@notabene/verify-proof 1.11.0 → 1.12.0-next.12

package/dist/esm/cardano-OMGAPH5N.js

@@ -0,0 +1,30 @@
+import { Buffer } from 'buffer';
+import verifyDataSignature from '@cardano-foundation/cardano-verify-datasignature';
+import { ProofStatus } from '@notabene/javascript-sdk';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+async function verifyCIP8Signature(proof) {
+  const [ns, , address] = proof.address.split(/:/);
+  const key = proof.chainSpecificData && "cardanoCoseKey" in proof.chainSpecificData ? proof.chainSpecificData.cardanoCoseKey : null;
+  if (ns !== "cardano" || !key) {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+  try {
+    const verified = verifyDataSignature(
+      proof.proof,
+      key,
+      proof.attestation,
+      address
+    );
+    return {
+      ...proof,
+      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+    };
+  } catch {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+}
+
+export { verifyCIP8Signature };
+//# sourceMappingURL=cardano-OMGAPH5N.js.map
+//# sourceMappingURL=cardano-OMGAPH5N.js.map

package/dist/esm/cardano-OMGAPH5N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cardano.ts"],"names":[],"mappings":";;;;;AAGA,eAAsB,oBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,MAAM,GAAA,GACJ,MAAM,iBAAA,IAAqB,gBAAA,IAAoB,MAAM,iBAAA,GACjD,KAAA,CAAM,kBAAkB,cAAA,GACxB,IAAA;AAEN,EAAA,IAAI,EAAA,KAAO,SAAA,IAAa,CAAC,GAAA,EAAK;AAC5B,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,mBAAA;AAAA,MACf,KAAA,CAAM,KAAA;AAAA,MACN,GAAA;AAAA,MACA,KAAA,CAAM,WAAA;AAAA,MACN;AAAA,KACF;AACA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"cardano-OMGAPH5N.js","sourcesContent":["import verifyDataSignature from \"@cardano-foundation/cardano-verify-datasignature\";\nimport { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\n\nexport async function verifyCIP8Signature(\n  proof: SignatureProof\n): Promise<SignatureProof> {\n  const [ns, , address] = proof.address.split(/:/);\n  const key =\n    proof.chainSpecificData && \"cardanoCoseKey\" in proof.chainSpecificData\n      ? proof.chainSpecificData.cardanoCoseKey\n      : null;\n\n  if (ns !== \"cardano\" || !key) {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n\n  try {\n    const verified = verifyDataSignature(\n      proof.proof,\n      key,\n      proof.attestation,\n      address\n    );\n    return {\n      ...proof,\n      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n    };\n  } catch {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n}\n"]}

package/dist/esm/concordium-JJ5VEIOA.js

@@ -0,0 +1,42 @@
+import { Buffer } from 'buffer';
+import { ProofStatus } from '@notabene/javascript-sdk';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+var CONCORDIUM_VERIFIER_URL = "https://web3id-verifier.mainnet.concordium.software";
+var verifyConcordiumSignature = async (proof) => {
+  const [ns] = proof.address.split(/:/);
+  if (ns !== "ccd") {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+  try {
+    const presentationJson = JSON.parse(proof.proof);
+    if (presentationJson.presentationContext !== proof.attestation) {
+      throw new Error("Presentation context does not match attestation");
+    }
+    if (!presentationJson.verifiableCredential || presentationJson.verifiableCredential.length === 0) {
+      throw new Error("Verifiable credential is missing or empty");
+    }
+    const response = await fetch(`${CONCORDIUM_VERIFIER_URL}/v0/verify`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(presentationJson)
+    });
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Verifier returned ${response.status}: ${errorText}`);
+    }
+    return {
+      ...proof,
+      status: ProofStatus.VERIFIED
+    };
+  } catch {
+    return {
+      ...proof,
+      status: ProofStatus.FAILED
+    };
+  }
+};
+
+export { verifyConcordiumSignature };
+//# sourceMappingURL=concordium-JJ5VEIOA.js.map
+//# sourceMappingURL=concordium-JJ5VEIOA.js.map

package/dist/esm/concordium-JJ5VEIOA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/concordium.ts"],"names":[],"mappings":";;;;AAGA,IAAM,uBAAA,GACJ,qDAAA;AAOK,IAAM,yBAAA,GAA4B,OACvC,KAAA,KAC4B;AAC5B,EAAA,MAAM,CAAC,EAAE,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAEpC,EAAA,IAAI,OAAO,KAAA,EAAO;AAChB,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,KAAK,CAAA;AAG/C,IAAA,IAAI,gBAAA,CAAiB,mBAAA,KAAwB,KAAA,CAAM,WAAA,EAAa;AAC9D,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AAGA,IAAA,IACE,CAAC,gBAAA,CAAiB,oBAAA,IAClB,gBAAA,CAAiB,oBAAA,CAAqB,WAAW,CAAA,EACjD;AACA,MAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,IAC7D;AAGA,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,uBAAuB,CAAA,UAAA,CAAA,EAAc;AAAA,MACnE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,gBAAgB;AAAA,KACtC,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,SAAS,MAAM,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AAAA,IACtE;AAGA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQ,WAAA,CAAY;AAAA,KACtB;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQ,WAAA,CAAY;AAAA,KACtB;AAAA,EACF;AACF","file":"concordium-JJ5VEIOA.js","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { VerifiablePresentation } from \"@concordium/web-sdk\";\n\nconst CONCORDIUM_VERIFIER_URL =\n  \"https://web3id-verifier.mainnet.concordium.software\";\n\n/**\n * Verifies a Concordium signature proof using Concordium's hosted verifier service\n * @param proof The signature proof to verify\n * @returns Promise resolving to the proof with updated status\n */\nexport const verifyConcordiumSignature = async (\n  proof: SignatureProof,\n): Promise<SignatureProof> => {\n  const [ns] = proof.address.split(/:/);\n\n  if (ns !== \"ccd\") {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n\n  try {\n    const presentationJson = JSON.parse(proof.proof) as VerifiablePresentation;\n\n    // Validate presentation context matches attestation\n    if (presentationJson.presentationContext !== proof.attestation) {\n      throw new Error(\"Presentation context does not match attestation\");\n    }\n\n    // Validate verifiableCredential exists and is not empty\n    if (\n      !presentationJson.verifiableCredential ||\n      presentationJson.verifiableCredential.length === 0\n    ) {\n      throw new Error(\"Verifiable credential is missing or empty\");\n    }\n\n    // Use Concordium's hosted verifier instead of gRPC\n    const response = await fetch(`${CONCORDIUM_VERIFIER_URL}/v0/verify`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(presentationJson),\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`Verifier returned ${response.status}: ${errorText}`);\n    }\n\n    // If we get here, the proof is valid\n    return {\n      ...proof,\n      status: ProofStatus.VERIFIED,\n    };\n  } catch {\n    return {\n      ...proof,\n      status: ProofStatus.FAILED,\n    };\n  }\n};\n"]}

