@orangecheck/sdk 1.17.1 → 1.18.1

package/dist/index.mjs

@@ -68,6 +68,11 @@ function parseIdentities(identitiesStr) {
   }
   return bindings;
 }
+function readBondExtension(value) {
+  if (!/^[0-9]+$/.test(value)) return null;
+  const n = Number(value);
+  return Number.isSafeInteger(n) ? n : null;
+}
 function buildCanonicalMessage({ address, identities }, extensions = {}, options = {}) {
   const nonce = options.nonce ?? randomNonce16BHexLower();
   if (!/^[0-9a-f]{32}$/.test(nonce)) {
@@ -90,6 +95,9 @@ function buildCanonicalMessage({ address, identities }, extensions = {}, options
       continue;
     }
     const key = k.toLowerCase();
+    if (key === "bond" && readBondExtension(String(v)) === null) {
+      throw new Error(`invalid bond: ${String(v)} is not a whole number of sats up to 2^53 - 1`);
+    }
     normExt[key] = String(v);
   }
   const extLines = Object.keys(normExt).sort().map((k) => `${k}: ${normExt[k]}`);
@@ -255,6 +263,10 @@ function refuseUnknown(where, opts, known) {
       `@orangecheck/sdk: ${where}: unknown option ${unknown.join(", ")}. It reads only ${[...known].join(", ")}.`
     );
   }
+  const inherited = [...known].filter((k) => k in opts && !Object.prototype.hasOwnProperty.call(opts, k));
+  if (inherited.length > 0) {
+    throw new TypeError(`@orangecheck/sdk: ${where}: option ${inherited.join(", ")} is inherited, not set by the caller`);
+  }
 }
 function checkCheckParams(params) {
   refuseUnknown("check()", params, CHECK_OPTIONS);
@@ -263,6 +275,21 @@ function checkCheckParams(params) {
 function checkVerifyOptions(opts, where = "verify()") {
   refuseUnknown(where, opts, VERIFY_OPTIONS);
 }
+var CHALLENGE_OPTIONS = /* @__PURE__ */ new Set([
+  "address",
+  "ttlSeconds",
+  "nonce",
+  "audience",
+  "purpose",
+  "now"
+]);
+function checkChallengeOptions(opts) {
+  refuseUnknown("issueChallenge()", opts, CHALLENGE_OPTIONS);
+}
+var SCORING_OPTIONS = /* @__PURE__ */ new Set(["algorithm"]);
+function checkScoringConfig(config) {
+  refuseUnknown("computeScore()", config, SCORING_OPTIONS);
+}
 
 // src/scoring.ts
 function scoreV0(sats, days) {
@@ -277,6 +304,7 @@ function scoreTier(sats, days) {
   return "none";
 }
 function computeScore(sats, days, config) {
+  checkScoringConfig(config);
   switch (config.algorithm) {
     case "v0":
       return scoreV0(sats, days);
@@ -356,14 +384,15 @@ function parseCanonicalMessage(msg) {
   }
   const network = extensions["network"] || "mainnet";
   const bondStr = extensions["bond"];
-  const bond = bondStr ? parseInt(bondStr, 10) : void 0;
+  const bond = bondStr ? readBondExtension(bondStr) : void 0;
   return {
     core: { address, identities, issued_at },
     expires,
     repeated,
     network,
     extensions,
-    bond: bond !== void 0 && !isNaN(bond) && bond > 0 ? bond : void 0
+    bond: bond !== void 0 && bond !== null && bond > 0 ? bond : void 0,
+    bondMalformed: bond === null
   };
 }
 async function getAddressUtxos(address, network, opts) {
@@ -532,6 +561,16 @@ async function verify(input, opts = {}) {
         identities: parsed.core.identities
       };
     }
+    if (parsed.bondMalformed) {
+      codes.push("bond_malformed");
+      return {
+        ok: false,
+        codes,
+        network,
+        attestation_id,
+        identities: parsed.core.identities
+      };
+    }
     try {
       const utxos = await getAddressUtxos(input.addr, network, {
         esploraMainnetBase: opts.esploraMainnetBase,
@@ -1274,6 +1313,7 @@ function iso(date) {
   return date.toISOString().replace(/\.\d{3}Z$/, "Z");
 }
 function issueChallenge(opts) {
+  checkChallengeOptions(opts);
   const now = opts.now ?? /* @__PURE__ */ new Date();
   const ttl = opts.ttlSeconds ?? 300;
   const expiresAt = new Date(now.getTime() + ttl * 1e3);
@@ -2316,6 +2356,11 @@ var STATUS_META = {
     detail: "The confirmed balance is less than the declared bond amount. The bond extension requires the address to hold at least the specified amount in confirmed UTXOs.",
     severity: "error"
   },
+  bond_malformed: {
+    label: "Bond amount not readable",
+    detail: "The signed bond line is not a whole number of sats written in plain digits, so the attestation does not say how much it bonds.",
+    severity: "error"
+  },
   aud_mismatch: {
     label: "Audience mismatch",
     detail: "The message was signed for a different audience than expected. This may be intentional or indicate the signature is being used in the wrong context.",
@@ -2358,6 +2403,6 @@ var STATUS_META = {
   }
 };
 
-export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, requiresManualVerification, signNostrEvent, signatureIsValid, signedEnvelope, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
+export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, readBondExtension, requiresManualVerification, signNostrEvent, signatureIsValid, signedEnvelope, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map