return String(item);
-    } else if (typeof item === "boolean") {
-      // Booleans use ?0 or ?1
-      return item ? "?1" : "?0";
-    } else if ((0, _encodeUtils.isBytes)(item)) {
-      // Binary data as byte sequences
-      var buffer = Buffer.isBuffer(item) ? item : Buffer.from(item);
-      return ":".concat(buffer.toString("base64"), ":");
-    } else {
-      // Fallback
-      return "\"".concat(String(item), "\"");
+// Helper to build ao-types string from an object
+var buildAoTypes = function buildAoTypes(obj) {
+  var types = [];
+  for (var _i4 = 0, _Object$entries4 = Object.entries(obj); _i4 < _Object$entries4.length; _i4++) {
+    var _Object$entries4$_i = _slicedToArray(_Object$entries4[_i4], 2),
+      key = _Object$entries4$_i[0],
+      value = _Object$entries4$_i[1];
+    if (typeof value === "number") {
+      types.push("".concat(key, "=\"").concat(Number.isInteger(value) ? "integer" : "float", "\""));
+    } else if (typeof value === "boolean") {
+      types.push("".concat(key, "=\"atom\""));
+    } else if (value === null) {
+      types.push("".concat(key, "=\"atom\""));
+    } else if (_typeof(value) === "symbol") {
+      // Symbols are Erlang atoms
+      types.push("".concat(key, "=\"atom\""));
     }
-  }).join(", ");
+  }
+  return types.length > 0 ? types.join(", ") : null;
 };
-var smartSign = /*#__PURE__*/function () {
-  var _ref = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(obj, path) {
-    var filtered, canUseSimpleEncoding, hasBodyField, _i4, _Object$entries4, _Object$entries4$_i, key, value, message, types, _i5, _Object$entries5, _Object$entries5$_i, _key, _value, normalized, result, flattened, encoded, _result, _i6, _Object$entries6, _Object$entries6$_i, _key2, _value2, _t;
-    return _regenerator().w(function (_context) {
-      while (1) switch (_context.p = _context.n) {
-        case 0:
-          _context.p = 0;
-          // Filter out undefined values
-          filtered = _filterUndefined(obj); // Check if we can encode everything as headers (no multipart needed)
-          canUseSimpleEncoding = true;
-          hasBodyField = false;
-          _i4 = 0, _Object$entries4 = Object.entries(filtered);
-        case 1:
-          if (!(_i4 < _Object$entries4.length)) {
-            _context.n = 6;
-            break;
-          }
-          _Object$entries4$_i = _slicedToArray(_Object$entries4[_i4], 2), key = _Object$entries4$_i[0], value = _Object$entries4$_i[1];
-          if (!(key === "path")) {
-            _context.n = 2;
-            break;
-          }
-          return _context.a(3, 5);
-        case 2:
-          if (!(key === "body" || key === "data")) {
-            _context.n = 3;
-            break;
-          }
-          hasBodyField = true;
-          // Only use multipart if body/data is actually binary
-          if (!(0, _encodeUtils.isBytes)(value)) {
-            _context.n = 3;
-            break;
-          }
-          canUseSimpleEncoding = false;
-          return _context.a(3, 6);
-        case 3:
-          if (!(value && _typeof(value) === "object" && !Array.isArray(value) && !(0, _encodeUtils.isBytes)(value))) {
-            _context.n = 4;
-            break;
-          }
-          if (!(Object.keys(value).length > 0)) {
-            _context.n = 4;
-            break;
-          }
-          canUseSimpleEncoding = false;
-          return _context.a(3, 6);
-        case 4:
-          if (!(Array.isArray(value) && !isSimpleArray(value))) {
-            _context.n = 5;
-            break;
-          }
-          canUseSimpleEncoding = false;
-          return _context.a(3, 6);
-        case 5:
-          _i4++;
-          _context.n = 1;
-          break;
-        case 6:
-          if (!canUseSimpleEncoding) {
-            _context.n = 11;
-            break;
-          }
-          // Build a simple message that won't trigger multipart
-          message = {};
-          if (path) message.path = path;
-          types = [];
-          _i5 = 0, _Object$entries5 = Object.entries(filtered);
-        case 7:
-          if (!(_i5 < _Object$entries5.length)) {
-            _context.n = 10;
-            break;
-          }
-          _Object$entries5$_i = _slicedToArray(_Object$entries5[_i5], 2), _key = _Object$entries5$_i[0], _value = _Object$entries5$_i[1];
-          if (!(_key === "path")) {
-            _context.n = 8;
-            break;
-          }
-          return _context.a(3, 9);
-        case 8:
-          if (_value === "") {
-            types.push("".concat(_key, "=\"empty-binary\""));
-          } else if (Array.isArray(_value) && _value.length === 0) {
-            types.push("".concat(_key, "=\"empty-list\""));
