@notabene/verify-proof 1.11.0 → 1.12.0-next.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/README.md +21 -15
  2. package/dist/cjs/bitcoin-UIEQV3IM.cjs +403 -0
  3. package/dist/cjs/bitcoin-UIEQV3IM.cjs.map +1 -0
  4. package/dist/cjs/cardano-QG2S452K.cjs +36 -0
  5. package/dist/cjs/cardano-QG2S452K.cjs.map +1 -0
  6. package/dist/cjs/concordium-4B33UJJ5.cjs +44 -0
  7. package/dist/cjs/concordium-4B33UJJ5.cjs.map +1 -0
  8. package/dist/cjs/cosmos-JTT3AZCF.cjs +92 -0
  9. package/dist/cjs/cosmos-JTT3AZCF.cjs.map +1 -0
  10. package/dist/cjs/eth-BVXX47HH.cjs +36 -0
  11. package/dist/cjs/eth-BVXX47HH.cjs.map +1 -0
  12. package/dist/cjs/index.cjs +68 -0
  13. package/dist/cjs/index.cjs.map +1 -0
  14. package/dist/cjs/index.d.cts +5 -0
  15. package/dist/cjs/solana-4WNBEQSU.cjs +348 -0
  16. package/dist/cjs/solana-4WNBEQSU.cjs.map +1 -0
  17. package/dist/cjs/tron-IM2O2VLM.cjs +57 -0
  18. package/dist/cjs/tron-IM2O2VLM.cjs.map +1 -0
  19. package/dist/cjs/xlm-CHT7RN4Z.cjs +27 -0
  20. package/dist/cjs/xlm-CHT7RN4Z.cjs.map +1 -0
  21. package/dist/cjs/xrpl-HJ2XWSOO.cjs +74 -0
  22. package/dist/cjs/xrpl-HJ2XWSOO.cjs.map +1 -0
  23. package/dist/esm/bitcoin-BTZ4TXEK.js +401 -0
  24. package/dist/esm/bitcoin-BTZ4TXEK.js.map +1 -0
  25. package/dist/esm/cardano-OMGAPH5N.js +30 -0
  26. package/dist/esm/cardano-OMGAPH5N.js.map +1 -0
  27. package/dist/esm/concordium-JJ5VEIOA.js +42 -0
  28. package/dist/esm/concordium-JJ5VEIOA.js.map +1 -0
  29. package/dist/esm/cosmos-AVIWAIX7.js +90 -0
  30. package/dist/esm/cosmos-AVIWAIX7.js.map +1 -0
  31. package/dist/esm/eth-GI4Z5V4T.js +33 -0
  32. package/dist/esm/eth-GI4Z5V4T.js.map +1 -0
  33. package/dist/esm/index.d.ts +5 -0
  34. package/dist/esm/index.js +66 -0
  35. package/dist/esm/index.js.map +1 -0
  36. package/dist/esm/solana-ZARDAF6O.js +341 -0
  37. package/dist/esm/solana-ZARDAF6O.js.map +1 -0
  38. package/dist/esm/tron-FI2B6DRS.js +52 -0
  39. package/dist/esm/tron-FI2B6DRS.js.map +1 -0
  40. package/dist/esm/xlm-TNRZ5CFC.js +25 -0
  41. package/dist/esm/xlm-TNRZ5CFC.js.map +1 -0
  42. package/dist/esm/xrpl-52IBJ4EW.js +69 -0
  43. package/dist/esm/xrpl-52IBJ4EW.js.map +1 -0
  44. package/package.json +27 -6
  45. package/src/bitcoin.ts +43 -19
  46. package/src/cashaddr.ts +157 -0
  47. package/src/concordium.ts +34 -283
  48. package/src/cosmos.ts +44 -6
  49. package/src/index.ts +31 -20
  50. package/src/tests/bitcoin.test.ts +527 -16
  51. package/src/tests/concordium.test.ts +96 -134
  52. package/src/tests/cosmos.test.ts +139 -0
  53. package/src/tests/index.test.ts +7 -7
  54. package/src/tests/solana.test.ts +1 -1
  55. package/src/tests/xrpl.test.ts +8 -6
  56. package/dist/bitcoin.d.ts +0 -2
  57. package/dist/cardano.d.ts +0 -2
  58. package/dist/concordium.d.ts +0 -15
  59. package/dist/cosmos.d.ts +0 -2
  60. package/dist/eth.d.ts +0 -4
  61. package/dist/index.cjs +0 -2
  62. package/dist/index.cjs.map +0 -1
  63. package/dist/index.d.ts +0 -2
  64. package/dist/index.js +0 -2
  65. package/dist/index.js.map +0 -1
  66. package/dist/index.modern.js +0 -2
  67. package/dist/index.modern.js.map +0 -1
  68. package/dist/index.umd.js +0 -2
  69. package/dist/index.umd.js.map +0 -1
  70. package/dist/solana.d.ts +0 -17
  71. package/dist/tests/bitcoin.test.d.ts +0 -1
  72. package/dist/tests/cardano.test.d.ts +0 -1
  73. package/dist/tests/concordium.test.d.ts +0 -1
  74. package/dist/tests/cosmos.test.d.ts +0 -1
  75. package/dist/tests/eth.test.d.ts +0 -1
  76. package/dist/tests/index.test.d.ts +0 -1
  77. package/dist/tests/solana.test.d.ts +0 -1
  78. package/dist/tests/tron.test.d.ts +0 -1
  79. package/dist/tests/xlm.test.d.ts +0 -1
  80. package/dist/tests/xrpl.test.d.ts +0 -1
  81. package/dist/tron.d.ts +0 -6
  82. package/dist/xlm.d.ts +0 -2
  83. package/dist/xrpl.d.ts +0 -5
package/README.md CHANGED
@@ -32,16 +32,28 @@ async function checkProof(proof: OwnershipProof) {
32
32
  }
33
33
  ```
34
34
 
35
+ ### SSR/ESM Compatibility
36
+
37
+ This library is fully compatible with modern SSR frameworks like SvelteKit, Next.js, and others. It uses dynamic imports to ensure that cryptographic dependencies (especially Bitcoin libraries) are loaded on-demand, preventing `Buffer is not defined` errors in SSR environments.
38
+
39
+ The library automatically sets up a `Buffer` polyfill for browser/SSR environments before any crypto code executes. No additional configuration is required in your consuming application.
