@orangecheck/sdk 0.1.2 → 0.1.4

package/dist/index.js

@@ -3,8 +3,8 @@
 var buffer = require('buffer');
 var bip322Js = require('bip322-js');
 var bitcoinMessage = require('bitcoinjs-message');
-var secp256k1 = require('@noble/curves/secp256k1');
-var sha2 = require('@noble/hashes/sha2');
+var secp256k1_js = require('@noble/curves/secp256k1.js');
+var sha2_js = require('@noble/hashes/sha2.js');
 var base = require('@scure/base');
 
 function _interopNamespace(e) {
@@ -89,9 +89,12 @@ function parseIdentities(identitiesStr) {
   }
   return bindings;
 }
-function buildCanonicalMessage({ address, identities }, extensions = {}) {
-  const nonce = randomNonce16BHexLower();
-  const issuedAt = (/* @__PURE__ */ new Date()).toISOString();
+function buildCanonicalMessage({ address, identities }, extensions = {}, options = {}) {
+  const nonce = options.nonce ?? randomNonce16BHexLower();
+  if (!/^[0-9a-f]{32}$/.test(nonce)) {
+    throw new Error(`invalid nonce: must be 32 lowercase hex chars`);
+  }
+  const issuedAt = options.issuedAt ?? (/* @__PURE__ */ new Date()).toISOString();
   const identitiesStr = formatIdentities(identities);
   const core = [
     "orangecheck",
@@ -255,16 +258,15 @@ async function publishToRelays(event, relays = DEFAULT_RELAYS) {
       ws = new WebSocket(relayUrl);
       const wsRef = ws;
       await new Promise((resolve, reject) => {
-        const timeout = setTimeout(() => {
+        const deadline = setTimeout(() => {
           wsRef.close();
-          reject(new Error("Connection timeout"));
-        }, 5e3);
+          reject(new Error("Relay publish timeout"));
+        }, 1e4);
         const cleanup = () => {
-          clearTimeout(timeout);
+          clearTimeout(deadline);
           wsRef.close();
         };
         wsRef.onopen = () => {
-          clearTimeout(timeout);
           wsRef.send(JSON.stringify(["EVENT", event]));
         };
         wsRef.onmessage = (msg) => {
@@ -302,7 +304,7 @@ async function publishToRelays(event, relays = DEFAULT_RELAYS) {
           reject(err);
         };
         wsRef.onclose = () => {
-          clearTimeout(timeout);
+          clearTimeout(deadline);
         };
       });
     } catch (err) {
@@ -680,6 +682,24 @@ async function getAttestationsForIdentity(protocol, identifier, relays = DEFAULT
   log3.info({ protocol, identifier }, "Getting all attestations for identity");
   return discoverAttestations({ identity: { protocol, identifier }, relays });
 }
+function formatIdentitiesForDisplay(identities) {
+  return identities.map((id) => `${id.protocol}:${id.identifier}`).join(", ");
+}
+function getVerificationUrl(attestationId, baseUrl = "https://ochk.io") {
+  return `${baseUrl}/attest/${attestationId}`;
+}
+function extractAttestationIdFromUrl(url) {
+  try {
+    const u = new URL(url);
+    const m = u.pathname.match(/^\/attest\/([0-9a-f]{64})\/?$/i);
+    if (m) return m[1].toLowerCase();
+    const q = u.searchParams.get("id");
+    if (q && /^[0-9a-f]{64}$/i.test(q)) return q.toLowerCase();
+    return null;
+  } catch {
+    return null;
+  }
+}
 
 // src/scoring.ts
 function scoreV0(sats, days) {
@@ -703,12 +723,12 @@ function computeScore(sats, days, config) {
       return null;
   }
 }
+function computeAllScores(sats, days) {
+  return { v0: scoreV0(sats, days), tier: scoreTier(sats, days) };
+}
 