package/dist/esm/cosmos-AVIWAIX7.js

@@ -0,0 +1,90 @@
+import { Buffer } from 'buffer';
+import { ProofStatus } from '@notabene/javascript-sdk';
+import { bech32 } from 'bech32';
+import { serializeSignDoc } from '@cosmjs/amino';
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { ripemd160 } from '@noble/hashes/legacy';
+import { sha256 } from '@noble/hashes/sha2';
+import { keccak_256 } from '@noble/hashes/sha3';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+function base64ToUint8Array(base64) {
+  return Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));
+}
+function toBase64Bytes(str) {
+  const utf8 = new TextEncoder().encode(str);
+  let binary = "";
+  for (let i = 0; i < utf8.length; i++) {
+    binary += String.fromCharCode(utf8[i]);
+  }
+  return btoa(binary);
+}
+function deriveCosmosAddress(pubkey, prefix) {
+  const sha = sha256(pubkey);
+  const rip = ripemd160(sha);
+  return bech32.encode(prefix, bech32.toWords(rip));
+}
+function deriveEthAddress(pubkey, prefix) {
+  const uncompressed = secp256k1.ProjectivePoint.fromHex(pubkey).toRawBytes(false).slice(1);
+  const eth = keccak_256(uncompressed).slice(-20);
+  return bech32.encode(prefix, bech32.toWords(eth));
+}
+function keyAlgoForAddress(pubkey, address) {
+  const prefix = bech32Prefix(address);
+  if (deriveCosmosAddress(pubkey, prefix) === address) {
+    return "secp256k1";
+  }
+  if (deriveEthAddress(pubkey, prefix) === address) {
+    return "ethsecp256k1";
+  }
+  return void 0;
+}
+function bech32Prefix(address) {
+  return address.slice(0, address.lastIndexOf("1"));
+}
+async function verifyCosmosSignature(proof) {
+  try {
+    const [ns, , address] = proof.address.split(/:/);
+    if (ns !== "cosmos") {
+      return { ...proof, status: ProofStatus.FAILED };
+    }
+    const pubKeyBytes = base64ToUint8Array(
+      proof.chainSpecificData.pub_key.value
+    );
+    const signatureBytes = base64ToUint8Array(proof.proof);
+    const algo = keyAlgoForAddress(pubKeyBytes, address);
+    if (!algo) {
+      return { ...proof, status: ProofStatus.FAILED };
+    }
+    const signDoc = {
+      chain_id: "",
+      // must match the signing process
+      account_number: "0",
+      sequence: "0",
+      fee: { amount: [], gas: "0" },
+      msgs: [
+        {
+          type: "sign/MsgSignData",
+          value: {
+            signer: address,
+            data: toBase64Bytes(proof.attestation)
+          }
+        }
+      ],
+      memo: ""
+    };
+    const signBytes = await serializeSignDoc(signDoc);
+    const digest = algo === "ethsecp256k1" ? keccak_256(signBytes) : sha256(signBytes);
+    const verified = secp256k1.verify(signatureBytes, digest, pubKeyBytes);
+    return {
+      ...proof,
+      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+    };
+  } catch {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+}
+
+export { verifyCosmosSignature };
+//# sourceMappingURL=cosmos-AVIWAIX7.js.map
+//# sourceMappingURL=cosmos-AVIWAIX7.js.map