40
+
35
41
  ## Supported Proof Types
36
42
 
37
- - Checkbox Confirmation (`ProofTypes.CheckboxConfirmation`)
43
+ - Self Declaration (`ProofTypes.SelfDeclaration`)
38
44
  - Screenshot (`ProofTypes.Screenshot`)
39
- - Personal Sign EIP191 (`ProofTypes.EIP191`)
40
- - Personal Sign EIP712 (`ProofTypes.EIP712`)
41
- - Personal Sign BIP137 (`ProofTypes.BIP137`)
42
- - BIP322 Signature (`ProofTypes.BIP322`)
43
- - Personal Sign XPUB (`ProofTypes.XPUB`)
44
- - Micro Transfer (`ProofTypes.MicroTransfer`)
45
+ - Ethereum EIP191 (`ProofTypes.EIP191`)
46
+ - Ethereum EIP712 (`ProofTypes.EIP712`)
47
+ - Bitcoin BIP137 (`ProofTypes.BIP137`)
48
+ - Bitcoin BIP322 (`ProofTypes.BIP322`)
49
+ - Solana ED25519 (`ProofTypes.ED25519`)
50
+ - Solana SIWS (`ProofTypes.SOL_SIWX`)
51
+ - Cardano CIP8 (`ProofTypes.CIP8`)
52
+ - XRPL ED25519 (`ProofTypes.XRP_ED25519`)
53
+ - Stellar XLM ED25519 (`ProofTypes.XLM_ED25519`)
54
+ - Concordium (`ProofTypes.CONCORDIUM`)
55
+ - Cosmos (`ProofTypes.COSMOS`)
56
+ - Tron TIP191 (`ProofTypes.TIP191`)
45
57
 
46
58
  ## Development
47
59
 
@@ -53,16 +65,10 @@ To set up the development environment:
53
65
 
54
66
  ## Scripts
55
67
 
56
- - `yarn dev`: Start development server
57
68
  - `yarn build`: Build the project
58
69
  - `yarn lint`: Run linter
59
- - `yarn test`: Run tests
60
-
61
- ## Dependencies
62
-
63
- - `@notabene/javascript-sdk`: Notabene JavaScript SDK
64
- - `viem`: Ethereum utility library
65
- - `bitcoinjs-message`: Bitcoin message signing and verification
70
+ - `yarn test:unit`: Run tests
71
+ - `yarn test:coverage`: Run tests with coverage
66
72
 
67
73
  ## License
68
74
 
@@ -0,0 +1,403 @@
1
+ 'use strict';
2
+
3
+ var buffer = require('buffer');
4
+ var javascriptSdk = require('@notabene/javascript-sdk');
5
+ var varuintBitcoin = require('varuint-bitcoin');
6
+ var base = require('@scure/base');
7
+ var ox = require('ox');
8
+ var secp256k1 = require('@noble/curves/secp256k1');
9
+ var bip322Js = require('bip322-js');
10
+
11
+ if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
12
+ var CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
13
+ var GENERATOR = [
14
+ BigInt("0x98f2bc8e61"),
15
+ BigInt("0x79b76d99e2"),
16
+ BigInt("0xf33e5fb3c4"),
17
+ BigInt("0xae2eabe2a8"),
18
+ BigInt("0x1e4f43e470")
19
+ ];
20
+ function polymod(values) {
21
+ let c = BigInt(1);
22
+ for (const d of values) {
23
+ const c0 = c >> BigInt(35);
24
+ c = (c & BigInt("0x07ffffffff")) << BigInt(5) ^ BigInt(d);
25
+ for (let i = 0; i < 5; i++) {
26
+ if (c0 >> BigInt(i) & BigInt(1)) {
27
+ c ^= GENERATOR[i];
28
+ }
29
+ }
30
+ }
31
+ return c ^ BigInt(1);
32
+ }
33
+ function prefixExpand(prefix) {
34
+ const result = [];
35
+ for (let i = 0; i < prefix.length; i++) {
36
+ result.push(prefix.charCodeAt(i) & 31);
37
+ }
38
+ result.push(0);
39
+ return result;
40
+ }
41
+ function decodeCashAddr(address, defaultPrefix = "bitcoincash") {
42
+ let prefix;
43
+ const colonIndex = address.indexOf(":");
44
+ if (colonIndex !== -1) {
45
+ prefix = address.slice(0, colonIndex).toLowerCase();
46
+ } else {
47
+ prefix = defaultPrefix;
48
+ }
49
+ const rawPayload = colonIndex !== -1 ? address.slice(colonIndex + 1) : address;
50
+ if (/[A-Z]/.test(rawPayload) && /[a-z]/.test(rawPayload)) {
51
+ throw new Error("Invalid CashAddr: mixed case");
52
+ }
53
+ const payload = rawPayload.toLowerCase();
54
+ const words = [];
55
+ for (const ch of payload) {
56
+ const idx = CHARSET.indexOf(ch);
57
+ if (idx === -1) throw new Error("Invalid CashAddr character: " + ch);
58
+ words.push(idx);
59
+ }
60
+ if (words.length < 8) throw new Error("CashAddr too short");
61
+ const checksumData = [...prefixExpand(prefix), ...words];
62
+ if (polymod(checksumData) !== BigInt(0)) {
63
+ throw new Error("Invalid CashAddr checksum");
64
+ }
65
+ const dataWords = words.slice(0, -8);
66
+ const payloadBytes = base.bech32.fromWords(dataWords);
67
+ if (payloadBytes.length === 0) {
68
+ throw new Error("Invalid CashAddr padding");
69
+ }
70
+ const versionByte = payloadBytes[0];
71
+ const type = versionByte >> 3 & 15;
72
+ const hashSizeBits = versionByte & 7;
73
+ const expectedSizes = [20, 24, 28, 32, 40, 48, 56, 64];
74
+ const expectedSize = expectedSizes[hashSizeBits];
75
+ const hashBytes = payloadBytes.slice(1);
76
+ if (hashBytes.length !== expectedSize) {
77
+ throw new Error(
78
+ `Hash length mismatch: expected ${expectedSize}, got ${hashBytes.length}`
79
+ );
80
+ }
81
+ return { prefix, type, hash: Uint8Array.from(hashBytes) };
82
+ }
83
+
84
+ // src/bitcoin.ts
85
+ var CHAIN_CONFIGS = {
86
+ bitcoin: {
87
+ messagePrefix: "Bitcoin Signed Message:\n",
88
+ pubKeyHashVersion: 0,
89
+ // 1...
90
+ scriptHashVersion: 5,
91
+ // 3...
92
+ bech32Prefix: "bc",
93
+ isTestnet: false
94
+ },
95
+ bitcoincash: {
96
+ messagePrefix: "Bitcoin Signed Message:\n",
97
+ pubKeyHashVersion: 0,
98
+ // 1...
99
+ scriptHashVersion: 5,
100
+ // 3...
101
+ bech32Prefix: "bc",
102
+ isTestnet: false
103
+ },
104
+ litecoin: {
105
+ messagePrefix: "Litecoin Signed Message:\n",
106
+ pubKeyHashVersion: 48,
107
+ // L... or M...
108
+ scriptHashVersion: 50,
109
+ // 3... or M...
110
+ bech32Prefix: "ltc",
111
+ isTestnet: false
112
+ },
113
+ dogecoin: {
114
+ messagePrefix: "Dogecoin Signed Message:\n",
115
+ pubKeyHashVersion: 30,
116
+ // D...
117
+ scriptHashVersion: 22,
118
+ // A...
119
+ isTestnet: false
120
+ },
121
+ dash: {
122
+ messagePrefix: "DarkCoin Signed Message:\n",
123
+ pubKeyHashVersion: 76,
124
+ // X...
125
+ scriptHashVersion: 16,
126
+ // 7...
127
+ isTestnet: false
128
+ },
129
+ zcash: {
130
+ messagePrefix: "Zcash Signed Message:\n",
131
+ pubKeyHashVersion: Uint8Array.from([28, 184]),
132
+ // <-- FIXED
133
+ scriptHashVersion: Uint8Array.from([28, 189]),
134
+ isTestnet: false
135
+ },
136
+ testnet: {
137
+ messagePrefix: "Bitcoin Signed Message:\n",
138
+ pubKeyHashVersion: 111,
139
+ // m or n
140
+ scriptHashVersion: 196,
141
+ // 2
142
+ bech32Prefix: "tb",
143
+ isTestnet: true
144
+ }
145
+ };
146
+ async function verifyBTCSignature(proof) {
147
+ const parts = proof.address.split(":");
148
+ const ns = parts[0];
149
+ const address = parts.slice(2).join(":");
150
+ if (ns !== "bip122") return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
151
+ const chainConfig = getChainConfig(address);
152
+ if (!chainConfig) return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
153
+ const isZcash = address.startsWith("t1") || address.startsWith("t3");
154
+ if (isZcash) {
155
+ return verifyBIP137(address, proof, chainConfig);
156
+ }
157
+ if (chainConfig.isTestnet) {
158
+ try {
159
+ return verifyBIP322(address, proof);
160
+ } catch {
161
+ return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
162
+ }
163
+ }
164
+ const isTaproot = address.startsWith("bc1p") || address.startsWith("tb1p");
165
+ if (isTaproot && proof.type === javascriptSdk.ProofTypes.BIP137) {
166
+ return verifyBIP322(address, proof);
167
+ }
168
+ try {
169
+ switch (proof.type) {
170
+ case javascriptSdk.ProofTypes.BIP137:
171
+ return verifyBIP137(address, proof, chainConfig);
172
+ case javascriptSdk.ProofTypes.BIP322:
173
+ return verifyBIP322(address, proof);
174
+ default:
175
+ return {
176
+ ...proof,
177
+ status: javascriptSdk.ProofStatus.FAILED
178
+ };
179
+ }
180
+ } catch {
181
+ return {
182
+ ...proof,
183
+ status: javascriptSdk.ProofStatus.FAILED
184
+ };
185
+ }
186
+ }
187
+ function getChainConfig(address) {
188
+ if (address.startsWith("1") || address.startsWith("3") || address.startsWith("bc1")) {
189
+ return CHAIN_CONFIGS["bitcoin"];
190
+ }
191
+ if (address.startsWith("t1") || address.startsWith("t3")) {
192
+ return CHAIN_CONFIGS["zcash"];
193
