@notabene/verify-proof 1.11.1-next.1 → 1.12.0-next.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (85) hide show
  1. package/dist/{bitcoin-3CW4MNAW.cjs → cjs/bitcoin-UIEQV3IM.cjs} +105 -16
  2. package/dist/cjs/bitcoin-UIEQV3IM.cjs.map +1 -0
  3. package/dist/{cardano-DYBYEAAF.cjs → cjs/cardano-QG2S452K.cjs} +5 -22
  4. package/dist/cjs/cardano-QG2S452K.cjs.map +1 -0
  5. package/dist/cjs/concordium-4B33UJJ5.cjs +44 -0
  6. package/dist/cjs/concordium-4B33UJJ5.cjs.map +1 -0
  7. package/dist/cjs/cosmos-JTT3AZCF.cjs +92 -0
  8. package/dist/cjs/cosmos-JTT3AZCF.cjs.map +1 -0
  9. package/dist/{eth-3DX3PXDU.cjs → cjs/eth-BVXX47HH.cjs} +2 -3
  10. package/dist/cjs/eth-BVXX47HH.cjs.map +1 -0
  11. package/dist/{index.cjs → cjs/index.cjs} +10 -12
  12. package/dist/cjs/index.cjs.map +1 -0
  13. package/dist/{solana-PQ5K4NGO.cjs → cjs/solana-4WNBEQSU.cjs} +6 -23
  14. package/dist/cjs/solana-4WNBEQSU.cjs.map +1 -0
  15. package/dist/{tron-F5AARBY4.cjs → cjs/tron-IM2O2VLM.cjs} +2 -3
  16. package/dist/cjs/tron-IM2O2VLM.cjs.map +1 -0
  17. package/dist/{xlm-5GODWWL2.cjs → cjs/xlm-CHT7RN4Z.cjs} +2 -3
  18. package/dist/cjs/xlm-CHT7RN4Z.cjs.map +1 -0
  19. package/dist/cjs/xrpl-HJ2XWSOO.cjs +74 -0
  20. package/dist/cjs/xrpl-HJ2XWSOO.cjs.map +1 -0
  21. package/dist/{bitcoin-QK53ILBF.js → esm/bitcoin-BTZ4TXEK.js} +105 -16
  22. package/dist/esm/bitcoin-BTZ4TXEK.js.map +1 -0
  23. package/dist/{cardano-WE6YXYLW.js → esm/cardano-OMGAPH5N.js} +4 -5
  24. package/dist/esm/cardano-OMGAPH5N.js.map +1 -0
  25. package/dist/esm/concordium-JJ5VEIOA.js +42 -0
  26. package/dist/esm/concordium-JJ5VEIOA.js.map +1 -0
  27. package/dist/esm/cosmos-AVIWAIX7.js +90 -0
  28. package/dist/esm/cosmos-AVIWAIX7.js.map +1 -0
  29. package/dist/{eth-ICLGRJE5.js → esm/eth-GI4Z5V4T.js} +2 -3
  30. package/dist/esm/eth-GI4Z5V4T.js.map +1 -0
  31. package/dist/{index.js → esm/index.js} +10 -12
  32. package/dist/esm/index.js.map +1 -0
  33. package/dist/{solana-4KQFLZUC.js → esm/solana-ZARDAF6O.js} +3 -4
  34. package/dist/esm/solana-ZARDAF6O.js.map +1 -0
  35. package/dist/{tron-OBLPB2LN.js → esm/tron-FI2B6DRS.js} +2 -3
  36. package/dist/esm/tron-FI2B6DRS.js.map +1 -0
  37. package/dist/{xlm-GX2QGFLI.js → esm/xlm-TNRZ5CFC.js} +2 -3
  38. package/dist/esm/xlm-TNRZ5CFC.js.map +1 -0
  39. package/dist/esm/xrpl-52IBJ4EW.js +69 -0
  40. package/dist/esm/xrpl-52IBJ4EW.js.map +1 -0
  41. package/package.json +21 -9
  42. package/src/bitcoin.ts +43 -19
  43. package/src/cardano.ts +2 -2
  44. package/src/cashaddr.ts +157 -0
  45. package/src/concordium.ts +34 -283
  46. package/src/cosmos.ts +44 -6
  47. package/src/index.ts +0 -1
  48. package/src/solana.ts +1 -1
  49. package/src/tests/bitcoin.test.ts +527 -16
  50. package/src/tests/concordium.test.ts +96 -134
  51. package/src/tests/cosmos.test.ts +139 -0
  52. package/src/tests/index.test.ts +7 -7
  53. package/src/tests/xrpl.test.ts +8 -6
  54. package/dist/bitcoin-3CW4MNAW.cjs.map +0 -1
  55. package/dist/bitcoin-QK53ILBF.js.map +0 -1
  56. package/dist/cardano-DYBYEAAF.cjs.map +0 -1
  57. package/dist/cardano-WE6YXYLW.js.map +0 -1
  58. package/dist/chunk-E3V5ATTC.js +0 -38
  59. package/dist/chunk-E3V5ATTC.js.map +0 -1
  60. package/dist/chunk-OAXNH5XR.cjs +0 -42
  61. package/dist/chunk-OAXNH5XR.cjs.map +0 -1
  62. package/dist/concordium-HQC37GCK.cjs +0 -188
  63. package/dist/concordium-HQC37GCK.cjs.map +0 -1
  64. package/dist/concordium-XX4XYLLU.js +0 -186
  65. package/dist/concordium-XX4XYLLU.js.map +0 -1
  66. package/dist/cosmos-64MKE5FJ.cjs +0 -683
  67. package/dist/cosmos-64MKE5FJ.cjs.map +0 -1
  68. package/dist/cosmos-QMH7BK7S.js +0 -681
  69. package/dist/cosmos-QMH7BK7S.js.map +0 -1
  70. package/dist/eth-3DX3PXDU.cjs.map +0 -1
  71. package/dist/eth-ICLGRJE5.js.map +0 -1
  72. package/dist/index.cjs.map +0 -1
  73. package/dist/index.js.map +0 -1
  74. package/dist/solana-4KQFLZUC.js.map +0 -1
  75. package/dist/solana-PQ5K4NGO.cjs.map +0 -1
  76. package/dist/tron-F5AARBY4.cjs.map +0 -1
  77. package/dist/tron-OBLPB2LN.js.map +0 -1
  78. package/dist/xlm-5GODWWL2.cjs.map +0 -1
  79. package/dist/xlm-GX2QGFLI.js.map +0 -1
  80. package/dist/xrpl-7HQLIDAK.cjs +0 -1174
  81. package/dist/xrpl-7HQLIDAK.cjs.map +0 -1
  82. package/dist/xrpl-YCDFXBGQ.js +0 -1169
  83. package/dist/xrpl-YCDFXBGQ.js.map +0 -1
  84. /package/dist/{index.d.cts → cjs/index.d.cts} +0 -0
  85. /package/dist/{index.d.ts → esm/index.d.ts} +0 -0
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/cosmos.ts"],"names":[],"mappings":";;;;;;;;;;AAaA,SAAS,mBAAmB,MAAA,EAA4B;AACtD,EAAA,OAAO,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAC7D;AAGA,SAAS,cAAc,GAAA,EAAqB;AAC1C,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,GAAG,CAAA;AACzC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;AAIA,SAAS,mBAAA,CAAoB,QAAoB,MAAA,EAAwB;AACvE,EAAA,MAAM,GAAA,GAAM,OAAO,MAAM,CAAA;AACzB,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,OAAO,OAAO,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClD;AAIA,SAAS,gBAAA,CAAiB,QAAoB,MAAA,EAAwB;AACpE,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,eAAA,CAAgB,OAAA,CAAQ,MAAM,EAC1D,UAAA,CAAW,KAAK,CAAA,CAChB,KAAA,CAAM,CAAC,CAAA;AACV,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,YAAY,CAAA,CAAE,MAAM,GAAG,CAAA;AAC9C,EAAA,OAAO,OAAO,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClD;AAOA,SAAS,iBAAA,CACP,QACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAA,GAAS,aAAa,OAAO,CAAA;AACnC,EAAA,IAAI,mBAAA,CAAoB,MAAA,EAAQ,MAAM,CAAA,KAAM,OAAA,EAAS;AACnD,IAAA,OAAO,WAAA;AAAA,EACT;AACA,EAAA,IAAI,gBAAA,CAAiB,MAAA,EAAQ,MAAM,CAAA,KAAM,OAAA,EAAS;AAChD,IAAA,OAAO,cAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAIA,SAAS,aAAa,OAAA,EAAyB;AAC7C,EAAA,OAAO,QAAQ,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,WAAA,CAAY,GAAG,CAAC,CAAA;AAClD;AAEA,eAAsB,sBACpB,KAAA,EACyB;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,IAAA,IAAI,OAAO,QAAA,EAAU;AACnB,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,WAAA,GAAc,kBAAA;AAAA,MACjB,KAAA,CAAM,kBAAqC,OAAA,CAAQ;AAAA,KACtD;AACA,IAAA,MAAM,cAAA,GAAiB,kBAAA,CAAmB,KAAA,CAAM,KAAK,CAAA;AAIrD,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,WAAA,EAAa,OAAO,CAAA;AACnD,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,OAAA,GAAsB;AAAA,MAC1B,QAAA,EAAU,EAAA;AAAA;AAAA,MACV,cAAA,EAAgB,GAAA;AAAA,MAChB,QAAA,EAAU,GAAA;AAAA,MACV,KAAK,EAAE,MAAA,EAAQ,EAAC,EAAG,KAAK,GAAA,EAAI;AAAA,MAC5B,IAAA,EAAM;AAAA,QACJ;AAAA,UACE,IAAA,EAAM,kBAAA;AAAA,UACN,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,OAAA;AAAA,YACR,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,WAAW;AAAA;AACvC;AACF,OACF;AAAA,MACA,IAAA,EAAM;AAAA,KACR;AAGA,IAAA,MAAM,SAAA,GAAY,MAAM,gBAAA,CAAiB,OAAO,CAAA;AAChD,IAAA,MAAM,SACJ,IAAA,KAAS,cAAA,GAAiB,WAAW,SAAS,CAAA,GAAI,OAAO,SAAS,CAAA;AAGpE,IAAA,MAAM,QAAA,GAAW,SAAA,CAAU,MAAA,CAAO,cAAA,EAAgB,QAAQ,WAAW,CAAA;AAErE,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"cosmos-AVIWAIX7.js","sourcesContent":["import {\n CosmosMetadata,\n ProofStatus,\n SignatureProof,\n} from \"@notabene/javascript-sdk\";\nimport { bech32 } from \"bech32\";\nimport { StdSignDoc, serializeSignDoc } from \"@cosmjs/amino\";\nimport { secp256k1 } from \"@noble/curves/secp256k1\";\nimport { ripemd160 } from \"@noble/hashes/legacy\";\nimport { sha256 } from \"@noble/hashes/sha2\";\nimport { keccak_256 } from \"@noble/hashes/sha3\";\n\n// Base64 decode\nfunction base64ToUint8Array(base64: string): Uint8Array {\n return Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));\n}\n\n// Base64 encode UTF-8 bytes\nfunction toBase64Bytes(str: string): string {\n const utf8 = new TextEncoder().encode(str);\n let binary = \"\";\n for (let i = 0; i < utf8.length; i++) {\n binary += String.fromCharCode(utf8[i]);\n }\n return btoa(binary);\n}\n\n// Cosmos address derivation (ADR-36)\n// https://github.com/cosmos/cosmos-sdk/blob/214b11dcbaa129f7b4c0013b2103db9d54b85e9e/docs/architecture/adr-036-arbitrary-signature.md\nfunction deriveCosmosAddress(pubkey: Uint8Array, prefix: string): string {\n const sha = sha256(pubkey);\n const rip = ripemd160(sha);\n return bech32.encode(prefix, bech32.toWords(rip));\n}\n\n// Ethermint-style chains (Injective, Evmos, ...) use eth-secp256k1 keys: the account is\n// the Ethereum address of the key, bech32-encoded under the chain prefix.\nfunction deriveEthAddress(pubkey: Uint8Array, prefix: string): string {\n const uncompressed = secp256k1.ProjectivePoint.fromHex(pubkey)\n .toRawBytes(false)\n .slice(1);\n const eth = keccak_256(uncompressed).slice(-20);\n return bech32.encode(prefix, bech32.toWords(eth));\n}\n\n// Same selection Keplr's verifyADR36AminoSignDoc makes via its `algo` argument. The signed\n// address tells us which key algorithm the chain uses, so we do not depend on the\n// pub_key.type string wallets put in the amino signature.\ntype CosmosKeyAlgo = \"secp256k1\" | \"ethsecp256k1\";\n\nfunction keyAlgoForAddress(\n pubkey: Uint8Array,\n address: string\n): CosmosKeyAlgo | undefined {\n const prefix = bech32Prefix(address);\n if (deriveCosmosAddress(pubkey, prefix) === address) {\n return \"secp256k1\";\n }\n if (deriveEthAddress(pubkey, prefix) === address) {\n return \"ethsecp256k1\";\n }\n return undefined;\n}\n\n// Each Cosmos SDK chain has its own human-readable part (cosmos, celestia, axelar, ...),\n// and bech32 separates it from the data with the last \"1\" in the string.\nfunction bech32Prefix(address: string): string {\n return address.slice(0, address.lastIndexOf(\"1\"));\n}\n\nexport async function verifyCosmosSignature(\n proof: SignatureProof\n): Promise<SignatureProof> {\n try {\n const [ns, , address] = proof.address.split(/:/);\n if (ns !== \"cosmos\") {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n // Parse the proof JSON\n const pubKeyBytes = base64ToUint8Array(\n (proof.chainSpecificData as CosmosMetadata).pub_key.value\n );\n const signatureBytes = base64ToUint8Array(proof.proof);\n\n // Step 1: The pubkey must derive to the signed address; which derivation matches\n // also decides the digest used in step 3.\n const algo = keyAlgoForAddress(pubKeyBytes, address);\n if (!algo) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n // Step 2: Build MsgSignData + StdSignDoc\n const signDoc: StdSignDoc = {\n chain_id: \"\", // must match the signing process\n account_number: \"0\",\n sequence: \"0\",\n fee: { amount: [], gas: \"0\" },\n msgs: [\n {\n type: \"sign/MsgSignData\",\n value: {\n signer: address,\n data: toBase64Bytes(proof.attestation),\n },\n },\n ],\n memo: \"\",\n };\n\n // Step 3: Serialize + hash (ADR-036 digests are keccak256 on eth-secp256k1 chains)\n const signBytes = await serializeSignDoc(signDoc);\n const digest =\n algo === \"ethsecp256k1\" ? keccak_256(signBytes) : sha256(signBytes);\n\n // Step 4: Verify using secp256k1\n const verified = secp256k1.verify(signatureBytes, digest, pubKeyBytes);\n\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n } catch {\n return { ...proof, status: ProofStatus.FAILED };\n }\n}\n"]}
@@ -1,5 +1,4 @@
1
1
  import { Buffer } from 'buffer';
2
- import './chunk-E3V5ATTC.js';
3
2
  import { ProofStatus } from '@notabene/javascript-sdk';
4
3
  import { PersonalMessage, Hex, Signature, Secp256k1, Address } from 'ox';
5
4
 
