@dopamint-fun/open-sdk 0.2.0-dev.10 → 0.2.0-dev.12

package/dist/bytes.d.ts

@@ -4,6 +4,15 @@ export declare function toHex0x(bytes: Uint8Array): string;
 /** Length-aware equality. `every()` on an empty left-hand side is vacuously
  *  true, which would accept a truncated hex decode as a matching key. */
 export declare function equalBytes(left: Uint8Array, right: Uint8Array): boolean;
+/** One `label:value` line per field, under a line naming the domain.
+ *
+ *  What an owner's wallet is asked to approve is text, not a frame: a Sui
+ *  wallet renders a personal message as characters, and a framed payload
+ *  reached a person as NUL bytes and junk they could not check. The order of
+ *  the fields is signed, and so is the absence of a trailing newline. */
+export declare function signedMessage(domain: string, fields: readonly (readonly [label: string, value: string])[]): Uint8Array;
+/** An id or address at the one width the message renders it, or a throw. */
+export declare function fixedHex0x(value: string, length: number, field: string): string;
 /** An append-only byte buffer with the wire's own vocabulary. */
 export declare class ByteWriter {
     private chunks;

package/dist/bytes.js

@@ -37,6 +37,23 @@ export function equalBytes(left, right) {
         return false;
     return left.every((byte, index) => byte === right[index]);
 }
+/** One `label:value` line per field, under a line naming the domain.
+ *
+ *  What an owner's wallet is asked to approve is text, not a frame: a Sui
+ *  wallet renders a personal message as characters, and a framed payload
+ *  reached a person as NUL bytes and junk they could not check. The order of
+ *  the fields is signed, and so is the absence of a trailing newline. */
+export function signedMessage(domain, fields) {
+    const lines = fields.map(([label, value]) => `${label}:${value}`);
+    return textBytes([domain, ...lines].join("\n"));
+}
+/** An id or address at the one width the message renders it, or a throw. */
+export function fixedHex0x(value, length, field) {
+    const bytes = fromHex(value);
+    if (bytes.length !== length)
+        throw new Error(`${field} must be ${length} bytes, got ${bytes.length}`);
+    return toHex0x(bytes);
+}
 /** An append-only byte buffer with the wire's own vocabulary. */
 export class ByteWriter {
     chunks = [];

package/dist/identity.d.ts

@@ -9,7 +9,7 @@ export interface AgentIdentityFields {
 }
 /** The form the product stores, which is the form the signature covers. */
 export declare function parseIdentityFields(fields: AgentIdentityFields): Required<AgentIdentityFields>;
-/** The exact bytes the owning address signs to name an agent. */
+/** The exact message the owning address signs to name an agent. */
 export declare function canonicalIdentityPayload(edit: {
     agentId: string;
     owner: string;

package/dist/identity.js

@@ -6,14 +6,14 @@
  * and names it. After a claim the same route belongs to the claiming wallet,
  * and this key can no longer sign for it -- which is the point of a claim.
  *
- * The payload mirrors `AgentIdentityEdit::canonical_payload` in
+ * The message mirrors `AgentIdentityEdit::canonical_message` in
  * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: the two
- * ids are fixed 32 bytes and every named field is length-framed, so "ab"/"c"
- * and "a"/"bc" cannot sign the same bytes, and neither can a shorter agent id
- * borrow a byte from the owner behind it. The product parses before it
- * verifies -- it trims each field and lower-cases the handle -- so this signs
- * the parsed form, or the signature is over bytes the store never holds. */
-import { ByteWriter, fromHex, textBytes } from "./bytes.js";
+ * ids render at a fixed 32 bytes and every named field is quoted, so "ab"/"c"
+ * and "a"/"bc" cannot sign the same text and a newline inside a name cannot
+ * forge a line of its own. The product parses before it verifies -- it trims
+ * each field and lower-cases the handle -- so this signs the parsed form, or
+ * the signature is over text the store never holds. */
+import { fixedHex0x, signedMessage } from "./bytes.js";
 import { signOwnerAuthenticator } from "./keypair.js";
 import { refusalMessageFromText } from "./refusal.js";
 const IDENTITY_DOMAIN = "dopa_open::agent_identity::v1";
@@ -27,20 +27,18 @@ export function parseIdentityFields(fields) {
         bio: fields.bio?.trim() || null,
     };
 }
-/** The exact bytes the owning address signs to name an agent. */
+/** The exact message the owning address signs to name an agent. */
 export function canonicalIdentityPayload(edit) {
-    const domain = textBytes(IDENTITY_DOMAIN);
     const parsed = parseIdentityFields(edit.fields);
-    const writer = new ByteWriter()
-        .pushU64(domain.length)
-        .pushBytes(domain)
-        .pushFixed(fromHex(edit.agentId), 32, "agent id")
-        .pushFixed(fromHex(edit.owner), 32, "owner");
-    for (const field of [parsed.name ?? "", parsed.handle ?? "", parsed.bio ?? ""]) {
-        const bytes = textBytes(field);
-        writer.pushU64(bytes.length).pushBytes(bytes);
-    }
-    return writer.pushU64(edit.issuedAtMs).pushU64(edit.expiresAtMs).bytes();
+    return signedMessage(IDENTITY_DOMAIN, [
+        ["agent", fixedHex0x(edit.agentId, 32, "agent id")],
+        ["owner", fixedHex0x(edit.owner, 32, "owner")],
+        ["name", JSON.stringify(parsed.name ?? "")],
+        ["handle", JSON.stringify(parsed.handle ?? "")],
+        ["bio", JSON.stringify(parsed.bio ?? "")],
+        ["issued_at_ms", String(edit.issuedAtMs)],
+        ["expires_at_ms", String(edit.expiresAtMs)],
+    ]);
 }
 /** Name an agent, as the address that owns it. Answers what the arena stored. */
 export async function nameAgent(args) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dopamint-fun/open-sdk",
-  "version": "0.2.0-dev.10",
+  "version": "0.2.0-dev.12",
   "description": "DOPA-OPEN client SDK: generate and hold your own agent key, sign registrations, and play a Participant Session",
   "license": "Apache-2.0",
   "repository": {