+ }
194
+ if (address.startsWith("L") || address.startsWith("M") || address.startsWith("ltc1")) {
195
+ return CHAIN_CONFIGS["litecoin"];
196
+ }
197
+ if (address.startsWith("D") || address.startsWith("A")) {
198
+ return CHAIN_CONFIGS["dogecoin"];
199
+ }
200
+ if (address.startsWith("X") || address.startsWith("7")) {
201
+ return CHAIN_CONFIGS["dash"];
202
+ }
203
+ if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
204
+ return CHAIN_CONFIGS["bitcoincash"];
205
+ }
206
+ if (address.startsWith("m") || address.startsWith("n") || address.startsWith("2") || address.startsWith("tb1")) {
207
+ return CHAIN_CONFIGS["testnet"];
208
+ }
209
+ return CHAIN_CONFIGS["bitcoin"];
210
+ }
211
+ function verifyBIP322(address, proof) {
212
+ const { attestation, proof: signatureProof } = proof;
213
+ const verified = bip322Js.Verifier.verifySignature(
214
+ address,
215
+ attestation,
216
+ signatureProof
217
+ );
218
+ return {
219
+ ...proof,
220
+ status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
221
+ };
222
+ }
223
+ function verifyBIP137(address, proof, chainConfig) {
224
+ const derivationMode = getDerivationMode(address);
225
+ const useSegwitEncoding = Boolean(
226
+ chainConfig.bech32Prefix && (derivationMode === "Native SegWit" /* NATIVE */ || derivationMode === "SegWit" /* SEGWIT */ && !address.startsWith("1"))
227
+ );
228
+ const verified = verify(
229
+ proof.attestation,
230
+ address,
231
+ proof.proof,
232
+ useSegwitEncoding,
233
+ chainConfig
234
+ );
235
+ return {
236
+ ...proof,
237
+ status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
238
+ };
239
+ }
240
+ function getDerivationMode(address) {
241
+ if (address.match("^(bc1|tb1|ltc1).*")) {
242
+ return "Native SegWit" /* NATIVE */;
243
+ } else if (address.match("^[32M].*")) {
244
+ return "SegWit" /* SEGWIT */;
245
+ } else if (address.match("^[1nmL].*")) {
246
+ return "Legacy" /* LEGACY */;
247
+ } else if (address.match("^(D).*")) {
248
+ return "Dogecoin" /* DOGECOIN */;
249
+ } else if (address.match("^(q).*") || address.startsWith("bitcoincash:")) {
250
+ return "Bitcoin Cash" /* BCH */;
251
+ } else if (address.match("^(t1|t3).*")) {
252
+ return "Legacy" /* LEGACY */;
253
+ } else if (address.match("^[X7].*")) {
254
+ return "Legacy" /* LEGACY */;
255
+ } else {
256
+ throw new Error(
257
+ "INVALID ADDRESS: ".concat(address).concat(" is not a valid or a supported address")
258
+ );
259
+ }
260
+ }
261
+ function decodeSignature(proof) {
262
+ const sigbytes = base.base64.decode(proof);
263
+ if (sigbytes.length !== 65) throw new Error("Invalid signature length");
264
+ const flagByte = sigbytes[0] - 27;
265
+ if (flagByte > 15 || flagByte < 0) {
266
+ throw new Error("Invalid signature parameter");
267
+ }
268
+ const compressed = !!(flagByte & 12);
269
+ const recovery = flagByte & 3;
270
+ const signature = secp256k1.secp256k1.Signature.fromCompact(sigbytes.slice(1));
271
+ return {
272
+ compressed,
273
+ segwitType: !(flagByte & 8) ? void 0 : !(flagByte & 4) ? "p2sh(p2wpkh)" /* P2SH_P2WPKH */ : "p2wpkh" /* P2WPKH */,
274
+ signature: signature.addRecoveryBit(recovery)
275
+ };
276
+ }
277
+ function verify(attestation, address, proof, checkSegwitAlways, chainConfig) {
278
+ const { compressed, segwitType, signature } = decodeSignature(proof);
279
+ if (checkSegwitAlways && !compressed) {
280
+ throw new Error(
281
+ "checkSegwitAlways can only be used with a compressed pubkey signature flagbyte"
282
+ );
283
+ }
284
+ const hash = magicHash(attestation, chainConfig.messagePrefix);
285
+ const publicKey = signature.recoverPublicKey(hash);
286
+ const publicKeyBytes = publicKey.toRawBytes(compressed);
287
+ const publicKeyHash = hash160(publicKeyBytes);
288
+ if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
289
+ try {
290
+ const decoded = decodeCashAddr(address);
291
+ if (decoded.type !== 0) return false;
292
+ if (decoded.hash.length !== publicKeyHash.length) return false;
293
+ for (let i = 0; i < decoded.hash.length; i++) {
294
+ if (decoded.hash[i] !== publicKeyHash[i]) return false;
295
+ }
296
+ return true;
297
+ } catch {
298
+ return false;
299
+ }
300
+ }
301
+ let actual = "";
302
+ if (segwitType) {
303
+ if (segwitType === "p2sh(p2wpkh)" /* P2SH_P2WPKH */) {
304
+ const redeemScript = new Uint8Array(22);
305
+ redeemScript[0] = 0;
306
+ redeemScript[1] = 20;
307
+ redeemScript.set(publicKeyHash, 2);
308
+ const redeemScriptHash = hash160(redeemScript);
309
+ actual = encodeBase58AddressFormat(
310
+ chainConfig.scriptHashVersion,
311
+ redeemScriptHash
312
+ );
313
+ } else {
314
+ if (chainConfig.bech32Prefix) {
315
+ actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);
316
+ } else {
317
+ actual = encodeBase58AddressFormat(
318
+ chainConfig.scriptHashVersion,
319
+ publicKeyHash
320
+ );
321
+ }
322
+ }
323
+ } else {
324
+ if (address.startsWith("3") && !segwitType) {
325
+ const redeemScript = new Uint8Array(22);
326
+ redeemScript[0] = 0;
327
+ redeemScript[1] = 20;
328
+ redeemScript.set(publicKeyHash, 2);
329
+ const redeemScriptHash = hash160(redeemScript);
330
+ const p2shP2wpkh = encodeBase58AddressFormat(
331
+ chainConfig.scriptHashVersion,
332
+ redeemScriptHash
333
+ );
334
+ const legacyP2sh = encodeBase58AddressFormat(
335
+ chainConfig.scriptHashVersion,
336
+ publicKeyHash
337
+ );
338
+ if (address === p2shP2wpkh || address === legacyP2sh) {
339
+ return true;
340
+ }
341
+ actual = legacyP2sh;
342
+ } else if (address.startsWith("bc1q") || address.startsWith("tb1q") || address.startsWith("ltc1q")) {
343
+ if (chainConfig.bech32Prefix) {
344
+ actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);
345
+ } else {
346
+ actual = encodeBase58AddressFormat(
347
+ chainConfig.pubKeyHashVersion,
348
+ publicKeyHash
349
+ );
350
+ }
351
+ } else if (checkSegwitAlways && chainConfig.bech32Prefix) {
352
+ try {
353
+ actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);
354
+ } catch (e) {
355
+ actual = encodeBase58AddressFormat(
356
+ chainConfig.scriptHashVersion,
357
+ publicKeyHash
358
+ );
359
+ }
360
+ } else {
361
+ actual = encodeBase58AddressFormat(
362
+ chainConfig.pubKeyHashVersion,
363
+ publicKeyHash
364
+ );
365
+ }
366
+ }
367
+ return actual === address;
368
+ }
369
+ var base58check = base.createBase58check(ox.Hash.sha256);
370
+ function encodeBase58AddressFormat(version, publicKeyHash) {
371
+ const prefixBytes = typeof version === "number" ? Uint8Array.of(version) : version;
372
+ const payload = new Uint8Array(prefixBytes.length + publicKeyHash.length);
373
+ payload.set(prefixBytes);
374
+ payload.set(publicKeyHash, prefixBytes.length);
375
+ return base58check.encode(payload);
376
+ }
377
+ function magicHash(attestation, messagePrefix) {
378
+ const prefix = new TextEncoder().encode(messagePrefix);
379
+ const message = new TextEncoder().encode(attestation);
380
+ const length = varuintBitcoin.encode(message.length).buffer;
381
+ const buffer = new Uint8Array(
382
+ prefix.length + length.byteLength + message.length
383
+ );
384
+ buffer.set(prefix);
385
+ buffer.set(new Uint8Array(length), prefix.length);
386
+ buffer.set(message, prefix.length + length.byteLength);
387
+ return hash256(buffer);
388
+ }
389
+ function encodeBech32Address(publicKeyHash, prefix = "bc") {
390
+ const bwords = base.bech32.toWords(publicKeyHash);
391
+ bwords.unshift(0);
392
+ return base.bech32.encode(prefix, bwords);
393
+ }
394
+ function hash256(buffer) {
395
+ return ox.Hash.sha256(ox.Hash.sha256(buffer));
396
+ }
397
+ function hash160(buffer) {
398
+ return ox.Hash.ripemd160(ox.Hash.sha256(buffer));
399
+ }
400
+
401
+ exports.verifyBTCSignature = verifyBTCSignature;
402
+ //# sourceMappingURL=bitcoin-UIEQV3IM.cjs.map
