npm - @orangecheck/sdk - Versions diffs - 1.7.0 → 1.9.0 - Mend

@orangecheck/sdk 1.7.0 → 1.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (21) hide show

package/dist/nostr.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/nostr-pubkey.ts","../src/utils/logger.ts","../src/nostr.ts"],"names":[],"mappings":";;;AAEA,IAAM,SAAA,GAAY,gBAAA;AAElB,SAAS,MAAM,KAAA,EAA2B;AACtC,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,GAAA,IAAO,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AAC5D,EAAA,OAAO,GAAA;AACX;AAGO,SAAS,iBAAiB,KAAA,EAA8B;AAC3D,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY;AACzC,EAAA,IAAI,SAAA,CAAU,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,OAAA;AACpC,EAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,CAAW,OAAO,GAAG,OAAO,IAAA;AACzC,EAAA,IAAI;AACA,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,OAAA,EAAkC,IAAI,CAAA;AACpE,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA;AACtC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AAC5C,IAAA,OAAO,KAAA,CAAM,WAAW,EAAA,GAAK,KAAA,CAAM,WAAW,IAAA,CAAK,KAAK,CAAC,CAAA,GAAI,IAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAMO,SAAS,qBAAqB,UAAA,EAA8B;AAC/D,EAAA,MAAM,GAAA,GAAM,iBAAiB,UAAU,CAAA;AACvC,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,CAAC,UAAU,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,GAAA,CAAI,MAAM,KAAK,CAAA,CAAG,GAAA,CAAI,CAAC,CAAA,KAAM,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAC,CAAA;AAC3E,EAAA,OAAO,CAAC,MAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,QAAQ,KAAK,CAAA,EAAG,IAAI,CAAA,EAAG,GAAG,CAAA;AACnE;ACcO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACxFA,IAAM,GAAA,GAAM,aAAa,WAAW,CAAA;AAK7B,IAAM,sBAAA,GAAyB;AAqC/B,IAAM,cAAA,GAA2B;AAAA,EACpC,sBAAA;AAAA,EACA,eAAA;AAAA,EACA,0BAAA;AAAA,EACA;AACJ;AAyBO,IAAM,kBAAA,GAAqB;AAClC,IAAM,gBAAA,GAAmB,GAAA;AAGzB,SAAS,UAAU,UAAA,EAA4B;AAC3C,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,kBAAkB,UAAA,GAAa,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA;AAC1E;AAYO,SAAS,sBAAA,CACZ,UACA,MAAA,EAC8B;AAQ9B,EAAA,MAAM,IAAA,GAAmB;AAAA,IACrB,CAAC,GAAA,EAAK,QAAA,CAAS,cAAc,CAAA;AAAA;AAAA,IAC7B,CAAC,GAAA,EAAK,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IACtB,CAAC,KAAK,WAAW,CAAA;AAAA;AAAA,IACjB,CAAC,SAAA,EAAW,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IAC5B,CAAC,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA;AAAA,IAC1B,CAAC,WAAA,EAAa,QAAA,CAAS,SAAS;AAAA;AAAA,GACpC;AAGA,EAAA,KAAA,MAAW,QAAA,IAAY,SAAS,UAAA,EAAY;AACxC,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,EAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA,CAAA,EAAI,QAAA,CAAS,UAAU,CAAA,CAAE,CAAC,CAAA;AAAA,EAClE;AAGA,EAAA,IAAI,SAAS,UAAA,EAAY;AACrB,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,SAAA,EAAW,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EAC9C;AAGA,EAAA,IAAI,QAAA,CAAS,aAAa,MAAA,EAAQ;AAC9B,IAAA,KAAA,MAAW,KAAA,IAAS,SAAS,WAAA,EAAa;AACtC,MAAA,IAAA,CAAK,IAAA,CAAK,CAAC,OAAA,EAAS,KAAK,CAAC,CAAA;AAAA,IAC9B;AAAA,EACJ;AAGA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU,MAAM,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,sBAAA;AAAA,IACN,IAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,MAAM,QAAA,CAAS,SAAS,IAAI,GAAI,CAAA;AAAA,IAC5D;AAAA,GACJ;AACJ;AAQO,SAAS,yBAAyB,KAAA,EAAsC;AAC3E,EAAA,MAAM,aAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAM,IAAA,EAAM;AAC1B,IAAA,IAAI,IAAI,CAAC,CAAA,KAAM,GAAA,IAAO,GAAA,CAAI,CAAC,CAAA,EAAG;AAC1B,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,CAAC,CAAA,CAAE,QAAQ,GAAG,CAAA;AACrC,MAAA,IAAI,eAAe,EAAA,EAAI;AACnB,QAAA,UAAA,CAAW,IAAA,CAAK;AAAA,UACZ,UAAU,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,GAAG,UAAU,CAAA;AAAA,UACxC,YAAY,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,aAAa,CAAC;AAAA,SAC9C,CAAA;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAEA,EAAA,OAAO,UAAA;AACX;AAQO,SAAS,0BAA0B,KAAA,EAAuC;AAC7E,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA;AACpD,EAAA,OAAO,OAAO,CAAC,CAAA;AACnB;AAQO,SAAS,oBAAoB,KAAA,EAAuC;AACvE,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,SAAS,CAAA;AAChE,EAAA,OAAO,aAAa,CAAC,CAAA;AACzB;AAMA,eAAsB,eAAA,CAClB,KAAA,EACA,MAAA,GAAmB,cAAA,EAC6B;AAChD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,EAAO,EAAG,4BAA4B,CAAA;AAIvF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACnD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAU3B,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,MAAA,CAAO,KAAK,QAAQ,CAAA;AAAA,IACxB,CAAA;AAEA,IAAA,IAAI;AAEA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAIzC,QAAA,MAAM,QAAA,GAAW,WAAW,MAAM;AAC9B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,uBAAuB,CAAC,CAAA;AAAA,QAC7C,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,QAAQ,CAAA;AACrB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAGjB,UAAA,KAAA,CAAM,KAAK,IAAA,CAAK,SAAA,CAAU,CAAC,OAAA,EAAS,KAAK,CAAC,CAAC,CAAA;AAAA,QAC/C,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAEhC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,IAAQ,KAAK,CAAC,CAAA,KAAM,MAAM,EAAA,EAAI;AAC1C,cAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,EAAM;AAClB,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,OAAA,EAAQ;AAAA,cACZ,CAAA,MAAO;AACH,gBAAA,GAAA,CAAI,IAAA;AAAA,kBACA,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,IAAA,CAAK,CAAC,CAAA,EAAE;AAAA,kBACnC;AAAA,iBACJ;AACA,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,IAAK,sBAAsB,CAAC,CAAA;AAAA,cACvD;AAAA,YACJ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,KAAA;AAAA,cACA,EAAE,KAAA,EAAO,QAAA,EAAU,KAAA,EAAO,GAAA,EAAI;AAAA,cAC9B;AAAA,aACJ;AACA,YAAA,aAAA,EAAc;AACd,YAAA,OAAA,EAAQ;AACR,YAAA,MAAA,CAAO,GAAG,CAAA;AAAA,UACd;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,iBAAiB,CAAA;AAC5D,UAAA,aAAA,EAAc;AACd,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAGlB,UAAA,YAAA,CAAa,QAAQ,CAAA;AAAA,QACzB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,4BAA4B,CAAA;AACvE,MAAA,aAAA,EAAc;AAAA,IAClB,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,eAAe,CAAA;AAExC,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,YAAA,EAAc,OAAA,CAAQ,QAAQ,WAAA,EAAa,MAAA,CAAO,MAAA,EAAO,EAAG,qBAAqB,CAAA;AAE5F,EAAA,OAAO,EAAE,SAAS,MAAA,EAAO;AAC7B;AAKA,eAAsB,oBAAA,CAClB,aAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,YAAY,MAAA,CAAO,MAAA,IAAU,iCAAiC,CAAA;AAIxF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAE3B,IAAA,IAAI;AACA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAEjB,UAAA,MAAM,cAAA,GAAiB,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AACzC,UAAA,KAAA,CAAM,IAAA;AAAA,YACF,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,CAAC,aAAa,CAAA;AAAA,gBACpB,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,OAAA,EAAQ;AACR,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AAAA,QACxB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,cAAA,CAClB,OAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,OAAA,EAAS,YAAY,MAAA,CAAO,MAAA,IAAU,6BAA6B,CAAA;AAI9E,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,UAAA,EAAa,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAC9C,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAQb,IAAA,EAAM,CAAC,OAAO,CAAA;AAAA,gBACd,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,eAAA,CAClB,QAAA,EACA,UAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,MAAM,WAAA,GAAc,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA;AAC7C,EAAA,MAAM,YAAA,GACF,QAAA,KAAa,OAAA,GACP,oBAAA,CAAqB,UAAU,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,MAAA,EAAS,CAAC,CAAA,CAAE,CAAA,GACxD,CAAC,WAAW,CAAA;AAEtB,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,QAAA,EAAU,UAAA,EAAY,YAAY,MAAA,CAAO,MAAA,IAAU,8BAA8B,CAAA;AAI5F,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,cAAA,EAAiB,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAClD,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,YAAA;AAAA,gBACN,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAMA,eAAsB,0BAA0B,QAAA,EAAiD;AAC7F,EAAA,IAAI;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAC5C,IAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAC7D,IAAA,MAAM,YAAY,KAAA,CAAM,IAAA,CAAK,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AACvD,IAAA,MAAM,UAAA,GAAa,SAAA,CAAU,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAEhF,IAAA,OAAO,eAAe,QAAA,CAAS,cAAA;AAAA,EACnC,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,KAAA,EAAO,GAAA,IAAO,uCAAuC,CAAA;AACjE,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;AAKO,SAAS,0BAA0B,KAAA,EAA+C;AACrF,EAAA,IAAI;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA;AACzC,IAAA,OAAO,QAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,KAAA,EAAO,GAAA,IAAO,wCAAwC,CAAA;AACrF,IAAA,OAAO,IAAA;AAAA,EACX;AACJ","file":"nostr.mjs","sourcesContent":["import { bech32 } from '@scure/base';\n\nconst HEX_64_RE = /^[0-9a-f]{64}$/;\n\nfunction toHex(bytes: Uint8Array): string {\n let out = '';\n for (const b of bytes) out += b.toString(16).padStart(2, '0');\n return out;\n}\n\n/** A Nostr public key as lowercase hex, from either `npub1…` or hex. Null if it is neither. /\nexport function nostrPubkeyToHex(value: string): string \| null {\n const trimmed = value.trim().toLowerCase();\n if (HEX_64_RE.test(trimmed)) return trimmed;\n if (!trimmed.startsWith('npub1')) return null;\n try {\n const decoded = bech32.decode(trimmed as `${string}1${string}`, 1023);\n if (decoded.prefix !== 'npub') return null;\n const bytes = bech32.fromWords(decoded.words);\n return bytes.length === 32 ? toHex(Uint8Array.from(bytes)) : null;\n } catch {\n return null;\n }\n}\n\n/\n Every spelling of one Nostr key an attestation may carry in its `i` tag.\n * SPEC §2 prescribes `npub1…`; the reference site also accepts hex.\n /\nexport function nostrIdentifierForms(identifier: string): string[] {\n const hex = nostrPubkeyToHex(identifier);\n if (!hex) return [identifier];\n const bytes = Uint8Array.from(hex.match(/../g)!.map((b) => parseInt(b, 16)));\n return [bech32.encode('npub', bech32.toWords(bytes), 1023), hex];\n}\n","/\n Simple logger for SDK\n * Can be disabled in production builds\n /\n\n/\n Log level type\n /\nexport type LogLevel = 'debug' \| 'info' \| 'warn' \| 'error' \| 'none';\n\n/\n Logger context type\n /\nexport type LogContext = Record<string, unknown>;\n\n/\n Logger interface\n /\nexport interface Logger {\n debug: (contextOrMessage: string \| LogContext, message?: string) => void;\n info: (contextOrMessage: string \| LogContext, message?: string) => void;\n warn: (contextOrMessage: string \| LogContext, message?: string) => void;\n error: (contextOrMessage: string \| LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/\n Set the global log level\n * @param level - Log level to set\n /\nexport function setLogLevel(level: LogLevel): void {\n logLevel = level;\n}\n\n/\n Get the current log level\n * @returns Current log level\n /\nexport function getLogLevel(): LogLevel {\n return logLevel;\n}\n\n/\n Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n /\nexport function createLogger(namespace: string): Logger {\n const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n if (logLevel === 'none') return false;\n\n const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n const messageLevelIndex = levels.indexOf(level);\n\n return messageLevelIndex >= currentLevelIndex;\n };\n\n const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n return {\n debug: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('debug')) {\n if (typeof contextOrMessage === 'string') {\n console.debug(formatMessage(contextOrMessage));\n } else {\n console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n }\n }\n },\n info: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('info')) {\n if (typeof contextOrMessage === 'string') {\n console.info(formatMessage(contextOrMessage));\n } else {\n console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n }\n }\n },\n warn: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('warn')) {\n if (typeof contextOrMessage === 'string') {\n console.warn(formatMessage(contextOrMessage));\n } else {\n console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n }\n }\n },\n error: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('error')) {\n if (typeof contextOrMessage === 'string') {\n console.error(formatMessage(contextOrMessage));\n } else {\n console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n }\n }\n },\n };\n}\n\n/\n Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n /\nexport function logVerificationError(\n protocol: string,\n identifier: string,\n error: Error,\n context?: LogContext\n): void {\n const logger = createLogger('identity-verification');\n logger.error(\n {\n protocol,\n identifier,\n error: error.message,\n stack: error.stack,\n ...context,\n },\n 'Verification failed'\n );\n}\n","/\n Nostr Integration for OrangeCheck Protocol\n \n Implements NIP-78 (Application-specific data) for attestation publishing\n /\n\nimport type { AttestationEnvelope, IdentityBinding, NostrEvent } from './types';\n\nimport { nostrIdentifierForms } from './nostr-pubkey';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/nostr');\n\n/\n NIP-78 event kind for OrangeCheck attestations\n /\nexport const ATTESTATION_EVENT_KIND = 30078;\n\n/\n Default Nostr relays for OrangeCheck attestation publishing and lookup.\n \n Well-known relays with good uptime, plus the first-party family relay.\n * `relay.ochk.io` was missing here while attest.ochk.io's verifier has always\n * read from it, so the SDK and the reference implementation were looking in\n * different places — the SDK could miss a family attestation that the hosted\n * API found. It runs a kind allowlist (30078-30087, 30110-30114) and canonical OC d-tag\n * prefixes, and is always co-published alongside the public relays, never the\n * only copy. See https://github.com/orangecheck/oc-relay-infra.\n \n Order matters only for readability; queries fan out to all of them and\n * merge. Pass your own `relays` to any query to override this entirely — the\n * protocol does not require trusting any particular relay.\n \n A NOTE ON `relay.damus.io`, deliberately kept. It is reachable from a browser\n * (measured ~391ms, real events returned) and NOT reachable from at least one\n * serverless runtime — Vercel's, where it fails to connect on every attempt,\n * consistently, over hours. Its NIP-11 declares no `auth_required`,\n * `payment_required` or `restricted_writes`, so this reads as datacenter-IP\n * filtering in front of it rather than policy, and it can change in either\n * direction without notice.\n \n It stays for three reasons: it is one of the most widely read relays, so an\n * attestation published there is findable by the most people; the browser is\n * the dominant path for this SDK (wallet signing happens there), and it works\n * there; and since FANOUT_DEADLINE_MS below is a SHARED budget, a relay that\n * fails to connect resolves immediately and costs no latency. Removing a relay\n * that works for most callers, to tidy a status field on one runtime, is the\n * wrong trade.\n \n If you run this SDK server-side and want certainty about coverage, pass\n * `relays` explicitly. Silent partial coverage — believing you reached four\n * relays when you reached three — is the real hazard here, not latency.\n /\nexport const DEFAULT_RELAYS: string[] = [\n 'wss://relay.damus.io',\n 'wss://nos.lol',\n 'wss://relay.snort.social',\n 'wss://relay.ochk.io',\n];\n\n/\n Wall-clock budget for a whole relay fan-out, shared by every relay in it.\n \n Queries below use Promise.allSettled, so a fan-out used to take as long as\n * its SLOWEST relay — and with a dead relay in DEFAULT_RELAYS that meant the\n * per-relay 10s timeout, every single call. Measured on 1.4.0:\n \n check({ addr }) with the old defaults 10.4s\n * check({ addr }) with the dead relay out 1.0s\n \n That is not merely slow, it broke a dependent outright: @orangecheck/gate\n * races check() against a 5s lookupTimeoutMs, so a 10.4s lookup lost the race\n * every time and no address-based gate decision could ever succeed.\n \n A shared deadline fixes the class: whichever relay is dead or slow next, a\n * fan-out costs at most this. Healthy relays answer well inside it (~1s for a\n * cold WebSocket plus a query). QUERY_TIMEOUT_MS remains the per-relay ceiling.\n \n The value is deliberately BELOW @orangecheck/gate's 5s default\n * lookupTimeoutMs, so a gate decision can still resolve in the worst case\n * rather than always losing its own race. Raising this above 5000 silently\n * breaks that dependent — change both together, or don't.\n /\nexport const FANOUT_DEADLINE_MS = 4000;\nconst QUERY_TIMEOUT_MS = 10000;\n\n/* Remaining budget for a relay, given the fan-out's shared deadline. /\nfunction budgetFor(deadlineAt: number): number {\n return Math.max(0, Math.min(QUERY_TIMEOUT_MS, deadlineAt - Date.now()));\n}\n\n/\n Create a NIP-78 event for an OrangeCheck attestation\n \n Kind: 30078 (Parameterized Replaceable Event)\n * d-tag: attestation_id (makes it replaceable by attestation ID)\n \n @param envelope - Attestation envelope\n * @param pubkey - Nostr public key (hex format)\n * @returns Unsigned Nostr event\n /\nexport function createAttestationEvent(\n envelope: AttestationEnvelope,\n pubkey: string\n): Omit<NostrEvent, 'id' \| 'sig'> {\n // NIP-12 relays index SINGLE-LETTER tags only. A multi-letter tag like\n // `address` is stored verbatim and stays readable in the event, but it is\n // never indexed, so no `#address` filter can ever retrieve it. Without the\n // `t` tags below an attestation published by this SDK is invisible to\n // every by-address query on every relay — including attest.ochk.io's own\n // verifier, which queries `#t`. Keep both: `t` is what makes it findable,\n // `address` is human-readable diagnostics and is not load-bearing.\n const tags: string[][] = [\n ['d', envelope.attestation_id], // Parameterized replaceable event identifier (indexed)\n ['t', envelope.address], // Indexed btc-address tag — query with `#t`\n ['t', 'oc-attest'], // Family marker — `#t=[\"oc-attest\"]` for cross-cut discovery\n ['address', envelope.address], // Diagnostic / legacy — relay won't index this\n ['scheme', envelope.scheme], // Signature scheme (bip322 or legacy)\n ['issued_at', envelope.issued_at], // ISO timestamp\n ];\n\n // Add identity tags\n for (const identity of envelope.identities) {\n tags.push(['i', `${identity.protocol}:${identity.identifier}`]);\n }\n\n // Add expiration if present\n if (envelope.expires_at) {\n tags.push(['expires', envelope.expires_at]);\n }\n\n // Add relay hints if present\n if (envelope.relay_hints?.length) {\n for (const relay of envelope.relay_hints) {\n tags.push(['relay', relay]);\n }\n }\n\n // Content is the full attestation envelope as JSON\n const content = JSON.stringify(envelope, null, 2);\n\n return {\n kind: ATTESTATION_EVENT_KIND,\n tags,\n content,\n created_at: Math.floor(Date.parse(envelope.issued_at) / 1000),\n pubkey,\n };\n}\n\n/\n Parse identity bindings from Nostr event tags\n \n @param event - Nostr event\n * @returns Array of identity bindings\n /\nexport function parseIdentitiesFromEvent(event: NostrEvent): IdentityBinding[] {\n const identities: IdentityBinding[] = [];\n\n for (const tag of event.tags) {\n if (tag[0] === 'i' && tag[1]) {\n const colonIndex = tag[1].indexOf(':');\n if (colonIndex !== -1) {\n identities.push({\n protocol: tag[1].substring(0, colonIndex),\n identifier: tag[1].substring(colonIndex + 1),\n });\n }\n }\n }\n\n return identities;\n}\n\n/\n Extract attestation ID from Nostr event d-tag\n \n @param event - Nostr event\n * @returns Attestation ID or undefined if not found\n /\nexport function getAttestationIdFromEvent(event: NostrEvent): string \| undefined {\n const dTag = event.tags.find((tag) => tag[0] === 'd');\n return dTag?.[1];\n}\n\n/\n Extract Bitcoin address from Nostr event tags\n \n @param event - Nostr event\n * @returns Bitcoin address or undefined if not found\n /\nexport function getAddressFromEvent(event: NostrEvent): string \| undefined {\n const addressTag = event.tags.find((tag) => tag[0] === 'address');\n return addressTag?.