@@ -30,5 +29,5 @@ async function verifyPersonalSignEIP191(proof) {
30
29
  }
31
30
 
32
31
  export { verifyEIP191, verifyPersonalSignEIP191 };
33
- //# sourceMappingURL=eth-ICLGRJE5.js.map
34
- //# sourceMappingURL=eth-ICLGRJE5.js.map
32
+ //# sourceMappingURL=eth-GI4Z5V4T.js.map
33
+ //# sourceMappingURL=eth-GI4Z5V4T.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/eth.ts"],"names":[],"mappings":";;;;;AAGO,SAAS,YAAA,CACd,OAAA,EACA,OAAA,EACA,KAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,eAAA,CAAgB,cAAA,CAAe,GAAA,CAAI,UAAA,CAAW,OAAO,CAAC,CAAA;AACtE,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AACzC,IAAA,MAAM,YAAY,SAAA,CAAU,gBAAA,CAAiB,EAAE,OAAA,EAAS,WAAW,CAAA;AACnE,IAAA,MAAM,YAAY,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,aAAA,CAAc,SAAS,CAAC,CAAA;AACnE,IAAA,OAAO,SAAA,CAAU,QAAA,EAAS,KAAM,OAAA,CAAQ,SAAS,OAAO,CAAA;AAAA,EAE1D,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,yBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEnE,EAAA,MAAM,QAAA,GAAW,YAAA;AAAA,IACf,OAAA;AAAA,IACA,KAAA,CAAM,WAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,GACxD;AACF","file":"eth-GI4Z5V4T.js","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Secp256k1, Hex, PersonalMessage, Signature, Address } from \"ox\";\n\nexport function verifyEIP191(\n address: Hex.Hex,\n message: string,\n proof: Hex.Hex,\n): boolean {\n try {\n const payload = PersonalMessage.getSignPayload(Hex.fromString(message));\n const signature = Signature.fromHex(proof);\n const publicKey = Secp256k1.recoverPublicKey({ payload, signature });\n const recovered = Address.checksum(Address.fromPublicKey(publicKey));\n return recovered.toString() === Address.checksum(address);\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n } catch (error) {\n return false;\n }\n}\n\nexport async function verifyPersonalSignEIP191(\n proof: SignatureProof,\n): Promise<SignatureProof> {\n const [ns, , address] = proof.address.split(/:/);\n if (ns !== \"eip155\") return { ...proof, status: ProofStatus.FAILED };\n\n const verified = verifyEIP191(\n address as Hex.Hex,\n proof.attestation,\n proof.proof as Hex.Hex,\n );\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n}\n"]}
@@ -1,5 +1,4 @@
1
1
  import { Buffer } from 'buffer';
2
- import './chunk-E3V5ATTC.js';
3
2
  import { ProofTypes, ProofStatus } from '@notabene/javascript-sdk';
4
3
 