403
+ //# sourceMappingURL=bitcoin-UIEQV3IM.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/cashaddr.ts","../../src/bitcoin.ts"],"names":["bech32","ProofStatus","ProofTypes","Verifier","base64","secp256k1","createBase58check","Hash","encodeLength"],"mappings":";;;;;;;;;;;AAOA,IAAM,OAAA,GAAU,kCAAA;AAOhB,IAAM,SAAA,GAAY;AAAA,EAChB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc;AACvB,CAAA;AAeA,SAAS,QAAQ,MAAA,EAA0B;AACzC,EAAA,IAAI,CAAA,GAAI,OAAO,CAAC,CAAA;AAChB,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AAEtB,IAAA,MAAM,EAAA,GAAK,CAAA,IAAK,MAAA,CAAO,EAAE,CAAA;AAEzB,IAAA,CAAA,GAAA,CAAM,CAAA,GAAI,OAAO,cAAc,CAAA,KAAM,OAAO,CAAC,CAAA,GAAK,OAAO,CAAC,CAAA;AAE1D,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,MAAA,IAAK,MAAM,MAAA,CAAO,CAAC,CAAA,GAAK,MAAA,CAAO,CAAC,CAAA,EAAG;AACjC,QAAA,CAAA,IAAK,UAAU,CAAC,CAAA;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,CAAA,GAAI,OAAO,CAAC,CAAA;AACrB;AAWA,SAAS,aAAa,MAAA,EAA0B;AAC9C,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AAEtC,IAAA,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,UAAA,CAAW,CAAC,IAAI,EAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAA,CAAO,KAAK,CAAC,CAAA;AACb,EAAA,OAAO,MAAA;AACT;AAsBO,SAAS,cAAA,CACd,OAAA,EACA,aAAA,GAAgB,aAAA,EACoC;AACpD,EAAA,IAAI,MAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,EAAA,IAAI,eAAe,EAAA,EAAI;AACrB,IAAA,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,UAAU,EAAE,WAAA,EAAY;AAAA,EACpD,CAAA,MAAO;AACL,IAAA,MAAA,GAAS,aAAA;AAAA,EACX;AAGA,EAAA,MAAM,aAAa,UAAA,KAAe,EAAA,GAAK,QAAQ,KAAA,CAAM,UAAA,GAAa,CAAC,CAAA,GAAI,OAAA;AACvE,EAAA,IAAI,QAAQ,IAAA,CAAK,UAAU,KAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,EAAG;AACxD,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,MAAM,OAAA,GAAU,WAAW,WAAA,EAAY;AAGvC,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,MAAW,MAAM,OAAA,EAAS;AACxB,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA;AAC9B,IAAA,IAAI,QAAQ,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,iCAAiC,EAAE,CAAA;AACnE,IAAA,KAAA,CAAM,KAAK,GAAG,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAG1D,EAAA,MAAM,eAAe,CAAC,GAAG,aAAa,MAAM,CAAA,EAAG,GAAG,KAAK,CAAA;AACvD,EAAA,IAAI,OAAA,CAAQ,YAAY,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAEnC,EAAA,MAAM,YAAA,GAAeA,WAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAC/C,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAC7B,IAAA,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAAA,EAC5C;AAGA,EAAA,MAAM,WAAA,GAAc,aAAa,CAAC,CAAA;AAClC,EAAA,MAAM,IAAA,GAAQ,eAAe,CAAA,GAAK,EAAA;AAClC,EAAA,MAAM,eAAe,WAAA,GAAc,CAAA;AAGnC,EAAA,MAAM,aAAA,GAAgB,CAAC,EAAA,EAAI,EAAA,EAAI,IAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA;AACrD,EAAA,MAAM,YAAA,GAAe,cAAc,YAAY,CAAA;AAE/C,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,KAAA,CAAM,CAAC,CAAA;AACtC,EAAA,IAAI,SAAA,CAAU,WAAW,YAAA,EAAc;AACrC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+BAAA,EAAkC,YAAY,CAAA,MAAA,EAAS,SAAA,CAAU,MAAM,CAAA;AAAA,KACzE;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,MAAM,UAAA,CAAW,IAAA,CAAK,SAAS,CAAA,EAAE;AAC1D;;;ACjIA,IAAM,aAAA,GAA6C;AAAA,EACjD,OAAA,EAAS;AAAA,IACP,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,WAAA,EAAa;AAAA,IACX,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,YAAA,EAAc,KAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,SAAA,EAAW;AAAA,GACb;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,SAAA,EAAW;AAAA,GACb;AAAA,EACA,KAAA,EAAO;AAAA,IACL,aAAA,EAAe,0BAAA;AAAA,IACf,mBAAmB,UAAA,CAAW,IAAA,CAAK,CAAC,EAAA,EAAM,GAAI,CAAC,CAAA;AAAA;AAAA,IAC/C,mBAAmB,UAAA,CAAW,IAAA,CAAK,CAAC,EAAA,EAAM,GAAI,CAAC,CAAA;AAAA,IAC/C,SAAA,EAAW;AAAA,GACb;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,GAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,GAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA;AAEf,CAAA;AAaA,eAAsB,mBACpB,KAAA,EACyB;AAIzB,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AACrC,EAAA,MAAM,EAAA,GAAK,MAAM,CAAC,CAAA;AAClB,EAAA,MAAM,UAAU,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,CAAE,KAAK,GAAG,CAAA;AACvC,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQC,0BAAY,MAAA,EAAO;AAGnE,EAAA,MAAM,WAAA,GAAc,eAAe,OAAO,CAAA;AAC1C,EAAA,IAAI,CAAC,aAAa,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAEhE,EAAA,MAAM,UAAU,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,IAAK,OAAA,CAAQ,WAAW,IAAI,CAAA;AACnE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,YAAA,CAAa,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,YAAY,SAAA,EAAW;AACzB,IAAA,IAAI;AACF,MAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,IAChD;AAAA,EACF;AAGA,EAAA,MAAM,YAAY,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,WAAW,MAAM,CAAA;AAIzE,EAAA,IAAI,SAAA,IAAa,KAAA,CAAM,IAAA,KAASC,wBAAA,CAAW,MAAA,EAAQ;AACjD,IAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI;AACF,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAKA,wBAAA,CAAW,MAAA;AACd,QAAA,OAAO,YAAA,CAAa,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AAAA,MACjD,KAAKA,wBAAA,CAAW,MAAA;AACd,QAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,MACpC;AACE,QAAA,OAAO;AAAA,UACL,GAAG,KAAA;AAAA,UACH,QAAQD,yBAAA,CAAY;AAAA,SACtB;AAAA;AACJ,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQA,yBAAA,CAAY;AAAA,KACtB;AAAA,EACF;AACF;AAEA,SAAS,eAAe,OAAA,EAA8B;AACpD,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EACxB;AACA,IAAA,OAAO,cAAc,SAAS,CAAA;AAAA,EAChC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,IAAI,KAAK,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,EAAG;AACxD,IAAA,OAAO,cAAc,OAAO,CAAA;AAAA,EAC9B;AACA,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,EACzB;AACA,IAAA,OAAO,cAAc,UAAU,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,cAAc,UAAU,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,cAAc,MAAM,CAAA;AAAA,EAC7B;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACjE,IAAA,OAAO,cAAc,aAAa,CAAA;AAAA,EACpC;AAEA,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,QAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,WAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EACxB;AACA,IAAA,OAAO,cAAc,SAAS,CAAA;AAAA,EAChC;AAEA,EAAA,OAAO,cAAc,SAAS,CAAA;AAChC;AAEA,SAAS,YAAA,CAAa,SAAiB,KAAA,EAAuB;AAC5D,EAAA,MAAM,EAAE,WAAA,EAAa,KAAA,EAAO,cAAA,EAAe,GAAI,KAAA;AAC/C,EAAA,MAAM,WAAWE,iBAAA,CAAS,eAAA;AAAA,IACxB,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWF,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF;AAEA,SAAS,YAAA,CACP,OAAA,EACA,KAAA,EACA,WAAA,EACA;AACA,EAAA,MAAM,cAAA,GAAiB,kBAAkB,OAAO,CAAA;AAKhD,EAAA,MAAM,iBAAA,GAAoB,OAAA;AAAA,IACxB,WAAA,CAAY,iBACT,cAAA,KAAmB,eAAA,iBACjB,mBAAmB,QAAA,iBAAyB,CAAC,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA;AAAA,GAC1E;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA;AAAA,IACf,KAAA,CAAM,WAAA;AAAA,IACN,OAAA;AAAA,IACA,KAAA,CAAM,KAAA;AAAA,IACN,iBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWA,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF;AAEA,SAAS,kBAAkB,OAAA,EAAiB;AAC1C,EAAA,IAAI,OAAA,CAAQ,KAAA,CAAM,mBAAmB,CAAA,EAAG;AACtC,IAAA,OAAO,eAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA,EAAG;AACpC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,WAAW,CAAA,EAAG;AACrC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClC,IAAA,OAAO,UAAA;AAAA,EACT,CAAA,MAAA,IAAW,QAAQ,KAAA,CAAM,QAAQ,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACxE,IAAA,OAAO,cAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,EAAG;AACtC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AACnC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAO;AACL,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,mBAAA,CACG,MAAA,CAAO,OAAO,CAAA,CACd,OAAO,wCAAwC;AAAA,KACpD;AAAA,EACF;AACF;AAQA,SAAS,gBAAgB,KAAA,EAAiC;AACxD,EAAA,MAAM,QAAA,GAAWG,WAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AACpC,EAAA,IAAI,SAAS,