-          } else if (_value && _typeof(_value) === "object" && Object.keys(_value).length === 0) {
-            types.push("".concat(_key, "=\"empty-message\""));
-          } else if (isSimpleArray(_value)) {
-            types.push("".concat(_key, "=\"list\""));
-            message[_key] = encodeAsStructuredFieldList(_value);
-          } else if (typeof _value === "number") {
-            types.push("".concat(_key, "=\"").concat(Number.isInteger(_value) ? "integer" : "float", "\""));
-            message[_key] = String(_value);
-          } else if (typeof _value === "boolean") {
-            types.push("".concat(_key, "=\"atom\""));
-            message[_key] = String(_value);
-          } else if (_value === null || _value === undefined) {
-            types.push("".concat(_key, "=\"atom\""));
-            message[_key] = String(_value);
-          } else if (typeof _value === "string") {
-            message[_key] = _value;
-          }
-        case 9:
-          _i5++;
-          _context.n = 7;
-          break;
-        case 10:
-          if (types.length > 0) {
-            message["ao-types"] = types.join(", ");
-          }
-          return _context.a(2, (0, _httpsig.httpsig_to)(message));
-        case 11:
-          // For complex structures that need multipart, use enc()
-          normalized = (0, _erl_json.normalize)(_objectSpread(_objectSpread({}, filtered), path && {
-            path: path
-          }));
-          _context.n = 12;
-          return (0, _encode.enc)(normalized);
-        case 12:
-          result = _context.v;
-          // enc() returns { headers: {...}, body: ... }
-          // We need to flatten this for httpsig_to
-          flattened = _objectSpread(_objectSpread({}, result.headers), {}, {
-            body: result.body
-          }, path && {
-            path: path
-          }); // httpsig_to expects the structured format
-          encoded = (0, _httpsig.httpsig_to)(flattened);
-          return _context.a(2, encoded);
-        case 13:
-          _context.p = 13;
-          _t = _context.v;
-          console.error("Encoding failed:", _t);
-
-          // Fallback: create a simple structure
-          _result = {};
-          if (path) _result.path = path;
-          _i6 = 0, _Object$entries6 = Object.entries(obj);
-        case 14:
-          if (!(_i6 < _Object$entries6.length)) {
-            _context.n = 17;
-            break;
-          }
-          _Object$entries6$_i = _slicedToArray(_Object$entries6[_i6], 2), _key2 = _Object$entries6$_i[0], _value2 = _Object$entries6$_i[1];
-          if (!(_key2 === "path")) {
-            _context.n = 15;
-            break;
-          }
-          return _context.a(3, 16);
-        case 15:
-          if (!(0, _encodeUtils.isBytes)(_value2) && _value2 !== undefined) {
-            _result[_key2] = _value2;
-          }
-        case 16:
-          _i6++;
-          _context.n = 14;
-          break;
-        case 17:
-          return _context.a(2, _result);
-      }
-    }, _callee, null, [[0, 13]]);
-  }));
-  return function smartSign(_x, _x2) {
-    return _ref.apply(this, arguments);
-  };
-}();
 
 // Internal encode function that uses the original impl as much as possible
 var encode = /*#__PURE__*/function () {
-  var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(obj, path) {
-    var filtered, fields, encoded, body, headers;
-    return _regenerator().w(function (_context2) {
-      while (1) switch (_context2.n) {
+  var _ref = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(obj, path) {
+    var filtered, fields, aoTypes, existing, encoded, encResult, body, headers;
+    return _regenerator().w(function (_context) {
+      while (1) switch (_context.n) {
         case 0:
           // Filter out undefined values before processing
           filtered = _filterUndefined(obj); // If object contains binary data, use enc() directly
           if (!hasBinaryData(filtered)) {
-            _context2.n = 2;
+            _context.n = 2;
             break;
           }
-          _context2.n = 1;
+          _context.n = 1;
           return (0, _encode.enc)(filtered);
         case 1:
-          return _context2.a(2, _context2.v);
+          return _context.a(2, _context.v);
         case 2:
-          // Otherwise use the standard pipeline
-          fields = _objectSpread({}, filtered); // Only add path if explicitly provided
+          // Only add path if explicitly provided
+          fields = _objectSpread({}, filtered);
           if (path) fields.path = path;
 
+          // Build ao-types annotation for typed values (integers, booleans, etc.)