package/dist/esm/cosmos-AVIWAIX7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cosmos.ts"],"names":[],"mappings":";;;;;;;;;;AAaA,SAAS,mBAAmB,MAAA,EAA4B;AACtD,EAAA,OAAO,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAC7D;AAGA,SAAS,cAAc,GAAA,EAAqB;AAC1C,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AACzC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;AAIA,SAAS,mBAAA,CAAoB,QAAoB,MAAA,EAAwB;AACvE,EAAA,MAAM,GAAA,GAAM,OAAO,MAAM,CAAA;AACzB,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,OAAO,OAAO,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClD;AAIA,SAAS,gBAAA,CAAiB,QAAoB,MAAA,EAAwB;AACpE,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,eAAA,CAAgB,OAAA,CAAQ,MAAM,EAC1D,UAAA,CAAW,KAAK,CAAA,CAChB,KAAA,CAAM,CAAC,CAAA;AACV,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,YAAY,CAAA,CAAE,MAAM,GAAG,CAAA;AAC9C,EAAA,OAAO,OAAO,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClD;AAOA,SAAS,iBAAA,CACP,QACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAA,GAAS,aAAa,OAAO,CAAA;AACnC,EAAA,IAAI,mBAAA,CAAoB,MAAA,EAAQ,MAAM,CAAA,KAAM,OAAA,EAAS;AACnD,IAAA,OAAO,WAAA;AAAA,EACT;AACA,EAAA,IAAI,gBAAA,CAAiB,MAAA,EAAQ,MAAM,CAAA,KAAM,OAAA,EAAS;AAChD,IAAA,OAAO,cAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAIA,SAAS,aAAa,OAAA,EAAyB;AAC7C,EAAA,OAAO,QAAQ,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,WAAA,CAAY,GAAG,CAAC,CAAA;AAClD;AAEA,eAAsB,sBACpB,KAAA,EACyB;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,IAAA,IAAI,OAAO,QAAA,EAAU;AACnB,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,WAAA,GAAc,kBAAA;AAAA,MACjB,KAAA,CAAM,kBAAqC,OAAA,CAAQ;AAAA,KACtD;AACA,IAAA,MAAM,cAAA,GAAiB,kBAAA,CAAmB,KAAA,CAAM,KAAK,CAAA;AAIrD,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,WAAA,EAAa,OAAO,CAAA;AACnD,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,OAAA,GAAsB;AAAA,MAC1B,QAAA,EAAU,EAAA;AAAA;AAAA,MACV,cAAA,EAAgB,GAAA;AAAA,MAChB,QAAA,EAAU,GAAA;AAAA,MACV,KAAK,EAAE,MAAA,EAAQ,EAAC,EAAG,KAAK,GAAA,EAAI;AAAA,MAC5B,IAAA,EAAM;AAAA,QACJ;AAAA,UACE,IAAA,EAAM,kBAAA;AAAA,UACN,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,OAAA;AAAA,YACR,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,WAAW;AAAA;AACvC;AACF,OACF;AAAA,MACA,IAAA,EAAM;AAAA,KACR;AAGA,IAAA,MAAM,SAAA,GAAY,MAAM,gBAAA,CAAiB,OAAO,CAAA;AAChD,IAAA,MAAM,SACJ,IAAA,KAAS,cAAA,GAAiB,WAAW,SAAS,CAAA,GAAI,OAAO,SAAS,CAAA;AAGpE,IAAA,MAAM,QAAA,GAAW,SAAA,CAAU,MAAA,CAAO,cAAA,EAAgB,QAAQ,WAAW,CAAA;AAErE,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"cosmos-AVIWAIX7.js","sourcesContent":["import {\n  CosmosMetadata,\n  ProofStatus,\n  SignatureProof,\n} from \"@notabene/javascript-sdk\";\nimport { bech32 } from \"bech32\";\nimport { StdSignDoc, serializeSignDoc } from \"@cosmjs/amino\";\nimport { secp256k1 } from \"@noble/curves/secp256k1\";\nimport { ripemd160 } from \"@noble/hashes/legacy\";\nimport { sha256 } from \"@noble/hashes/sha2\";\nimport { keccak_256 } from \"@noble/hashes/sha3\";\n\n// Base64 decode\nfunction base64ToUint8Array(base64: string): Uint8Array {\n  return Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));\n}\n\n// Base64 encode UTF-8 bytes\nfunction toBase64Bytes(str: string): string {\n  const utf8 = new TextEncoder().encode(str);\n  let binary = \"\";\n  for (let i = 0; i < utf8.length; i++) {\n    binary += String.fromCharCode(utf8[i]);\n  }\n  return btoa(binary);\n}\n\n// Cosmos address derivation (ADR-36)\n// https://github.com/cosmos/cosmos-sdk/blob/214b11dcbaa129f7b4c0013b2103db9d54b85e9e/docs/architecture/adr-036-arbitrary-signature.md\nfunction deriveCosmosAddress(pubkey: Uint8Array, prefix: string): string {\n  const sha = sha256(pubkey);\n  const rip = ripemd160(sha);\n  return bech32.encode(prefix, bech32.toWords(rip));\n}\n\n// Ethermint-style chains (Injective, Evmos, ...) use eth-secp256k1 keys: the account is\n// the Ethereum address of the key, bech32-encoded under the chain prefix.\nfunction deriveEthAddress(pubkey: Uint8Array, prefix: string): string {\n  const uncompressed = secp256k1.ProjectivePoint.fromHex(pubkey)\n    .toRawBytes(false)\n    .slice(1);\n  const eth = keccak_256(uncompressed).slice(-20);\n  return bech32.encode(prefix, bech32.toWords(eth));\n}\n\n// Same selection Keplr's verifyADR36AminoSignDoc makes via its `algo` argument. The signed\n// address tells us which key algorithm the chain uses, so we do not depend on the\n// pub_key.type string wallets put in the amino signature.\ntype CosmosKeyAlgo = \"secp256k1\" | \"ethsecp256k1\";\n\nfunction keyAlgoForAddress(\n  pubkey: Uint8Array,\n  address: string\n): CosmosKeyAlgo | undefined {\n  const prefix = bech32Prefix(address);\n  if (deriveCosmosAddress(pubkey, prefix) === address) {\n    return \"secp256k1\";\n  }\n  if (deriveEthAddress(pubkey, prefix) === address) {\n    return \"ethsecp256k1\";\n  }\n  return undefined;\n}\n\n// Each Cosmos SDK chain has its own human-readable part (cosmos, celestia, axelar, ...),\n// and bech32 separates it from the data with the last \"1\" in the string.\nfunction bech32Prefix(address: string): string {\n  return address.slice(0, address.lastIndexOf(\"1\"));\n}\n\nexport async function verifyCosmosSignature(\n  proof: SignatureProof\n): Promise<SignatureProof> {\n  try {\n    const [ns, , address] = proof.address.split(/:/);\n    if (ns !== \"cosmos\") {\n      return { ...proof, status: ProofStatus.FAILED };\n    }\n\n    // Parse the proof JSON\n    const pubKeyBytes = base64ToUint8Array(\n      (proof.chainSpecificData as CosmosMetadata).pub_key.value\n    );\n    const signatureBytes = base64ToUint8Array(proof.proof);\n\n    // Step 1: The pubkey must derive to the signed address; which derivation matches\n    // also decides the digest used in step 3.\n    const algo = keyAlgoForAddress(pubKeyBytes, address);\n    if (!algo) {\n      return { ...proof, status: ProofStatus.FAILED };\n    }\n\n    // Step 2: Build MsgSignData + StdSignDoc\n    const signDoc: StdSignDoc = {\n      chain_id: \"\", // must match the signing process\n      account_number: \"0\",\n      sequence: \"0\",\n      fee: { amount: [], gas: \"0\" },\n      msgs: [\n        {\n          type: \"sign/MsgSignData\",\n          value: {\n            signer: address,\n            data: toBase64Bytes(proof.attestation),\n          },\n        },\n      ],\n      memo: \"\",\n    };\n\n    // Step 3: Serialize + hash (ADR-036 digests are keccak256 on eth-secp256k1 chains)\n    const signBytes = await serializeSignDoc(signDoc);\n    const digest =\n      algo === \"ethsecp256k1\" ? keccak_256(signBytes) : sha256(signBytes);\n\n    // Step 4: Verify using secp256k1\n    const verified = secp256k1.verify(signatureBytes, digest, pubKeyBytes);\n\n    return {\n      ...proof,\n      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n    };\n  } catch {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n}\n"]}

