@orangecheck/sdk 1.11.0 → 1.13.0

package/README.md

@@ -145,6 +145,40 @@ Now the gate doesn't have to trust the client — the address it sees has been c
 
 ---
 
+## Bonds: one coin backing one account
+
+An attestation publishes an address. A bond keeps it private. The holder signs
+once to back one subject with one unspent coin, and whoever relies on the bond
+sees only floors (at least N sats, at least D days) and a nullifier that is the
+same for that coin at that site and unrelated anywhere else. The registry keys
+the nullifier with its own secret, so nobody can find the coin by hashing
+outpoints. Not to be confused with an attestation's `bond:` line (an amount at
+a public address) or `@orangecheck/pledge-core`'s `verifyBond`. Spec:
+[`BOND.md`](https://github.com/orangecheck/oc-attest-protocol/blob/main/BOND.md).
+
+```ts
+import { bondFloors, bondNullifier, esploraSource, issueBondMessage, verifyBond } from '@orangecheck/sdk';
+
+// Registry: hand the holder a message naming their coin and your subject.
+const { message } = issueBondMessage({ address, outpoint: `${txid}:${vout}`, subject: didOc });
+
+// The holder signs it with BIP-322 in their wallet, then you verify the
+// signature and the coin: unspent, confirmed, 6+ deep, at that address.
+const r = await verifyBond({ message, signature, subject: didOc, source: esploraSource() });
+if (r.ok) {
+    const age = r.bond.tip.height - r.bond.confirmed_height + 1;
+    // NULLIFIER_KEY: your registry's secret, 32+ bytes, kept for good.
+    const nullifier = bondNullifier(NULLIFIER_KEY, audience, r.bond.outpoint);
+    const claim = { ...bondFloors(r.bond.sats, age), nullifier };
+}
+```
+
+`checkBondCoin` re-checks a stored bond's coin later; a spent coin ends the
+bond. Ban a nullifier and you've banned the coin: the holder has to move it to
+get past the ban, and moving it restarts its age.
+
+---
+
 ## Creating an attestation (issuer side)
 
 If you're building a wallet, a Nostr client, or a settings page where users should be able to _create_ a proof, use:
@@ -248,6 +282,13 @@ createAttestation(options: CreateAttestationOptions): Promise<AttestationEnvelop
 issueChallenge(options): Challenge
 verifyChallenge(options): Promise<VerifyChallengeResult>
 
+// Bonds (BOND.md).
+issueBondMessage(options): { message, nonce, expiresAt }
+verifyBond(options): Promise<BondResult>
+checkBondCoin(options): Promise<...>
+bondNullifier(key, audience, outpoint): string
+bondFloors(sats, ageBlocks): { sats_floor, days_floor }
+
 // Building blocks.
 buildCanonicalMessage(...)
 generateAttestationId(msg: string): Promise<string>

package/dist/attestation.d.mts

@@ -1,4 +1,4 @@
-import { S as Scheme, I as IdentityBinding, A as AttestationEnvelope } from './types-D9Tb1roj.mjs';
+import { S as Scheme, I as IdentityBinding, A as AttestationEnvelope } from './types-BBRMCgMo.mjs';
 
 interface CreateAttestationOptions {
     message: string;

package/dist/attestation.d.ts

@@ -1,4 +1,4 @@
-import { S as Scheme, I as IdentityBinding, A as AttestationEnvelope } from './types-D9Tb1roj.js';
+import { S as Scheme, I as IdentityBinding, A as AttestationEnvelope } from './types-BBRMCgMo.js';
 
 interface CreateAttestationOptions {
     message: string;

package/dist/canonical.d.mts

@@ -1,4 +1,4 @@
-import { I as IdentityBinding, S as Scheme, A as AttestationEnvelope } from './types-D9Tb1roj.mjs';
+import { I as IdentityBinding, S as Scheme, A as AttestationEnvelope } from './types-BBRMCgMo.mjs';
 
 interface CanonicalInput {
     address: string;