5
4
  if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
@@ -16,48 +15,47 @@ async function verifyProof(proof, publicKey) {
16
15
  status: proof.url ? ProofStatus.FLAGGED : ProofStatus.FAILED
17
16
  };
18
17
  case ProofTypes.CIP8: {
19
- const { verifyCIP8Signature } = await import('./cardano-WE6YXYLW.js');
18
+ const { verifyCIP8Signature } = await import('./cardano-OMGAPH5N.js');
20
19
  return verifyCIP8Signature(proof);
21
20
  }
22
21
  case ProofTypes.EIP191: {
23
- const { verifyPersonalSignEIP191 } = await import('./eth-ICLGRJE5.js');
22
+ const { verifyPersonalSignEIP191 } = await import('./eth-GI4Z5V4T.js');
24
23
  return verifyPersonalSignEIP191(proof);
25
24
  }
26
25
  case ProofTypes.ED25519: {
27
- const { verifySolanaSignature } = await import('./solana-4KQFLZUC.js');
26
+ const { verifySolanaSignature } = await import('./solana-ZARDAF6O.js');
28
27
  return verifySolanaSignature(proof);
29
28
  }
30
29
  case ProofTypes.SOL_SIWX: {
31
- const { verifySolanaSIWS } = await import('./solana-4KQFLZUC.js');
30
+ const { verifySolanaSIWS } = await import('./solana-ZARDAF6O.js');
32
31
  return verifySolanaSIWS(proof);
33
32
  }
34
33
  case ProofTypes.XRP_ED25519: {
35
- const { verifyPersonalSignXRPL } = await import('./xrpl-YCDFXBGQ.js');
34
+ const { verifyPersonalSignXRPL } = await import('./xrpl-52IBJ4EW.js');
36
35
  return verifyPersonalSignXRPL(proof, publicKey);
37
36
  }
38
37
  case ProofTypes.XLM_ED25519: {
39
- const { verifyStellarSignature } = await import('./xlm-GX2QGFLI.js');
38
+ const { verifyStellarSignature } = await import('./xlm-TNRZ5CFC.js');
40
39
  return verifyStellarSignature(proof);
41
40
  }
42
41
  case ProofTypes.CONCORDIUM: {
43
- const { verifyConcordiumSignature } = await import('./concordium-XX4XYLLU.js');
42
+ const { verifyConcordiumSignature } = await import('./concordium-JJ5VEIOA.js');
44
43
  return verifyConcordiumSignature(proof);
45
44
  }
46
45
  case ProofTypes.COSMOS: {
47
- const { verifyCosmosSignature } = await import('./cosmos-QMH7BK7S.js');
46
+ const { verifyCosmosSignature } = await import('./cosmos-AVIWAIX7.js');
48
47
  return verifyCosmosSignature(proof);
49
48
  }
50
49
  case ProofTypes.EIP712:
51
50
  case ProofTypes.BIP137:
52
51
  case ProofTypes.BIP322: {
53
- const { verifyBTCSignature } = await import('./bitcoin-QK53ILBF.js');
52
+ const { verifyBTCSignature } = await import('./bitcoin-BTZ4TXEK.js');
54
53
  return verifyBTCSignature(proof);
55
54
  }
56
55
  case ProofTypes.TIP191: {
57
- const { verifyPersonalSignTIP191 } = await import('./tron-OBLPB2LN.js');
56
+ const { verifyPersonalSignTIP191 } = await import('./tron-FI2B6DRS.js');
58
57
  return verifyPersonalSignTIP191(proof);
59
58
  }
60
- case ProofTypes.BIP137_XPUB:
61
59
  case ProofTypes.MicroTransfer:
62
60
  }
63
61
  return proof;
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/index.ts"],"names":[],"mappings":";;;;AAUA,eAAsB,WAAA,CACpB,OACA,SAAA,EACyB;AACzB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,UAAA,CAAW,eAAA;AACd,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,MAAA,EAAS,KAAA,CAA2B,SAAA,GAChC,WAAA,CAAY,WACZ,WAAA,CAAY;AAAA,OAClB;AAAA,IACF,KAAK,UAAA,CAAW,UAAA;AACd,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,MAAA,EAAS,KAAA,CAA0B,GAAA,GAC/B,WAAA,CAAY,UACZ,WAAA,CAAY;AAAA,OAClB;AAAA,IACF,KAAK,WAAW,IAAA,EAAM;AACpB,MAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,MAAM,OAAO,uBAAW,CAAA;AACxD,MAAA,OAAO,oBAAoB,KAAuB,CAAA;AAAA,IACpD;AAAA,IACA,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,mBAAO,CAAA;AACzD,MAAA,OAAO,yBAAyB,KAAuB,CAAA;AAAA,IACzD;AAAA,IACA,KAAK,WAAW,OAAA,EAAS;AACvB,MAAA,MAAM,EAAE,qBAAA,EAAsB,GAAI,MAAM,OAAO,sBAAU,CAAA;AACzD,MAAA,OAAO,sBAAsB,KAAuB,CAAA;AAAA,IACtD;AAAA,IACA,KAAK,WAAW,QAAA,EAAU;AACxB,MAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,sBAAU,CAAA;AACpD,MAAA,OAAO,iBAAiB,KAAuB,CAAA;AAAA,IACjD;AAAA,IACA,KAAK,WAAW,WAAA,EAAa;AAC3B,MAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAAQ,CAAA;AACxD,MAAA,OAAO,sBAAA,CAAuB,OAAyB,SAAS,CAAA;AAAA,IAClE;AAAA,IACA,KAAK,WAAW,WAAA,EAAa;AAC3B,MAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,mBAAO,CAAA;AACvD,MAAA,OAAO,uBAAuB,KAAuB,CAAA;AAAA,IACvD;AAAA,IACA,KAAK,WAAW,UAAA,EAAY;AAC1B,MAAA,MAAM,EAAE,yBAAA,EAA0B,GAAI,MAAM,OAAO,0BAAc,CAAA;AACjE,MAAA,OAAO,0BAA0B,KAAuB,CAAA;AAAA,IAC1D;AAAA,IACA,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,qBAAA,EAAsB,GAAI,MAAM,OAAO,sBAAU,CAAA;AACzD,MAAA,OAAO,sBAAsB,KAAuB,CAAA;AAAA,IACtD;AAAA,IACA,KAAK,UAAA,CAAW,MAAA;AAAA,IAChB,KAAK,UAAA,CAAW,MAAA;AAAA,IAChB,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,uBAAW,CAAA;AACvD,MAAA,OAAO,mBAAmB,KAAuB,CAAA;AAAA,IACnD;AAAA,IACA,KAAK,WAAW,MAAA,EAAQ;AACtB,MAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,oBAAQ,CAAA;AAC1D,MAAA,OAAO,yBAAyB,KAAuB,CAAA;AAAA,IACzD;AAAA,IACA,KAAK,UAAA,CAAW,aAAA;AAAA;AAElB,EAAA,OAAO,KAAA;AACT","file":"index.js","sourcesContent":["import {\n type OwnershipProof,\n SignatureProof,\n DeclarationProof,\n ScreenshotProof,\n ProofTypes,\n ProofStatus,\n} from \"@notabene/javascript-sdk\";\n\n// Use dynamic imports to ensure Buffer is available before loading crypto libraries\nexport async function verifyProof(\n proof: OwnershipProof,\n publicKey?: string,\n): Promise<OwnershipProof> {\n switch (proof.type) {\n case ProofTypes.SelfDeclaration:\n return {\n ...proof,\n status: (proof as DeclarationProof).confirmed\n ? ProofStatus.VERIFIED\n : ProofStatus.FAILED,\n };\n case ProofTypes.Screenshot:\n return {\n ...proof,\n status: (proof as ScreenshotProof).url\n ? ProofStatus.FLAGGED\n : ProofStatus.FAILED,\n };\n case ProofTypes.CIP8: {\n const { verifyCIP8Signature } = await import(\"./cardano\");\n return verifyCIP8Signature(proof as SignatureProof);\n }\n case ProofTypes.EIP191: {\n const { verifyPersonalSignEIP191 } = await import(\"./eth\");\n return verifyPersonalSignEIP191(proof as SignatureProof);\n }\n case ProofTypes.ED25519: {\n const { verifySolanaSignature } = await import(\"./solana\");\n return verifySolanaSignature(proof as SignatureProof);\n }\n case ProofTypes.SOL_SIWX: {\n const { verifySolanaSIWS } = await import(\"./solana\");\n return verifySolanaSIWS(proof as SignatureProof);\n }\n case ProofTypes.XRP_ED25519: {\n const { verifyPersonalSignXRPL } = await import(\"./xrpl\");\n return verifyPersonalSignXRPL(proof as SignatureProof, publicKey);\n }\n case ProofTypes.XLM_ED25519: {\n const { verifyStellarSignature } = await import(\"./xlm\");\n return verifyStellarSignature(proof as SignatureProof);\n }\n case ProofTypes.CONCORDIUM: {\n const { verifyConcordiumSignature } = await import(\"./concordium\");\n return verifyConcordiumSignature(proof as SignatureProof);\n }\n case ProofTypes.COSMOS: {\n const { verifyCosmosSignature } = await import(\"./cosmos\");\n return verifyCosmosSignature(proof as SignatureProof);\n }\n case ProofTypes.EIP712:\n case ProofTypes.BIP137:\n case ProofTypes.BIP322: {\n const { verifyBTCSignature } = await import(\"./bitcoin\");\n return verifyBTCSignature(proof as SignatureProof);\n }\n case ProofTypes.TIP191: {\n const { verifyPersonalSignTIP191 } = await import(\"./tron\");\n return verifyPersonalSignTIP191(proof as SignatureProof);\n }\n case ProofTypes.MicroTransfer:\n }\n return proof;\n}\n"]}
@@ -1,6 +1,5 @@
1
1
  import { Buffer } from 'buffer';
2
- import './chunk-E3V5ATTC.js';
3
- import * as nacl from 'tweetnacl';
2
+ import nacl from 'tweetnacl';
4
3
  import { ProofStatus } from '@notabene/javascript-sdk';
5
4
  import { base58, base64 } from '@scure/base';
6
5
 