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,0BAA0B,CAAA;AACtE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,CAAC,CAAA,GAAI,EAAA;AAC/B,EAAA,IAAI,QAAA,GAAW,EAAA,IAAM,QAAA,GAAW,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,MAAM,6BAA6B,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,EAAE,QAAA,GAAW,EAAA,CAAA;AACjC,EAAA,MAAM,WAAW,QAAA,GAAW,CAAA;AAC5B,EAAA,MAAM,YAAYC,mBAAA,CAAU,SAAA,CAAU,YAAY,QAAA,CAAS,KAAA,CAAM,CAAC,CAAC,CAAA;AAEnE,EAAA,OAAO;AAAA,IACL,UAAA;AAAA,IACA,UAAA,EAAY,EAAE,QAAA,GAAW,CAAA,CAAA,GACrB,SACA,EAAE,QAAA,GAAW,KACb,cAAA,qBACA,QAAA;AAAA,IACJ,SAAA,EAAW,SAAA,CAAU,cAAA,CAAe,QAAQ;AAAA,GAC9C;AACF;AAEA,SAAS,MAAA,CACP,WAAA,EACA,OAAA,EACA,KAAA,EACA,mBACA,WAAA,EACA;AACA,EAAA,MAAM,EAAE,UAAA,EAAY,UAAA,EAAY,SAAA,EAAU,GAAI,gBAAgB,KAAK,CAAA;AACnE,EAAA,IAAI,iBAAA,IAAqB,CAAC,UAAA,EAAY;AACpC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,WAAA,EAAa,WAAA,CAAY,aAAa,CAAA;AAC7D,EAAA,MAAM,SAAA,GAAY,SAAA,CAAU,gBAAA,CAAiB,IAAI,CAAA;AACjD,EAAA,MAAM,cAAA,GAAiB,SAAA,CAAU,UAAA,CAAW,UAAU,CAAA;AACtD,EAAA,MAAM,aAAA,GAAgB,QAAQ,cAAc,CAAA;AAE5C,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACjE,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,MAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,CAAA,EAAG,OAAO,KAAA;AAC/B,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,MAAA,KAAW,aAAA,CAAc,QAAQ,OAAO,KAAA;AACzD,MAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AAC5C,QAAA,IAAI,QAAQ,IAAA,CAAK,CAAC,MAAM,aAAA,CAAc,CAAC,GAAG,OAAO,KAAA;AAAA,MACnD;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,GAAiB,EAAA;AAErB,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,IAAI,eAAe,cAAA,oBAA0B;AAE3C,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,EAAE,CAAA;AACtC,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,CAAA;AAClB,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,EAAA;AAClB,MAAA,YAAA,CAAa,GAAA,CAAI,eAAe,CAAC,CAAA;AACjC,MAAA,MAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA;AAC7C,MAAA,MAAA,GAAS,yBAAA;AAAA,QACP,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MACtE,CAAA,MAAO;AAEL,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MAEF;AAAA,IACF;AAAA,EACF,CAAA,MAAO;AAEL,IAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,UAAA,EAAY;AAE1C,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,EAAE,CAAA;AACtC,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,CAAA;AAClB,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,EAAA;AAClB,MAAA,YAAA,CAAa,GAAA,CAAI,eAAe,CAAC,CAAA;AACjC,MAAA,MAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA;AAC7C,MAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,QACjB,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAEA,MAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,QACjB,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AACA,MAAA,IAAI,OAAA,KAAY,UAAA,IAAc,OAAA,KAAY,UAAA,EAAY;AACpD,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,MAAA,GAAS,UAAA;AAAA,IACX,CAAA,MAAA,IAAW,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAA,EAAG;AAGlG,MAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MACtE,CAAA,MAAO;AACL,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MACF;AAAA,IACF,CAAA,MAAA,IAAW,iBAAA,IAAqB,WAAA,CAAY,YAAA,EAAc;AACxD,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MAGtE,SAAS,CAAA,EAAG;AACV,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MAEF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAA,GAAS,yBAAA;AAAA,QACP,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,KAAW,OAAA;AACpB;AAEA,IAAM,WAAA,GAAcC,sBAAA,CAAkBC,OAAA,CAAK,MAAM,CAAA;AAEjD,SAAS,yBAAA,CACP,SACA,aAAA,EACA;AACA,EAAA,MAAM,cACJ,OAAO,OAAA,KAAY,WAAW,UAAA,CAAW,EAAA,CAAG,OAAO,CAAA,GAAI,OAAA;AAEzD,EAAA,MAAM,UAAU,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,GAAS,cAAc,MAAM,CAAA;AACxE,EAAA,OAAA,CAAQ,IAAI,WAAW,CAAA;AACvB,EAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,EAAe,WAAA,CAAY,MAAM,CAAA;AAC7C,EAAA,OAAO,WAAA,CAAY,OAAO,OAAO,CAAA;AACnC;AAEA,SAAS,SAAA,CAAU,aAAqB,aAAA,EAAuB;AAC7D,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACrD,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,WAAW,CAAA;AACpD,EAAA,MAAM,MAAA,GAASC,qBAAA,CAAa,OAAA,CAAQ,MAAM,CAAA,CAAE,MAAA;AAC5C,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAA,CAAO,MAAA,GAAS,MAAA,CAAO,UAAA,GAAa,OAAA,CAAQ;AAAA,GAC9C;AACA,EAAA,MAAA,CAAO,IAAI,MAAM,CAAA;AACjB,EAAA,MAAA,CAAO,IAAI,IAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,MAAM,CAAA;AAChD,EAAA,MAAA,CAAO,GAAA,CAAI,OAAA,EAAS,MAAA,CAAO,MAAA,GAAS,OAAO,UAAU,CAAA;AACrD,EAAA,OAAO,QAAQ,MAAM,CAAA;AACvB;AAEA,SAAS,mBAAA,CACP,aAAA,EACA,MAAA,GAAiB,IAAA,EACT;AACR,EAAA,MAAM,MAAA,GAASR,WAAAA,CAAO,OAAA,CAAQ,aAAa,CAAA;AAC3C,EAAA,MAAA,CAAO,QAAQ,CAAC,CAAA;AAChB,EAAA,OAAOA,WAAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AACrC;AAEA,SAAS,QAAQ,MAAA,EAAgC;AAC/C,EAAA,OAAOO,OAAA,CAAK,MAAA,CAAOA,OAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AACxC;AAEA,SAAS,QAAQ,MAAA,EAAgC;AAC/C,EAAA,OAAOA,OAAA,CAAK,SAAA,CAAUA,OAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AAC3C","file":"bitcoin-UIEQV3IM.cjs","sourcesContent":["import { bech32 } from \"@scure/base\";\n\n/**\n * CashAddr base32 character set.\n * Each character maps to its 5-bit index value (0–31).\n * Spec: https://github.com/bitcoincashorg/bitcoincash.org/blob/master/spec/cashaddr.md\n */\nconst CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\n\n/**\n * Generator polynomials for the CashAddr BCH checksum.\n * These five constants define the GF(2^32) polynomial used to compute\n * and validate the 40-bit checksum appended to every CashAddr string.\n */\nconst GENERATOR = [\n BigInt(\"0x98f2bc8e61\"),\n BigInt(\"0x79b76d99e2\"),\n BigInt(\"0xf33e5fb3c4\"),\n BigInt(\"0xae2eabe2a8\"),\n BigInt(\"0x1e4f43e470\"),\n];\n\n/**\n * Computes the CashAddr BCH checksum over an array of 5-bit values.\n *\n * The input should be the concatenation of:\n * - the prefix expansion (see {@link prefixExpand})\n * - all payload words including the 8 checksum words\n *\n * A valid address produces a result of `0n`; any other value indicates\n * a corrupt or invalid address.\n *\n * @param values - Array of 5-bit integers covering prefix + full payload\n * @returns The 40-bit checksum residue as a bigint (0n = valid)\n */\nfunction polymod(values: number[]): bigint {\n let c = BigInt(1);\n for (const d of values) {\n // Extract the top 5 bits before shifting\n const c0 = c >> BigInt(35);\n // Shift the accumulator left by 5 bits and XOR in the next data word\n c = ((c & BigInt(\"0x07ffffffff\")) << BigInt(5)) ^ BigInt(d);\n // Apply each generator polynomial for set bits in c0\n for (let i = 0; i < 5; i++) {\n if ((c0 >> BigInt(i)) & BigInt(1)) {\n c ^= GENERATOR[i];\n }\n }\n }\n // Final XOR with 1 so a valid address yields 0\n return c ^ BigInt(1);\n}\n\n/**\n * Expands a CashAddr prefix into the form required by the checksum algorithm.\n *\n * Each character of the prefix is reduced to its lower 5 bits, then a zero\n * byte is appended as a separator between the prefix and the payload words.\n *\n * @param prefix - The human-readable prefix (e.g. `\"bitcoincash\"`)\n * @returns Array of 5-bit integers representing the expanded prefix\n */\nfunction prefixExpand(prefix: string): number[] {\n const result: number[] = [];\n for (let i = 0; i < prefix.length; i++) {\n // Keep only the lower 5 bits of each character's ASCII code\n result.push(prefix.charCodeAt(i) & 0x1f);\n }\n // Zero separator between prefix and payload\n result.push(0);\n return result;\n}\n\n/**\n * Decodes a CashAddr string into its prefix, address type, and raw hash.\n *\n * Supports both prefixed (`bitcoincash:q...`) and prefix-less (`q...`) forms.\n * Validates the BCH checksum and rejects non-P2PKH types or malformed input.