package/dist/canonical.d.ts

@@ -1,4 +1,4 @@
-import { I as IdentityBinding, S as Scheme, A as AttestationEnvelope } from './types-D9Tb1roj.js';
+import { I as IdentityBinding, S as Scheme, A as AttestationEnvelope } from './types-BBRMCgMo.js';
 
 interface CanonicalInput {
     address: string;

package/dist/challenge.d.mts

@@ -1,4 +1,4 @@
-import { S as Scheme } from './types-D9Tb1roj.mjs';
+import { S as Scheme } from './types-BBRMCgMo.mjs';
 
 interface IssueChallengeOptions {
     address: string;

package/dist/challenge.d.ts

@@ -1,4 +1,4 @@
-import { S as Scheme } from './types-D9Tb1roj.js';
+import { S as Scheme } from './types-BBRMCgMo.js';
 
 interface IssueChallengeOptions {
     address: string;

package/dist/identity.d.mts

@@ -1,4 +1,4 @@
-import { c as NostrEvent, I as IdentityBinding } from './types-D9Tb1roj.mjs';
+import { c as NostrEvent, I as IdentityBinding } from './types-BBRMCgMo.mjs';
 
 interface DnsVerificationResult {
     verified: boolean;

package/dist/identity.d.ts

@@ -1,4 +1,4 @@
-import { c as NostrEvent, I as IdentityBinding } from './types-D9Tb1roj.js';
+import { c as NostrEvent, I as IdentityBinding } from './types-BBRMCgMo.js';
 
 interface DnsVerificationResult {
     verified: boolean;

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { a as VerifyOptions, I as IdentityBinding, N as Network, c as NostrEvent, d as StatusCode } from './types-D9Tb1roj.mjs';
-export { A as AttestationEnvelope, e as IdentityProtocol, M as Metrics, S as Scheme, V as VerifyInput, b as VerifyOutcome } from './types-D9Tb1roj.mjs';
+import { a as VerifyOptions, I as IdentityBinding, N as Network, c as NostrEvent, d as StatusCode } from './types-BBRMCgMo.mjs';
+export { A as AttestationEnvelope, e as IdentityProtocol, M as Metrics, S as Scheme, V as VerifyInput, b as VerifyOutcome } from './types-BBRMCgMo.mjs';
 export { verify } from './verify.mjs';
 export { createAttestation, discoverAttestations, extractAttestationIdFromUrl, formatIdentitiesForDisplay, getAttestationsForAddress, getAttestationsForIdentity, getVerificationUrl, publishAttestation, verifyAttestationById } from './attestation.mjs';
 export { Challenge, IssueChallengeOptions, VerifyChallengeOptions, VerifyChallengeReason, VerifyChallengeResult, issueChallenge, verifyChallenge } from './challenge.mjs';
@@ -36,6 +36,111 @@ declare function check(params: CheckParams): Promise<CheckResult>;
 declare function nostrPubkeyToHex(value: string): string | null;
 declare function nostrIdentifierForms(identifier: string): string[];
 
