@orangecheck/chat-core 0.1.0 → 0.2.0

package/dist/io.d.mts

@@ -1,26 +1,25 @@
-import { t as VerifyOnChain, E as WriteProof } from './channel-D8aOo4eI.mjs';
+import { u as VerifyOnChain, F as WriteProof } from './channel-ChK3AAvd.mjs';
 import '@orangecheck/lock-device';
 
-interface MempoolUtxo {
-    txid: string;
-    vout: number;
-    value?: number;
-    status?: {
-        confirmed?: boolean;
-        block_height?: number;
-        block_hash?: string;
-    };
+interface OutpointRead {
+    address: string | null;
+    value: number | null;
+    confirmed: boolean;
+    height: number | null;
+    hash: string | null;
+    spent: boolean;
 }
-type WriteProofUtxoCache = Map<string, Promise<MempoolUtxo[] | null>>;
+type WriteProofCache = Map<string, Promise<OutpointRead | 'missing' | 'unanswered'>>;
 interface EsploraOptions {
     baseUrl?: string;
     fetch?: typeof fetch;
-    utxoCache?: WriteProofUtxoCache;
+    cache?: WriteProofCache;
 }
+declare function readOutpoint(outpoint: string, opts?: EsploraOptions): Promise<OutpointRead | 'missing' | 'unanswered'>;
 declare function writeProofOnChain(proof: WriteProof, authorAddress: string, opts?: EsploraOptions): Promise<boolean | 'no-answer'>;
 declare function verifyWriteProofOnChain(proof: WriteProof, authorAddress: string, opts?: EsploraOptions): Promise<boolean>;
 declare function esploraWriteProofCheck(opts?: EsploraOptions & {
-    unanswered?: 'false' | 'throw';
+    unanswered?: 'throw' | 'false';
 }): VerifyOnChain;
 
-export { type EsploraOptions, type MempoolUtxo, type WriteProofUtxoCache, esploraWriteProofCheck, verifyWriteProofOnChain, writeProofOnChain };
+export { type EsploraOptions, type OutpointRead, type WriteProofCache, esploraWriteProofCheck, readOutpoint, verifyWriteProofOnChain, writeProofOnChain };

package/dist/io.d.ts

@@ -1,26 +1,25 @@
-import { t as VerifyOnChain, E as WriteProof } from './channel-D8aOo4eI.js';
+import { u as VerifyOnChain, F as WriteProof } from './channel-ChK3AAvd.js';
 import '@orangecheck/lock-device';
 
-interface MempoolUtxo {
-    txid: string;
-    vout: number;
-    value?: number;
-    status?: {
-        confirmed?: boolean;
-        block_height?: number;
-        block_hash?: string;
-    };
+interface OutpointRead {
+    address: string | null;
+    value: number | null;
+    confirmed: boolean;
+    height: number | null;
+    hash: string | null;
+    spent: boolean;
 }
-type WriteProofUtxoCache = Map<string, Promise<MempoolUtxo[] | null>>;
+type WriteProofCache = Map<string, Promise<OutpointRead | 'missing' | 'unanswered'>>;
 interface EsploraOptions {
     baseUrl?: string;
     fetch?: typeof fetch;
-    utxoCache?: WriteProofUtxoCache;
+    cache?: WriteProofCache;
 }
+declare function readOutpoint(outpoint: string, opts?: EsploraOptions): Promise<OutpointRead | 'missing' | 'unanswered'>;
 declare function writeProofOnChain(proof: WriteProof, authorAddress: string, opts?: EsploraOptions): Promise<boolean | 'no-answer'>;
 declare function verifyWriteProofOnChain(proof: WriteProof, authorAddress: string, opts?: EsploraOptions): Promise<boolean>;
 declare function esploraWriteProofCheck(opts?: EsploraOptions & {
-    unanswered?: 'false' | 'throw';
+    unanswered?: 'throw' | 'false';
 }): VerifyOnChain;
 
-export { type EsploraOptions, type MempoolUtxo, type WriteProofUtxoCache, esploraWriteProofCheck, verifyWriteProofOnChain, writeProofOnChain };
+export { type EsploraOptions, type OutpointRead, type WriteProofCache, esploraWriteProofCheck, readOutpoint, verifyWriteProofOnChain, writeProofOnChain };

package/dist/io.js

@@ -1,52 +1,74 @@
 'use strict';
 
 var chunkGFFQSF75_js = require('./chunk-GFFQSF75.js');
+var bip322 = require('@orangecheck/bip322');
 
-// src/io.ts
-async function addressUtxos(address, base, f, cache) {
-  const hit = cache?.get(address);
+async function readOutpoint(outpoint, opts = {}) {
+  const hit = opts.cache?.get(outpoint);
   if (hit) return hit;
+  const base = (opts.baseUrl ?? "https://mempool.space/api").replace(/\/+$/, "");
+  const f = opts.fetch ?? globalThis.fetch.bind(globalThis);
   const p = (async () => {
+    const sep = outpoint.lastIndexOf(":");
+    const txid = outpoint.slice(0, sep);
+    const vout = Number(outpoint.slice(sep + 1));
+    if (sep <= 0 || !/^[0-9a-f]{64}$/i.test(txid) || !Number.isInteger(vout) || vout < 0) {
+      return "missing";
+    }
     try {
-      const res = await f(`${base}/address/${encodeURIComponent(address)}/utxo`);
-      if (!res.ok) return null;
-      return await res.json();
+      const txRes = await f(`${base}/tx/${txid}`);
+      if (txRes.status === 404) return "missing";
+      if (!txRes.ok) return "unanswered";
+      const tx = await txRes.json();
+      const out = tx.vout?.[vout];
+      if (!out) return "missing";
+      const spendRes = await f(`${base}/tx/${txid}/outspend/${vout}`);
+      if (spendRes.status === 404) return "missing";
+      if (!spendRes.ok) return "unanswered";
+      const spend = await spendRes.json();
+      if (typeof spend.spent !== "boolean") return "unanswered";
+      return {
+        address: out.scriptpubkey_address ?? null,
+        value: typeof out.value === "number" ? out.value : null,
+        confirmed: tx.status?.confirmed === true,
+        height: tx.status?.block_height ?? null,
+        hash: tx.status?.block_hash ?? null,
+        spent: spend.spent
+      };
     } catch {
-      return null;
+      return "unanswered";
     }
   })();
-  cache?.set(address, p);
+  opts.cache?.set(outpoint, p);
+  void p.then((r) => {
+    if (r === "unanswered" && opts.cache?.get(outpoint) === p) opts.cache.delete(outpoint);
+  });
   return p;
 }
 async function writeProofOnChain(proof, authorAddress, opts = {}) {
-  const base = (opts.baseUrl ?? "https://mempool.space/api").replace(/\/+$/, "");
-  const f = opts.fetch ?? globalThis.fetch.bind(globalThis);
-  const utxos = await addressUtxos(authorAddress, base, f, opts.utxoCache);
-  if (!utxos) return "no-answer";
-  const sep = proof.outpoint.lastIndexOf(":");
-  if (sep <= 0) return false;
-  const txid = proof.outpoint.slice(0, sep);
-  const vout = Number.parseInt(proof.outpoint.slice(sep + 1), 10);
-  return utxos.some(
-    (u) => u.txid === txid && u.vout === vout && u.status?.confirmed === true && u.value === proof.value_sats && u.status?.block_height === proof.anchor_block_height && u.status?.block_hash === proof.anchor_block_hash
-  );
+  const coin = await readOutpoint(proof.outpoint, opts);
+  if (coin === "unanswered") return "no-answer";
+  if (coin === "missing") return false;
+  const owner = coin.address === null ? null : bip322.normalizeAddress(coin.address);
+  return owner !== null && owner === bip322.normalizeAddress(authorAddress) && coin.value === proof.value_sats && coin.confirmed && coin.height === proof.anchor_block_height && coin.hash === proof.anchor_block_hash && !coin.spent;
 }
 async function verifyWriteProofOnChain(proof, authorAddress, opts = {}) {
   return await writeProofOnChain(proof, authorAddress, opts) === true;
 }
 function esploraWriteProofCheck(opts = {}) {
-  const utxoCache = opts.utxoCache ?? /* @__PURE__ */ new Map();
+  const cache = opts.cache ?? /* @__PURE__ */ new Map();
   return async (proof, address) => {
-    const r = await writeProofOnChain(proof, address, { ...opts, utxoCache });
+    const r = await writeProofOnChain(proof, address, { ...opts, cache });
     if (r === "no-answer") {
-      if (opts.unanswered === "throw") throw new chunkGFFQSF75_js.UnansweredReadError("the chain could not be read");
-      return false;
+      if (opts.unanswered === "false") return false;
+      throw new chunkGFFQSF75_js.UnansweredReadError("the chain could not be read");
     }
     return r;
   };
 }
 