[1];\n}\n\n/\n Publish a Nostr event to multiple relays\n * Returns array of relay URLs that successfully accepted the event\n /\nexport async function publishToRelays(\n event: NostrEvent,\n relays: string[] = DEFAULT_RELAYS\n): Promise<{ success: string[]; failed: string[] }> {\n const success: string[] = [];\n const failed: string[] = [];\n\n log.info({ eventId: event.id, relayCount: relays.length }, 'Publishing event to relays');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const publishPromises = relays.map(async (relayUrl) => {\n let ws: WebSocket \| null = null;\n\n // One outcome per relay, first one wins. Without this a relay that\n // ACKs `OK true` and then emits an error or close event during\n // teardown lands in BOTH arrays, and the caller reports \"published\n // to 3 · rejected 3\" over the same three relays. The `failed.includes`\n // check this replaces only ever de-duplicated `failed` against\n // itself, so it could not catch a success/failure split.\n // attest.ochk.io's copy of this file has carried the guard for a\n // while; this is the back-port.\n let settled = false;\n const recordSuccess = (): void => {\n if (settled) return;\n settled = true;\n success.push(relayUrl);\n };\n const recordFailure = (): void => {\n if (settled) return;\n settled = true;\n failed.push(relayUrl);\n };\n\n try {\n // Connect to relay\n ws = new WebSocket(relayUrl);\n const wsRef = ws; // Capture for closures\n\n await new Promise<void>((resolve, reject) => {\n // One outer deadline covers connect + OK round-trip. The old\n // code cleared this on `onopen`, which meant a relay that\n // opened but never sent OK would hang the promise forever.\n const deadline = setTimeout(() => {\n wsRef.close();\n reject(new Error('Relay publish timeout'));\n }, budgetFor(deadlineAt));\n\n const cleanup = () => {\n clearTimeout(deadline);\n wsRef.close();\n };\n\n wsRef.onopen = () => {\n // Do NOT clear the deadline — we still need it in case\n // the relay never responds with OK.\n wsRef.send(JSON.stringify(['EVENT', event]));\n };\n\n wsRef.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n // Check for OK response\n if (data[0] === 'OK' && data[1] === event.id) {\n if (data[2] === true) {\n recordSuccess();\n cleanup();\n resolve();\n } else {\n log.warn(\n { relay: relayUrl, reason: data[3] },\n 'Relay rejected event'\n );\n recordFailure();\n cleanup();\n reject(new Error(data[3] \|\| 'Relay rejected event'));\n }\n }\n } catch (err) {\n log.error(\n { relay: relayUrl, error: err },\n 'Failed to parse relay response'\n );\n recordFailure();\n cleanup();\n reject(err);\n }\n };\n\n wsRef.onerror = (err) => {\n log.error({ relay: relayUrl, error: err }, 'WebSocket error');\n recordFailure();\n cleanup();\n reject(err);\n };\n\n wsRef.onclose = () => {\n // Socket closed before we resolved/rejected — counts as\n // failure. clearTimeout here is safe (cleanup handles both).\n clearTimeout(deadline);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to publish to relay');\n recordFailure();\n } finally {\n // Ensure WebSocket is closed\n if (ws && ws.readyState !== WebSocket.CLOSED) {\n ws.close();\n }\n }\n });\n\n await Promise.allSettled(publishPromises);\n\n log.info({ successCount: success.length, failedCount: failed.length }, 'Publishing complete');\n\n return { success, failed };\n}\n\n/\n Query relays for attestations by attestation ID\n /\nexport async function queryByAttestationId(\n attestationId: string,\n relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n const events: NostrEvent[] = [];\n\n log.info({ attestationId, relayCount: relays.length }, 'Querying relays for attestation');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n let ws: WebSocket \| null = null;\n\n try {\n ws = new WebSocket(relayUrl);\n const wsRef = ws; // Capture for closures\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n wsRef.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n const cleanup = () => {\n clearTimeout(timeout);\n wsRef.close();\n };\n\n wsRef.onopen = () => {\n // Send REQ message for kind 30078 with d-tag = attestation_id\n const subscriptionId = `ochk_${Date.now()}`;\n wsRef.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n {\n kinds: [30078],\n '#d': [attestationId],\n limit: 1,\n },\n ])\n );\n };\n\n wsRef.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n events.push(data[2]);\n } else if (data[0] === 'EOSE') {\n cleanup();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n wsRef.onerror = (err) => {\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n cleanup();\n reject(err);\n };\n\n wsRef.onclose = () => {\n clearTimeout(timeout);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n } finally {\n // Ensure WebSocket is closed\n if (ws && ws.readyState !== WebSocket.CLOSED) {\n ws.close();\n }\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n log.info({ eventCount: events.length }, 'Query complete');\n\n return events;\n}\n\n/\n Query relays for attestations by Bitcoin address\n /\nexport async function queryByAddress(\n address: string,\n relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n const events: NostrEvent[] = [];\n\n log.info({ address, relayCount: relays.length }, 'Querying relays for address');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n try {\n const ws = new WebSocket(relayUrl);\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n ws.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n ws.onopen = () => {\n const subscriptionId = `ochk_addr_${Date.now()}`;\n ws.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n {\n kinds: [30078],\n // `#t`, NOT `#address`: NIP-12 relays index\n // single-letter tags only, so `#address`\n // matched nothing on any relay and this\n // function returned empty for every real\n // attestation. attest.ochk.io's verifier has\n // queried `#t` since the same fix landed\n // there; this is the back-port.\n '#t': [address],\n limit: 50,\n },\n ])\n );\n };\n\n ws.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n events.push(data[2]);\n } else if (data[0] === 'EOSE') {\n clearTimeout(timeout);\n ws.close();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n ws.onerror = (err) => {\n clearTimeout(timeout);\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n reject(err);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n log.info({ eventCount: events.length }, 'Query complete');\n\n return events;\n}\n\n/\n Query relays for attestations by identity (any protocol)\n /\nexport async function queryByIdentity(\n protocol: string,\n identifier: string,\n relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n const events: NostrEvent[] = [];\n const identityTag = `${protocol}:${identifier}`;\n const identityTags =\n protocol === 'nostr'\n ? nostrIdentifierForms(identifier).map((f) => `nostr:${f}`)\n : [identityTag];\n\n log.info({ protocol, identifier, relayCount: relays.length }, 'Querying relays for identity');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n try {\n const ws = new WebSocket(relayUrl);\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n ws.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n ws.onopen = () => {\n const subscriptionId = `ochk_identity_${Date.now()}`;\n ws.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n {\n kinds: [30078],\n '#i': identityTags,\n limit: 10,\n },\n ])\n );\n };\n\n ws.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n events.push(data[2]);\n } else if (data[0] === 'EOSE') {\n clearTimeout(timeout);\n ws.close();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n ws.onerror = (err) => {\n clearTimeout(timeout);\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n reject(err);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n log.info({ eventCount: events.length }, 'Query complete');\n\n return events;\n}\n\n/\n Verify attestation envelope integrity\n * Checks that the attestation ID matches the message hash\n /\nexport async function verifyAttestationEnvelope(envelope: AttestationEnvelope): Promise<boolean> {\n try {\n // Re-compute attestation ID from message\n const encoder = new TextEncoder();\n const data = encoder.encode(envelope.message);\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const computedId = hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');\n\n return computedId === envelope.attestation_id;\n } catch (err) {\n log.error({ error: err }, 'Failed to verify attestation envelope');\n return false;\n }\n}\n\n/\n Parse attestation envelope from Nostr event content\n */\nexport function parseAttestationFromEvent(event: NostrEvent): AttestationEnvelope \| null {\n try {\n const envelope = JSON.parse(event.content) as AttestationEnvelope;\n return envelope;\n } catch (err) {\n log.error({ eventId: event.id, error: err }, 'Failed to parse attestation from event');\n return null;\n }\n}\n"]}
1	+ {"version":3,"sources":["../src/nostr-pubkey.ts","../src/utils/logger.ts","../src/nostr.ts"],"names":[],"mappings":";;;AAEA,IAAM,SAAA,GAAY,gBAAA;AAElB,SAAS,MAAM,KAAA,EAA2B;AACtC,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,GAAA,IAAO,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AAC5D,EAAA,OAAO,GAAA;AACX;AAGO,SAAS,iBAAiB,KAAA,EAA8B;AAC3D,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY;AACzC,EAAA,IAAI,SAAA,CAAU,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,OAAA;AACpC,EAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,CAAW,OAAO,GAAG,OAAO,IAAA;AACzC,EAAA,IAAI;AACA,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,OAAA,EAAkC,IAAI,CAAA;AACpE,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA;AACtC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AAC5C,IAAA,OAAO,KAAA,CAAM,WAAW,EAAA,GAAK,KAAA,CAAM,WAAW,IAAA,CAAK,KAAK,CAAC,CAAA,GAAI,IAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAMO,SAAS,qBAAqB,UAAA,EAA8B;AAC/D,EAAA,MAAM,GAAA,GAAM,iBAAiB,UAAU,CAAA;AACvC,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,CAAC,UAAU,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,GAAA,CAAI,MAAM,KAAK,CAAA,CAAG,GAAA,CAAI,CAAC,CAAA,KAAM,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAC,CAAA;AAC3E,EAAA,OAAO,CAAC,MAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,QAAQ,KAAK,CAAA,EAAG,IAAI,CAAA,EAAG,GAAG,CAAA;AACnE;ACcO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACxFA,IAAM,GAAA,GAAM,aAAa,WAAW,CAAA;AAK7B,IAAM,sBAAA,GAAyB;AAqC/B,IAAM,cAAA,GAA2B;AAAA,EACpC,sBAAA;AAAA,EACA,eAAA;AAAA,EACA,0BAAA;AAAA,EACA;AACJ;AAyBO,IAAM,kBAAA,GAAqB;AAClC,IAAM,gBAAA,GAAmB,GAAA;AAGzB,SAAS,UAAU,UAAA,EAA4B;AAC3C,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,kBAAkB,UAAA,GAAa,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA;AAC1E;AAYO,SAAS,sBAAA,CACZ,UACA,MAAA,EAC8B;AAQ9B,EAAA,MAAM,IAAA,GAAmB;AAAA,IACrB,CAAC,GAAA,EAAK,QAAA,CAAS,cAAc,CAAA;AAAA;AAAA,IAC7B,CAAC,GAAA,EAAK,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IACtB,CAAC,KAAK,WAAW,CAAA;AAAA;AAAA,IACjB,CAAC,SAAA,EAAW,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IAC5B,CAAC,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA;AAAA,IAC1B,CAAC,WAAA,EAAa,QAAA,CAAS,SAAS;AAAA;AAAA,GACpC;AAGA,EAAA,KAAA,MAAW,QAAA,IAAY,SAAS,UAAA,EAAY;AACxC,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,EAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA,CAAA,EAAI,QAAA,CAAS,UAAU,CAAA,CAAE,CAAC,CAAA;AAAA,EAClE;AAGA,EAAA,IAAI,SAAS,UAAA,EAAY;AACrB,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,SAAA,EAAW,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EAC9C;AAGA,EAAA,IAAI,QAAA,CAAS,aAAa,MAAA,EAAQ;AAC9B,IAAA,KAAA,MAAW,KAAA,IAAS,SAAS,WAAA,EAAa;AACtC,MAAA,IAAA,CAAK,IAAA,CAAK,CAAC,OAAA,EAAS,KAAK,CAAC,CAAA;AAAA,IAC9B;AAAA,EACJ;AAGA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU,MAAM,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,sBAAA;AAAA,IACN,IAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,MAAM,QAAA,CAAS,SAAS,IAAI,GAAI,CAAA;AAAA,IAC5D;AAAA,GACJ;AACJ;AAQO,SAAS,yBAAyB,KAAA,EAAsC;AAC3E,EAAA,MAAM,aAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAM,IAAA,EAAM;AAC1B,IAAA,IAAI,IAAI,CAAC,CAAA,KAAM,GAAA,IAAO,GAAA,CAAI,CAAC,CAAA,EAAG;AAC1B,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,CAAC,CAAA,CAAE,QAAQ,GAAG,CAAA;AACrC,MAAA,IAAI,eAAe,EAAA,EAAI;AACnB,QAAA,UAAA,CAAW,IAAA,CAAK;AAAA,UACZ,UAAU,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,GAAG,UAAU,CAAA;AAAA,UACxC,YAAY,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,aAAa,CAAC;AAAA,SAC9C,CAAA;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAEA,EAAA,OAAO,UAAA;AACX;AAQO,SAAS,0BAA0B,KAAA,EAAuC;AAC7E,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA;AACpD,EAAA,OAAO,OAAO,CAAC,CAAA;AACnB;AAQO,SAAS,oBAAoB,KAAA,EAAuC;AACvE,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,SAAS,CAAA;AAChE,EAAA,OAAO,aAAa,CAAC,CAAA;AACzB;AAMA,eAAsB,eAAA,CAClB,KAAA,EACA,MAAA,GAAmB,cAAA,EAC6B;AAChD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,EAAO,EAAG,4BAA4B,CAAA;AAIvF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACnD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAU3B,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,MAAA,CAAO,KAAK,QAAQ,CAAA;AAAA,IACxB,CAAA;AAEA,IAAA,IAAI;AAEA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAIzC,QAAA,MAAM,QAAA,GAAW,WAAW,MAAM;AAC9B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,uBAAuB,CAAC,CAAA;AAAA,QAC7C,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,QAAQ,CAAA;AACrB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAGjB,UAAA,KAAA,CAAM,KAAK,IAAA,CAAK,SAAA,CAAU,CAAC,OAAA,EAAS,KAAK,CAAC,CAAC,CAAA;AAAA,QAC/C,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAEhC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,IAAQ,KAAK,CAAC,CAAA,KAAM,MAAM,EAAA,EAAI;AAC1C,cAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,EAAM;AAClB,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,OAAA,EAAQ;AAAA,cACZ,CAAA,MAAO;AACH,gBAAA,GAAA,CAAI,IAAA;AAAA,kBACA,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,IAAA,CAAK,CAAC,CAAA,EAAE;AAAA,kBACnC;AAAA,iBACJ;AACA,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,IAAK,sBAAsB,CAAC,CAAA;AAAA,cACvD;AAAA,YACJ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,KAAA;AAAA,cACA,EAAE,KAAA,EAAO,QAAA,EAAU,KAAA,EAAO,GAAA,EAAI;AAAA,cAC9B;AAAA,aACJ;AACA,YAAA,aAAA,EAAc;AACd,YAAA,OAAA,EAAQ;AACR,YAAA,MAAA,CAAO,GAAG,CAAA;AAAA,UACd;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,iBAAiB,CAAA;AAC5D,UAAA,aAAA,EAAc;AACd,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAGlB,UAAA,YAAA,CAAa,QAAQ,CAAA;AAAA,QACzB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,4BAA4B,CAAA;AACvE,MAAA,aAAA,EAAc;AAAA,IAClB,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,eAAe,CAAA;AAExC,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,YAAA,EAAc,OAAA,CAAQ,QAAQ,WAAA,EAAa,MAAA,CAAO,MAAA,EAAO,EAAG,qBAAqB,CAAA;AAE5F,EAAA,OAAO,EAAE,SAAS,MAAA,EAAO;AAC7B;AAKA,eAAsB,oBAAA,CAClB,aAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,YAAY,MAAA,CAAO,MAAA,IAAU,iCAAiC,CAAA;AAIxF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAE3B,IAAA,IAAI;AACA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAEjB,UAAA,MAAM,cAAA,GAAiB,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AACzC,UAAA,KAAA,CAAM,IAAA;AAAA,YACF,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,CAAC,aAAa,CAAA;AAAA,gBACpB,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,OAAA,EAAQ;AACR,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AAAA,QACxB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,cAAA,CAClB,OAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,OAAA,EAAS,YAAY,MAAA,CAAO,MAAA,IAAU,6BAA6B,CAAA;AAI9E,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,UAAA,EAAa,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAC9C,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAQb,IAAA,EAAM,CAAC,OAAO,CAAA;AAAA,gBACd,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,eAAA,CAClB,QAAA,EACA,UAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,MAAM,WAAA,GAAc,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA;AAC7C,EAAA,MAAM,YAAA,GACF,QAAA,KAAa,OAAA,GACP,oBAAA,CAAqB,UAAU,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,MAAA,EAAS,CAAC,CAAA,CAAE,CAAA,GACxD,CAAC,WAAW,CAAA;AAEtB,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,QAAA,EAAU,UAAA,EAAY,YAAY,MAAA,CAAO,MAAA,IAAU,8BAA8B,CAAA;AAI5F,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,cAAA,EAAiB,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAClD,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,YAAA;AAAA,gBACN,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAYA,eAAsB,WAAA,CAClB,MAAA,GAAmB,cAAA,EACnB,KAAA,GAAgB,GAAA,EACc;AAC9B,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,OAAO,MAAA,EAAQ,KAAA,IAAS,yCAAyC,CAAA;AAGxF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,YAAA,EAAe,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAChD,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA,EAAE,OAAO,CAAC,sBAAsB,GAAG,IAAA,EAAM,CAAC,WAAW,CAAA,EAAG,KAAA;AAAM,aACjE;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAM,EAAA,GAAK,KAAK,CAAC,CAAA;AACjB,cAAA,MAAM,MAAA,GAAS,EAAA,CAAG,IAAA,EAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,KAAM,QAAQ,CAAA,GAAI,CAAC,CAAA;AAC1D,cAAA,MAAM,IAAA,GAAO,EAAA,CAAG,IAAA,EAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,KAAM,GAAG,CAAA,GAAI,CAAC,CAAA;AACnD,cAAA,IAAA,CAAK,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,QAAA,KAAa,IAAA,EAAM;AACtD,gBAAA,MAAA,CAAO,KAAK,EAAE,CAAA;AAAA,cAClB;AAAA,YACJ,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,YAAmC,EAAC;AAC1C,EAAA,KAAA,MAAW,MAAM,MAAA,EAAQ;AACrB,IAAA,MAAM,QAAA,GAAW,0BAA0B,EAAE,CAAA;AAC7C,IAAA,IAAI,CAAC,QAAA,IAAY,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,cAAc,CAAA,EAAG;AACpD,IAAA,IAAI,CAAE,MAAM,yBAAA,CAA0B,QAAQ,CAAA,EAAI;AAClD,IAAA,IAAA,CAAK,GAAA,CAAI,SAAS,cAAc,CAAA;AAChC,IAAA,SAAA,CAAU,KAAK,QAAQ,CAAA;AAAA,EAC3B;AAEA,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,UAAA,EAAY,MAAA,CAAO,QAAQ,MAAA,EAAQ,SAAA,CAAU,MAAA,EAAO,EAAG,uBAAuB,CAAA;AAEzF,EAAA,OAAO,SAAA;AACX;AAMA,eAAsB,0BAA0B,QAAA,EAAiD;AAC7F,EAAA,IAAI;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAC5C,IAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAC7D,IAAA,MAAM,YAAY,KAAA,CAAM,IAAA,CAAK,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AACvD,IAAA,MAAM,UAAA,GAAa,SAAA,CAAU,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAEhF,IAAA,OAAO,eAAe,QAAA,CAAS,cAAA;AAAA,EACnC,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,KAAA,EAAO,GAAA,IAAO,uCAAuC,CAAA;AACjE,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;AAKO,SAAS,0BAA0B,KAAA,EAA+C;AACrF,EAAA,IAAI;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA;AACzC,IAAA,OAAO,QAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,KAAA,EAAO,GAAA,IAAO,wCAAwC,CAAA;AACrF,IAAA,OAAO,IAAA;AAAA,EACX;AACJ","file":"nostr.mjs","sourcesContent":["import { bech32 } from '@scure/base';\n\nconst HEX_64_RE = /^[0-9a-f]{64}$/;\n\nfunction toHex(bytes: Uint8Array): string {\n let out = '';\n for (const b of bytes) out += b.toString(16).padStart(2, '0');\n return out;\n}\n\n/** A Nostr public key as lowercase hex, from either `npub1…` or hex. Null if it is neither. /\nexport function nostrPubkeyToHex(value: string): string \| null {\n const trimmed = value.trim().toLowerCase();\n if (HEX_64_RE.test(trimmed)) return trimmed;\n if (!trimmed.startsWith('npub1')) return null;\n try {\n const decoded = bech32.decode(trimmed as `${string}1${string}`, 1023);\n if (decoded.prefix !== 'npub') return null;\n const bytes = bech32.fromWords(decoded.words);\n return bytes.length === 32 ? toHex(Uint8Array.from(bytes)) : null;\n } catch {\n return null;\n }\n}\n\n/\n Every spelling of one Nostr key an attestation may carry in its `i` tag.\n * SPEC §2 prescribes `npub1…`; the reference site also accepts hex.