@heyanon-arp/sdk 0.0.38 → 0.0.39

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -217,7 +217,13 @@ function verifyKeyLinkAttestation(attestation) {
217
217
  return false;
218
218
  }
219
219
  if (identityPubkey.length !== 32) return false;
220
- return verify2(sigBytes, canonicalBytes(payload), identityPubkey);
220
+ let signingBytes;
221
+ try {
222
+ signingBytes = canonicalBytes(payload);
223
+ } catch {
224
+ return false;
225
+ }
226
+ return verify2(sigBytes, signingBytes, identityPubkey);
221
227
  }
222
228
  function signedMessageHash(envelope) {
223
229
  const input = envelope.attachments === void 0 ? { protected: envelope.protected, body: envelope.body } : { protected: envelope.protected, body: envelope.body, attachments: envelope.attachments };
package/dist/index.mjs CHANGED
@@ -192,7 +192,13 @@ function verifyKeyLinkAttestation(attestation) {
192
192
  return false;
193
193
  }
194
194
  if (identityPubkey.length !== 32) return false;
195
- return verify2(sigBytes, canonicalBytes(payload), identityPubkey);
195
+ let signingBytes;
196
+ try {
197
+ signingBytes = canonicalBytes(payload);
198
+ } catch {
199
+ return false;
200
+ }
201
+ return verify2(sigBytes, signingBytes, identityPubkey);
196
202
  }
197
203
  function signedMessageHash(envelope) {
198
204
  const input = envelope.attachments === void 0 ? { protected: envelope.protected, body: envelope.body } : { protected: envelope.protected, body: envelope.body, attachments: envelope.attachments };
@@ -68,8 +68,8 @@ export interface AgentRegisteredResponse {
68
68
  }
69
69
  /**
70
70
  * Public view of an ARP agent — signed reads (`GET /v1/agents/:did`)
71
- * and the profile `PATCH` response. Owner-only material (raw scrypt,
72
- * encrypted secrets) never appears here.
71
+ * and the profile `PATCH` response. Owner-only material (raw key
72
+ * material, encrypted secrets) never appears here.
73
73
  */
74
74
  export interface AgentPublic {
75
75
  did: string;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@heyanon-arp/sdk",
3
- "version": "0.0.38",
4
- "description": "TypeScript SDK for the Agent Relationship Protocol — canonical JSON, Ed25519 envelope sign/verify, did:arp identity, scrypt key attestation, chain-audit helpers.",
3
+ "version": "0.0.39",
4
+ "description": "TypeScript SDK for the Agent Relationship Protocol — canonical JSON, Ed25519 envelope sign/verify, did:arp identity, Ed25519 owner key-link attestation, chain-audit helpers.",
5
5
  "license": "MIT",
6
6
  "keywords": [
7
7
  "arp",