@thurinlabs/identity-kit 2.0.0 → 2.1.0

package/README.md

@@ -45,7 +45,7 @@ The rest, all covered in the [docs](https://docs.thurin.id/#/sdk):
 - **Proofs:** `identifyProof`, `verifyProof` (GitHub, DNS, Farcaster, Codeberg, Mastodon; a GitHub or Codeberg proof must belong to the account in its URL).
 - **Claim history:** `claimFates`, `claimFateText`, `expiresSoon`, `expiresSoonText`.
 - **Records:** `kindName`, `checkKindName`, `checkRecordValue`, `fetchRecords`, `pickRecords`, `pageRecords`, `parseRecord`, and the `thurin.releases` helpers.
-- **Permissions:** `attestTypedData`, `reattestTypedData`, `updateKeyTypedData`, `revokeTypedData`, `setRecordTypedData`, `markCompromisedTypedData`, for the registry's `…For` writes. To mark an already revoked claim compromised, sign `markCompromisedTypedData` alone.
+- **Permissions:** `attestTypedData`, `reattestTypedData`, `updateKeyTypedData`, `revokeTypedData`, `setRecordTypedData`, `markCompromisedTypedData`, for the registry's `…For` writes. To mark an already revoked claim compromised, sign `markCompromisedTypedData` alone. `permissionSigned(client, typedData, signature, owner)` judges a signed permission the way the registry does: the owner's key (EIP-7702 accounts too), else the owner account's own answer (EIP-1271, for Safes and smart-account wallets).
 - **Keys:** `parsePgpKey`, `leanKey`, `claimSignature`, `sshKeys` (SSH keys as `authorized_keys` lines), `stripEmailUserIDs`, fingerprint and key-ID helpers.
 - **Encrypt:** `encryptionKeyFor` (only the claim that counts, with a valid encryption subkey; says when the key arrived in the last 7 days), `encryptTo` (hides the recipient by default), `encryptRefusalText`, `keyChangedText`.
 - **ENS:** `fetchEnsHint`, `ensHintWrite` for the `id.thurin` record.

package/dist/{chunk-AAJWERE2.js → chunk-SGAMXZDL.js}

@@ -736,7 +736,7 @@ async function sshKeys(input) {
 }
 
 // src/core/authorization.ts
-import { hashTypedData, keccak256 as keccak2562, stringToHex } from "viem";
+import { hashTypedData, keccak256 as keccak2562, stringToHex, recoverTypedDataAddress, isErc6492Signature } from "viem";
 var EIP712_NAME = "Thurin PGPRegistry";
 var EIP712_VERSION = "3";
 function registryDomain(chainId, verifyingContract) {
@@ -862,6 +862,34 @@ function markCompromisedTypedData(chainId, registry, a) {
 function authorizationDigest(typedData) {
   return hashTypedData(typedData);
 }
+var ERC1271_MAGIC = "0x1626ba7e";
+var ERC1271_ABI = [{
+  type: "function",
+  name: "isValidSignature",
+  stateMutability: "view",
+  inputs: [{ name: "hash", type: "bytes32" }, { name: "signature", type: "bytes" }],
+  outputs: [{ name: "", type: "bytes4" }]
+}];
+async function permissionSigned(client, typedData, signature, owner) {
+  const code = await client.getCode({ address: owner }).catch(() => void 0);
+  const deployed = !!code && code !== "0x";
+  if (isErc6492Signature(signature)) {
+    return { ok: false, reason: deployed ? "This signature was made before the account was on-chain. Sign again, now that it is" : "This smart account isn't on-chain yet, so the registry can't check its signature. Send any transaction from it first (that creates it), then sign again" };
+  }
+  const signer = await recoverTypedDataAddress({ ...typedData, signature }).catch(() => void 0);
+  if (signer && signer.toLowerCase() === owner.toLowerCase()) return { ok: true };
+  if (deployed) {
+    const answer = await client.readContract({
+      address: owner,
+      abi: ERC1271_ABI,
+      functionName: "isValidSignature",
+      args: [authorizationDigest(typedData), signature]
+    }).catch(() => void 0);
+    if (answer === ERC1271_MAGIC) return { ok: true };
+    return { ok: false, reason: `The account ${owner} doesn't accept this signature as its own` };
+  }
+  return { ok: false, reason: signer ? `The signature is from ${signer}, not ${owner}` : "The signature can't be read", signer };
+}
 function recordKind(name) {
   return keccak2562(stringToHex(name));
 }
@@ -3321,6 +3349,7 @@ export {
   setRecordTypedData,
   markCompromisedTypedData,
   authorizationDigest,
+  permissionSigned,
   recordKind,
   REGISTRY_ABI,
   REGISTRY_ADDRESS,

