@notabene/verify-proof 1.11.1-next.1 → 1.12.0-next.12

package/dist/{bitcoin-3CW4MNAW.cjs → cjs/bitcoin-UIEQV3IM.cjs}

@@ -1,7 +1,6 @@
 'use strict';
 
 var buffer = require('buffer');
-require('./chunk-OAXNH5XR.cjs');
 var javascriptSdk = require('@notabene/javascript-sdk');
 var varuintBitcoin = require('varuint-bitcoin');
 var base = require('@scure/base');
@@ -10,6 +9,79 @@ var secp256k1 = require('@noble/curves/secp256k1');
 var bip322Js = require('bip322-js');
 
 if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
+var CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var GENERATOR = [
+  BigInt("0x98f2bc8e61"),
+  BigInt("0x79b76d99e2"),
+  BigInt("0xf33e5fb3c4"),
+  BigInt("0xae2eabe2a8"),
+  BigInt("0x1e4f43e470")
+];
+function polymod(values) {
+  let c = BigInt(1);
+  for (const d of values) {
+    const c0 = c >> BigInt(35);
+    c = (c & BigInt("0x07ffffffff")) << BigInt(5) ^ BigInt(d);
+    for (let i = 0; i < 5; i++) {
+      if (c0 >> BigInt(i) & BigInt(1)) {
+        c ^= GENERATOR[i];
+      }
+    }
+  }
+  return c ^ BigInt(1);
+}
+function prefixExpand(prefix) {
+  const result = [];
+  for (let i = 0; i < prefix.length; i++) {
+    result.push(prefix.charCodeAt(i) & 31);
+  }
+  result.push(0);
+  return result;
+}
+function decodeCashAddr(address, defaultPrefix = "bitcoincash") {
+  let prefix;
+  const colonIndex = address.indexOf(":");
+  if (colonIndex !== -1) {
+    prefix = address.slice(0, colonIndex).toLowerCase();
+  } else {
+    prefix = defaultPrefix;
+  }
+  const rawPayload = colonIndex !== -1 ? address.slice(colonIndex + 1) : address;
+  if (/[A-Z]/.test(rawPayload) && /[a-z]/.test(rawPayload)) {
+    throw new Error("Invalid CashAddr: mixed case");
+  }
+  const payload = rawPayload.toLowerCase();
+  const words = [];
+  for (const ch of payload) {
+    const idx = CHARSET.indexOf(ch);
+    if (idx === -1) throw new Error("Invalid CashAddr character: " + ch);
+    words.push(idx);
+  }
+  if (words.length < 8) throw new Error("CashAddr too short");
+  const checksumData = [...prefixExpand(prefix), ...words];
+  if (polymod(checksumData) !== BigInt(0)) {
+    throw new Error("Invalid CashAddr checksum");
+  }
+  const dataWords = words.slice(0, -8);
+  const payloadBytes = base.bech32.fromWords(dataWords);
+  if (payloadBytes.length === 0) {
+    throw new Error("Invalid CashAddr padding");
+  }
+  const versionByte = payloadBytes[0];
+  const type = versionByte >> 3 & 15;
+  const hashSizeBits = versionByte & 7;
+  const expectedSizes = [20, 24, 28, 32, 40, 48, 56, 64];
+  const expectedSize = expectedSizes[hashSizeBits];
+  const hashBytes = payloadBytes.slice(1);
+  if (hashBytes.length !== expectedSize) {
+    throw new Error(
+      `Hash length mismatch: expected ${expectedSize}, got ${hashBytes.length}`
+    );
+  }
+  return { prefix, type, hash: Uint8Array.from(hashBytes) };
+}
+
+// src/bitcoin.ts
 var CHAIN_CONFIGS = {
   bitcoin: {
     messagePrefix: "Bitcoin Signed Message:\n",
@@ -72,7 +144,9 @@ var CHAIN_CONFIGS = {
   }
 };
 async function verifyBTCSignature(proof) {
-  const [ns, , address] = proof.address.split(/:/);
+  const parts = proof.address.split(":");
+  const ns = parts[0];
+  const address = parts.slice(2).join(":");
   if (ns !== "bip122") return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
   const chainConfig = getChainConfig(address);
   if (!chainConfig) return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
@@ -81,7 +155,11 @@ async function verifyBTCSignature(proof) {
     return verifyBIP137(address, proof, chainConfig);
   }
   if (chainConfig.isTestnet) {
-    return verifyBIP322(address, proof);
+    try {
+      return verifyBIP322(address, proof);
+    } catch {
+      return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+    }
   }
   const isTaproot = address.startsWith("bc1p") || address.startsWith("tb1p");
   if (isTaproot && proof.type === javascriptSdk.ProofTypes.BIP137) {
@@ -122,10 +200,10 @@ function getChainConfig(address) {
   if (address.startsWith("X") || address.startsWith("7")) {
     return CHAIN_CONFIGS["dash"];
   }
-  if (address.startsWith("q")) {
+  if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
     return CHAIN_CONFIGS["bitcoincash"];
   }
-  if (address.startsWith("tb1")) {
+  if (address.startsWith("m") || address.startsWith("n") || address.startsWith("2") || address.startsWith("tb1")) {
     return CHAIN_CONFIGS["testnet"];
   }
   return CHAIN_CONFIGS["bitcoin"];
@@ -168,7 +246,7 @@ function getDerivationMode(address) {
     return "Legacy" /* LEGACY */;
   } else if (address.match("^(D).*")) {
     return "Dogecoin" /* DOGECOIN */;
-  } else if (address.match("^(q).*")) {
+  } else if (address.match("^(q).*") || address.startsWith("bitcoincash:")) {
     return "Bitcoin Cash" /* BCH */;
   } else if (address.match("^(t1|t3).*")) {
     return "Legacy" /* LEGACY */;
@@ -207,19 +285,30 @@ function verify(attestation, address, proof, checkSegwitAlways, chainConfig) {
   const publicKey = signature.recoverPublicKey(hash);
   const publicKeyBytes = publicKey.toRawBytes(compressed);
   const publicKeyHash = hash160(publicKeyBytes);
-  let actual = "";
-  if (address.startsWith("q")) {
-    actual = encodeBase58AddressFormat(
-      chainConfig.pubKeyHashVersion,
-      publicKeyHash
-    );
-    return actual.startsWith("1");
+  if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
+    try {
+      const decoded = decodeCashAddr(address);
+      if (decoded.type !== 0) return false;
+      if (decoded.hash.length !== publicKeyHash.length) return false;
+      for (let i = 0; i < decoded.hash.length; i++) {
+        if (decoded.hash[i] !== publicKeyHash[i]) return false;
+      }
+      return true;
+    } catch {
+      return false;
+    }
   }
+  let actual = "";
   if (segwitType) {
     if (segwitType === "p2sh(p2wpkh)" /* P2SH_P2WPKH */) {
+      const redeemScript = new Uint8Array(22);
+      redeemScript[0] = 0;
+      redeemScript[1] = 20;
+      redeemScript.set(publicKeyHash, 2);
+      const redeemScriptHash = hash160(redeemScript);
       actual = encodeBase58AddressFormat(
         chainConfig.scriptHashVersion,
-        publicKeyHash
+        redeemScriptHash
       );
     } else {
       if (chainConfig.bech32Prefix) {
@@ -310,5 +399,5 @@ function hash160(buffer) {
 }
 
 exports.verifyBTCSignature = verifyBTCSignature;
-//# sourceMappingURL=bitcoin-3CW4MNAW.cjs.map
-//# sourceMappingURL=bitcoin-3CW4MNAW.cjs.map
+//# sourceMappingURL=bitcoin-UIEQV3IM.cjs.map
+//# sourceMappingURL=bitcoin-UIEQV3IM.cjs.map