+declare const BOND_SATS_FLOORS: readonly [1000, 10000, 100000, 1000000, 10000000];
+declare const BOND_DAYS_FLOORS: readonly [7, 30, 90, 365];
+declare const BOND_MIN_CONFIRMATIONS = 6;
+declare const BOND_MAX_WINDOW_SECONDS = 3600;
+interface BondFields {
+    address: string;
+    outpoint: string;
+    subject: string;
+    nonce: string;
+    issued_at: string;
+    expires_at: string;
+}
+type BondReason = 'bond_malformed' | 'bond_subject_mismatch' | 'bond_expired' | 'bond_not_yet_valid' | 'bond_window_too_long' | 'sig_invalid' | 'coin_not_found' | 'coin_address_mismatch' | 'coin_unconfirmed' | 'coin_too_recent' | 'coin_spent' | 'chain_unavailable';
+interface BondCoin {
+    sats: number;
+    scriptPubKey: string;
+    confirmedHeight: number | null;
+    spent: boolean;
+}
+interface ChainTip {
+    height: number;
+    hash: string;
+}
+interface BondChainSource {
+    tip(): Promise<ChainTip>;
+    coin(outpoint: string): Promise<BondCoin | null>;
+}
+interface VerifiedBond {
+    bond_id: string;
+    subject: string;
+    address: string;
+    outpoint: string;
+    sats: number;
+    confirmed_height: number;
+    tip: ChainTip;
+}
+type BondResult = {
+    ok: true;
+    bond: VerifiedBond;
+} | {
+    ok: false;
+    reason: BondReason;
+};
+declare function buildBondMessage(fields: BondFields): string;
+declare function issueBondMessage(opts: {
+    address: string;
+    outpoint: string;
+    subject: string;
+    ttlSeconds?: number;
+    now?: Date;
+}): {
+    message: string;
+    nonce: string;
+    expiresAt: number;
+};
+declare function parseBondMessage(message: string): BondFields | null;
+declare function bondId(message: string): string;
+declare function bondNullifier(key: Uint8Array, audience: string, outpoint: string): string;
+declare function bondFloors(sats: number, ageBlocks: number): {
+    sats_floor: number;
+    days_floor: number;
+};
+declare function verifyBondSignature(opts: {
+    message: string;
+    signature: string;
+    subject?: string;
+    now?: Date;
+    skewSeconds?: number;
+    maxWindowSeconds?: number;
+}): {
+    ok: true;
+    fields: BondFields;
+    bond_id: string;
+} | {
+    ok: false;
+    reason: BondReason;
+};
+declare function checkBondCoin(opts: {
+    address: string;
+    outpoint: string;
+    source: BondChainSource;
+    minConfirmations?: number;
+}): Promise<{
+    ok: true;
+    sats: number;
+    confirmed_height: number;
+    tip: ChainTip;
+} | {
+    ok: false;
+    reason: BondReason;
+}>;
+declare function verifyBond(opts: {
+    message: string;
+    signature: string;
+    source: BondChainSource;
+    subject?: string;
+    now?: Date;
+    maxWindowSeconds?: number;
+    minConfirmations?: number;
+}): Promise<BondResult>;
+declare function esploraSource(base?: string, opts?: {
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}): BondChainSource;
+
 declare function isNip07Available(): boolean;
 declare function getNostrPublicKey(): Promise<string | null>;
 declare function signNostrEvent(event: Omit<NostrEvent, 'id' | 'sig'>): Promise<NostrEvent | null>;
@@ -53,4 +158,4 @@ interface StatusMeta {
 }
 declare const STATUS_META: Record<StatusCode, StatusMeta>;
 
-export { type CheckParams, type CheckResult, IdentityBinding, Network, NostrEvent, STATUS_META, type Severity, StatusCode, type StatusMeta, VerifyOptions, check, getNip07Info, getNostrPublicKey, isNip07Available, nostrIdentifierForms, nostrPubkeyToHex, signNostrEvent };
+export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, type BondChainSource, type BondCoin, type BondFields, type BondReason, type BondResult, type ChainTip, type CheckParams, type CheckResult, IdentityBinding, Network, NostrEvent, STATUS_META, type Severity, StatusCode, type StatusMeta, type VerifiedBond, VerifyOptions, bondFloors, bondId, bondNullifier, buildBondMessage, check, checkBondCoin, esploraSource, getNip07Info, getNostrPublicKey, isNip07Available, issueBondMessage, nostrIdentifierForms, nostrPubkeyToHex, parseBondMessage, signNostrEvent, verifyBond, verifyBondSignature };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { a as VerifyOptions, I as IdentityBinding, N as Network, c as NostrEvent, d as StatusCode } from './types-D9Tb1roj.js';
-export { A as AttestationEnvelope, e as IdentityProtocol, M as Metrics, S as Scheme, V as VerifyInput, b as VerifyOutcome } from './types-D9Tb1roj.js';
+import { a as VerifyOptions, I as IdentityBinding, N as Network, c as NostrEvent, d as StatusCode } from './types-BBRMCgMo.js';
+export { A as AttestationEnvelope, e as IdentityProtocol, M as Metrics, S as Scheme, V as VerifyInput, b as VerifyOutcome } from './types-BBRMCgMo.js';
 export { verify } from './verify.js';
 export { createAttestation, discoverAttestations, extractAttestationIdFromUrl, formatIdentitiesForDisplay, getAttestationsForAddress, getAttestationsForIdentity, getVerificationUrl, publishAttestation, verifyAttestationById } from './attestation.js';
 export { Challenge, IssueChallengeOptions, VerifyChallengeOptions, VerifyChallengeReason, VerifyChallengeResult, issueChallenge, verifyChallenge } from './challenge.js';
@@ -36,6 +36,111 @@ declare function check(params: CheckParams): Promise<CheckResult>;
 declare function nostrPubkeyToHex(value: string): string | null;
 declare function nostrIdentifierForms(identifier: string): string[];
 