package/dist/{chunk-DJGCYNJN.cjs → chunk-T4VPFPFP.cjs}

@@ -862,6 +862,34 @@ function markCompromisedTypedData(chainId, registry, a) {
 function authorizationDigest(typedData) {
   return _viem.hashTypedData.call(void 0, typedData);
 }
+var ERC1271_MAGIC = "0x1626ba7e";
+var ERC1271_ABI = [{
+  type: "function",
+  name: "isValidSignature",
+  stateMutability: "view",
+  inputs: [{ name: "hash", type: "bytes32" }, { name: "signature", type: "bytes" }],
+  outputs: [{ name: "", type: "bytes4" }]
+}];
+async function permissionSigned(client, typedData, signature, owner) {
+  const code = await client.getCode({ address: owner }).catch(() => void 0);
+  const deployed = !!code && code !== "0x";
+  if (_viem.isErc6492Signature.call(void 0, signature)) {
+    return { ok: false, reason: deployed ? "This signature was made before the account was on-chain. Sign again, now that it is" : "This smart account isn't on-chain yet, so the registry can't check its signature. Send any transaction from it first (that creates it), then sign again" };
+  }
+  const signer = await _viem.recoverTypedDataAddress.call(void 0, { ...typedData, signature }).catch(() => void 0);
+  if (signer && signer.toLowerCase() === owner.toLowerCase()) return { ok: true };
+  if (deployed) {
+    const answer = await client.readContract({
+      address: owner,
+      abi: ERC1271_ABI,
+      functionName: "isValidSignature",
+      args: [authorizationDigest(typedData), signature]
+    }).catch(() => void 0);
+    if (answer === ERC1271_MAGIC) return { ok: true };
+    return { ok: false, reason: `The account ${owner} doesn't accept this signature as its own` };
+  }
+  return { ok: false, reason: signer ? `The signature is from ${signer}, not ${owner}` : "The signature can't be read", signer };
+}
 function recordKind(name) {
   return _viem.keccak256.call(void 0, _viem.stringToHex.call(void 0, name));
 }
@@ -3374,4 +3402,5 @@ async function fetchEnsHint(client, name, verifiedFingerprint) {
 
 
 
