@orangecheck/sdk 1.12.0 → 1.14.0

package/dist/index.mjs

@@ -1,6 +1,7 @@
 import { bech32 } from '@scure/base';
 import { Buffer } from 'buffer';
 import { verifySignature as verifySignature$1, decodeAddress } from '@orangecheck/bip322';
+import { hmac } from '@noble/hashes/hmac.js';
 import { sha256 } from '@noble/hashes/sha2.js';
 import { bytesToHex, utf8ToBytes } from '@noble/hashes/utils.js';
 import { schnorr } from '@noble/curves/secp256k1.js';
@@ -217,7 +218,9 @@ var ATTESTATION_EVENT_KIND = 30078;
 var DEFAULT_RELAYS = [
   "wss://relay.damus.io",
   "wss://nos.lol",
-  "wss://relay.snort.social",
+  // relay.snort.social sat here until 2026-10-21. It now runs in memory: it
+  // answered OK true to family events and served none of them back.
+  "wss://nostr.oxtr.dev",
   "wss://relay.ochk.io"
 ];
 var FANOUT_DEADLINE_MS = 4e3;
@@ -1449,11 +1452,12 @@ async function verifyChallenge(opts) {
   };
 }
 var HEADER = "orangecheck-bond";
-var ACK = "I pledge this coin to back this subject. It stays in my wallet.";
+var ACK = "I back this subject with this coin. It stays in my wallet.";
 var FIELDS = ["address", "outpoint", "subject", "nonce", "issued_at", "expires_at"];
 var BOND_SATS_FLOORS = [1e3, 1e4, 1e5, 1e6, 1e7];
 var BOND_DAYS_FLOORS = [7, 30, 90, 365];
 var BOND_MIN_CONFIRMATIONS = 6;
+var BOND_MAX_WINDOW_SECONDS = 3600;
 var OUTPOINT_RE = /^[0-9a-f]{64}:(0|[1-9][0-9]{0,9})$/;
 var NONCE_RE = /^[0-9a-f]{32}$/;
 var TIME_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/;
@@ -1461,13 +1465,17 @@ var SUBJECT_RE = /^[\x21-\x7e]{1,256}$/;
 function iso2(d) {
   return d.toISOString().replace(/\.\d{3}Z$/, "Z");
 }
+function instant(s) {
+  const t = Date.parse(s);
+  return TIME_RE.test(s) && Number.isFinite(t) && iso2(new Date(t)) === s;
+}
 function randomNonce2() {
   const b = new Uint8Array(16);
   globalThis.crypto.getRandomValues(b);
   return bytesToHex(b);
 }
 function wellFormed(f) {
-  return decodeAddress(f.address) !== null && OUTPOINT_RE.test(f.outpoint) && SUBJECT_RE.test(f.subject) && NONCE_RE.test(f.nonce) && TIME_RE.test(f.issued_at) && TIME_RE.test(f.expires_at) && Date.parse(f.expires_at) > Date.parse(f.issued_at);
+  return decodeAddress(f.address) !== null && OUTPOINT_RE.test(f.outpoint) && SUBJECT_RE.test(f.subject) && NONCE_RE.test(f.nonce) && instant(f.issued_at) && instant(f.expires_at) && Date.parse(f.expires_at) > Date.parse(f.issued_at);
 }
 function buildBondMessage(fields) {
   if (!wellFormed(fields)) throw new Error("bond fields are malformed");
@@ -1505,10 +1513,12 @@ function parseBondMessage(message) {
 function bondId(message) {
   return bytesToHex(sha256(utf8ToBytes(message)));
 }
-function bondNullifier(audience, outpoint) {
-  return bytesToHex(sha256(utf8ToBytes(`orangecheck-bond-nullifier
+function bondNullifier(key, audience, outpoint) {
+  if (key.length < 32) throw new Error("bond nullifier key must be at least 32 bytes");
+  const message = utf8ToBytes(`orangecheck-bond-nullifier
 ${audience}
-${outpoint}`)));
+${outpoint}`);
+  return bytesToHex(hmac(sha256, key, message));
 }
 function bondFloors(sats, ageBlocks) {
   const days = Math.floor(ageBlocks / 144);
@@ -1521,6 +1531,10 @@ function verifyBondSignature(opts) {
   if (opts.subject !== void 0 && fields.subject !== opts.subject) {
     return { ok: false, reason: "bond_subject_mismatch" };
   }
+  const window2 = Date.parse(fields.expires_at) - Date.parse(fields.issued_at);
+  if (window2 > (opts.maxWindowSeconds ?? BOND_MAX_WINDOW_SECONDS) * 1e3) {
+    return { ok: false, reason: "bond_window_too_long" };
+  }
   const now = (opts.now ?? /* @__PURE__ */ new Date()).getTime();
   const skew = (opts.skewSeconds ?? 60) * 1e3;
   if (Date.parse(fields.issued_at) - skew > now) return { ok: false, reason: "bond_not_yet_valid" };
@@ -1576,22 +1590,28 @@ async function verifyBond(opts) {
   };
 }
 function esploraSource(base = "https://mempool.space/api", opts = {}) {
-  const get = async (path) => {
+  const get = async (path, missingOk = false) => {
     const r = await (opts.fetch ?? fetch)(`${base}${path}`, {
       signal: AbortSignal.timeout(opts.timeoutMs ?? 5e3)
     });
-    if (!r.ok && r.status !== 404) throw new Error(`esplora ${path}: HTTP ${r.status}`);
+    if (!r.ok && !(missingOk && r.status === 404)) {
+      throw new Error(`esplora ${path}: HTTP ${r.status}`);
+    }
     return r;
   };
   return {
     async tip() {
       const [h, hash] = await Promise.all([get("/blocks/tip/height"), get("/blocks/tip/hash")]);
-      return { height: Number(await h.text()), hash: (await hash.text()).trim() };
+      const tip = { height: Number(await h.text()), hash: (await hash.text()).trim() };
+      if (!Number.isSafeInteger(tip.height) || !/^[0-9a-f]{64}$/.test(tip.hash)) {
+        throw new Error("esplora tip: malformed");
+      }
+      return tip;
     },
     async coin(outpoint) {
       const [txid, voutStr] = outpoint.split(":");
       const vout = Number(voutStr);
-      const txr = await get(`/tx/${txid}`);
+      const txr = await get(`/tx/${txid}`, true);
       if (txr.status === 404) return null;
       const tx = await txr.json();
       const out = tx.vout[vout];
@@ -2395,6 +2415,6 @@ var STATUS_META = {
   }
 };
 
-export { BOND_DAYS_FLOORS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
+export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, requiresManualVerification, signNostrEvent, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map