\n /\nexport function nostrIdentifierForms(identifier: string): string[] {\n const hex = nostrPubkeyToHex(identifier);\n if (!hex) return [identifier];\n const bytes = Uint8Array.from(hex.match(/../g)!.map((b) => parseInt(b, 16)));\n return [bech32.encode('npub', bech32.toWords(bytes), 1023), hex];\n}\n","/\n Simple logger for SDK\n * Can be disabled in production builds\n /\n\n/\n Log level type\n /\nexport type LogLevel = 'debug' \| 'info' \| 'warn' \| 'error' \| 'none';\n\n/\n Logger context type\n /\nexport type LogContext = Record<string, unknown>;\n\n/\n Logger interface\n /\nexport interface Logger {\n debug: (contextOrMessage: string \| LogContext, message?: string) => void;\n info: (contextOrMessage: string \| LogContext, message?: string) => void;\n warn: (contextOrMessage: string \| LogContext, message?: string) => void;\n error: (contextOrMessage: string \| LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/\n Set the global log level\n * @param level - Log level to set\n /\nexport function setLogLevel(level: LogLevel): void {\n logLevel = level;\n}\n\n/\n Get the current log level\n * @returns Current log level\n /\nexport function getLogLevel(): LogLevel {\n return logLevel;\n}\n\n/\n Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n /\nexport function createLogger(namespace: string): Logger {\n const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n if (logLevel === 'none') return false;\n\n const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n const messageLevelIndex = levels.indexOf(level);\n\n return messageLevelIndex >= currentLevelIndex;\n };\n\n const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n return {\n debug: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('debug')) {\n if (typeof contextOrMessage === 'string') {\n console.debug(formatMessage(contextOrMessage));\n } else {\n console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n }\n }\n },\n info: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('info')) {\n if (typeof contextOrMessage === 'string') {\n console.info(formatMessage(contextOrMessage));\n } else {\n console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n }\n }\n },\n warn: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('warn')) {\n if (typeof contextOrMessage === 'string') {\n console.warn(formatMessage(contextOrMessage));\n } else {\n console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n }\n }\n },\n error: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('error')) {\n if (typeof contextOrMessage === 'string') {\n console.error(formatMessage(contextOrMessage));\n } else {\n console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n }\n }\n },\n };\n}\n\n/\n Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n /\nexport function logVerificationError(\n protocol: string,\n identifier: string,\n error: Error,\n context?: LogContext\n): void {\n const logger = createLogger('identity-verification');\n logger.error(\n {\n protocol,\n identifier,\n error: error.message,\n stack: error.stack,\n ...context,\n },\n 'Verification failed'\n );\n}\n","/\n Nostr Integration for OrangeCheck Protocol\n \n Implements NIP-78 (Application-specific data) for attestation publishing\n /\n\nimport type { AttestationEnvelope, IdentityBinding, NostrEvent } from './types';\n\nimport { nostrIdentifierForms } from './nostr-pubkey';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/nostr');\n\n/\n NIP-78 event kind for OrangeCheck attestations\n /\nexport const ATTESTATION_EVENT_KIND = 30078;\n\n/\n Default Nostr relays for OrangeCheck attestation publishing and lookup.\n \n Well-known relays with good uptime, plus the first-party family relay.\n * `relay.ochk.io` was missing here while attest.ochk.io's verifier has always\n * read from it, so the SDK and the reference implementation were looking in\n * different places — the SDK could miss a family attestation that the hosted\n * API found. It runs a kind allowlist (30078-30087, 30110-30114) and canonical OC d-tag\n * prefixes, and is always co-published alongside the public relays, never the\n * only copy. See https://github.com/orangecheck/oc-relay-infra.\n \n Order matters only for readability; queries fan out to all of them and\n * merge. Pass your own `relays` to any query to override this entirely — the\n * protocol does not require trusting any particular relay.\n \n A NOTE ON `relay.damus.io`, deliberately kept. It is reachable from a browser\n * (measured ~391ms, real events returned) and NOT reachable from at least one\n * serverless runtime — Vercel's, where it fails to connect on every attempt,\n * consistently, over hours. Its NIP-11 declares no `auth_required`,\n * `payment_required` or `restricted_writes`, so this reads as datacenter-IP\n * filtering in front of it rather than policy, and it can change in either\n * direction without notice.\n \n It stays for three reasons: it is one of the most widely read relays, so an\n * attestation published there is findable by the most people; the browser is\n * the dominant path for this SDK (wallet signing happens there), and it works\n * there; and since FANOUT_DEADLINE_MS below is a SHARED budget, a relay that\n * fails to connect resolves immediately and costs no latency. Removing a relay\n * that works for most callers, to tidy a status field on one runtime, is the\n * wrong trade.\n \n If you run this SDK server-side and want certainty about coverage, pass\n * `relays` explicitly. Silent partial coverage — believing you reached four\n * relays when you reached three — is the real hazard here, not latency.\n /\nexport const DEFAULT_RELAYS: string[] = [\n 'wss://relay.damus.io',\n 'wss://nos.lol',\n 'wss://relay.snort.social',\n 'wss://relay.ochk.io',\n];\n\n/\n Wall-clock budget for a whole relay fan-out, shared by every relay in it.\n \n Queries below use Promise.allSettled, so a fan-out used to take as long as\n * its SLOWEST relay — and with a dead relay in DEFAULT_RELAYS that meant the\n * per-relay 10s timeout, every single call. Measured on 1.4.0:\n \n check({ addr }) with the old defaults 10.4s\n * check({ addr }) with the dead relay out 1.0s\n \n That is not merely slow, it broke a dependent outright: @orangecheck/gate\n * races check() against a 5s lookupTimeoutMs, so a 10.4s lookup lost the race\n * every time and no address-based gate decision could ever succeed.\n \n A shared deadline fixes the class: whichever relay is dead or slow next, a\n * fan-out costs at most this. Healthy relays answer well inside it (~1s for a\n * cold WebSocket plus a query). QUERY_TIMEOUT_MS remains the per-relay ceiling.\n \n The value is deliberately BELOW @orangecheck/gate's 5s default\n * lookupTimeoutMs, so a gate decision can still resolve in the worst case\n * rather than always losing its own race. Raising this above 5000 silently\n * breaks that dependent — change both together, or don't.\n /\nexport const FANOUT_DEADLINE_MS = 4000;\nconst QUERY_TIMEOUT_MS = 10000;\n\n/* Remaining budget for a relay, given the fan-out's shared deadline. /\nfunction budgetFor(deadlineAt: number): number {\n return Math.max(0, Math.min(QUERY_TIMEOUT_MS, deadlineAt - Date.now()));\n}\n\n/\n Create a NIP-78 event for an OrangeCheck attestation\n \n Kind: 30078 (Parameterized Replaceable Event)\n * d-tag: attestation_id (makes it replaceable by attestation ID)\n \n @param envelope - Attestation envelope\n * @param pubkey - Nostr public key (hex format)\n * @returns Unsigned Nostr event\n /\nexport function createAttestationEvent(\n envelope: AttestationEnvelope,\n pubkey: string\n): Omit<NostrEvent, 'id' \| 'sig'> {\n // NIP-12 relays index SINGLE-LETTER tags only. A multi-letter tag like\n // `address` is stored verbatim and stays readable in the event, but it is\n // never indexed, so no `#address` filter can ever retrieve it. Without the\n // `t` tags below an attestation published by this SDK is invisible to\n // every by-address query on every relay — including attest.ochk.io's own\n // verifier, which queries `#t`. Keep both: `t` is what makes it findable,\n // `address` is human-readable diagnostics and is not load-bearing.\n const tags: string[][] = [\n ['d', envelope.attestation_id], // Parameterized replaceable event identifier (indexed)\n ['t', envelope.address], // Indexed btc-address tag — query with `#t`\n ['t', 'oc-attest'], // Family marker — `#t=[\"oc-attest\"]` for cross-cut discovery\n ['address', envelope.address], // Diagnostic / legacy — relay won't index this\n ['scheme', envelope.scheme], // Signature scheme (bip322 or legacy)\n ['issued_at', envelope.issued_at], // ISO timestamp\n ];\n\n // Add identity tags\n for (const identity of envelope.identities) {\n tags.push(['i', `${identity.protocol}:${identity.identifier}`]);\n }\n\n // Add expiration if present\n if (envelope.expires_at) {\n tags.push(['expires', envelope.expires_at]);\n }\n\n // Add relay hints if present\n if (envelope.relay_hints?.length) {\n for (const relay of envelope.relay_hints) {\n tags.push(['relay', relay]);\n }\n }\n\n // Content is the full attestation envelope as JSON\n const content = JSON.stringify(envelope, null, 2);\n\n return {\n kind: ATTESTATION_EVENT_KIND,\n tags,\n content,\n created_at: Math.floor(Date.parse(envelope.issued_at) / 1000),\n pubkey,\n };\n}\n\n/\n Parse identity bindings from Nostr event tags\n \n @param event - Nostr event\n * @returns Array of identity bindings\n /\nexport function parseIdentitiesFromEvent(event: NostrEvent): IdentityBinding[] {\n const identities: IdentityBinding[] = [];\n\n for (const tag of event.tags) {\n if (tag[0] === 'i' && tag[1]) {\n const colonIndex = tag[1].indexOf(':');\n if (colonIndex !== -1) {\n identities.push({\n protocol: tag[1].substring(0, colonIndex),\n identifier: tag[1].substring(colonIndex + 1),\n });\n }\n }\n }\n\n return identities;\n}\n\n/\n Extract attestation ID from Nostr event d-tag\n \n @param event - Nostr event\n * @returns Attestation ID or undefined if not found\n /\nexport function getAttestationIdFromEvent(event: NostrEvent): string \| undefined {\n const dTag = event.tags.find((tag) => tag[0] === 'd');\n return dTag?.[1];\n}\n\n/\n Extract Bitcoin address from Nostr event tags\n \n @param event - Nostr event\n * @returns Bitcoin address or undefined if not found\n /\nexport function getAddressFromEvent(event: NostrEvent): string \| undefined {\n const addressTag = event.tags.find((tag) => tag[0] === 'address');\n return addressTag?.[1];\n}\n\n/\n Publish a Nostr event to multiple relays\n * Returns array of relay URLs that successfully accepted the event\n /\nexport async function publishToRelays(\n event: NostrEvent,\n relays: string[] = DEFAULT_RELAYS\n): Promise<{ success: string[]; failed: string[] }> {\n const success: string[] = [];\n const failed: string[] = [];\n\n log.info({ eventId: event.id, relayCount: relays.length }, 'Publishing event to relays');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const publishPromises = relays.map(async (relayUrl) => {\n let ws: WebSocket \| null = null;\n\n // One outcome per relay, first one wins. Without this a relay that\n // ACKs `OK true` and then emits an error or close event during\n // teardown lands in BOTH arrays, and the caller reports \"published\n // to 3 · rejected 3\" over the same three relays. The `failed.includes`\n // check this replaces only ever de-duplicated `failed` against\n // itself, so it could not catch a success/failure split.\n // attest.ochk.io's copy of this file has carried the guard for a\n // while; this is the back-port.\n let settled = false;\n const recordSuccess = (): void => {\n if (settled) return;\n settled = true;\n success.push(relayUrl);\n };\n const recordFailure = (): void => {\n if (settled) return;\n settled = true;\n failed.push(relayUrl);\n };\n\n try {\n // Connect to relay\n ws = new WebSocket(relayUrl);\n const wsRef = ws; // Capture for closures\n\n await new Promise<void>((resolve, reject) => {\n // One outer deadline covers connect + OK round-trip. The old\n // code cleared this on `onopen`, which meant a relay that\n // opened but never sent OK would hang the promise forever.\n const deadline = setTimeout(() => {\n wsRef.close();\n reject(new Error('Relay publish timeout'));\n }, budgetFor(deadlineAt));\n\n const cleanup = () => {\n clearTimeout(deadline);\n wsRef.close();\n };\n\n wsRef.onopen = () => {\n // Do NOT clear the deadline — we still need it in case\n // the relay never responds with OK.\n wsRef.send(JSON.stringify(['EVENT', event]));\n };\n\n wsRef.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n // Check for OK response\n if (data[0] === 'OK' && data[1] === event.id) {\n if (data[2] === true) {\n recordSuccess();\n cleanup();\n resolve();\n } else {\n log.warn(\n { relay: relayUrl, reason: data[3] },\n 'Relay rejected event'\n );\n recordFailure();\n cleanup();\n reject(new Error(data[3] \|\| 'Relay rejected event'));\n }\n }\n } catch (err) {\n log.error(\n { relay: relayUrl, error: err },\n 'Failed to parse relay response'\n );\n recordFailure();\n cleanup();\n reject(err);\n }\n };\n\n wsRef.onerror = (err) => {\n log.error({ relay: relayUrl, error: err }, 'WebSocket error');\n recordFailure();\n cleanup();\n reject(err);\n };\n\n wsRef.onclose = () => {\n // Socket closed before we resolved/rejected — counts as\n // failure. clearTimeout here is safe (cleanup handles both).\n clearTimeout(deadline);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to publish to relay');\n recordFailure();\n } finally {\n // Ensure WebSocket is closed\n if (ws && ws.readyState !== WebSocket.CLOSED) {\n ws.close();\n }\n }\n });\n\n await Promise.allSettled(publishPromises);\n\n log.info({ successCount: success.length, failedCount: failed.length }, 'Publishing complete');\n\n return { success, failed };\n}\n\n/\n Query relays for attestations by attestation ID\n /\nexport async function queryByAttestationId(\n attestationId: string,\n relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n const events: NostrEvent[] = [];\n\n log.info({ attestationId, relayCount: relays.length }, 'Querying relays for attestation');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n let ws: WebSocket \| null = null;\n\n try {\n ws = new WebSocket(relayUrl);\n const wsRef = ws; // Capture for closures\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n wsRef.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n const cleanup = () => {\n clearTimeout(timeout);\n wsRef.close();\n };\n\n wsRef.onopen = () => {\n // Send REQ message for kind 30078 with d-tag = attestation_id\n const subscriptionId = `ochk_${Date.now()}`;\n wsRef.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n {\n kinds: [30078],\n '#d': [attestationId],\n limit: 1,\n },\n ])\n );\n };\n\n wsRef.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n events.push(data[2]);\n } else if (data[0] === 'EOSE') {\n cleanup();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n wsRef.onerror = (err) => {\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n cleanup();\n reject(err);\n };\n\n wsRef.onclose = () => {\n clearTimeout(timeout);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n } finally {\n // Ensure WebSocket is closed\n if (ws && ws.readyState !== WebSocket.CLOSED) {\n ws.close();\n }\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n log.info({ eventCount: events.length }, 'Query complete');\n\n return events;\n}\n\n/\n Query relays for attestations by Bitcoin address\n /\nexport async function queryByAddress(\n address: string,\n relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n const events: NostrEvent[] = [];\n\n log.info({ address, relayCount: relays.length }, 'Querying relays for address');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n try {\n const ws = new WebSocket(relayUrl);\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n ws.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n ws.onopen = () => {\n const subscriptionId = `ochk_addr_${Date.now()}`;\n ws.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n {\n kinds: [30078],\n // `#t`, NOT `#address`: NIP-12 relays index\n // single-letter tags only, so `#address`\n // matched nothing on any relay and this\n // function returned empty for every real\n // attestation. attest.ochk.io's verifier has\n // queried `#t` since the same fix landed\n // there; this is the back-port.\n '#t': [address],\n limit: 50,\n },\n ])\n );\n };\n\n ws.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n events.push(data[2]);\n } else if (data[0] === 'EOSE') {\n clearTimeout(timeout);\n ws.close();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n ws.onerror = (err) => {\n clearTimeout(timeout);\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n reject(err);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n log.info({ eventCount: events.length }, 'Query complete');\n\n return events;\n}\n\n/\n Query relays for attestations by identity (any protocol)\n /\nexport async function queryByIdentity(\n protocol: string,\n identifier: string,\n relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n const events: NostrEvent[] = [];\n const identityTag = `${protocol}:${identifier}`;\n const identityTags =\n protocol === 'nostr'\n ? nostrIdentifierForms(identifier).map((f) => `nostr:${f}`)\n : [identityTag];\n\n log.info({ protocol, identifier, relayCount: relays.length }, 'Querying relays for identity');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n try {\n const ws = new WebSocket(relayUrl);\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n ws.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n ws.onopen = () => {\n const subscriptionId = `ochk_identity_${Date.now()}`;\n ws.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n {\n kinds: [30078],\n '#i': identityTags,\n limit: 10,\n },\n ])\n );\n };\n\n ws.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n events.push(data[2]);\n } else if (data[0] === 'EOSE') {\n clearTimeout(timeout);\n ws.close();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n ws.onerror = (err) => {\n clearTimeout(timeout);\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n reject(err);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n log.info({ eventCount: events.length }, 'Query complete');\n\n return events;\n}\n\n/\n Query relays for the most recent attestations across every publisher.\n \n For aggregate views (network stats, a recent-activity feed), not per-subject\n * lookups. Filters on the `#t=[\"oc-attest\"]` family marker because kind 30078\n * is shared by every NIP-78 app: an unfiltered window fills with other apps'\n * data. Returns envelopes whose attestation_id matches their message,\n * deduplicated by attestation_id. Signatures are not checked — call verify()\n * on anything you act on.\n /\nexport async function queryRecent(\n relays: string[] = DEFAULT_RELAYS,\n limit: number = 200\n): Promise<AttestationEnvelope[]> {\n const events: NostrEvent[] = [];\n\n log.info({ relayCount: relays.length, limit }, 'Querying relays for recent attestations');\n\n // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n const queryPromises = relays.map(async (relayUrl) => {\n try {\n const ws = new WebSocket(relayUrl);\n\n await new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n ws.close();\n reject(new Error('Query timeout'));\n }, budgetFor(deadlineAt));\n\n ws.onopen = () => {\n const subscriptionId = `ochk_recent_${Date.now()}`;\n ws.send(\n JSON.stringify([\n 'REQ',\n subscriptionId,\n { kinds: [ATTESTATION_EVENT_KIND], '#t': ['oc-attest'], limit },\n ])\n );\n };\n\n ws.onmessage = (msg) => {\n try {\n const data = JSON.parse(msg.data);\n if (data[0] === 'EVENT') {\n const ev = data[2] as NostrEvent;\n const scheme = ev.tags?.find((t) => t[0] === 'scheme')?.[1];\n const dTag = ev.tags?.find((t) => t[0] === 'd')?.[1];\n if ((scheme === 'bip322' \|\| scheme === 'legacy') && dTag) {\n events.push(ev);\n }\n } else if (data[0] === 'EOSE') {\n clearTimeout(timeout);\n ws.close();\n resolve();\n }\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n }\n };\n\n ws.onerror = (err) => {\n clearTimeout(timeout);\n log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n reject(err);\n };\n });\n } catch (err) {\n log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n }\n });\n\n await Promise.allSettled(queryPromises);\n\n const seen = new Set<string>();\n const envelopes: AttestationEnvelope[] = [];\n for (const ev of events) {\n const envelope = parseAttestationFromEvent(ev);\n if (!envelope \|\| seen.has(envelope.attestation_id)) continue;\n if (!(await verifyAttestationEnvelope(envelope))) continue;\n seen.add(envelope.attestation_id);\n envelopes.push(envelope);\n }\n\n log.info({ eventCount: events.length, unique: envelopes.length }, 'Recent query complete');\n\n return envelopes;\n}\n\n/\n Verify attestation envelope integrity\n * Checks that the attestation ID matches the message hash\n /\nexport async function verifyAttestationEnvelope(envelope: AttestationEnvelope): Promise<boolean> {\n try {\n // Re-compute attestation ID from message\n const encoder = new TextEncoder();\n const data = encoder.encode(envelope.message);\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const computedId = hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');\n\n return computedId === envelope.attestation_id;\n } catch (err) {\n log.error({ error: err }, 'Failed to verify attestation envelope');\n return false;\n }\n}\n\n/\n Parse attestation envelope from Nostr event content\n */\nexport function parseAttestationFromEvent(event: NostrEvent): AttestationEnvelope \| null {\n try {\n const envelope = JSON.parse(event.content) as AttestationEnvelope;\n return envelope;\n } catch (err) {\n log.error({ eventId: event.id, error: err }, 'Failed to parse attestation from event');\n return null;\n }\n}\n"]}