-exports.normalizeFingerprint = normalizeFingerprint; exports.sameFingerprint = sameFingerprint; exports.fingerprintToBytes = fingerprintToBytes; exports.bytesToFingerprint = bytesToFingerprint; exports.fingerprintHash = fingerprintHash; exports.keyIdOf = keyIdOf; exports.keyIdToBytes = keyIdToBytes; exports.identifyProof = identifyProof; exports.displayUrl = displayUrl; exports.proofHref = proofHref; exports.proofSecondaryHref = proofSecondaryHref; exports.FARCASTER_HUB = FARCASTER_HUB; exports.verifyProof = verifyProof; exports.statementText = statementText; exports.parsePgpKey = parsePgpKey; exports.verifyClearsigned = verifyClearsigned; exports.verifyStatementSignature = verifyStatementSignature; exports.verifyAttestation = verifyAttestation; exports.stripEmailUserIDs = stripEmailUserIDs; exports.hasEmailUserID = hasEmailUserID; exports.leanKey = leanKey; exports.claimSignature = claimSignature; exports.signatureEmail = signatureEmail; exports.payloadText = payloadText; exports.sshKeys = sshKeys; exports.EIP712_NAME = EIP712_NAME; exports.EIP712_VERSION = EIP712_VERSION; exports.registryDomain = registryDomain; exports.AUTHORIZATION_TYPES = AUTHORIZATION_TYPES; exports.REVOKE_REASONS = REVOKE_REASONS; exports.OWNER_REVOKE_REASONS = OWNER_REVOKE_REASONS; exports.attestTypedData = attestTypedData; exports.reattestTypedData = reattestTypedData; exports.updateKeyTypedData = updateKeyTypedData; exports.revokeTypedData = revokeTypedData; exports.setRecordTypedData = setRecordTypedData; exports.markCompromisedTypedData = markCompromisedTypedData; exports.authorizationDigest = authorizationDigest; exports.recordKind = recordKind; exports.REGISTRY_ABI = REGISTRY_ABI; exports.REGISTRY_ADDRESS = REGISTRY_ADDRESS; exports.NETWORKS = NETWORKS; exports.isNetworkName = isNetworkName; exports.getRegistry = getRegistry; exports.chainFor = chainFor; exports.CLAIM_LIMIT = CLAIM_LIMIT; exports.readClaims = readClaims; exports.keyStanding = keyStanding; exports.findOwners = findOwners; exports.CLAIM_CHECK_LABEL = CLAIM_CHECK_LABEL; exports.formatClaimDate = formatClaimDate; exports.claimCheckText = claimCheckText; exports.keyProblemText = keyProblemText; exports.expiresSoon = expiresSoon; exports.expiresSoonText = expiresSoonText; exports.claimFates = claimFates; exports.claimFateText = claimFateText; exports.encryptionKeyFor = encryptionKeyFor; exports.encryptRefusalText = encryptRefusalText; exports.keyChangedText = keyChangedText; exports.encryptTo = encryptTo; exports.CONTRACT_ERROR_TEXT = CONTRACT_ERROR_TEXT; exports.contractErrorName = contractErrorName; exports.contractErrorText = contractErrorText; exports.MAX_RECORD_BYTES = MAX_RECORD_BYTES; exports.MAX_KIND_BYTES = MAX_KIND_BYTES; exports.kindName = kindName; exports.checkKindName = checkKindName; exports.checkRecordValue = checkRecordValue; exports.KNOWN_KINDS = KNOWN_KINDS; exports.parseReleases = parseReleases; exports.addRelease = addRelease; exports.renderReleases = renderReleases; exports.parseRecord = parseRecord; exports.pickRecords = pickRecords; exports.pageRecords = pageRecords; exports.fetchRecords = fetchRecords; exports.IPFS_GATEWAYS = IPFS_GATEWAYS; exports.IPFS_GATEWAY = IPFS_GATEWAY; exports.ARWEAVE_GATEWAY = ARWEAVE_GATEWAY; exports.avatarUrl = avatarUrl; exports.avatarFallbacks = avatarFallbacks; exports.parseNftAvatar = parseNftAvatar; exports.NFT_AVATAR_ABI = NFT_AVATAR_ABI; exports.nftAvatarImage = nftAvatarImage; exports.ENS_HINT_KEY = ENS_HINT_KEY; exports.ensHintFor = ensHintFor; exports.ensHintValue = ensHintValue; exports.ENS_TEXT_RESOLVER_ABI = ENS_TEXT_RESOLVER_ABI; exports.ensHintWrite = ensHintWrite; exports.fetchEnsHint = fetchEnsHint;
+