+declare const BOND_SATS_FLOORS: readonly [1000, 10000, 100000, 1000000, 10000000];
+declare const BOND_DAYS_FLOORS: readonly [7, 30, 90, 365];
+declare const BOND_MIN_CONFIRMATIONS = 6;
+declare const BOND_MAX_WINDOW_SECONDS = 3600;
+interface BondFields {
+    address: string;
+    outpoint: string;
+    subject: string;
+    nonce: string;
+    issued_at: string;
+    expires_at: string;
+}
+type BondReason = 'bond_malformed' | 'bond_subject_mismatch' | 'bond_expired' | 'bond_not_yet_valid' | 'bond_window_too_long' | 'sig_invalid' | 'coin_not_found' | 'coin_address_mismatch' | 'coin_unconfirmed' | 'coin_too_recent' | 'coin_spent' | 'chain_unavailable';
+interface BondCoin {
+    sats: number;
+    scriptPubKey: string;
+    confirmedHeight: number | null;
+    spent: boolean;
+}
+interface ChainTip {
+    height: number;
+    hash: string;
+}
+interface BondChainSource {
+    tip(): Promise<ChainTip>;
+    coin(outpoint: string): Promise<BondCoin | null>;
+}
+interface VerifiedBond {
+    bond_id: string;
+    subject: string;
+    address: string;
+    outpoint: string;
+    sats: number;
+    confirmed_height: number;
+    tip: ChainTip;
+}
+type BondResult = {
+    ok: true;
+    bond: VerifiedBond;
+} | {
+    ok: false;
+    reason: BondReason;
+};
+declare function buildBondMessage(fields: BondFields): string;
+declare function issueBondMessage(opts: {
+    address: string;
+    outpoint: string;
+    subject: string;
+    ttlSeconds?: number;
+    now?: Date;
+}): {
+    message: string;
+    nonce: string;
+    expiresAt: number;
+};
+declare function parseBondMessage(message: string): BondFields | null;
+declare function bondId(message: string): string;
+declare function bondNullifier(key: Uint8Array, audience: string, outpoint: string): string;
+declare function bondFloors(sats: number, ageBlocks: number): {
+    sats_floor: number;
+    days_floor: number;
+};
+declare function verifyBondSignature(opts: {
+    message: string;
+    signature: string;
+    subject?: string;
+    now?: Date;
+    skewSeconds?: number;
+    maxWindowSeconds?: number;
+}): {
+    ok: true;
+    fields: BondFields;
+    bond_id: string;
+} | {
+    ok: false;
+    reason: BondReason;
+};
+declare function checkBondCoin(opts: {
+    address: string;
+    outpoint: string;
+    source: BondChainSource;
+    minConfirmations?: number;
+}): Promise<{
+    ok: true;
+    sats: number;
+    confirmed_height: number;
+    tip: ChainTip;
+} | {
+    ok: false;
+    reason: BondReason;
+}>;
+declare function verifyBond(opts: {
+    message: string;
+    signature: string;
+    source: BondChainSource;
+    subject?: string;
+    now?: Date;
+    maxWindowSeconds?: number;
+    minConfirmations?: number;
+}): Promise<BondResult>;
+declare function esploraSource(base?: string, opts?: {
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}): BondChainSource;
+
 declare function isNip07Available(): boolean;
 declare function getNostrPublicKey(): Promise<string | null>;
 declare function signNostrEvent(event: Omit<NostrEvent, 'id' | 'sig'>): Promise<NostrEvent | null>;
@@ -53,4 +158,4 @@ interface StatusMeta {
 }
 declare const STATUS_META: Record<StatusCode, StatusMeta>;
 