package/dist/esm/eth-GI4Z5V4T.js

@@ -0,0 +1,33 @@
+import { Buffer } from 'buffer';
+import { ProofStatus } from '@notabene/javascript-sdk';
+import { PersonalMessage, Hex, Signature, Secp256k1, Address } from 'ox';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+function verifyEIP191(address, message, proof) {
+  try {
+    const payload = PersonalMessage.getSignPayload(Hex.fromString(message));
+    const signature = Signature.fromHex(proof);
+    const publicKey = Secp256k1.recoverPublicKey({ payload, signature });
+    const recovered = Address.checksum(Address.fromPublicKey(publicKey));
+    return recovered.toString() === Address.checksum(address);
+  } catch (error) {
+    return false;
+  }
+}
+async function verifyPersonalSignEIP191(proof) {
+  const [ns, , address] = proof.address.split(/:/);
+  if (ns !== "eip155") return { ...proof, status: ProofStatus.FAILED };
+  const verified = verifyEIP191(
+    address,
+    proof.attestation,
+    proof.proof
+  );
+  return {
+    ...proof,
+    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+  };
+}
+
+export { verifyEIP191, verifyPersonalSignEIP191 };
+//# sourceMappingURL=eth-GI4Z5V4T.js.map
+//# sourceMappingURL=eth-GI4Z5V4T.js.map

package/dist/esm/eth-GI4Z5V4T.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/eth.ts"],"names":[],"mappings":";;;;;AAGO,SAAS,YAAA,CACd,OAAA,EACA,OAAA,EACA,KAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,eAAA,CAAgB,cAAA,CAAe,GAAA,CAAI,UAAA,CAAW,OAAO,CAAC,CAAA;AACtE,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AACzC,IAAA,MAAM,YAAY,SAAA,CAAU,gBAAA,CAAiB,EAAE,OAAA,EAAS,WAAW,CAAA;AACnE,IAAA,MAAM,YAAY,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,aAAA,CAAc,SAAS,CAAC,CAAA;AACnE,IAAA,OAAO,SAAA,CAAU,QAAA,EAAS,KAAM,OAAA,CAAQ,SAAS,OAAO,CAAA;AAAA,EAE1D,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,yBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEnE,EAAA,MAAM,QAAA,GAAW,YAAA;AAAA,IACf,OAAA;AAAA,IACA,KAAA,CAAM,WAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,GACxD;AACF","file":"eth-GI4Z5V4T.js","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Secp256k1, Hex, PersonalMessage, Signature, Address } from \"ox\";\n\nexport function verifyEIP191(\n  address: Hex.Hex,\n  message: string,\n  proof: Hex.Hex,\n): boolean {\n  try {\n    const payload = PersonalMessage.getSignPayload(Hex.fromString(message));\n    const signature = Signature.fromHex(proof);\n    const publicKey = Secp256k1.recoverPublicKey({ payload, signature });\n    const recovered = Address.checksum(Address.fromPublicKey(publicKey));\n    return recovered.toString() === Address.checksum(address);\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  } catch (error) {\n    return false;\n  }\n}\n\nexport async function verifyPersonalSignEIP191(\n  proof: SignatureProof,\n): Promise<SignatureProof> {\n  const [ns, , address] = proof.address.split(/:/);\n  if (ns !== \"eip155\") return { ...proof, status: ProofStatus.FAILED };\n\n  const verified = verifyEIP191(\n    address as Hex.Hex,\n    proof.attestation,\n    proof.proof as Hex.Hex,\n  );\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n"]}