 // src/verify.ts
 var log4 = createLogger("ocp/verify");
-function scoreV02(sats, days) {
-  return computeScore(sats, days, { algorithm: "v0" });
-}
 function looksLikeHex(s) {
   return /^[0-9a-fA-F]+$/.test(s) && s.length % 2 === 0;
 }
@@ -972,7 +992,7 @@ async function verify2(input, opts = {}) {
       const metrics = {
         sats_bonded,
         days_unspent,
-        score: scoreV02(sats_bonded, days_unspent)
+        score: computeScore(sats_bonded, days_unspent, { algorithm: "v0" })
         // ≈ 55.26
       };
       codes.push("sig_ok_bip322");
@@ -1068,7 +1088,7 @@ async function verify2(input, opts = {}) {
       const metrics = {
         sats_bonded,
         days_unspent,
-        score: scoreV02(sats_bonded, days_unspent)
+        score: computeScore(sats_bonded, days_unspent, { algorithm: "v0" })
       };
       return {
         ok: true,
@@ -1206,16 +1226,20 @@ function parseChallenge(message) {
     throw new Error("not an orangecheck-auth challenge");
   }
   const out = { extensions: [] };
-  const coreKeys = /* @__PURE__ */ new Set(["address", "nonce", "issued_at", "expires_at", "ack"]);
-  let seenCore = 0;
+  const coreKeys = ["address", "nonce", "issued_at", "expires_at", "ack"];
+  const coreKeySet = new Set(coreKeys);
+  const seenCore = /* @__PURE__ */ new Set();
   for (let i = 1; i < lines.length; i++) {
     const line = lines[i] ?? "";
     const sep = line.indexOf(": ");
     if (sep === -1) continue;
     const key = line.slice(0, sep);
     const val = line.slice(sep + 2);
-    if (coreKeys.has(key)) {
-      seenCore++;
+    if (coreKeySet.has(key)) {
+      if (seenCore.has(key)) {
+        throw new Error(`duplicate core key in challenge: ${key}`);
+      }
+      seenCore.add(key);
       if (key === "address") out.address = val;
       else if (key === "nonce") out.nonce = val;
       else if (key === "issued_at") out.issuedAt = new Date(val);
@@ -1227,8 +1251,8 @@ function parseChallenge(message) {
       if (key === "purpose") out.purpose = val;
     }
   }
-  if (seenCore !== 5) {
-    throw new Error(`challenge missing core lines (${seenCore}/5)`);
+  if (seenCore.size !== coreKeys.length) {
+    throw new Error(`challenge missing core lines (${seenCore.size}/${coreKeys.length})`);
   }
   return out;
 }
@@ -1720,7 +1744,7 @@ async function verifyNostrEventSignature(event) {
       event.tags ?? [],
       event.content ?? ""
     ]);
-    const computedId = toHex(sha2.sha256(new TextEncoder().encode(preimage)));
+    const computedId = toHex(sha2_js.sha256(new TextEncoder().encode(preimage)));
     if (computedId !== event.id.toLowerCase()) {
       log7.warn(
         { eventId: event.id, computedId },
@@ -1728,7 +1752,7 @@ async function verifyNostrEventSignature(event) {
       );
       return false;
     }
-    return secp256k1.schnorr.verify(fromHex(event.sig), fromHex(event.id), fromHex(event.pubkey));
+    return secp256k1_js.schnorr.verify(fromHex(event.sig), fromHex(event.id), fromHex(event.pubkey));
   } catch (err) {
     log7.warn({ err }, "schnorr verify threw");
     return false;
@@ -2092,12 +2116,15 @@ exports.DEFAULT_RELAYS = DEFAULT_RELAYS;
 exports.STATUS_META = STATUS_META;
 exports.buildCanonicalMessage = buildCanonicalMessage;
 exports.check = check;
+exports.computeAllScores = computeAllScores;
 exports.computeScore = computeScore;
 exports.createAttestation = createAttestation;
 exports.createAttestationEnvelope = createAttestationEnvelope;
 exports.createAttestationEvent = createAttestationEvent;
 exports.discoverAttestations = discoverAttestations;
+exports.extractAttestationIdFromUrl = extractAttestationIdFromUrl;
 exports.formatIdentities = formatIdentities;
+exports.formatIdentitiesForDisplay = formatIdentitiesForDisplay;
 exports.generateAttestationId = generateAttestationId;
 exports.generateGistTemplate = generateGistTemplate;
 exports.generateTweetText = generateTweetText;
@@ -2116,6 +2143,7 @@ exports.getTwitterComposeUrl = getTwitterComposeUrl;
 exports.getTwitterVerificationInstructions = getTwitterVerificationInstructions;
 exports.getVerificationInstructions = getVerificationInstructions;
 exports.getVerificationSummary = getVerificationSummary;
+exports.getVerificationUrl = getVerificationUrl;
 exports.getWellKnownUrl = getWellKnownUrl;
 exports.isDnsIdentityVerified = isDnsIdentityVerified;
 exports.isGitHubIdentityVerified = isGitHubIdentityVerified;