@orangecheck/sdk 1.12.0 → 1.14.0

package/dist/index.js

@@ -3,6 +3,7 @@
 var base = require('@scure/base');
 var buffer = require('buffer');
 var bip322 = require('@orangecheck/bip322');
+var hmac_js = require('@noble/hashes/hmac.js');
 var sha2_js = require('@noble/hashes/sha2.js');
 var utils_js = require('@noble/hashes/utils.js');
 var secp256k1_js = require('@noble/curves/secp256k1.js');
@@ -219,7 +220,9 @@ var ATTESTATION_EVENT_KIND = 30078;
 var DEFAULT_RELAYS = [
   "wss://relay.damus.io",
   "wss://nos.lol",
-  "wss://relay.snort.social",
+  // relay.snort.social sat here until 2026-10-21. It now runs in memory: it
+  // answered OK true to family events and served none of them back.
+  "wss://nostr.oxtr.dev",
   "wss://relay.ochk.io"
 ];
 var FANOUT_DEADLINE_MS = 4e3;
@@ -1451,11 +1454,12 @@ async function verifyChallenge(opts) {
   };
 }
 var HEADER = "orangecheck-bond";
-var ACK = "I pledge this coin to back this subject. It stays in my wallet.";
+var ACK = "I back this subject with this coin. It stays in my wallet.";
 var FIELDS = ["address", "outpoint", "subject", "nonce", "issued_at", "expires_at"];
 var BOND_SATS_FLOORS = [1e3, 1e4, 1e5, 1e6, 1e7];
 var BOND_DAYS_FLOORS = [7, 30, 90, 365];
 var BOND_MIN_CONFIRMATIONS = 6;
+var BOND_MAX_WINDOW_SECONDS = 3600;
 var OUTPOINT_RE = /^[0-9a-f]{64}:(0|[1-9][0-9]{0,9})$/;
 var NONCE_RE = /^[0-9a-f]{32}$/;
 var TIME_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/;
@@ -1463,13 +1467,17 @@ var SUBJECT_RE = /^[\x21-\x7e]{1,256}$/;
 function iso2(d) {
   return d.toISOString().replace(/\.\d{3}Z$/, "Z");
 }
+function instant(s) {
+  const t = Date.parse(s);
+  return TIME_RE.test(s) && Number.isFinite(t) && iso2(new Date(t)) === s;
+}
 function randomNonce2() {
   const b = new Uint8Array(16);
   globalThis.crypto.getRandomValues(b);
   return utils_js.bytesToHex(b);
 }
 function wellFormed(f) {
-  return bip322.decodeAddress(f.address) !== null && OUTPOINT_RE.test(f.outpoint) && SUBJECT_RE.test(f.subject) && NONCE_RE.test(f.nonce) && TIME_RE.test(f.issued_at) && TIME_RE.test(f.expires_at) && Date.parse(f.expires_at) > Date.parse(f.issued_at);
+  return bip322.decodeAddress(f.address) !== null && OUTPOINT_RE.test(f.outpoint) && SUBJECT_RE.test(f.subject) && NONCE_RE.test(f.nonce) && instant(f.issued_at) && instant(f.expires_at) && Date.parse(f.expires_at) > Date.parse(f.issued_at);
 }
 function buildBondMessage(fields) {
   if (!wellFormed(fields)) throw new Error("bond fields are malformed");
@@ -1507,10 +1515,12 @@ function parseBondMessage(message) {
 function bondId(message) {
   return utils_js.bytesToHex(sha2_js.sha256(utils_js.utf8ToBytes(message)));
 }
-function bondNullifier(audience, outpoint) {
-  return utils_js.bytesToHex(sha2_js.sha256(utils_js.utf8ToBytes(`orangecheck-bond-nullifier
+function bondNullifier(key, audience, outpoint) {
+  if (key.length < 32) throw new Error("bond nullifier key must be at least 32 bytes");
+  const message = utils_js.utf8ToBytes(`orangecheck-bond-nullifier
 ${audience}
-${outpoint}`)));
+${outpoint}`);
+  return utils_js.bytesToHex(hmac_js.hmac(sha2_js.sha256, key, message));
 }
 function bondFloors(sats, ageBlocks) {
   const days = Math.floor(ageBlocks / 144);
@@ -1523,6 +1533,10 @@ function verifyBondSignature(opts) {
   if (opts.subject !== void 0 && fields.subject !== opts.subject) {
     return { ok: false, reason: "bond_subject_mismatch" };
   }
+  const window2 = Date.parse(fields.expires_at) - Date.parse(fields.issued_at);
+  if (window2 > (opts.maxWindowSeconds ?? BOND_MAX_WINDOW_SECONDS) * 1e3) {
+    return { ok: false, reason: "bond_window_too_long" };
+  }
   const now = (opts.now ?? /* @__PURE__ */ new Date()).getTime();
   const skew = (opts.skewSeconds ?? 60) * 1e3;
   if (Date.parse(fields.issued_at) - skew > now) return { ok: false, reason: "bond_not_yet_valid" };
@@ -1578,22 +1592,28 @@ async function verifyBond(opts) {
   };
 }
 function esploraSource(base = "https://mempool.space/api", opts = {}) {
-  const get = async (path) => {
+  const get = async (path, missingOk = false) => {
     const r = await (opts.fetch ?? fetch)(`${base}${path}`, {
       signal: AbortSignal.timeout(opts.timeoutMs ?? 5e3)
     });
-    if (!r.ok && r.status !== 404) throw new Error(`esplora ${path}: HTTP ${r.status}`);
+    if (!r.ok && !(missingOk && r.status === 404)) {
+      throw new Error(`esplora ${path}: HTTP ${r.status}`);
+    }
     return r;
   };
   return {
     async tip() {
       const [h, hash] = await Promise.all([get("/blocks/tip/height"), get("/blocks/tip/hash")]);
-      return { height: Number(await h.text()), hash: (await hash.text()).trim() };
+      const tip = { height: Number(await h.text()), hash: (await hash.text()).trim() };
+      if (!Number.isSafeInteger(tip.height) || !/^[0-9a-f]{64}$/.test(tip.hash)) {
+        throw new Error("esplora tip: malformed");
+      }
+      return tip;
     },
     async coin(outpoint) {
       const [txid, voutStr] = outpoint.split(":");
       const vout = Number(voutStr);
-      const txr = await get(`/tx/${txid}`);
+      const txr = await get(`/tx/${txid}`, true);
       if (txr.status === 404) return null;
       const tx = await txr.json();
       const out = tx.vout[vout];
@@ -2398,6 +2418,7 @@ var STATUS_META = {
 };
 
 exports.BOND_DAYS_FLOORS = BOND_DAYS_FLOORS;
+exports.BOND_MAX_WINDOW_SECONDS = BOND_MAX_WINDOW_SECONDS;
 exports.BOND_MIN_CONFIRMATIONS = BOND_MIN_CONFIRMATIONS;
 exports.BOND_SATS_FLOORS = BOND_SATS_FLOORS;
 exports.DEFAULT_RELAYS = DEFAULT_RELAYS;