package/dist/cjs/bitcoin-UIEQV3IM.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cashaddr.ts","../../src/bitcoin.ts"],"names":["bech32","ProofStatus","ProofTypes","Verifier","base64","secp256k1","createBase58check","Hash","encodeLength"],"mappings":";;;;;;;;;;;AAOA,IAAM,OAAA,GAAU,kCAAA;AAOhB,IAAM,SAAA,GAAY;AAAA,EAChB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc;AACvB,CAAA;AAeA,SAAS,QAAQ,MAAA,EAA0B;AACzC,EAAA,IAAI,CAAA,GAAI,OAAO,CAAC,CAAA;AAChB,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AAEtB,IAAA,MAAM,EAAA,GAAK,CAAA,IAAK,MAAA,CAAO,EAAE,CAAA;AAEzB,IAAA,CAAA,GAAA,CAAM,CAAA,GAAI,OAAO,cAAc,CAAA,KAAM,OAAO,CAAC,CAAA,GAAK,OAAO,CAAC,CAAA;AAE1D,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,MAAA,IAAK,MAAM,MAAA,CAAO,CAAC,CAAA,GAAK,MAAA,CAAO,CAAC,CAAA,EAAG;AACjC,QAAA,CAAA,IAAK,UAAU,CAAC,CAAA;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,CAAA,GAAI,OAAO,CAAC,CAAA;AACrB;AAWA,SAAS,aAAa,MAAA,EAA0B;AAC9C,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AAEtC,IAAA,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,UAAA,CAAW,CAAC,IAAI,EAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAA,CAAO,KAAK,CAAC,CAAA;AACb,EAAA,OAAO,MAAA;AACT;AAsBO,SAAS,cAAA,CACd,OAAA,EACA,aAAA,GAAgB,aAAA,EACoC;AACpD,EAAA,IAAI,MAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,EAAA,IAAI,eAAe,EAAA,EAAI;AACrB,IAAA,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,UAAU,EAAE,WAAA,EAAY;AAAA,EACpD,CAAA,MAAO;AACL,IAAA,MAAA,GAAS,aAAA;AAAA,EACX;AAGA,EAAA,MAAM,aAAa,UAAA,KAAe,EAAA,GAAK,QAAQ,KAAA,CAAM,UAAA,GAAa,CAAC,CAAA,GAAI,OAAA;AACvE,EAAA,IAAI,QAAQ,IAAA,CAAK,UAAU,KAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,EAAG;AACxD,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,MAAM,OAAA,GAAU,WAAW,WAAA,EAAY;AAGvC,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,MAAW,MAAM,OAAA,EAAS;AACxB,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA;AAC9B,IAAA,IAAI,QAAQ,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,iCAAiC,EAAE,CAAA;AACnE,IAAA,KAAA,CAAM,KAAK,GAAG,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAG1D,EAAA,MAAM,eAAe,CAAC,GAAG,aAAa,MAAM,CAAA,EAAG,GAAG,KAAK,CAAA;AACvD,EAAA,IAAI,OAAA,CAAQ,YAAY,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAEnC,EAAA,MAAM,YAAA,GAAeA,WAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAC/C,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAC7B,IAAA,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAAA,EAC5C;AAGA,EAAA,MAAM,WAAA,GAAc,aAAa,CAAC,CAAA;AAClC,EAAA,MAAM,IAAA,GAAQ,eAAe,CAAA,GAAK,EAAA;AAClC,EAAA,MAAM,eAAe,WAAA,GAAc,CAAA;AAGnC,EAAA,MAAM,aAAA,GAAgB,CAAC,EAAA,EAAI,EAAA,EAAI,IAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA;AACrD,EAAA,MAAM,YAAA,GAAe,cAAc,YAAY,CAAA;AAE/C,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,KAAA,CAAM,CAAC,CAAA;AACtC,EAAA,IAAI,SAAA,CAAU,WAAW,YAAA,EAAc;AACrC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+BAAA,EAAkC,YAAY,CAAA,MAAA,EAAS,SAAA,CAAU,MAAM,CAAA;AAAA,KACzE;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,MAAM,UAAA,CAAW,IAAA,CAAK,SAAS,CAAA,EAAE;AAC1D;;;ACjIA,IAAM,aAAA,GAA6C;AAAA,EACjD,OAAA,EAAS;AAAA,IACP,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,WAAA,EAAa;AAAA,IACX,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,YAAA,EAAc,KAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,SAAA,EAAW;AAAA,GACb;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,SAAA,EAAW;AAAA,GACb;AAAA,EACA,KAAA,EAAO;AAAA,IACL,aAAA,EAAe,0BAAA;AAAA,IACf,mBAAmB,UAAA,CAAW,IAAA,CAAK,CAAC,EAAA,EAAM,GAAI,CAAC,CAAA;AAAA;AAAA,IAC/C,mBAAmB,UAAA,CAAW,IAAA,CAAK,CAAC,EAAA,EAAM,GAAI,CAAC,CAAA;AAAA,IAC/C,SAAA,EAAW;AAAA,GACb;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,GAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,GAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA;AAEf,CAAA;AAaA,eAAsB,mBACpB,KAAA,EACyB;AAIzB,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AACrC,EAAA,MAAM,EAAA,GAAK,MAAM,CAAC,CAAA;AAClB,EAAA,MAAM,UAAU,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,CAAE,KAAK,GAAG,CAAA;AACvC,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQC,0BAAY,MAAA,EAAO;AAGnE,EAAA,MAAM,WAAA,GAAc,eAAe,OAAO,CAAA;AAC1C,EAAA,IAAI,CAAC,aAAa,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAEhE,EAAA,MAAM,UAAU,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,IAAK,OAAA,CAAQ,WAAW,IAAI,CAAA;AACnE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,YAAA,CAAa,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,YAAY,SAAA,EAAW;AACzB,IAAA,IAAI;AACF,MAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,IAChD;AAAA,EACF;AAGA,EAAA,MAAM,YAAY,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,WAAW,MAAM,CAAA;AAIzE,EAAA,IAAI,SAAA,IAAa,KAAA,CAAM,IAAA,KAASC,wBAAA,CAAW,MAAA,EAAQ;AACjD,IAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI;AACF,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAKA,wBAAA,CAAW,MAAA;AACd,QAAA,OAAO,YAAA,CAAa,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AAAA,MACjD,KAAKA,wBAAA,CAAW,MAAA;AACd,QAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,MACpC;AACE,QAAA,OAAO;AAAA,UACL,GAAG,KAAA;AAAA,UACH,QAAQD,yBAAA,CAAY;AAAA,SACtB;AAAA;AACJ,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQA,yBAAA,CAAY;AAAA,KACtB;AAAA,EACF;AACF;AAEA,SAAS,eAAe,OAAA,EAA8B;AACpD,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EACxB;AACA,IAAA,OAAO,cAAc,SAAS,CAAA;AAAA,EAChC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,IAAI,KAAK,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,EAAG;AACxD,IAAA,OAAO,cAAc,OAAO,CAAA;AAAA,EAC9B;AACA,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,EACzB;AACA,IAAA,OAAO,cAAc,UAAU,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,cAAc,UAAU,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,cAAc,MAAM,CAAA;AAAA,EAC7B;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACjE,IAAA,OAAO,cAAc,aAAa,CAAA;AAAA,EACpC;AAEA,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,QAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,WAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EACxB;AACA,IAAA,OAAO,cAAc,SAAS,CAAA;AAAA,EAChC;AAEA,EAAA,OAAO,cAAc,SAAS,CAAA;AAChC;AAEA,SAAS,YAAA,CAAa,SAAiB,KAAA,EAAuB;AAC5D,EAAA,MAAM,EAAE,WAAA,EAAa,KAAA,EAAO,cAAA,EAAe,GAAI,KAAA;AAC/C,EAAA,MAAM,WAAWE,iBAAA,CAAS,eAAA;AAAA,IACxB,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWF,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF;AAEA,SAAS,YAAA,CACP,OAAA,EACA,KAAA,EACA,WAAA,EACA;AACA,EAAA,MAAM,cAAA,GAAiB,kBAAkB,OAAO,CAAA;AAKhD,EAAA,MAAM,iBAAA,GAAoB,OAAA;AAAA,IACxB,WAAA,CAAY,iBACT,cAAA,KAAmB,eAAA,iBACjB,mBAAmB,QAAA,iBAAyB,CAAC,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA;AAAA,GAC1E;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA;AAAA,IACf,KAAA,CAAM,WAAA;AAAA,IACN,OAAA;AAAA,IACA,KAAA,CAAM,KAAA;AAAA,IACN,iBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWA,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF;AAEA,SAAS,kBAAkB,OAAA,EAAiB;AAC1C,EAAA,IAAI,OAAA,CAAQ,KAAA,CAAM,mBAAmB,CAAA,EAAG;AACtC,IAAA,OAAO,eAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA,EAAG;AACpC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,WAAW,CAAA,EAAG;AACrC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClC,IAAA,OAAO,UAAA;AAAA,EACT,CAAA,MAAA,IAAW,QAAQ,KAAA,CAAM,QAAQ,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACxE,IAAA,OAAO,cAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,EAAG;AACtC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AACnC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAO;AACL,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,mBAAA,CACG,MAAA,CAAO,OAAO,CAAA,CACd,OAAO,wCAAwC;AAAA,KACpD;AAAA,EACF;AACF;AAQA,SAAS,gBAAgB,KAAA,EAAiC;AACxD,EAAA,MAAM,QAAA,GAAWG,WAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AACpC,EAAA,IAAI,SAAS,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,0BAA0B,CAAA;AACtE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,CAAC,CAAA,GAAI,EAAA;AAC/B,EAAA,IAAI,QAAA,GAAW,EAAA,IAAM,QAAA,GAAW,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,MAAM,6BAA6B,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,EAAE,QAAA,GAAW,EAAA,CAAA;AACjC,EAAA,MAAM,WAAW,QAAA,GAAW,CAAA;AAC5B,EAAA,MAAM,YAAYC,mBAAA,CAAU,SAAA,CAAU,YAAY,QAAA,CAAS,KAAA,CAAM,CAAC,CAAC,CAAA;AAEnE,EAAA,OAAO;AAAA,IACL,UAAA;AAAA,IACA,UAAA,EAAY,EAAE,QAAA,GAAW,CAAA,CAAA,GACrB,SACA,EAAE,QAAA,GAAW,KACb,cAAA,qBACA,QAAA;AAAA,IACJ,SAAA,EAAW,SAAA,CAAU,cAAA,CAAe,QAAQ;AAAA,GAC9C;AACF;AAEA,SAAS,MAAA,CACP,WAAA,EACA,OAAA,EACA,KAAA,EACA,mBACA,WAAA,EACA;AACA,EAAA,MAAM,EAAE,UAAA,EAAY,UAAA,EAAY,SAAA,EAAU,GAAI,gBAAgB,KAAK,CAAA;AACnE,EAAA,IAAI,iBAAA,IAAqB,CAAC,UAAA,EAAY;AACpC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,WAAA,EAAa,WAAA,CAAY,aAAa,CAAA;AAC7D,EAAA,MAAM,SAAA,GAAY,SAAA,CAAU,gBAAA,CAAiB,IAAI,CAAA;AACjD,EAAA,MAAM,cAAA,GAAiB,SAAA,CAAU,UAAA,CAAW,UAAU,CAAA;AACtD,EAAA,MAAM,aAAA,GAAgB,QAAQ,cAAc,CAAA;AAE5C,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACjE,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,MAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,CAAA,EAAG,OAAO,KAAA;AAC/B,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,MAAA,KAAW,aAAA,CAAc,QAAQ,OAAO,KAAA;AACzD,MAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AAC5C,QAAA,IAAI,QAAQ,IAAA,CAAK,CAAC,MAAM,aAAA,CAAc,CAAC,GAAG,OAAO,KAAA;AAAA,MACnD;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,GAAiB,EAAA;AAErB,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,IAAI,eAAe,cAAA,oBAA0B;AAE3C,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,EAAE,CAAA;AACtC,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,CAAA;AAClB,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,EAAA;AAClB,MAAA,YAAA,CAAa,GAAA,CAAI,eAAe,CAAC,CAAA;AACjC,MAAA,MAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA;AAC7C,MAAA,MAAA,GAAS,yBAAA;AAAA,QACP,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MACtE,CAAA,MAAO;AAEL,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MAEF;AAAA,IACF;AAAA,EACF,CAAA,MAAO;AAEL,IAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,UAAA,EAAY;AAE1C,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,EAAE,CAAA;AACtC,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,CAAA;AAClB,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,EAAA;AAClB,MAAA,YAAA,CAAa,GAAA,CAAI,eAAe,CAAC,CAAA;AACjC,MAAA,MAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA;AAC7C,MAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,QACjB,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAEA,MAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,QACjB,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AACA,MAAA,IAAI,OAAA,KAAY,UAAA,IAAc,OAAA,KAAY,UAAA,EAAY;AACpD,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,MAAA,GAAS,UAAA;AAAA,IACX,CAAA,MAAA,IAAW,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAA,EAAG;AAGlG,MAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MACtE,CAAA,MAAO;AACL,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MACF;AAAA,IACF,CAAA,MAAA,IAAW,iBAAA,IAAqB,WAAA,CAAY,YAAA,EAAc;AACxD,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MAGtE,SAAS,CAAA,EAAG;AACV,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MAEF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAA,GAAS,yBAAA;AAAA,QACP,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,KAAW,OAAA;AACpB;AAEA,IAAM,WAAA,GAAcC,sBAAA,CAAkBC,OAAA,CAAK,MAAM,CAAA;AAEjD,SAAS,yBAAA,CACP,SACA,aAAA,EACA;AACA,EAAA,MAAM,cACJ,OAAO,OAAA,KAAY,WAAW,UAAA,CAAW,EAAA,CAAG,OAAO,CAAA,GAAI,OAAA;AAEzD,EAAA,MAAM,UAAU,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,GAAS,cAAc,MAAM,CAAA;AACxE,EAAA,OAAA,CAAQ,IAAI,WAAW,CAAA;AACvB,EAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,EAAe,WAAA,CAAY,MAAM,CAAA;AAC7C,EAAA,OAAO,WAAA,CAAY,OAAO,OAAO,CAAA;AACnC;AAEA,SAAS,SAAA,CAAU,aAAqB,aAAA,EAAuB;AAC7D,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACrD,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,WAAW,CAAA;AACpD,EAAA,MAAM,MAAA,GAASC,qBAAA,CAAa,OAAA,CAAQ,MAAM,CAAA,CAAE,MAAA;AAC5C,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAA,CAAO,MAAA,GAAS,MAAA,CAAO,UAAA,GAAa,OAAA,CAAQ;AAAA,GAC9C;AACA,EAAA,MAAA,CAAO,IAAI,MAAM,CAAA;AACjB,EAAA,MAAA,CAAO,IAAI,IAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,MAAM,CAAA;AAChD,EAAA,MAAA,CAAO,GAAA,CAAI,OAAA,EAAS,MAAA,CAAO,MAAA,GAAS,OAAO,UAAU,CAAA;AACrD,EAAA,OAAO,QAAQ,MAAM,CAAA;AACvB;AAEA,SAAS,mBAAA,CACP,aAAA,EACA,MAAA,GAAiB,IAAA,EACT;AACR,EAAA,MAAM,MAAA,GAASR,WAAAA,CAAO,OAAA,CAAQ,aAAa,CAAA;AAC3C,EAAA,MAAA,CAAO,QAAQ,CAAC,CAAA;AAChB,EAAA,OAAOA,WAAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AACrC;AAEA,SAAS,QAAQ,MAAA,EAAgC;AAC/C,EAAA,OAAOO,OAAA,CAAK,MAAA,CAAOA,OAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AACxC;AAEA,SAAS,QAAQ,MAAA,EAAgC;AAC/C,EAAA,OAAOA,OAAA,CAAK,SAAA,CAAUA,OAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AAC3C","file":"bitcoin-UIEQV3IM.cjs","sourcesContent":["import { bech32 } from \"@scure/base\";\n\n/**\n * CashAddr base32 character set.\n * Each character maps to its 5-bit index value (0–31).\n * Spec: https://github.com/bitcoincashorg/bitcoincash.org/blob/master/spec/cashaddr.md\n */\nconst CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\n\n/**\n * Generator polynomials for the CashAddr BCH checksum.\n * These five constants define the GF(2^32) polynomial used to compute\n * and validate the 40-bit checksum appended to every CashAddr string.\n */\nconst GENERATOR = [\n  BigInt(\"0x98f2bc8e61\"),\n  BigInt(\"0x79b76d99e2\"),\n  BigInt(\"0xf33e5fb3c4\"),\n  BigInt(\"0xae2eabe2a8\"),\n  BigInt(\"0x1e4f43e470\"),\n];\n\n/**\n * Computes the CashAddr BCH checksum over an array of 5-bit values.\n *\n * The input should be the concatenation of:\n *   - the prefix expansion (see {@link prefixExpand})\n *   - all payload words including the 8 checksum words\n *\n * A valid address produces a result of `0n`; any other value indicates\n * a corrupt or invalid address.\n *\n * @param values - Array of 5-bit integers covering prefix + full payload\n * @returns The 40-bit checksum residue as a bigint (0n = valid)\n */\nfunction polymod(values: number[]): bigint {\n  let c = BigInt(1);\n  for (const d of values) {\n    // Extract the top 5 bits before shifting\n    const c0 = c >> BigInt(35);\n    // Shift the accumulator left by 5 bits and XOR in the next data word\n    c = ((c & BigInt(\"0x07ffffffff\")) << BigInt(5)) ^ BigInt(d);\n    // Apply each generator polynomial for set bits in c0\n    for (let i = 0; i < 5; i++) {\n      if ((c0 >> BigInt(i)) & BigInt(1)) {\n        c ^= GENERATOR[i];\n      }\n    }\n  }\n  // Final XOR with 1 so a valid address yields 0\n  return c ^ BigInt(1);\n}\n\n/**\n * Expands a CashAddr prefix into the form required by the checksum algorithm.\n *\n * Each character of the prefix is reduced to its lower 5 bits, then a zero\n * byte is appended as a separator between the prefix and the payload words.\n *\n * @param prefix - The human-readable prefix (e.g. `\"bitcoincash\"`)\n * @returns Array of 5-bit integers representing the expanded prefix\n */\nfunction prefixExpand(prefix: string): number[] {\n  const result: number[] = [];\n  for (let i = 0; i < prefix.length; i++) {\n    // Keep only the lower 5 bits of each character's ASCII code\n    result.push(prefix.charCodeAt(i) & 0x1f);\n  }\n  // Zero separator between prefix and payload\n  result.push(0);\n  return result;\n}\n\n/**\n * Decodes a CashAddr string into its prefix, address type, and raw hash.\n *\n * Supports both prefixed (`bitcoincash:q...`) and prefix-less (`q...`) forms.\n * Validates the BCH checksum and rejects non-P2PKH types or malformed input.\n *\n * Address type values (upper nibble of the version byte):\n *   - `0` — P2PKH (pay-to-public-key-hash)\n *   - `1` — P2SH  (pay-to-script-hash)\n *\n * @param address - The CashAddr string to decode\n * @param defaultPrefix - Prefix to assume when none is present in the address (default: `\"bitcoincash\"`)\n * @returns An object with:\n *   - `prefix` — the decoded human-readable prefix\n *   - `type`   — the address type (0 = P2PKH, 1 = P2SH, …)\n *   - `hash`   — the raw public-key or script hash bytes\n * @throws If the address contains invalid characters, fails the checksum, has a mismatched hash length,\n *   contains mixed upper/lower case, or if the payload contains invalid 5-to-8-bit padding\n *   (thrown by {@link bech32.fromWords} from `@scure/base`)\n */\nexport function decodeCashAddr(\n  address: string,\n  defaultPrefix = \"bitcoincash\"\n): { prefix: string; type: number; hash: Uint8Array } {\n  let prefix: string;\n\n  // Split on \":\" to separate an explicit prefix from the payload\n  const colonIndex = address.indexOf(\":\");\n  if (colonIndex !== -1) {\n    prefix = address.slice(0, colonIndex).toLowerCase();\n  } else {\n    prefix = defaultPrefix;\n  }\n\n  // CashAddr spec forbids mixed upper/lower case\n  const rawPayload = colonIndex !== -1 ? address.slice(colonIndex + 1) : address;\n  if (/[A-Z]/.test(rawPayload) && /[a-z]/.test(rawPayload)) {\n    throw new Error(\"Invalid CashAddr: mixed case\");\n  }\n  const payload = rawPayload.toLowerCase();\n\n  // Map each character to its 5-bit index in the CashAddr alphabet\n  const words: number[] = [];\n  for (const ch of payload) {\n    const idx = CHARSET.indexOf(ch);\n    if (idx === -1) throw new Error(\"Invalid CashAddr character: \" + ch);\n    words.push(idx);\n  }\n\n  // Minimum length: at least 1 data word + 8 checksum words\n  if (words.length < 8) throw new Error(\"CashAddr too short\");\n\n  // Verify the BCH checksum over prefix expansion + all payload words\n  const checksumData = [...prefixExpand(prefix), ...words];\n  if (polymod(checksumData) !== BigInt(0)) {\n    throw new Error(\"Invalid CashAddr checksum\");\n  }\n\n  // Strip the 8 trailing checksum words; the remainder encodes (version_byte || hash)\n  const dataWords = words.slice(0, -8);\n  // Convert from 5-bit words to 8-bit bytes using bech32.fromWords (equivalent to convertBits(data, 5, 8))\n  const payloadBytes = bech32.fromWords(dataWords);\n  if (payloadBytes.length === 0) {\n    throw new Error(\"Invalid CashAddr padding\");\n  }\n\n  // The first byte is the version byte: upper nibble = type, lower 3 bits = hash size index\n  const versionByte = payloadBytes[0];\n  const type = (versionByte >> 3) & 0x0f;\n  const hashSizeBits = versionByte & 0x07;\n\n  // Look up the expected hash length in bytes from the size index\n  const expectedSizes = [20, 24, 28, 32, 40, 48, 56, 64];\n  const expectedSize = expectedSizes[hashSizeBits];\n\n  const hashBytes = payloadBytes.slice(1);\n  if (hashBytes.length !== expectedSize) {\n    throw new Error(\n      `Hash length mismatch: expected ${expectedSize}, got ${hashBytes.length}`\n    );\n  }\n\n  return { prefix, type, hash: Uint8Array.from(hashBytes) };\n}\n","import {\n  ProofStatus,\n  ProofTypes,\n  SignatureProof,\n} from \"@notabene/javascript-sdk\";\n\nimport { encode as encodeLength } from \"varuint-bitcoin\";\nimport { base64, bech32, createBase58check } from \"@scure/base\";\nimport { Hash } from \"ox\";\nimport { secp256k1 } from \"@noble/curves/secp256k1\";\nimport { SignatureType } from \"@noble/curves/abstract/weierstrass\";\nimport { Verifier } from \"bip322-js\";\nimport { decodeCashAddr } from \"./cashaddr\";\n\nenum SEGWIT_TYPES {\n  P2WPKH = \"p2wpkh\",\n  P2SH_P2WPKH = \"p2sh(p2wpkh)\",\n}\n\ninterface ChainConfig {\n  messagePrefix: string;\n  pubKeyHashVersion: number | Uint8Array;\n  scriptHashVersion: number | Uint8Array;\n  bech32Prefix?: string;\n  isTestnet?: boolean;\n}\n\nconst CHAIN_CONFIGS: Record<string, ChainConfig> = {\n  bitcoin: {\n    messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x00, // 1...\n    scriptHashVersion: 0x05, // 3...\n    bech32Prefix: \"bc\",\n    isTestnet: false,\n  },\n  bitcoincash: {\n    messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x00, // 1...\n    scriptHashVersion: 0x05, // 3...\n    bech32Prefix: \"bc\",\n    isTestnet: false,\n  },\n  litecoin: {\n    messagePrefix: \"\\u0019Litecoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x30, // L... or M...\n    scriptHashVersion: 0x32, // 3... or M...\n    bech32Prefix: \"ltc\",\n    isTestnet: false,\n  },\n  dogecoin: {\n    messagePrefix: \"\\u0019Dogecoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x1e, // D...\n    scriptHashVersion: 0x16, // A...\n    isTestnet: false,\n  },\n  dash: {\n    messagePrefix: \"\\u0019DarkCoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x4c, // X...\n    scriptHashVersion: 0x10, // 7...\n    isTestnet: false,\n  },\n  zcash: {\n    messagePrefix: \"\\u0018Zcash Signed Message:\\n\",\n    pubKeyHashVersion: Uint8Array.from([0x1c, 0xb8]), // <-- FIXED\n    scriptHashVersion: Uint8Array.from([0x1c, 0xbd]),\n    isTestnet: false,\n  },\n\n  testnet: {\n    messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x6f, // m or n\n    scriptHashVersion: 0xc4, // 2\n    bech32Prefix: \"tb\",\n    isTestnet: true,\n  },\n};\n\nenum DerivationMode {\n  LEGACY = \"Legacy\",\n  NATIVE = \"Native SegWit\",\n  SEGWIT = \"SegWit\",\n  P2SH_SEGWIT = \"p2sh\",\n  BCH = \"Bitcoin Cash\",\n  ETHEREUM = \"Ethereum\",\n  DOGECOIN = \"Dogecoin\",\n  UNKNOWN = \"Unknown\",\n}\n\nexport async function verifyBTCSignature(\n  proof: SignatureProof\n): Promise<SignatureProof> {\n  // Split on \":\" but rejoin from index 2 onwards so that a prefixed CashAddr\n  // like \"bitcoincash:qr...\" in the third segment is preserved whole.\n  // e.g. \"bip122:<chainId>:bitcoincash:qr...\" → address = \"bitcoincash:qr...\"\n  const parts = proof.address.split(\":\");\n  const ns = parts[0];\n  const address = parts.slice(2).join(\":\");\n  if (ns !