-export { type CheckParams, type CheckResult, IdentityBinding, Network, NostrEvent, STATUS_META, type Severity, StatusCode, type StatusMeta, VerifyOptions, check, getNip07Info, getNostrPublicKey, isNip07Available, nostrIdentifierForms, nostrPubkeyToHex, signNostrEvent };
+export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, type BondChainSource, type BondCoin, type BondFields, type BondReason, type BondResult, type ChainTip, type CheckParams, type CheckResult, IdentityBinding, Network, NostrEvent, STATUS_META, type Severity, StatusCode, type StatusMeta, type VerifiedBond, VerifyOptions, bondFloors, bondId, bondNullifier, buildBondMessage, check, checkBondCoin, esploraSource, getNip07Info, getNostrPublicKey, isNip07Available, issueBondMessage, nostrIdentifierForms, nostrPubkeyToHex, parseBondMessage, signNostrEvent, verifyBond, verifyBondSignature };

package/dist/index.js

@@ -3,8 +3,10 @@
 var base = require('@scure/base');
 var buffer = require('buffer');
 var bip322 = require('@orangecheck/bip322');
-var secp256k1_js = require('@noble/curves/secp256k1.js');
+var hmac_js = require('@noble/hashes/hmac.js');
 var sha2_js = require('@noble/hashes/sha2.js');
+var utils_js = require('@noble/hashes/utils.js');
+var secp256k1_js = require('@noble/curves/secp256k1.js');
 