@@ -338,5 +337,5 @@ function buildFieldLines(input) {
338
337
  }
339
338
 
340
339
  export { verifySolanaSIWS, verifySolanaSignature };
341
- //# sourceMappingURL=solana-4KQFLZUC.js.map
342
- //# sourceMappingURL=solana-4KQFLZUC.js.map
340
+ //# sourceMappingURL=solana-ZARDAF6O.js.map
341
+ //# sourceMappingURL=solana-ZARDAF6O.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/solana.ts"],"names":[],"mappings":";;;;;;AAmCA,eAAsB,sBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEnE,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACvC,IAAA,MAAM,eAAe,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,WAAW,CAAA;AAC/D,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAChD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,MAAA;AAAA,MAClC,YAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AACF;AAEA,SAAS,oBAAoB,GAAA,EAAgC;AAC3D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AAE5C,EAAA,MAAM,KAAA,GAAQ,GAAA;AAGd,EAAA,OACE,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,IACxB,OAAO,MAAM,OAAA,KAAY,QAAA,KACxB,KAAA,CAAM,SAAA,KAAc,UAAa,OAAO,KAAA,CAAM,SAAA,KAAc,QAAA,CAAA,KAC5D,MAAM,GAAA,KAAQ,MAAA,IAAa,OAAO,KAAA,CAAM,QAAQ,QAAA,CAAA,KAChD,KAAA,CAAM,OAAA,KAAY,MAAA,IAAa,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,CAAA,KACxD,KAAA,CAAM,YAAY,MAAA,IAAa,OAAO,KAAA,CAAM,OAAA,KAAY,cACxD,KAAA,CAAM,KAAA,KAAU,MAAA,IAAa,OAAO,MAAM,KAAA,KAAU,QAAA,CAAA,KACpD,KAAA,CAAM,QAAA,KAAa,UAAa,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,CAAA,KAC1D,MAAM,cAAA,KAAmB,MAAA,IAAa,OAAO,KAAA,CAAM,mBAAmB,QAAA,CAAA,KACtE,KAAA,CAAM,SAAA,KAAc,MAAA,IAAa,OAAO,KAAA,CAAM,SAAA,KAAc,QAAA,CAAA,KAC5D,KAAA,CAAM,cAAc,MAAA,IAAa,OAAO,KAAA,CAAM,SAAA,KAAc,cAC5D,KAAA,CAAM,SAAA,KAAc,UAAa,KAAA,CAAM,OAAA,CAAQ,MAAM,SAAS,CAAA,CAAA;AAEnE;AAEA,SAAS,uBAAuB,GAAA,EAAqC;AACnE,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AAE5C,EAAA,MAAM,QAAA,GAAW,GAAA;AAGjB,EAAA,IAAI,CAAC,QAAA,CAAS,OAAA,IAAW,OAAO,QAAA,CAAS,OAAA,KAAY,UAAU,OAAO,KAAA;AACtE,EAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AACzB,EAAA,IAAI,OAAO,OAAA,CAAQ,OAAA,KAAY,QAAA,EAAU,OAAO,KAAA;AAGhD,EAAA,IAAI,CAAC,OAAA,CAAQ,SAAA,EAAW,OAAO,KAAA;AAC/B,EAAA,IAAI,EAAE,OAAA,CAAQ,SAAA,YAAqB,UAAA,CAAA,EAAa;AAE9C,IAAA,MAAM,QAAQ,OAAA,CAAQ,SAAA;AACtB,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAE7B,MAAA,MAAM,IAAA,GAAO,OAAO,IAAA,CAAK,KAAK,EAAE,MAAA,CAAO,CAAA,GAAA,KAAO,CAAC,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,OAAO,CAAC,CAAA,GAAI,MAAA,CAAO,CAAC,CAAC,CAAA;AACvG,MAAA,IAAI,IAAA,CAAK,WAAW,EAAA,EAAI;AACtB,QAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,CAAI,CAAA,GAAA,KAAO,OAAO,KAAA,CAAM,GAAG,CAAC,CAAC,CAAA;AAChD,QAAA,IAAI,KAAA,CAAM,KAAA,CAAM,CAAA,CAAA,KAAK,OAAO,CAAA,KAAM,YAAY,CAAA,IAAK,CAAA,IAAK,CAAA,IAAK,GAAG,CAAA,EAAG;AACjE,UAAA,OAAA,CAAQ,SAAA,GAAY,IAAI,UAAA,CAAW,KAAK,CAAA;AAAA,QAC1C,CAAA,MAAO;AACL,UAAA,OAAO,KAAA;AAAA,QACT;AAAA,MACF,CAAA,MAAO;AACL,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF,CAAA,MAAO;AACL,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,QAAA,CAAS,aAAA,EAAe,OAAO,KAAA;AACpC,EAAA,IAAI,EAAE,QAAA,CAAS,aAAA,YAAyB,UAAA,CAAA,EAAa;AACnD,IAAA,MAAM,QAAQ,QAAA,CAAS,aAAA;AACvB,IAAA,IAAI,MAAM,IAAA,KAAS,QAAA,IAAY,MAAM,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA,EAAG;AACxD,MAAA,QAAA,CAAS,aAAA,GAAgB,IAAI,UAAA,CAAW,KAAA,CAAM,IAAgB,CAAA;AAAA,IAChE,CAAA,MAAO;AACL,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,QAAA,CAAS,SAAA,EAAW,OAAO,KAAA;AAChC,EAAA,IAAI,EAAE,QAAA,CAAS,SAAA,YAAqB,UAAA,CAAA,EAAa;AAC/C,IAAA,MAAM,SAAS,QAAA,CAAS,SAAA;AACxB,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,MAAM,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAA,EAAG;AAC1D,MAAA,QAAA,CAAS,SAAA,GAAY,IAAI,UAAA,CAAW,MAAA,CAAO,IAAgB,CAAA;AAAA,IAC7D,CAAA,MAAO;AACL,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAA,IAAW,OAAO,QAAA,CAAS,YAAY,QAAA,EAAU;AAC7D,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AAGzB,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,KAAY,IAAA,EAAM;AACnD,IAAA,MAAM,UAAA,GAAa,OAAA;AACnB,IAAA,IAAI,CAAC,UAAA,CAAW,OAAA,IAAW,QAAA,CAAS,yBAAyB,UAAA,EAAY;AACvE,MAAA,IAAI;AACF,QAAA,MAAM,oBAAoB,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,SAAS,aAAa,CAAA;AACzE,QAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,KAAA,CAAM,IAAI,CAAA;AAC1C,QAAA,IAAI,KAAA,CAAM,UAAU,CAAA,EAAG;AACrB,UAAA,MAAM,OAAA,GAAU,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,EAAK;AAC9B,UAAA,IAAI,OAAA,IAAW,sBAAA,CAAuB,IAAA,CAAK,OAAO,CAAA,EAAG;AACnD,YAAA,UAAA,CAAW,OAAA,GAAU,OAAA;AAAA,UACvB;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,mBAAA,CAAoB,QAAA,CAAS,OAAO,CAAA,EAAG;AAC1C,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;AAEA,eAAsB,iBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,EAAE,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AACpC,EAAA,IAAI,OAAO,QAAA,EAAU;AACnB,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AAGA,EAAA,IAAI,CAAC,KAAA,CAAM,iBAAA,IAAqB,CAAC,sBAAA,CAAuB,KAAA,CAAM,iBAAiB,CAAA,EAAG;AAChF,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,WAAW,KAAA,CAAM,iBAAA;AAEvB,IAAA,MAAM,oBAAoB,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,SAAS,aAAa,CAAA;AACzE,IAAA,MAAM,aAAA,GAAgB,iBAAiB,iBAAiB,CAAA;AAExD,IAAA,IAAI,CAAC,aAAA,EAAe;AAClB,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,IAAI,CAAC,mBAAA,CAAoB,aAAA,EAAe,QAAA,CAAS,OAAoB,CAAA,EAAG;AACtE,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,oBAAA,GAAuB,kBAAkB,aAAa,CAAA;AAC5D,IAAA,IAAI,yBAAyB,iBAAA,EAAmB;AAC9C,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,MAAA;AAAA,MAClC,QAAA,CAAS,aAAA;AAAA,MACT,QAAA,CAAS,SAAA;AAAA,MACT,SAAS,OAAA,CAAQ;AAAA,KACnB;AAEA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AACF;AAIA,SAAS,iBAAiB,OAAA,EAA2C;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA;AAGhC,IAAA,MAAM,MAAA,GAAS,YAAY,KAAK,CAAA;AAChC,IAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AAEpB,IAAA,MAAM,MAAA,GAA4B,EAAE,GAAG,MAAA,EAAO;AAE9C,IAAA,IAAI,SAAA,GAAY,CAAA;AAGhB,IAAA,MAAM,eAAA,GAAkB,cAAA,CAAe,KAAA,EAAO,SAAS,CAAA;AACvD,IAAA,IAAI,eAAA,CAAgB,cAAc,KAAA,CAAA,EAAW;AAC3C,MAAA,MAAA,CAAO,YAAY,eAAA,CAAgB,SAAA;AACnC,MAAA,SAAA,GAAY,eAAA,CAAgB,SAAA;AAAA,IAC9B;AAGA,IAAA,MAAM,cAAA,GAAiB,mBAAA,CAAoB,KAAA,EAAO,SAAS,CAAA;AAC3D,IAAA,MAAA,CAAO,MAAA,CAAO,QAAQ,cAAc,CAAA;AAEpC,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,YAAY,KAAA,EAA6D;AAEhF,EAAA,MAAM,WAAA,GAAc,KAAA,CAAM,CAAC,CAAA,EAAG,MAAM,uDAAuD,CAAA;AAC3F,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AAEzB,EAAA,MAAM,MAAA,GAAS,YAAY,CAAC,CAAA;AAG5B,EAAA,MAAM,OAAA,GAAU,MAAM,CAAC,CAAA;AACvB,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,uBAAuB,IAAA,CAAK,OAAO,GAAG,OAAO,IAAA;AAE9D,EAAA,OAAO,EAAE,QAAQ,OAAA,EAAQ;AAC3B;AAEA,SAAS,cAAA,CAAe,OAAiB,UAAA,EAA+D;AACtG,EAAA,IAAI,SAAA,GAAY,UAAA;AAGhB,EAAA,IAAI,KAAA,CAAM,SAAS,CAAA,KAAM,EAAA,IAAM,MAAM,SAAA,GAAY,CAAC,CAAA,IAAK,CAAC,MAAM,SAAA,GAAY,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,EAAG;AAC1F,IAAA,SAAA,EAAA;AACA,IAAA,MAAM,SAAA,GAAY,MAAM,SAAS,CAAA;AACjC,IAAA,SAAA,EAAA;AAGA,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,KAAM,EAAA,EAAI;AAC3B,MAAA,SAAA,EAAA;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,SAAA,EAAW,SAAA,EAAW,SAAA,EAAU;AAAA,EAC3C;AAEA,EAAA,OAAO,EAAE,WAAW,SAAA,EAAU;AAChC;AAEA,SAAS,mBAAA,CAAoB,OAAiB,UAAA,EAAgD;AAC5F,EAAA,MAAM,SAAqC,EAAC;AAG5C,EAAA,MAAM,YAAA,GAGD;AAAA,IACH,EAAE,MAAA,EAAQ,OAAA,EAAS,GAAA,EAAK,KAAA,EAAM;AAAA,IAC9B,EAAE,MAAA,EAAQ,WAAA,EAAa,GAAA,EAAK,SAAA,EAAU;AAAA,IACtC,EAAE,MAAA,EAAQ,YAAA,EAAc,GAAA,EAAK,SAAA,EAAU;AAAA,IACvC,EAAE,MAAA,EAAQ,SAAA,EAAW,GAAA,EAAK,OAAA,EAAQ;AAAA,IAClC,EAAE,MAAA,EAAQ,aAAA,EAAe,GAAA,EAAK,UAAA,EAAW;AAAA,IACzC,EAAE,MAAA,EAAQ,mBAAA,EAAqB,GAAA,EAAK,gBAAA,EAAiB;AAAA,IACrD,EAAE,MAAA,EAAQ,cAAA,EAAgB,GAAA,EAAK,WAAA,EAAY;AAAA,IAC3C,EAAE,MAAA,EAAQ,cAAA,EAAgB,GAAA,EAAK,WAAA;AAAY,GAC7C;AAEA,EAAA,IAAI,SAAA,GAAY,UAAA;AAEhB,EAAA,OAAO,SAAA,GAAY,MAAM,MAAA,EAAQ;AAC/B,IAAA,MAAM,IAAA,GAAO,MAAM,SAAS,CAAA;AAC5B,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,SAAA,EAAA;AACA,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,YAAY,CAAA,EAAG;AACjC,MAAA,MAAM,SAAA,GAAY,cAAA,CAAe,KAAA,EAAO,SAAA,GAAY,CAAC,CAAA;AACrD,MAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,QAAA,MAAA,CAAO,SAAA,GAAY,SAAA;AACnB,QAAA,SAAA,IAAa,UAAU,MAAA,GAAS,CAAA;AAChC,QAAA;AAAA,MACF;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,EAAE,MAAA,EAAQ,GAAA,EAAI,IAAK,YAAA,EAAc;AAC1C,MAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,MAAM,CAAA;AAC1C,QAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAEd,QAAA;AAAA,MACF;AAAA,IACF;AAMA,IAAA,SAAA,EAAA;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,cAAA,CAAe,OAAiB,UAAA,EAA8B;AACrE,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,IAAI,SAAA,GAAY,UAAA;AAEhB,EAAA,OAAO,SAAA,GAAY,MAAM,MAAA,IAAU,KAAA,CAAM,SAAS,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,EAAG;AACrE,IAAA,SAAA,CAAU,KAAK,KAAA,CAAM,SAAS,CAAA,CAAE,SAAA,CAAU,CAAC,CAAC,CAAA;AAC5C,IAAA,SAAA,EAAA;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAGA,SAAS,mBAAA,CAAoB,QAA2B,KAAA,EAA2B;AAEjF,EAAA,IAAI,OAAO,MAAA,KAAW,KAAA,CAAM,UAAU,MAAA,CAAO,OAAA,KAAY,MAAM,OAAA,EAAS;AACtE,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,MAAM,gBAAA,GAID;AAAA,IACH,EAAE,QAAA,EAAU,WAAA,EAAa,SAAA,EAAW,WAAA,EAAY;AAAA,IAChD,EAAE,QAAA,EAAU,KAAA,EAAO,SAAA,EAAW,KAAA,EAAM;AAAA,IACpC,EAAE,QAAA,EAAU,SAAA,EAAW,SAAA,EAAW,SAAA,EAAU;AAAA,IAC5C,EAAE,QAAA,EAAU,SAAA,EAAW,SAAA,EAAW,SAAA,EAAU;AAAA,IAC5C,EAAE,QAAA,EAAU,OAAA,EAAS,SAAA,EAAW,OAAA,EAAQ;AAAA,IACxC,EAAE,QAAA,EAAU,UAAA,EAAY,SAAA,EAAW,UAAA,EAAW;AAAA,IAC9C,EAAE,QAAA,EAAU,gBAAA,EAAkB,SAAA,EAAW,gBAAA,EAAiB;AAAA,IAC1D,EAAE,QAAA,EAAU,WAAA,EAAa,SAAA,EAAW,WAAA,EAAY;AAAA,IAChD,EAAE,QAAA,EAAU,WAAA,EAAa,SAAA,EAAW,WAAA,EAAY;AAAA,IAChD;AAAA,MACE,QAAA,EAAU,WAAA;AAAA,MACV,SAAA,EAAW,WAAA;AAAA,MACX,SAAA,EAAW,CAAC,UAAA,EAAY,WAAA,KAAgB;AACtC,QAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,UAAU,KAAK,CAAC,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC7D,UAAA,OAAO,KAAA;AAAA,QACT;AACA,QAAA,OAAO,UAAA,CAAW,MAAA,KAAW,WAAA,CAAY,MAAA,IAClC,UAAA,CAAW,KAAA,CAAM,CAAC,IAAA,EAAM,KAAA,KAAU,IAAA,KAAS,WAAA,CAAY,KAAK,CAAC,CAAA;AAAA,MACtE;AAAA;AACF,GACF;AAGA,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,SAAA,EAAW,SAAA,MAAe,gBAAA,EAAkB;AACjE,IAAA,MAAM,UAAA,GAAa,MAAM,QAAQ,CAAA;AACjC,IAAA,MAAM,WAAA,GAAc,OAAO,SAAS,CAAA;AAEpC,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,IAAI,CAAC,SAAA,CAAU,UAAA,EAAY,WAAW,CAAA,EAAG;AACvC,UAAA,OAAO,KAAA;AAAA,QACT;AAAA,MACF,CAAA,MAAA,IAAW,eAAe,WAAA,EAAa;AACrC,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAGA,EAAA,OAAO,mBAAmB,MAAM,CAAA;AAClC;AAGA,SAAS,mBAAmB,MAAA,EAAoC;AAC9D,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAGrB,EAAA,IAAI,OAAO,QAAA,EAAU;AACnB,IAAA,MAAM,QAAA,GAAW,IAAI,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA;AACzC,IAAA,MAAM,SAAA,GAAY,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AACjC,IAAA,MAAM,WAAW,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,OAAA,KAAY,GAAG,CAAA;AAClD,IAAA,IAAI,WAAW,SAAA,EAAW;AACxB,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,cAAA,EAAgB;AACzB,IAAA,MAAM,cAAA,GAAiB,IAAI,IAAA,CAAK,MAAA,CAAO,cAAc,CAAA;AACrD,IAAA,IAAI,cAAA,CAAe,OAAA,EAAQ,IAAK,GAAA,EAAK;AACnC,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,SAAA,EAAW;AACpB,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA;AAC3C,IAAA,IAAI,SAAA,CAAU,OAAA,EAAQ,GAAI,GAAA,EAAK;AAC7B,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAIA,SAAS,kBAAkB,KAAA,EAAkC;AAC3D,EAAA,IAAI,OAAA,GAAU,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA;AAAA,CAAA;AAC7B,EAAA,OAAA,IAAW,CAAA,EAAG,MAAM,OAAO,CAAA,CAAA;AAE3B,EAAA,IAAI,MAAM,SAAA,EAAW;AACnB,IAAA,OAAA,IAAW;;AAAA,EAAO,MAAM,SAAS,CAAA,CAAA;AAAA,EACnC;AAEA,EAAA,MAAM,MAAA,GAAS,gBAAgB,KAAK,CAAA;AAEpC,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,OAAA,IAAW;;AAAA,EAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,gBAAgB,KAAA,EAAoC;AAC3D,EAAA,MAAM,SAAmB,EAAC;AAG1B,EAAA,MAAM,aAAA,GAID;AAAA,IACH,EAAE,GAAA,EAAK,KAAA,EAAO,MAAA,EAAQ,OAAA,EAAQ;AAAA,IAC9B,EAAE,GAAA,EAAK,SAAA,EAAW,MAAA,EAAQ,WAAA,EAAY;AAAA,IACtC,EAAE,GAAA,EAAK,SAAA,EAAW,MAAA,EAAQ,YAAA,EAAa;AAAA,IACvC,EAAE,GAAA,EAAK,OAAA,EAAS,MAAA,EAAQ,SAAA,EAAU;AAAA,IAClC,EAAE,GAAA,EAAK,UAAA,EAAY,MAAA,EAAQ,aAAA,EAAc;AAAA,IACzC,EAAE,GAAA,EAAK,gBAAA,EAAkB,MAAA,EAAQ,mBAAA,EAAoB;AAAA,IACrD,EAAE,GAAA,EAAK,WAAA,EAAa,MAAA,EAAQ,cAAA,EAAe;AAAA,IAC3C,EAAE,GAAA,EAAK,WAAA,EAAa,MAAA,EAAQ,cAAA,EAAe;AAAA,IAC3C;AAAA,MACE,GAAA,EAAK,WAAA;AAAA,MACL,MAAA,EAAQ,YAAA;AAAA,MACR,SAAA,EAAW,CAAC,KAAA,KAAU;AACpB,QAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AAC5C,UAAA,OAAO,CAAC,cAAc,GAAG,KAAA,CAAM,IAAI,CAAA,QAAA,KAAY,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAE,CAAC,CAAA;AAAA,QACjE;AACA,QAAA,OAAO,EAAC;AAAA,MACV;AAAA;AACF,GACF;AAEA,EAAA,KAAA,MAAW,EAAE,GAAA,EAAK,MAAA,EAAQ,SAAA,MAAe,aAAA,EAAe;AACtD,IAAA,MAAM,KAAA,GAAQ,MAAM,GAAG,CAAA;AACvB,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,MAAM,SAAA,GAAY,UAAU,KAAK,CAAA;AACjC,QAAA,MAAA,CAAO,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA,MAC1B,CAAA,MAAA,IAAW,OAAO,KAAA,KAAU,QAAA,EAAU;AACpC,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,EAAG,KAAK,CAAA,CAAE,CAAA;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT","file":"solana-ZARDAF6O.js","sourcesContent":["import nacl from \"tweetnacl\";\nimport { ProofStatus, SignatureProof, type SIWXInput, type SolanaMetadata } from \"@notabene/javascript-sdk\";\nimport { base64, base58 } from \"@scure/base\";\n\ninterface ParsedSIWSMessage {\n domain: string;\n address: string;\n statement?: string;\n uri?: string;\n version?: string;\n chainId?: string;\n nonce?: string;\n issuedAt?: string;\n expirationTime?: string;\n notBefore?: string;\n requestId?: string;\n resources?: string[];\n}\n\n\n\n/**\n * Verifies a Solana signature proof.\n * \n * This function can verify two types of Solana signatures:\n * 1. Standard Solana signatures\n * \n * @param proof - The signature proof containing the address, attestation, and signature\n * @returns Promise that resolves to a SignatureProof with updated status (VERIFIED or FAILED)\n * \n * @example\n * // Standard Solana signature verification\n * const result = await verifySolanaSignature(proof);\n * \n */\nexport async function verifySolanaSignature(\n proof: SignatureProof,\n): Promise<SignatureProof> {\n const [ns, , address] = proof.address.split(/:/);\n if (ns !