== \"bip122\") return { ...proof, status: ProofStatus.FAILED };\n\n  // Map chainId to our chain configuration\n  const chainConfig = getChainConfig(address);\n  if (!chainConfig) return { ...proof, status: ProofStatus.FAILED };\n\n  const isZcash = address.startsWith(\"t1\") || address.startsWith(\"t3\");\n  if (isZcash) {\n    return verifyBIP137(address, proof, chainConfig);\n  }\n\n  // Use BIP322 for testnet addresses\n  if (chainConfig.isTestnet) {\n    try {\n      return verifyBIP322(address, proof);\n    } catch {\n      return { ...proof, status: ProofStatus.FAILED };\n    }\n  }\n\n  // Check if this is a Taproot address (bc1p or tb1p)\n  const isTaproot = address.startsWith(\"bc1p\") || address.startsWith(\"tb1p\");\n\n  // For Taproot addresses with BIP-137 proof type, use BIP-322 verification\n  // since BIP-137 doesn't officially support Taproot\n  if (isTaproot && proof.type === ProofTypes.BIP137) {\n    return verifyBIP322(address, proof);\n  }\n\n  try {\n    switch (proof.type) {\n      case ProofTypes.BIP137:\n        return verifyBIP137(address, proof, chainConfig);\n      case ProofTypes.BIP322:\n        return verifyBIP322(address, proof);\n      default:\n        return {\n          ...proof,\n          status: ProofStatus.FAILED,\n        };\n    }\n  } catch {\n    return {\n      ...proof,\n      status: ProofStatus.FAILED,\n    };\n  }\n}\n\nfunction getChainConfig(address: string): ChainConfig {\n  if (\n    address.startsWith(\"1\") ||\n    address.startsWith(\"3\") ||\n    address.startsWith(\"bc1\")\n  ) {\n    return CHAIN_CONFIGS[\"bitcoin\"];\n  }\n  if (address.startsWith(\"t1\") || address.startsWith(\"t3\")) {\n    return CHAIN_CONFIGS[\"zcash\"];\n  }\n  if (\n    address.startsWith(\"L\") ||\n    address.startsWith(\"M\") ||\n    address.startsWith(\"ltc1\")\n  ) {\n    return CHAIN_CONFIGS[\"litecoin\"];\n  }\n  if (address.startsWith(\"D\") || address.startsWith(\"A\")) {\n    return CHAIN_CONFIGS[\"dogecoin\"];\n  }\n  if (address.startsWith(\"X\") || address.startsWith(\"7\")) {\n    return CHAIN_CONFIGS[\"dash\"];\n  }\n  if (address.startsWith(\"q\") || address.startsWith(\"bitcoincash:\")) {\n    return CHAIN_CONFIGS[\"bitcoincash\"];\n  }\n    // Bitcoin testnet addresses can start with \"m\", \"n\", \"2\", or \"tb1\"\n  if (\n    address.startsWith(\"m\") ||\n    address.startsWith(\"n\") ||\n    address.startsWith(\"2\") ||\n    address.startsWith(\"tb1\")\n  ) {\n    return CHAIN_CONFIGS[\"testnet\"]\n  }\n\n  return CHAIN_CONFIGS[\"bitcoin\"];\n}\n\nfunction verifyBIP322(address: string, proof: SignatureProof) {\n  const { attestation, proof: signatureProof } = proof;\n  const verified = Verifier.verifySignature(\n    address,\n    attestation,\n    signatureProof\n  );\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n\nfunction verifyBIP137(\n  address: string,\n  proof: SignatureProof,\n  chainConfig: ChainConfig\n) {\n  const derivationMode = getDerivationMode(address);\n\n  // For legacy addresses (starting with \"1\"), never use SegWit encoding\n  // For P2SH addresses (starting with \"3\"), use SegWit encoding if they have bech32 support\n  // For native SegWit addresses (bc1, tb1, ltc1), always use SegWit encoding\n  const useSegwitEncoding = Boolean(\n    chainConfig.bech32Prefix &&\n      (derivationMode === DerivationMode.NATIVE ||\n        (derivationMode === DerivationMode.SEGWIT && !address.startsWith(\"1\")))\n  );\n\n  const verified = verify(\n    proof.attestation,\n    address,\n    proof.proof,\n    useSegwitEncoding,\n    chainConfig\n  );\n\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n\nfunction getDerivationMode(address: string) {\n  if (address.match(\"^(bc1|tb1|ltc1).*\")) {\n    return DerivationMode.NATIVE;\n  } else if (address.match(\"^[32M].*\")) {\n    return DerivationMode.SEGWIT;\n  } else if (address.match(\"^[1nmL].*\")) {\n    return DerivationMode.LEGACY;\n  } else if (address.match(\"^(D).*\")) {\n    return DerivationMode.DOGECOIN;\n  } else if (address.match(\"^(q).*\") || address.startsWith(\"bitcoincash:\")) {\n    return DerivationMode.BCH;\n  } else if (address.match(\"^(t1|t3).*\")) {\n    return DerivationMode.LEGACY; // Zcash addresses\n  } else if (address.match(\"^[X7].*\")) {\n    return DerivationMode.LEGACY; // Dash addresses\n  } else {\n    throw new Error(\n      \"INVALID ADDRESS: \"\n        .concat(address)\n        .concat(\" is not a valid or a supported address\")\n    );\n  }\n}\n\ntype DecodedSignature = {\n  compressed: boolean;\n  segwitType?: SEGWIT_TYPES;\n  signature: SignatureType;\n};\n\nfunction decodeSignature(proof: string): DecodedSignature {\n  const sigbytes = base64.decode(proof);\n  if (sigbytes.length !== 65) throw new Error(\"Invalid signature length\");\n  const flagByte = sigbytes[0] - 27;\n  if (flagByte > 15 || flagByte < 0) {\n    throw new Error(\"Invalid signature parameter\");\n  }\n  const compressed = !!(flagByte & 12); // Are there cases that aren't compressed?\n  const recovery = flagByte & 3;\n  const signature = secp256k1.Signature.fromCompact(sigbytes.slice(1));\n\n  return {\n    compressed,\n    segwitType: !(flagByte & 8)\n      ? undefined\n      : !(flagByte & 4)\n      ? SEGWIT_TYPES.P2SH_P2WPKH\n      : SEGWIT_TYPES.P2WPKH,\n    signature: signature.addRecoveryBit(recovery),\n  };\n}\n\nfunction verify(\n  attestation: string,\n  address: string,\n  proof: string,\n  checkSegwitAlways: boolean,\n  chainConfig: ChainConfig\n) {\n  const { compressed, segwitType, signature } = decodeSignature(proof);\n  if (checkSegwitAlways && !compressed) {\n    throw new Error(\n      \"checkSegwitAlways can only be used with a compressed pubkey signature flagbyte\"\n    );\n  }\n  const hash = magicHash(attestation, chainConfig.messagePrefix);\n  const publicKey = signature.recoverPublicKey(hash);\n  const publicKeyBytes = publicKey.toRawBytes(compressed);\n  const publicKeyHash = hash160(publicKeyBytes);\n  // Special handling for Bitcoin Cash addresses\n  if (address.startsWith(\"q\") || address.startsWith(\"bitcoincash:\")) {\n    try {\n      const decoded = decodeCashAddr(address);\n      if (decoded.type !== 0) return false; // Must be P2PKH\n      if (decoded.hash.length !== publicKeyHash.length) return false;\n      for (let i = 0; i < decoded.hash.length; i++) {\n        if (decoded.hash[i] !== publicKeyHash[i]) return false;\n      }\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  let actual: string = \"\";\n\n  if (segwitType) {\n    if (segwitType === SEGWIT_TYPES.P2SH_P2WPKH) {\n      // P2SH-P2WPKH: address is hash160 of the witness redeem script, not the raw pubkey hash\n      const redeemScript = new Uint8Array(22);\n      redeemScript[0] = 0x00; // OP_0\n      redeemScript[1] = 0x14; // push 20 bytes\n      redeemScript.set(publicKeyHash, 2);\n      const redeemScriptHash = hash160(redeemScript);\n      actual = encodeBase58AddressFormat(\n        chainConfig.scriptHashVersion,\n        redeemScriptHash\n      );\n    } else {\n      // parsed.segwitType === SEGWIT_TYPES.P2WPKH\n      if (chainConfig.bech32Prefix) {\n        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n      } else {\n        // Fallback to legacy if bech32 not supported\n        actual = encodeBase58AddressFormat(\n          chainConfig.scriptHashVersion,\n          publicKeyHash\n        );\n        // base58 can be p2pkh or p2sh-p2wpkh\n      }\n    }\n  } else {\n    // For addresses starting with \"3\" (P2SH), try both P2SH-P2WPKH and legacy P2SH encodings if segwitType is undefined\n    if (address.startsWith(\"3\") && !segwitType) {\n      // P2SH-P2WPKH: script hash of the redeem script (OP_0 <pubkeyhash>)\n      const redeemScript = new Uint8Array(22);\n      redeemScript[0] = 0x00; // OP_0\n      redeemScript[1] = 0x14; // push 20 bytes\n      redeemScript.set(publicKeyHash, 2);\n      const redeemScriptHash = hash160(redeemScript);\n      const p2shP2wpkh = encodeBase58AddressFormat(\n        chainConfig.scriptHashVersion,\n        redeemScriptHash\n      );\n      // Legacy P2SH: script hash of the public key\n      const legacyP2sh = encodeBase58AddressFormat(\n        chainConfig.scriptHashVersion,\n        publicKeyHash\n      );\n      if (address === p2shP2wpkh || address === legacyP2sh) {\n        return true;\n      }\n      actual = legacyP2sh; // fallback for error reporting\n    } else if (address.startsWith(\"bc1q\") || address.startsWith(\"tb1q\") || address.startsWith(\"ltc1q\")) {\n      // For native SegWit P2WPKH addresses (bc1q/tb1q/ltc1q), always encode as bech32\n      // This handles Ledger wallets that sign without segwit flags\n      if (chainConfig.bech32Prefix) {\n        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n      } else {\n        actual = encodeBase58AddressFormat(\n          chainConfig.pubKeyHashVersion,\n          publicKeyHash\n        );\n      }\n    } else if (checkSegwitAlways && chainConfig.bech32Prefix) {\n      try {\n        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n        // if address is bech32 it is not p2sh\n        // eslint-disable-next-line @typescript-eslint/no-unused-vars\n      } catch (e) {\n        actual = encodeBase58AddressFormat(\n          chainConfig.scriptHashVersion,\n          publicKeyHash\n        );\n        // base58 can be p2pkh or p2sh-p2wpkh\n      }\n    } else {\n      actual = encodeBase58AddressFormat(\n        chainConfig.pubKeyHashVersion,\n        publicKeyHash\n      );\n    }\n  }\n\n  return actual === address;\n}\n\nconst base58check = createBase58check(Hash.sha256);\n\nfunction encodeBase58AddressFormat(\n  version: number | Uint8Array,\n  publicKeyHash: Uint8Array\n) {\n  const prefixBytes =\n    typeof version === \"number\" ? Uint8Array.of(version) : version; // Accept raw Uint8Array for Zcash\n\n  const payload = new Uint8Array(prefixBytes.length + publicKeyHash.length);\n  payload.set(prefixBytes);\n  payload.set(publicKeyHash, prefixBytes.length);\n  return base58check.encode(payload);\n}\n\nfunction magicHash(attestation: string, messagePrefix: string) {\n  const prefix = new TextEncoder().encode(messagePrefix);\n  const message = new TextEncoder().encode(attestation);\n  const length = encodeLength(message.length).buffer;\n  const buffer = new Uint8Array(\n    prefix.length + length.byteLength + message.length\n  );\n  buffer.set(prefix);\n  buffer.set(new Uint8Array(length), prefix.length);\n  buffer.set(message, prefix.length + length.byteLength);\n  return hash256(buffer);\n}\n\nfunction encodeBech32Address(\n  publicKeyHash: Uint8Array,\n  prefix: string = \"bc\"\n): string {\n  const bwords = bech32.toWords(publicKeyHash);\n  bwords.unshift(0);\n  return bech32.encode(prefix, bwords);\n}\n\nfunction hash256(buffer: Uint8Array): Uint8Array {\n  return Hash.sha256(Hash.sha256(buffer));\n}\n\nfunction hash160(buffer: Uint8Array): Uint8Array {\n  return Hash.ripemd160(Hash.sha256(buffer));\n}\n"]}