 exports.esploraWriteProofCheck = esploraWriteProofCheck;
+exports.readOutpoint = readOutpoint;
 exports.verifyWriteProofOnChain = verifyWriteProofOnChain;
 exports.writeProofOnChain = writeProofOnChain;
 //# sourceMappingURL=io.js.map

package/dist/io.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/io.ts"],"names":["UnansweredReadError"],"mappings":";;;;;AAyBA,eAAe,YAAA,CACX,OAAA,EACA,IAAA,EACA,CAAA,EACA,KAAA,EAC6B;AAC7B,EAAA,MAAM,GAAA,GAAM,KAAA,EAAO,GAAA,CAAI,OAAO,CAAA;AAC9B,EAAA,IAAI,KAAK,OAAO,GAAA;AAChB,EAAA,MAAM,KAAK,YAAY;AACnB,IAAA,IAAI;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,kBAAA,CAAmB,OAAO,CAAC,CAAA,KAAA,CAAO,CAAA;AACzE,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AACpB,MAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,IAC3B,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,IAAA;AAAA,IACX;AAAA,EACJ,CAAA,GAAG;AACH,EAAA,KAAA,EAAO,GAAA,CAAI,SAAS,CAAC,CAAA;AACrB,EAAA,OAAO,CAAA;AACX;AAQA,eAAsB,iBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACM;AAC9B,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,IAAW,2BAAA,EAA6B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC7E,EAAA,MAAM,IAAI,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACxD,EAAA,MAAM,QAAQ,MAAM,YAAA,CAAa,eAAe,IAAA,EAAM,CAAA,EAAG,KAAK,SAAS,CAAA;AACvE,EAAA,IAAI,CAAC,OAAO,OAAO,WAAA;AACnB,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAC1C,EAAA,IAAI,GAAA,IAAO,GAAG,OAAO,KAAA;AACrB,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,GAAG,GAAG,CAAA;AACxC,EAAA,MAAM,IAAA,GAAO,OAAO,QAAA,CAAS,KAAA,CAAM,SAAS,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA,EAAG,EAAE,CAAA;AAC9D,EAAA,OAAO,KAAA,CAAM,IAAA;AAAA,IACT,CAAC,CAAA,KACG,CAAA,CAAE,IAAA,KAAS,IAAA,IACX,EAAE,IAAA,KAAS,IAAA,IACX,CAAA,CAAE,MAAA,EAAQ,SAAA,KAAc,IAAA,IACxB,EAAE,KAAA,KAAU,KAAA,CAAM,UAAA,IAClB,CAAA,CAAE,MAAA,EAAQ,YAAA,KAAiB,MAAM,mBAAA,IACjC,CAAA,CAAE,MAAA,EAAQ,UAAA,KAAe,KAAA,CAAM;AAAA,GACvC;AACJ;AAGA,eAAsB,uBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACR;AAChB,EAAA,OAAQ,MAAM,iBAAA,CAAkB,KAAA,EAAO,aAAA,EAAe,IAAI,CAAA,KAAO,IAAA;AACrE;AAOO,SAAS,sBAAA,CACZ,IAAA,GAA4D,EAAC,EAChD;AACb,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,oBAAa,IAAI,GAAA,EAAI;AAC5C,EAAA,OAAO,OAAO,OAAO,OAAA,KAAY;AAC7B,IAAA,MAAM,CAAA,GAAI,MAAM,iBAAA,CAAkB,KAAA,EAAO,SAAS,EAAE,GAAG,IAAA,EAAM,SAAA,EAAW,CAAA;AACxE,IAAA,IAAI,MAAM,WAAA,EAAa;AACnB,MAAA,IAAI,KAAK,UAAA,KAAe,OAAA,EAAS,MAAM,IAAIA,qCAAoB,6BAA6B,CAAA;AAC5F,MAAA,OAAO,KAAA;AAAA,IACX;AACA,IAAA,OAAO,CAAA;AAAA,EACX,CAAA;AACJ","file":"io.js","sourcesContent":["// Readers over a public Esplora API (mempool.space by default) for the checks\n// chat-core leaves to its caller. Public chain data only.\n\nimport type { VerifyOnChain, WriteProof } from './channel';\nimport { UnansweredReadError } from './read';\n\n/** One output from Esplora's /address/<addr>/utxo. */\nexport interface MempoolUtxo {\n    txid: string;\n    vout: number;\n    value?: number;\n    status?: { confirmed?: boolean; block_height?: number; block_hash?: string };\n}\n\n/** One address→UTXO-set read per distinct author for a batch of posts. */\nexport type WriteProofUtxoCache = Map<string, Promise<MempoolUtxo[] | null>>;\n\nexport interface EsploraOptions {\n    /** Esplora API base; default https://mempool.space/api. */\n    baseUrl?: string;\n    fetch?: typeof fetch;\n    /** Share one cache across the posts of a feed. */\n    utxoCache?: WriteProofUtxoCache;\n}\n\nasync function addressUtxos(\n    address: string,\n    base: string,\n    f: typeof fetch,\n    cache?: WriteProofUtxoCache\n): Promise<MempoolUtxo[] | null> {\n    const hit = cache?.get(address);\n    if (hit) return hit;\n    const p = (async () => {\n        try {\n            const res = await f(`${base}/address/${encodeURIComponent(address)}/utxo`);\n            if (!res.ok) return null;\n            return (await res.json()) as MempoolUtxo[];\n        } catch {\n            return null;\n        }\n    })();\n    cache?.set(address, p);\n    return p;\n}\n\n/**\n * Does a utxo-floor write proof match current chain state (§8.3.3), the\n * Bitcoin-load-bearing leg: the proof's outpoint is an unspent output of the\n * author's address with exactly the value, confirmation height and block hash\n * the proof states? 'no-answer' when the address's outputs could not be read.\n */\nexport async function writeProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean | 'no-answer'> {\n    const base = (opts.baseUrl ?? 'https://mempool.space/api').replace(/\\/+$/, '');\n    const f = opts.fetch ?? globalThis.fetch.bind(globalThis);\n    const utxos = await addressUtxos(authorAddress, base, f, opts.utxoCache);\n    if (!utxos) return 'no-answer';\n    const sep = proof.outpoint.lastIndexOf(':');\n    if (sep <= 0) return false;\n    const txid = proof.outpoint.slice(0, sep);\n    const vout = Number.parseInt(proof.outpoint.slice(sep + 1), 10);\n    return utxos.some(\n        (u) =>\n            u.txid === txid &&\n            u.vout === vout &&\n            u.status?.confirmed === true &&\n            u.value === proof.value_sats &&\n            u.status?.block_height === proof.anchor_block_height &&\n            u.status?.block_hash === proof.anchor_block_hash\n    );\n}\n\n/** writeProofOnChain, fail-closed: an unanswered read is false, so the post does not render. */\nexport async function verifyWriteProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean> {\n    return (await writeProofOnChain(proof, authorAddress, opts)) === true;\n}\n\n/**\n * A VerifyOnChain over Esplora, with one cache for the batch it is made for. An\n * unanswered read is false (a feed hides the post), or with `unanswered: 'throw'`\n * an UnansweredReadError, for a verifier that must say it could not tell.\n */\nexport function esploraWriteProofCheck(\n    opts: EsploraOptions & { unanswered?: 'false' | 'throw' } = {}\n): VerifyOnChain {\n    const utxoCache = opts.utxoCache ?? new Map();\n    return async (proof, address) => {\n        const r = await writeProofOnChain(proof, address, { ...opts, utxoCache });\n        if (r === 'no-answer') {\n            if (opts.unanswered === 'throw') throw new UnansweredReadError('the chain could not be read');\n            return false;\n        }\n        return r;\n    };\n}\n"]}
+{"version":3,"sources":["../src/io.ts"],"names":["normalizeAddress","UnansweredReadError"],"mappings":";;;;;AA0CA,eAAsB,YAAA,CAClB,QAAA,EACA,IAAA,GAAuB,EAAC,EACwB;AAChD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,EAAO,GAAA,CAAI,QAAQ,CAAA;AACpC,EAAA,IAAI,KAAK,OAAO,GAAA;AAChB,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,IAAW,2BAAA,EAA6B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC7E,EAAA,MAAM,IAAI,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACxD,EAAA,MAAM,KAAK,YAA8D;AACrE,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAClC,IAAA,MAAM,OAAO,MAAA,CAAO,QAAA,CAAS,KAAA,CAAM,GAAA,GAAM,CAAC,CAAC,CAAA;AAC3C,IAAA,IAAI,GAAA,IAAO,CAAA,IAAK,CAAC,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,IAAI,CAAA,IAAK,OAAO,CAAA,EAAG;AAClF,MAAA,OAAO,SAAA;AAAA,IACX;AACA,IAAA,IAAI;AACA,MAAA,MAAM,QAAQ,MAAM,CAAA,CAAE,GAAG,IAAI,CAAA,IAAA,EAAO,IAAI,CAAA,CAAE,CAAA;AAC1C,MAAA,IAAI,KAAA,CAAM,MAAA,KAAW,GAAA,EAAK,OAAO,SAAA;AACjC,MAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,OAAO,YAAA;AACtB,MAAA,MAAM,EAAA,GAAM,MAAM,KAAA,CAAM,IAAA,EAAK;AAI7B,MAAA,MAAM,GAAA,GAAM,EAAA,CAAG,IAAA,GAAO,IAAI,CAAA;AAC1B,MAAA,IAAI,CAAC,KAAK,OAAO,SAAA;AACjB,MAAA,MAAM,QAAA,GAAW,MAAM,CAAA,CAAE,CAAA,EAAG,IAAI,CAAA,IAAA,EAAO,IAAI,CAAA,UAAA,EAAa,IAAI,CAAA,CAAE,CAAA;AAC9D,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,EAAK,OAAO,SAAA;AACpC,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,OAAO,YAAA;AACzB,MAAA,MAAM,KAAA,GAAS,MAAM,QAAA,CAAS,IAAA,EAAK;AACnC,MAAA,IAAI,OAAO,KAAA,CAAM,KAAA,KAAU,SAAA,EAAW,OAAO,YAAA;AAC7C,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,IAAI,oBAAA,IAAwB,IAAA;AAAA,QACrC,OAAO,OAAO,GAAA,CAAI,KAAA,KAAU,QAAA,GAAW,IAAI,KAAA,GAAQ,IAAA;AAAA,QACnD,SAAA,EAAW,EAAA,CAAG,MAAA,EAAQ,SAAA,KAAc,IAAA;AAAA,QACpC,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,YAAA,IAAgB,IAAA;AAAA,QACnC,IAAA,EAAM,EAAA,CAAG,MAAA,EAAQ,UAAA,IAAc,IAAA;AAAA,QAC/B,OAAO,KAAA,CAAM;AAAA,OACjB;AAAA,IACJ,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,YAAA;AAAA,IACX;AAAA,EACJ,CAAA,GAAG;AACH,EAAA,IAAA,CAAK,KAAA,EAAO,GAAA,CAAI,QAAA,EAAU,CAAC,CAAA;AAC3B,EAAA,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM;AACf,IAAA,IAAI,CAAA,KAAM,YAAA,IAAgB,IAAA,CAAK,KAAA,EAAO,GAAA,CAAI,QAAQ,CAAA,KAAM,CAAA,EAAG,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA;AAAA,EACzF,CAAC,CAAA;AACD,EAAA,OAAO,CAAA;AACX;AAUA,eAAsB,iBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACM;AAC9B,EAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,KAAA,CAAM,UAAU,IAAI,CAAA;AACpD,EAAA,IAAI,IAAA,KAAS,cAAc,OAAO,WAAA;AAClC,EAAA,IAAI,IAAA,KAAS,WAAW,OAAO,KAAA;AAC/B,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,KAAY,OAAO,IAAA,GAAOA,uBAAA,CAAiB,KAAK,OAAO,CAAA;AAC1E,EAAA,OACI,KAAA,KAAU,QACV,KAAA,KAAUA,uBAAA,CAAiB,aAAa,CAAA,IACxC,IAAA,CAAK,UAAU,KAAA,CAAM,UAAA,IACrB,KAAK,SAAA,IACL,IAAA,CAAK,WAAW,KAAA,CAAM,mBAAA,IACtB,KAAK,IAAA,KAAS,KAAA,CAAM,iBAAA,IACpB,CAAC,IAAA,CAAK,KAAA;AAEd;AAGA,eAAsB,uBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACR;AAChB,EAAA,OAAQ,MAAM,iBAAA,CAAkB,KAAA,EAAO,aAAA,EAAe,IAAI,CAAA,KAAO,IAAA;AACrE;AASO,SAAS,sBAAA,CACZ,IAAA,GAA4D,EAAC,EAChD;AACb,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,oBAAS,IAAI,GAAA,EAAI;AACpC,EAAA,OAAO,OAAO,OAAO,OAAA,KAAY;AAC7B,IAAA,MAAM,CAAA,GAAI,MAAM,iBAAA,CAAkB,KAAA,EAAO,SAAS,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,CAAA;AACpE,IAAA,IAAI,MAAM,WAAA,EAAa;AACnB,MAAA,IAAI,IAAA,CAAK,UAAA,KAAe,OAAA,EAAS,OAAO,KAAA;AACxC,MAAA,MAAM,IAAIC,qCAAoB,6BAA6B,CAAA;AAAA,IAC/D;AACA,IAAA,OAAO,CAAA;AAAA,EACX,CAAA;AACJ","file":"io.js","sourcesContent":["// Readers over a public Esplora API (mempool.space by default) for the checks\n// chat-core leaves to its caller. Public chain data only.\n\nimport { normalizeAddress } from '@orangecheck/bip322';\n\nimport type { VerifyOnChain, WriteProof } from './channel';\nimport { UnansweredReadError } from './read';\n\n/** The coin a write proof names, as the explorer holds it. */\nexport interface OutpointRead {\n    /** The output's scriptpubkey_address; null for a script with none. */\n    address: string | null;\n    value: number | null;\n    confirmed: boolean;\n    height: number | null;\n    hash: string | null;\n    /** Spent, a spend still in the mempool included. */\n    spent: boolean;\n}\n\n/**\n * One read per outpoint for a batch of posts: two posts naming one coin read it\n * once. A read that got no answer is not kept, so the next asks again.\n */\nexport type WriteProofCache = Map<string, Promise<OutpointRead | 'missing' | 'unanswered'>>;\n\nexport interface EsploraOptions {\n    /** Esplora API base; default https://mempool.space/api. */\n    baseUrl?: string;\n    fetch?: typeof fetch;\n    /** Share one cache across the posts of a feed. */\n    cache?: WriteProofCache;\n}\n\n/**\n * The one coin a write proof names (§8.3.3 (1)): GET /tx/<txid> for the output\n * at vout, then GET /tx/<txid>/outspend/<vout>. A 404 from either, or a vout the\n * transaction does not have, is 'missing'. A 429, a 5xx, a timeout or a body\n * that does not parse is 'unanswered'. Reading the coin rather than the\n * address's whole UTXO set holds for any wallet: Esplora refuses to list an\n * address past a few hundred UTXOs, and anyone can send an author dust.\n */\nexport async function readOutpoint(\n    outpoint: string,\n    opts: EsploraOptions = {}\n): Promise<OutpointRead | 'missing' | 'unanswered'> {\n    const hit = opts.cache?.get(outpoint);\n    if (hit) return hit;\n    const base = (opts.baseUrl ?? 'https://mempool.space/api').replace(/\\/+$/, '');\n    const f = opts.fetch ?? globalThis.fetch.bind(globalThis);\n    const p = (async (): Promise<OutpointRead | 'missing' | 'unanswered'> => {\n        const sep = outpoint.lastIndexOf(':');\n        const txid = outpoint.slice(0, sep);\n        const vout = Number(outpoint.slice(sep + 1));\n        if (sep <= 0 || !/^[0-9a-f]{64}$/i.test(txid) || !Number.isInteger(vout) || vout < 0) {\n            return 'missing';\n        }\n        try {\n            const txRes = await f(`${base}/tx/${txid}`);\n            if (txRes.status === 404) return 'missing';\n            if (!txRes.ok) return 'unanswered';\n            const tx = (await txRes.json()) as {\n                vout?: { scriptpubkey_address?: string; value?: number }[];\n                status?: { confirmed?: boolean; block_height?: number; block_hash?: string };\n            };\n            const out = tx.vout?.[vout];\n            if (!out) return 'missing';\n            const spendRes = await f(`${base}/tx/${txid}/outspend/${vout}`);\n            if (spendRes.status === 404) return 'missing';\n            if (!spendRes.ok) return 'unanswered';\n            const spend = (await spendRes.json()) as { spent?: unknown };\n            if (typeof spend.spent !== 'boolean') return 'unanswered';\n            return {\n                address: out.scriptpubkey_address ?? null,\n                value: typeof out.value === 'number' ? out.value : null,\n                confirmed: tx.status?.confirmed === true,\n                height: tx.status?.block_height ?? null,\n                hash: tx.status?.block_hash ?? null,\n                spent: spend.spent,\n            };\n        } catch {\n            return 'unanswered';\n        }\n    })();\n    opts.cache?.set(outpoint, p);\n    void p.then((r) => {\n        if (r === 'unanswered' && opts.cache?.get(outpoint) === p) opts.cache.delete(outpoint);\n    });\n    return p;\n}\n\n/**\n * Does a utxo-floor write proof match current chain state (§8.3.3 (1)), the\n * Bitcoin-load-bearing leg: the proof's outpoint pays the author's address\n * (both in normal form, so a bech32 address in capitals is the same address)\n * exactly the value, confirmed at the height and block hash the proof states,\n * and is unspent (a spend still in the mempool counts as spent)? 'no-answer'\n * when the explorer did not answer; false when the coin is missing or differs.\n */\nexport async function writeProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean | 'no-answer'> {\n    const coin = await readOutpoint(proof.outpoint, opts);\n    if (coin === 'unanswered') return 'no-answer';\n    if (coin === 'missing') return false;\n    const owner = coin.address === null ? null : normalizeAddress(coin.address);\n    return (\n        owner !== null &&\n        owner === normalizeAddress(authorAddress) &&\n        coin.value === proof.value_sats &&\n        coin.confirmed &&\n        coin.height === proof.anchor_block_height &&\n        coin.hash === proof.anchor_block_hash &&\n        !coin.spent\n    );\n}\n\n/** writeProofOnChain, fail-closed: an unanswered read is false, so the post does not render. */\nexport async function verifyWriteProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean> {\n    return (await writeProofOnChain(proof, authorAddress, opts)) === true;\n}\n\n/**\n * A VerifyOnChain over Esplora, with one cache for the batch it is made for. A\n * read that gets no answer throws UnansweredReadError, so a verifier says it\n * could not tell rather than read the silence as \"no\" (verifyChannelPosts\n * counts the post unchecked). `unanswered: 'false'` makes it false instead, for\n * a caller that only needs fail-closed.\n */\nexport function esploraWriteProofCheck(\n    opts: EsploraOptions & { unanswered?: 'throw' | 'false' } = {}\n): VerifyOnChain {\n    const cache = opts.cache ?? new Map();\n    return async (proof, address) => {\n        const r = await writeProofOnChain(proof, address, { ...opts, cache });\n        if (r === 'no-answer') {\n            if (opts.unanswered === 'false') return false;\n            throw new UnansweredReadError('the chain could not be read');\n        }\n        return r;\n    };\n}\n"]}

