@orangecheck/sdk 1.11.0 → 1.13.0

package/dist/index.mjs

@@ -1,8 +1,10 @@
 import { bech32 } from '@scure/base';
 import { Buffer } from 'buffer';
-import { verifySignature as verifySignature$1 } from '@orangecheck/bip322';
-import { schnorr } from '@noble/curves/secp256k1.js';
+import { verifySignature as verifySignature$1, decodeAddress } from '@orangecheck/bip322';
+import { hmac } from '@noble/hashes/hmac.js';
 import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex, utf8ToBytes } from '@noble/hashes/utils.js';
+import { schnorr } from '@noble/curves/secp256k1.js';
 
 // src/canonical.ts
 function toLowerHex(bytes) {
@@ -1024,7 +1026,7 @@ async function getAddressUtxos(address, network, opts) {
   log4.error({ endpoints, error: lastError?.message, network }, "All Esplora endpoints failed");
   throw new Error(`esplora_all_failed: ${lastError?.message || "unknown"}`);
 }
-function computeMetrics(utxos, bondAmount) {
+function computeMetrics(utxos, bondAmount, coverSats) {
   const confirmedUtxos = utxos.filter((u) => u.status.confirmed);
   if (confirmedUtxos.length === 0) {
     return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };
@@ -1057,6 +1059,23 @@ function computeMetrics(utxos, bondAmount) {
     };
   }
   const sats_bonded = confirmed_balance;
+  if (coverSats !== void 0 && coverSats > 0) {
+    const sorted = [...confirmedUtxos].sort(
+      (a, b) => (a.status.block_height ?? Infinity) - (b.status.block_height ?? Infinity)
+    );
+    let sum = 0;
+    let youngestTime = 0;
+    for (const utxo of sorted) {
+      sum += utxo.value;
+      youngestTime = Math.max(youngestTime, utxo.status.block_time || Date.now() / 1e3);
+      if (sum >= coverSats) break;
+    }
+    const days_unspent2 = Math.max(
+      0,
+      Math.floor((Date.now() / 1e3 - youngestTime) / (24 * 60 * 60))
+    );
+    return { sats_bonded, days_unspent: days_unspent2, confirmed_balance };
+  }
   const oldestTime = Math.min(
     ...confirmedUtxos.map((u) => u.status.block_time || Date.now() / 1e3)
   );
@@ -1120,7 +1139,8 @@ async function verify(input, opts = {}) {
       });
       const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(
         utxos,
-        parsed.bond
+        parsed.bond,
+        opts.coverSats
       );
       if (parsed.bond !== void 0 && parsed.bond > 0) {
         if (confirmed_balance < parsed.bond) {
@@ -1225,7 +1245,7 @@ async function check(params) {
       sig: env.signature,
       scheme: env.scheme
     },
-    verifyOptions
+    { ...verifyOptions, coverSats: minSats > 0 ? minSats : void 0 }
   );
   const sats = outcome.metrics?.sats_bonded ?? 0;
   const days = outcome.metrics?.days_unspent ?? 0;
@@ -1429,6 +1449,181 @@ async function verifyChallenge(opts) {
     ...purpose !== void 0 ? { purpose } : {}
   };
 }
+var HEADER = "orangecheck-bond";
+var ACK = "I back this subject with this coin. It stays in my wallet.";
+var FIELDS = ["address", "outpoint", "subject", "nonce", "issued_at", "expires_at"];
+var BOND_SATS_FLOORS = [1e3, 1e4, 1e5, 1e6, 1e7];
+var BOND_DAYS_FLOORS = [7, 30, 90, 365];
+var BOND_MIN_CONFIRMATIONS = 6;
+var BOND_MAX_WINDOW_SECONDS = 3600;
+var OUTPOINT_RE = /^[0-9a-f]{64}:(0|[1-9][0-9]{0,9})$/;
+var NONCE_RE = /^[0-9a-f]{32}$/;
+var TIME_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/;
+var SUBJECT_RE = /^[\x21-\x7e]{1,256}$/;
+function iso2(d) {
+  return d.toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+function instant(s) {