+          // This tells HyperBEAM how to convert values during verification
+          // Merge with any existing ao-types (e.g., list annotations from hb.js)
+          aoTypes = buildAoTypes(filtered);
+          if (aoTypes) {
+            existing = fields["ao-types"];
+            fields["ao-types"] = existing ? existing + ", " + aoTypes : aoTypes;
+          }
+
           // Try the standard encoding pipeline
           encoded = (0, _httpsig.httpsig_to)((0, _erl_json.normalize)((0, _structured.structured_from)((0, _erl_json.normalize)(fields)))); // Check if the encoded result is valid for HTTP headers
           if (isValid(encoded)) {
-            _context2.n = 4;
+            _context.n = 4;
             break;
           }
-          _context2.n = 3;
+          _context.n = 3;
           return (0, _encode.enc)(filtered);
         case 3:
-          return _context2.a(2, _context2.v);
+          encResult = _context.v;
+          return _context.a(2, encResult);
         case 4:
           // For non-binary data, return in the same format as enc()
           // httpsig_to returns a flattened object, so we need to separate headers and body
           body = encoded.body, headers = _objectWithoutProperties(encoded, _excluded);
-          return _context2.a(2, {
+          return _context.a(2, {
             headers: headers,
             body: body
           });
       }
-    }, _callee2);
+    }, _callee);
   }));
-  return function encode(_x3, _x4) {
-    return _ref2.apply(this, arguments);
+  return function encode(_x, _x2) {
+    return _ref.apply(this, arguments);
   };
 }();
 
 // Helper to join URL and path
-var joinUrl = function joinUrl(_ref3) {
-  var url = _ref3.url,
-    path = _ref3.path;
+var joinUrl = function joinUrl(_ref2) {
+  var url = _ref2.url,
+    path = _ref2.path;
   if (path.startsWith("http://") || path.startsWith("https://")) return path;
   var normalizedPath = path.startsWith("/") ? path : "/" + path;
   return url.endsWith("/") ? url.slice(0, -1) + normalizedPath : url + normalizedPath;
 };
 
 // Main sign function that matches signer.js API
-function sign(_x5) {
+function sign(_x3) {
   return _sign2.apply(this, arguments);
 } // Helper function to recursively filter out undefined values
 function _sign2() {
-  _sign2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee4(_ref4) {
-    var url, path, encoded, jwk, _ref4$signPath, signPath, signer, _encoded$body, body, headers, _enc;
-    return _regenerator().w(function (_context4) {
-      while (1) switch (_context4.n) {
+  _sign2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee3(_ref3) {
+    var url, path, encoded, jwk, _ref3$signPath, signPath, signer, _encoded$body, body, headers, _enc;
+    return _regenerator().w(function (_context3) {
+      while (1) switch (_context3.n) {
         case 0:
-          url = _ref4.url, path = _ref4.path, encoded = _ref4.msg, jwk = _ref4.jwk, _ref4$signPath = _ref4.signPath, signPath = _ref4$signPath === void 0 ? true : _ref4$signPath;
+          url = _ref3.url, path = _ref3.path, encoded = _ref3.msg, jwk = _ref3.jwk, _ref3$signPath = _ref3.signPath, signPath = _ref3$signPath === void 0 ? true : _ref3$signPath;
           signer = (0, _aoconnect.createSigner)(jwk, url);
-          _encoded$body = encoded.body, body = _encoded$body === void 0 ? null : _encoded$body, headers = _objectWithoutProperties(encoded, _excluded3);
+          _encoded$body = encoded.body, body = _encoded$body === void 0 ? null : _encoded$body, headers = _objectWithoutProperties(encoded, _excluded4);
           _enc = {