package/dist/io.mjs

@@ -1,49 +1,70 @@
 import { UnansweredReadError } from './chunk-6NJU4VWR.mjs';
+import { normalizeAddress } from '@orangecheck/bip322';
 
-// src/io.ts
-async function addressUtxos(address, base, f, cache) {
-  const hit = cache?.get(address);
+async function readOutpoint(outpoint, opts = {}) {
+  const hit = opts.cache?.get(outpoint);
   if (hit) return hit;
+  const base = (opts.baseUrl ?? "https://mempool.space/api").replace(/\/+$/, "");
+  const f = opts.fetch ?? globalThis.fetch.bind(globalThis);
   const p = (async () => {
+    const sep = outpoint.lastIndexOf(":");
+    const txid = outpoint.slice(0, sep);
+    const vout = Number(outpoint.slice(sep + 1));
+    if (sep <= 0 || !/^[0-9a-f]{64}$/i.test(txid) || !Number.isInteger(vout) || vout < 0) {
+      return "missing";
+    }
     try {
-      const res = await f(`${base}/address/${encodeURIComponent(address)}/utxo`);
-      if (!res.ok) return null;
-      return await res.json();
+      const txRes = await f(`${base}/tx/${txid}`);
+      if (txRes.status === 404) return "missing";
+      if (!txRes.ok) return "unanswered";
+      const tx = await txRes.json();
+      const out = tx.vout?.[vout];
+      if (!out) return "missing";
+      const spendRes = await f(`${base}/tx/${txid}/outspend/${vout}`);
+      if (spendRes.status === 404) return "missing";
+      if (!spendRes.ok) return "unanswered";
+      const spend = await spendRes.json();
+      if (typeof spend.spent !== "boolean") return "unanswered";
+      return {
+        address: out.scriptpubkey_address ?? null,
+        value: typeof out.value === "number" ? out.value : null,
+        confirmed: tx.status?.confirmed === true,
+        height: tx.status?.block_height ?? null,
+        hash: tx.status?.block_hash ?? null,
+        spent: spend.spent
+      };
     } catch {
-      return null;
+      return "unanswered";
     }
   })();
-  cache?.set(address, p);
+  opts.cache?.set(outpoint, p);
+  void p.then((r) => {
+    if (r === "unanswered" && opts.cache?.get(outpoint) === p) opts.cache.delete(outpoint);
+  });
   return p;
 }
 async function writeProofOnChain(proof, authorAddress, opts = {}) {
-  const base = (opts.baseUrl ?? "https://mempool.space/api").replace(/\/+$/, "");
-  const f = opts.fetch ?? globalThis.fetch.bind(globalThis);
-  const utxos = await addressUtxos(authorAddress, base, f, opts.utxoCache);
-  if (!utxos) return "no-answer";
-  const sep = proof.outpoint.lastIndexOf(":");
-  if (sep <= 0) return false;
-  const txid = proof.outpoint.slice(0, sep);
-  const vout = Number.parseInt(proof.outpoint.slice(sep + 1), 10);
-  return utxos.some(
-    (u) => u.txid === txid && u.vout === vout && u.status?.confirmed === true && u.value === proof.value_sats && u.status?.block_height === proof.anchor_block_height && u.status?.block_hash === proof.anchor_block_hash
-  );
+  const coin = await readOutpoint(proof.outpoint, opts);
+  if (coin === "unanswered") return "no-answer";
+  if (coin === "missing") return false;
+  const owner = coin.address === null ? null : normalizeAddress(coin.address);
+  return owner !== null && owner === normalizeAddress(authorAddress) && coin.value === proof.value_sats && coin.confirmed && coin.height === proof.anchor_block_height && coin.hash === proof.anchor_block_hash && !coin.spent;
 }
 async function verifyWriteProofOnChain(proof, authorAddress, opts = {}) {
   return await writeProofOnChain(proof, authorAddress, opts) === true;
 }
 function esploraWriteProofCheck(opts = {}) {
-  const utxoCache = opts.utxoCache ?? /* @__PURE__ */ new Map();
+  const cache = opts.cache ?? /* @__PURE__ */ new Map();
   return async (proof, address) => {
-    const r = await writeProofOnChain(proof, address, { ...opts, utxoCache });
+    const r = await writeProofOnChain(proof, address, { ...opts, cache });
     if (r === "no-answer") {
-      if (opts.unanswered === "throw") throw new UnansweredReadError("the chain could not be read");
-      return false;
+      if (opts.unanswered === "false") return false;
+      throw new UnansweredReadError("the chain could not be read");
     }
     return r;
   };
 }
 