package/dist/{cardano-DYBYEAAF.cjs → cjs/cardano-QG2S452K.cjs}

@@ -1,29 +1,12 @@
 'use strict';
 
 var buffer = require('buffer');
-require('./chunk-OAXNH5XR.cjs');
 var verifyDataSignature = require('@cardano-foundation/cardano-verify-datasignature');
 var javascriptSdk = require('@notabene/javascript-sdk');
 
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
-var verifyDataSignature__namespace = /*#__PURE__*/_interopNamespace(verifyDataSignature);
+var verifyDataSignature__default = /*#__PURE__*/_interopDefault(verifyDataSignature);
 
 if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
 async function verifyCIP8Signature(proof) {
@@ -33,7 +16,7 @@ async function verifyCIP8Signature(proof) {
     return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
   }
   try {
-    const verified = verifyDataSignature__namespace.default(
+    const verified = verifyDataSignature__default.default(
       proof.proof,
       key,
       proof.attestation,
@@ -49,5 +32,5 @@ async function verifyCIP8Signature(proof) {
 }
 
 exports.verifyCIP8Signature = verifyCIP8Signature;
-//# sourceMappingURL=cardano-DYBYEAAF.cjs.map
-//# sourceMappingURL=cardano-DYBYEAAF.cjs.map
+//# sourceMappingURL=cardano-QG2S452K.cjs.map
+//# sourceMappingURL=cardano-QG2S452K.cjs.map

package/dist/cjs/cardano-QG2S452K.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cardano.ts"],"names":["ProofStatus","verifyDataSignature"],"mappings":";;;;;;;;;;;AAGA,eAAsB,oBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,MAAM,GAAA,GACJ,MAAM,iBAAA,IAAqB,gBAAA,IAAoB,MAAM,iBAAA,GACjD,KAAA,CAAM,kBAAkB,cAAA,GACxB,IAAA;AAEN,EAAA,IAAI,EAAA,KAAO,SAAA,IAAa,CAAC,GAAA,EAAK;AAC5B,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAWC,oCAAA;AAAA,MACf,KAAA,CAAM,KAAA;AAAA,MACN,GAAA;AAAA,MACA,KAAA,CAAM,WAAA;AAAA,MACN;AAAA,KACF;AACA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAWD,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"cardano-QG2S452K.cjs","sourcesContent":["import verifyDataSignature from \"@cardano-foundation/cardano-verify-datasignature\";\nimport { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\n\nexport async function verifyCIP8Signature(\n  proof: SignatureProof\n): Promise<SignatureProof> {\n  const [ns, , address] = proof.address.split(/:/);\n  const key =\n    proof.chainSpecificData && \"cardanoCoseKey\" in proof.chainSpecificData\n      ? proof.chainSpecificData.cardanoCoseKey\n      : null;\n\n  if (ns !== \"cardano\" || !key) {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n\n  try {\n    const verified = verifyDataSignature(\n      proof.proof,\n      key,\n      proof.attestation,\n      address\n    );\n    return {\n      ...proof,\n      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n    };\n  } catch {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n}\n"]}

package/dist/cjs/concordium-4B33UJJ5.cjs

@@ -0,0 +1,44 @@
+'use strict';
+
+var buffer = require('buffer');
+var javascriptSdk = require('@notabene/javascript-sdk');
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
+var CONCORDIUM_VERIFIER_URL = "https://web3id-verifier.mainnet.concordium.software";
+var verifyConcordiumSignature = async (proof) => {
+  const [ns] = proof.address.split(/:/);
+  if (ns !== "ccd") {
+    return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  }
+  try {
+    const presentationJson = JSON.parse(proof.proof);
+    if (presentationJson.presentationContext !== proof.attestation) {
+      throw new Error("Presentation context does not match attestation");
+    }
+    if (!presentationJson.verifiableCredential || presentationJson.verifiableCredential.length === 0) {
+      throw new Error("Verifiable credential is missing or empty");
+    }
+    const response = await fetch(`${CONCORDIUM_VERIFIER_URL}/v0/verify`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(presentationJson)
+    });
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Verifier returned ${response.status}: ${errorText}`);
+    }
+    return {
+      ...proof,
+      status: javascriptSdk.ProofStatus.VERIFIED
+    };
+  } catch {
+    return {
+      ...proof,
+      status: javascriptSdk.ProofStatus.FAILED
+    };
+  }
+};
+
+exports.verifyConcordiumSignature = verifyConcordiumSignature;
+//# sourceMappingURL=concordium-4B33UJJ5.cjs.map
+//# sourceMappingURL=concordium-4B33UJJ5.cjs.map