package/dist/verify.js CHANGED Viewed

@@ -176,10 +176,6 @@ async function verifySignature({
   scheme
 }) {
   try {
-    if (sig === "demo_signature") {
-      log.warn("Demo signature detected in verifySignature - should be handled by demo mode");
-      return "sig_invalid";
-    }
     const detectedScheme = scheme || detectSignatureScheme(addr, sig);
     log.debug(
       { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },
@@ -405,26 +401,6 @@ async function verify2(input, opts = {}) {
       codes.push("bad_request");
       return { ok: false, codes, network, attestation_id };
     }
-    if (opts.demoMode) {
-      const sats_bonded = 1e6;
-      const days_unspent = 90;
-      const metrics = {
-        sats_bonded,
-        days_unspent,
-        score: computeScore(sats_bonded, days_unspent, { algorithm: "v0" })
-        // ≈ 55.26
-      };
-      codes.push("sig_ok_bip322");
-      codes.push("bond_confirmed");
-      return {
-        ok: true,
-        codes,
-        network,
-        attestation_id,
-        identities: parsed.core.identities,
-        metrics
-      };
-    }
     if ((network === "testnet" || network === "signet") && !opts.testMode) {
       codes.push("network_testmode");
       return { ok: false, codes, network, attestation_id };

package/dist/verify.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/canonical.ts","../src/scoring.ts","../src/utils/logger.ts","../src/verify.ts"],"names":["Buffer","Verifier","bitcoinMessage","days_unspent","verify"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAS,WAAW,KAAA,EAA2B;AAC3C,EAAA,OAAO,MAAM,IAAA,CAAK,KAAK,CAAA,CAClB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAC1C,KAAK,EAAE,CAAA;AAChB;AAmCA,IAAM,oBAAA,GAAuB,oBAAA;AAC7B,IAAM,wBAAA,GAA2B,SAAA;AAEjC,SAAS,kBAAA,CAAmB,EAAE,QAAA,EAAU,UAAA,EAAW,EAA0B;AACzE,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,2BAAA,EAA8B,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,uCAAA;AAAA,KAC1D;AAAA,EACJ;AACA,EAAA,IAAI,CAAC,UAAA,IAAc,wBAAA,CAAyB,IAAA,CAAK,UAAU,CAAA,EAAG;AAC1D,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,6BAAA,EAAgC,IAAA,CAAK,SAAA,CAAU,UAAU,CAAC,CAAA,2DAAA;AAAA,KAC9D;AAAA,EACJ;AACJ;AA2BO,SAAS,gBAAgB,aAAA,EAA0C;AACtE,EAAA,IAAI,CAAC,aAAA,IAAiB,aAAA,CAAc,IAAA,OAAW,EAAA,EAAI;AAC/C,IAAA,OAAO,EAAC;AAAA,EACZ;AAIA,EAAA,IAAI,yBAAyB,IAAA,CAAK,aAAA,CAAc,QAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,EAAG;AAChE,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,WAAW,aAAA,CAAc,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,OAAA,KAAY;AACvD,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,IAAI,eAAe,EAAA,EAAI;AACnB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,OAAO,CAAA,CAAE,CAAA;AAAA,IACjE;AACA,IAAA,OAAO;AAAA,MACH,UAAU,OAAA,CAAQ,SAAA,CAAU,CAAA,EAAG,UAAU,EAAE,IAAA,EAAK;AAAA,MAChD,YAAY,OAAA,CAAQ,SAAA,CAAU,UAAA,GAAa,CAAC,EAAE,IAAA;AAAK,KACvD;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,KAAK,QAAA,EAAU;AACtB,IAAA,IAAI,CAAC,CAAA,CAAE,QAAA,IAAY,CAAC,EAAE,UAAA,EAAY;AAC9B,MAAA,MAAM,IAAI,MAAM,CAAA,0BAAA,EAA6B,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE,CAAA;AAAA,IAC7E;AACA,IAAA,kBAAA,CAAmB,CAAC,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACX;AA0EA,eAAsB,sBAAsB,OAAA,EAAkC;AAE1E,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA;AAGnC,EAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAG7D,EAAA,OAAO,UAAA,CAAW,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AAChD;;;AC5MA,SAAS,OAAA,CAAQ,MAAc,IAAA,EAAsB;AACjD,EAAA,IAAI,IAAA,IAAQ,CAAA,IAAK,IAAA,IAAQ,CAAA,EAAG,OAAO,CAAA;AACnC,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,CAAA,GAAI,IAAI,CAAA,IAAK,CAAA,GAAI,IAAA,GAAO,EAAA,CAAA,GAAM,GAAG,CAAA,GAAI,GAAA;AACpE;AAEA,SAAS,SAAA,CAAU,MAAc,IAAA,EAAoB;AACjD,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAc,IAAA,IAAQ,GAAA,EAAK,OAAO,UAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAa,IAAA,IAAQ,GAAA,EAAK,OAAO,MAAA;AAC7C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAW,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AAC1C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAU,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AACzC,EAAA,OAAO,MAAA;AACX;AAEO,SAAS,YAAA,CAAa,IAAA,EAAc,IAAA,EAAc,MAAA,EAAoC;AACzF,EAAA,QAAQ,OAAO,SAAA;AAAW,IACtB,KAAK,IAAA;AACD,MAAA,OAAO,OAAA,CAAQ,MAAM,IAAI,CAAA;AAAA,IAC7B,KAAK,MAAA;AACD,MAAA,OAAO,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,IAC/B,KAAK,MAAA;AACD,MAAA,OAAO,IAAA;AAAA;AAEnB;AAEO,SAAS,gBAAA,CAAiB,MAAc,IAAA,EAAc;AACzD,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAA,EAAM,IAAI,GAAG,IAAA,EAAM,SAAA,CAAU,IAAA,EAAM,IAAI,CAAA,EAAE;AAClE;ACGO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACvEA,IAAM,GAAA,GAAM,aAAa,YAAY,CAAA;AAqCrC,SAAS,aAAa,CAAA,EAAoB;AACtC,EAAA,OAAO,iBAAiB,IAAA,CAAK,CAAC,CAAA,IAAK,CAAA,CAAE,SAAS,CAAA,KAAM,CAAA;AACxD;AAOA,SAAS,cAAc,GAAA,EAAqB;AACxC,EAAA,IAAI,YAAA,CAAa,GAAG,CAAA,EAAG;AACnB,IAAA,OAAOA,cAAO,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,GAAA;AACX;AASA,SAAS,qBAAA,CAAsB,MAAc,GAAA,EAAqB;AAE9D,EAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,EAAA,IAAI,QAAA,EAAU;AACV,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,EAAA,MAAM,kBAAkB,SAAA,CAAU,MAAA,KAAW,EAAA,IAAM,QAAA,CAAS,KAAK,SAAS,CAAA;AAE1E,EAAA,IAAI,eAAA,EAAiB;AACjB,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,OAAO,QAAA;AACX;AAEA,eAAe,eAAA,CAAgB;AAAA,EAC3B,IAAA;AAAA,EACA,GAAA;AAAA,EACA,GAAA;AAAA,EACA;AACJ,CAAA,EAA8C;AAC1C,EAAA,IAAI;AAGA,IAAA,IAAI,QAAQ,gBAAA,EAAkB;AAC1B,MAAA,GAAA,CAAI,KAAK,6EAA6E,CAAA;AACtF,MAAA,OAAO,aAAA;AAAA,IACX;AAGA,IAAA,MAAM,cAAA,GAAiB,MAAA,IAAU,qBAAA,CAAsB,IAAA,EAAM,GAAG,CAAA;AAEhE,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,MAAM,SAAA,EAAW,GAAA,CAAI,QAAQ,SAAA,EAAW,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,cAAA,EAAe;AAAA,MAC7E;AAAA,KACJ;AAEA,IAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,MAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,MAAA,GAAA,CAAI,KAAA;AAAA,QACA,EAAE,SAAA,EAAW,SAAA,CAAU,UAAU,CAAA,EAAG,EAAE,IAAI,KAAA,EAAM;AAAA,QAChD;AAAA,OACJ;AAGA,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,OAAA,EAAS,GAAA;AAAA,UACT,QAAA,EAAU,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA;AAAA,UAC1B,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,UAC/B,WAAA,EAAa,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,GAAS,CAAC;AAAA,SAC3D;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,MAAM,EAAA,GAAKC,iBAAA,CAAS,eAAA,CAAgB,IAAA,EAAM,KAAK,SAAS,CAAA;AACxD,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,IAAM,6BAA6B,CAAA;AAEpD,MAAA,IAAI,CAAC,EAAA,EAAI;AAEL,QAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,QAAA,IAAI,QAAA,IAAY,SAAA,CAAU,MAAA,KAAW,EAAA,EAAI;AACrC,UAAA,GAAA,CAAI,IAAA;AAAA,YACA,EAAE,IAAA,EAAM,MAAA,EAAQ,mBAAA,EAAqB,SAAA,EAAW,UAAU,MAAA,EAAO;AAAA,YACjE;AAAA,WACJ;AAAA,QACJ,CAAA,MAAO;AACH,UAAA,GAAA,CAAI,KAAA;AAAA,YACA;AAAA,cACI,IAAA;AAAA,cACA,WAAW,SAAA,CAAU,MAAA;AAAA,cACrB,WAAW,GAAA,CAAI,MAAA;AAAA,cACf,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG;AAAA,aACpC;AAAA,YACA;AAAA,WACJ;AAAA,QACJ;AAAA,MACJ;AAEA,MAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,IAClC;AAEA,IAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,MAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AAGnC,MAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACzE,QAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAK,EAAG,iDAAiD,CAAA;AACpE,QAAA,OAAO,wBAAA;AAAA,MACX;AAEA,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,IAAA;AAAA,UACA,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE,CAAA,GAAI,KAAA;AAAA,UACxC,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG,CAAA,GAAI,KAAA;AAAA,UACpC,WAAW,GAAA,CAAI;AAAA,SACnB;AAAA,QACA;AAAA,OACJ;AACA,MAAA,MAAM,EAAA,GAAoBC,yBAAA,CAAA,MAAA,CAAO,GAAA,EAAK,IAAA,EAAM,SAAS,CAAA;AACrD,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,EAAI,iBAAiB,SAAA,CAAU,MAAA,IAAU,4BAA4B,CAAA;AACtF,MAAA,IAAI,CAAC,EAAA,EAAI;AACL,QAAA,GAAA,CAAI,KAAA;AAAA,UACA;AAAA,YACI,IAAA;AAAA,YACA,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,YAC/B,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE;AAAA,WACxC;AAAA,UACA;AAAA,SACJ;AAAA,MACJ;AACA,MAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,IAClC;AAEA,IAAA,OAAO,gBAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,MAAM,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,MAChE;AAAA,KACJ;AACA,IAAA,OAAO,aAAA;AAAA,EACX;AACJ;AAGO,SAAS,sBAAsB,GAAA,EAAa;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAKjD,EAAA,MAAM,MAAA,GAAS,CAAC,MAAA,KAAuC;AACnD,IAAA,MAAM,SAAS,MAAA,GAAS,GAAA;AACxB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,WAAA,EAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA;AAChE,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AAAA,EACnC,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,SAAS,CAAA,IAAK,EAAA;AACrC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,YAAY,CAAA,IAAK,EAAA;AAG9C,EAAA,IAAI,aAAgC,EAAC;AACrC,EAAA,IAAI;AACA,IAAA,UAAA,GAAa,gBAAgB,aAAa,CAAA;AAAA,EAC9C,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,KAAA,EAAO,GAAA,IAAO,kCAAkC,CAAA;AAAA,EAC9E;AAGA,EAAA,MAAM,QAAA,uBAAe,GAAA,CAAI;AAAA,IACrB,aAAA;AAAA,IACA,YAAA;AAAA,IACA,SAAA;AAAA,IACA,SAAA;AAAA,IACA,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACH,CAAA;AACD,EAAA,MAAM,aAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACtB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC5B,IAAA,IAAI,QAAQ,EAAA,EAAI;AAChB,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,CAAE,IAAA,GAAO,WAAA,EAAY;AAClD,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AACrC,IAAA,IAAI,CAAC,SAAS,GAAA,CAAI,GAAG,KAAK,GAAA,EAAK,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA;AAAA,EACrD;AAEA,EAAA,MAAM,OAAA,GAAW,UAAA,CAAW,SAAS,CAAA,IAAK,SAAA;AAG1C,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,CAAA;AACjC,EAAA,MAAM,IAAA,GAAO,OAAA,GAAU,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA,GAAI,MAAA;AAE/C,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,EAAE,OAAA,EAAS,UAAA,EAAW;AAAA,IAC5B,OAAA;AAAA,IACA,UAAA;AAAA,IACA,IAAA,EAAM,SAAS,MAAA,IAAa,CAAC,MAAM,IAAI,CAAA,IAAK,IAAA,GAAO,CAAA,GAAI,IAAA,GAAO;AAAA,GAClE;AACJ;AAkCA,eAAe,eAAA,CACX,OAAA,EACA,OAAA,EACA,IAAA,EAKsB;AAEtB,EAAA,MAAM,SAAA,GACF,YAAY,QAAA,GACN;AAAA,IACI,MAAM,iBAAA,IAAqB,kCAAA;AAAA,IAC3B;AAAA,GACJ,GACA,YAAY,SAAA,GACV;AAAA,IACI,MAAM,kBAAA,IAAsB,mCAAA;AAAA,IAC5B;AAAA,GACJ,GACA;AAAA,IACI,MAAM,kBAAA,IAAsB,2BAAA;AAAA,IAC5B;AAAA,GACJ;AAEZ,EAAA,IAAI,SAAA,GAA0B,IAAA;AAK9B,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,OAAO,CAAA,KAAA,CAAA;AACtC,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,OAAA,IAAW,gBAAgB,CAAA;AAE5C,MAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAC1B,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,QACtC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,OACnC,CAAA;AAED,MAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAAA,MACzC;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAG7B,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACtB,QAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,MACtD;AAGA,MAAA,KAAA,MAAW,QAAQ,IAAA,EAAM;AACrB,QAAA,IACI,OAAO,KAAK,KAAA,KAAU,QAAA,IACtB,OAAO,IAAA,CAAK,MAAA,KAAW,YACvB,OAAO,IAAA,CAAK,OAAO,SAAA,KAAc,SAAA,IACjC,OAAO,IAAA,CAAK,IAAA,KAAS,YACrB,OAAO,IAAA,CAAK,SAAS,QAAA,EACvB;AACE,UAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,QAC5C;AAAA,MACJ;AAEA,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAQ,OAAA,IAAW,4BAA4B,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACX,SAAS,GAAA,EAAK;AACV,MAAA,SAAA,GAAY,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAC9D,MAAA,GAAA,CAAI,IAAA;AAAA,QACA,EAAE,IAAA,EAAM,KAAA,EAAO,SAAA,CAAU,SAAS,OAAA,EAAQ;AAAA,QAC1C;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAGA,EAAA,GAAA,CAAI,KAAA,CAAM,EAAE,SAAA,EAAW,KAAA,EAAO,WAAW,OAAA,EAAS,OAAA,IAAW,8BAA8B,CAAA;AAC3F,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,SAAA,EAAW,OAAA,IAAW,SAAS,CAAA,CAAE,CAAA;AAC5E;AAWA,SAAS,cAAA,CACL,OACA,UAAA,EAQF;AAEE,EAAA,MAAM,iBAAiB,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,SAAS,CAAA;AAC7D,EAAA,IAAI,cAAA,CAAe,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,WAAA,EAAa,CAAA,EAAG,YAAA,EAAc,CAAA,EAAG,mBAAmB,CAAA,EAAE;AAAA,EACnE;AAGA,EAAA,MAAM,iBAAA,GAAoB,eAAe,MAAA,CAAO,CAAC,KAAK,CAAA,KAAM,GAAA,GAAM,CAAA,CAAE,KAAA,EAAO,CAAC,CAAA;AAG5E,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,UAAA,GAAa,CAAA,EAAG;AAE5C,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,cAAc,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAC9C,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,OAAA,GAAU,OAAA;AAC1C,MAAA,IAAI,CAAA,CAAE,SAAS,CAAA,CAAE,IAAA,SAAa,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAA;AACzD,MAAA,OAAO,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA;AAAA,IACtB,CAAC,CAAA;AAGD,IAAA,IAAI,GAAA,GAAM,CAAA;AACV,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,MAAA,GAAA,IAAO,IAAA,CAAK,KAAA;AACZ,MAAA,YAAA,GAAe,KAAK,GAAA,CAAI,YAAA,EAAc,IAAA,CAAK,MAAA,CAAO,cAAc,CAAC,CAAA;AACjE,MAAA,IAAI,OAAO,UAAA,EAAY;AAAA,IAC3B;AAGA,IAAA,MAAMC,gBAAe,IAAA,CAAK,GAAA;AAAA,MACtB,CAAA;AAAA,MACA,IAAA,CAAK,OAAO,IAAA,CAAK,GAAA,KAAQ,GAAA,GAAO,YAAA,KAAiB,EAAA,GAAK,EAAA,GAAK,EAAA,CAAG;AAAA,KAClE;AAEA,IAAA,OAAO;AAAA,MACH,WAAA,EAAa,UAAA;AAAA;AAAA,MACb,YAAA,EAAAA,aAAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAGA,EAAA,MAAM,WAAA,GAAc,iBAAA;AAGpB,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA;AAAA,IACpB,GAAG,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI;AAAA,GACzE;AACA,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAA,CAAO,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,GAAO,UAAA,KAAe,EAAA,GAAK,EAAA,GAAK,GAAG,CAAC,CAAA;AAE9F,EAAA,OAAO,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB;AAC1D;AA4BA,eAAsBC,OAAAA,CAAO,KAAA,EAAoB,IAAA,GAAsB,EAAC,EAA2B;AAC/F,EAAA,MAAM,QAAsB,EAAC;AAC7B,EAAA,IAAI,OAAA,GAAmB,SAAA;AAEvB,EAAA,IAAI;AAEA,IAAA,IAAI,CAAC,MAAM,GAAA,IAAO,CAAC,MAAM,IAAA,IAAQ,CAAC,MAAM,GAAA,EAAK;AACzC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,IACvC;AAGA,IAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAC9C,IAAA,OAAA,GAAU,OAAO,OAAA,IAAW,SAAA;AAG5B,IAAA,MAAM,cAAA,GAAiB,MAAM,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAG5D,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM,IAAA,EAAM;AACpC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAGA,IAAA,IAAI,KAAK,QAAA,EAAU;AAEf,MAAA,MAAM,WAAA,GAAc,GAAA;AACpB,MAAA,MAAM,YAAA,GAAe,EAAA;AACrB,MAAA,MAAM,OAAA,GAAmB;AAAA,QACrB,WAAA;AAAA,QACA,YAAA;AAAA,QACA,OAAQ,YAAA,CAAa,WAAA,EAAa,cAAc,EAAE,SAAA,EAAW,MAAM;AAAA;AAAA,OACvE;AACA,MAAA,KAAA,CAAM,KAAK,eAAe,CAAA;AAC1B,MAAA,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAC3B,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK,UAAA;AAAA,QACxB;AAAA,OACJ;AAAA,IACJ;AAGA,IAAA,IAAA,CAAK,YAAY,SAAA,IAAa,OAAA,KAAY,QAAA,KAAa,CAAC,KAAK,QAAA,EAAU;AACnE,MAAA,KAAA,CAAM,KAAK,kBAAkB,CAAA;AAC7B,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAMA,IAAA,IAAI,KAAK,WAAA,EAAa;AAClB,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,KAAK,CAAA;AACnC,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,KAAQ,IAAA,CAAK,WAAA,EAAa;AAClC,QAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,IAAI,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC9B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,UAAA,CAAW,SAAS,CAAC,CAAA;AACnD,MAAA,IAAI,CAAC,OAAO,KAAA,CAAM,GAAG,KAAK,GAAA,GAAM,IAAA,CAAK,KAAI,EAAG;AACxC,QAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AACpB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB;AAAA,MAClC,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,GAAI,KAAA,CAAM,MAAA,IAAU,EAAE,MAAA,EAAQ,MAAM,MAAA;AAAO,KAC9C,CAAA;AACD,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAElB,IAAA,MAAM,KAAA,GAAQ,OAAA,KAAY,eAAA,IAAmB,OAAA,KAAY,eAAA;AACzD,IAAA,IAAI,CAAC,KAAA,EAAO;AACR,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,KAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,OAC5B;AAAA,IACJ;AAGA,IAAA,IAAI;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,CAAgB,KAAA,CAAM,MAAM,OAAA,EAAS;AAAA,QACrD,oBAAoB,IAAA,CAAK,kBAAA;AAAA,QACzB,mBAAmB,IAAA,CAAK;AAAA,OAC3B,CAAA;AAGD,MAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB,GAAI,cAAA;AAAA,QACrD,KAAA;AAAA,QACA,MAAA,CAAO;AAAA,OACX;AAGA,MAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,CAAA,IAAa,MAAA,CAAO,OAAO,CAAA,EAAG;AAC9C,QAAA,IAAI,iBAAA,GAAoB,OAAO,IAAA,EAAM;AACjC,UAAA,KAAA,CAAM,KAAK,mBAAmB,CAAA;AAC9B,UAAA,GAAA,CAAI,IAAA;AAAA,YACA;AAAA,cACI,MAAM,MAAA,CAAO,IAAA;AAAA,cACb,iBAAA;AAAA,cACA,SAAS,KAAA,CAAM;AAAA,aACnB;AAAA,YACA;AAAA,WACJ;AACA,UAAA,OAAO;AAAA,YACH,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA;AAAA,YACA,OAAA;AAAA,YACA,cAAA;AAAA,YACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,WAC5B;AAAA,QACJ;AAAA,MACJ;AAGA,MAAA,IAAI,eAAe,CAAA,EAAG;AAClB,QAAA,KAAA,CAAM,KAAK,WAAW,CAAA;AAEtB,QAAA,IAAI,KAAA,CAAM,KAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,CAAO,SAAS,CAAA,EAAG;AACxC,UAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,QAC7B;AACA,QAAA,OAAO;AAAA,UACH,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA;AAAA,UACA,OAAA;AAAA,UACA,cAAA;AAAA,UACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,SAC5B;AAAA,MACJ,CAAA,MAAO;AACH,QAAA,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAAA,MAC/B;AAGA,MAAA,MAAM,OAAA,GAAmB;AAAA,QACrB,WAAA;AAAA,QACA,YAAA;AAAA,QACA,OAAQ,YAAA,CAAa,WAAA,EAAa,cAAc,EAAE,SAAA,EAAW,MAAM;AAAA,OACvE;AAEA,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK,UAAA;AAAA,QACxB;AAAA,OACJ;AAAA,IACJ,SAAS,SAAA,EAAW;AAChB,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,SAAA,IAAa,mBAAmB,CAAA;AACjD,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAAA,EACJ,SAAS,CAAA,EAAY;AACjB,IAAA,MAAM,MAAM,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,KAAK,cAAc,CAAA;AACvE,IAAA,IAAI,QAAQ,cAAA,EAAgB;AACxB,MAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,IAC7B,CAAA,MAAO;AACH,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AAAA,IAC5B;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,EACvC;AACJ","file":"verify.js","sourcesContent":["/*\n Canonical message builder per SPEC.md §2\n \n - LF line endings, exactly one trailing LF\n * - 7 fixed core lines in strict order and wording\n * - Optional extensions appended as key: value with lexicographically sorted lowercase keys\n /\n\nimport type { AttestationEnvelope, IdentityBinding, Scheme } from './types';\n\n/\n Input for building a canonical message\n /\nexport interface CanonicalInput {\n /* Bitcoin address /\n address: string;\n /* Optional identity bindings /\n identities?: IdentityBinding[];\n}\n\n/\n Extension key-value pairs for canonical message\n /\nexport type Extensions = Record<string, string \| undefined>;\n\n/\n Convert bytes to lowercase hex string\n * @param bytes - Byte array to convert\n * @returns Lowercase hex string\n /\nfunction toLowerHex(bytes: Uint8Array): string {\n return Array.from(bytes)\n .map((b) => b.toString(16).padStart(2, '0'))\n .join('');\n}\n\n/\n Generate a random 16-byte nonce as lowercase hex\n * Uses Web Crypto API when available, falls back to Math.random()\n * @returns 32-character lowercase hex string\n /\nexport function randomNonce16BHexLower(): string {\n const arr = new Uint8Array(16);\n\n try {\n if (typeof crypto !