-export { esploraWriteProofCheck, verifyWriteProofOnChain, writeProofOnChain };
+export { esploraWriteProofCheck, readOutpoint, verifyWriteProofOnChain, writeProofOnChain };
 //# sourceMappingURL=io.mjs.map
 //# sourceMappingURL=io.mjs.map

package/dist/io.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/io.ts"],"names":[],"mappings":";;;AAyBA,eAAe,YAAA,CACX,OAAA,EACA,IAAA,EACA,CAAA,EACA,KAAA,EAC6B;AAC7B,EAAA,MAAM,GAAA,GAAM,KAAA,EAAO,GAAA,CAAI,OAAO,CAAA;AAC9B,EAAA,IAAI,KAAK,OAAO,GAAA;AAChB,EAAA,MAAM,KAAK,YAAY;AACnB,IAAA,IAAI;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,kBAAA,CAAmB,OAAO,CAAC,CAAA,KAAA,CAAO,CAAA;AACzE,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AACpB,MAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,IAC3B,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,IAAA;AAAA,IACX;AAAA,EACJ,CAAA,GAAG;AACH,EAAA,KAAA,EAAO,GAAA,CAAI,SAAS,CAAC,CAAA;AACrB,EAAA,OAAO,CAAA;AACX;AAQA,eAAsB,iBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACM;AAC9B,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,IAAW,2BAAA,EAA6B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC7E,EAAA,MAAM,IAAI,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACxD,EAAA,MAAM,QAAQ,MAAM,YAAA,CAAa,eAAe,IAAA,EAAM,CAAA,EAAG,KAAK,SAAS,CAAA;AACvE,EAAA,IAAI,CAAC,OAAO,OAAO,WAAA;AACnB,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAC1C,EAAA,IAAI,GAAA,IAAO,GAAG,OAAO,KAAA;AACrB,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,GAAG,GAAG,CAAA;AACxC,EAAA,MAAM,IAAA,GAAO,OAAO,QAAA,CAAS,KAAA,CAAM,SAAS,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA,EAAG,EAAE,CAAA;AAC9D,EAAA,OAAO,KAAA,CAAM,IAAA;AAAA,IACT,CAAC,CAAA,KACG,CAAA,CAAE,IAAA,KAAS,IAAA,IACX,EAAE,IAAA,KAAS,IAAA,IACX,CAAA,CAAE,MAAA,EAAQ,SAAA,KAAc,IAAA,IACxB,EAAE,KAAA,KAAU,KAAA,CAAM,UAAA,IAClB,CAAA,CAAE,MAAA,EAAQ,YAAA,KAAiB,MAAM,mBAAA,IACjC,CAAA,CAAE,MAAA,EAAQ,UAAA,KAAe,KAAA,CAAM;AAAA,GACvC;AACJ;AAGA,eAAsB,uBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACR;AAChB,EAAA,OAAQ,MAAM,iBAAA,CAAkB,KAAA,EAAO,aAAA,EAAe,IAAI,CAAA,KAAO,IAAA;AACrE;AAOO,SAAS,sBAAA,CACZ,IAAA,GAA4D,EAAC,EAChD;AACb,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,oBAAa,IAAI,GAAA,EAAI;AAC5C,EAAA,OAAO,OAAO,OAAO,OAAA,KAAY;AAC7B,IAAA,MAAM,CAAA,GAAI,MAAM,iBAAA,CAAkB,KAAA,EAAO,SAAS,EAAE,GAAG,IAAA,EAAM,SAAA,EAAW,CAAA;AACxE,IAAA,IAAI,MAAM,WAAA,EAAa;AACnB,MAAA,IAAI,KAAK,UAAA,KAAe,OAAA,EAAS,MAAM,IAAI,oBAAoB,6BAA6B,CAAA;AAC5F,MAAA,OAAO,KAAA;AAAA,IACX;AACA,IAAA,OAAO,CAAA;AAAA,EACX,CAAA;AACJ","file":"io.mjs","sourcesContent":["// Readers over a public Esplora API (mempool.space by default) for the checks\n// chat-core leaves to its caller. Public chain data only.\n\nimport type { VerifyOnChain, WriteProof } from './channel';\nimport { UnansweredReadError } from './read';\n\n/** One output from Esplora's /address/<addr>/utxo. */\nexport interface MempoolUtxo {\n    txid: string;\n    vout: number;\n    value?: number;\n    status?: { confirmed?: boolean; block_height?: number; block_hash?: string };\n}\n\n/** One address→UTXO-set read per distinct author for a batch of posts. */\nexport type WriteProofUtxoCache = Map<string, Promise<MempoolUtxo[] | null>>;\n\nexport interface EsploraOptions {\n    /** Esplora API base; default https://mempool.space/api. */\n    baseUrl?: string;\n    fetch?: typeof fetch;\n    /** Share one cache across the posts of a feed. */\n    utxoCache?: WriteProofUtxoCache;\n}\n\nasync function addressUtxos(\n    address: string,\n    base: string,\n    f: typeof fetch,\n    cache?: WriteProofUtxoCache\n): Promise<MempoolUtxo[] | null> {\n    const hit = cache?.get(address);\n    if (hit) return hit;\n    const p = (async () => {\n        try {\n            const res = await f(`${base}/address/${encodeURIComponent(address)}/utxo`);\n            if (!res.ok) return null;\n            return (await res.json()) as MempoolUtxo[];\n        } catch {\n            return null;\n        }\n    })();\n    cache?.set(address, p);\n    return p;\n}\n\n/**\n * Does a utxo-floor write proof match current chain state (§8.3.3), the\n * Bitcoin-load-bearing leg: the proof's outpoint is an unspent output of the\n * author's address with exactly the value, confirmation height and block hash\n * the proof states? 'no-answer' when the address's outputs could not be read.\n */\nexport async function writeProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean | 'no-answer'> {\n    const base = (opts.baseUrl ?? 'https://mempool.space/api').replace(/\\/+$/, '');\n    const f = opts.fetch ?? globalThis.fetch.bind(globalThis);\n    const utxos = await addressUtxos(authorAddress, base, f, opts.utxoCache);\n    if (!utxos) return 'no-answer';\n    const sep = proof.outpoint.lastIndexOf(':');\n    if (sep <= 0) return false;\n    const txid = proof.outpoint.slice(0, sep);\n    const vout = Number.parseInt(proof.outpoint.slice(sep + 1), 10);\n    return utxos.some(\n        (u) =>\n            u.txid === txid &&\n            u.vout === vout &&\n            u.status?.confirmed === true &&\n            u.value === proof.value_sats &&\n            u.status?.block_height === proof.anchor_block_height &&\n            u.status?.block_hash === proof.anchor_block_hash\n    );\n}\n\n/** writeProofOnChain, fail-closed: an unanswered read is false, so the post does not render. */\nexport async function verifyWriteProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean> {\n    return (await writeProofOnChain(proof, authorAddress, opts)) === true;\n}\n\n/**\n * A VerifyOnChain over Esplora, with one cache for the batch it is made for. An\n * unanswered read is false (a feed hides the post), or with `unanswered: 'throw'`\n * an UnansweredReadError, for a verifier that must say it could not tell.\n */\nexport function esploraWriteProofCheck(\n    opts: EsploraOptions & { unanswered?: 'false' | 'throw' } = {}\n): VerifyOnChain {\n    const utxoCache = opts.utxoCache ?? new Map();\n    return async (proof, address) => {\n        const r = await writeProofOnChain(proof, address, { ...opts, utxoCache });\n        if (r === 'no-answer') {\n            if (opts.unanswered === 'throw') throw new UnansweredReadError('the chain could not be read');\n            return false;\n        }\n        return r;\n    };\n}\n"]}
+{"version":3,"sources":["../src/io.ts"],"names":[],"mappings":";;;AA0CA,eAAsB,YAAA,CAClB,QAAA,EACA,IAAA,GAAuB,EAAC,EACwB;AAChD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,EAAO,GAAA,CAAI,QAAQ,CAAA;AACpC,EAAA,IAAI,KAAK,OAAO,GAAA;AAChB,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,IAAW,2BAAA,EAA6B,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC7E,EAAA,MAAM,IAAI,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACxD,EAAA,MAAM,KAAK,YAA8D;AACrE,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAClC,IAAA,MAAM,OAAO,MAAA,CAAO,QAAA,CAAS,KAAA,CAAM,GAAA,GAAM,CAAC,CAAC,CAAA;AAC3C,IAAA,IAAI,GAAA,IAAO,CAAA,IAAK,CAAC,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,IAAI,CAAA,IAAK,OAAO,CAAA,EAAG;AAClF,MAAA,OAAO,SAAA;AAAA,IACX;AACA,IAAA,IAAI;AACA,MAAA,MAAM,QAAQ,MAAM,CAAA,CAAE,GAAG,IAAI,CAAA,IAAA,EAAO,IAAI,CAAA,CAAE,CAAA;AAC1C,MAAA,IAAI,KAAA,CAAM,MAAA,KAAW,GAAA,EAAK,OAAO,SAAA;AACjC,MAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,OAAO,YAAA;AACtB,MAAA,MAAM,EAAA,GAAM,MAAM,KAAA,CAAM,IAAA,EAAK;AAI7B,MAAA,MAAM,GAAA,GAAM,EAAA,CAAG,IAAA,GAAO,IAAI,CAAA;AAC1B,MAAA,IAAI,CAAC,KAAK,OAAO,SAAA;AACjB,MAAA,MAAM,QAAA,GAAW,MAAM,CAAA,CAAE,CAAA,EAAG,IAAI,CAAA,IAAA,EAAO,IAAI,CAAA,UAAA,EAAa,IAAI,CAAA,CAAE,CAAA;AAC9D,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,EAAK,OAAO,SAAA;AACpC,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,OAAO,YAAA;AACzB,MAAA,MAAM,KAAA,GAAS,MAAM,QAAA,CAAS,IAAA,EAAK;AACnC,MAAA,IAAI,OAAO,KAAA,CAAM,KAAA,KAAU,SAAA,EAAW,OAAO,YAAA;AAC7C,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,IAAI,oBAAA,IAAwB,IAAA;AAAA,QACrC,OAAO,OAAO,GAAA,CAAI,KAAA,KAAU,QAAA,GAAW,IAAI,KAAA,GAAQ,IAAA;AAAA,QACnD,SAAA,EAAW,EAAA,CAAG,MAAA,EAAQ,SAAA,KAAc,IAAA;AAAA,QACpC,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,YAAA,IAAgB,IAAA;AAAA,QACnC,IAAA,EAAM,EAAA,CAAG,MAAA,EAAQ,UAAA,IAAc,IAAA;AAAA,QAC/B,OAAO,KAAA,CAAM;AAAA,OACjB;AAAA,IACJ,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,YAAA;AAAA,IACX;AAAA,EACJ,CAAA,GAAG;AACH,EAAA,IAAA,CAAK,KAAA,EAAO,GAAA,CAAI,QAAA,EAAU,CAAC,CAAA;AAC3B,EAAA,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM;AACf,IAAA,IAAI,CAAA,KAAM,YAAA,IAAgB,IAAA,CAAK,KAAA,EAAO,GAAA,CAAI,QAAQ,CAAA,KAAM,CAAA,EAAG,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA;AAAA,EACzF,CAAC,CAAA;AACD,EAAA,OAAO,CAAA;AACX;AAUA,eAAsB,iBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACM;AAC9B,EAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,KAAA,CAAM,UAAU,IAAI,CAAA;AACpD,EAAA,IAAI,IAAA,KAAS,cAAc,OAAO,WAAA;AAClC,EAAA,IAAI,IAAA,KAAS,WAAW,OAAO,KAAA;AAC/B,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,KAAY,OAAO,IAAA,GAAO,gBAAA,CAAiB,KAAK,OAAO,CAAA;AAC1E,EAAA,OACI,KAAA,KAAU,QACV,KAAA,KAAU,gBAAA,CAAiB,aAAa,CAAA,IACxC,IAAA,CAAK,UAAU,KAAA,CAAM,UAAA,IACrB,KAAK,SAAA,IACL,IAAA,CAAK,WAAW,KAAA,CAAM,mBAAA,IACtB,KAAK,IAAA,KAAS,KAAA,CAAM,iBAAA,IACpB,CAAC,IAAA,CAAK,KAAA;AAEd;AAGA,eAAsB,uBAAA,CAClB,KAAA,EACA,aAAA,EACA,IAAA,GAAuB,EAAC,EACR;AAChB,EAAA,OAAQ,MAAM,iBAAA,CAAkB,KAAA,EAAO,aAAA,EAAe,IAAI,CAAA,KAAO,IAAA;AACrE;AASO,SAAS,sBAAA,CACZ,IAAA,GAA4D,EAAC,EAChD;AACb,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,oBAAS,IAAI,GAAA,EAAI;AACpC,EAAA,OAAO,OAAO,OAAO,OAAA,KAAY;AAC7B,IAAA,MAAM,CAAA,GAAI,MAAM,iBAAA,CAAkB,KAAA,EAAO,SAAS,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,CAAA;AACpE,IAAA,IAAI,MAAM,WAAA,EAAa;AACnB,MAAA,IAAI,IAAA,CAAK,UAAA,KAAe,OAAA,EAAS,OAAO,KAAA;AACxC,MAAA,MAAM,IAAI,oBAAoB,6BAA6B,CAAA;AAAA,IAC/D;AACA,IAAA,OAAO,CAAA;AAAA,EACX,CAAA;AACJ","file":"io.mjs","sourcesContent":["// Readers over a public Esplora API (mempool.space by default) for the checks\n// chat-core leaves to its caller. Public chain data only.\n\nimport { normalizeAddress } from '@orangecheck/bip322';\n\nimport type { VerifyOnChain, WriteProof } from './channel';\nimport { UnansweredReadError } from './read';\n\n/** The coin a write proof names, as the explorer holds it. */\nexport interface OutpointRead {\n    /** The output's scriptpubkey_address; null for a script with none. */\n    address: string | null;\n    value: number | null;\n    confirmed: boolean;\n    height: number | null;\n    hash: string | null;\n    /** Spent, a spend still in the mempool included. */\n    spent: boolean;\n}\n\n/**\n * One read per outpoint for a batch of posts: two posts naming one coin read it\n * once. A read that got no answer is not kept, so the next asks again.\n */\nexport type WriteProofCache = Map<string, Promise<OutpointRead | 'missing' | 'unanswered'>>;\n\nexport interface EsploraOptions {\n    /** Esplora API base; default https://mempool.space/api. */\n    baseUrl?: string;\n    fetch?: typeof fetch;\n    /** Share one cache across the posts of a feed. */\n    cache?: WriteProofCache;\n}\n\n/**\n * The one coin a write proof names (§8.3.3 (1)): GET /tx/<txid> for the output\n * at vout, then GET /tx/<txid>/outspend/<vout>. A 404 from either, or a vout the\n * transaction does not have, is 'missing'. A 429, a 5xx, a timeout or a body\n * that does not parse is 'unanswered'. Reading the coin rather than the\n * address's whole UTXO set holds for any wallet: Esplora refuses to list an\n * address past a few hundred UTXOs, and anyone can send an author dust.\n */\nexport async function readOutpoint(\n    outpoint: string,\n    opts: EsploraOptions = {}\n): Promise<OutpointRead | 'missing' | 'unanswered'> {\n    const hit = opts.cache?.get(outpoint);\n    if (hit) return hit;\n    const base = (opts.baseUrl ?? 'https://mempool.space/api').replace(/\\/+$/, '');\n    const f = opts.fetch ?? globalThis.fetch.bind(globalThis);\n    const p = (async (): Promise<OutpointRead | 'missing' | 'unanswered'> => {\n        const sep = outpoint.lastIndexOf(':');\n        const txid = outpoint.slice(0, sep);\n        const vout = Number(outpoint.slice(sep + 1));\n        if (sep <= 0 || !/^[0-9a-f]{64}$/i.test(txid) || !Number.isInteger(vout) || vout < 0) {\n            return 'missing';\n        }\n        try {\n            const txRes = await f(`${base}/tx/${txid}`);\n            if (txRes.status === 404) return 'missing';\n            if (!txRes.ok) return 'unanswered';\n            const tx = (await txRes.json()) as {\n                vout?: { scriptpubkey_address?: string; value?: number }[];\n                status?: { confirmed?: boolean; block_height?: number; block_hash?: string };\n            };\n            const out = tx.vout?.[vout];\n            if (!out) return 'missing';\n            const spendRes = await f(`${base}/tx/${txid}/outspend/${vout}`);\n            if (spendRes.status === 404) return 'missing';\n            if (!spendRes.ok) return 'unanswered';\n            const spend = (await spendRes.json()) as { spent?: unknown };\n            if (typeof spend.spent !== 'boolean') return 'unanswered';\n            return {\n                address: out.scriptpubkey_address ?? null,\n                value: typeof out.value === 'number' ? out.value : null,\n                confirmed: tx.status?.confirmed === true,\n                height: tx.status?.block_height ?? null,\n                hash: tx.status?.block_hash ?? null,\n                spent: spend.spent,\n            };\n        } catch {\n            return 'unanswered';\n        }\n    })();\n    opts.cache?.set(outpoint, p);\n    void p.then((r) => {\n        if (r === 'unanswered' && opts.cache?.get(outpoint) === p) opts.cache.delete(outpoint);\n    });\n    return p;\n}\n\n/**\n * Does a utxo-floor write proof match current chain state (§8.3.3 (1)), the\n * Bitcoin-load-bearing leg: the proof's outpoint pays the author's address\n * (both in normal form, so a bech32 address in capitals is the same address)\n * exactly the value, confirmed at the height and block hash the proof states,\n * and is unspent (a spend still in the mempool counts as spent)? 'no-answer'\n * when the explorer did not answer; false when the coin is missing or differs.\n */\nexport async function writeProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean | 'no-answer'> {\n    const coin = await readOutpoint(proof.outpoint, opts);\n    if (coin === 'unanswered') return 'no-answer';\n    if (coin === 'missing') return false;\n    const owner = coin.address === null ? null : normalizeAddress(coin.address);\n    return (\n        owner !== null &&\n        owner === normalizeAddress(authorAddress) &&\n        coin.value === proof.value_sats &&\n        coin.confirmed &&\n        coin.height === proof.anchor_block_height &&\n        coin.hash === proof.anchor_block_hash &&\n        !coin.spent\n    );\n}\n\n/** writeProofOnChain, fail-closed: an unanswered read is false, so the post does not render. */\nexport async function verifyWriteProofOnChain(\n    proof: WriteProof,\n    authorAddress: string,\n    opts: EsploraOptions = {}\n): Promise<boolean> {\n    return (await writeProofOnChain(proof, authorAddress, opts)) === true;\n}\n\n/**\n * A VerifyOnChain over Esplora, with one cache for the batch it is made for. A\n * read that gets no answer throws UnansweredReadError, so a verifier says it\n * could not tell rather than read the silence as \"no\" (verifyChannelPosts\n * counts the post unchecked). `unanswered: 'false'` makes it false instead, for\n * a caller that only needs fail-closed.\n */\nexport function esploraWriteProofCheck(\n    opts: EsploraOptions & { unanswered?: 'throw' | 'false' } = {}\n): VerifyOnChain {\n    const cache = opts.cache ?? new Map();\n    return async (proof, address) => {\n        const r = await writeProofOnChain(proof, address, { ...opts, cache });\n        if (r === 'no-answer') {\n            if (opts.unanswered === 'false') return false;\n            throw new UnansweredReadError('the chain could not be read');\n        }\n        return r;\n    };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orangecheck/chat-core",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Verify OC Chat's public artifacts: channel descriptors and posts, directory listings and did:oc session devices. See https://github.com/orangecheck/oc-chat-protocol.",
   "keywords": [
     "bitcoin",
@@ -56,6 +56,7 @@
     "@noble/curves": "^1.9.7",
     "@noble/hashes": "^1.8.0",
     "@orangecheck/auth-core": "^2.27.0",
+    "@orangecheck/bip322": "^1.1.3",
     "@orangecheck/lock-core": "^1.4.0",
     "@orangecheck/lock-crypto": "^0.1.0",
     "@orangecheck/lock-device": "^0.8.0",
@@ -63,7 +64,6 @@
     "@orangecheck/stamp-ots": "^0.6.1"
   },
   "devDependencies": {
-    "@orangecheck/bip322": "^1.1.3",
     "@types/node": "^22.10.2",
     "tsup": "^8.3.5",
     "typescript": "^5.7.2",

