@orangecheck/sdk 1.14.1 → 1.15.0

package/dist/identity.js

@@ -3,6 +3,8 @@
 var secp256k1_js = require('@noble/curves/secp256k1.js');
 var sha2_js = require('@noble/hashes/sha2.js');
 var base = require('@scure/base');
+require('buffer');
+require('@orangecheck/bip322');
 
 // src/utils/logger.ts
 function createLogger(namespace) {
@@ -408,7 +410,7 @@ var DEFAULT_RELAYS = [
 ];
 
 // src/identity/nostr.ts
-var log4 = createLogger("identity-verification/nostr");
+var log5 = createLogger("identity-verification/nostr");
 var HEX_64_RE2 = /^[0-9a-f]{64}$/;
 function toHex2(bytes) {
   let out = "";
@@ -431,7 +433,7 @@ function npubToHex(npub) {
 async function queryNostrEvents(options) {
   const { authors, kinds, search, relays = DEFAULT_RELAYS, limit = 100 } = options;
   const events = [];
-  log4.info({ authors, kinds, relayCount: relays.length }, "Querying Nostr for events");
+  log5.info({ authors, kinds, relayCount: relays.length }, "Querying Nostr for events");
   const queryPromises = relays.map(async (relayUrl) => {
     let ws = null;
     try {
@@ -472,11 +474,11 @@ async function queryNostrEvents(options) {
               resolve();
             }
           } catch (err) {
-            log4.error({ relay: relayUrl, error: err }, "Failed to parse event");
+            log5.error({ relay: relayUrl, error: err }, "Failed to parse event");
           }
         };
         wsRef.onerror = (err) => {
-          log4.error({ relay: relayUrl, error: err }, "WebSocket error during query");
+          log5.error({ relay: relayUrl, error: err }, "WebSocket error during query");
           cleanup();
           reject(err);
         };
@@ -485,7 +487,7 @@ async function queryNostrEvents(options) {
         };
       });
     } catch (err) {
-      log4.error({ relay: relayUrl, error: err }, "Failed to query relay");
+      log5.error({ relay: relayUrl, error: err }, "Failed to query relay");
     } finally {
       if (ws && ws.readyState !== WebSocket.CLOSED) {
         ws.close();
@@ -493,7 +495,7 @@ async function queryNostrEvents(options) {
     }
   });
   await Promise.allSettled(queryPromises);
-  log4.info({ eventCount: events.length }, "Query complete");
+  log5.info({ eventCount: events.length }, "Query complete");
   return events;
 }
 async function verifyNostrEventSignature(event) {
@@ -514,7 +516,7 @@ function nostrEventSignatureValid(event) {
     ]);
     const computedId = toHex2(sha2_js.sha256(new TextEncoder().encode(preimage)));
     if (computedId !== event.id.toLowerCase()) {
-      log4.warn(
+      log5.warn(
         { eventId: event.id, computedId },
         "nostr event id does not match its content"
       );
@@ -522,12 +524,12 @@ function nostrEventSignatureValid(event) {
     }
     return secp256k1_js.schnorr.verify(fromHex(event.sig), fromHex(event.id), fromHex(event.pubkey));
   } catch (err) {
-    log4.warn({ err }, "schnorr verify threw");
+    log5.warn({ err }, "schnorr verify threw");
     return false;
   }
 }
 async function verifyNostrIdentity(attestationId, npub, relays) {
-  log4.info({ attestationId, npub }, "Verifying Nostr identity");
+  log5.info({ attestationId, npub }, "Verifying Nostr identity");
   try {
     const pubkeyHex = npubToHex(npub);
     const events = await queryNostrEvents({
@@ -538,7 +540,7 @@ async function verifyNostrIdentity(attestationId, npub, relays) {
       relays
     });
     if (events.length === 0) {
-      log4.info({ npub }, "No verification events found");
+      log5.info({ npub }, "No verification events found");
       return {
         verified: false,
         error: "No verification event found. User must post a note containing the attestation ID."
@@ -548,13 +550,13 @@ async function verifyNostrIdentity(attestationId, npub, relays) {
       if (event.content.includes(attestationId)) {
         const isValid = await verifyNostrEventSignature(event);
         if (isValid) {
-          log4.info({ npub, eventId: event.id }, "Nostr identity verified");
+          log5.info({ npub, eventId: event.id }, "Nostr identity verified");
           return {
             verified: true,
             event
           };
         } else {
-          log4.warn({ npub, eventId: event.id }, "Invalid event signature");
+          log5.warn({ npub, eventId: event.id }, "Invalid event signature");
         }
       }
     }
@@ -563,7 +565,7 @@ async function verifyNostrIdentity(attestationId, npub, relays) {
       error: "Found events but none had valid signatures"
     };
   } catch (err) {
-    log4.error({ error: err, npub }, "Failed to verify Nostr identity");
+    log5.error({ error: err, npub }, "Failed to verify Nostr identity");
     return {
       verified: false,
       error: err instanceof Error ? err.message : "Unknown error"
@@ -591,9 +593,9 @@ function isNostrIdentityVerified(attestationId, npub, cachedEvents) {
 }
 
 // src/identity/twitter.ts
-var log5 = createLogger("identity-verification/twitter");
+var log6 = createLogger("identity-verification/twitter");
 async function verifyTwitterIdentity(attestationId, handle, tweetUrl) {
-  log5.info({ attestationId, handle, tweetUrl }, "Verifying Twitter identity");
+  log6.info({ attestationId, handle, tweetUrl }, "Verifying Twitter identity");
   if (!tweetUrl) {
     return {
       verified: false,
@@ -608,7 +610,7 @@ async function verifyTwitterIdentity(attestationId, handle, tweetUrl) {
         error: "Invalid tweet URL format"
       };
     }
-    log5.info({ handle, tweetId }, "Manual verification required");
+    log6.info({ handle, tweetId }, "Manual verification required");
     return {
       verified: false,
       tweetUrl,
@@ -616,7 +618,7 @@ async function verifyTwitterIdentity(attestationId, handle, tweetUrl) {
       error: "Automatic verification not available. Please verify manually by checking the tweet."
     };
   } catch (err) {
-    log5.error({ error: err, handle }, "Failed to verify Twitter identity");
+    log6.error({ error: err, handle }, "Failed to verify Twitter identity");
     return {
       verified: false,
       error: err instanceof Error ? err.message : "Unknown error"