             headers: headers
           };
           if (body) _enc.body = new Blob([body]);
-          _context4.n = 1;
+          _context3.n = 1;
           return _sign({
             path: path,
             signPath: signPath,
@@ -411,9 +239,9 @@ function _sign2() {
             url: url
           });
         case 1:
-          return _context4.a(2, _context4.v);
+          return _context3.a(2, _context3.v);
       }
-    }, _callee4);
+    }, _callee3);
   }));
   return _sign2.apply(this, arguments);
 }
@@ -426,10 +254,10 @@ var _filterUndefined = function filterUndefined(obj) {
   }
   if (_typeof(obj) === "object" && obj.constructor === Object) {
     var filtered = {};
-    for (var _i7 = 0, _Object$entries7 = Object.entries(obj); _i7 < _Object$entries7.length; _i7++) {
-      var _Object$entries7$_i = _slicedToArray(_Object$entries7[_i7], 2),
-        key = _Object$entries7$_i[0],
-        value = _Object$entries7$_i[1];
+    for (var _i5 = 0, _Object$entries5 = Object.entries(obj); _i5 < _Object$entries5.length; _i5++) {
+      var _Object$entries5$_i = _slicedToArray(_Object$entries5[_i5], 2),
+        key = _Object$entries5$_i[0],
+        value = _Object$entries5$_i[1];
       var filteredValue = _filterUndefined(value);
       if (filteredValue !== undefined) {
         filtered[key] = filteredValue;
@@ -439,43 +267,59 @@ var _filterUndefined = function filterUndefined(obj) {
   }
   return obj;
 };
-function _sign(_x6) {
+function _sign(_x4) {
   return _sign3.apply(this, arguments);
 }
 function _sign3() {
-  _sign3 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee5(_ref5) {
-    var path, _ref5$signPath, signPath, _ref5$method, method, encoded, signer, url, headersObj, body, url_path, _url, bodySize, lowercaseHeaders, _i8, _Object$entries8, _Object$entries8$_i, key, value, bodyKeys, isPath, signingFields, signedRequest, finalHeaders, _i9, _Object$entries9, _Object$entries9$_i, _key3, _value3, result;
-    return _regenerator().w(function (_context5) {
-      while (1) switch (_context5.n) {
+  _sign3 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee4(_ref4) {
+    var path, _ref4$signPath, signPath, _ref4$method, method, encoded, signer, url, headersObj, body, url_path, _url, isDataFieldPath, bodySize, lowercaseHeaders, _i6, _Object$entries6, _Object$entries6$_i, key, value, bodyKeys, metadataFields, isPath, signingFields, signedRequest, finalHeaders, _i7, _Object$entries7, _Object$entries7$_i, _key, _value, result;
+    return _regenerator().w(function (_context4) {
+      while (1) switch (_context4.n) {
         case 0:
-          path = _ref5.path, _ref5$signPath = _ref5.signPath, signPath = _ref5$signPath === void 0 ? true : _ref5$signPath, _ref5$method = _ref5.method, method = _ref5$method === void 0 ? "POST" : _ref5$method, encoded = _ref5.encoded, signer = _ref5.signer, url = _ref5.url;
+          path = _ref4.path, _ref4$signPath = _ref4.signPath, signPath = _ref4$signPath === void 0 ? true : _ref4$signPath, _ref4$method = _ref4.method, method = _ref4$method === void 0 ? "POST" : _ref4$method, encoded = _ref4.encoded, signer = _ref4.signer, url = _ref4.url;
           headersObj = encoded ? encoded.headers : {};
           body = encoded ? encoded.body : undefined;
           url_path = typeof signPath === "string" ? signPath : path;
           _url = joinUrl({
             url: url,
             path: url_path
-          }); // Only add path header if path is provided
-          if (path) headersObj["path"] = path;
+          }); // Only add path header if it's a data field (doesn't start with "/").
