@orangecheck/sdk 1.17.1 → 1.18.1

package/dist/index.js

@@ -70,6 +70,11 @@ function parseIdentities(identitiesStr) {
   }
   return bindings;
 }
+function readBondExtension(value) {
+  if (!/^[0-9]+$/.test(value)) return null;
+  const n = Number(value);
+  return Number.isSafeInteger(n) ? n : null;
+}
 function buildCanonicalMessage({ address, identities }, extensions = {}, options = {}) {
   const nonce = options.nonce ?? randomNonce16BHexLower();
   if (!/^[0-9a-f]{32}$/.test(nonce)) {
@@ -92,6 +97,9 @@ function buildCanonicalMessage({ address, identities }, extensions = {}, options
       continue;
     }
     const key = k.toLowerCase();
+    if (key === "bond" && readBondExtension(String(v)) === null) {
+      throw new Error(`invalid bond: ${String(v)} is not a whole number of sats up to 2^53 - 1`);
+    }
     normExt[key] = String(v);
   }
   const extLines = Object.keys(normExt).sort().map((k) => `${k}: ${normExt[k]}`);
@@ -257,6 +265,10 @@ function refuseUnknown(where, opts, known) {
       `@orangecheck/sdk: ${where}: unknown option ${unknown.join(", ")}. It reads only ${[...known].join(", ")}.`
     );
   }
+  const inherited = [...known].filter((k) => k in opts && !Object.prototype.hasOwnProperty.call(opts, k));
+  if (inherited.length > 0) {
+    throw new TypeError(`@orangecheck/sdk: ${where}: option ${inherited.join(", ")} is inherited, not set by the caller`);
+  }
 }
 function checkCheckParams(params) {
   refuseUnknown("check()", params, CHECK_OPTIONS);
@@ -265,6 +277,21 @@ function checkCheckParams(params) {
 function checkVerifyOptions(opts, where = "verify()") {
   refuseUnknown(where, opts, VERIFY_OPTIONS);
 }
+var CHALLENGE_OPTIONS = /* @__PURE__ */ new Set([
+  "address",
+  "ttlSeconds",
+  "nonce",
+  "audience",
+  "purpose",
+  "now"
+]);
+function checkChallengeOptions(opts) {
+  refuseUnknown("issueChallenge()", opts, CHALLENGE_OPTIONS);
+}
+var SCORING_OPTIONS = /* @__PURE__ */ new Set(["algorithm"]);
+function checkScoringConfig(config) {
+  refuseUnknown("computeScore()", config, SCORING_OPTIONS);
+}
 
 // src/scoring.ts
 function scoreV0(sats, days) {
@@ -279,6 +306,7 @@ function scoreTier(sats, days) {
   return "none";
 }
 function computeScore(sats, days, config) {
+  checkScoringConfig(config);
   switch (config.algorithm) {
     case "v0":
       return scoreV0(sats, days);
@@ -358,14 +386,15 @@ function parseCanonicalMessage(msg) {
   }
   const network = extensions["network"] || "mainnet";
   const bondStr = extensions["bond"];
-  const bond = bondStr ? parseInt(bondStr, 10) : void 0;
+  const bond = bondStr ? readBondExtension(bondStr) : void 0;
   return {
     core: { address, identities, issued_at },
     expires,
     repeated,
     network,
     extensions,
-    bond: bond !== void 0 && !isNaN(bond) && bond > 0 ? bond : void 0
+    bond: bond !== void 0 && bond !== null && bond > 0 ? bond : void 0,
+    bondMalformed: bond === null
   };
 }
 async function getAddressUtxos(address, network, opts) {
@@ -534,6 +563,16 @@ async function verify(input, opts = {}) {
         identities: parsed.core.identities
       };
     }
+    if (parsed.bondMalformed) {
+      codes.push("bond_malformed");
+      return {
+        ok: false,
+        codes,
+        network,
+        attestation_id,
+        identities: parsed.core.identities
+      };
+    }
     try {
       const utxos = await getAddressUtxos(input.addr, network, {
         esploraMainnetBase: opts.esploraMainnetBase,
@@ -1276,6 +1315,7 @@ function iso(date) {
   return date.toISOString().replace(/\.\d{3}Z$/, "Z");
 }
 function issueChallenge(opts) {
+  checkChallengeOptions(opts);
   const now = opts.now ?? /* @__PURE__ */ new Date();
   const ttl = opts.ttlSeconds ?? 300;
   const expiresAt = new Date(now.getTime() + ttl * 1e3);
@@ -2318,6 +2358,11 @@ var STATUS_META = {
     detail: "The confirmed balance is less than the declared bond amount. The bond extension requires the address to hold at least the specified amount in confirmed UTXOs.",
     severity: "error"
   },
+  bond_malformed: {
+    label: "Bond amount not readable",
+    detail: "The signed bond line is not a whole number of sats written in plain digits, so the attestation does not say how much it bonds.",
+    severity: "error"
+  },
   aud_mismatch: {
     label: "Audience mismatch",
     detail: "The message was signed for a different audience than expected. This may be intentional or indicate the signature is being used in the wrong context.",
@@ -2423,6 +2468,7 @@ exports.queryByAddress = queryByAddress;
 exports.queryByAttestationId = queryByAttestationId;
 exports.queryByIdentity = queryByIdentity;
 exports.queryRecent = queryRecent;
+exports.readBondExtension = readBondExtension;
 exports.requiresManualVerification = requiresManualVerification;
 exports.signNostrEvent = signNostrEvent;
 exports.signatureIsValid = signatureIsValid;