@orangecheck/sdk 1.1.0 → 1.2.0

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { Buffer } from 'buffer';
+import { Buffer as Buffer$1 } from 'buffer';
 import { Verifier } from 'bip322-js';
 import * as bitcoinMessage from 'bitcoinjs-message';
 import { schnorr } from '@noble/curves/secp256k1.js';
@@ -712,7 +712,7 @@ function looksLikeHex(s) {
 }
 function toBase64Maybe(sig) {
   if (looksLikeHex(sig)) {
-    return Buffer.from(sig, "hex").toString("base64");
+    return Buffer$1.from(sig, "hex").toString("base64");
   }
   return sig;
 }
@@ -1338,6 +1338,63 @@ function verifyBinding(envelope) {
     return fail("malformed");
   }
 }
+function xOnlyHexToNpub(hex) {
+  const bytes = fromHex(hex);
+  if (bytes.length !== 32) throw new Error("x-only Nostr key must be 32 bytes");
+  return bech32.encode("npub", bech32.toWords(bytes), 90);
+}
+function buildBindingEventTemplate(params) {
+  const id = bindingId(params.message);
+  return {
+    kind: BINDING_KIND,
+    pubkey: params.nostrPubkeyHex.toLowerCase(),
+    created_at: params.createdAt ?? Math.floor(Date.now() / 1e3),
+    tags: [
+      ["d", `oc-attest-binding:${id}`],
+      ["btc", params.btc],
+      ["oc", "binding-attestation"],
+      ["v", "1"]
+    ],
+    content: JSON.stringify({ message: params.message, btc_signature: params.btcSignature })
+  };
+}
+function parseBindingFields(message) {
+  const body = message.split("\n");
+  const at = (i, prefix) => {
+    const line = body[i];
+    if (typeof line !== "string" || !line.startsWith(prefix)) {
+      throw new Error(`binding message line ${i + 1} is malformed`);
+    }
+    return line.slice(prefix.length);
+  };
+  return {
+    principal: at(2, "principal: "),
+    btc: at(3, "btc: "),
+    nostr: at(4, "nostr: ")
+  };
+}
+function toBase64Url(s) {
+  const bytes = new TextEncoder().encode(s);
+  let bin = "";
+  for (const b of bytes) bin += String.fromCharCode(b);
+  const b64 = typeof btoa !== "undefined" ? btoa(bin) : Buffer.from(bytes).toString("base64");
+  return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function assembleBindingEnvelope(params) {
+  const { principal, btc, nostr } = parseBindingFields(params.message);
+  return {
+    binding_id: bindingId(params.message),
+    v: 1,
+    principal,
+    btc,
+    nostr,
+    message: params.message,
+    message_b64url: toBase64Url(params.message),
+    btc_signature: params.btcSignature,
+    btc_scheme: params.btcScheme ?? "bip322",
+    nostr_event: params.nostrEvent
+  };
+}
 var AUTH_HEADER = "orangecheck-auth";
 var AUTH_ACK = "I authorize this session under the OrangeCheck auth challenge.";
 function randomNonce() {
@@ -1455,7 +1512,7 @@ async function verifyChallenge(opts) {
   let sigValid = false;
   try {
     if (scheme === "bip322") {
-      const sigBase64 = /^[0-9a-fA-F]+$/.test(opts.signature) && opts.signature.length % 2 === 0 ? Buffer.from(opts.signature, "hex").toString("base64") : opts.signature;
+      const sigBase64 = /^[0-9a-fA-F]+$/.test(opts.signature) && opts.signature.length % 2 === 0 ? Buffer$1.from(opts.signature, "hex").toString("base64") : opts.signature;
       sigValid = Verifier.verifySignature(address, opts.message, sigBase64);
     } else if (scheme === "legacy") {
       if (!/^[1m][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(address)) {
@@ -2273,6 +2330,6 @@ var STATUS_META = {
   }
 };
 
-export { DEFAULT_RELAYS, STATUS_META, bindingId, buildBindingMessage, buildCanonicalMessage, check, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueChallenge, parseAttestationFromEvent, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify2 as verify, verifyAllIdentities, verifyAttestationById, verifyBinding, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
+export { DEFAULT_RELAYS, STATUS_META, assembleBindingEnvelope, bindingId, buildBindingEventTemplate, buildBindingMessage, buildCanonicalMessage, check, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueChallenge, parseAttestationFromEvent, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify2 as verify, verifyAllIdentities, verifyAttestationById, verifyBinding, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity, xOnlyHexToNpub };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map