== 'undefined' && typeof crypto.getRandomValues === 'function') {\n crypto.getRandomValues(arr);\n return toLowerHex(arr);\n }\n } catch {\n // Fall through to non-cryptographic fallback\n }\n\n // No silent Math.random fallback: a nonce is a load-bearing security\n // primitive. A deployment without `crypto.getRandomValues` MUST fix its\n // environment rather than sign with weak randomness.\n throw new Error('crypto.getRandomValues unavailable — refusing to mint a weak nonce');\n}\n\n/\n Reject characters that would break the line-oriented canonical grammar\n * or the comma-separated identities list. If any of these slipped through,\n * an attacker could smuggle a forged `address:` or extension line into the\n * signed payload: `identities: alice\\naddress: bc1qEVIL…` would parse as a\n * second address line. Catch it at the boundary, not at verification time.\n \n Also rejects a colon in the identifier so a bad actor can't turn\n * `github:alice:extra` into a different protocol binding on parse.\n /\nconst IDENTITY_PROTOCOL_RE = /^[a-z][a-z0-9_-]$/;\nconst IDENTITY_FORBIDDEN_CHARS = /[\\r\\n,]/;\n\nfunction assertSafeIdentity({ protocol, identifier }: IdentityBinding): void {\n if (!IDENTITY_PROTOCOL_RE.test(protocol)) {\n throw new Error(\n `invalid identity protocol: ${JSON.stringify(protocol)} — must match /^[a-z][a-z0-9_-]$/`\n );\n }\n if (!identifier \|\| IDENTITY_FORBIDDEN_CHARS.test(identifier)) {\n throw new Error(\n `invalid identity identifier: ${JSON.stringify(identifier)} — must be non-empty and contain no newlines or commas`\n );\n }\n}\n\n/\n Format identities as comma-separated protocol:identifier pairs, sorted lexicographically\n * @param identities - Array of identity bindings\n * @returns Comma-separated string of protocol:identifier pairs\n /\nexport function formatIdentities(identities: IdentityBinding[] = []): string {\n if (identities.length === 0) {\n return '';\n }\n for (const id of identities) assertSafeIdentity(id);\n\n // Format as protocol:identifier and sort lexicographically\n const formatted = identities\n .map(({ protocol, identifier }) => `${protocol}:${identifier}`)\n .sort();\n\n return formatted.join(',');\n}\n\n/\n Parse identities from comma-separated protocol:identifier format\n * @param identitiesStr - Comma-separated identity string\n * @returns Array of identity bindings\n * @throws {Error} If identity format is invalid\n /\nexport function parseIdentities(identitiesStr: string): IdentityBinding[] {\n if (!identitiesStr \|\| identitiesStr.trim() === '') {\n return [];\n }\n // The identities field lives on one line of the canonical message. If it\n // contains a raw LF/CR, it's either corrupt or an attempt to smuggle a\n // fake core line into the parser. Refuse instead of trying to recover.\n if (IDENTITY_FORBIDDEN_CHARS.test(identitiesStr.replace(/,/g, ''))) {\n throw new Error('identities field contains forbidden characters (newline)');\n }\n\n const bindings = identitiesStr.split(',').map((binding) => {\n const colonIndex = binding.indexOf(':');\n if (colonIndex === -1) {\n throw new Error(`Invalid identity binding format: ${binding}`);\n }\n return {\n protocol: binding.substring(0, colonIndex).trim(),\n identifier: binding.substring(colonIndex + 1).trim(),\n };\n });\n\n for (const b of bindings) {\n if (!b.protocol \|\| !b.identifier) {\n throw new Error(`Invalid identity binding: ${b.protocol}:${b.identifier}`);\n }\n assertSafeIdentity(b);\n }\n return bindings;\n}\n\n/\n Optional deterministic overrides for message building. Only intended for\n * tests / conformance vectors; production callers should let the builder\n * mint a fresh nonce + timestamp per message.\n /\nexport interface BuildOptions {\n /* 32-char lowercase hex. Default: freshly-generated cryptographic nonce. /\n nonce?: string;\n /* RFC-3339 UTC. Default: `new Date().toISOString()`. /\n issuedAt?: string;\n}\n\n/\n Build a canonical message following OrangeCheck Protocol v0 specification\n * @param input - Canonical input with address and identities\n * @param extensions - Optional extension key-value pairs\n * @param options - Optional deterministic overrides (testing only)\n * @returns Canonical message string with LF line endings\n /\nexport function buildCanonicalMessage(\n { address, identities }: CanonicalInput,\n extensions: Extensions = {},\n options: BuildOptions = {}\n): string {\n const nonce = options.nonce ?? randomNonce16BHexLower();\n if (!/^[0-9a-f]{32}$/.test(nonce)) {\n throw new Error(`invalid nonce: must be 32 lowercase hex chars`);\n }\n const issuedAt = options.issuedAt ?? new Date().toISOString();\n\n // Format identities\n const identitiesStr = formatIdentities(identities);\n\n // Core (strict wording + order per SPEC.md §2)\n const core = [\n 'orangecheck',\n `identities: ${identitiesStr}`,\n `address: ${address}`,\n 'purpose: portable reputation attestation (non-custodial)',\n `nonce: ${nonce}`,\n `issued_at: ${issuedAt}`,\n 'ack: I attest control of this address and bind it to my identities.',\n ];\n\n // Normalize and sort extensions\n const normExt: Record<string, string> = {};\n for (const [k, v] of Object.entries(extensions)) {\n if (v == null \|\| v === '') {\n continue;\n }\n const key = k.toLowerCase();\n normExt[key] = String(v);\n }\n\n const extLines = Object.keys(normExt)\n .sort()\n .map((k) => `${k}: ${normExt[k]!}`);\n\n const all = [...core, ...extLines];\n\n // Join with LF and ensure exactly one trailing LF\n return all.join('\\n') + '\\n';\n}\n\n/\n Generate attestation ID from canonical message\n \n attestation_id = SHA-256(canonical_message)\n \n @param message - Canonical message string\n * @returns Lowercase hex SHA-256 hash\n /\nexport async function generateAttestationId(message: string): Promise<string> {\n // Convert message to UTF-8 bytes\n const encoder = new TextEncoder();\n const data = encoder.encode(message);\n\n // Compute SHA-256 hash\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n\n // Convert to lowercase hex\n return toLowerHex(new Uint8Array(hashBuffer));\n}\n\n/\n Create an attestation envelope for publishing\n \n This wraps the canonical message with metadata for Nostr publishing\n \n @param message - Canonical message\n * @param signature - BIP-322 or legacy signature\n * @param scheme - Signature scheme used\n * @param address - Bitcoin address\n * @param identities - Identity bindings\n * @param extensions - Optional extensions\n * @returns Attestation envelope ready for publishing\n /\nexport async function createAttestationEnvelope(\n message: string,\n signature: string,\n scheme: Scheme,\n address: string,\n identities: IdentityBinding[],\n extensions: Extensions = {}\n): Promise<AttestationEnvelope> {\n const attestation_id = await generateAttestationId(message);\n\n // Extract issued_at from message\n const issuedAtMatch = message.match(/issued_at: ([^\\n]+)/);\n const issued_at = issuedAtMatch?.[1] ?? new Date().toISOString();\n\n // Extract expires from extensions if present\n const expires_at = extensions.expires;\n\n // Extract relay hints from extensions if present\n const relay_hints = extensions.relay_hints?.split(',').map((r) => r.trim());\n\n // Extract publish targets from extensions if present\n const publish_targets = extensions.publish?.split(',').map((t) => t.trim());\n\n // Base64url encode the message\n const encoder = new TextEncoder();\n const messageBytes = encoder.encode(message);\n const base64 = btoa(String.fromCharCode(...messageBytes));\n const message_b64url = base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n\n // Construct verification URL\n const verification_url = `https://attest.ochk.io/attest/${attestation_id}`;\n\n return {\n attestation_id,\n scheme,\n address,\n identities,\n message,\n message_b64url,\n signature,\n issued_at,\n expires_at,\n verification_url,\n publish_targets,\n relay_hints,\n };\n}\n","/\n OrangeCheck Scoring\n \n The protocol registers exactly one scoring algorithm: `v0`. A `tier` helper\n * is also provided for UI convenience. RPs with specialized needs compute\n * their own score against raw metrics — the protocol does not ship an\n * algorithm zoo.\n \n See: docs/oc-protocol/registry/scoring.md\n /\n\nexport type ScoringAlgorithm = 'v0' \| 'tier' \| 'none';\nexport type Tier = 'platinum' \| 'gold' \| 'silver' \| 'bronze' \| 'none';\nexport type ScoreResult = number \| Tier \| null;\n\nexport interface ScoringConfig {\n algorithm: ScoringAlgorithm;\n}\n\nfunction scoreV0(sats: number, days: number): number {\n if (sats <= 0 \|\| days <= 0) return 0;\n return Math.round(Math.log(1 + sats) (1 + days / 30) * 100) / 100;\n}\n\nfunction scoreTier(sats: number, days: number): Tier {\n if (sats >= 10_000_000 && days >= 365) return 'platinum';\n if (sats >= 1_000_000 && days >= 180) return 'gold';\n if (sats >= 100_000 && days >= 90) return 'silver';\n if (sats >= 10_000 && days >= 30) return 'bronze';\n return 'none';\n}\n\nexport function computeScore(sats: number, days: number, config: ScoringConfig): ScoreResult {\n switch (config.algorithm) {\n case 'v0':\n return scoreV0(sats, days);\n case 'tier':\n return scoreTier(sats, days);\n case 'none':\n return null;\n }\n}\n\nexport function computeAllScores(sats: number, days: number) {\n return { v0: scoreV0(sats, days), tier: scoreTier(sats, days) };\n}\n\nexport function formatScore(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n if (score === null \|\| algorithm === 'none') return 'N/A';\n if (algorithm === 'v0') return (score as number).toFixed(1);\n const tier = score as Tier;\n const labels: Record<Tier, string> = {\n platinum: 'Platinum',\n gold: 'Gold',\n silver: 'Silver',\n bronze: 'Bronze',\n none: '—',\n };\n return labels[tier];\n}\n\nexport function getScoreColor(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n if (algorithm === 'tier') {\n const colors: Record<Tier, string> = {\n platinum: '#a855f7',\n gold: '#eab308',\n silver: '#94a3b8',\n bronze: '#f97316',\n none: '#64748b',\n };\n return colors[(score as Tier) ?? 'none'] ?? '#64748b';\n }\n const n = (score as number) ?? 0;\n if (n >= 100) return '#22c55e';\n if (n >= 50) return '#3b82f6';\n if (n >= 20) return '#eab308';\n return '#f97316';\n}\n\nexport function getTierNumber(tier: Tier): number {\n const map: Record<Tier, number> = {\n platinum: 4,\n gold: 3,\n silver: 2,\n bronze: 1,\n none: 0,\n };\n return map[tier] ?? 0;\n}\n","/*\n Simple logger for SDK\n * Can be disabled in production builds\n /\n\n/\n Log level type\n /\nexport type LogLevel = 'debug' \| 'info' \| 'warn' \| 'error' \| 'none';\n\n/\n Logger context type\n /\nexport type LogContext = Record<string, unknown>;\n\n/\n Logger interface\n /\nexport interface Logger {\n debug: (contextOrMessage: string \| LogContext, message?: string) => void;\n info: (contextOrMessage: string \| LogContext, message?: string) => void;\n warn: (contextOrMessage: string \| LogContext, message?: string) => void;\n error: (contextOrMessage: string \| LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/\n Set the global log level\n * @param level - Log level to set\n /\nexport function setLogLevel(level: LogLevel): void {\n logLevel = level;\n}\n\n/\n Get the current log level\n * @returns Current log level\n /\nexport function getLogLevel(): LogLevel {\n return logLevel;\n}\n\n/\n Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n /\nexport function createLogger(namespace: string): Logger {\n const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n if (logLevel === 'none') return false;\n\n const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n const messageLevelIndex = levels.indexOf(level);\n\n return messageLevelIndex >= currentLevelIndex;\n };\n\n const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n return {\n debug: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('debug')) {\n if (typeof contextOrMessage === 'string') {\n console.debug(formatMessage(contextOrMessage));\n } else {\n console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n }\n }\n },\n info: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('info')) {\n if (typeof contextOrMessage === 'string') {\n console.info(formatMessage(contextOrMessage));\n } else {\n console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n }\n }\n },\n warn: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('warn')) {\n if (typeof contextOrMessage === 'string') {\n console.warn(formatMessage(contextOrMessage));\n } else {\n console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n }\n }\n },\n error: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('error')) {\n if (typeof contextOrMessage === 'string') {\n console.error(formatMessage(contextOrMessage));\n } else {\n console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n }\n }\n },\n };\n}\n\n/\n Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n /\nexport function logVerificationError(\n protocol: string,\n identifier: string,\n error: Error,\n context?: LogContext\n): void {\n const logger = createLogger('identity-verification');\n logger.error(\n {\n protocol,\n identifier,\n error: error.message,\n stack: error.stack,\n ...context,\n },\n 'Verification failed'\n );\n}\n","/\n OrangeCheck Protocol Verification\n \n Core verification logic for BIP-322 and legacy signatures,\n * UTXO analysis, and reputation metrics computation\n /\n\nimport type { ScoringAlgorithm } from './scoring';\nimport type {\n IdentityBinding,\n Metrics,\n Network,\n Scheme,\n StatusCode,\n VerifyInput,\n VerifyOptions,\n VerifyOutcome,\n} from './types';\n\nimport { Buffer } from 'buffer';\n\nimport { Verifier } from 'bip322-js';\nimport as bitcoinMessage from 'bitcoinjs-message';\n\nimport { generateAttestationId, parseIdentities } from './canonical';\nimport { computeAllScores, computeScore } from './scoring';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/verify');\n\n/*\n Scoring function per OCP v0 specification (SPEC.md §6)\n * Formula: score = round( ln(1 + sats_bonded) * (1 + days_unspent / 30), 2 )\n \n This produces an unbounded score that combines both sats and time.\n * Typical ranges:\n * - 10k sats, 30 days ≈ 18\n * - 100k sats, 90 days ≈ 46\n * - 1M sats, 365 days ≈ 182\n * - 100M sats, 365 days ≈ 243\n /\n/\n Export scoring functions for use in other modules\n /\nexport { computeScore, computeAllScores, type ScoringAlgorithm };\n\n/\n Input for signature verification\n /\ninterface SignatureVerifyInput {\n /* Bitcoin address /\n addr: string;\n /* Message to verify /\n msg: string;\n /* Signature (hex or base64) /\n sig: string;\n /* Optional signature scheme (auto-detected if not provided) /\n scheme?: Scheme;\n}\n\n/\n Check if a string looks like hexadecimal\n * @param s - String to check\n * @returns True if string is valid hex with even length\n /\nfunction looksLikeHex(s: string): boolean {\n return /^[0-9a-fA-F]+$/.test(s) && s.length % 2 === 0;\n}\n\n/\n Convert signature to base64 if it's in hex format\n * @param sig - Signature (hex or base64)\n * @returns Signature in base64 format\n /\nfunction toBase64Maybe(sig: string): string {\n if (looksLikeHex(sig)) {\n return Buffer.from(sig, 'hex').toString('base64');\n }\n return sig;\n}\n\n/\n Auto-detect signature scheme based on address type and signature format\n \n @param addr - Bitcoin address\n * @param sig - Signature\n * @returns Detected scheme ('bip322' or 'legacy')\n /\nfunction detectSignatureScheme(addr: string, sig: string): Scheme {\n // SegWit and Taproot addresses MUST use BIP-322\n const isSegWit = addr.startsWith('bc1') \|\| addr.startsWith('tb1');\n if (isSegWit) {\n return 'bip322';\n }\n\n // For P2PKH addresses, check if signature looks like legacy format\n const sigBase64 = toBase64Maybe(sig);\n const looksLikeLegacy = sigBase64.length === 88 && /^[IHG]/.test(sigBase64);\n\n if (looksLikeLegacy) {\n return 'legacy';\n }\n\n // Default to BIP-322\n return 'bip322';\n}\n\nasync function verifySignature({\n addr,\n msg,\n sig,\n scheme,\n}: SignatureVerifyInput): Promise<StatusCode> {\n try {\n // Handle demo signatures - these should never reach here in demo mode,\n // but add defensive check in case demo mode flag isn't set properly\n if (sig === 'demo_signature') {\n log.warn('Demo signature detected in verifySignature - should be handled by demo mode');\n return 'sig_invalid';\n }\n\n // Auto-detect scheme if not explicitly provided\n const detectedScheme = scheme \|\| detectSignatureScheme(addr, sig);\n\n log.debug(\n { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },\n 'Verifying signature'\n );\n\n if (detectedScheme === 'bip322') {\n const sigBase64 = toBase64Maybe(sig);\n log.debug(\n { sigBase64: sigBase64.substring(0, 50) + '...' },\n 'Signature converted to base64'\n );\n\n // Log the full message for debugging\n log.debug(\n {\n msgFull: msg,\n msgLines: msg.split('\\n').length,\n msgFirstLine: msg.split('\\n')[0],\n msgLastLine: msg.split('\\n')[msg.split('\\n').length - 1],\n },\n 'Message being verified'\n );\n\n const ok = Verifier.verifySignature(addr, msg, sigBase64);\n log.info({ addr, ok }, 'BIP-322 verification result');\n\n if (!ok) {\n // Check if this looks like an Electrum signature (88 chars, base64)\n const isSegWit = addr.startsWith('bc1') \|\| addr.startsWith('tb1');\n if (isSegWit && sigBase64.length === 88) {\n log.warn(\n { addr, wallet: 'possibly Electrum', sigLength: sigBase64.length },\n 'BIP-322 verification failed - likely Electrum wallet (does not support BIP-322 for SegWit)'\n );\n } else {\n log.error(\n {\n addr,\n sigLength: sigBase64.length,\n msgLength: msg.length,\n msgPreview: msg.substring(0, 200),\n },\n 'BIP-322 verification failed - signature does not match message'\n );\n }\n }\n\n return ok ? 'sig_ok_bip322' : 'sig_invalid';\n }\n\n if (detectedScheme === 'legacy') {\n const sigBase64 = toBase64Maybe(sig);\n\n // Legacy policy: P2PKH only (address must start with '1' for mainnet or 'm'/'n' for testnet)\n if (!addr.startsWith('1') && !addr.startsWith('m') && !addr.startsWith('n')) {\n log.warn({ addr }, 'Legacy signature attempted on non-P2PKH address');\n return 'sig_unsupported_script';\n }\n\n log.debug(\n {\n addr,\n sigBase64: sigBase64.substring(0, 50) + '...',\n msgPreview: msg.substring(0, 100) + '...',\n msgLength: msg.length,\n },\n 'Verifying legacy signature'\n );\n const ok = bitcoinMessage.verify(msg, addr, sigBase64);\n log.info({ addr, ok, sigBase64Length: sigBase64.length }, 'Legacy verification result');\n if (!ok) {\n log.error(\n {\n addr,\n msgFirstLine: msg.split('\\n')[0],\n sigFormat: sigBase64.substring(0, 10),\n },\n 'Legacy signature verification failed - check message format and signature'\n );\n }\n return ok ? 'sig_ok_legacy' : 'sig_invalid';\n }\n\n return 'invalid_scheme';\n } catch (err) {\n log.error(\n { addr, error: err instanceof Error ? err.message : String(err) },\n 'Signature verification error'\n );\n return 'sig_invalid';\n }\n}\n\n// Canonical message parsing per SPEC + our builder (lowercase keys, extensions)\nexport function parseCanonicalMessage(msg: string) {\n const lines = msg.split('\\n').map((l) => l.trim());\n // `.split(':', 2)[1]` truncates values containing a colon (e.g. URLs in\n // extensions, or npubs in identities). Use the first colon as the\n // separator and keep everything after it — same approach as the\n // extensions loop below.\n const getVal = (prefix: string): string \| undefined => {\n const needle = prefix + ':';\n const hit = lines.find((l) => l.toLowerCase().startsWith(needle));\n if (!hit) return undefined;\n const idx = hit.indexOf(':');\n return hit.slice(idx + 1).trim();\n };\n\n const address = getVal('address') \|\| '';\n const identitiesStr = getVal('identities') \|\| '';\n\n // Parse identities\n let identities: IdentityBinding[] = [];\n try {\n identities = parseIdentities(identitiesStr);\n } catch (err) {\n log.warn({ identitiesStr, error: err }, 'Failed to parse identities field');\n }\n\n // Extensions: collect all key: value pairs excluding core known keys\n const coreKeys = new Set([\n 'orangecheck',\n 'identities',\n 'address',\n 'purpose',\n 'nonce',\n 'issued_at',\n 'ack',\n ]);\n const extensions: Record<string, string> = {};\n for (const line of lines) {\n const idx = line.indexOf(':');\n if (idx === -1) continue;\n const key = line.slice(0, idx).trim().toLowerCase();\n const val = line.slice(idx + 1).trim();\n if (!coreKeys.has(key) && val) extensions[key] = val;\n }\n\n const network = (extensions['network'] \|\| 'mainnet') as Network;\n\n // Parse bond extension if present (integer satoshis)\n const bondStr = extensions['bond'];\n const bond = bondStr ? parseInt(bondStr, 10) : undefined;\n\n return {\n core: { address, identities },\n network,\n extensions,\n bond: bond !