@coordination-network/user-client 0.0.2 → 0.1.0

package/dist/index.cjs

@@ -196,9 +196,8 @@ function verifyRegistrationRequest(request, expected) {
         if (signature.hasHighS())
             return false;
         const recoveredPublicKey = signature.recoverPublicKey(hexToBytes(digest)).toBytes(false);
-        // computeNetworkId is keccak256(X || Y); compare all 32 bytes. An address-style check over the
-        // low 20 would leave the top 12 unauthenticated and let one key claim 2^96 ids. The contract
-        // itself checks no signer at all.
+        // Compare all 32 bytes of the hash. A partial match would leave bytes unauthenticated and let
+        // one key claim many ids. The contract itself checks no signer at all.
         return identity.computeNetworkId(recoveredPublicKey).toLowerCase() === request.networkId.toLowerCase();
     }
     catch {

package/dist/index.js

@@ -195,9 +195,8 @@ function verifyRegistrationRequest(request, expected) {
         if (signature.hasHighS())
             return false;
         const recoveredPublicKey = signature.recoverPublicKey(hexToBytes(digest)).toBytes(false);
-        // computeNetworkId is keccak256(X || Y); compare all 32 bytes. An address-style check over the
-        // low 20 would leave the top 12 unauthenticated and let one key claim 2^96 ids. The contract
-        // itself checks no signer at all.
+        // Compare all 32 bytes of the hash. A partial match would leave bytes unauthenticated and let
+        // one key claim many ids. The contract itself checks no signer at all.
         return computeNetworkId(recoveredPublicKey).toLowerCase() === request.networkId.toLowerCase();
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coordination-network/user-client",
-  "version": "0.0.2",
+  "version": "0.1.0",
   "description": "Single-call onboarding and registration for the coordination network: derive device keys, encode the meta-stealth address, and register networkId -> metaStealthAddress on IdentityRegistry.",
   "license": "MIT",
   "repository": {
@@ -36,16 +36,17 @@
     "build": "rimraf dist types && rollup -c rollup.config.mjs"
   },
   "dependencies": {
-    "@coordination-network/identity": "^0.0.2",
+    "@coordination-network/identity": "^0.1.0",
     "@noble/curves": "^1.9.7",
     "@noble/hashes": "^1.8.0"
   },
   "devDependencies": {
-    "@coordination-network/network-member-client": "^0.0.2",
-    "@coordination-network/network-member-proof": "^0.0.2",
+    "@coordination-network/network-member-client": "^0.1.0",
+    "@coordination-network/network-member-proof": "^0.1.0",
     "@rollup/plugin-typescript": "^12.3.0",
-    "@semaphore-protocol/group": "4.14.3",
-    "@semaphore-protocol/identity": "4.14.3",
+    "@semaphore-protocol/group": "4.14.4",
+    "@semaphore-protocol/identity": "4.14.4",
+    "ffjavascript": "0.3.1",
     "rimraf": "^6.1.3",
     "rollup": "^4.62.2",
     "rollup-plugin-cleanup": "^3.2.1",

package/src/request.ts

@@ -79,9 +79,8 @@ export function verifyRegistrationRequest(request: RegistrationRequest, expected
 
         const recoveredPublicKey = signature.recoverPublicKey(hexToBytes(digest)).toBytes(false)
 
-        // computeNetworkId is keccak256(X || Y); compare all 32 bytes. An address-style check over the
-        // low 20 would leave the top 12 unauthenticated and let one key claim 2^96 ids. The contract
-        // itself checks no signer at all.
+        // Compare all 32 bytes of the hash. A partial match would leave bytes unauthenticated and let
+        // one key claim many ids. The contract itself checks no signer at all.
         return computeNetworkId(recoveredPublicKey).toLowerCase() === request.networkId.toLowerCase()
     } catch {
         return false