\n *\n * Address type values (upper nibble of the version byte):\n * - `0` — P2PKH (pay-to-public-key-hash)\n * - `1` — P2SH (pay-to-script-hash)\n *\n * @param address - The CashAddr string to decode\n * @param defaultPrefix - Prefix to assume when none is present in the address (default: `\"bitcoincash\"`)\n * @returns An object with:\n * - `prefix` — the decoded human-readable prefix\n * - `type` — the address type (0 = P2PKH, 1 = P2SH, …)\n * - `hash` — the raw public-key or script hash bytes\n * @throws If the address contains invalid characters, fails the checksum, has a mismatched hash length,\n * contains mixed upper/lower case, or if the payload contains invalid 5-to-8-bit padding\n * (thrown by {@link bech32.fromWords} from `@scure/base`)\n */\nexport function decodeCashAddr(\n address: string,\n defaultPrefix = \"bitcoincash\"\n): { prefix: string; type: number; hash: Uint8Array } {\n let prefix: string;\n\n // Split on \":\" to separate an explicit prefix from the payload\n const colonIndex = address.indexOf(\":\");\n if (colonIndex !== -1) {\n prefix = address.slice(0, colonIndex).toLowerCase();\n } else {\n prefix = defaultPrefix;\n }\n\n // CashAddr spec forbids mixed upper/lower case\n const rawPayload = colonIndex !== -1 ? address.slice(colonIndex + 1) : address;\n if (/[A-Z]/.test(rawPayload) && /[a-z]/.test(rawPayload)) {\n throw new Error(\"Invalid CashAddr: mixed case\");\n }\n const payload = rawPayload.toLowerCase();\n\n // Map each character to its 5-bit index in the CashAddr alphabet\n const words: number[] = [];\n for (const ch of payload) {\n const idx = CHARSET.indexOf(ch);\n if (idx === -1) throw new Error(\"Invalid CashAddr character: \" + ch);\n words.push(idx);\n }\n\n // Minimum length: at least 1 data word + 8 checksum words\n if (words.length < 8) throw new Error(\"CashAddr too short\");\n\n // Verify the BCH checksum over prefix expansion + all payload words\n const checksumData = [...prefixExpand(prefix), ...words];\n if (polymod(checksumData) !== BigInt(0)) {\n throw new Error(\"Invalid CashAddr checksum\");\n }\n\n // Strip the 8 trailing checksum words; the remainder encodes (version_byte || hash)\n const dataWords = words.slice(0, -8);\n // Convert from 5-bit words to 8-bit bytes using bech32.fromWords (equivalent to convertBits(data, 5, 8))\n const payloadBytes = bech32.fromWords(dataWords);\n if (payloadBytes.length === 0) {\n throw new Error(\"Invalid CashAddr padding\");\n }\n\n // The first byte is the version byte: upper nibble = type, lower 3 bits = hash size index\n const versionByte = payloadBytes[0];\n const type = (versionByte >> 3) & 0x0f;\n const hashSizeBits = versionByte & 0x07;\n\n // Look up the expected hash length in bytes from the size index\n const expectedSizes = [20, 24, 28, 32, 40, 48, 56, 64];\n const expectedSize = expectedSizes[hashSizeBits];\n\n const hashBytes = payloadBytes.slice(1);\n if (hashBytes.length !== expectedSize) {\n throw new Error(\n `Hash length mismatch: expected ${expectedSize}, got ${hashBytes.length}`\n );\n }\n\n return { prefix, type, hash: Uint8Array.from(hashBytes) };\n}\n","import {\n ProofStatus,\n ProofTypes,\n SignatureProof,\n} from \"@notabene/javascript-sdk\";\n\nimport { encode as encodeLength } from \"varuint-bitcoin\";\nimport { base64, bech32, createBase58check } from \"@scure/base\";\nimport { Hash } from \"ox\";\nimport { secp256k1 } from \"@noble/curves/secp256k1\";\nimport { SignatureType } from \"@noble/curves/abstract/weierstrass\";\nimport { Verifier } from \"bip322-js\";\nimport { decodeCashAddr } from \"./cashaddr\";\n\nenum SEGWIT_TYPES {\n P2WPKH = \"p2wpkh\",\n P2SH_P2WPKH = \"p2sh(p2wpkh)\",\n}\n\ninterface ChainConfig {\n messagePrefix: string;\n pubKeyHashVersion: number | Uint8Array;\n scriptHashVersion: number | Uint8Array;\n bech32Prefix?: string;\n isTestnet?: boolean;\n}\n\nconst CHAIN_CONFIGS: Record<string, ChainConfig> = {\n bitcoin: {\n messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n pubKeyHashVersion: 0x00, // 1...\n scriptHashVersion: 0x05, // 3...\n bech32Prefix: \"bc\",\n isTestnet: false,\n },\n bitcoincash: {\n messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n pubKeyHashVersion: 0x00, // 1...\n scriptHashVersion: 0x05, // 3...\n bech32Prefix: \"bc\",\n isTestnet: false,\n },\n litecoin: {\n messagePrefix: \"\\u0019Litecoin Signed Message:\\n\",\n pubKeyHashVersion: 0x30, // L... or M...\n scriptHashVersion: 0x32, // 3... or M...\n bech32Prefix: \"ltc\",\n isTestnet: false,\n },\n dogecoin: {\n messagePrefix: \"\\u0019Dogecoin Signed Message:\\n\",\n pubKeyHashVersion: 0x1e, // D...\n scriptHashVersion: 0x16, // A...\n isTestnet: false,\n },\n dash: {\n messagePrefix: \"\\u0019DarkCoin Signed Message:\\n\",\n pubKeyHashVersion: 0x4c, // X...\n scriptHashVersion: 0x10, // 7...\n isTestnet: false,\n },\n zcash: {\n messagePrefix: \"\\u0018Zcash Signed Message:\\n\",\n pubKeyHashVersion: Uint8Array.from([0x1c, 0xb8]), // <-- FIXED\n scriptHashVersion: Uint8Array.from([0x1c, 0xbd]),\n isTestnet: false,\n },\n\n testnet: {\n messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n pubKeyHashVersion: 0x6f, // m or n\n scriptHashVersion: 0xc4, // 2\n bech32Prefix: \"tb\",\n isTestnet: true,\n },\n};\n\nenum DerivationMode {\n LEGACY = \"Legacy\",\n NATIVE = \"Native SegWit\",\n SEGWIT = \"SegWit\",\n P2SH_SEGWIT = \"p2sh\",\n BCH = \"Bitcoin Cash\",\n ETHEREUM = \"Ethereum\",\n DOGECOIN = \"Dogecoin\",\n UNKNOWN = \"Unknown\",\n}\n\nexport async function verifyBTCSignature(\n proof: SignatureProof\n): Promise<SignatureProof> {\n // Split on \":\" but rejoin from index 2 onwards so that a prefixed CashAddr\n // like \"bitcoincash:qr...\" in the third segment is preserved whole.\n // e.g. \"bip122:<chainId>:bitcoincash:qr...\" → address = \"bitcoincash:qr...\"\n const parts = proof.address.split(\":\");\n const ns = parts[0];\n const address = parts.slice(2).join(\":\");\n if (ns !== \"bip122\") return { ...proof, status: ProofStatus.FAILED };\n\n // Map chainId to our chain configuration\n const chainConfig = getChainConfig(address);\n if (!chainConfig) return { ...proof, status: ProofStatus.FAILED };\n\n const isZcash = address.startsWith(\"t1\") || address.startsWith(\"t3\");\n if (isZcash) {\n return verifyBIP137(address, proof, chainConfig);\n }\n\n // Use BIP322 for testnet addresses\n if (chainConfig.isTestnet) {\n try {\n return verifyBIP322(address, proof);\n } catch {\n return { ...proof, status: ProofStatus.FAILED };\n }\n }\n\n // Check if this is a Taproot address (bc1p or tb1p)\n const isTaproot = address.startsWith(\"bc1p\") || address.startsWith(\"tb1p\");\n\n // For Taproot addresses with BIP-137 proof type, use BIP-322 verification\n // since BIP-137 doesn't officially support Taproot\n if (isTaproot && proof.type === ProofTypes.BIP137) {\n return verifyBIP322(address, proof);\n }\n\n try {\n switch (proof.type) {\n case ProofTypes.BIP137:\n return verifyBIP137(address, proof, chainConfig);\n case ProofTypes.BIP322:\n return verifyBIP322(address, proof);\n default:\n return {\n ...proof,\n status: ProofStatus.FAILED,\n };\n }\n } catch {\n return {\n ...proof,\n status: ProofStatus.FAILED,\n };\n }\n}\n\nfunction getChainConfig(address: string): ChainConfig {\n if (\n address.startsWith(\"1\") ||\n address.startsWith(\"3\") ||\n address.startsWith(\"bc1\")\n ) {\n return CHAIN_CONFIGS[\"bitcoin\"];\n }\n if (address.startsWith(\"t1\") || address.startsWith(\"t3\")) {\n return CHAIN_CONFIGS[\"zcash\"];\n }\n if (\n address.startsWith(\"L\") ||\n address.startsWith(\"M\") ||\n address.startsWith(\"ltc1\")\n ) {\n return CHAIN_CONFIGS[\"litecoin\"];\n }\n if (address.startsWith(\"D\") || address.startsWith(\"A\")) {\n return