== \"solana\") return { ...proof, status: ProofStatus.FAILED };\n\n try {\n const publicKey = base58.decode(address);\n const messageBytes = new TextEncoder().encode(proof.attestation);\n const signatureBytes = base64.decode(proof.proof);\n const verified = nacl.sign.detached.verify(\n messageBytes,\n signatureBytes,\n publicKey,\n );\n\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n } catch {\n return { ...proof, status: ProofStatus.FAILED };\n }\n}\n\nfunction isSolanaSignInInput(obj: unknown): obj is SIWXInput {\n if (!obj || typeof obj !== 'object') return false;\n \n const input = obj as Record<string, unknown>;\n \n // Check for required properties\n return (\n typeof input.domain === 'string' &&\n typeof input.address === 'string' &&\n (input.statement === undefined || typeof input.statement === 'string') &&\n (input.uri === undefined || typeof input.uri === 'string') &&\n (input.version === undefined || typeof input.version === 'string') &&\n (input.chainId === undefined || typeof input.chainId === 'string') &&\n (input.nonce === undefined || typeof input.nonce === 'string') &&\n (input.issuedAt === undefined || typeof input.issuedAt === 'string') &&\n (input.expirationTime === undefined || typeof input.expirationTime === 'string') &&\n (input.notBefore === undefined || typeof input.notBefore === 'string') &&\n (input.requestId === undefined || typeof input.requestId === 'string') &&\n (input.resources === undefined || Array.isArray(input.resources))\n );\n}\n\nfunction isSolanaSignInMetadata(obj: unknown): obj is SolanaMetadata {\n if (!obj || typeof obj !== 'object') return false;\n \n const metadata = obj as Record<string, unknown>;\n \n // Check account object\n if (!metadata.account || typeof metadata.account !== 'object') return false;\n const account = metadata.account as Record<string, unknown>;\n if (typeof account.address !== 'string') return false;\n \n // Handle publicKey - could be Uint8Array or serialized object with numeric keys\n if (!account.publicKey) return false;\n if (!(account.publicKey instanceof Uint8Array)) {\n // Try to convert from serialized format\n const pkObj = account.publicKey as Record<string, unknown>;\n if (typeof pkObj === 'object') {\n // Convert object with numeric keys to Uint8Array\n const keys = Object.keys(pkObj).filter(key => !isNaN(Number(key))).sort((a, b) => Number(a) - Number(b));\n if (keys.length === 32) { // Solana public keys are 32 bytes\n const bytes = keys.map(key => Number(pkObj[key]));\n if (bytes.every(b => typeof b === 'number' && b >= 0 && b <= 255)) {\n account.publicKey = new Uint8Array(bytes);\n } else {\n return false;\n }\n } else {\n return false;\n }\n } else {\n return false;\n }\n }\n \n // Handle signedMessage - could be Uint8Array or Buffer-like object\n if (!metadata.signedMessage) return false;\n if (!(metadata.signedMessage instanceof Uint8Array)) {\n const smObj = metadata.signedMessage as Record<string, unknown>;\n if (smObj.type === 'Buffer' && Array.isArray(smObj.data)) {\n metadata.signedMessage = new Uint8Array(smObj.data as number[]);\n } else {\n return false;\n }\n }\n \n // Handle signature - could be Uint8Array or Buffer-like object\n if (!metadata.signature) return false;\n if (!(metadata.signature instanceof Uint8Array)) {\n const sigObj = metadata.signature as Record<string, unknown>;\n if (sigObj.type === 'Buffer' && Array.isArray(sigObj.data)) {\n metadata.signature = new Uint8Array(sigObj.data as number[]);\n } else {\n return false;\n }\n }\n \n // Check message field contains valid SolanaSignInInput\n if (!metadata.message || typeof metadata.message !== 'object') {\n return false;\n }\n \n const message = metadata.message as unknown;\n \n // If address is missing from message, try to extract it from signedMessage\n if (typeof message === 'object' && message !== null) {\n const messageObj = message as Record<string, unknown>;\n if (!messageObj.address && metadata.signedMessage instanceof Uint8Array) {\n try {\n const signedMessageText = new TextDecoder().decode(metadata.signedMessage);\n const lines = signedMessageText.split('\\n');\n if (lines.length >= 2) {\n const address = lines[1].trim();\n if (address && /^[a-zA-Z0-9]{32,44}$/.test(address)) {\n messageObj.address = address;\n }\n }\n } catch {\n // Ignore errors in address extraction\n }\n }\n }\n \n if (!isSolanaSignInInput(metadata.message)) {\n return false;\n }\n \n return true;\n}\n\nexport async function verifySolanaSIWS(\n proof: SignatureProof,\n): Promise<SignatureProof> {\n const [ns] = proof.address.split(/:/);\n if (ns !== \"solana\") {\n return { ...proof, status: ProofStatus.FAILED };\n }\n \n // Validate that metadata conforms to SolanaSignInMetadata\n if (!proof.chainSpecificData || !isSolanaSignInMetadata(proof.chainSpecificData)) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n try {\n // Now we can safely cast to SolanaMetadata since we validated it\n const metadata = proof.chainSpecificData as SolanaMetadata;\n \n const signedMessageText = new TextDecoder().decode(metadata.signedMessage);\n const parsedMessage = parseSIWSMessage(signedMessageText);\n \n if (!parsedMessage) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n // Validate the parsed message against the input\n if (!validateSIWSMessage(parsedMessage, metadata.message as SIWXInput)) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n // Reconstruct the message to ensure it matches the signed message\n const reconstructedMessage = createSIWSMessage(parsedMessage);\n if (reconstructedMessage !== signedMessageText) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n // Verify the signature against the message\n const verified = nacl.sign.detached.verify(\n metadata.signedMessage,\n metadata.signature,\n metadata.account.publicKey as Uint8Array\n );\n \n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n } catch {\n return { ...proof, status: ProofStatus.FAILED };\n }\n}\n\n// Parse SIWS message according to ABNF format\n// https://github.com/phantom/sign-in-with-solana/blob/e4060d2916469116d5080a712feaf81ea1db4f65/README.md#message-construction\nfunction parseSIWSMessage(message: string): ParsedSIWSMessage | null {\n try {\n const lines = message.split('\\n');\n \n // Parse header (domain and address)\n const header = parseHeader(lines);\n if (!header) return null;\n \n const result: ParsedSIWSMessage = { ...header };\n \n let lineIndex = 2;\n \n // Parse statement if present\n const statementResult = parseStatement(lines, lineIndex);\n if (statementResult.statement !== undefined) {\n result.statement = statementResult.statement;\n lineIndex = statementResult.nextIndex;\n }\n \n // Parse advanced fields\n const advancedFields = parseAdvancedFields(lines, lineIndex);\n Object.assign(result, advancedFields);\n \n return result;\n } catch {\n return null;\n }\n}\n\nfunction parseHeader(lines: string[]): { domain: string; address: string } | null {\n // First line: domain + \" wants you to sign in with your Solana account:\"\n const domainMatch = lines[0]?.match(/^(.+) wants you to sign in with your Solana account:$/);\n if (!domainMatch) return null;\n \n const domain = domainMatch[1];\n \n // Second line: address\n const address = lines[1];\n if (!address || !/^[a-zA-Z0-9]{32,44}$/.test(address)) return null;\n \n return { domain, address };\n}\n\nfunction parseStatement(lines: string[], startIndex: number): { statement?: string; nextIndex: number } {\n let lineIndex = startIndex;\n \n // Check for statement (after empty line)\n if (lines[lineIndex] === '' && lines[lineIndex + 1] && !lines[lineIndex + 1].includes(':')) {\n lineIndex++; // Skip empty line\n const statement = lines[lineIndex];\n lineIndex++;\n \n // Skip another empty line after statement\n if (lines[lineIndex] === '') {\n lineIndex++;\n }\n \n return { statement, nextIndex: lineIndex };\n }\n \n return { nextIndex: lineIndex };\n}\n\nfunction parseAdvancedFields(lines: string[], startIndex: number): Partial<ParsedSIWSMessage> {\n const result: Partial<ParsedSIWSMessage> = {};\n \n // Define field parsers for string fields only\n const fieldParsers: Array<{\n prefix: string;\n key: keyof Omit<ParsedSIWSMessage, 'resources'>;\n }> = [\n { prefix: 'URI: ', key: 'uri' },\n { prefix: 'Version: ', key: 'version' },\n { prefix: 'Chain ID: ', key: 'chainId' },\n { prefix: 'Nonce: ', key: 'nonce' },\n { prefix: 'Issued At: ', key: 'issuedAt' },\n { prefix: 'Expiration Time: ', key: 'expirationTime' },\n { prefix: 'Not Before: ', key: 'notBefore' },\n { prefix: 'Request ID: ', key: 'requestId' }\n ];\n \n let lineIndex = startIndex;\n \n while (lineIndex < lines.length) {\n const line = lines[lineIndex];\n if (!line) {\n lineIndex++;\n continue;\n }\n \n // Check for resources (special case)\n if (line.startsWith('Resources:')) {\n const resources = parseResources(lines, lineIndex + 1);\n if (resources.length > 0) {\n result.resources = resources;\n lineIndex += resources.length + 1; // +1 for the \"Resources:\" line\n continue;\n }\n }\n \n // Check for other fields\n let fieldFound = false;\n for (const { prefix, key } of fieldParsers) {\n if (line.startsWith(prefix)) {\n const value = line.substring(prefix.length);\n result[key] = value;\n fieldFound = true;\n break;\n }\n }\n \n if (!fieldFound) {\n // Unknown field, skip it\n }\n \n lineIndex++;\n }\n \n return result;\n}\n\nfunction parseResources(lines: string[], startIndex: number): string[] {\n const resources: string[] = [];\n let lineIndex = startIndex;\n \n while (lineIndex < lines.length && lines[lineIndex]?.startsWith('- ')) {\n resources.push(lines[lineIndex].substring(2));\n lineIndex++;\n }\n \n return resources;\n}\n\n// Validate parsed SIWS message against input\nfunction validateSIWSMessage(parsed: ParsedSIWSMessage, input: SIWXInput): boolean {\n // Required fields validation\n if (parsed.domain !== input.domain || parsed.address !== input.address) {\n return false;\n }\n \n // Define validation rules for optional fields\n const fieldValidations: Array<{\n inputKey: keyof SIWXInput;\n parsedKey: keyof ParsedSIWSMessage;\n validator?: (inputValue: unknown, parsedValue: unknown) => boolean;\n }> = [\n { inputKey: 'statement', parsedKey: 'statement' },\n { inputKey: 'uri', parsedKey: 'uri' },\n { inputKey: 'version', parsedKey: 'version' },\n { inputKey: 'chainId', parsedKey: 'chainId' },\n { inputKey: 'nonce', parsedKey: 'nonce' },\n { inputKey: 'issuedAt', parsedKey: 'issuedAt' },\n { inputKey: 'expirationTime', parsedKey: 'expirationTime' },\n { inputKey: 'notBefore', parsedKey: 'notBefore' },\n { inputKey: 'requestId', parsedKey: 'requestId' },\n {\n inputKey: 'resources',\n parsedKey: 'resources',\n validator: (inputValue, parsedValue) => {\n if (!Array.isArray(inputValue) || !Array.isArray(parsedValue)) {\n return false;\n }\n return inputValue.length === parsedValue.length && \n inputValue.every((item, index) => item === parsedValue[index]);\n }\n }\n ];\n \n // Validate optional fields\n for (const { inputKey, parsedKey, validator } of fieldValidations) {\n const inputValue = input[inputKey];\n const parsedValue = parsed[parsedKey];\n \n if (inputValue !== undefined) {\n if (validator) {\n if (!validator(inputValue, parsedValue)) {\n return false;\n }\n } else if (inputValue !== parsedValue) {\n return false;\n }\n }\n }\n \n // Validate timestamps\n return validateTimestamps(parsed);\n}\n\n// Separate timestamp validation for better testability and clarity\nfunction validateTimestamps(parsed: ParsedSIWSMessage): boolean {\n const now = Date.now();\n \n // Validate issuedAt (allow 24 hour threshold for testing)\n if (parsed.issuedAt) {\n const issuedAt = new Date(parsed.issuedAt);\n const threshold = 24 * 60 * 60 * 1000; // 24 hours in milliseconds\n const timeDiff = Math.abs(issuedAt.getTime() - now);\n if (timeDiff > threshold) {\n return false;\n }\n }\n \n // Validate expirationTime\n if (parsed.expirationTime) {\n const expirationTime = new Date(parsed.expirationTime);\n if (expirationTime.getTime() <= now) {\n return false; // Message has expired\n }\n }\n \n // Validate notBefore\n if (parsed.notBefore) {\n const notBefore = new Date(parsed.notBefore);\n if (notBefore.getTime() > now) {\n return false; // Message not yet valid\n }\n }\n \n return true;\n}\n\n// Create SIWS message string according to ABNF format\n// https://github.com/phantom/sign-in-with-solana/blob/e4060d2916469116d5080a712feaf81ea1db4f65/README.md#abnf-message-format\nfunction createSIWSMessage(input: ParsedSIWSMessage): string {\n let message = `${input.domain} wants you to sign in with your Solana account:\\n`;\n message += `${input.address}`;\n\n if (input.statement) {\n message += `\\n\\n${input.statement}`;\n }\n\n const fields = buildFieldLines(input);\n \n if (fields.length) {\n message += `\\n\\n${fields.join('\\n')}`;\n }\n\n return message;\n}\n\nfunction buildFieldLines(input: ParsedSIWSMessage): string[] {\n const fields: string[] = [];\n \n // Define field mappings\n const fieldMappings: Array<{\n key: keyof ParsedSIWSMessage;\n prefix: string;\n formatter?: (value: unknown) => string[];\n }> = [\n { key: 'uri', prefix: 'URI: ' },\n { key: 'version', prefix: 'Version: ' },\n { key: 'chainId', prefix: 'Chain ID: ' },\n { key: 'nonce', prefix: 'Nonce: ' },\n { key: 'issuedAt', prefix: 'Issued At: ' },\n { key: 'expirationTime', prefix: 'Expiration Time: ' },\n { key: 'notBefore', prefix: 'Not Before: ' },\n { key: 'requestId', prefix: 'Request ID: ' },\n {\n key: 'resources',\n prefix: 'Resources:',\n formatter: (value) => {\n if (Array.isArray(value) && value.length > 0) {\n return ['Resources:', ...value.map(resource => `- ${resource}`)];\n }\n return [];\n }\n }\n ];\n \n for (const { key, prefix, formatter } of fieldMappings) {\n const value = input[key];\n if (value !== undefined) {\n if (formatter) {\n const formatted = formatter(value);\n fields.push(...formatted);\n } else if (typeof value === 'string') {\n fields.push(`${prefix}${value}`);\n }\n }\n }\n \n return fields;\n}\n"]}
@@ -1,5 +1,4 @@
1
1
  import { Buffer } from 'buffer';
2
- import './chunk-E3V5ATTC.js';
3
2
  import { ProofStatus } from '@notabene/javascript-sdk';
4
3
  import { Hex, Signature, Secp256k1, Hash, PublicKey, Bytes } from 'ox';
5
4
  import { base58 } from '@scure/base';
@@ -49,5 +48,5 @@ function getSignPayload(data) {
49
48
  }
50
49
 