+          // URL paths (like "/relay/process") should NOT be added to headers.
+          // Data fields named "path" (e.g., "credit-notice") should be signed.
+          isDataFieldPath = path && typeof path === "string" && !path.startsWith("/");
+          if (isDataFieldPath && !headersObj["path"]) headersObj["path"] = path;
+
+          // Add accept-bundle header to request inline data instead of links
+          headersObj["accept-bundle"] = "true";
           if (body && !headersObj["content-length"]) {
             bodySize = body.size || body.byteLength || 0;
             if (bodySize > 0) headersObj["content-length"] = String(bodySize);
           }
           lowercaseHeaders = {};
-          for (_i8 = 0, _Object$entries8 = Object.entries(headersObj); _i8 < _Object$entries8.length; _i8++) {
-            _Object$entries8$_i = _slicedToArray(_Object$entries8[_i8], 2), key = _Object$entries8$_i[0], value = _Object$entries8$_i[1];
+          for (_i6 = 0, _Object$entries6 = Object.entries(headersObj); _i6 < _Object$entries6.length; _i6++) {
+            _Object$entries6$_i = _slicedToArray(_Object$entries6[_i6], 2), key = _Object$entries6$_i[0], value = _Object$entries6$_i[1];
             lowercaseHeaders[key.toLowerCase()] = value;
           }
           bodyKeys = headersObj["body-keys"] ? headersObj["body-keys"].replace(/"/g, "").split(",").map(function (k) {
             return k.trim();
-          }) : [];
+          }) : []; // Exclude metadata fields that get consumed/stripped during JSON codec parsing:
+          // - ao-types: used for type conversion, then removed by structured codec
+          // - accept-bundle: request metadata for inlining nested data
+          // - content-digest: only exclude when no body; when body exists, sign it so
+          //   HyperBEAM can map content-digest → body → ao-body-key field in committed list
+          // Note: "path" as a data field (e.g., path: "credit-notice") should be signed.
+          // The @path derived component (HTTP request URL) is handled separately.
+          metadataFields = ["body-keys", "ao-types", "accept-bundle", "content-length"];
+          if (!body) {
+            metadataFields.push("content-digest");
+          }
           isPath = false;
           signingFields = Object.keys(lowercaseHeaders).filter(function (key) {
             if (key === "path") isPath = true;
-            return key !== "body-keys" && key !== "path" && !bodyKeys.includes(key);
+            return !metadataFields.includes(key) && !bodyKeys.includes(key);
           }); // Only add @path if signPath is enabled AND path header exists
           if (signPath !== false && isPath) signingFields.push("@path");
-          _context5.n = 1;
+          _context4.n = 1;
           return (0, _send.toHttpSigner)(signer)({
             request: {
               url: _url,
@@ -485,11 +329,11 @@ function _sign3() {
             fields: signingFields
           });
         case 1:
-          signedRequest = _context5.v;
+          signedRequest = _context4.v;
           finalHeaders = {};
-          for (_i9 = 0, _Object$entries9 = Object.entries(headersObj); _i9 < _Object$entries9.length; _i9++) {
-            _Object$entries9$_i = _slicedToArray(_Object$entries9[_i9], 2), _key3 = _Object$entries9$_i[0], _value3 = _Object$entries9$_i[1];
-            finalHeaders[_key3] = _value3;
+          for (_i7 = 0, _Object$entries7 = Object.entries(headersObj); _i7 < _Object$entries7.length; _i7++) {
+            _Object$entries7$_i = _slicedToArray(_Object$entries7[_i7], 2), _key = _Object$entries7$_i[0], _value = _Object$entries7$_i[1];
+            finalHeaders[_key] = _value;
           }
           finalHeaders["signature"] = signedRequest.headers["signature"];
           finalHeaders["signature-input"] = signedRequest.headers["signature-input"];
@@ -502,9 +346,9 @@ function _sign3() {
             headers: finalHeaders
           };
           if (body) result.body = body;
-          return _context5.a(2, result);
+          return _context4.a(2, result);
       }