+exports.normalizeFingerprint = normalizeFingerprint; exports.sameFingerprint = sameFingerprint; exports.fingerprintToBytes = fingerprintToBytes; exports.bytesToFingerprint = bytesToFingerprint; exports.fingerprintHash = fingerprintHash; exports.keyIdOf = keyIdOf; exports.keyIdToBytes = keyIdToBytes; exports.identifyProof = identifyProof; exports.displayUrl = displayUrl; exports.proofHref = proofHref; exports.proofSecondaryHref = proofSecondaryHref; exports.FARCASTER_HUB = FARCASTER_HUB; exports.verifyProof = verifyProof; exports.statementText = statementText; exports.parsePgpKey = parsePgpKey; exports.verifyClearsigned = verifyClearsigned; exports.verifyStatementSignature = verifyStatementSignature; exports.verifyAttestation = verifyAttestation; exports.stripEmailUserIDs = stripEmailUserIDs; exports.hasEmailUserID = hasEmailUserID; exports.leanKey = leanKey; exports.claimSignature = claimSignature; exports.signatureEmail = signatureEmail; exports.payloadText = payloadText; exports.sshKeys = sshKeys; exports.EIP712_NAME = EIP712_NAME; exports.EIP712_VERSION = EIP712_VERSION; exports.registryDomain = registryDomain; exports.AUTHORIZATION_TYPES = AUTHORIZATION_TYPES; exports.REVOKE_REASONS = REVOKE_REASONS; exports.OWNER_REVOKE_REASONS = OWNER_REVOKE_REASONS; exports.attestTypedData = attestTypedData; exports.reattestTypedData = reattestTypedData; exports.updateKeyTypedData = updateKeyTypedData; exports.revokeTypedData = revokeTypedData; exports.setRecordTypedData = setRecordTypedData; exports.markCompromisedTypedData = markCompromisedTypedData; exports.authorizationDigest = authorizationDigest; exports.permissionSigned = permissionSigned; exports.recordKind = recordKind; exports.REGISTRY_ABI = REGISTRY_ABI; exports.REGISTRY_ADDRESS = REGISTRY_ADDRESS; exports.NETWORKS = NETWORKS; exports.isNetworkName = isNetworkName; exports.getRegistry = getRegistry; exports.chainFor = chainFor; exports.CLAIM_LIMIT = CLAIM_LIMIT; exports.readClaims = readClaims; exports.keyStanding = keyStanding; exports.findOwners = findOwners; exports.CLAIM_CHECK_LABEL = CLAIM_CHECK_LABEL; exports.formatClaimDate = formatClaimDate; exports.claimCheckText = claimCheckText; exports.keyProblemText = keyProblemText; exports.expiresSoon = expiresSoon; exports.expiresSoonText = expiresSoonText; exports.claimFates = claimFates; exports.claimFateText = claimFateText; exports.encryptionKeyFor = encryptionKeyFor; exports.encryptRefusalText = encryptRefusalText; exports.keyChangedText = keyChangedText; exports.encryptTo = encryptTo; exports.CONTRACT_ERROR_TEXT = CONTRACT_ERROR_TEXT; exports.contractErrorName = contractErrorName; exports.contractErrorText = contractErrorText; exports.MAX_RECORD_BYTES = MAX_RECORD_BYTES; exports.MAX_KIND_BYTES = MAX_KIND_BYTES; exports.kindName = kindName; exports.checkKindName = checkKindName; exports.checkRecordValue = checkRecordValue; exports.KNOWN_KINDS = KNOWN_KINDS; exports.parseReleases = parseReleases; exports.addRelease = addRelease; exports.renderReleases = renderReleases; exports.parseRecord = parseRecord; exports.pickRecords = pickRecords; exports.pageRecords = pageRecords; exports.fetchRecords = fetchRecords; exports.IPFS_GATEWAYS = IPFS_GATEWAYS; exports.IPFS_GATEWAY = IPFS_GATEWAY; exports.ARWEAVE_GATEWAY = ARWEAVE_GATEWAY; exports.avatarUrl = avatarUrl; exports.avatarFallbacks = avatarFallbacks; exports.parseNftAvatar = parseNftAvatar; exports.NFT_AVATAR_ABI = NFT_AVATAR_ABI; exports.nftAvatarImage = nftAvatarImage; exports.ENS_HINT_KEY = ENS_HINT_KEY; exports.ensHintFor = ensHintFor; exports.ensHintValue = ensHintValue; exports.ENS_TEXT_RESOLVER_ABI = ENS_TEXT_RESOLVER_ABI; exports.ensHintWrite = ensHintWrite; exports.fetchEnsHint = fetchEnsHint;