 // src/canonical.ts
 function toLowerHex(bytes) {
@@ -1026,7 +1028,7 @@ async function getAddressUtxos(address, network, opts) {
   log4.error({ endpoints, error: lastError?.message, network }, "All Esplora endpoints failed");
   throw new Error(`esplora_all_failed: ${lastError?.message || "unknown"}`);
 }
-function computeMetrics(utxos, bondAmount) {
+function computeMetrics(utxos, bondAmount, coverSats) {
   const confirmedUtxos = utxos.filter((u) => u.status.confirmed);
   if (confirmedUtxos.length === 0) {
     return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };
@@ -1059,6 +1061,23 @@ function computeMetrics(utxos, bondAmount) {
     };
   }
   const sats_bonded = confirmed_balance;
+  if (coverSats !== void 0 && coverSats > 0) {
+    const sorted = [...confirmedUtxos].sort(
+      (a, b) => (a.status.block_height ?? Infinity) - (b.status.block_height ?? Infinity)
+    );
+    let sum = 0;
+    let youngestTime = 0;
+    for (const utxo of sorted) {
+      sum += utxo.value;
+      youngestTime = Math.max(youngestTime, utxo.status.block_time || Date.now() / 1e3);
+      if (sum >= coverSats) break;
+    }
+    const days_unspent2 = Math.max(
+      0,
+      Math.floor((Date.now() / 1e3 - youngestTime) / (24 * 60 * 60))
+    );
+    return { sats_bonded, days_unspent: days_unspent2, confirmed_balance };
+  }
   const oldestTime = Math.min(
     ...confirmedUtxos.map((u) => u.status.block_time || Date.now() / 1e3)
   );
@@ -1122,7 +1141,8 @@ async function verify(input, opts = {}) {
       });
       const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(
         utxos,
-        parsed.bond
+        parsed.bond,
+        opts.coverSats
       );
       if (parsed.bond !== void 0 && parsed.bond > 0) {
         if (confirmed_balance < parsed.bond) {
@@ -1227,7 +1247,7 @@ async function check(params) {
       sig: env.signature,
       scheme: env.scheme
     },
-    verifyOptions
+    { ...verifyOptions, coverSats: minSats > 0 ? minSats : void 0 }
   );
   const sats = outcome.metrics?.sats_bonded ?? 0;
   const days = outcome.metrics?.days_unspent ?? 0;
@@ -1431,6 +1451,181 @@ async function verifyChallenge(opts) {
     ...purpose !== void 0 ? { purpose } : {}
   };
 }
+var HEADER = "orangecheck-bond";
+var ACK = "I back this subject with this coin. It stays in my wallet.";
+var FIELDS = ["address", "outpoint", "subject", "nonce", "issued_at", "expires_at"];
+var BOND_SATS_FLOORS = [1e3, 1e4, 1e5, 1e6, 1e7];
+var BOND_DAYS_FLOORS = [7, 30, 90, 365];
+var BOND_MIN_CONFIRMATIONS = 6;
+var BOND_MAX_WINDOW_SECONDS = 3600;
+var OUTPOINT_RE = /^[0-9a-f]{64}:(0|[1-9][0-9]{0,9})$/;
+var NONCE_RE = /^[0-9a-f]{32}$/;
+var TIME_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/;
+var SUBJECT_RE = /^[\x21-\x7e]{1,256}$/;
+function iso2(d) {
+  return d.toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+function instant(s) {
+  const t = Date.parse(s);
+  return TIME_RE.test(s) && Number.isFinite(t) && iso2(new Date(t)) === s;
+}
+function randomNonce2() {
+  const b = new Uint8Array(16);
+  globalThis.crypto.getRandomValues(b);
+  return utils_js.bytesToHex(b);
+}
+function wellFormed(f) {
+  return bip322.decodeAddress(f.address) !== null && OUTPOINT_RE.test(f.outpoint) && SUBJECT_RE.test(f.subject) && NONCE_RE.test(f.nonce) && instant(f.issued_at) && instant(f.expires_at) && Date.parse(f.expires_at) > Date.parse(f.issued_at);
+}
+function buildBondMessage(fields) {
+  if (!wellFormed(fields)) throw new Error("bond fields are malformed");
+  return [HEADER, ...FIELDS.map((k) => `${k}: ${fields[k]}`), `ack: ${ACK}`].join("\n") + "\n";
+}
+function issueBondMessage(opts) {
+  const now = opts.now ?? /* @__PURE__ */ new Date();
+  const expires = new Date(now.getTime() + (opts.ttlSeconds ?? 600) * 1e3);
+  const nonce = randomNonce2();
+  const message = buildBondMessage({
+    address: opts.address,
+    outpoint: opts.outpoint,
+    subject: opts.subject,
+    nonce,
+    issued_at: iso2(now),
+    expires_at: iso2(expires)
+  });
+  return { message, nonce, expiresAt: expires.getTime() };
+}
+function parseBondMessage(message) {
+  if (!message.endsWith("\n") || message.includes("\r")) return null;
+  const lines = message.slice(0, -1).split("\n");
+  if (lines.length !== FIELDS.length + 2 || lines[0] !== HEADER) return null;
+  if (lines[lines.length - 1] !== `ack: ${ACK}`) return null;
+  const out = {};
+  for (const [i, key] of FIELDS.entries()) {
+    const line = lines[i + 1];
+    const prefix = `${key}: `;
+    if (!line.startsWith(prefix)) return null;
+    out[key] = line.slice(prefix.length);
+  }
+  const fields = out;
+  return wellFormed(fields) && buildBondMessage(fields) === message ? fields : null;
+}
+function bondId(message) {