-    }, _callee5);
+    }, _callee4);
   }));
   return _sign3.apply(this, arguments);
 }
@@ -514,42 +358,57 @@ function signer(config) {
     url = _config$url === void 0 ? "http://localhost:10001" : _config$url;
   if (!signer) throw new Error("Signer is required for mainnet mode");
   return /*#__PURE__*/function () {
-    var _ref6 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee3(fields) {
-      var _ref7,
-        _ref7$encoded,
+    var _ref5 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(fields) {
+      var _ref6,
+        _ref6$encoded,
         _encoded,
-        _ref7$path,
+        _ref6$path,
         signPath,
-        _fields$path,
-        path,
         _fields$method,
         method,
+        restFields,
+        fieldsPath,
+        isUrlPath,
+        path,
         aoFields,
+        _,
+        rest,
         filteredFields,
         encoded,
-        _args3 = arguments,
-        _t2;
-      return _regenerator().w(function (_context3) {
-        while (1) switch (_context3.n) {
+        _args2 = arguments,
+        _t;
+      return _regenerator().w(function (_context2) {
+        while (1) switch (_context2.n) {
           case 0:
-            _ref7 = _args3.length > 1 && _args3[1] !== undefined ? _args3[1] : {}, _ref7$encoded = _ref7.encoded, _encoded = _ref7$encoded === void 0 ? false : _ref7$encoded, _ref7$path = _ref7.path, signPath = _ref7$path === void 0 ? true : _ref7$path;
-            _fields$path = fields.path, path = _fields$path === void 0 ? "/relay/process" : _fields$path, _fields$method = fields.method, method = _fields$method === void 0 ? "POST" : _fields$method, aoFields = _objectWithoutProperties(fields, _excluded2);
+            _ref6 = _args2.length > 1 && _args2[1] !== undefined ? _args2[1] : {}, _ref6$encoded = _ref6.encoded, _encoded = _ref6$encoded === void 0 ? false : _ref6$encoded, _ref6$path = _ref6.path, signPath = _ref6$path === void 0 ? true : _ref6$path;
+            _fields$method = fields.method, method = _fields$method === void 0 ? "POST" : _fields$method, restFields = _objectWithoutProperties(fields, _excluded2); // Distinguish URL paths from data fields:
+            // - URL paths start with "/" (e.g., "/relay/process")
+            // - Data fields don't (e.g., "credit-notice" for P4 ledger actions)
+            fieldsPath = restFields.path;
+            isUrlPath = typeof fieldsPath === "string" && fieldsPath.startsWith("/");
+            path = isUrlPath ? fieldsPath : "/relay/process"; // Keep path in data fields if it's not a URL path
+            if (isUrlPath) {
+              _ = restFields.path, rest = _objectWithoutProperties(restFields, _excluded3);
+              aoFields = rest;
+            } else {
+              aoFields = restFields; // path stays as data field
+            }
             filteredFields = _filterUndefined(aoFields);
             if (!_encoded) {
-              _context3.n = 1;
+              _context2.n = 1;
               break;
             }
-            _t2 = filteredFields;
-            _context3.n = 3;
+            _t = filteredFields;
+            _context2.n = 3;
             break;
           case 1:
-            _context3.n = 2;
-            return encode(filteredFields, path);
+            _context2.n = 2;
+            return encode(filteredFields, null);
           case 2:
-            _t2 = _context3.v;
+            _t = _context2.v;
           case 3:
-            encoded = _t2;
-            _context3.n = 4;
+            encoded = _t;
+            _context2.n = 4;
             return _sign({
               path: path,
               signPath: signPath,
@@ -559,12 +418,12 @@ function signer(config) {
               url: url
             });
           case 4:
-            return _context3.a(2, _context3.v);
+            return _context2.a(2, _context2.v);
         }
-      }, _callee3);
+      }, _callee2);
     }));
-    return function (_x7) {
-      return _ref6.apply(this, arguments);
+    return function (_x5) {
+      return _ref5.apply(this, arguments);
     };
   }();
 }