package/src/binding.test.ts

@@ -337,6 +337,25 @@ describe('readChannelVersions: "no newer version" only when every read met the f
     });
 });
 
+describe('readChannelVersions: a page it cannot read past is a cut-off read (§8.3.1)', () => {
+    const ev = version(founderKey, genesis);
+    // 600 events under the channel's tag in one second, newer than the genesis: a
+    // page with \`until\` at that second brings back the same 500 every time.
+    const junk = Array.from({ length: 600 }, (_, i) => ({ ...ev, id: `junk-${i}`, created_at: ev.created_at + 86400, content: 'x' }));
+    const query = async (f: Record<string, unknown>) => {
+        const tagged = f['#t'] ? [...junk, ev].filter((e) => f.until === undefined || e.created_at <= (f.until as number)).slice(0, (f.limit as number) ?? Infinity) : [];
+        const byKey = Array.isArray(f.authors) && f.authors.includes(ev.pubkey) ? [ev] : [];
+        return { events: [...tagged, ...byKey], relayStatus: [{ eose: true }, { eose: true }, { eose: true }, { eose: true }] };
+    };
+    const keys = async () => ({ keys: [founderKey.nostrPk], answered: true, floor: true });
+
+    it('600 events in one second stall the open read: it is truncated, not complete', async () => {
+        const r = await readChannelVersions(genesis.channel_id, { query, everBoundKeys: keys }, FOUNDER);
+        expect(r.events.map((e) => e.id)).toContain(ev.id);
+        expect(r.truncated).toBe(true);
+    });
+});
+
 describe('recordReads.liveness for an address binding with a relay that did not answer', () => {
     const ADDR = 'bc1qmr7qn2t0ahj56ztpdswt54kn2r863ukd8wadj8';
     const kp = generateDeviceKey();

package/src/channel.test.ts

@@ -34,6 +34,7 @@ import {
     type PostContent,
 } from './channel';
 import type { NostrEvent } from './event';
+import { UnansweredReadError } from './read';
 
 const deriveChatIdentity = (sk: Uint8Array) => deriveNostrKey(sk);
 