package/dist/core.cjs

@@ -90,8 +90,8 @@
 
 
 
-var _chunkDJGCYNJNcjs = require('./chunk-DJGCYNJN.cjs');
 
+var _chunkT4VPFPFPcjs = require('./chunk-T4VPFPFP.cjs');
 
 
 
@@ -183,4 +183,6 @@ var _chunkDJGCYNJNcjs = require('./chunk-DJGCYNJN.cjs');
 
 
 
-exports.ARWEAVE_GATEWAY = _chunkDJGCYNJNcjs.ARWEAVE_GATEWAY; exports.AUTHORIZATION_TYPES = _chunkDJGCYNJNcjs.AUTHORIZATION_TYPES; exports.CLAIM_CHECK_LABEL = _chunkDJGCYNJNcjs.CLAIM_CHECK_LABEL; exports.CLAIM_LIMIT = _chunkDJGCYNJNcjs.CLAIM_LIMIT; exports.CONTRACT_ERROR_TEXT = _chunkDJGCYNJNcjs.CONTRACT_ERROR_TEXT; exports.EIP712_NAME = _chunkDJGCYNJNcjs.EIP712_NAME; exports.EIP712_VERSION = _chunkDJGCYNJNcjs.EIP712_VERSION; exports.ENS_HINT_KEY = _chunkDJGCYNJNcjs.ENS_HINT_KEY; exports.ENS_TEXT_RESOLVER_ABI = _chunkDJGCYNJNcjs.ENS_TEXT_RESOLVER_ABI; exports.FARCASTER_HUB = _chunkDJGCYNJNcjs.FARCASTER_HUB; exports.IPFS_GATEWAY = _chunkDJGCYNJNcjs.IPFS_GATEWAY; exports.IPFS_GATEWAYS = _chunkDJGCYNJNcjs.IPFS_GATEWAYS; exports.KNOWN_KINDS = _chunkDJGCYNJNcjs.KNOWN_KINDS; exports.MAX_KIND_BYTES = _chunkDJGCYNJNcjs.MAX_KIND_BYTES; exports.MAX_RECORD_BYTES = _chunkDJGCYNJNcjs.MAX_RECORD_BYTES; exports.NETWORKS = _chunkDJGCYNJNcjs.NETWORKS; exports.NFT_AVATAR_ABI = _chunkDJGCYNJNcjs.NFT_AVATAR_ABI; exports.OWNER_REVOKE_REASONS = _chunkDJGCYNJNcjs.OWNER_REVOKE_REASONS; exports.REGISTRY_ABI = _chunkDJGCYNJNcjs.REGISTRY_ABI; exports.REGISTRY_ADDRESS = _chunkDJGCYNJNcjs.REGISTRY_ADDRESS; exports.REVOKE_REASONS = _chunkDJGCYNJNcjs.REVOKE_REASONS; exports.addRelease = _chunkDJGCYNJNcjs.addRelease; exports.attestTypedData = _chunkDJGCYNJNcjs.attestTypedData; exports.authorizationDigest = _chunkDJGCYNJNcjs.authorizationDigest; exports.avatarFallbacks = _chunkDJGCYNJNcjs.avatarFallbacks; exports.avatarUrl = _chunkDJGCYNJNcjs.avatarUrl; exports.bytesToFingerprint = _chunkDJGCYNJNcjs.bytesToFingerprint; exports.chainFor = _chunkDJGCYNJNcjs.chainFor; exports.checkKindName = _chunkDJGCYNJNcjs.checkKindName; exports.checkRecordValue = _chunkDJGCYNJNcjs.checkRecordValue; exports.claimCheckText = _chunkDJGCYNJNcjs.claimCheckText; exports.claimFateText = _chunkDJGCYNJNcjs.claimFateText; exports.claimFates = _chunkDJGCYNJNcjs.claimFates; exports.claimSignature = _chunkDJGCYNJNcjs.claimSignature; exports.contractErrorName = _chunkDJGCYNJNcjs.contractErrorName; exports.contractErrorText = _chunkDJGCYNJNcjs.contractErrorText; exports.displayUrl = _chunkDJGCYNJNcjs.displayUrl; exports.encryptRefusalText = _chunkDJGCYNJNcjs.encryptRefusalText; exports.encryptTo = _chunkDJGCYNJNcjs.encryptTo; exports.encryptionKeyFor = _chunkDJGCYNJNcjs.encryptionKeyFor; exports.ensHintFor = _chunkDJGCYNJNcjs.ensHintFor; exports.ensHintValue = _chunkDJGCYNJNcjs.ensHintValue; exports.ensHintWrite = _chunkDJGCYNJNcjs.ensHintWrite; exports.expiresSoon = _chunkDJGCYNJNcjs.expiresSoon; exports.expiresSoonText = _chunkDJGCYNJNcjs.expiresSoonText; exports.fetchEnsHint = _chunkDJGCYNJNcjs.fetchEnsHint; exports.fetchRecords = _chunkDJGCYNJNcjs.fetchRecords; exports.findOwners = _chunkDJGCYNJNcjs.findOwners; exports.fingerprintHash = _chunkDJGCYNJNcjs.fingerprintHash; exports.fingerprintToBytes = _chunkDJGCYNJNcjs.fingerprintToBytes; exports.formatClaimDate = _chunkDJGCYNJNcjs.formatClaimDate; exports.getRegistry = _chunkDJGCYNJNcjs.getRegistry; exports.hasEmailUserID = _chunkDJGCYNJNcjs.hasEmailUserID; exports.identifyProof = _chunkDJGCYNJNcjs.identifyProof; exports.isNetworkName = _chunkDJGCYNJNcjs.isNetworkName; exports.keyChangedText = _chunkDJGCYNJNcjs.keyChangedText; exports.keyIdOf = _chunkDJGCYNJNcjs.keyIdOf; exports.keyIdToBytes = _chunkDJGCYNJNcjs.keyIdToBytes; exports.keyProblemText = _chunkDJGCYNJNcjs.keyProblemText; exports.keyStanding = _chunkDJGCYNJNcjs.keyStanding; exports.kindName = _chunkDJGCYNJNcjs.kindName; exports.leanKey = _chunkDJGCYNJNcjs.leanKey; exports.markCompromisedTypedData = _chunkDJGCYNJNcjs.markCompromisedTypedData; exports.nftAvatarImage = _chunkDJGCYNJNcjs.nftAvatarImage; exports.normalizeFingerprint = _chunkDJGCYNJNcjs.normalizeFingerprint; exports.pageRecords = _chunkDJGCYNJNcjs.pageRecords; exports.parseNftAvatar = _chunkDJGCYNJNcjs.parseNftAvatar; exports.parsePgpKey = _chunkDJGCYNJNcjs.parsePgpKey; exports.parseRecord = _chunkDJGCYNJNcjs.parseRecord; exports.parseReleases = _chunkDJGCYNJNcjs.parseReleases; exports.payloadText = _chunkDJGCYNJNcjs.payloadText; exports.pickRecords = _chunkDJGCYNJNcjs.pickRecords; exports.proofHref = _chunkDJGCYNJNcjs.proofHref; exports.proofSecondaryHref = _chunkDJGCYNJNcjs.proofSecondaryHref; exports.readClaims = _chunkDJGCYNJNcjs.readClaims; exports.reattestTypedData = _chunkDJGCYNJNcjs.reattestTypedData; exports.recordKind = _chunkDJGCYNJNcjs.recordKind; exports.registryDomain = _chunkDJGCYNJNcjs.registryDomain; exports.renderReleases = _chunkDJGCYNJNcjs.renderReleases; exports.revokeTypedData = _chunkDJGCYNJNcjs.revokeTypedData; exports.sameFingerprint = _chunkDJGCYNJNcjs.sameFingerprint; exports.setRecordTypedData = _chunkDJGCYNJNcjs.setRecordTypedData; exports.signatureEmail = _chunkDJGCYNJNcjs.signatureEmail; exports.sshKeys = _chunkDJGCYNJNcjs.sshKeys; exports.statementText = _chunkDJGCYNJNcjs.statementText; exports.stripEmailUserIDs = _chunkDJGCYNJNcjs.stripEmailUserIDs; exports.updateKeyTypedData = _chunkDJGCYNJNcjs.updateKeyTypedData; exports.verifyAttestation = _chunkDJGCYNJNcjs.verifyAttestation; exports.verifyClearsigned = _chunkDJGCYNJNcjs.verifyClearsigned; exports.verifyProof = _chunkDJGCYNJNcjs.verifyProof; exports.verifyStatementSignature = _chunkDJGCYNJNcjs.verifyStatementSignature;
+
+
+exports.ARWEAVE_GATEWAY = _chunkT4VPFPFPcjs.ARWEAVE_GATEWAY; exports.AUTHORIZATION_TYPES = _chunkT4VPFPFPcjs.AUTHORIZATION_TYPES; exports.CLAIM_CHECK_LABEL = _chunkT4VPFPFPcjs.CLAIM_CHECK_LABEL; exports.CLAIM_LIMIT = _chunkT4VPFPFPcjs.CLAIM_LIMIT; exports.CONTRACT_ERROR_TEXT = _chunkT4VPFPFPcjs.CONTRACT_ERROR_TEXT; exports.EIP712_NAME = _chunkT4VPFPFPcjs.EIP712_NAME; exports.EIP712_VERSION = _chunkT4VPFPFPcjs.EIP712_VERSION; exports.ENS_HINT_KEY = _chunkT4VPFPFPcjs.ENS_HINT_KEY; exports.ENS_TEXT_RESOLVER_ABI = _chunkT4VPFPFPcjs.ENS_TEXT_RESOLVER_ABI; exports.FARCASTER_HUB = _chunkT4VPFPFPcjs.FARCASTER_HUB; exports.IPFS_GATEWAY = _chunkT4VPFPFPcjs.IPFS_GATEWAY; exports.IPFS_GATEWAYS = _chunkT4VPFPFPcjs.IPFS_GATEWAYS; exports.KNOWN_KINDS = _chunkT4VPFPFPcjs.KNOWN_KINDS; exports.MAX_KIND_BYTES = _chunkT4VPFPFPcjs.MAX_KIND_BYTES; exports.MAX_RECORD_BYTES = _chunkT4VPFPFPcjs.MAX_RECORD_BYTES; exports.NETWORKS = _chunkT4VPFPFPcjs.NETWORKS; exports.NFT_AVATAR_ABI = _chunkT4VPFPFPcjs.NFT_AVATAR_ABI; exports.OWNER_REVOKE_REASONS = _chunkT4VPFPFPcjs.OWNER_REVOKE_REASONS; exports.REGISTRY_ABI = _chunkT4VPFPFPcjs.REGISTRY_ABI; exports.REGISTRY_ADDRESS = _chunkT4VPFPFPcjs.REGISTRY_ADDRESS; exports.REVOKE_REASONS = _chunkT4VPFPFPcjs.REVOKE_REASONS; exports.addRelease = _chunkT4VPFPFPcjs.addRelease; exports.attestTypedData = _chunkT4VPFPFPcjs.attestTypedData; exports.authorizationDigest = _chunkT4VPFPFPcjs.authorizationDigest; exports.avatarFallbacks = _chunkT4VPFPFPcjs.avatarFallbacks; exports.avatarUrl = _chunkT4VPFPFPcjs.avatarUrl; exports.bytesToFingerprint = _chunkT4VPFPFPcjs.bytesToFingerprint; exports.chainFor = _chunkT4VPFPFPcjs.chainFor; exports.checkKindName = _chunkT4VPFPFPcjs.checkKindName; exports.checkRecordValue = _chunkT4VPFPFPcjs.checkRecordValue; exports.claimCheckText = _chunkT4VPFPFPcjs.claimCheckText; exports.claimFateText = _chunkT4VPFPFPcjs.claimFateText; exports.claimFates = _chunkT4VPFPFPcjs.claimFates; exports.claimSignature = _chunkT4VPFPFPcjs.claimSignature; exports.contractErrorName = _chunkT4VPFPFPcjs.contractErrorName; exports.contractErrorText = _chunkT4VPFPFPcjs.contractErrorText; exports.displayUrl = _chunkT4VPFPFPcjs.displayUrl; exports.encryptRefusalText = _chunkT4VPFPFPcjs.encryptRefusalText; exports.encryptTo = _chunkT4VPFPFPcjs.encryptTo; exports.encryptionKeyFor = _chunkT4VPFPFPcjs.encryptionKeyFor; exports.ensHintFor = _chunkT4VPFPFPcjs.ensHintFor; exports.ensHintValue = _chunkT4VPFPFPcjs.ensHintValue; exports.ensHintWrite = _chunkT4VPFPFPcjs.ensHintWrite; exports.expiresSoon = _chunkT4VPFPFPcjs.expiresSoon; exports.expiresSoonText = _chunkT4VPFPFPcjs.expiresSoonText; exports.fetchEnsHint = _chunkT4VPFPFPcjs.fetchEnsHint; exports.fetchRecords = _chunkT4VPFPFPcjs.fetchRecords; exports.findOwners = _chunkT4VPFPFPcjs.findOwners; exports.fingerprintHash = _chunkT4VPFPFPcjs.fingerprintHash; exports.fingerprintToBytes = _chunkT4VPFPFPcjs.fingerprintToBytes; exports.formatClaimDate = _chunkT4VPFPFPcjs.formatClaimDate; exports.getRegistry = _chunkT4VPFPFPcjs.getRegistry; exports.hasEmailUserID = _chunkT4VPFPFPcjs.hasEmailUserID; exports.identifyProof = _chunkT4VPFPFPcjs.identifyProof; exports.isNetworkName = _chunkT4VPFPFPcjs.isNetworkName; exports.keyChangedText = _chunkT4VPFPFPcjs.keyChangedText; exports.keyIdOf = _chunkT4VPFPFPcjs.keyIdOf; exports.keyIdToBytes = _chunkT4VPFPFPcjs.keyIdToBytes; exports.keyProblemText = _chunkT4VPFPFPcjs.keyProblemText; exports.keyStanding = _chunkT4VPFPFPcjs.keyStanding; exports.kindName = _chunkT4VPFPFPcjs.kindName; exports.leanKey = _chunkT4VPFPFPcjs.leanKey; exports.markCompromisedTypedData = _chunkT4VPFPFPcjs.markCompromisedTypedData; exports.nftAvatarImage = _chunkT4VPFPFPcjs.nftAvatarImage; exports.normalizeFingerprint = _chunkT4VPFPFPcjs.normalizeFingerprint; exports.pageRecords = _chunkT4VPFPFPcjs.pageRecords; exports.parseNftAvatar = _chunkT4VPFPFPcjs.parseNftAvatar; exports.parsePgpKey = _chunkT4VPFPFPcjs.parsePgpKey; exports.parseRecord = _chunkT4VPFPFPcjs.parseRecord; exports.parseReleases = _chunkT4VPFPFPcjs.parseReleases; exports.payloadText = _chunkT4VPFPFPcjs.payloadText; exports.permissionSigned = _chunkT4VPFPFPcjs.permissionSigned; exports.pickRecords = _chunkT4VPFPFPcjs.pickRecords; exports.proofHref = _chunkT4VPFPFPcjs.proofHref; exports.proofSecondaryHref = _chunkT4VPFPFPcjs.proofSecondaryHref; exports.readClaims = _chunkT4VPFPFPcjs.readClaims; exports.reattestTypedData = _chunkT4VPFPFPcjs.reattestTypedData; exports.recordKind = _chunkT4VPFPFPcjs.recordKind; exports.registryDomain = _chunkT4VPFPFPcjs.registryDomain; exports.renderReleases = _chunkT4VPFPFPcjs.renderReleases; exports.revokeTypedData = _chunkT4VPFPFPcjs.revokeTypedData; exports.sameFingerprint = _chunkT4VPFPFPcjs.sameFingerprint; exports.setRecordTypedData = _chunkT4VPFPFPcjs.setRecordTypedData; exports.signatureEmail = _chunkT4VPFPFPcjs.signatureEmail; exports.sshKeys = _chunkT4VPFPFPcjs.sshKeys; exports.statementText = _chunkT4VPFPFPcjs.statementText; exports.stripEmailUserIDs = _chunkT4VPFPFPcjs.stripEmailUserIDs; exports.updateKeyTypedData = _chunkT4VPFPFPcjs.updateKeyTypedData; exports.verifyAttestation = _chunkT4VPFPFPcjs.verifyAttestation; exports.verifyClearsigned = _chunkT4VPFPFPcjs.verifyClearsigned; exports.verifyProof = _chunkT4VPFPFPcjs.verifyProof; exports.verifyStatementSignature = _chunkT4VPFPFPcjs.verifyStatementSignature;