51
50
  export { encode, getSignPayload, verifyPersonalSignTIP191, verifyTIP191 };
52
- //# sourceMappingURL=tron-OBLPB2LN.js.map
53
- //# sourceMappingURL=tron-OBLPB2LN.js.map
51
+ //# sourceMappingURL=tron-FI2B6DRS.js.map
52
+ //# sourceMappingURL=tron-FI2B6DRS.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/tron.ts"],"names":[],"mappings":";;;;;;AAIO,SAAS,YAAA,CACd,OAAA,EACA,OAAA,EACA,KAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,CAAI,UAAA,CAAW,OAAO,CAAC,CAAA;AACtD,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AACzC,IAAA,MAAM,YAAY,SAAA,CAAU,gBAAA,CAAiB,EAAE,OAAA,EAAS,WAAW,CAAA;AACnE,IAAA,MAAM,GAAA,GAAe,OAAO,IAAA,CAAK,SAAA;AAAA,MAC/B,KAAK,SAAA,CAAU,KAAA,CAAM,SAAS,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,KAC1C,CAAE,SAAA,CAAU,EAAE,CAAC,CAAA,CAAA;AACf,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA,CAAE,KAAA,CAAM,GAAG,CAAC,CAAA;AACrE,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,MAAA,CAAO,KAAA,EAAO,QAAQ,CAAA;AAC5C,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACjC,IAAA,OAAO,GAAA,KAAQ,OAAA;AAAA,EAEjB,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,yBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,QAAQ,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEjE,EAAA,MAAM,QAAA,GAAW,YAAA;AAAA,IACf,OAAA;AAAA,IACA,KAAA,CAAM,WAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,GACxD;AACF;AAEO,SAAS,OAAO,IAAA,EAAsC;AAC3D,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA;AAC7B,EAAA,OAAO,GAAA,CAAI,MAAA;AAAA;AAAA,IAET,MAAA;AAAA,IACA,IAAI,UAAA,CAAW,wBAAA,GAA2B,GAAA,CAAI,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IAC3D;AAAA,GACF;AACF;AACO,SAAS,eAAe,IAAA,EAAsC;AACnE,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,IAAI,CAAC,CAAA;AACpC","file":"tron-FI2B6DRS.js","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Secp256k1, Hex, Signature, Hash, Bytes, PublicKey } from \"ox\";\nimport { base58 } from \"@scure/base\";\n\nexport function verifyTIP191(\n address: string,\n message: string,\n proof: Hex.Hex,\n): boolean {\n try {\n const payload = getSignPayload(Hex.fromString(message));\n const signature = Signature.fromHex(proof);\n const publicKey = Secp256k1.recoverPublicKey({ payload, signature });\n const hex: Hex.Hex = `0x41${Hash.keccak256(\n `0x${PublicKey.toHex(publicKey).slice(4)}`,\n ).substring(26)}`;\n const bytes = Bytes.from(hex);\n const checksum = Bytes.from(Hash.sha256(Hash.sha256(hex))).slice(0, 4);\n const checked = Bytes.concat(bytes, checksum);\n const b58 = base58.encode(checked);\n return b58 === address;\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n } catch (error) {\n return false;\n }\n}\n\nexport async function verifyPersonalSignTIP191(\n proof: SignatureProof,\n): Promise<SignatureProof> {\n const [ns, , address] = proof.address.split(/:/);\n if (ns !== \"tron\") return { ...proof, status: ProofStatus.FAILED };\n\n const verified = verifyTIP191(\n address as Hex.Hex,\n proof.attestation,\n proof.proof as Hex.Hex,\n );\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n}\n\nexport function encode(data: Hex.Hex | Bytes.Bytes): Hex.Hex {\n const message = Hex.from(data);\n return Hex.concat(\n // Personal Sign Format: `0x19 ‖ \"Ethereum Signed Message:\\n\" ‖ message.length ‖ message`\n \"0x19\",\n Hex.fromString(\"TRON Signed Message:\\n\" + Hex.size(message)),\n message,\n );\n}\nexport function getSignPayload(data: Hex.Hex | Bytes.Bytes): Hex.Hex {\n return Hash.keccak256(encode(data));\n}\n"]}
@@ -1,5 +1,4 @@
1
1
  import { Buffer } from 'buffer';
2
- import './chunk-E3V5ATTC.js';
3
2
  import { ProofStatus } from '@notabene/javascript-sdk';
4
3
  import { Keypair } from '@stellar/stellar-sdk';
5
4
 