CHAIN_CONFIGS[\"dogecoin\"];\n }\n if (address.startsWith(\"X\") || address.startsWith(\"7\")) {\n return CHAIN_CONFIGS[\"dash\"];\n }\n if (address.startsWith(\"q\") || address.startsWith(\"bitcoincash:\")) {\n return CHAIN_CONFIGS[\"bitcoincash\"];\n }\n // Bitcoin testnet addresses can start with \"m\", \"n\", \"2\", or \"tb1\"\n if (\n address.startsWith(\"m\") ||\n address.startsWith(\"n\") ||\n address.startsWith(\"2\") ||\n address.startsWith(\"tb1\")\n ) {\n return CHAIN_CONFIGS[\"testnet\"]\n }\n\n return CHAIN_CONFIGS[\"bitcoin\"];\n}\n\nfunction verifyBIP322(address: string, proof: SignatureProof) {\n const { attestation, proof: signatureProof } = proof;\n const verified = Verifier.verifySignature(\n address,\n attestation,\n signatureProof\n );\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n}\n\nfunction verifyBIP137(\n address: string,\n proof: SignatureProof,\n chainConfig: ChainConfig\n) {\n const derivationMode = getDerivationMode(address);\n\n // For legacy addresses (starting with \"1\"), never use SegWit encoding\n // For P2SH addresses (starting with \"3\"), use SegWit encoding if they have bech32 support\n // For native SegWit addresses (bc1, tb1, ltc1), always use SegWit encoding\n const useSegwitEncoding = Boolean(\n chainConfig.bech32Prefix &&\n (derivationMode === DerivationMode.NATIVE ||\n (derivationMode === DerivationMode.SEGWIT && !address.startsWith(\"1\")))\n );\n\n const verified = verify(\n proof.attestation,\n address,\n proof.proof,\n useSegwitEncoding,\n chainConfig\n );\n\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n}\n\nfunction getDerivationMode(address: string) {\n if (address.match(\"^(bc1|tb1|ltc1).*\")) {\n return DerivationMode.NATIVE;\n } else if (address.match(\"^[32M].*\")) {\n return DerivationMode.SEGWIT;\n } else if (address.match(\"^[1nmL].*\")) {\n return DerivationMode.LEGACY;\n } else if (address.match(\"^(D).*\")) {\n return DerivationMode.DOGECOIN;\n } else if (address.match(\"^(q).*\") || address.startsWith(\"bitcoincash:\")) {\n return DerivationMode.BCH;\n } else if (address.match(\"^(t1|t3).*\")) {\n return DerivationMode.LEGACY; // Zcash addresses\n } else if (address.match(\"^[X7].*\")) {\n return DerivationMode.LEGACY; // Dash addresses\n } else {\n throw new Error(\n \"INVALID ADDRESS: \"\n .concat(address)\n .concat(\" is not a valid or a supported address\")\n );\n }\n}\n\ntype DecodedSignature = {\n compressed: boolean;\n segwitType?: SEGWIT_TYPES;\n signature: SignatureType;\n};\n\nfunction decodeSignature(proof: string): DecodedSignature {\n const sigbytes = base64.decode(proof);\n if (sigbytes.length !== 65) throw new Error(\"Invalid signature length\");\n const flagByte = sigbytes[0] - 27;\n if (flagByte > 15 || flagByte < 0) {\n throw new Error(\"Invalid signature parameter\");\n }\n const compressed = !!(flagByte & 12); // Are there cases that aren't compressed?\n const recovery = flagByte & 3;\n const signature = secp256k1.Signature.fromCompact(sigbytes.slice(1));\n\n return {\n compressed,\n segwitType: !(flagByte & 8)\n ? undefined\n : !(flagByte & 4)\n ? SEGWIT_TYPES.P2SH_P2WPKH\n : SEGWIT_TYPES.P2WPKH,\n signature: signature.addRecoveryBit(recovery),\n };\n}\n\nfunction verify(\n attestation: string,\n address: string,\n proof: string,\n checkSegwitAlways: boolean,\n chainConfig: ChainConfig\n) {\n const { compressed, segwitType, signature } = decodeSignature(proof);\n if (checkSegwitAlways && !compressed) {\n throw new Error(\n \"checkSegwitAlways can only be used with a compressed pubkey signature flagbyte\"\n );\n }\n const hash = magicHash(attestation, chainConfig.messagePrefix);\n const publicKey = signature.recoverPublicKey(hash);\n const publicKeyBytes = publicKey.toRawBytes(compressed);\n const publicKeyHash = hash160(publicKeyBytes);\n // Special handling for Bitcoin Cash addresses\n if (address.startsWith(\"q\") || address.startsWith(\"bitcoincash:\")) {\n try {\n const decoded = decodeCashAddr(address);\n if (decoded.type !== 0) return false; // Must be P2PKH\n if (decoded.hash.length !== publicKeyHash.length) return false;\n for (let i = 0; i < decoded.hash.length; i++) {\n if (decoded.hash[i] !== publicKeyHash[i]) return false;\n }\n return true;\n } catch {\n return false;\n }\n }\n\n let actual: string = \"\";\n\n if (segwitType) {\n if (segwitType === SEGWIT_TYPES.P2SH_P2WPKH) {\n // P2SH-P2WPKH: address is hash160 of the witness redeem script, not the raw pubkey hash\n const redeemScript = new Uint8Array(22);\n redeemScript[0] = 0x00; // OP_0\n redeemScript[1] = 0x14; // push 20 bytes\n redeemScript.set(publicKeyHash, 2);\n const redeemScriptHash = hash160(redeemScript);\n actual = encodeBase58AddressFormat(\n chainConfig.scriptHashVersion,\n redeemScriptHash\n );\n } else {\n // parsed.segwitType === SEGWIT_TYPES.P2WPKH\n if (chainConfig.bech32Prefix) {\n actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n } else {\n // Fallback to legacy if bech32 not supported\n actual = encodeBase58AddressFormat(\n chainConfig.scriptHashVersion,\n publicKeyHash\n );\n // base58 can be p2pkh or p2sh-p2wpkh\n }\n }\n } else {\n // For addresses starting with \"3\" (P2SH), try both P2SH-P2WPKH and legacy P2SH encodings if segwitType is undefined\n if (address.startsWith(\"3\") && !segwitType) {\n // P2SH-P2WPKH: script hash of the redeem script (OP_0 <pubkeyhash>)\n const redeemScript = new Uint8Array(22);\n redeemScript[0] = 0x00; // OP_0\n redeemScript[1] = 0x14; // push 20 bytes\n redeemScript.set(publicKeyHash, 2);\n const redeemScriptHash = hash160(redeemScript);\n const p2shP2wpkh = encodeBase58AddressFormat(\n chainConfig.scriptHashVersion,\n redeemScriptHash\n );\n // Legacy P2SH: script hash of the public key\n const legacyP2sh = encodeBase58AddressFormat(\n chainConfig.scriptHashVersion,\n publicKeyHash\n );\n if (address === p2shP2wpkh || address === legacyP2sh) {\n return true;\n }\n actual = legacyP2sh; // fallback for error reporting\n } else if (address.startsWith(\"bc1q\") || address.startsWith(\"tb1q\") || address.startsWith(\"ltc1q\")) {\n // For native SegWit P2WPKH addresses (bc1q/tb1q/ltc1q), always encode as bech32\n // This handles Ledger wallets that sign without segwit flags\n if (chainConfig.bech32Prefix) {\n actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n } else {\n actual = encodeBase58AddressFormat(\n chainConfig.pubKeyHashVersion,\n publicKeyHash\n );\n }\n } else if (checkSegwitAlways && chainConfig.bech32Prefix) {\n try {\n actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n // if address is bech32 it is not p2sh\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n } catch (e) {\n actual = encodeBase58AddressFormat(\n chainConfig.scriptHashVersion,\n publicKeyHash\n );\n // base58 can be p2pkh or p2sh-p2wpkh\n }\n } else {\n actual = encodeBase58AddressFormat(\n chainConfig.pubKeyHashVersion,\n publicKeyHash\n );\n }\n }\n\n return actual === address;\n}\n\nconst base58check = createBase58check(Hash.sha256);\n\nfunction encodeBase58AddressFormat(\n version: number | Uint8Array,\n publicKeyHash: Uint8Array\n) {\n const prefixBytes =\n typeof version === \"number\" ? Uint8Array.of(version) : version; // Accept raw Uint8Array for Zcash\n\n const payload = new Uint8Array(prefixBytes.length + publicKeyHash.length);\n payload.set(prefixBytes);\n payload.set(publicKeyHash, prefixBytes.length);\n return base58check.encode(payload);\n}\n\nfunction magicHash(attestation: string, messagePrefix: string) {\n const prefix = new TextEncoder().encode(messagePrefix);\n const message = new TextEncoder().encode(attestation);\n const length = encodeLength(message.length).buffer;\n const buffer = new Uint8Array(\n prefix.length + length.byteLength + message.length\n );\n buffer.set(prefix);\n buffer.set(new Uint8Array(length), prefix.length);\n buffer.set(message, prefix.length + length.byteLength);\n return hash256(buffer);\n}\n\nfunction encodeBech32Address(\n publicKeyHash: Uint8Array,\n prefix: string = \"bc\"\n): string {\n const bwords = bech32.toWords(publicKeyHash);\n bwords.unshift(0);\n return bech32.encode(prefix, bwords);\n}\n\nfunction hash256(buffer: Uint8Array): Uint8Array {\n return Hash.sha256(Hash.sha256(buffer));\n}\n\nfunction hash160(buffer: Uint8Array): Uint8Array {\n return Hash.ripemd160(Hash.sha256(buffer));\n}\n"]}