@@ -1031,7 +1032,8 @@ describe('channels — a feed of posts (verifyChannelPosts, §8.3.2, §8.3.5)',
         const spoof = buildPostEvent({ deviceSk: ADMIN_DEVICE, content: { ...post('c'), author_inbox_pubkey: adminInbox }, createdAt: 150 });
         const elsewhere = buildPostEvent({ deviceSk: STRANGER_DEVICE, content: post('d', { channel_id: 'e'.repeat(64) }), createdAt: 120 });
         const got = await feed([a, b, spoof, elsewhere]);
-        expect(got.map((p) => p.post.body)).toEqual(['b', 'a']);
+        expect(got.posts.map((p) => p.post.body)).toEqual(['b', 'a']);
+        expect([got.unchecked, got.removalsChecked]).toEqual([0, true]);
     });
 
     it('a removal by a roster admin takes the post out; one by a stranger does not', async () => {
@@ -1043,20 +1045,132 @@ describe('channels — a feed of posts (verifyChannelPosts, §8.3.2, §8.3.5)',
             createdAt: 110,
         });
         const byStranger = buildPostEvent({ deviceSk: STRANGER_DEVICE, content: post('', { removes: pid }), createdAt: 110 });
-        expect(await feed([target, byStranger])).toHaveLength(1);
-        expect(await feed([target, byFounder])).toHaveLength(0);
+        expect((await feed([target, byStranger])).posts).toHaveLength(1);
+        expect((await feed([target, byFounder])).posts).toHaveLength(0);
     });
 
     it('two copies of one post count once, at the lower created_at', async () => {
         const first = buildPostEvent({ deviceSk: STRANGER_DEVICE, content: post('x'), createdAt: 300 });
         const again = buildPostEvent({ deviceSk: STRANGER_DEVICE, content: post('x'), createdAt: 100 });
-        const got = await feed([first, again]);
-        expect(got).toHaveLength(1);
-        expect(got[0]!.event.created_at).toBe(100);
+        const { posts } = await feed([first, again]);
+        expect(posts).toHaveLength(1);
+        expect(posts[0]!.event.created_at).toBe(100);
     });
 
     it('a closed channel shows what was posted but takes no new post through the gate', async () => {
         const p = buildPostEvent({ deviceSk: STRANGER_DEVICE, content: post('late'), createdAt: 100 });
-        expect(await feed([p], { ...open, status: 'closed' })).toHaveLength(0);
+        expect((await feed([p], { ...open, status: 'closed' })).posts).toHaveLength(0);
+    });
+});
+
+describe('channels — a gated feed when a read gets no answer (verifyChannelPosts, §8.3.3)', () => {
+    const STRANGER_DEVICE = new Uint8Array(32).fill(13);
+    const strangerInbox = deriveChatIdentity(STRANGER_DEVICE).nostrPk;
+    const bound: IsBound = async (pk, addr) =>
+        (await boundReal(pk, addr)) || (pk === strangerInbox && addr === STRANGER);
+    const unread = async (): Promise<never> => {
+        throw new UnansweredReadError('the chain could not be read');
+    };
+    const coin = (n: number) => `${'b'.repeat(63)}${n}:0`;
+    /** A stranger's gated post naming coin n, with its control_sig. */
+    const gated = (body: string, n: number, createdAt = 100) =>
+        buildPostEvent({
+            deviceSk: STRANGER_DEVICE,
+            content: {
+                ...POST,
+                channel_id: vDescV1.channel_id,
+                author_address: STRANGER,
+                author_inbox_pubkey: strangerInbox,
+                body,
+                write_proof: { ...POST.write_proof!, outpoint: coin(n) },
+            },
+            createdAt,
+            controlSig: 'sig',
+        });
+    const byFounder = (body: string, extra: Partial<PostContent> = {}) =>
+        buildPostEvent({
+            deviceSk: FOUNDER_DEVICE,
+            content: {
+                ...POST,
+                channel_id: vDescV1.channel_id,
+                author_address: FOUNDER,
+                author_inbox_pubkey: founderInbox,
+                body,
+                write_proof: undefined,
+                ...extra,
+            },
+            createdAt: 200,
+        });
+    const feed = (events: NostrEvent[], o: Partial<Parameters<typeof verifyChannelPosts>[2]> = {}) =>
+        verifyChannelPosts(events, vDescV1, {
+            tipHeight: 800200,
+            isBound: bound,
+            verifyBip322: yes,
+            verifyOnChain: async (proof) => proof.outpoint !== coin(9),
+            ...o,
+        });
+
+    it('a coin read with no answer leaves that post unchecked, and the rest of the feed still verifies', async () => {
+        const verifyOnChain = async (proof: { outpoint: string }) => {
+            if (proof.outpoint === coin(1)) throw new UnansweredReadError('429');
+            return true;
+        };
+        const got = await feed([gated('unread', 1), gated('read', 2)], { verifyOnChain });
+        expect(got.posts.map((p) => p.post.body)).toEqual(['read']);
+        expect(got.unchecked).toBe(1);
+    });
+
+    it('a forged coin is dropped, not counted unchecked', async () => {
+        const got = await feed([gated('forged', 9)]);
+        expect([got.posts.length, got.unchecked]).toEqual([0, 0]);
+    });
+
+    it('a binding read no relay answered leaves the post unchecked, not refused', async () => {
+        const got = await feed([gated('a', 1)], { isBound: unread });
+        expect([got.posts.length, got.unchecked]).toEqual([0, 1]);
+    });
+
+    it("with no tip read, a stranger's gated post is unchecked and the founder's still shows", async () => {
+        const got = await feed([gated('stranger', 1), byFounder('founder')], { tipHeight: 'unanswered' });
+        expect(got.posts.map((p) => p.post.body)).toEqual(['founder']);
+        expect(got.unchecked).toBe(1);
+    });
+
+    it('with no tip read, a post the gate refuses on its face is still refused', async () => {
+        const noSig = buildPostEvent({
+            deviceSk: STRANGER_DEVICE,
+            content: { ...POST, author_address: STRANGER, author_inbox_pubkey: strangerInbox, body: 'no sig' },
+            createdAt: 100,
+        });
+        const got = await feed([noSig], { tipHeight: 'unanswered' });
+        expect([got.posts.length, got.unchecked]).toEqual([0, 0]);
+    });
+
+    it('a removal that could not be checked leaves removals unchecked', async () => {
+        const target = gated('spam', 2);
+        const removal = byFounder('', { removes: postId(JSON.parse(target.content) as PostContent) });
+        const got = await feed([target, removal], { isBound: async (pk, addr) => (pk === founderInbox ? unread() : bound(pk, addr)) });
+        expect(got.removalsChecked).toBe(false);
+        expect(got.unchecked).toBe(1);
+    });
+
+    it('a post shown from one copy is not counted unchecked for another', async () => {
+        let first = true;
+        const verifyOnChain = async () => {
+            if (first) {
+                first = false;
+                throw new UnansweredReadError('429');
+            }
+            return true;
+        };
+        const got = await feed([gated('x', 1, 300), gated('x', 1, 100)], { verifyOnChain });
+        expect([got.posts.length, got.unchecked]).toEqual([1, 0]);
+    });
+
+    it('an error that is not an unanswered read still reaches the caller', async () => {
+        const broken = async (): Promise<boolean> => {
+            throw new TypeError('a bug, not a read');
+        };
+        await expect(feed([gated('a', 1)], { verifyOnChain: broken })).rejects.toBeInstanceOf(TypeError);
     });
 });