@@ -22,5 +21,5 @@ function verifyStellarSignature(proof) {
22
21
  }
23
22
 
24
23
  export { verifyStellarSignature };
25
- //# sourceMappingURL=xlm-GX2QGFLI.js.map
26
- //# sourceMappingURL=xlm-GX2QGFLI.js.map
24
+ //# sourceMappingURL=xlm-TNRZ5CFC.js.map
25
+ //# sourceMappingURL=xlm-TNRZ5CFC.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/xlm.ts"],"names":[],"mappings":";;;;;AAGO,SAAS,uBACd,KAAA,EACgB;AAChB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,WAAW,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEpE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,aAAA,CAAc,OAAO,CAAA;AAC7C,IAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,aAAa,OAAO,CAAA;AAC5D,IAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,OAAO,QAAQ,CAAA;AAEzD,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,CAAO,aAAA,EAAe,eAAe,CAAA;AAE9D,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"xlm-TNRZ5CFC.js","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Keypair } from \"@stellar/stellar-sdk\";\n\nexport function verifyStellarSignature(\n proof: SignatureProof,\n): SignatureProof {\n const [ns, , address] = proof.address.split(/:/);\n if (ns !== \"stellar\") return { ...proof, status: ProofStatus.FAILED };\n\n try {\n const keypair = Keypair.fromPublicKey(address);\n const messageBuffer = Buffer.from(proof.attestation, \"utf-8\");\n const signatureBuffer = Buffer.from(proof.proof, \"base64\");\n\n const verified = keypair.verify(messageBuffer, signatureBuffer);\n\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n } catch {\n return { ...proof, status: ProofStatus.FAILED };\n }\n}\n"]}
@@ -0,0 +1,69 @@
1
+ import { Buffer } from 'buffer';
2
+ import { ProofStatus } from '@notabene/javascript-sdk';
3
+ import { Client } from 'xrpl';
4
+ import { verify } from 'ripple-keypairs';
5
+
6
+ if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
7
+ function verifyXRPL(message, publicKey, proof) {
8
+ return verify(Buffer.from(message).toString("hex"), proof, publicKey);
9
+ }
10
+ var xrplTestnetWs = [
11
+ "wss://s.altnet.rippletest.net:51233",
12
+ "wss://testnet.xrpl-labs.com/"
13
+ ];
14
+ var xrplMainnetWs = [
15
+ "wss://s1.ripple.com",
16
+ "wss://xrplcluster.com/",
17
+ // full node
18
+ "wss://s2.ripple.com/"
19
+ ];
20
+ async function getPublicKey(address, isTest) {
21
+ const servers = isTest ? xrplTestnetWs : xrplMainnetWs;
22
+ for (const server of servers) {
23
+ try {
24
+ const client = new Client(server);
25
+ await client.connect();
26
+ const response = await client.request({
27
+ command: "account_tx",
28
+ account: address,
29
+ binary: false,
30
+ limit: 2,
31
+ forward: false
32
+ });
33
+ await client.disconnect();
34
+ return getSigningPubkeyFromLatestTx(response.result?.transactions);
35
+ } catch (error) {
36
+ let errorMessage = "Connection to XRPL server failed";
37
+ if (error instanceof Error) {
38
+ errorMessage += `: ${error.message}`;
39
+ }
40
+ console.error(errorMessage);
41
+ }
42
+ }
43
+ }
44
+ function getSigningPubkeyFromLatestTx(latestTx) {
45
+ for (let i = 0; i < latestTx.length; i++) {
46
+ const signingPubKey = latestTx[i]?.tx_json?.SigningPubKey ?? "0x";
47
+ return signingPubKey;
48
+ }
49
+ throw new Error("No valid pubkey found in the latest transactions");
50
+ }
51
+ async function verifyPersonalSignXRPL(proof, publicKey, isTest) {
52
+ const [ns, , address] = proof.address.split(/:/);
53
+ if (ns !== "xrpl") return { ...proof, status: ProofStatus.FAILED };
54
+ if (!publicKey) {
55
+ publicKey = await getPublicKey(address, isTest);
56
+ }
57
+ if (!publicKey) {
58
+ return { ...proof, status: ProofStatus.FAILED };
59
+ }
60
+ const verified = verifyXRPL(proof.attestation, publicKey, proof.proof);
61
+ return {
62
+ ...proof,
63
+ status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
64
+ };
65
+ }
66
+
67
+ export { verifyPersonalSignXRPL, verifyXRPL, xrplMainnetWs, xrplTestnetWs };
68
+ //# sourceMappingURL=xrpl-52IBJ4EW.js.map
69
+ //# sourceMappingURL=xrpl-52IBJ4EW.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/xrpl.ts"],"names":[],"mappings":";;;;;;AAIO,SAAS,UAAA,CACd,OAAA,EACA,SAAA,EACA,KAAA,EACS;AACT,EAAA,OAAO,MAAA,CAAO,OAAO,IAAA,CAAK,OAAO,EAAE,QAAA,CAAS,KAAK,CAAA,EAAG,KAAA,EAAO,SAAS,CAAA;AACtE;AAEO,IAAM,aAAA,GAAgB;AAAA,EAC3B,qCAAA;AAAA,EACA;AACF;AAEO,IAAM,aAAA,GAAgB;AAAA,EAC3B,qBAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA;AACF;AAGA,eAAe,YAAA,CACb,SACA,MAAA,EAC6B;AAC7B,EAAA,MAAM,OAAA,GAAU,SAAS,aAAA,GAAgB,aAAA;AAEzC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,IAAI,MAAA,CAAO,MAAM,CAAA;AAChC,MAAA,MAAM,OAAO,OAAA,EAAQ;AAErB,MAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,OAAA,CAAQ;AAAA,QACpC,OAAA,EAAS,YAAA;AAAA,QACT,OAAA,EAAS,OAAA;AAAA,QACT,MAAA,EAAQ,KAAA;AAAA,QACR,KAAA,EAAO,CAAA;AAAA,QACP,OAAA,EAAS;AAAA,OACV,CAAA;AAED,MAAA,MAAM,OAAO,UAAA,EAAW;AACxB,MAAA,OAAO,4BAAA,CAA6B,QAAA,CAAS,MAAA,EAAQ,YAAY,CAAA;AAAA,IACnE,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,YAAA,GAAe,kCAAA;AACnB,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,YAAA,IAAgB,CAAA,EAAA,EAAK,MAAM,OAAO,CAAA,CAAA;AAAA,MACpC;AACA,MAAA,OAAA,CAAQ,MAAM,YAAY,CAAA;AAAA,IAE5B;AAAA,EACF;AACF;AAEA,SAAS,6BACP,QAAA,EACQ;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AAExC,IAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,CAAC,CAAA,EAAG,SAAS,aAAA,IAAiB,IAAA;AAG7D,IAAA,OAAO,aAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AACpE;AAEA,eAAsB,sBAAA,CACpB,KAAA,EACA,SAAA,EACA,MAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,QAAQ,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEjE,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,SAAA,GAAY,MAAM,YAAA,CAAa,OAAA,EAAS,MAAM,CAAA;AAAA,EAChD;AAEA,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,MAAM,WAAW,UAAA,CAAW,KAAA,CAAM,WAAA,EAAa,SAAA,EAAW,MAAM,KAAK,CAAA;AAErE,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,GACxD;AACF","file":"xrpl-52IBJ4EW.js","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { AccountTxTransaction, Client } from \"xrpl\";\nimport { verify } from \"ripple-keypairs\";\n\nexport function verifyXRPL(\n message: string,\n publicKey: string,\n proof: string\n): boolean {\n return verify(Buffer.from(message).toString(\"hex\"), proof, publicKey);\n}\n\nexport const xrplTestnetWs = [\n \"wss://s.altnet.rippletest.net:51233\",\n \"wss://testnet.xrpl-labs.com/\",\n];\n\nexport const xrplMainnetWs = [\n \"wss://s1.ripple.com\",\n \"wss://xrplcluster.com/\", // full node\n \"wss://s2.ripple.com/\",\n];\n\n// If the public key is not provided, we need to get it directly\nasync function getPublicKey(\n address: string,\n isTest?: boolean\n): Promise<string | undefined> {\n const servers = isTest ? xrplTestnetWs : xrplMainnetWs;\n\n for (const server of servers) {\n try {\n const client = new Client(server);\n await client.connect();\n\n const response = await client.request({\n command: \"account_tx\",\n account: address,\n binary: false,\n limit: 2,\n forward: false,\n });\n\n await client.disconnect();\n return getSigningPubkeyFromLatestTx(response.result?.transactions);\n } catch (error) {\n let errorMessage = \"Connection to XRPL server failed\";\n if (error instanceof Error) {\n errorMessage += `: ${error.message}`;\n }\n console.error(errorMessage);\n // Continue to next server\n }\n }\n}\n\nfunction getSigningPubkeyFromLatestTx(\n latestTx: AccountTxTransaction[]\n): string {\n for (let i = 0; i < latestTx.length; i++) {\n // Check if the Account in the .tx is the address derived from the pubkey\n const signingPubKey = latestTx[i]?.tx_json?.SigningPubKey ?? \"0x\";\n // TODO: https://github.com/Cypher-Laboratory/xrpl-publickey-getter/blob/main/src/pubKeyGetter.ts#L98\n // Check the public key matches the address properly\n return signingPubKey;\n }\n throw new Error(\"No valid pubkey found in the latest transactions\");\n}\n\nexport async function verifyPersonalSignXRPL(\n proof: SignatureProof,\n publicKey?: string,\n isTest?: boolean\n): Promise<SignatureProof> {\n const [ns, , address] = proof.address.split(/:/);\n if (ns !== \"xrpl\") return { ...proof, status: ProofStatus.FAILED };\n\n if (!publicKey) {\n publicKey = await getPublicKey(address, isTest);\n }\n\n if (!publicKey) {\n return { ...proof, status: ProofStatus.FAILED };\n }\n\n const verified = verifyXRPL(proof.attestation, publicKey, proof.proof);\n\n return {\n ...proof,\n status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n };\n}\n"]}
package/package.json CHANGED
@@ -1,17 +1,26 @@
1
1
  {
2
2
  "name": "@notabene/verify-proof",
3
- "version": "1.11.1-next.1",
3
+ "version": "1.12.0-next.12",
4
4
  "description": "Verify ownership proofs",
5
+ "repository": {
6
+ "type": "git",
7
+ "url": "https://gitlab.com/notabene/libraries/verifyproof"
8
+ },
5
9
  "source": "src/index.ts",
6
10
  "type": "module",
7
- "module": "dist/index.js",
8
- "types": "dist/index.d.ts",
9
- "main": "dist/index.cjs",
11
+ "module": "dist/esm/index.js",
12
+ "types": "dist/esm/index.d.ts",
13
+ "main": "dist/cjs/index.cjs",
10
14
  "exports": {
11
15
  ".": {
12
- "types": "./dist/index.d.ts",
13
- "import": "./dist/index.js",
14
- "require": "./dist/index.cjs"
16
+ "import": {
17
+ "types": "./dist/esm/index.d.ts",
18
+ "default": "./dist/esm/index.js"
19
+ },
20
+ "require": {
21
+ "types": "./dist/cjs/index.d.cts",
22
+ "default": "./dist/cjs/index.cjs"
23
+ }
15
24
  }
16
25
  },
17
26
  "author": "Pelle Braendgaard",
@@ -26,7 +35,7 @@
26
35
  "scripts": {
27
36
  "build:dev": "yarn build && yarn dev",
28
37
  "build:clean": "rm -rf dist",
29
- "build": "tsup",
38
+ "build": "rm -rf dist && tsup",
30
39
  "lint": "eslint ./src",
31
40
  "test:unit": "vitest",
32
41
  "test:coverage": "vitest --coverage"
@@ -54,14 +63,17 @@
54
63
  "@cardano-foundation/cardano-verify-datasignature": "^1.0.11",
55
64
  "@cosmjs/amino": "^0.34.0",
56
65
  "@noble/curves": "^1.7.0",
66
+ "@noble/hashes": "^1.8.0",
57
67
  "@notabene/javascript-sdk": "2.11.0-next.2",
58
68
  "@scure/base": "^1.2.1",
59
69
  "@stellar/stellar-sdk": "^13.1.0",
70
+ "bech32": "^2.0.0",
60
71
  "bip322-js": "^2.0.0",
61
72
  "buffer": "^6.0.3",
62
73
  "ox": "^0.2.2",
74
+ "ripple-keypairs": "^2.0.0",
63
75
  "tweetnacl": "^1.0.3",
64
76
  "varuint-bitcoin": "^2.0.0",
65
77
  "xrpl": "^4.2.5"
66
78
  }
67
- }
79
+ }
package/src/bitcoin.ts CHANGED
@@ -10,6 +10,7 @@ import { Hash } from "ox";
10
10
  import { secp256k1 } from "@noble/curves/secp256k1";
11
11
  import { SignatureType } from "@noble/curves/abstract/weierstrass";
12
12
  import { Verifier } from "bip322-js";
13
+ import { decodeCashAddr } from "./cashaddr";
13
14
 