+  return utils_js.bytesToHex(sha2_js.sha256(utils_js.utf8ToBytes(message)));
+}
+function bondNullifier(key, audience, outpoint) {
+  if (key.length < 32) throw new Error("bond nullifier key must be at least 32 bytes");
+  const message = utils_js.utf8ToBytes(`orangecheck-bond-nullifier
+${audience}
+${outpoint}`);
+  return utils_js.bytesToHex(hmac_js.hmac(sha2_js.sha256, key, message));
+}
+function bondFloors(sats, ageBlocks) {
+  const days = Math.floor(ageBlocks / 144);
+  const floor = (ladder, v) => ladder.filter((f) => v >= f).reduce((a, b) => Math.max(a, b), 0);
+  return { sats_floor: floor(BOND_SATS_FLOORS, sats), days_floor: floor(BOND_DAYS_FLOORS, days) };
+}
+function verifyBondSignature(opts) {
+  const fields = parseBondMessage(opts.message);
+  if (!fields) return { ok: false, reason: "bond_malformed" };
+  if (opts.subject !== void 0 && fields.subject !== opts.subject) {
+    return { ok: false, reason: "bond_subject_mismatch" };
+  }
+  const window2 = Date.parse(fields.expires_at) - Date.parse(fields.issued_at);
+  if (window2 > (opts.maxWindowSeconds ?? BOND_MAX_WINDOW_SECONDS) * 1e3) {
+    return { ok: false, reason: "bond_window_too_long" };
+  }
+  const now = (opts.now ?? /* @__PURE__ */ new Date()).getTime();
+  const skew = (opts.skewSeconds ?? 60) * 1e3;
+  if (Date.parse(fields.issued_at) - skew > now) return { ok: false, reason: "bond_not_yet_valid" };
+  if (Date.parse(fields.expires_at) + skew < now) return { ok: false, reason: "bond_expired" };
+  if (!bip322.verifySignature(fields.address, opts.message, opts.signature)) {
+    return { ok: false, reason: "sig_invalid" };
+  }
+  return { ok: true, fields, bond_id: bondId(opts.message) };
+}
+async function checkBondCoin(opts) {
+  const decoded = bip322.decodeAddress(opts.address);
+  if (!decoded || !OUTPOINT_RE.test(opts.outpoint)) return { ok: false, reason: "bond_malformed" };
+  let coin;
+  let tip;
+  try {
+    [coin, tip] = await Promise.all([opts.source.coin(opts.outpoint), opts.source.tip()]);
+  } catch {
+    return { ok: false, reason: "chain_unavailable" };
+  }
+  if (!coin) return { ok: false, reason: "coin_not_found" };
+  if (coin.scriptPubKey !== utils_js.bytesToHex(decoded.scriptPubKey)) {
+    return { ok: false, reason: "coin_address_mismatch" };
+  }
+  if (coin.confirmedHeight === null) return { ok: false, reason: "coin_unconfirmed" };
+  if (coin.spent) return { ok: false, reason: "coin_spent" };
+  const confirmations = tip.height - coin.confirmedHeight + 1;
+  if (confirmations < (opts.minConfirmations ?? BOND_MIN_CONFIRMATIONS)) {
+    return { ok: false, reason: "coin_too_recent" };
+  }
+  return { ok: true, sats: coin.sats, confirmed_height: coin.confirmedHeight, tip };
+}
+async function verifyBond(opts) {
+  const sig = verifyBondSignature(opts);
+  if (!sig.ok) return sig;
+  const coin = await checkBondCoin({
+    address: sig.fields.address,
+    outpoint: sig.fields.outpoint,
+    source: opts.source,
+    minConfirmations: opts.minConfirmations
+  });
+  if (!coin.ok) return coin;
+  return {
+    ok: true,
+    bond: {
+      bond_id: sig.bond_id,
+      subject: sig.fields.subject,
+      address: sig.fields.address,
+      outpoint: sig.fields.outpoint,
+      sats: coin.sats,
+      confirmed_height: coin.confirmed_height,
+      tip: coin.tip
+    }
+  };
+}
+function esploraSource(base = "https://mempool.space/api", opts = {}) {
+  const get = async (path, missingOk = false) => {
+    const r = await (opts.fetch ?? fetch)(`${base}${path}`, {
+      signal: AbortSignal.timeout(opts.timeoutMs ?? 5e3)
+    });
+    if (!r.ok && !(missingOk && r.status === 404)) {
+      throw new Error(`esplora ${path}: HTTP ${r.status}`);
+    }
+    return r;
+  };
+  return {
+    async tip() {
+      const [h, hash] = await Promise.all([get("/blocks/tip/height"), get("/blocks/tip/hash")]);
+      const tip = { height: Number(await h.text()), hash: (await hash.text()).trim() };
+      if (!Number.isSafeInteger(tip.height) || !/^[0-9a-f]{64}$/.test(tip.hash)) {
+        throw new Error("esplora tip: malformed");
+      }
+      return tip;
+    },
+    async coin(outpoint) {
+      const [txid, voutStr] = outpoint.split(":");
+      const vout = Number(voutStr);
+      const txr = await get(`/tx/${txid}`, true);
+      if (txr.status === 404) return null;
+      const tx = await txr.json();
+      const out = tx.vout[vout];
+      if (!out) return null;
+      const spend = await (await get(`/tx/${txid}/outspend/${vout}`)).json();
+      return {
+        sats: out.value,
+        scriptPubKey: out.scriptpubkey.toLowerCase(),
+        confirmedHeight: tx.status.confirmed ? tx.status.block_height ?? null : null,
+        spent: spend.spent
+      };
+    }
+  };
+}
 