package/dist/esm/index.d.ts

@@ -0,0 +1,5 @@
+import { OwnershipProof } from '@notabene/javascript-sdk';
+
+declare function verifyProof(proof: OwnershipProof, publicKey?: string): Promise<OwnershipProof>;
+
+export { verifyProof };

package/dist/esm/index.js

@@ -0,0 +1,66 @@
+import { Buffer } from 'buffer';
+import { ProofTypes, ProofStatus } from '@notabene/javascript-sdk';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+async function verifyProof(proof, publicKey) {
+  switch (proof.type) {
+    case ProofTypes.SelfDeclaration:
+      return {
+        ...proof,
+        status: proof.confirmed ? ProofStatus.VERIFIED : ProofStatus.FAILED
+      };
+    case ProofTypes.Screenshot:
+      return {
+        ...proof,
+        status: proof.url ? ProofStatus.FLAGGED : ProofStatus.FAILED
+      };
+    case ProofTypes.CIP8: {
+      const { verifyCIP8Signature } = await import('./cardano-OMGAPH5N.js');
+      return verifyCIP8Signature(proof);
+    }
+    case ProofTypes.EIP191: {
+      const { verifyPersonalSignEIP191 } = await import('./eth-GI4Z5V4T.js');
+      return verifyPersonalSignEIP191(proof);
+    }
+    case ProofTypes.ED25519: {
+      const { verifySolanaSignature } = await import('./solana-ZARDAF6O.js');
+      return verifySolanaSignature(proof);
+    }
+    case ProofTypes.SOL_SIWX: {
+      const { verifySolanaSIWS } = await import('./solana-ZARDAF6O.js');
+      return verifySolanaSIWS(proof);
+    }
+    case ProofTypes.XRP_ED25519: {
+      const { verifyPersonalSignXRPL } = await import('./xrpl-52IBJ4EW.js');
+      return verifyPersonalSignXRPL(proof, publicKey);
+    }
+    case ProofTypes.XLM_ED25519: {
+      const { verifyStellarSignature } = await import('./xlm-TNRZ5CFC.js');
+      return verifyStellarSignature(proof);
+    }
+    case ProofTypes.CONCORDIUM: {
+      const { verifyConcordiumSignature } = await import('./concordium-JJ5VEIOA.js');
+      return verifyConcordiumSignature(proof);
+    }
+    case ProofTypes.COSMOS: {
+      const { verifyCosmosSignature } = await import('./cosmos-AVIWAIX7.js');
+      return verifyCosmosSignature(proof);
+    }
+    case ProofTypes.EIP712:
+    case ProofTypes.BIP137:
+    case ProofTypes.BIP322: {
+      const { verifyBTCSignature } = await import('./bitcoin-BTZ4TXEK.js');
+      return verifyBTCSignature(proof);
+    }
+    case ProofTypes.TIP191: {
+      const { verifyPersonalSignTIP191 } = await import('./tron-FI2B6DRS.js');
+      return verifyPersonalSignTIP191(proof);
+    }
+    case ProofTypes.MicroTransfer:
+  }
+  return proof;
+}
+
+export { verifyProof };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/index.ts"],"names":[],"mappings":";;;;AAUA,eAAsB,WAAA,CACpB,OACA,SAAA,EACyB;AACzB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,UAAA,CAAW,eAAA;AACd,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,MAAA,EAAS,KAAA,CAA2B,SAAA,GAChC,WAAA,CAAY,WACZ,WAAA,CAAY;AAAA,OAClB;AAAA,IACF,KAAK,UAAA,CAAW,UAAA;AACd,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,MAAA,EAAS,KAAA,CAA0B,GAAA,GAC/B,WAAA,CAAY,UACZ,WAAA,CAAY;AAAA,OAClB;AAAA,IACF,KAAK,WAAW,IAAA,EAAM;AACpB,MAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,MAAM,OAAO,uBAAW,CAAA;AACxD,MAAA,OAAO,oBAAoB,KAAuB,CAAA;AAAA,IACpD;AAAA,IACA,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,mBAAO,CAAA;AACzD,MAAA,OAAO,yBAAyB,KAAuB,CAAA;AAAA,IACzD;AAAA,IACA,KAAK,WAAW,OAAA,EAAS;AACvB,MAAA,MAAM,EAAE,qBAAA,EAAsB,GAAI,MAAM,OAAO,sBAAU,CAAA;AACzD,MAAA,OAAO,sBAAsB,KAAuB,CAAA;AAAA,IACtD;AAAA,IACA,KAAK,WAAW,QAAA,EAAU;AACxB,MAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,sBAAU,CAAA;AACpD,MAAA,OAAO,iBAAiB,KAAuB,CAAA;AAAA,IACjD;AAAA,IACA,KAAK,WAAW,WAAA,EAAa;AAC3B,MAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAAQ,CAAA;AACxD,MAAA,OAAO,sBAAA,CAAuB,OAAyB,SAAS,CAAA;AAAA,IAClE;AAAA,IACA,KAAK,WAAW,WAAA,EAAa;AAC3B,MAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,mBAAO,CAAA;AACvD,MAAA,OAAO,uBAAuB,KAAuB,CAAA;AAAA,IACvD;AAAA,IACA,KAAK,WAAW,UAAA,EAAY;AAC1B,MAAA,MAAM,EAAE,yBAAA,EAA0B,GAAI,MAAM,OAAO,0BAAc,CAAA;AACjE,MAAA,OAAO,0BAA0B,KAAuB,CAAA;AAAA,IAC1D;AAAA,IACA,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,qBAAA,EAAsB,GAAI,MAAM,OAAO,sBAAU,CAAA;AACzD,MAAA,OAAO,sBAAsB,KAAuB,CAAA;AAAA,IACtD;AAAA,IACA,KAAK,UAAA,CAAW,MAAA;AAAA,IAChB,KAAK,UAAA,CAAW,MAAA;AAAA,IAChB,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,uBAAW,CAAA;AACvD,MAAA,OAAO,mBAAmB,KAAuB,CAAA;AAAA,IACnD;AAAA,IACA,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,oBAAQ,CAAA;AAC1D,MAAA,OAAO,yBAAyB,KAAuB,CAAA;AAAA,IACzD;AAAA,IACA,KAAK,UAAA,CAAW,aAAA;AAAA;AAElB,EAAA,OAAO,KAAA;AACT","file":"index.js","sourcesContent":["import {\n  type OwnershipProof,\n  SignatureProof,\n  DeclarationProof,\n  ScreenshotProof,\n  ProofTypes,\n  ProofStatus,\n} from \"@notabene/javascript-sdk\";\n\n// Use dynamic imports to ensure Buffer is available before loading crypto libraries\nexport async function verifyProof(\n  proof: OwnershipProof,\n  publicKey?: string,\n): Promise<OwnershipProof> {\n  switch (proof.type) {\n    case ProofTypes.SelfDeclaration:\n      return {\n        ...proof,\n        status: (proof as DeclarationProof).confirmed\n          ? ProofStatus.VERIFIED\n          : ProofStatus.FAILED,\n      };\n    case ProofTypes.Screenshot:\n      return {\n        ...proof,\n        status: (proof as ScreenshotProof).url\n          ? ProofStatus.FLAGGED\n          : ProofStatus.FAILED,\n      };\n    case ProofTypes.CIP8: {\n      const { verifyCIP8Signature } = await import(\"./cardano\");\n      return verifyCIP8Signature(proof as SignatureProof);\n    }\n    case ProofTypes.EIP191: {\n      const { verifyPersonalSignEIP191 } = await import(\"./eth\");\n      return verifyPersonalSignEIP191(proof as SignatureProof);\n    }\n    case ProofTypes.ED25519: {\n      const { verifySolanaSignature } = await import(\"./solana\");\n      return verifySolanaSignature(proof as SignatureProof);\n    }\n    case ProofTypes.SOL_SIWX: {\n      const { verifySolanaSIWS } = await import(\"./solana\");\n      return verifySolanaSIWS(proof as SignatureProof);\n    }\n    case ProofTypes.XRP_ED25519: {\n      const { verifyPersonalSignXRPL } = await import(\"./xrpl\");\n      return verifyPersonalSignXRPL(proof as SignatureProof, publicKey);\n    }\n    case ProofTypes.XLM_ED25519: {\n      const { verifyStellarSignature } = await import(\"./xlm\");\n      return verifyStellarSignature(proof as SignatureProof);\n    }\n    case ProofTypes.CONCORDIUM: {\n      const { verifyConcordiumSignature } = await import(\"./concordium\");\n      return verifyConcordiumSignature(proof as SignatureProof);\n    }\n    case ProofTypes.COSMOS: {\n      const { verifyCosmosSignature } = await import(\"./cosmos\");\n      return verifyCosmosSignature(proof as SignatureProof);\n    }\n    case ProofTypes.EIP712:\n    case ProofTypes.BIP137:\n    case ProofTypes.BIP322: {\n      const { verifyBTCSignature } = await import(\"./bitcoin\");\n      return verifyBTCSignature(proof as SignatureProof);\n    }\n    case ProofTypes.TIP191: {\n      const { verifyPersonalSignTIP191 } = await import(\"./tron\");\n      return verifyPersonalSignTIP191(proof as SignatureProof);\n    }\n    case ProofTypes.MicroTransfer:\n  }\n  return proof;\n}\n"]}