package/dist/cjs/concordium-4B33UJJ5.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/concordium.ts"],"names":["ProofStatus"],"mappings":";;;;;;AAGA,IAAM,uBAAA,GACJ,qDAAA;AAOK,IAAM,yBAAA,GAA4B,OACvC,KAAA,KAC4B;AAC5B,EAAA,MAAM,CAAC,EAAE,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAEpC,EAAA,IAAI,OAAO,KAAA,EAAO;AAChB,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,KAAK,CAAA;AAG/C,IAAA,IAAI,gBAAA,CAAiB,mBAAA,KAAwB,KAAA,CAAM,WAAA,EAAa;AAC9D,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AAGA,IAAA,IACE,CAAC,gBAAA,CAAiB,oBAAA,IAClB,gBAAA,CAAiB,oBAAA,CAAqB,WAAW,CAAA,EACjD;AACA,MAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,IAC7D;AAGA,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,uBAAuB,CAAA,UAAA,CAAA,EAAc;AAAA,MACnE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,gBAAgB;AAAA,KACtC,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,SAAS,MAAM,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AAAA,IACtE;AAGA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQA,yBAAA,CAAY;AAAA,KACtB;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQA,yBAAA,CAAY;AAAA,KACtB;AAAA,EACF;AACF","file":"concordium-4B33UJJ5.cjs","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { VerifiablePresentation } from \"@concordium/web-sdk\";\n\nconst CONCORDIUM_VERIFIER_URL =\n  \"https://web3id-verifier.mainnet.concordium.software\";\n\n/**\n * Verifies a Concordium signature proof using Concordium's hosted verifier service\n * @param proof The signature proof to verify\n * @returns Promise resolving to the proof with updated status\n */\nexport const verifyConcordiumSignature = async (\n  proof: SignatureProof,\n): Promise<SignatureProof> => {\n  const [ns] = proof.address.split(/:/);\n\n  if (ns !== \"ccd\") {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n\n  try {\n    const presentationJson = JSON.parse(proof.proof) as VerifiablePresentation;\n\n    // Validate presentation context matches attestation\n    if (presentationJson.presentationContext !== proof.attestation) {\n      throw new Error(\"Presentation context does not match attestation\");\n    }\n\n    // Validate verifiableCredential exists and is not empty\n    if (\n      !presentationJson.verifiableCredential ||\n      presentationJson.verifiableCredential.length === 0\n    ) {\n      throw new Error(\"Verifiable credential is missing or empty\");\n    }\n\n    // Use Concordium's hosted verifier instead of gRPC\n    const response = await fetch(`${CONCORDIUM_VERIFIER_URL}/v0/verify`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(presentationJson),\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`Verifier returned ${response.status}: ${errorText}`);\n    }\n\n    // If we get here, the proof is valid\n    return {\n      ...proof,\n      status: ProofStatus.VERIFIED,\n    };\n  } catch {\n    return {\n      ...proof,\n      status: ProofStatus.FAILED,\n    };\n  }\n};\n"]}

package/dist/cjs/cosmos-JTT3AZCF.cjs

@@ -0,0 +1,92 @@
+'use strict';
+
+var buffer = require('buffer');
+var javascriptSdk = require('@notabene/javascript-sdk');
+var bech32 = require('bech32');
+var amino = require('@cosmjs/amino');
+var secp256k1 = require('@noble/curves/secp256k1');
+var legacy = require('@noble/hashes/legacy');
+var sha2 = require('@noble/hashes/sha2');
+var sha3 = require('@noble/hashes/sha3');
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
+function base64ToUint8Array(base64) {
+  return Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));
+}
+function toBase64Bytes(str) {
+  const utf8 = new TextEncoder().encode(str);
+  let binary = "";
+  for (let i = 0; i < utf8.length; i++) {
+    binary += String.fromCharCode(utf8[i]);
+  }
+  return btoa(binary);
+}
+function deriveCosmosAddress(pubkey, prefix) {
+  const sha = sha2.sha256(pubkey);
+  const rip = legacy.ripemd160(sha);
+  return bech32.bech32.encode(prefix, bech32.bech32.toWords(rip));
+}
+function deriveEthAddress(pubkey, prefix) {
+  const uncompressed = secp256k1.secp256k1.ProjectivePoint.fromHex(pubkey).toRawBytes(false).slice(1);
+  const eth = sha3.keccak_256(uncompressed).slice(-20);
+  return bech32.bech32.encode(prefix, bech32.bech32.toWords(eth));
+}
+function keyAlgoForAddress(pubkey, address) {
+  const prefix = bech32Prefix(address);
+  if (deriveCosmosAddress(pubkey, prefix) === address) {
+    return "secp256k1";
+  }
+  if (deriveEthAddress(pubkey, prefix) === address) {
+    return "ethsecp256k1";
+  }
+  return void 0;
+}
+function bech32Prefix(address) {
+  return address.slice(0, address.lastIndexOf("1"));
+}
+async function verifyCosmosSignature(proof) {
+  try {
+    const [ns, , address] = proof.address.split(/:/);
+    if (ns !== "cosmos") {
+      return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+    }
+    const pubKeyBytes = base64ToUint8Array(
+      proof.chainSpecificData.pub_key.value
+    );
+    const signatureBytes = base64ToUint8Array(proof.proof);
+    const algo = keyAlgoForAddress(pubKeyBytes, address);
+    if (!algo) {
+      return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+    }
+    const signDoc = {
+      chain_id: "",
+      // must match the signing process
+      account_number: "0",
+      sequence: "0",
+      fee: { amount: [], gas: "0" },
+      msgs: [
+        {
+          type: "sign/MsgSignData",
+          value: {
+            signer: address,
+            data: toBase64Bytes(proof.attestation)
+          }
+        }
+      ],
+      memo: ""
+    };
+    const signBytes = await amino.serializeSignDoc(signDoc);
+    const digest = algo === "ethsecp256k1" ? sha3.keccak_256(signBytes) : sha2.sha256(signBytes);
+    const verified = secp256k1.secp256k1.verify(signatureBytes, digest, pubKeyBytes);
+    return {
+      ...proof,
+      status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
+    };
+  } catch {
+    return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  }
+}
+
+exports.verifyCosmosSignature = verifyCosmosSignature;
+//# sourceMappingURL=cosmos-JTT3AZCF.cjs.map
+//# sourceMappingURL=cosmos-JTT3AZCF.cjs.map

