@orangecheck/sdk 1.16.2 → 1.17.1

package/dist/index.mjs

@@ -102,10 +102,15 @@ async function generateAttestationId(message) {
   const hashBuffer = await crypto.subtle.digest("SHA-256", data);
   return toLowerHex(new Uint8Array(hashBuffer));
 }
+function readMessageValue(message, key) {
+  const needle = key + ":";
+  const hit = message.split("\n").map((l) => l.trim()).find((l) => l.toLowerCase().startsWith(needle));
+  if (!hit) return void 0;
+  return hit.slice(hit.indexOf(":") + 1).trim();
+}
 async function createAttestationEnvelope(message, signature, scheme, address, identities, extensions = {}) {
   const attestation_id = await generateAttestationId(message);
-  const issuedAtMatch = message.match(/issued_at: ([^\n]+)/);
-  const issued_at = issuedAtMatch?.[1] ?? (/* @__PURE__ */ new Date()).toISOString();
+  const issued_at = readMessageValue(message, "issued_at") ?? (/* @__PURE__ */ new Date()).toISOString();
   const expires_at = extensions.expires;
   const relay_hints = extensions.relay_hints?.split(",").map((r) => r.trim());
   const publish_targets = extensions.publish?.split(",").map((t) => t.trim());
@@ -221,6 +226,44 @@ function rfc3339Ms(value) {
   return Number.isNaN(ms) ? null : ms;
 }
 
+// src/options.ts
+var CHECK_OPTIONS = /* @__PURE__ */ new Set([
+  "addr",
+  "id",
+  "identity",
+  "minSats",
+  "minDays",
+  "relays",
+  "verifyOptions"
+]);
+var VERIFY_OPTIONS = /* @__PURE__ */ new Set([
+  "testMode",
+  "demoMode",
+  "expectedAud",
+  "esploraMainnetBase",
+  "esploraSignetBase",
+  "esploraTestnetBase",
+  "coverSats"
+]);
+function refuseUnknown(where, opts, known) {
+  if (opts === null || typeof opts !== "object") {
+    throw new TypeError(`@orangecheck/sdk: ${where} must be an object`);
+  }
+  const unknown = Object.keys(opts).filter((k) => !known.has(k));
+  if (unknown.length > 0) {
+    throw new TypeError(
+      `@orangecheck/sdk: ${where}: unknown option ${unknown.join(", ")}. It reads only ${[...known].join(", ")}.`
+    );
+  }
+}
+function checkCheckParams(params) {
+  refuseUnknown("check()", params, CHECK_OPTIONS);
+  if (params.verifyOptions !== void 0) checkVerifyOptions(params.verifyOptions, "verifyOptions");
+}
+function checkVerifyOptions(opts, where = "verify()") {
+  refuseUnknown(where, opts, VERIFY_OPTIONS);
+}
+
 // src/scoring.ts
 function scoreV0(sats, days) {
   if (sats <= 0 || days <= 0) return 0;
@@ -279,13 +322,7 @@ async function signatureIsValid(input) {
 }
 function parseCanonicalMessage(msg) {
   const lines = msg.split("\n").map((l) => l.trim());
-  const getVal = (prefix) => {
-    const needle = prefix + ":";
-    const hit = lines.find((l) => l.toLowerCase().startsWith(needle));
-    if (!hit) return void 0;
-    const idx = hit.indexOf(":");
-    return hit.slice(idx + 1).trim();
-  };
+  const getVal = (key) => readMessageValue(msg, key);
   const address = getVal("address") || "";
   const identitiesStr = getVal("identities") || "";
   const issued_at = getVal("issued_at") || "";
@@ -432,6 +469,7 @@ function computeMetrics(utxos, bondAmount, coverSats) {
   return { sats_bonded, days_unspent, confirmed_balance };
 }
 async function verify(input, opts = {}) {
+  checkVerifyOptions(opts);
   const codes = [];
   let network = "mainnet";
   try {
@@ -1110,6 +1148,7 @@ function extractAttestationIdFromUrl(url) {
 
 // src/check.ts
 async function check(params) {
+  checkCheckParams(params);
   const {
     addr,
     id,