== undefined && !isNaN(bond) && bond > 0 ? bond : undefined,\n };\n}\n\n/\n UTXO type from Esplora API\n /\ninterface EsploraUtxo {\n /* Transaction ID /\n txid: string;\n /* Output index /\n vout: number;\n /* Value in satoshis /\n value: number;\n /* Confirmation status /\n status: {\n /* Whether UTXO is confirmed /\n confirmed: boolean;\n /* Block height (if confirmed) /\n block_height?: number;\n /* Block timestamp (if confirmed) /\n block_time?: number;\n };\n}\n\n/\n Fetch UTXOs for an address from Esplora API\n \n Tries multiple endpoints in order with automatic fallback\n \n @param address - Bitcoin address\n * @param network - Bitcoin network\n * @param opts - Optional custom Esplora endpoints\n * @returns Array of UTXOs\n * @throws {Error} If all endpoints fail\n /\nasync function getAddressUtxos(\n address: string,\n network: Network,\n opts?: {\n esploraMainnetBase?: string;\n esploraSignetBase?: string;\n esploraTestnetBase?: string;\n }\n): Promise<EsploraUtxo[]> {\n // Define primary and fallback endpoints\n const endpoints =\n network === 'signet'\n ? [\n opts?.esploraSignetBase \|\| 'https://mempool.space/signet/api',\n 'https://blockstream.info/signet/api',\n ]\n : network === 'testnet'\n ? [\n opts?.esploraTestnetBase \|\| 'https://mempool.space/testnet/api',\n 'https://blockstream.info/testnet/api',\n ]\n : [\n opts?.esploraMainnetBase \|\| 'https://mempool.space/api',\n 'https://blockstream.info/api',\n ];\n\n let lastError: Error \| null = null;\n\n // Try each endpoint in order. Per-endpoint timeout kept tight (5s) so\n // a slow upstream doesn't stack against the next one; callers who want\n // a hard overall deadline should wrap this call with their own timeout.\n for (const base of endpoints) {\n try {\n const url = `${base}/address/${address}/utxo`;\n log.debug({ url, network }, 'Fetching UTXOs');\n\n const resp = await fetch(url, {\n method: 'GET',\n headers: { Accept: 'application/json' },\n signal: AbortSignal.timeout(5000),\n });\n\n if (!resp.ok) {\n throw new Error(`HTTP ${resp.status}`);\n }\n\n const data = await resp.json();\n\n // Validate response structure\n if (!Array.isArray(data)) {\n throw new Error('Invalid response: expected array');\n }\n\n // Validate each UTXO has required fields\n for (const utxo of data) {\n if (\n typeof utxo.value !== 'number' \|\|\n typeof utxo.status !== 'object' \|\|\n typeof utxo.status.confirmed !== 'boolean' \|\|\n typeof utxo.txid !== 'string' \|\|\n typeof utxo.vout !== 'number'\n ) {\n throw new Error('Invalid UTXO structure');\n }\n }\n\n log.info({ base, count: data.length, network }, 'UTXOs fetched successfully');\n return data as EsploraUtxo[];\n } catch (err) {\n lastError = err instanceof Error ? err : new Error(String(err));\n log.warn(\n { base, error: lastError.message, network },\n 'Esplora endpoint failed, trying next'\n );\n }\n }\n\n // All endpoints failed\n log.error({ endpoints, error: lastError?.message, network }, 'All Esplora endpoints failed');\n throw new Error(`esplora_all_failed: ${lastError?.message \|\| 'unknown'}`);\n}\n\n/\n Enhanced metrics computation per SPEC.md §5.4 and §6.1\n \n Supports bond extension with oldest-first greedy UTXO selection\n \n @param utxos - Array of UTXOs from Esplora\n * @param bondAmount - Optional bond amount (enables greedy selection)\n * @returns Computed metrics (sats_bonded, days_unspent, confirmed_balance)\n /\nfunction computeMetrics(\n utxos: EsploraUtxo[],\n bondAmount?: number\n): {\n /* Bonded satoshis (confirmed balance or bond amount) /\n sats_bonded: number;\n /* Days since oldest/youngest UTXO /\n days_unspent: number;\n /* Total confirmed balance /\n confirmed_balance: number;\n} {\n // Filter out unconfirmed UTXOs\n const confirmedUtxos = utxos.filter((u) => u.status.confirmed);\n if (confirmedUtxos.length === 0) {\n return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };\n }\n\n // Compute total confirmed balance\n const confirmed_balance = confirmedUtxos.reduce((sum, u) => sum + u.value, 0);\n\n // If bond extension is present, use oldest-first greedy algorithm\n if (bondAmount !== undefined && bondAmount > 0) {\n // Sort UTXOs by (block_height ASC, txid ASC, vout ASC) - oldest first\n const sorted = [...confirmedUtxos].sort((a, b) => {\n const heightA = a.status.block_height ?? Infinity;\n const heightB = b.status.block_height ?? Infinity;\n if (heightA !== heightB) return heightA - heightB;\n if (a.txid !== b.txid) return a.txid.localeCompare(b.txid);\n return a.vout - b.vout;\n });\n\n // Greedily select UTXOs until sum >= bond\n let sum = 0;\n let youngestTime = 0;\n for (const utxo of sorted) {\n sum += utxo.value;\n youngestTime = Math.max(youngestTime, utxo.status.block_time \|\| 0);\n if (sum >= bondAmount) break;\n }\n\n // Age is computed from the youngest UTXO in the bonded set\n const days_unspent = Math.max(\n 0,\n Math.floor((Date.now() / 1000 - youngestTime) / (24 60 * 60))\n );\n\n return {\n sats_bonded: bondAmount, // Use exactly bond amount (ignore surplus)\n days_unspent,\n confirmed_balance,\n };\n }\n\n // Default behavior (no bond extension): sum all confirmed UTXOs\n const sats_bonded = confirmed_balance;\n\n // Find the oldest confirmed UTXO for days_unspent\n const oldestTime = Math.min(\n ...confirmedUtxos.map((u) => u.status.block_time \|\| Date.now() / 1000)\n );\n const days_unspent = Math.max(0, Math.floor((Date.now() / 1000 - oldestTime) / (24 * 60 * 60)));\n\n return { sats_bonded, days_unspent, confirmed_balance };\n}\n\n/*\n Verify an OrangeCheck attestation\n \n This is the main verification function that:\n * 1. Validates the canonical message format\n * 2. Verifies the Bitcoin signature (BIP-322 or legacy)\n * 3. Fetches and analyzes UTXOs\n * 4. Computes reputation metrics\n \n @param input - Verification input (message, address, signature)\n * @param opts - Optional verification options (demo mode, test mode, etc.)\n * @returns Verification outcome with status codes and metrics\n \n @example\n * ```typescript\n * const result = await verify({\n * msg: canonicalMessage,\n * addr: 'bc1q...',\n * sig: 'AkcwRAIg...',\n * });\n \n if (result.ok) {\n * console.log('Score:', result.metrics?.score);\n * }\n * ```\n */\nexport async function verify(input: VerifyInput, opts: VerifyOptions = {}): Promise<VerifyOutcome> {\n const codes: StatusCode[] = [];\n let network: Network = 'mainnet';\n\n try {\n // Check if we have required fields\n if (!input.msg \|\| !input.addr \|\| !input.sig) {\n codes.push('bad_request');\n return { ok: false, codes, network };\n }\n\n // Parse canonical message with extensions\n const parsed = parseCanonicalMessage(input.msg);\n network = parsed.network \|\| 'mainnet';\n\n // Compute attestation ID\n const attestation_id = await generateAttestationId(input.msg);\n\n // Validate address consistency\n if (parsed.core.address !== input.addr) {\n codes.push('bad_request');\n return { ok: false, codes, network, attestation_id };\n }\n\n // Demo mode short-circuit with demo data matching the App panel\n if (opts.demoMode) {\n // Keep demo values in sync with createDemoBadgeData()\n const sats_bonded = 1_000_000; // 0.01 BTC\n const days_unspent = 90;\n const metrics: Metrics = {\n sats_bonded,\n days_unspent,\n score: (computeScore(sats_bonded, days_unspent, { algorithm: 'v0' }) as number), // ≈ 55.26\n };\n codes.push('sig_ok_bip322');\n codes.push('bond_confirmed');\n return {\n ok: true,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n metrics,\n };\n }\n\n // Testnet/Signet policy enforcement\n if ((network === 'testnet' \|\| network === 'signet') && !opts.testMode) {\n codes.push('network_testmode');\n return { ok: false, codes, network, attestation_id };\n }\n\n // Optional policy checks for extensions.\n // `aud` binds the attestation to an origin. If the caller passed\n // `expectedAud`, the check must be load-bearing — a mismatch is a\n // phishing signal, not an advisory. Fail hard (spec-aligned).\n if (opts.expectedAud) {\n const aud = parsed.extensions['aud'];\n if (!aud \|\| aud !== opts.expectedAud) {\n codes.push('aud_mismatch');\n return { ok: false, codes, network, attestation_id };\n }\n }\n\n // Check message expiration\n if (parsed.extensions['expires']) {\n const exp = Date.parse(parsed.extensions['expires']);\n if (!Number.isNaN(exp) && exp < Date.now()) {\n codes.push('expired');\n return { ok: false, codes, network, attestation_id };\n }\n }\n\n // Enhanced signature verification\n const sigCode = await verifySignature({\n addr: input.addr,\n msg: input.msg,\n sig: input.sig,\n ...(input.scheme && { scheme: input.scheme }),\n });\n codes.push(sigCode);\n\n const sigOk = sigCode === 'sig_ok_bip322' \|\| sigCode === 'sig_ok_legacy';\n if (!sigOk) {\n return {\n ok: false,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n };\n }\n\n // Enhanced UTXO analysis and metrics computation\n try {\n const utxos = await getAddressUtxos(input.addr, network, {\n esploraMainnetBase: opts.esploraMainnetBase,\n esploraSignetBase: opts.esploraSignetBase,\n });\n\n // Compute metrics with bond extension support (SPEC.md §5.4)\n const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(\n utxos,\n parsed.bond\n );\n\n // If bond extension is present, enforce minimum balance (SPEC.md §5.4.c)\n if (parsed.bond !== undefined && parsed.bond > 0) {\n if (confirmed_balance < parsed.bond) {\n codes.push('bond_insufficient');\n log.warn(\n {\n bond: parsed.bond,\n confirmed_balance,\n address: input.addr,\n },\n 'Bond extension: insufficient balance'\n );\n return {\n ok: false,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n };\n }\n }\n\n // Analyze bond status\n if (sats_bonded <= 0) {\n codes.push('bond_zero');\n // Check for pending UTXOs\n if (utxos.some((u) => !u.status.confirmed)) {\n codes.push('bond_pending');\n }\n return {\n ok: false,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n };\n } else {\n codes.push('bond_confirmed');\n }\n\n // Compute final metrics with enhanced scoring\n const metrics: Metrics = {\n sats_bonded,\n days_unspent,\n score: (computeScore(sats_bonded, days_unspent, { algorithm: 'v0' }) as number),\n };\n\n return {\n ok: true,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n metrics,\n };\n } catch (utxoError) {\n log.error({ err: utxoError }, 'UTXO fetch failed');\n codes.push('bad_request');\n return { ok: false, codes, network, attestation_id };\n }\n } catch (e: unknown) {\n const msg = e instanceof Error ? e.message : String(e ?? 'decode_error');\n if (msg === 'decode_error') {\n codes.push('decode_error');\n } else {\n codes.push('bad_request');\n }\n return { ok: false, codes, network };\n }\n}\n"]}
1	+ {"version":3,"sources":["../src/canonical.ts","../src/scoring.ts","../src/utils/logger.ts","../src/verify.ts"],"names":["Buffer","Verifier","bitcoinMessage","days_unspent","verify"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAS,WAAW,KAAA,EAA2B;AAC3C,EAAA,OAAO,MAAM,IAAA,CAAK,KAAK,CAAA,CAClB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAC1C,KAAK,EAAE,CAAA;AAChB;AAmCA,IAAM,oBAAA,GAAuB,oBAAA;AAC7B,IAAM,wBAAA,GAA2B,SAAA;AAEjC,SAAS,kBAAA,CAAmB,EAAE,QAAA,EAAU,UAAA,EAAW,EAA0B;AACzE,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,2BAAA,EAA8B,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,uCAAA;AAAA,KAC1D;AAAA,EACJ;AACA,EAAA,IAAI,CAAC,UAAA,IAAc,wBAAA,CAAyB,IAAA,CAAK,UAAU,CAAA,EAAG;AAC1D,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,6BAAA,EAAgC,IAAA,CAAK,SAAA,CAAU,UAAU,CAAC,CAAA,2DAAA;AAAA,KAC9D;AAAA,EACJ;AACJ;AA2BO,SAAS,gBAAgB,aAAA,EAA0C;AACtE,EAAA,IAAI,CAAC,aAAA,IAAiB,aAAA,CAAc,IAAA,OAAW,EAAA,EAAI;AAC/C,IAAA,OAAO,EAAC;AAAA,EACZ;AAIA,EAAA,IAAI,yBAAyB,IAAA,CAAK,aAAA,CAAc,QAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,EAAG;AAChE,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,WAAW,aAAA,CAAc,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,OAAA,KAAY;AACvD,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,IAAI,eAAe,EAAA,EAAI;AACnB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,OAAO,CAAA,CAAE,CAAA;AAAA,IACjE;AACA,IAAA,OAAO;AAAA,MACH,UAAU,OAAA,CAAQ,SAAA,CAAU,CAAA,EAAG,UAAU,EAAE,IAAA,EAAK;AAAA,MAChD,YAAY,OAAA,CAAQ,SAAA,CAAU,UAAA,GAAa,CAAC,EAAE,IAAA;AAAK,KACvD;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,KAAK,QAAA,EAAU;AACtB,IAAA,IAAI,CAAC,CAAA,CAAE,QAAA,IAAY,CAAC,EAAE,UAAA,EAAY;AAC9B,MAAA,MAAM,IAAI,MAAM,CAAA,0BAAA,EAA6B,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE,CAAA;AAAA,IAC7E;AACA,IAAA,kBAAA,CAAmB,CAAC,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACX;AA0EA,eAAsB,sBAAsB,OAAA,EAAkC;AAE1E,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA;AAGnC,EAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAG7D,EAAA,OAAO,UAAA,CAAW,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AAChD;;;AC5MA,SAAS,OAAA,CAAQ,MAAc,IAAA,EAAsB;AACjD,EAAA,IAAI,IAAA,IAAQ,CAAA,IAAK,IAAA,IAAQ,CAAA,EAAG,OAAO,CAAA;AACnC,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,CAAA,GAAI,IAAI,CAAA,IAAK,CAAA,GAAI,IAAA,GAAO,EAAA,CAAA,GAAM,GAAG,CAAA,GAAI,GAAA;AACpE;AAEA,SAAS,SAAA,CAAU,MAAc,IAAA,EAAoB;AACjD,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAc,IAAA,IAAQ,GAAA,EAAK,OAAO,UAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAa,IAAA,IAAQ,GAAA,EAAK,OAAO,MAAA;AAC7C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAW,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AAC1C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAU,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AACzC,EAAA,OAAO,MAAA;AACX;AAEO,SAAS,YAAA,CAAa,IAAA,EAAc,IAAA,EAAc,MAAA,EAAoC;AACzF,EAAA,QAAQ,OAAO,SAAA;AAAW,IACtB,KAAK,IAAA;AACD,MAAA,OAAO,OAAA,CAAQ,MAAM,IAAI,CAAA;AAAA,IAC7B,KAAK,MAAA;AACD,MAAA,OAAO,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,IAC/B,KAAK,MAAA;AACD,MAAA,OAAO,IAAA;AAAA;AAEnB;AAEO,SAAS,gBAAA,CAAiB,MAAc,IAAA,EAAc;AACzD,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAA,EAAM,IAAI,GAAG,IAAA,EAAM,SAAA,CAAU,IAAA,EAAM,IAAI,CAAA,EAAE;AAClE;ACGO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACvEA,IAAM,GAAA,GAAM,aAAa,YAAY,CAAA;AAqCrC,SAAS,aAAa,CAAA,EAAoB;AACtC,EAAA,OAAO,iBAAiB,IAAA,CAAK,CAAC,CAAA,IAAK,CAAA,CAAE,SAAS,CAAA,KAAM,CAAA;AACxD;AAOA,SAAS,cAAc,GAAA,EAAqB;AACxC,EAAA,IAAI,YAAA,CAAa,GAAG,CAAA,EAAG;AACnB,IAAA,OAAOA,cAAO,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,GAAA;AACX;AASA,SAAS,qBAAA,CAAsB,MAAc,GAAA,EAAqB;AAE9D,EAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,EAAA,IAAI,QAAA,EAAU;AACV,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,EAAA,MAAM,kBAAkB,SAAA,CAAU,MAAA,KAAW,EAAA,IAAM,QAAA,CAAS,KAAK,SAAS,CAAA;AAE1E,EAAA,IAAI,eAAA,EAAiB;AACjB,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,OAAO,QAAA;AACX;AAEA,eAAe,eAAA,CAAgB;AAAA,EAC3B,IAAA;AAAA,EACA,GAAA;AAAA,EACA,GAAA;AAAA,EACA;AACJ,CAAA,EAA8C;AAC1C,EAAA,IAAI;AAEA,IAAA,MAAM,cAAA,GAAiB,MAAA,IAAU,qBAAA,CAAsB,IAAA,EAAM,GAAG,CAAA;AAEhE,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,MAAM,SAAA,EAAW,GAAA,CAAI,QAAQ,SAAA,EAAW,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,cAAA,EAAe;AAAA,MAC7E;AAAA,KACJ;AAEA,IAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,MAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,MAAA,GAAA,CAAI,KAAA;AAAA,QACA,EAAE,SAAA,EAAW,SAAA,CAAU,UAAU,CAAA,EAAG,EAAE,IAAI,KAAA,EAAM;AAAA,QAChD;AAAA,OACJ;AAGA,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,OAAA,EAAS,GAAA;AAAA,UACT,QAAA,EAAU,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA;AAAA,UAC1B,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,UAC/B,WAAA,EAAa,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,GAAS,CAAC;AAAA,SAC3D;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,MAAM,EAAA,GAAKC,iBAAA,CAAS,eAAA,CAAgB,IAAA,EAAM,KAAK,SAAS,CAAA;AACxD,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,IAAM,6BAA6B,CAAA;AAEpD,MAAA,IAAI,CAAC,EAAA,EAAI;AAEL,QAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,QAAA,IAAI,QAAA,IAAY,SAAA,CAAU,MAAA,KAAW,EAAA,EAAI;AACrC,UAAA,GAAA,CAAI,IAAA;AAAA,YACA,EAAE,IAAA,EAAM,MAAA,EAAQ,mBAAA,EAAqB,SAAA,EAAW,UAAU,MAAA,EAAO;AAAA,YACjE;AAAA,WACJ;AAAA,QACJ,CAAA,MAAO;AACH,UAAA,GAAA,CAAI,KAAA;AAAA,YACA;AAAA,cACI,IAAA;AAAA,cACA,WAAW,SAAA,CAAU,MAAA;AAAA,cACrB,WAAW,GAAA,CAAI,MAAA;AAAA,cACf,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG;AAAA,aACpC;AAAA,YACA;AAAA,WACJ;AAAA,QACJ;AAAA,MACJ;AAEA,MAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,IAClC;AAEA,IAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,MAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AAGnC,MAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACzE,QAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAK,EAAG,iDAAiD,CAAA;AACpE,QAAA,OAAO,wBAAA;AAAA,MACX;AAEA,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,IAAA;AAAA,UACA,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE,CAAA,GAAI,KAAA;AAAA,UACxC,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG,CAAA,GAAI,KAAA;AAAA,UACpC,WAAW,GAAA,CAAI;AAAA,SACnB;AAAA,QACA;AAAA,OACJ;AACA,MAAA,MAAM,EAAA,GAAoBC,yBAAA,CAAA,MAAA,CAAO,GAAA,EAAK,IAAA,EAAM,SAAS,CAAA;AACrD,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,EAAI,iBAAiB,SAAA,CAAU,MAAA,IAAU,4BAA4B,CAAA;AACtF,MAAA,IAAI,CAAC,EAAA,EAAI;AACL,QAAA,GAAA,CAAI,KAAA;AAAA,UACA;AAAA,YACI,IAAA;AAAA,YACA,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,YAC/B,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE;AAAA,WACxC;AAAA,UACA;AAAA,SACJ;AAAA,MACJ;AACA,MAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,IAClC;AAEA,IAAA,OAAO,gBAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,MAAM,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,MAChE;AAAA,KACJ;AACA,IAAA,OAAO,aAAA;AAAA,EACX;AACJ;AAGO,SAAS,sBAAsB,GAAA,EAAa;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAKjD,EAAA,MAAM,MAAA,GAAS,CAAC,MAAA,KAAuC;AACnD,IAAA,MAAM,SAAS,MAAA,GAAS,GAAA;AACxB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,WAAA,EAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA;AAChE,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AAAA,EACnC,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,SAAS,CAAA,IAAK,EAAA;AACrC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,YAAY,CAAA,IAAK,EAAA;AAG9C,EAAA,IAAI,aAAgC,EAAC;AACrC,EAAA,IAAI;AACA,IAAA,UAAA,GAAa,gBAAgB,aAAa,CAAA;AAAA,EAC9C,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,KAAA,EAAO,GAAA,IAAO,kCAAkC,CAAA;AAAA,EAC9E;AAGA,EAAA,MAAM,QAAA,uBAAe,GAAA,CAAI;AAAA,IACrB,aAAA;AAAA,IACA,YAAA;AAAA,IACA,SAAA;AAAA,IACA,SAAA;AAAA,IACA,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACH,CAAA;AACD,EAAA,MAAM,aAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACtB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC5B,IAAA,IAAI,QAAQ,EAAA,EAAI;AAChB,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,CAAE,IAAA,GAAO,WAAA,EAAY;AAClD,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AACrC,IAAA,IAAI,CAAC,SAAS,GAAA,CAAI,GAAG,KAAK,GAAA,EAAK,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA;AAAA,EACrD;AAEA,EAAA,MAAM,OAAA,GAAW,UAAA,CAAW,SAAS,CAAA,IAAK,SAAA;AAG1C,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,CAAA;AACjC,EAAA,MAAM,IAAA,GAAO,OAAA,GAAU,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA,GAAI,MAAA;AAE/C,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,EAAE,OAAA,EAAS,UAAA,EAAW;AAAA,IAC5B,OAAA;AAAA,IACA,UAAA;AAAA,IACA,IAAA,EAAM,SAAS,MAAA,IAAa,CAAC,MAAM,IAAI,CAAA,IAAK,IAAA,GAAO,CAAA,GAAI,IAAA,GAAO;AAAA,GAClE;AACJ;AAkCA,eAAe,eAAA,CACX,OAAA,EACA,OAAA,EACA,IAAA,EAKsB;AAEtB,EAAA,MAAM,SAAA,GACF,YAAY,QAAA,GACN;AAAA,IACI,MAAM,iBAAA,IAAqB,kCAAA;AAAA,IAC3B;AAAA,GACJ,GACA,YAAY,SAAA,GACV;AAAA,IACI,MAAM,kBAAA,IAAsB,mCAAA;AAAA,IAC5B;AAAA,GACJ,GACA;AAAA,IACI,MAAM