package/dist/cjs/cosmos-JTT3AZCF.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cosmos.ts"],"names":["sha256","ripemd160","bech32","secp256k1","keccak_256","ProofStatus","serializeSignDoc"],"mappings":";;;;;;;;;;;;AAaA,SAAS,mBAAmB,MAAA,EAA4B;AACtD,EAAA,OAAO,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAC7D;AAGA,SAAS,cAAc,GAAA,EAAqB;AAC1C,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AACzC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;AAIA,SAAS,mBAAA,CAAoB,QAAoB,MAAA,EAAwB;AACvE,EAAA,MAAM,GAAA,GAAMA,YAAO,MAAM,CAAA;AACzB,EAAA,MAAM,GAAA,GAAMC,iBAAU,GAAG,CAAA;AACzB,EAAA,OAAOC,cAAO,MAAA,CAAO,MAAA,EAAQA,aAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClD;AAIA,SAAS,gBAAA,CAAiB,QAAoB,MAAA,EAAwB;AACpE,EAAA,MAAM,YAAA,GAAeC,mBAAA,CAAU,eAAA,CAAgB,OAAA,CAAQ,MAAM,EAC1D,UAAA,CAAW,KAAK,CAAA,CAChB,KAAA,CAAM,CAAC,CAAA;AACV,EAAA,MAAM,GAAA,GAAMC,eAAA,CAAW,YAAY,CAAA,CAAE,MAAM,GAAG,CAAA;AAC9C,EAAA,OAAOF,cAAO,MAAA,CAAO,MAAA,EAAQA,aAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClD;AAOA,SAAS,iBAAA,CACP,QACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAA,GAAS,aAAa,OAAO,CAAA;AACnC,EAAA,IAAI,mBAAA,CAAoB,MAAA,EAAQ,MAAM,CAAA,KAAM,OAAA,EAAS;AACnD,IAAA,OAAO,WAAA;AAAA,EACT;AACA,EAAA,IAAI,gBAAA,CAAiB,MAAA,EAAQ,MAAM,CAAA,KAAM,OAAA,EAAS;AAChD,IAAA,OAAO,cAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAIA,SAAS,aAAa,OAAA,EAAyB;AAC7C,EAAA,OAAO,QAAQ,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,WAAA,CAAY,GAAG,CAAC,CAAA;AAClD;AAEA,eAAsB,sBACpB,KAAA,EACyB;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,IAAA,IAAI,OAAO,QAAA,EAAU;AACnB,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQG,0BAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,WAAA,GAAc,kBAAA;AAAA,MACjB,KAAA,CAAM,kBAAqC,OAAA,CAAQ;AAAA,KACtD;AACA,IAAA,MAAM,cAAA,GAAiB,kBAAA,CAAmB,KAAA,CAAM,KAAK,CAAA;AAIrD,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,WAAA,EAAa,OAAO,CAAA;AACnD,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,OAAA,GAAsB;AAAA,MAC1B,QAAA,EAAU,EAAA;AAAA;AAAA,MACV,cAAA,EAAgB,GAAA;AAAA,MAChB,QAAA,EAAU,GAAA;AAAA,MACV,KAAK,EAAE,MAAA,EAAQ,EAAC,EAAG,KAAK,GAAA,EAAI;AAAA,MAC5B,IAAA,EAAM;AAAA,QACJ;AAAA,UACE,IAAA,EAAM,kBAAA;AAAA,UACN,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,OAAA;AAAA,YACR,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,WAAW;AAAA;AACvC;AACF,OACF;AAAA,MACA,IAAA,EAAM;AAAA,KACR;AAGA,IAAA,MAAM,SAAA,GAAY,MAAMC,sBAAA,CAAiB,OAAO,CAAA;AAChD,IAAA,MAAM,SACJ,IAAA,KAAS,cAAA,GAAiBF,gBAAW,SAAS,CAAA,GAAIJ,YAAO,SAAS,CAAA;AAGpE,IAAA,MAAM,QAAA,GAAWG,mBAAA,CAAU,MAAA,CAAO,cAAA,EAAgB,QAAQ,WAAW,CAAA;AAErE,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAWE,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"cosmos-JTT3AZCF.cjs","sourcesContent":["import {\n  CosmosMetadata,\n  ProofStatus,\n  SignatureProof,\n} from \"@notabene/javascript-sdk\";\nimport { bech32 } from \"bech32\";\nimport { StdSignDoc, serializeSignDoc } from \"@cosmjs/amino\";\nimport { secp256k1 } from \"@noble/curves/secp256k1\";\nimport { ripemd160 } from \"@noble/hashes/legacy\";\nimport { sha256 } from \"@noble/hashes/sha2\";\nimport { keccak_256 } from \"@noble/hashes/sha3\";\n\n// Base64 decode\nfunction base64ToUint8Array(base64: string): Uint8Array {\n  return Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));\n}\n\n// Base64 encode UTF-8 bytes\nfunction toBase64Bytes(str: string): string {\n  const utf8 = new TextEncoder().encode(str);\n  let binary = \"\";\n  for (let i = 0; i < utf8.length; i++) {\n    binary += String.fromCharCode(utf8[i]);\n  }\n  return btoa(binary);\n}\n\n// Cosmos address derivation (ADR-36)\n// https://github.com/cosmos/cosmos-sdk/blob/214b11dcbaa129f7b4c0013b2103db9d54b85e9e/docs/architecture/adr-036-arbitrary-signature.md\nfunction deriveCosmosAddress(pubkey: Uint8Array, prefix: string): string {\n  const sha = sha256(pubkey);\n  const rip = ripemd160(sha);\n  return bech32.encode(prefix, bech32.toWords(rip));\n}\n\n// Ethermint-style chains (Injective, Evmos, ...) use eth-secp256k1 keys: the account is\n// the Ethereum address of the key, bech32-encoded under the chain prefix.\nfunction deriveEthAddress(pubkey: Uint8Array, prefix: string): string {\n  const uncompressed = secp256k1.ProjectivePoint.fromHex(pubkey)\n    .toRawBytes(false)\n    .slice(1);\n  const eth = keccak_256(uncompressed).slice(-20);\n  return bech32.encode(prefix, bech32.toWords(eth));\n}\n\n// Same selection Keplr's verifyADR36AminoSignDoc makes via its `algo` argument. The signed\n// address tells us which key algorithm the chain uses, so we do not depend on the\n// pub_key.type string wallets put in the amino signature.\ntype CosmosKeyAlgo = \"secp256k1\" | \"ethsecp256k1\";\n\nfunction keyAlgoForAddress(\n  pubkey: Uint8Array,\n  address: string\n): CosmosKeyAlgo | undefined {\n  const prefix = bech32Prefix(address);\n  if (deriveCosmosAddress(pubkey, prefix) === address) {\n    return \"secp256k1\";\n  }\n  if (deriveEthAddress(pubkey, prefix) === address) {\n    return \"ethsecp256k1\";\n  }\n  return undefined;\n}\n\n// Each Cosmos SDK chain has its own human-readable part (cosmos, celestia, axelar, ...),\n// and bech32 separates it from the data with the last \"1\" in the string.\nfunction bech32Prefix(address: string): string {\n  return address.slice(0, address.lastIndexOf(\"1\"));\n}\n\nexport async function verifyCosmosSignature(\n  proof: SignatureProof\n): Promise<SignatureProof> {\n  try {\n    const [ns, , address] = proof.address.split(/:/);\n    if (ns !== \"cosmos\") {\n      return { ...proof, status: ProofStatus.FAILED };\n    }\n\n    // Parse the proof JSON\n    const pubKeyBytes = base64ToUint8Array(\n      (proof.chainSpecificData as CosmosMetadata).pub_key.value\n    );\n    const signatureBytes = base64ToUint8Array(proof.proof);\n\n    // Step 1: The pubkey must derive to the signed address; which derivation matches\n    // also decides the digest used in step 3.\n    const algo = keyAlgoForAddress(pubKeyBytes, address);\n    if (!algo) {\n      return { ...proof, status: ProofStatus.FAILED };\n    }\n\n    // Step 2: Build MsgSignData + StdSignDoc\n    const signDoc: StdSignDoc = {\n      chain_id: \"\", // must match the signing process\n      account_number: \"0\",\n      sequence: \"0\",\n      fee: { amount: [], gas: \"0\" },\n      msgs: [\n        {\n          type: \"sign/MsgSignData\",\n          value: {\n            signer: address,\n            data: toBase64Bytes(proof.attestation),\n          },\n        },\n      ],\n      memo: \"\",\n    };\n\n    // Step 3: Serialize + hash (ADR-036 digests are keccak256 on eth-secp256k1 chains)\n    const signBytes = await serializeSignDoc(signDoc);\n    const digest =\n      algo === \"ethsecp256k1\" ? keccak_256(signBytes) : sha256(signBytes);\n\n    // Step 4: Verify using secp256k1\n    const verified = secp256k1.verify(signatureBytes, digest, pubKeyBytes);\n\n    return {\n      ...proof,\n      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n    };\n  } catch {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n}\n"]}

package/dist/{eth-3DX3PXDU.cjs → cjs/eth-BVXX47HH.cjs}

@@ -1,7 +1,6 @@
 'use strict';
 
 var buffer = require('buffer');
-require('./chunk-OAXNH5XR.cjs');
 var javascriptSdk = require('@notabene/javascript-sdk');
 var ox = require('ox');
 
@@ -33,5 +32,5 @@ async function verifyPersonalSignEIP191(proof) {
 
 exports.verifyEIP191 = verifyEIP191;
 exports.verifyPersonalSignEIP191 = verifyPersonalSignEIP191;
-//# sourceMappingURL=eth-3DX3PXDU.cjs.map
-//# sourceMappingURL=eth-3DX3PXDU.cjs.map
+//# sourceMappingURL=eth-BVXX47HH.cjs.map
+//# sourceMappingURL=eth-BVXX47HH.cjs.map

package/dist/cjs/eth-BVXX47HH.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/eth.ts"],"names":["PersonalMessage","Hex","Signature","Secp256k1","Address","ProofStatus"],"mappings":";;;;;;;AAGO,SAAS,YAAA,CACd,OAAA,EACA,OAAA,EACA,KAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,MAAM,UAAUA,kBAAA,CAAgB,cAAA,CAAeC,MAAA,CAAI,UAAA,CAAW,OAAO,CAAC,CAAA;AACtE,IAAA,MAAM,SAAA,GAAYC,YAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AACzC,IAAA,MAAM,YAAYC,YAAA,CAAU,gBAAA,CAAiB,EAAE,OAAA,EAAS,WAAW,CAAA;AACnE,IAAA,MAAM,YAAYC,UAAA,CAAQ,QAAA,CAASA,UAAA,CAAQ,aAAA,CAAc,SAAS,CAAC,CAAA;AACnE,IAAA,OAAO,SAAA,CAAU,QAAA,EAAS,KAAMA,UAAA,CAAQ,SAAS,OAAO,CAAA;AAAA,EAE1D,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,yBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQC,0BAAY,MAAA,EAAO;AAEnE,EAAA,MAAM,QAAA,GAAW,YAAA;AAAA,IACf,OAAA;AAAA,IACA,KAAA,CAAM,WAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWA,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF","file":"eth-BVXX47HH.cjs","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Secp256k1, Hex, PersonalMessage, Signature, Address } from \"ox\";\n\nexport function verifyEIP191(\n  address: Hex.Hex,\n  message: string,\n  proof: Hex.Hex,\n): boolean {\n  try {\n    const payload = PersonalMessage.getSignPayload(Hex.fromString(message));\n    const signature = Signature.fromHex(proof);\n    const publicKey = Secp256k1.recoverPublicKey({ payload, signature });\n    const recovered = Address.checksum(Address.fromPublicKey(publicKey));\n    return recovered.toString() === Address.checksum(address);\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  } catch (error) {\n    return false;\n  }\n}\n\nexport async function verifyPersonalSignEIP191(\n  proof: SignatureProof,\n): Promise<SignatureProof> {\n  const [ns, , address] = proof.address.split(/:/);\n  if (ns !== \"eip155\") return { ...proof, status: ProofStatus.FAILED };\n\n  const verified = verifyEIP191(\n    address as Hex.Hex,\n    proof.attestation,\n    proof.proof as Hex.Hex,\n  );\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n"]}

package/dist/{index.cjs → cjs/index.cjs}

@@ -1,7 +1,6 @@
 'use strict';
 
 var buffer = require('buffer');
-require('./chunk-OAXNH5XR.cjs');
 var javascriptSdk = require('@notabene/javascript-sdk');
 