package/dist/esm/solana-ZARDAF6O.js

@@ -0,0 +1,341 @@
+import { Buffer } from 'buffer';
+import nacl from 'tweetnacl';
+import { ProofStatus } from '@notabene/javascript-sdk';
+import { base58, base64 } from '@scure/base';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+async function verifySolanaSignature(proof) {
+  const [ns, , address] = proof.address.split(/:/);
+  if (ns !== "solana") return { ...proof, status: ProofStatus.FAILED };
+  try {
+    const publicKey = base58.decode(address);
+    const messageBytes = new TextEncoder().encode(proof.attestation);
+    const signatureBytes = base64.decode(proof.proof);
+    const verified = nacl.sign.detached.verify(
+      messageBytes,
+      signatureBytes,
+      publicKey
+    );
+    return {
+      ...proof,
+      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+    };
+  } catch {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+}
+function isSolanaSignInInput(obj) {
+  if (!obj || typeof obj !== "object") return false;
+  const input = obj;
+  return typeof input.domain === "string" && typeof input.address === "string" && (input.statement === void 0 || typeof input.statement === "string") && (input.uri === void 0 || typeof input.uri === "string") && (input.version === void 0 || typeof input.version === "string") && (input.chainId === void 0 || typeof input.chainId === "string") && (input.nonce === void 0 || typeof input.nonce === "string") && (input.issuedAt === void 0 || typeof input.issuedAt === "string") && (input.expirationTime === void 0 || typeof input.expirationTime === "string") && (input.notBefore === void 0 || typeof input.notBefore === "string") && (input.requestId === void 0 || typeof input.requestId === "string") && (input.resources === void 0 || Array.isArray(input.resources));
+}
+function isSolanaSignInMetadata(obj) {
+  if (!obj || typeof obj !== "object") return false;
+  const metadata = obj;
+  if (!metadata.account || typeof metadata.account !== "object") return false;
+  const account = metadata.account;
+  if (typeof account.address !== "string") return false;
+  if (!account.publicKey) return false;
+  if (!(account.publicKey instanceof Uint8Array)) {
+    const pkObj = account.publicKey;
+    if (typeof pkObj === "object") {
+      const keys = Object.keys(pkObj).filter((key) => !isNaN(Number(key))).sort((a, b) => Number(a) - Number(b));
+      if (keys.length === 32) {
+        const bytes = keys.map((key) => Number(pkObj[key]));
+        if (bytes.every((b) => typeof b === "number" && b >= 0 && b <= 255)) {
+          account.publicKey = new Uint8Array(bytes);
+        } else {
+          return false;
+        }
+      } else {
+        return false;
+      }
+    } else {
+      return false;
+    }
+  }
+  if (!metadata.signedMessage) return false;
+  if (!(metadata.signedMessage instanceof Uint8Array)) {
+    const smObj = metadata.signedMessage;
+    if (smObj.type === "Buffer" && Array.isArray(smObj.data)) {
+      metadata.signedMessage = new Uint8Array(smObj.data);
+    } else {
+      return false;
+    }
+  }
+  if (!metadata.signature) return false;
+  if (!(metadata.signature instanceof Uint8Array)) {
+    const sigObj = metadata.signature;
+    if (sigObj.type === "Buffer" && Array.isArray(sigObj.data)) {
+      metadata.signature = new Uint8Array(sigObj.data);
+    } else {
+      return false;
+    }
+  }
+  if (!metadata.message || typeof metadata.message !== "object") {
+    return false;
+  }
+  const message = metadata.message;
+  if (typeof message === "object" && message !== null) {
+    const messageObj = message;
+    if (!messageObj.address && metadata.signedMessage instanceof Uint8Array) {
+      try {
+        const signedMessageText = new TextDecoder().decode(metadata.signedMessage);
+        const lines = signedMessageText.split("\n");
+        if (lines.length >= 2) {
+          const address = lines[1].trim();
+          if (address && /^[a-zA-Z0-9]{32,44}$/.test(address)) {
+            messageObj.address = address;
+          }
+        }
+      } catch {
+      }
+    }
+  }
+  if (!isSolanaSignInInput(metadata.message)) {
+    return false;
+  }
+  return true;
+}
+async function verifySolanaSIWS(proof) {
+  const [ns] = proof.address.split(/:/);
+  if (ns !== "solana") {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+  if (!proof.chainSpecificData || !isSolanaSignInMetadata(proof.chainSpecificData)) {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+  try {
+    const metadata = proof.chainSpecificData;
+    const signedMessageText = new TextDecoder().decode(metadata.signedMessage);
+    const parsedMessage = parseSIWSMessage(signedMessageText);
+    if (!parsedMessage) {
+      return { ...proof, status: ProofStatus.FAILED };
+    }
+    if (!validateSIWSMessage(parsedMessage, metadata.message)) {
+      return { ...proof, status: ProofStatus.FAILED };
+    }
+    const reconstructedMessage = createSIWSMessage(parsedMessage);
+    if (reconstructedMessage !== signedMessageText) {
+      return { ...proof, status: ProofStatus.FAILED };
+    }
+    const verified = nacl.sign.detached.verify(
+      metadata.signedMessage,
+      metadata.signature,
+      metadata.account.publicKey
+    );
+    return {
+      ...proof,
+      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+    };
+  } catch {
+    return { ...proof, status: ProofStatus.FAILED };
+  }
+}
+function parseSIWSMessage(message) {
+  try {
+    const lines = message.split("\n");
+    const header = parseHeader(lines);
+    if (!header) return null;
+    const result = { ...header };
+    let lineIndex = 2;
+    const statementResult = parseStatement(lines, lineIndex);
+    if (statementResult.statement !== void 0) {
+      result.statement = statementResult.statement;
+      lineIndex = statementResult.nextIndex;
+    }
+    const advancedFields = parseAdvancedFields(lines, lineIndex);
+    Object.assign(result, advancedFields);