,kBAAA,IAAsB,2BAAA;AAAA,IAC5B;AAAA,GACJ;AAEZ,EAAA,IAAI,SAAA,GAA0B,IAAA;AAK9B,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,OAAO,CAAA,KAAA,CAAA;AACtC,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,OAAA,IAAW,gBAAgB,CAAA;AAE5C,MAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAC1B,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,QACtC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,OACnC,CAAA;AAED,MAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAAA,MACzC;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAG7B,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACtB,QAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,MACtD;AAGA,MAAA,KAAA,MAAW,QAAQ,IAAA,EAAM;AACrB,QAAA,IACI,OAAO,KAAK,KAAA,KAAU,QAAA,IACtB,OAAO,IAAA,CAAK,MAAA,KAAW,YACvB,OAAO,IAAA,CAAK,OAAO,SAAA,KAAc,SAAA,IACjC,OAAO,IAAA,CAAK,IAAA,KAAS,YACrB,OAAO,IAAA,CAAK,SAAS,QAAA,EACvB;AACE,UAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,QAC5C;AAAA,MACJ;AAEA,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAQ,OAAA,IAAW,4BAA4B,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACX,SAAS,GAAA,EAAK;AACV,MAAA,SAAA,GAAY,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAC9D,MAAA,GAAA,CAAI,IAAA;AAAA,QACA,EAAE,IAAA,EAAM,KAAA,EAAO,SAAA,CAAU,SAAS,OAAA,EAAQ;AAAA,QAC1C;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAGA,EAAA,GAAA,CAAI,KAAA,CAAM,EAAE,SAAA,EAAW,KAAA,EAAO,WAAW,OAAA,EAAS,OAAA,IAAW,8BAA8B,CAAA;AAC3F,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,SAAA,EAAW,OAAA,IAAW,SAAS,CAAA,CAAE,CAAA;AAC5E;AAWA,SAAS,cAAA,CACL,OACA,UAAA,EAQF;AAEE,EAAA,MAAM,iBAAiB,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,SAAS,CAAA;AAC7D,EAAA,IAAI,cAAA,CAAe,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,WAAA,EAAa,CAAA,EAAG,YAAA,EAAc,CAAA,EAAG,mBAAmB,CAAA,EAAE;AAAA,EACnE;AAGA,EAAA,MAAM,iBAAA,GAAoB,eAAe,MAAA,CAAO,CAAC,KAAK,CAAA,KAAM,GAAA,GAAM,CAAA,CAAE,KAAA,EAAO,CAAC,CAAA;AAG5E,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,UAAA,GAAa,CAAA,EAAG;AAE5C,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,cAAc,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAC9C,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,OAAA,GAAU,OAAA;AAC1C,MAAA,IAAI,CAAA,CAAE,SAAS,CAAA,CAAE,IAAA,SAAa,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAA;AACzD,MAAA,OAAO,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA;AAAA,IACtB,CAAC,CAAA;AAGD,IAAA,IAAI,GAAA,GAAM,CAAA;AACV,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,MAAA,GAAA,IAAO,IAAA,CAAK,KAAA;AACZ,MAAA,YAAA,GAAe,KAAK,GAAA,CAAI,YAAA,EAAc,IAAA,CAAK,MAAA,CAAO,cAAc,CAAC,CAAA;AACjE,MAAA,IAAI,OAAO,UAAA,EAAY;AAAA,IAC3B;AAGA,IAAA,MAAMC,gBAAe,IAAA,CAAK,GAAA;AAAA,MACtB,CAAA;AAAA,MACA,IAAA,CAAK,OAAO,IAAA,CAAK,GAAA,KAAQ,GAAA,GAAO,YAAA,KAAiB,EAAA,GAAK,EAAA,GAAK,EAAA,CAAG;AAAA,KAClE;AAEA,IAAA,OAAO;AAAA,MACH,WAAA,EAAa,UAAA;AAAA;AAAA,MACb,YAAA,EAAAA,aAAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAGA,EAAA,MAAM,WAAA,GAAc,iBAAA;AAGpB,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA;AAAA,IACpB,GAAG,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI;AAAA,GACzE;AACA,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAA,CAAO,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,GAAO,UAAA,KAAe,EAAA,GAAK,EAAA,GAAK,GAAG,CAAC,CAAA;AAE9F,EAAA,OAAO,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB;AAC1D;AA4BA,eAAsBC,OAAAA,CAAO,KAAA,EAAoB,IAAA,GAAsB,EAAC,EAA2B;AAC/F,EAAA,MAAM,QAAsB,EAAC;AAC7B,EAAA,IAAI,OAAA,GAAmB,SAAA;AAEvB,EAAA,IAAI;AAEA,IAAA,IAAI,CAAC,MAAM,GAAA,IAAO,CAAC,MAAM,IAAA,IAAQ,CAAC,MAAM,GAAA,EAAK;AACzC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,IACvC;AAGA,IAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAC9C,IAAA,OAAA,GAAU,OAAO,OAAA,IAAW,SAAA;AAG5B,IAAA,MAAM,cAAA,GAAiB,MAAM,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAG5D,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM,IAAA,EAAM;AACpC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAGA,IAAA,IAAA,CAAK,YAAY,SAAA,IAAa,OAAA,KAAY,QAAA,KAAa,CAAC,KAAK,QAAA,EAAU;AACnE,MAAA,KAAA,CAAM,KAAK,kBAAkB,CAAA;AAC7B,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAMA,IAAA,IAAI,KAAK,WAAA,EAAa;AAClB,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,KAAK,CAAA;AACnC,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,KAAQ,IAAA,CAAK,WAAA,EAAa;AAClC,QAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,IAAI,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC9B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,UAAA,CAAW,SAAS,CAAC,CAAA;AACnD,MAAA,IAAI,CAAC,OAAO,KAAA,CAAM,GAAG,KAAK,GAAA,GAAM,IAAA,CAAK,KAAI,EAAG;AACxC,QAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AACpB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB;AAAA,MAClC,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,GAAI,KAAA,CAAM,MAAA,IAAU,EAAE,MAAA,EAAQ,MAAM,MAAA;AAAO,KAC9C,CAAA;AACD,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAElB,IAAA,MAAM,KAAA,GAAQ,OAAA,KAAY,eAAA,IAAmB,OAAA,KAAY,eAAA;AACzD,IAAA,IAAI,CAAC,KAAA,EAAO;AACR,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,KAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,OAC5B;AAAA,IACJ;AAGA,IAAA,IAAI;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,CAAgB,KAAA,CAAM,MAAM,OAAA,EAAS;AAAA,QACrD,oBAAoB,IAAA,CAAK,kBAAA;AAAA,QACzB,mBAAmB,IAAA,CAAK;AAAA,OAC3B,CAAA;AAGD,MAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB,GAAI,cAAA;AAAA,QACrD,KAAA;AAAA,QACA,MAAA,CAAO;AAAA,OACX;AAGA,MAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,CAAA,IAAa,MAAA,CAAO,OAAO,CAAA,EAAG;AAC9C,QAAA,IAAI,iBAAA,GAAoB,OAAO,IAAA,EAAM;AACjC,UAAA,KAAA,CAAM,KAAK,mBAAmB,CAAA;AAC9B,UAAA,GAAA,CAAI,IAAA;AAAA,YACA;AAAA,cACI,MAAM,MAAA,CAAO,IAAA;AAAA,cACb,iBAAA;AAAA,cACA,SAAS,KAAA,CAAM;AAAA,aACnB;AAAA,YACA;AAAA,WACJ;AACA,UAAA,OAAO;AAAA,YACH,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA;AAAA,YACA,OAAA;AAAA,YACA,cAAA;AAAA,YACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,WAC5B;AAAA,QACJ;AAAA,MACJ;AAGA,MAAA,IAAI,eAAe,CAAA,EAAG;AAClB,QAAA,KAAA,CAAM,KAAK,WAAW,CAAA;AAEtB,QAAA,IAAI,KAAA,CAAM,KAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,CAAO,SAAS,CAAA,EAAG;AACxC,UAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,QAC7B;AACA,QAAA,OAAO;AAAA,UACH,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA;AAAA,UACA,OAAA;AAAA,UACA,cAAA;AAAA,UACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,SAC5B;AAAA,MACJ,CAAA,MAAO;AACH,QAAA,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAAA,MAC/B;AAGA,MAAA,MAAM,OAAA,GAAmB;AAAA,QACrB,WAAA;AAAA,QACA,YAAA;AAAA,QACA,OAAQ,YAAA,CAAa,WAAA,EAAa,cAAc,EAAE,SAAA,EAAW,MAAM;AAAA,OACvE;AAEA,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK,UAAA;AAAA,QACxB;AAAA,OACJ;AAAA,IACJ,SAAS,SAAA,EAAW;AAChB,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,SAAA,IAAa,mBAAmB,CAAA;AACjD,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAAA,EACJ,SAAS,CAAA,EAAY;AACjB,IAAA,MAAM,MAAM,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,KAAK,cAAc,CAAA;AACvE,IAAA,IAAI,QAAQ,cAAA,EAAgB;AACxB,MAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,IAC7B,CAAA,MAAO;AACH,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AAAA,IAC5B;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,EACvC;AACJ","file":"verify.js","sourcesContent":["/*\n Canonical message builder per SPEC.md §2\n \n - LF line endings, exactly one trailing LF\n * - 7 fixed core lines in strict order and wording\n * - Optional extensions appended as key: value with lexicographically sorted lowercase keys\n /\n\nimport type { AttestationEnvelope, IdentityBinding, Scheme } from './types';\n\n/\n Input for building a canonical message\n /\nexport interface CanonicalInput {\n /* Bitcoin address /\n address: string;\n /* Optional identity bindings /\n identities?: IdentityBinding[];\n}\n\n/\n Extension key-value pairs for canonical message\n /\nexport type Extensions = Record<string, string \| undefined>;\n\n/\n Convert bytes to lowercase hex string\n * @param bytes - Byte array to convert\n * @returns Lowercase hex string\n /\nfunction toLowerHex(bytes: Uint8Array): string {\n return Array.from(bytes)\n .map((b) => b.toString(16).padStart(2, '0'))\n .join('');\n}\n\n/\n Generate a random 16-byte nonce as lowercase hex\n * Uses Web Crypto API when available, falls back to Math.random()\n * @returns 32-character lowercase hex string\n /\nexport function randomNonce16BHexLower(): string {\n const arr = new Uint8Array(16);\n\n try {\n if (typeof crypto !== 'undefined' && typeof crypto.getRandomValues === 'function') {\n crypto.getRandomValues(arr);\n return toLowerHex(arr);\n }\n } catch {\n // Fall through to non-cryptographic fallback\n }\n\n // No silent Math.random fallback: a nonce is a load-bearing security\n // primitive. A deployment without `crypto.getRandomValues` MUST fix its\n // environment rather than sign with weak randomness.\n throw new Error('crypto.getRandomValues unavailable — refusing to mint a weak nonce');\n}\n\n/\n Reject characters that would break the line-oriented canonical grammar\n * or the comma-separated identities list. If any of these slipped through,\n * an attacker could smuggle a forged `address:` or extension line into the\n * signed payload: `identities: alice\\naddress: bc1qEVIL…` would parse as a\n * second address line. Catch it at the boundary, not at verification time.\n \n Also rejects a colon in the identifier so a bad actor can't turn\n * `github:alice:extra` into a different protocol binding on parse.\n /\nconst IDENTITY_PROTOCOL_RE = /^[a-z][a-z0-9_-]$/;\nconst IDENTITY_FORBIDDEN_CHARS = /[\\r\\n,]/;\n\nfunction assertSafeIdentity({ protocol, identifier }: IdentityBinding): void {\n if (!IDENTITY_PROTOCOL_RE.test(protocol)) {\n throw new Error(\n `invalid identity protocol: ${JSON.stringify(protocol)} — must match /^[a-z][a-z0-9_-]$/`\n );\n }\n if (!identifier \|\| IDENTITY_FORBIDDEN_CHARS.test(identifier)) {\n throw new Error(\n `invalid identity identifier: ${JSON.stringify(identifier)} — must be non-empty and contain no newlines or commas`\n );\n }\n}\n\n/\n Format identities as comma-separated protocol:identifier pairs, sorted lexicographically\n * @param identities - Array of identity bindings\n * @returns Comma-separated string of protocol:identifier pairs\n /\nexport function formatIdentities(identities: IdentityBinding[] = []): string {\n if (identities.length === 0) {\n return '';\n }\n for (const id of identities) assertSafeIdentity(id);\n\n // Format as protocol:identifier and sort lexicographically\n const formatted = identities\n .map(({ protocol, identifier }) => `${protocol}:${identifier}`)\n .sort();\n\n return formatted.join(',');\n}\n\n/\n Parse identities from comma-separated protocol:identifier format\n * @param identitiesStr - Comma-separated identity string\n * @returns Array of identity bindings\n * @throws {Error} If identity format is invalid\n /\nexport function parseIdentities(identitiesStr: string): IdentityBinding[] {\n if (!identitiesStr \|\| identitiesStr.trim() === '') {\n return [];\n }\n // The identities field lives on one line of the canonical message. If it\n // contains a raw LF/CR, it's either corrupt or an attempt to smuggle a\n // fake core line into the parser. Refuse instead of trying to recover.\n if (IDENTITY_FORBIDDEN_CHARS.test(identitiesStr.replace(/,/g, ''))) {\n throw new Error('identities field contains forbidden characters (newline)');\n }\n\n const bindings = identitiesStr.split(',').map((binding) => {\n const colonIndex = binding.indexOf(':');\n if (colonIndex === -1) {\n throw new Error(`Invalid identity binding format: ${binding}`);\n }\n return {\n protocol: binding.substring(0, colonIndex).trim(),\n identifier: binding.substring(colonIndex + 1).trim(),\n };\n });\n\n for (const b of bindings) {\n if (!b.protocol \|\| !b.identifier) {\n throw new Error(`Invalid identity binding: ${b.protocol}:${b.identifier}`);\n }\n assertSafeIdentity(b);\n }\n return bindings;\n}\n\n/\n Optional deterministic overrides for message building. Only intended for\n * tests / conformance vectors; production callers should let the builder\n * mint a fresh nonce + timestamp per message.\n /\nexport interface BuildOptions {\n /* 32-char lowercase hex. Default: freshly-generated cryptographic nonce. /\n nonce?: string;\n /* RFC-3339 UTC. Default: `new Date().toISOString()`. /\n issuedAt?: string;\n}\n\n/\n Build a canonical message following OrangeCheck Protocol v0 specification\n * @param input - Canonical input with address and identities\n * @param extensions - Optional extension key-value pairs\n * @param options - Optional deterministic overrides (testing only)\n * @returns Canonical message string with LF line endings\n /\nexport function buildCanonicalMessage(\n { address, identities }: CanonicalInput,\n extensions: Extensions = {},\n options: BuildOptions = {}\n): string {\n const nonce = options.nonce ?? randomNonce16BHexLower();\n if (!/^[0-9a-f]{32}$/.test(nonce)) {\n throw new Error(`invalid nonce: must be 32 lowercase hex chars`);\n }\n const issuedAt = options.issuedAt ?? new Date().toISOString();\n\n // Format identities\n const identitiesStr = formatIdentities(identities);\n\n // Core (strict wording + order per SPEC.md §2)\n const core = [\n 'orangecheck',\n `identities: ${identitiesStr}`,\n `address: ${address}`,\n 'purpose: portable reputation attestation (non-custodial)',\n `nonce: ${nonce}`,\n `issued_at: ${issuedAt}`,\n 'ack: I attest control of this address and bind it to my identities.',\n ];\n\n // Normalize and sort extensions\n const normExt: Record<string, string> = {};\n for (const [k, v] of Object.entries(extensions)) {\n if (v == null \|\| v === '') {\n continue;\n }\n const key = k.toLowerCase();\n normExt[key] = String(v);\n }\n\n const extLines = Object.keys(normExt)\n .sort()\n .map((k) => `${k}: ${normExt[k]!}`);\n\n const all = [...core, ...extLines];\n\n // Join with LF and ensure exactly one trailing LF\n return all.join('\\n') + '\\n';\n}\n\n/\n Generate attestation ID from canonical message\n \n attestation_id = SHA-256(canonical_message)\n \n @param message - Canonical message string\n * @returns Lowercase hex SHA-256 hash\n /\nexport async function generateAttestationId(message: string): Promise<string> {\n // Convert message to UTF-8 bytes\n const encoder = new TextEncoder();\n const data = encoder.encode(message);\n\n // Compute SHA-256 hash\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n\n // Convert to lowercase hex\n return toLowerHex(new Uint8Array(hashBuffer));\n}\n\n/\n Create an attestation envelope for publishing\n \n This wraps the canonical message with metadata for Nostr publishing\n \n @param message - Canonical message\n * @param signature - BIP-322 or legacy signature\n * @param scheme - Signature scheme used\n * @param address - Bitcoin address\n * @param identities - Identity bindings\n * @param extensions - Optional extensions\n * @returns Attestation envelope ready for publishing\n /\nexport async function createAttestationEnvelope(\n message: string,\n signature: string,\n scheme: Scheme,\n address: string,\n identities: IdentityBinding[],\n extensions: Extensions = {}\n): Promise<AttestationEnvelope> {\n const attestation_id = await generateAttestationId(message);\n\n // Extract issued_at from message\n const issuedAtMatch = message.match(/issued_at: ([^\\n]+)/);\n const issued_at = issuedAtMatch?.[1] ?? new Date().toISOString();\n\n // Extract expires from extensions if present\n const expires_at = extensions.expires;\n\n // Extract relay hints from extensions if present\n const relay_hints = extensions.relay_hints?.split(',').map((r) => r.trim());\n\n // Extract publish targets from extensions if present\n const publish_targets = extensions.publish?.split(',').map((t) => t.trim());\n\n // Base64url encode the message\n const encoder = new TextEncoder();\n const messageBytes = encoder.encode(message);\n const base64 = btoa(String.fromCharCode(...messageBytes));\n const message_b64url = base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n\n // Construct verification URL\n const verification_url = `https://attest.ochk.io/attest/${attestation_id}`;\n\n return {\n attestation_id,\n scheme,\n address,\n identities,\n message,\n message_b64url,\n signature,\n issued_at,\n expires_at,\n verification_url,\n publish_targets,\n relay_hints,\n };\n}\n","/\n OrangeCheck Scoring\n \n The protocol registers exactly one scoring algorithm: `v0`. A `tier` helper\n * is also provided for UI convenience. RPs with specialized needs compute\n * their own score against raw metrics — the protocol does not ship an\n * algorithm zoo.\n \n See: docs/oc-protocol/registry/scoring.md\n /\n\nexport type ScoringAlgorithm = 'v0' \| 'tier' \| 'none';\nexport type Tier = 'platinum' \| 'gold' \| 'silver' \| 'bronze' \| 'none';\nexport type ScoreResult = number \| Tier \| null;\n\nexport interface ScoringConfig {\n algorithm: ScoringAlgorithm;\n}\n\nfunction scoreV0(sats: number, days: number): number {\n if (sats <= 0 \|\| days <= 0) return 0;\n return Math.round(Math.log(1 + sats) (1 + days / 30) * 100) / 100;\n}\n\nfunction scoreTier(sats: number, days: number): Tier {\n if (sats >= 10_000_000 && days >= 365) return 'platinum';\n if (sats >= 1_000_000 && days >= 180) return 'gold';\n if (sats >= 100_000 && days >= 90) return 'silver';\n if (sats >= 10_000 && days >= 30) return 'bronze';\n return 'none';\n}\n\nexport function computeScore(sats: number, days: number, config: ScoringConfig): ScoreResult {\n switch (config.algorithm) {\n case 'v0':\n return scoreV0(sats, days);\n case 'tier':\n return scoreTier(sats, days);\n case 'none':\n return null;\n }\n}\n\nexport function computeAllScores(sats: number, days: number) {\n return { v0: scoreV0(sats, days), tier: scoreTier(sats, days) };\n}\n\nexport function formatScore(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n if (score === null \|\| algorithm === 'none') return 'N/A';\n if (algorithm === 'v0') return (score as number).toFixed(1);\n const tier = score as Tier;\n const labels: Record<Tier, string> = {\n platinum: 'Platinum',\n gold: 'Gold',\n silver: 'Silver',\n bronze: 'Bronze',\n none: '—',\n };\n return labels[tier];\n}\n\nexport function getScoreColor(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n if (algorithm === 'tier') {\n const colors: Record<Tier, string> = {\n platinum: '#a855f7',\n gold: '#eab308',\n silver: '#94a3b8',\n bronze: '#f97316',\n none: '#64748b',\n };\n return colors[(score as Tier) ?? 'none'] ?? '#64748b';\n }\n const n = (score as number) ?? 0;\n if (n >= 100) return '#22c55e';\n if (n >= 50) return '#3b82f6';\n if (n >= 20) return '#eab308';\n return '#f97316';\n}\n\nexport function getTierNumber(tier: Tier): number {\n const map: Record<Tier, number> = {\n platinum: 4,\n gold: 3,\n silver: 2,\n bronze: 1,\n none: 0,\n };\n return map[tier] ?? 