 if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
@@ -18,48 +17,47 @@ async function verifyProof(proof, publicKey) {
         status: proof.url ? javascriptSdk.ProofStatus.FLAGGED : javascriptSdk.ProofStatus.FAILED
       };
     case javascriptSdk.ProofTypes.CIP8: {
-      const { verifyCIP8Signature } = await import('./cardano-DYBYEAAF.cjs');
+      const { verifyCIP8Signature } = await import('./cardano-QG2S452K.cjs');
       return verifyCIP8Signature(proof);
     }
     case javascriptSdk.ProofTypes.EIP191: {
-      const { verifyPersonalSignEIP191 } = await import('./eth-3DX3PXDU.cjs');
+      const { verifyPersonalSignEIP191 } = await import('./eth-BVXX47HH.cjs');
       return verifyPersonalSignEIP191(proof);
     }
     case javascriptSdk.ProofTypes.ED25519: {
-      const { verifySolanaSignature } = await import('./solana-PQ5K4NGO.cjs');
+      const { verifySolanaSignature } = await import('./solana-4WNBEQSU.cjs');
       return verifySolanaSignature(proof);
     }
     case javascriptSdk.ProofTypes.SOL_SIWX: {
-      const { verifySolanaSIWS } = await import('./solana-PQ5K4NGO.cjs');
+      const { verifySolanaSIWS } = await import('./solana-4WNBEQSU.cjs');
       return verifySolanaSIWS(proof);
     }
     case javascriptSdk.ProofTypes.XRP_ED25519: {
-      const { verifyPersonalSignXRPL } = await import('./xrpl-7HQLIDAK.cjs');
+      const { verifyPersonalSignXRPL } = await import('./xrpl-HJ2XWSOO.cjs');
       return verifyPersonalSignXRPL(proof, publicKey);
     }
     case javascriptSdk.ProofTypes.XLM_ED25519: {
-      const { verifyStellarSignature } = await import('./xlm-5GODWWL2.cjs');
+      const { verifyStellarSignature } = await import('./xlm-CHT7RN4Z.cjs');
       return verifyStellarSignature(proof);
     }
     case javascriptSdk.ProofTypes.CONCORDIUM: {
-      const { verifyConcordiumSignature } = await import('./concordium-HQC37GCK.cjs');
+      const { verifyConcordiumSignature } = await import('./concordium-4B33UJJ5.cjs');
       return verifyConcordiumSignature(proof);
     }
     case javascriptSdk.ProofTypes.COSMOS: {
-      const { verifyCosmosSignature } = await import('./cosmos-64MKE5FJ.cjs');
+      const { verifyCosmosSignature } = await import('./cosmos-JTT3AZCF.cjs');
       return verifyCosmosSignature(proof);
     }
     case javascriptSdk.ProofTypes.EIP712:
     case javascriptSdk.ProofTypes.BIP137:
     case javascriptSdk.ProofTypes.BIP322: {
-      const { verifyBTCSignature } = await import('./bitcoin-3CW4MNAW.cjs');
+      const { verifyBTCSignature } = await import('./bitcoin-UIEQV3IM.cjs');
       return verifyBTCSignature(proof);
     }
     case javascriptSdk.ProofTypes.TIP191: {
-      const { verifyPersonalSignTIP191 } = await import('./tron-F5AARBY4.cjs');
+      const { verifyPersonalSignTIP191 } = await import('./tron-IM2O2VLM.cjs');
       return verifyPersonalSignTIP191(proof);
     }
-    case javascriptSdk.ProofTypes.BIP137_XPUB:
     case javascriptSdk.ProofTypes.MicroTransfer:
   }
   return proof;

package/dist/cjs/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/index.ts"],"names":["ProofTypes","ProofStatus"],"mappings":";;;;;;AAUA,eAAsB,WAAA,CACpB,OACA,SAAA,EACyB;AACzB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAKA,wBAAA,CAAW,eAAA;AACd,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,MAAA,EAAS,KAAA,CAA2B,SAAA,GAChCC,yBAAA,CAAY,WACZA,yBAAA,CAAY;AAAA,OAClB;AAAA,IACF,KAAKD,wBAAA,CAAW,UAAA;AACd,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,MAAA,EAAS,KAAA,CAA0B,GAAA,GAC/BC,yBAAA,CAAY,UACZA,yBAAA,CAAY;AAAA,OAClB;AAAA,IACF,KAAKD,yBAAW,IAAA,EAAM;AACpB,MAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,MAAM,OAAO,wBAAW,CAAA;AACxD,MAAA,OAAO,oBAAoB,KAAuB,CAAA;AAAA,IACpD;AAAA,IACA,KAAKA,yBAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,oBAAO,CAAA;AACzD,MAAA,OAAO,yBAAyB,KAAuB,CAAA;AAAA,IACzD;AAAA,IACA,KAAKA,yBAAW,OAAA,EAAS;AACvB,MAAA,MAAM,EAAE,qBAAA,EAAsB,GAAI,MAAM,OAAO,uBAAU,CAAA;AACzD,MAAA,OAAO,sBAAsB,KAAuB,CAAA;AAAA,IACtD;AAAA,IACA,KAAKA,yBAAW,QAAA,EAAU;AACxB,MAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,uBAAU,CAAA;AACpD,MAAA,OAAO,iBAAiB,KAAuB,CAAA;AAAA,IACjD;AAAA,IACA,KAAKA,yBAAW,WAAA,EAAa;AAC3B,MAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,qBAAQ,CAAA;AACxD,MAAA,OAAO,sBAAA,CAAuB,OAAyB,SAAS,CAAA;AAAA,IAClE;AAAA,IACA,KAAKA,yBAAW,WAAA,EAAa;AAC3B,MAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAAO,CAAA;AACvD,MAAA,OAAO,uBAAuB,KAAuB,CAAA;AAAA,IACvD;AAAA,IACA,KAAKA,yBAAW,UAAA,EAAY;AAC1B,MAAA,MAAM,EAAE,yBAAA,EAA0B,GAAI,MAAM,OAAO,2BAAc,CAAA;AACjE,MAAA,OAAO,0BAA0B,KAAuB,CAAA;AAAA,IAC1D;AAAA,IACA,KAAKA,yBAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,qBAAA,EAAsB,GAAI,MAAM,OAAO,uBAAU,CAAA;AACzD,MAAA,OAAO,sBAAsB,KAAuB,CAAA;AAAA,IACtD;AAAA,IACA,KAAKA,wBAAA,CAAW,MAAA;AAAA,IAChB,KAAKA,wBAAA,CAAW,MAAA;AAAA,IAChB,KAAKA,yBAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,wBAAW,CAAA;AACvD,MAAA,OAAO,mBAAmB,KAAuB,CAAA;AAAA,IACnD;AAAA,IACA,KAAKA,yBAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,qBAAQ,CAAA;AAC1D,MAAA,OAAO,yBAAyB,KAAuB,CAAA;AAAA,IACzD;AAAA,IACA,KAAKA,wBAAA,CAAW,aAAA;AAAA;AAElB,EAAA,OAAO,KAAA;AACT","file":"index.cjs","sourcesContent":["import {\n  type OwnershipProof,\n  SignatureProof,\n  DeclarationProof,\n  ScreenshotProof,\n  ProofTypes,\n  ProofStatus,\n} from \"@notabene/javascript-sdk\";\n\n// Use dynamic imports to ensure Buffer is available before loading crypto libraries\nexport async function verifyProof(\n  proof: OwnershipProof,\n  publicKey?: string,\n): Promise<OwnershipProof> {\n  switch (proof.type) {\n    case ProofTypes.SelfDeclaration:\n      return {\n        ...proof,\n        status: (proof as DeclarationProof).confirmed\n          ? ProofStatus.VERIFIED\n          : ProofStatus.FAILED,\n      };\n    case ProofTypes.Screenshot:\n      return {\n        ...proof,\n        status: (proof as ScreenshotProof).url\n          ? ProofStatus.FLAGGED\n          : ProofStatus.FAILED,\n      };\n    case ProofTypes.CIP8: {\n      const { verifyCIP8Signature } = await import(\"./cardano\");\n      return verifyCIP8Signature(proof as SignatureProof);\n    }\n    case ProofTypes.EIP191: {\n      const { verifyPersonalSignEIP191 } = await import(\"./eth\");\n      return verifyPersonalSignEIP191(proof as SignatureProof);\n    }\n    case ProofTypes.ED25519: {\n      const { verifySolanaSignature } = await import(\"./solana\");\n      return verifySolanaSignature(proof as SignatureProof);\n    }\n    case ProofTypes.SOL_SIWX: {\n      const { verifySolanaSIWS } = await import(\"./solana\");\n      return verifySolanaSIWS(proof as SignatureProof);\n    }\n    case ProofTypes.XRP_ED25519: {\n      const { verifyPersonalSignXRPL } = await import(\"./xrpl\");\n      return verifyPersonalSignXRPL(proof as SignatureProof, publicKey);\n    }\n    case ProofTypes.XLM_ED25519: {\n      const { verifyStellarSignature } = await import(\"./xlm\");\n      return verifyStellarSignature(proof as SignatureProof);\n    }\n    case ProofTypes.CONCORDIUM: {\n      const { verifyConcordiumSignature } = await import(\"./concordium\");\n      return verifyConcordiumSignature(proof as SignatureProof);\n    }\n    case ProofTypes.COSMOS: {\n      const { verifyCosmosSignature } = await import(\"./cosmos\");\n      return verifyCosmosSignature(proof as SignatureProof);\n    }\n    case ProofTypes.EIP712:\n    case ProofTypes.BIP137:\n    case ProofTypes.BIP322: {\n      const { verifyBTCSignature } = await import(\"./bitcoin\");\n      return verifyBTCSignature(proof as SignatureProof);\n    }\n    case ProofTypes.TIP191: {\n      const { verifyPersonalSignTIP191 } = await import(\"./tron\");\n      return verifyPersonalSignTIP191(proof as SignatureProof);\n    }\n    case ProofTypes.MicroTransfer:\n  }\n  return proof;\n}\n"]}

package/dist/{solana-PQ5K4NGO.cjs → cjs/solana-4WNBEQSU.cjs}

@@ -1,30 +1,13 @@
 'use strict';
 
 var buffer = require('buffer');
-require('./chunk-OAXNH5XR.cjs');
 var nacl = require('tweetnacl');
 var javascriptSdk = require('@notabene/javascript-sdk');
 var base = require('@scure/base');
 
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
-var nacl__namespace = /*#__PURE__*/_interopNamespace(nacl);
+var nacl__default = /*#__PURE__*/_interopDefault(nacl);
 
 if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
 async function verifySolanaSignature(proof) {
@@ -34,7 +17,7 @@ async function verifySolanaSignature(proof) {
     const publicKey = base.base58.decode(address);
     const messageBytes = new TextEncoder().encode(proof.attestation);
     const signatureBytes = base.base64.decode(proof.proof);
-    const verified = nacl__namespace.sign.detached.verify(
+    const verified = nacl__default.default.sign.detached.verify(
       messageBytes,
       signatureBytes,
       publicKey
@@ -142,7 +125,7 @@ async function verifySolanaSIWS(proof) {
     if (reconstructedMessage !== signedMessageText) {
       return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
     }
-    const verified = nacl__namespace.sign.detached.verify(
+    const verified = nacl__default.default.sign.detached.verify(
       metadata.signedMessage,
       metadata.signature,
       metadata.account.publicKey
@@ -361,5 +344,5 @@ function buildFieldLines(input) {
 
 exports.verifySolanaSIWS = verifySolanaSIWS;
 exports.verifySolanaSignature = verifySolanaSignature;
-//# sourceMappingURL=solana-PQ5K4NGO.cjs.map
-//# sourceMappingURL=solana-PQ5K4NGO.cjs.map
+//# sourceMappingURL=solana-4WNBEQSU.cjs.map
+//# sourceMappingURL=solana-4WNBEQSU.cjs.map