@peac/protocol 0.15.0 → 0.15.2

package/dist/verify-local-wire01.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-local-wire01.d.ts","sourceRoot":"","sources":["../src/verify-local-wire01.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAA0B,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAwB,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEnG;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAChC;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,KAAK,CAAC;IACnB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,cAAc,EAAE,mBAAmB,CAAC;CACrC,GACD;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,wBAAwB,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,KAAK,CAAC;IACnB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,cAAc,EAAE,mBAAmB,CAAC;CACrC,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,GAAG,kBAAkB,CAAC;AAoDpF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,UAAU,EACrB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAqNlC"}
+{"version":3,"file":"verify-local-wire01.d.ts","sourceRoot":"","sources":["../src/verify-local-wire01.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAA0B,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAwB,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEnG;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAChC;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,KAAK,CAAC;IACnB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,cAAc,EAAE,mBAAmB,CAAC;CACrC,GACD;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,wBAAwB,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,KAAK,CAAC;IACnB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,cAAc,EAAE,mBAAmB,CAAC;CACrC,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,GAAG,kBAAkB,CAAC;AAoDpF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,UAAU,EACrB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAmOlC"}

package/dist/verify-local.cjs

@@ -864,6 +864,18 @@ function readLegacyPathFlag(options) {
   const env = process.env;
   return env?.PEAC_INTERNAL_LEGACY_PATH === "1";
 }
+var ED25519_SIGNATURE_BYTES = 64;
+function ed25519SignatureByteLength(jws) {
+  const parts = jws.split(".");
+  if (parts.length !== 3) {
+    return null;
+  }
+  try {
+    return crypto.base64urlDecode(parts[2]).length;
+  } catch {
+    return null;
+  }
+}
 
 // src/_internal/shadow-observe.ts
 function realObservationForVerifyLocalSuccess(warnings) {
@@ -1194,11 +1206,18 @@ async function verifyLocal(jws, publicKey, options = {}) {
         message: `Invalid receipt payload: ${syntaxMessage}`
       };
     }
-    const message = err instanceof Error ? err.message : String(err);
+    const signatureBytes = ed25519SignatureByteLength(jws);
+    if (signatureBytes !== null && signatureBytes !== ED25519_SIGNATURE_BYTES) {
+      return {
+        valid: false,
+        code: "E_INVALID_SIGNATURE",
+        message: "Ed25519 signature has invalid length"
+      };
+    }
     return {
       valid: false,
       code: "E_INTERNAL",
-      message: `Unexpected verification error: ${message}`
+      message: "Unexpected verification error."
     };
   }
 }