0;\n}\n","/*\n Simple logger for SDK\n * Can be disabled in production builds\n /\n\n/\n Log level type\n /\nexport type LogLevel = 'debug' \| 'info' \| 'warn' \| 'error' \| 'none';\n\n/\n Logger context type\n /\nexport type LogContext = Record<string, unknown>;\n\n/\n Logger interface\n /\nexport interface Logger {\n debug: (contextOrMessage: string \| LogContext, message?: string) => void;\n info: (contextOrMessage: string \| LogContext, message?: string) => void;\n warn: (contextOrMessage: string \| LogContext, message?: string) => void;\n error: (contextOrMessage: string \| LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/\n Set the global log level\n * @param level - Log level to set\n /\nexport function setLogLevel(level: LogLevel): void {\n logLevel = level;\n}\n\n/\n Get the current log level\n * @returns Current log level\n /\nexport function getLogLevel(): LogLevel {\n return logLevel;\n}\n\n/\n Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n /\nexport function createLogger(namespace: string): Logger {\n const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n if (logLevel === 'none') return false;\n\n const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n const messageLevelIndex = levels.indexOf(level);\n\n return messageLevelIndex >= currentLevelIndex;\n };\n\n const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n return {\n debug: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('debug')) {\n if (typeof contextOrMessage === 'string') {\n console.debug(formatMessage(contextOrMessage));\n } else {\n console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n }\n }\n },\n info: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('info')) {\n if (typeof contextOrMessage === 'string') {\n console.info(formatMessage(contextOrMessage));\n } else {\n console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n }\n }\n },\n warn: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('warn')) {\n if (typeof contextOrMessage === 'string') {\n console.warn(formatMessage(contextOrMessage));\n } else {\n console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n }\n }\n },\n error: (contextOrMessage: string \| LogContext, message?: string): void => {\n if (shouldLog('error')) {\n if (typeof contextOrMessage === 'string') {\n console.error(formatMessage(contextOrMessage));\n } else {\n console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n }\n }\n },\n };\n}\n\n/\n Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n /\nexport function logVerificationError(\n protocol: string,\n identifier: string,\n error: Error,\n context?: LogContext\n): void {\n const logger = createLogger('identity-verification');\n logger.error(\n {\n protocol,\n identifier,\n error: error.message,\n stack: error.stack,\n ...context,\n },\n 'Verification failed'\n );\n}\n","/\n OrangeCheck Protocol Verification\n \n Core verification logic for BIP-322 and legacy signatures,\n * UTXO analysis, and reputation metrics computation\n /\n\nimport type { ScoringAlgorithm } from './scoring';\nimport type {\n IdentityBinding,\n Metrics,\n Network,\n Scheme,\n StatusCode,\n VerifyInput,\n VerifyOptions,\n VerifyOutcome,\n} from './types';\n\nimport { Buffer } from 'buffer';\n\nimport { Verifier } from 'bip322-js';\nimport as bitcoinMessage from 'bitcoinjs-message';\n\nimport { generateAttestationId, parseIdentities } from './canonical';\nimport { computeAllScores, computeScore } from './scoring';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/verify');\n\n/*\n Scoring function per OCP v0 specification (SPEC.md §6)\n * Formula: score = round( ln(1 + sats_bonded) * (1 + days_unspent / 30), 2 )\n \n This produces an unbounded score that combines both sats and time.\n * Typical ranges:\n * - 10k sats, 30 days ≈ 18\n * - 100k sats, 90 days ≈ 46\n * - 1M sats, 365 days ≈ 182\n * - 100M sats, 365 days ≈ 243\n /\n/\n Export scoring functions for use in other modules\n /\nexport { computeScore, computeAllScores, type ScoringAlgorithm };\n\n/\n Input for signature verification\n /\ninterface SignatureVerifyInput {\n /* Bitcoin address /\n addr: string;\n /* Message to verify /\n msg: string;\n /* Signature (hex or base64) /\n sig: string;\n /* Optional signature scheme (auto-detected if not provided) /\n scheme?: Scheme;\n}\n\n/\n Check if a string looks like hexadecimal\n * @param s - String to check\n * @returns True if string is valid hex with even length\n /\nfunction looksLikeHex(s: string): boolean {\n return /^[0-9a-fA-F]+$/.test(s) && s.length % 2 === 0;\n}\n\n/\n Convert signature to base64 if it's in hex format\n * @param sig - Signature (hex or base64)\n * @returns Signature in base64 format\n /\nfunction toBase64Maybe(sig: string): string {\n if (looksLikeHex(sig)) {\n return Buffer.from(sig, 'hex').toString('base64');\n }\n return sig;\n}\n\n/\n Auto-detect signature scheme based on address type and signature format\n \n @param addr - Bitcoin address\n * @param sig - Signature\n * @returns Detected scheme ('bip322' or 'legacy')\n /\nfunction detectSignatureScheme(addr: string, sig: string): Scheme {\n // SegWit and Taproot addresses MUST use BIP-322\n const isSegWit = addr.startsWith('bc1') \|\| addr.startsWith('tb1');\n if (isSegWit) {\n return 'bip322';\n }\n\n // For P2PKH addresses, check if signature looks like legacy format\n const sigBase64 = toBase64Maybe(sig);\n const looksLikeLegacy = sigBase64.length === 88 && /^[IHG]/.test(sigBase64);\n\n if (looksLikeLegacy) {\n return 'legacy';\n }\n\n // Default to BIP-322\n return 'bip322';\n}\n\nasync function verifySignature({\n addr,\n msg,\n sig,\n scheme,\n}: SignatureVerifyInput): Promise<StatusCode> {\n try {\n // Auto-detect scheme if not explicitly provided\n const detectedScheme = scheme \|\| detectSignatureScheme(addr, sig);\n\n log.debug(\n { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },\n 'Verifying signature'\n );\n\n if (detectedScheme === 'bip322') {\n const sigBase64 = toBase64Maybe(sig);\n log.debug(\n { sigBase64: sigBase64.substring(0, 50) + '...' },\n 'Signature converted to base64'\n );\n\n // Log the full message for debugging\n log.debug(\n {\n msgFull: msg,\n msgLines: msg.split('\\n').length,\n msgFirstLine: msg.split('\\n')[0],\n msgLastLine: msg.split('\\n')[msg.split('\\n').length - 1],\n },\n 'Message being verified'\n );\n\n const ok = Verifier.verifySignature(addr, msg, sigBase64);\n log.info({ addr, ok }, 'BIP-322 verification result');\n\n if (!ok) {\n // Check if this looks like an Electrum signature (88 chars, base64)\n const isSegWit = addr.startsWith('bc1') \|\| addr.startsWith('tb1');\n if (isSegWit && sigBase64.length === 88) {\n log.warn(\n { addr, wallet: 'possibly Electrum', sigLength: sigBase64.length },\n 'BIP-322 verification failed - likely Electrum wallet (does not support BIP-322 for SegWit)'\n );\n } else {\n log.error(\n {\n addr,\n sigLength: sigBase64.length,\n msgLength: msg.length,\n msgPreview: msg.substring(0, 200),\n },\n 'BIP-322 verification failed - signature does not match message'\n );\n }\n }\n\n return ok ? 'sig_ok_bip322' : 'sig_invalid';\n }\n\n if (detectedScheme === 'legacy') {\n const sigBase64 = toBase64Maybe(sig);\n\n // Legacy policy: P2PKH only (address must start with '1' for mainnet or 'm'/'n' for testnet)\n if (!addr.startsWith('1') && !addr.startsWith('m') && !addr.startsWith('n')) {\n log.warn({ addr }, 'Legacy signature attempted on non-P2PKH address');\n return 'sig_unsupported_script';\n }\n\n log.debug(\n {\n addr,\n sigBase64: sigBase64.substring(0, 50) + '...',\n msgPreview: msg.substring(0, 100) + '...',\n msgLength: msg.length,\n },\n 'Verifying legacy signature'\n );\n const ok = bitcoinMessage.verify(msg, addr, sigBase64);\n log.info({ addr, ok, sigBase64Length: sigBase64.length }, 'Legacy verification result');\n if (!ok) {\n log.error(\n {\n addr,\n msgFirstLine: msg.split('\\n')[0],\n sigFormat: sigBase64.substring(0, 10),\n },\n 'Legacy signature verification failed - check message format and signature'\n );\n }\n return ok ? 'sig_ok_legacy' : 'sig_invalid';\n }\n\n return 'invalid_scheme';\n } catch (err) {\n log.error(\n { addr, error: err instanceof Error ? err.message : String(err) },\n 'Signature verification error'\n );\n return 'sig_invalid';\n }\n}\n\n// Canonical message parsing per SPEC + our builder (lowercase keys, extensions)\nexport function parseCanonicalMessage(msg: string) {\n const lines = msg.split('\\n').map((l) => l.trim());\n // `.split(':', 2)[1]` truncates values containing a colon (e.g. URLs in\n // extensions, or npubs in identities). Use the first colon as the\n // separator and keep everything after it — same approach as the\n // extensions loop below.\n const getVal = (prefix: string): string \| undefined => {\n const needle = prefix + ':';\n const hit = lines.find((l) => l.toLowerCase().startsWith(needle));\n if (!hit) return undefined;\n const idx = hit.indexOf(':');\n return hit.slice(idx + 1).trim();\n };\n\n const address = getVal('address') \|\| '';\n const identitiesStr = getVal('identities') \|\| '';\n\n // Parse identities\n let identities: IdentityBinding[] = [];\n try {\n identities = parseIdentities(identitiesStr);\n } catch (err) {\n log.warn({ identitiesStr, error: err }, 'Failed to parse identities field');\n }\n\n // Extensions: collect all key: value pairs excluding core known keys\n const coreKeys = new Set([\n 'orangecheck',\n 'identities',\n 'address',\n 'purpose',\n 'nonce',\n 'issued_at',\n 'ack',\n ]);\n const extensions: Record<string, string> = {};\n for (const line of lines) {\n const idx = line.indexOf(':');\n if (idx === -1) continue;\n const key = line.slice(0, idx).trim().toLowerCase();\n const val = line.slice(idx + 1).trim();\n if (!coreKeys.has(key) && val) extensions[key] = val;\n }\n\n const network = (extensions['network'] \|\| 'mainnet') as Network;\n\n // Parse bond extension if present (integer satoshis)\n const bondStr = extensions['bond'];\n const bond = bondStr ? parseInt(bondStr, 10) : undefined;\n\n return {\n core: { address, identities },\n network,\n extensions,\n bond: bond !== undefined && !isNaN(bond) && bond > 0 ? bond : undefined,\n };\n}\n\n/\n UTXO type from Esplora API\n /\ninterface EsploraUtxo {\n /* Transaction ID /\n txid: string;\n /* Output index /\n vout: number;\n /* Value in satoshis /\n value: number;\n /* Confirmation status /\n status: {\n /* Whether UTXO is confirmed /\n confirmed: boolean;\n /* Block height (if confirmed) /\n block_height?: number;\n /* Block timestamp (if confirmed) /\n block_time?: number;\n };\n}\n\n/\n Fetch UTXOs for an address from Esplora API\n \n Tries multiple endpoints in order with automatic fallback\n \n @param address - Bitcoin address\n * @param network - Bitcoin network\n * @param opts - Optional custom Esplora endpoints\n * @returns Array of UTXOs\n * @throws {Error} If all endpoints fail\n /\nasync function getAddressUtxos(\n address: string,\n network: Network,\n opts?: {\n esploraMainnetBase?: string;\n esploraSignetBase?: string;\n esploraTestnetBase?: string;\n }\n): Promise<EsploraUtxo[]> {\n // Define primary and fallback endpoints\n const endpoints =\n network === 'signet'\n ? [\n opts?.esploraSignetBase \|\| 'https://mempool.space/signet/api',\n 'https://blockstream.info/signet/api',\n ]\n : network === 'testnet'\n ? [\n opts?.esploraTestnetBase \|\| 'https://mempool.space/testnet/api',\n 'https://blockstream.info/testnet/api',\n ]\n : [\n opts?.esploraMainnetBase \|\| 'https://mempool.space/api',\n 'https://blockstream.info/api',\n ];\n\n let lastError: Error \| null = null;\n\n // Try each endpoint in order. Per-endpoint timeout kept tight (5s) so\n // a slow upstream doesn't stack against the next one; callers who want\n // a hard overall deadline should wrap this call with their own timeout.\n for (const base of endpoints) {\n try {\n const url = `${base}/address/${address}/utxo`;\n log.debug({ url, network }, 'Fetching UTXOs');\n\n const resp = await fetch(url, {\n method: 'GET',\n headers: { Accept: 'application/json' },\n signal: AbortSignal.timeout(5000),\n });\n\n if (!resp.ok) {\n throw new Error(`HTTP ${resp.status}`);\n }\n\n const data = await resp.json();\n\n // Validate response structure\n if (!Array.isArray(data)) {\n throw new Error('Invalid response: expected array');\n }\n\n // Validate each UTXO has required fields\n for (const utxo of data) {\n if (\n typeof utxo.value !== 'number' \|\|\n typeof utxo.status !== 'object' \|\|\n typeof utxo.status.confirmed !== 'boolean' \|\|\n typeof utxo.txid !== 'string' \|\|\n typeof utxo.vout !== 'number'\n ) {\n throw new Error('Invalid UTXO structure');\n }\n }\n\n log.info({ base, count: data.length, network }, 'UTXOs fetched successfully');\n return data as EsploraUtxo[];\n } catch (err) {\n lastError = err instanceof Error ? err : new Error(String(err));\n log.warn(\n { base, error: lastError.message, network },\n 'Esplora endpoint failed, trying next'\n );\n }\n }\n\n // All endpoints failed\n log.error({ endpoints, error: lastError?.message, network }, 'All Esplora endpoints failed');\n throw new Error(`esplora_all_failed: ${lastError?.message \|\| 'unknown'}`);\n}\n\n/\n Enhanced metrics computation per SPEC.md §5.4 and §6.1\n \n Supports bond extension with oldest-first greedy UTXO selection\n \n @param utxos - Array of UTXOs from Esplora\n * @param bondAmount - Optional bond amount (enables greedy selection)\n * @returns Computed metrics (sats_bonded, days_unspent, confirmed_balance)\n /\nfunction computeMetrics(\n utxos: EsploraUtxo[],\n bondAmount?: number\n): {\n /* Bonded satoshis (confirmed balance or bond amount) /\n sats_bonded: number;\n /* Days since oldest/youngest UTXO /\n days_unspent: number;\n /* Total confirmed balance /\n confirmed_balance: number;\n} {\n // Filter out unconfirmed UTXOs\n const confirmedUtxos = utxos.filter((u) => u.status.confirmed);\n if (confirmedUtxos.length === 0) {\n return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };\n }\n\n // Compute total confirmed balance\n const confirmed_balance = confirmedUtxos.reduce((sum, u) => sum + u.value, 0);\n\n // If bond extension is present, use oldest-first greedy algorithm\n if (bondAmount !== undefined && bondAmount > 0) {\n // Sort UTXOs by (block_height ASC, txid ASC, vout ASC) - oldest first\n const sorted = [...confirmedUtxos].sort((a, b) => {\n const heightA = a.status.block_height ?? Infinity;\n const heightB = b.status.block_height ?? Infinity;\n if (heightA !== heightB) return heightA - heightB;\n if (a.txid !== b.txid) return a.txid.localeCompare(b.txid);\n return a.vout - b.vout;\n });\n\n // Greedily select UTXOs until sum >= bond\n let sum = 0;\n let youngestTime = 0;\n for (const utxo of sorted) {\n sum += utxo.value;\n youngestTime = Math.max(youngestTime, utxo.status.block_time \|\| 0);\n if (sum >= bondAmount) break;\n }\n\n // Age is computed from the youngest UTXO in the bonded set\n const days_unspent = Math.max(\n 0,\n Math.floor((Date.now() / 1000 - youngestTime) / (24 60 * 60))\n );\n\n return {\n sats_bonded: bondAmount, // Use exactly bond amount (ignore surplus)\n days_unspent,\n confirmed_balance,\n };\n }\n\n // Default behavior (no bond extension): sum all confirmed UTXOs\n const sats_bonded = confirmed_balance;\n\n // Find the oldest confirmed UTXO for days_unspent\n const oldestTime = Math.min(\n ...confirmedUtxos.map((u) => u.status.block_time \|\| Date.now() / 1000)\n );\n const days_unspent = Math.max(0, Math.floor((Date.now() / 1000 - oldestTime) / (24 * 60 * 60)));\n\n return { sats_bonded, days_unspent, confirmed_balance };\n}\n\n/*\n Verify an OrangeCheck attestation\n \n This is the main verification function that:\n * 1. Validates the canonical message format\n * 2. Verifies the Bitcoin signature (BIP-322 or legacy)\n * 3. Fetches and analyzes UTXOs\n * 4. Computes reputation metrics\n \n @param input - Verification input (message, address, signature)\n * @param opts - Optional verification options (test mode, audience, esplora bases)\n * @returns Verification outcome with status codes and metrics\n \n @example\n * ```typescript\n * const result = await verify({\n * msg: canonicalMessage,\n * addr: 'bc1q...',\n * sig: 'AkcwRAIg...',\n * });\n \n if (result.ok) {\n * console.log('Score:', result.metrics?.score);\n * }\n * ```\n */\nexport async function verify(input: VerifyInput, opts: VerifyOptions = {}): Promise<VerifyOutcome> {\n const codes: StatusCode[] = [];\n let network: Network = 'mainnet';\n\n try {\n // Check if we have required fields\n if (!input.msg \|\| !input.addr \|\| !input.sig) {\n codes.push('bad_request');\n return { ok: false, codes, network };\n }\n\n // Parse canonical message with extensions\n const parsed = parseCanonicalMessage(input.msg);\n network = parsed.network \|\| 'mainnet';\n\n // Compute attestation ID\n const attestation_id = await generateAttestationId(input.msg);\n\n // Validate address consistency\n if (parsed.core.address !== input.addr) {\n codes.push('bad_request');\n return { ok: false, codes, network, attestation_id };\n }\n\n // Testnet/Signet policy enforcement\n if ((network === 'testnet' \|\| network === 'signet') && !opts.testMode) {\n codes.push('network_testmode');\n return { ok: false, codes, network, attestation_id };\n }\n\n // Optional policy checks for extensions.\n // `aud` binds the attestation to an origin. If the caller passed\n // `expectedAud`, the check must be load-bearing — a mismatch is a\n // phishing signal, not an advisory. Fail hard (spec-aligned).\n if (opts.expectedAud) {\n const aud = parsed.extensions['aud'];\n if (!aud \|\| aud !== opts.expectedAud) {\n codes.push('aud_mismatch');\n return { ok: false, codes, network, attestation_id };\n }\n }\n\n // Check message expiration\n if (parsed.extensions['expires']) {\n const exp = Date.parse(parsed.extensions['expires']);\n if (!Number.isNaN(exp) && exp < Date.now()) {\n codes.push('expired');\n return { ok: false, codes, network, attestation_id };\n }\n }\n\n // Enhanced signature verification\n const sigCode = await verifySignature({\n addr: input.addr,\n msg: input.msg,\n sig: input.sig,\n ...(input.scheme && { scheme: input.scheme }),\n });\n codes.push(sigCode);\n\n const sigOk = sigCode === 'sig_ok_bip322' \|\| sigCode === 'sig_ok_legacy';\n if (!sigOk) {\n return {\n ok: false,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n };\n }\n\n // Enhanced UTXO analysis and metrics computation\n try {\n const utxos = await getAddressUtxos(input.addr, network, {\n esploraMainnetBase: opts.esploraMainnetBase,\n esploraSignetBase: opts.esploraSignetBase,\n });\n\n // Compute metrics with bond extension support (SPEC.md §5.4)\n const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(\n utxos,\n parsed.bond\n );\n\n // If bond extension is present, enforce minimum balance (SPEC.md §5.4.c)\n if (parsed.bond !== undefined && parsed.bond > 0) {\n if (confirmed_balance < parsed.bond) {\n codes.push('bond_insufficient');\n log.warn(\n {\n bond: parsed.bond,\n confirmed_balance,\n address: input.addr,\n },\n 'Bond extension: insufficient balance'\n );\n return {\n ok: false,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n };\n }\n }\n\n // Analyze bond status\n if (sats_bonded <= 0) {\n codes.push('bond_zero');\n // Check for pending UTXOs\n if (utxos.some((u) => !u.status.confirmed)) {\n codes.push('bond_pending');\n }\n return {\n ok: false,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n };\n } else {\n codes.push('bond_confirmed');\n }\n\n // Compute final metrics with enhanced scoring\n const metrics: Metrics = {\n sats_bonded,\n days_unspent,\n score: (computeScore(sats_bonded, days_unspent, { algorithm: 'v0' }) as number),\n };\n\n return {\n ok: true,\n codes,\n network,\n attestation_id,\n identities: parsed.core.identities,\n metrics,\n };\n } catch (utxoError) {\n log.error({ err: utxoError }, 'UTXO fetch failed');\n codes.push('bad_request');\n return { ok: false, codes, network, attestation_id };\n }\n } catch (e: unknown) {\n const msg = e instanceof Error ? e.message : String(e ?? 'decode_error');\n if (msg === 'decode_error') {\n codes.push('decode_error');\n } else {\n codes.push('bad_request');\n }\n return { ok: false, codes, network };\n }\n}\n"]}

package/dist/verify.mjs CHANGED Viewed

@@ -154,10 +154,6 @@ async function verifySignature({
   scheme
 }) {
   try {
-    if (sig === "demo_signature") {
-      log.warn("Demo signature detected in verifySignature - should be handled by demo mode");
-      return "sig_invalid";
-    }
     const detectedScheme = scheme || detectSignatureScheme(addr, sig);
     log.debug(
       { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },
@@ -383,26 +379,6 @@ async function verify2(input, opts = {}) {
       codes.push("bad_request");
       return { ok: false, codes, network, attestation_id };
     }
-    if (opts.demoMode) {
-      const sats_bonded = 1e6;
-      const days_unspent = 90;
-      const metrics = {
-        sats_bonded,
-        days_unspent,
-        score: computeScore(sats_bonded, days_unspent, { algorithm: "v0" })
-        // ≈ 55.26
-      };
-      codes.push("sig_ok_bip322");
-      codes.push("bond_confirmed");
-      return {
-        ok: true,
-        codes,
-        network,
-        attestation_id,
-        identities: parsed.core.identities,
-        metrics
-      };
-    }
     if ((network === "testnet" || network === "signet") && !opts.testMode) {
       codes.push("network_testmode");
       return { ok: false, codes, network, attestation_id };