14
15
  enum SEGWIT_TYPES {
15
16
  P2WPKH = "p2wpkh",
@@ -88,7 +89,12 @@ enum DerivationMode {
88
89
  export async function verifyBTCSignature(
89
90
  proof: SignatureProof
90
91
  ): Promise<SignatureProof> {
91
- const [ns, , address] = proof.address.split(/:/);
92
+ // Split on ":" but rejoin from index 2 onwards so that a prefixed CashAddr
93
+ // like "bitcoincash:qr..." in the third segment is preserved whole.
94
+ // e.g. "bip122:<chainId>:bitcoincash:qr..." → address = "bitcoincash:qr..."
95
+ const parts = proof.address.split(":");
96
+ const ns = parts[0];
97
+ const address = parts.slice(2).join(":");
92
98
  if (ns !== "bip122") return { ...proof, status: ProofStatus.FAILED };
93
99
 
94
100
  // Map chainId to our chain configuration
@@ -102,7 +108,11 @@ export async function verifyBTCSignature(
102
108
 
103
109
  // Use BIP322 for testnet addresses
104
110
  if (chainConfig.isTestnet) {
105
- return verifyBIP322(address, proof);
111
+ try {
112
+ return verifyBIP322(address, proof);
113
+ } catch {
114
+ return { ...proof, status: ProofStatus.FAILED };
115
+ }
106
116
  }
107
117
 
108
118
  // Check if this is a Taproot address (bc1p or tb1p)
@@ -158,11 +168,17 @@ function getChainConfig(address: string): ChainConfig {
158
168
  if (address.startsWith("X") || address.startsWith("7")) {
159
169
  return CHAIN_CONFIGS["dash"];
160
170
  }
161
- if (address.startsWith("q")) {
171
+ if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
162
172
  return CHAIN_CONFIGS["bitcoincash"];
163
173
  }
164
- if (address.startsWith("tb1")) {
165
- return CHAIN_CONFIGS["testnet"];
174
+ // Bitcoin testnet addresses can start with "m", "n", "2", or "tb1"
175
+ if (
176
+ address.startsWith("m") ||
177
+ address.startsWith("n") ||
178
+ address.startsWith("2") ||
179
+ address.startsWith("tb1")
180
+ ) {
181
+ return CHAIN_CONFIGS["testnet"]
166
182
  }
167
183
 
168
184
  return CHAIN_CONFIGS["bitcoin"];
@@ -220,7 +236,7 @@ function getDerivationMode(address: string) {
220
236
  return DerivationMode.LEGACY;
221
237
  } else if (address.match("^(D).*")) {
222
238
  return DerivationMode.DOGECOIN;
223
- } else if (address.match("^(q).*")) {
239
+ } else if (address.match("^(q).*") || address.startsWith("bitcoincash:")) {
224
240
  return DerivationMode.BCH;
225
241
  } else if (address.match("^(t1|t3).*")) {
226
242
  return DerivationMode.LEGACY; // Zcash addresses
@@ -280,26 +296,34 @@ function verify(
280
296
  const publicKey = signature.recoverPublicKey(hash);
281
297
  const publicKeyBytes = publicKey.toRawBytes(compressed);
282
298
  const publicKeyHash = hash160(publicKeyBytes);
283
- let actual: string = "";
284
-
285
299
  // Special handling for Bitcoin Cash addresses
286
- if (address.startsWith("q")) {
287
- // For BCH, we'll compare the public key hash directly since we're getting a CashAddr
288
- // Convert the CashAddr to legacy format for comparison
289
- actual = encodeBase58AddressFormat(
290
- chainConfig.pubKeyHashVersion,
291
- publicKeyHash
292
- );
293
- // Legacy P2PKH addresses in BCH start with '1' just like BTC
294
- // Source: https://reference.cash/protocol/blockchain/encoding/cashaddr#legacy-address-format
295
- return actual.startsWith("1");
300
+ if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
301
+ try {
302
+ const decoded = decodeCashAddr(address);
303
+ if (decoded.type !== 0) return false; // Must be P2PKH
304
+ if (decoded.hash.length !== publicKeyHash.length) return false;
305
+ for (let i = 0; i < decoded.hash.length; i++) {
306
+ if (decoded.hash[i] !== publicKeyHash[i]) return false;
307
+ }
308
+ return true;
309
+ } catch {
310
+ return false;
311
+ }
296
312
  }
297
313
 
314
+ let actual: string = "";
315
+
298
316
  if (segwitType) {
299
317
  if (segwitType === SEGWIT_TYPES.P2SH_P2WPKH) {
318
+ // P2SH-P2WPKH: address is hash160 of the witness redeem script, not the raw pubkey hash
319
+ const redeemScript = new Uint8Array(22);
320
+ redeemScript[0] = 0x00; // OP_0
321
+ redeemScript[1] = 0x14; // push 20 bytes
322
+ redeemScript.set(publicKeyHash, 2);
323
+ const redeemScriptHash = hash160(redeemScript);
300
324
  actual = encodeBase58AddressFormat(
301
325
  chainConfig.scriptHashVersion,
302
- publicKeyHash
326
+ redeemScriptHash
303
327
  );
304
328
  } else {
305
329
  // parsed.segwitType === SEGWIT_TYPES.P2WPKH
package/src/cardano.ts CHANGED
@@ -1,4 +1,4 @@
1
- import * as verifyDataSignature from "@cardano-foundation/cardano-verify-datasignature";
1
+ import verifyDataSignature from "@cardano-foundation/cardano-verify-datasignature";
2
2
  import { ProofStatus, SignatureProof } from "@notabene/javascript-sdk";
3
3
 
4
4
  export async function verifyCIP8Signature(
@@ -15,7 +15,7 @@ export async function verifyCIP8Signature(
15
15
  }
16
16
 
17
17
  try {
18
- const verified = verifyDataSignature.default(
18
+ const verified = verifyDataSignature(
19
19
  proof.proof,
20
20
  key,
21
21
  proof.attestation,