@orangecheck/sdk 0.1.2 → 0.1.4

package/dist/index.mjs

@@ -1,8 +1,8 @@
 import { Buffer } from 'buffer';
 import { Verifier } from 'bip322-js';
 import * as bitcoinMessage from 'bitcoinjs-message';
-import { schnorr } from '@noble/curves/secp256k1';
-import { sha256 } from '@noble/hashes/sha2';
+import { schnorr } from '@noble/curves/secp256k1.js';
+import { sha256 } from '@noble/hashes/sha2.js';
 import { bech32 } from '@scure/base';
 
 // src/canonical.ts
@@ -67,9 +67,12 @@ function parseIdentities(identitiesStr) {
   }
   return bindings;
 }
-function buildCanonicalMessage({ address, identities }, extensions = {}) {
-  const nonce = randomNonce16BHexLower();
-  const issuedAt = (/* @__PURE__ */ new Date()).toISOString();
+function buildCanonicalMessage({ address, identities }, extensions = {}, options = {}) {
+  const nonce = options.nonce ?? randomNonce16BHexLower();
+  if (!/^[0-9a-f]{32}$/.test(nonce)) {
+    throw new Error(`invalid nonce: must be 32 lowercase hex chars`);
+  }
+  const issuedAt = options.issuedAt ?? (/* @__PURE__ */ new Date()).toISOString();
   const identitiesStr = formatIdentities(identities);
   const core = [
     "orangecheck",
@@ -233,16 +236,15 @@ async function publishToRelays(event, relays = DEFAULT_RELAYS) {
       ws = new WebSocket(relayUrl);
       const wsRef = ws;
       await new Promise((resolve, reject) => {
-        const timeout = setTimeout(() => {
+        const deadline = setTimeout(() => {
           wsRef.close();
-          reject(new Error("Connection timeout"));
-        }, 5e3);
+          reject(new Error("Relay publish timeout"));
+        }, 1e4);
         const cleanup = () => {
-          clearTimeout(timeout);
+          clearTimeout(deadline);
           wsRef.close();
         };
         wsRef.onopen = () => {
-          clearTimeout(timeout);
           wsRef.send(JSON.stringify(["EVENT", event]));
         };
         wsRef.onmessage = (msg) => {
@@ -280,7 +282,7 @@ async function publishToRelays(event, relays = DEFAULT_RELAYS) {
           reject(err);
         };
         wsRef.onclose = () => {
-          clearTimeout(timeout);
+          clearTimeout(deadline);
         };
       });
     } catch (err) {
@@ -658,6 +660,24 @@ async function getAttestationsForIdentity(protocol, identifier, relays = DEFAULT
   log3.info({ protocol, identifier }, "Getting all attestations for identity");
   return discoverAttestations({ identity: { protocol, identifier }, relays });
 }
+function formatIdentitiesForDisplay(identities) {
+  return identities.map((id) => `${id.protocol}:${id.identifier}`).join(", ");
+}
+function getVerificationUrl(attestationId, baseUrl = "https://ochk.io") {
+  return `${baseUrl}/attest/${attestationId}`;
+}
+function extractAttestationIdFromUrl(url) {
+  try {
+    const u = new URL(url);
+    const m = u.pathname.match(/^\/attest\/([0-9a-f]{64})\/?$/i);
+    if (m) return m[1].toLowerCase();
+    const q = u.searchParams.get("id");
+    if (q && /^[0-9a-f]{64}$/i.test(q)) return q.toLowerCase();
+    return null;
+  } catch {
+    return null;
+  }
+}
 
 // src/scoring.ts
 function scoreV0(sats, days) {
@@ -681,12 +701,12 @@ function computeScore(sats, days, config) {
       return null;
   }
 }
+function computeAllScores(sats, days) {
+  return { v0: scoreV0(sats, days), tier: scoreTier(sats, days) };
+}
 
 // src/verify.ts
 var log4 = createLogger("ocp/verify");
-function scoreV02(sats, days) {
-  return computeScore(sats, days, { algorithm: "v0" });
-}
 function looksLikeHex(s) {
   return /^[0-9a-fA-F]+$/.test(s) && s.length % 2 === 0;
 }
@@ -950,7 +970,7 @@ async function verify2(input, opts = {}) {
       const metrics = {
         sats_bonded,
         days_unspent,
-        score: scoreV02(sats_bonded, days_unspent)
+        score: computeScore(sats_bonded, days_unspent, { algorithm: "v0" })
         // ≈ 55.26
       };
       codes.push("sig_ok_bip322");
@@ -1046,7 +1066,7 @@ async function verify2(input, opts = {}) {
       const metrics = {
         sats_bonded,
         days_unspent,
-        score: scoreV02(sats_bonded, days_unspent)
+        score: computeScore(sats_bonded, days_unspent, { algorithm: "v0" })
       };
       return {
         ok: true,
@@ -1184,16 +1204,20 @@ function parseChallenge(message) {
     throw new Error("not an orangecheck-auth challenge");
   }
   const out = { extensions: [] };
-  const coreKeys = /* @__PURE__ */ new Set(["address", "nonce", "issued_at", "expires_at", "ack"]);
-  let seenCore = 0;
+  const coreKeys = ["address", "nonce", "issued_at", "expires_at", "ack"];
+  const coreKeySet = new Set(coreKeys);
+  const seenCore = /* @__PURE__ */ new Set();
   for (let i = 1; i < lines.length; i++) {
     const line = lines[i] ?? "";
     const sep = line.indexOf(": ");
     if (sep === -1) continue;
     const key = line.slice(0, sep);
     const val = line.slice(sep + 2);
-    if (coreKeys.has(key)) {
-      seenCore++;
+    if (coreKeySet.has(key)) {
+      if (seenCore.has(key)) {
+        throw new Error(`duplicate core key in challenge: ${key}`);
+      }
+      seenCore.add(key);
       if (key === "address") out.address = val;
       else if (key === "nonce") out.nonce = val;
       else if (key === "issued_at") out.issuedAt = new Date(val);
@@ -1205,8 +1229,8 @@ function parseChallenge(message) {
       if (key === "purpose") out.purpose = val;
     }
   }
-  if (seenCore !== 5) {
-    throw new Error(`challenge missing core lines (${seenCore}/5)`);
+  if (seenCore.size !== coreKeys.length) {
+    throw new Error(`challenge missing core lines (${seenCore.size}/${coreKeys.length})`);
   }
   return out;
 }
@@ -2066,6 +2090,6 @@ var STATUS_META = {
   }
 };
 
-export { DEFAULT_RELAYS, STATUS_META, buildCanonicalMessage, check, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, formatIdentities, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueChallenge, parseAttestationFromEvent, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify2 as verify, verifyAllIdentities, verifyAttestationById, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
+export { DEFAULT_RELAYS, STATUS_META, buildCanonicalMessage, check, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueChallenge, parseAttestationFromEvent, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify2 as verify, verifyAllIdentities, verifyAttestationById, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map