@@ -0,0 +1,36 @@
1
+ 'use strict';
2
+
3
+ var buffer = require('buffer');
4
+ var verifyDataSignature = require('@cardano-foundation/cardano-verify-datasignature');
5
+ var javascriptSdk = require('@notabene/javascript-sdk');
6
+
7
+ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
8
+
9
+ var verifyDataSignature__default = /*#__PURE__*/_interopDefault(verifyDataSignature);
10
+
11
+ if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
12
+ async function verifyCIP8Signature(proof) {
13
+ const [ns, , address] = proof.address.split(/:/);
14
+ const key = proof.chainSpecificData && "cardanoCoseKey" in proof.chainSpecificData ? proof.chainSpecificData.cardanoCoseKey : null;
15
+ if (ns !== "cardano" || !key) {
16
+ return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
17
+ }
18
+ try {
19
+ const verified = verifyDataSignature__default.default(
20
+ proof.proof,
21
+ key,
22
+ proof.attestation,
23
+ address
24
+ );
25
+ return {
26
+ ...proof,
27
+ status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
28
+ };
29
+ } catch {
30
+ return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
31
+ }
32
+ }
33
+
34
+ exports.verifyCIP8Signature = verifyCIP8Signature;
35
+ //# sourceMappingURL=cardano-QG2S452K.cjs.map
36
+ //# sourceMappingURL=cardano-QG2S452K.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/cardano.ts"],"names":["ProofStatus","verifyDataSignature"],"mappings":";;;;;;;;;;;AAGA,eAAsB,oBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,MAAM,GAAA,GACJ,MAAM,iBAAA,IAAqB,gBAAA,IAAoB,MAAM,iBAAA,GACjD,KAAA,CAAM,kBAAkB,cAAA,GACxB,IAAA;AAEN,EAAA,IAAI,EAAA,KAAO,SAAA,IAAa,CAAC,GAAA,EAAK;AAC5B,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAWC,oCAAA;AAAA,MACf,KAAA,CAAM,KAAA;AAAA,MACN,GAAA;AAAA,MACA,KAAA,CAAM,WAAA;AAAA,MACN;AAAA,KACF;AACA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAWD,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"cardano-QG2S452K.cjs","sourcesContent":["import verifyDataSignature from \"@cardano-foundation/cardano-verify-datasignature\";\nimport { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\n\nexport async function verifyCIP8Signature(\n proof: SignatureProof\n): Promise<SignatureProof> {\n const [ns, , address] = proof.address.split(/:/);\n const key =\n proof.chainSpecificData && \"cardanoCoseKey\" in proof.chainSpecificData\n ? proof.chainSpecificData.cardanoCoseKey\n : null;\n\n if (ns !== \"cardano\" || !key) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n try {\n const verified = verifyDataSignature(\n proof.proof,\n key,\n proof.attestation,\n address\n );\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n } catch {\n return { ...proof, status: ProofStatus.FAILED };\n }\n}\n"]}
@@ -0,0 +1,44 @@
1
+ 'use strict';
2
+
3
+ var buffer = require('buffer');
4
+ var javascriptSdk = require('@notabene/javascript-sdk');
5
+
6
+ if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
7
+ var CONCORDIUM_VERIFIER_URL = "https://web3id-verifier.mainnet.concordium.software";
8
+ var verifyConcordiumSignature = async (proof) => {
9
+ const [ns] = proof.address.split(/:/);
10
+ if (ns !== "ccd") {
11
+ return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
12
+ }
13
+ try {
14
+ const presentationJson = JSON.parse(proof.proof);
15
+ if (presentationJson.presentationContext !== proof.attestation) {
16
+ throw new Error("Presentation context does not match attestation");
17
+ }
18
+ if (!presentationJson.verifiableCredential || presentationJson.verifiableCredential.length === 0) {
19
+ throw new Error("Verifiable credential is missing or empty");
20
+ }
21
+ const response = await fetch(`${CONCORDIUM_VERIFIER_URL}/v0/verify`, {
22
+ method: "POST",
23
+ headers: { "Content-Type": "application/json" },
24
+ body: JSON.stringify(presentationJson)
25
+ });
26
+ if (!response.ok) {
27
+ const errorText = await response.text();
28
+ throw new Error(`Verifier returned ${response.status}: ${errorText}`);
29
+ }
30
+ return {
31
+ ...proof,
32
+ status: javascriptSdk.ProofStatus.VERIFIED
33
+ };
34
+ } catch {
35
+ return {
36
+ ...proof,
37
+ status: javascriptSdk.ProofStatus.FAILED
38
+ };
39
+ }
40
+ };
41
+
42
+ exports.verifyConcordiumSignature = verifyConcordiumSignature;
43
+ //# sourceMappingURL=concordium-4B33UJJ5.cjs.map
44
+ //# sourceMappingURL=concordium-4B33UJJ5.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/concordium.ts"],"names":["ProofStatus"],"mappings":";;;;;;AAGA,IAAM,uBAAA,GACJ,qDAAA;AAOK,IAAM,yBAAA,GAA4B,OACvC,KAAA,KAC4B;AAC5B,EAAA,MAAM,CAAC,EAAE,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAEpC,EAAA,IAAI,OAAO,KAAA,EAAO;AAChB,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,KAAK,CAAA;AAG/C,IAAA,IAAI,gBAAA,CAAiB,mBAAA,KAAwB,KAAA,CAAM,WAAA,EAAa;AAC9D,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AAGA,IAAA,IACE,CAAC,gBAAA,CAAiB,oBAAA,IAClB,gBAAA,CAAiB,oBAAA,CAAqB,WAAW,CAAA,EACjD;AACA,MAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,IAC7D;AAGA,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,uBAAuB,CAAA,UAAA,CAAA,EAAc;AAAA,MACnE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,gBAAgB;AAAA,KACtC,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,SAAS,MAAM,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AAAA,IACtE;AAGA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQA,yBAAA,CAAY;AAAA,KACtB;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQA,yBAAA,CAAY;AAAA,KACtB;AAAA,EACF;AACF","file":"concordium-4B33UJJ5.cjs","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { VerifiablePresentation } from \"@concordium/web-sdk\";\n\nconst CONCORDIUM_VERIFIER_URL =\n \"https://web3id-verifier.mainnet.concordium.software\";\n\n/**\n * Verifies a Concordium signature proof using Concordium's hosted verifier service\n * @param proof The signature proof to verify\n * @returns Promise resolving to the proof with updated status\n */\nexport const verifyConcordiumSignature = async (\n proof: SignatureProof,\n): Promise<SignatureProof> => {\n const [ns] = proof.address.split(/:/);\n\n if (ns !== \"ccd\") {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n try {\n const presentationJson = JSON.parse(proof.proof) as VerifiablePresentation;\n\n // Validate presentation context matches attestation\n if (presentationJson.presentationContext !== proof.attestation) {\n throw new Error(\"Presentation context does not match attestation\");\n }\n\n // Validate verifiableCredential exists and is not empty\n if (\n !presentationJson.verifiableCredential ||\n presentationJson.verifiableCredential.length === 0\n ) {\n throw new Error(\"Verifiable credential is missing or empty\");\n }\n\n // Use Concordium's hosted verifier instead of gRPC\n const response = await fetch(`${CONCORDIUM_VERIFIER_URL}/v0/verify`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(presentationJson),\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(`Verifier returned ${response.status}: ${errorText}`);\n }\n\n // If we get here, the proof is valid\n return {\n ...proof,\n status: ProofStatus.VERIFIED,\n };\n } catch {\n return {\n ...proof,\n status: ProofStatus.FAILED,\n };\n }\n};\n"]}