+    return result;
+  } catch {
+    return null;
+  }
+}
+function parseHeader(lines) {
+  const domainMatch = lines[0]?.match(/^(.+) wants you to sign in with your Solana account:$/);
+  if (!domainMatch) return null;
+  const domain = domainMatch[1];
+  const address = lines[1];
+  if (!address || !/^[a-zA-Z0-9]{32,44}$/.test(address)) return null;
+  return { domain, address };
+}
+function parseStatement(lines, startIndex) {
+  let lineIndex = startIndex;
+  if (lines[lineIndex] === "" && lines[lineIndex + 1] && !lines[lineIndex + 1].includes(":")) {
+    lineIndex++;
+    const statement = lines[lineIndex];
+    lineIndex++;
+    if (lines[lineIndex] === "") {
+      lineIndex++;
+    }
+    return { statement, nextIndex: lineIndex };
+  }
+  return { nextIndex: lineIndex };
+}
+function parseAdvancedFields(lines, startIndex) {
+  const result = {};
+  const fieldParsers = [
+    { prefix: "URI: ", key: "uri" },
+    { prefix: "Version: ", key: "version" },
+    { prefix: "Chain ID: ", key: "chainId" },
+    { prefix: "Nonce: ", key: "nonce" },
+    { prefix: "Issued At: ", key: "issuedAt" },
+    { prefix: "Expiration Time: ", key: "expirationTime" },
+    { prefix: "Not Before: ", key: "notBefore" },
+    { prefix: "Request ID: ", key: "requestId" }
+  ];
+  let lineIndex = startIndex;
+  while (lineIndex < lines.length) {
+    const line = lines[lineIndex];
+    if (!line) {
+      lineIndex++;
+      continue;
+    }
+    if (line.startsWith("Resources:")) {
+      const resources = parseResources(lines, lineIndex + 1);
+      if (resources.length > 0) {
+        result.resources = resources;
+        lineIndex += resources.length + 1;
+        continue;
+      }
+    }
+    for (const { prefix, key } of fieldParsers) {
+      if (line.startsWith(prefix)) {
+        const value = line.substring(prefix.length);
+        result[key] = value;
+        break;
+      }
+    }
+    lineIndex++;
+  }
+  return result;
+}
+function parseResources(lines, startIndex) {
+  const resources = [];
+  let lineIndex = startIndex;
+  while (lineIndex < lines.length && lines[lineIndex]?.startsWith("- ")) {
+    resources.push(lines[lineIndex].substring(2));
+    lineIndex++;
+  }
+  return resources;
+}
+function validateSIWSMessage(parsed, input) {
+  if (parsed.domain !== input.domain || parsed.address !== input.address) {
+    return false;
+  }
+  const fieldValidations = [
+    { inputKey: "statement", parsedKey: "statement" },
+    { inputKey: "uri", parsedKey: "uri" },
+    { inputKey: "version", parsedKey: "version" },
+    { inputKey: "chainId", parsedKey: "chainId" },
+    { inputKey: "nonce", parsedKey: "nonce" },
+    { inputKey: "issuedAt", parsedKey: "issuedAt" },
+    { inputKey: "expirationTime", parsedKey: "expirationTime" },
+    { inputKey: "notBefore", parsedKey: "notBefore" },
+    { inputKey: "requestId", parsedKey: "requestId" },
+    {
+      inputKey: "resources",
+      parsedKey: "resources",
+      validator: (inputValue, parsedValue) => {
+        if (!Array.isArray(inputValue) || !Array.isArray(parsedValue)) {
+          return false;
+        }
+        return inputValue.length === parsedValue.length && inputValue.every((item, index) => item === parsedValue[index]);
+      }
+    }
+  ];
+  for (const { inputKey, parsedKey, validator } of fieldValidations) {
+    const inputValue = input[inputKey];
+    const parsedValue = parsed[parsedKey];
+    if (inputValue !== void 0) {
+      if (validator) {
+        if (!validator(inputValue, parsedValue)) {
+          return false;
+        }
+      } else if (inputValue !== parsedValue) {
+        return false;
+      }
+    }
+  }
+  return validateTimestamps(parsed);
+}
+function validateTimestamps(parsed) {
+  const now = Date.now();
+  if (parsed.issuedAt) {
+    const issuedAt = new Date(parsed.issuedAt);
+    const threshold = 24 * 60 * 60 * 1e3;
+    const timeDiff = Math.abs(issuedAt.getTime() - now);
+    if (timeDiff > threshold) {
+      return false;
+    }
+  }
+  if (parsed.expirationTime) {
+    const expirationTime = new Date(parsed.expirationTime);
+    if (expirationTime.getTime() <= now) {
+      return false;
+    }
+  }
+  if (parsed.notBefore) {
+    const notBefore = new Date(parsed.notBefore);
+    if (notBefore.getTime() > now) {
+      return false;
+    }
+  }
+  return true;
+}
+function createSIWSMessage(input) {
+  let message = `${input.domain} wants you to sign in with your Solana account:
+`;
+  message += `${input.address}`;
+  if (input.statement) {
+    message += `
+
+${input.statement}`;
+  }
+  const fields = buildFieldLines(input);
+  if (fields.length) {
+    message += `
+
+${fields.join("\n")}`;
+  }
+  return message;
+}
+function buildFieldLines(input) {
+  const fields = [];
+  const fieldMappings = [
+    { key: "uri", prefix: "URI: " },
+    { key: "version", prefix: "Version: " },
+    { key: "chainId", prefix: "Chain ID: " },
+    { key: "nonce", prefix: "Nonce: " },
+    { key: "issuedAt", prefix: "Issued At: " },
+    { key: "expirationTime", prefix: "Expiration Time: " },
+    { key: "notBefore", prefix: "Not Before: " },
+    { key: "requestId", prefix: "Request ID: " },
+    {
+      key: "resources",
+      prefix: "Resources:",
+      formatter: (value) => {
+        if (Array.isArray(value) && value.length > 0) {
+          return ["Resources:", ...value.map((resource) => `- ${resource}`)];
+        }
+        return [];
+      }
+    }
+  ];
+  for (const { key, prefix, formatter } of fieldMappings) {
+    const value = input[key];
+    if (value !== void 0) {
+      if (formatter) {
+        const formatted = formatter(value);
+        fields.push(...formatted);
+      } else if (typeof value === "string") {
+        fields.push(`${prefix}${value}`);
+      }
+    }
+  }
+  return fields;
+}
+
+export { verifySolanaSIWS, verifySolanaSignature };
+//# sourceMappingURL=solana-ZARDAF6O.js.map
+//# sourceMappingURL=solana-ZARDAF6O.js.map