+  const t = Date.parse(s);
+  return TIME_RE.test(s) && Number.isFinite(t) && iso2(new Date(t)) === s;
+}
+function randomNonce2() {
+  const b = new Uint8Array(16);
+  globalThis.crypto.getRandomValues(b);
+  return bytesToHex(b);
+}
+function wellFormed(f) {
+  return decodeAddress(f.address) !== null && OUTPOINT_RE.test(f.outpoint) && SUBJECT_RE.test(f.subject) && NONCE_RE.test(f.nonce) && instant(f.issued_at) && instant(f.expires_at) && Date.parse(f.expires_at) > Date.parse(f.issued_at);
+}
+function buildBondMessage(fields) {
+  if (!wellFormed(fields)) throw new Error("bond fields are malformed");
+  return [HEADER, ...FIELDS.map((k) => `${k}: ${fields[k]}`), `ack: ${ACK}`].join("\n") + "\n";
+}
+function issueBondMessage(opts) {
+  const now = opts.now ?? /* @__PURE__ */ new Date();
+  const expires = new Date(now.getTime() + (opts.ttlSeconds ?? 600) * 1e3);
+  const nonce = randomNonce2();
+  const message = buildBondMessage({
+    address: opts.address,
+    outpoint: opts.outpoint,
+    subject: opts.subject,
+    nonce,
+    issued_at: iso2(now),
+    expires_at: iso2(expires)
+  });
+  return { message, nonce, expiresAt: expires.getTime() };
+}
+function parseBondMessage(message) {
+  if (!message.endsWith("\n") || message.includes("\r")) return null;
+  const lines = message.slice(0, -1).split("\n");
+  if (lines.length !== FIELDS.length + 2 || lines[0] !== HEADER) return null;
+  if (lines[lines.length - 1] !== `ack: ${ACK}`) return null;
+  const out = {};
+  for (const [i, key] of FIELDS.entries()) {
+    const line = lines[i + 1];
+    const prefix = `${key}: `;
+    if (!line.startsWith(prefix)) return null;
+    out[key] = line.slice(prefix.length);
+  }
+  const fields = out;
+  return wellFormed(fields) && buildBondMessage(fields) === message ? fields : null;
+}
+function bondId(message) {
+  return bytesToHex(sha256(utf8ToBytes(message)));
+}
+function bondNullifier(key, audience, outpoint) {
+  if (key.length < 32) throw new Error("bond nullifier key must be at least 32 bytes");
+  const message = utf8ToBytes(`orangecheck-bond-nullifier
+${audience}
+${outpoint}`);
+  return bytesToHex(hmac(sha256, key, message));
+}
+function bondFloors(sats, ageBlocks) {
+  const days = Math.floor(ageBlocks / 144);
+  const floor = (ladder, v) => ladder.filter((f) => v >= f).reduce((a, b) => Math.max(a, b), 0);
+  return { sats_floor: floor(BOND_SATS_FLOORS, sats), days_floor: floor(BOND_DAYS_FLOORS, days) };
+}
+function verifyBondSignature(opts) {
+  const fields = parseBondMessage(opts.message);
+  if (!fields) return { ok: false, reason: "bond_malformed" };
+  if (opts.subject !== void 0 && fields.subject !== opts.subject) {
+    return { ok: false, reason: "bond_subject_mismatch" };
+  }
+  const window2 = Date.parse(fields.expires_at) - Date.parse(fields.issued_at);
+  if (window2 > (opts.maxWindowSeconds ?? BOND_MAX_WINDOW_SECONDS) * 1e3) {
+    return { ok: false, reason: "bond_window_too_long" };
+  }
+  const now = (opts.now ?? /* @__PURE__ */ new Date()).getTime();
+  const skew = (opts.skewSeconds ?? 60) * 1e3;
+  if (Date.parse(fields.issued_at) - skew > now) return { ok: false, reason: "bond_not_yet_valid" };
+  if (Date.parse(fields.expires_at) + skew < now) return { ok: false, reason: "bond_expired" };
+  if (!verifySignature$1(fields.address, opts.message, opts.signature)) {
+    return { ok: false, reason: "sig_invalid" };
+  }