 // src/utils/rate-limiter.ts
 var RateLimitError = class extends Error {
@@ -2220,17 +2415,27 @@ var STATUS_META = {
   }
 };
 
+exports.BOND_DAYS_FLOORS = BOND_DAYS_FLOORS;
+exports.BOND_MAX_WINDOW_SECONDS = BOND_MAX_WINDOW_SECONDS;
+exports.BOND_MIN_CONFIRMATIONS = BOND_MIN_CONFIRMATIONS;
+exports.BOND_SATS_FLOORS = BOND_SATS_FLOORS;
 exports.DEFAULT_RELAYS = DEFAULT_RELAYS;
 exports.FANOUT_DEADLINE_MS = FANOUT_DEADLINE_MS;
 exports.STATUS_META = STATUS_META;
+exports.bondFloors = bondFloors;
+exports.bondId = bondId;
+exports.bondNullifier = bondNullifier;
+exports.buildBondMessage = buildBondMessage;
 exports.buildCanonicalMessage = buildCanonicalMessage;
 exports.check = check;
+exports.checkBondCoin = checkBondCoin;
 exports.computeAllScores = computeAllScores;
 exports.computeScore = computeScore;
 exports.createAttestation = createAttestation;
 exports.createAttestationEnvelope = createAttestationEnvelope;
 exports.createAttestationEvent = createAttestationEvent;
 exports.discoverAttestations = discoverAttestations;
+exports.esploraSource = esploraSource;
 exports.extractAttestationIdFromUrl = extractAttestationIdFromUrl;
 exports.formatIdentities = formatIdentities;
 exports.formatIdentitiesForDisplay = formatIdentitiesForDisplay;
@@ -2260,10 +2465,12 @@ exports.isNip07Available = isNip07Available;
 exports.isNostrIdentityVerified = isNostrIdentityVerified;
 exports.isValidDomain = isValidDomain;
 exports.isValidTweetUrl = isValidTweetUrl;
+exports.issueBondMessage = issueBondMessage;
 exports.issueChallenge = issueChallenge;
 exports.nostrIdentifierForms = nostrIdentifierForms;
 exports.nostrPubkeyToHex = nostrPubkeyToHex;
 exports.parseAttestationFromEvent = parseAttestationFromEvent;
+exports.parseBondMessage = parseBondMessage;
 exports.parseIdentities = parseIdentities;
 exports.publishAttestation = publishAttestation;
 exports.publishToRelays = publishToRelays;
@@ -2277,6 +2484,8 @@ exports.supportsAutomaticVerification = supportsAutomaticVerification;
 exports.verify = verify;
 exports.verifyAllIdentities = verifyAllIdentities;
 exports.verifyAttestationById = verifyAttestationById;
+exports.verifyBond = verifyBond;
+exports.verifyBondSignature = verifyBondSignature;
 exports.verifyChallenge = verifyChallenge;
 exports.verifyDnsIdentity = verifyDnsIdentity;
 exports.verifyGitHubIdentity = verifyGitHubIdentity;