+  return { ok: true, fields, bond_id: bondId(opts.message) };
+}
+async function checkBondCoin(opts) {
+  const decoded = decodeAddress(opts.address);
+  if (!decoded || !OUTPOINT_RE.test(opts.outpoint)) return { ok: false, reason: "bond_malformed" };
+  let coin;
+  let tip;
+  try {
+    [coin, tip] = await Promise.all([opts.source.coin(opts.outpoint), opts.source.tip()]);
+  } catch {
+    return { ok: false, reason: "chain_unavailable" };
+  }
+  if (!coin) return { ok: false, reason: "coin_not_found" };
+  if (coin.scriptPubKey !== bytesToHex(decoded.scriptPubKey)) {
+    return { ok: false, reason: "coin_address_mismatch" };
+  }
+  if (coin.confirmedHeight === null) return { ok: false, reason: "coin_unconfirmed" };
+  if (coin.spent) return { ok: false, reason: "coin_spent" };
+  const confirmations = tip.height - coin.confirmedHeight + 1;
+  if (confirmations < (opts.minConfirmations ?? BOND_MIN_CONFIRMATIONS)) {
+    return { ok: false, reason: "coin_too_recent" };
+  }
+  return { ok: true, sats: coin.sats, confirmed_height: coin.confirmedHeight, tip };
+}
+async function verifyBond(opts) {
+  const sig = verifyBondSignature(opts);
+  if (!sig.ok) return sig;
+  const coin = await checkBondCoin({
+    address: sig.fields.address,
+    outpoint: sig.fields.outpoint,
+    source: opts.source,
+    minConfirmations: opts.minConfirmations
+  });
+  if (!coin.ok) return coin;
+  return {
+    ok: true,
+    bond: {
+      bond_id: sig.bond_id,
+      subject: sig.fields.subject,
+      address: sig.fields.address,
+      outpoint: sig.fields.outpoint,
+      sats: coin.sats,
+      confirmed_height: coin.confirmed_height,
+      tip: coin.tip
+    }
+  };
+}
+function esploraSource(base = "https://mempool.space/api", opts = {}) {
+  const get = async (path, missingOk = false) => {
+    const r = await (opts.fetch ?? fetch)(`${base}${path}`, {
+      signal: AbortSignal.timeout(opts.timeoutMs ?? 5e3)
+    });
+    if (!r.ok && !(missingOk && r.status === 404)) {
+      throw new Error(`esplora ${path}: HTTP ${r.status}`);
+    }
+    return r;
+  };
+  return {
+    async tip() {
+      const [h, hash] = await Promise.all([get("/blocks/tip/height"), get("/blocks/tip/hash")]);
+      const tip = { height: Number(await h.text()), hash: (await hash.text()).trim() };
+      if (!Number.isSafeInteger(tip.height) || !/^[0-9a-f]{64}$/.test(tip.hash)) {
+        throw new Error("esplora tip: malformed");
+      }
+      return tip;
+    },
+    async coin(outpoint) {
+      const [txid, voutStr] = outpoint.split(":");
+      const vout = Number(voutStr);
+      const txr = await get(`/tx/${txid}`, true);
+      if (txr.status === 404) return null;
+      const tx = await txr.json();
+      const out = tx.vout[vout];
+      if (!out) return null;
+      const spend = await (await get(`/tx/${txid}/outspend/${vout}`)).json();
+      return {
+        sats: out.value,
+        scriptPubKey: out.scriptpubkey.toLowerCase(),
+        confirmedHeight: tx.status.confirmed ? tx.status.block_height ?? null : null,
+        spent: spend.spent
+      };
+    }
+  };
+}
 
 // src/utils/rate-limiter.ts
 var RateLimitError = class extends Error {
@@ -2218,6 +2413,6 @@ var STATUS_META = {
   }
 };
 
-export { DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, buildCanonicalMessage, check, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
+export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map