package/dist/core.d.cts

@@ -579,6 +579,28 @@ declare function markCompromisedTypedData(chainId: number, registry: Hex, a: Mar
 };
 /** The digest the registry recovers the signer from. */
 declare function authorizationDigest(typedData: ReturnType<typeof attestTypedData | typeof reattestTypedData | typeof updateKeyTypedData | typeof revokeTypedData | typeof setRecordTypedData | typeof markCompromisedTypedData>): Hex;
+/** Any client with viem's `getCode` and `readContract` (a viem PublicClient, or a stub in tests). */
+interface PermissionReader {
+    getCode(args: {
+        address: Hex;
+    }): Promise<Hex | undefined>;
+    readContract(args: any): Promise<unknown>;
+}
+type PermissionCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+    signer?: Hex;
+};
+/**
+ * Is `signature` a permission from `owner`? Judged the way the registry judges it: a plain signature
+ * from the owner's key (any address, EIP-7702 accounts included), else, for an account with code (a
+ * Safe, a smart-account wallet), the account's own answer (EIP-1271). An ERC-6492 signature (from an
+ * account not on-chain yet) is refused with the reason: the registry asks the deployed account.
+ * `signer` is set when a plain signature came from someone else.
+ */
+declare function permissionSigned(client: PermissionReader, typedData: Parameters<typeof authorizationDigest>[0], signature: Hex, owner: Hex): Promise<PermissionCheck>;
 /** The hash the registry indexes a record name by (the `kindHash` in `RecordSet` events). */
 declare function recordKind(name: string): Hex;
 
@@ -2076,14 +2098,17 @@ declare function chainFor(network?: NetworkName): {
         };
     };
     sourceId?: number | undefined | undefined;
+    supportsTransactionReplacementDetection?: boolean | undefined | undefined;
     testnet: true;
     custom?: Record<string, unknown> | undefined;
     extendSchema?: Record<string, unknown> | undefined;
     fees?: viem.ChainFees<undefined> | undefined;
     formatters?: undefined;
     prepareTransactionRequest?: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | [fn: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | undefined, options: {
         runAt: readonly ("beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters")[];
@@ -2129,14 +2154,17 @@ declare function chainFor(network?: NetworkName): {
         };
     };
     sourceId?: number | undefined | undefined;
+    supportsTransactionReplacementDetection?: boolean | undefined | undefined;
     testnet?: boolean | undefined | undefined;
     custom?: Record<string, unknown> | undefined;
     extendSchema?: Record<string, unknown> | undefined;
     fees?: viem.ChainFees<undefined> | undefined;
     formatters?: undefined;
     prepareTransactionRequest?: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | [fn: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | undefined, options: {
         runAt: readonly ("beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters")[];
@@ -2173,18 +2201,21 @@ declare function chainFor(network?: NetworkName): {
     experimental_preconfirmationTime?: number | undefined | undefined;
     rpcUrls: {
         readonly default: {
-            readonly http: readonly ["https://eth.merkle.io"];
+            readonly http: readonly ["https://ethereum.reth.rs/rpc"];
         };
     };
     sourceId?: number | undefined | undefined;
+    supportsTransactionReplacementDetection?: boolean | undefined | undefined;
     testnet?: boolean | undefined | undefined;
     custom?: Record<string, unknown> | undefined;
     extendSchema?: Record<string, unknown> | undefined;
     fees?: viem.ChainFees<undefined> | undefined;
     formatters?: undefined;
     prepareTransactionRequest?: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | [fn: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | undefined, options: {
         runAt: readonly ("beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters")[];
@@ -2618,4 +2649,4 @@ interface EnsTextReader {
 /** Read a name's `id.thurin` record and compare it with the verified fingerprint. */
 declare function fetchEnsHint(client: EnsTextReader, name: string, verifiedFingerprint: string | null | undefined): Promise<EnsHint>;
 
-export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, type AttestAuthorization, type Attestation, type AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, type ClaimCheckKind, type ClaimCheckText, type ClaimFate, type ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, type EncryptRefusal, type EncryptionKey, type EncryptionKeyResult, type EnsHint, type EnsHintState, type EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, type KeyStanding, type KnownKind, type LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, type MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, type NetworkName, type NftAvatar, type Notation, OWNER_REVOKE_REASONS, type PGPKeyInfo, type PGPVerification, type ParsedRecord, type PgpInput, type Proof, type ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, type ReattestAuthorization, type RecordData, type RecordReader, type RegistryDeployment, type ReleaseEntry, type ReleasesRecord, type RevokeAuthorization, type RevokeReason, type SetRecordAuthorization, type SshKey, type StrippedKey, type SubkeyInfo, type UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature };
+export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, type AttestAuthorization, type Attestation, type AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, type ClaimCheckKind, type ClaimCheckText, type ClaimFate, type ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, type EncryptRefusal, type EncryptionKey, type EncryptionKeyResult, type EnsHint, type EnsHintState, type EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, type KeyStanding, type KnownKind, type LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, type MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, type NetworkName, type NftAvatar, type Notation, OWNER_REVOKE_REASONS, type PGPKeyInfo, type PGPVerification, type ParsedRecord, type PermissionCheck, type PermissionReader, type PgpInput, type Proof, type ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, type ReattestAuthorization, type RecordData, type RecordReader, type RegistryDeployment, type ReleaseEntry, type ReleasesRecord, type RevokeAuthorization, type RevokeReason, type SetRecordAuthorization, type SshKey, type StrippedKey, type SubkeyInfo, type UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, permissionSigned, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature };

package/dist/core.d.ts

@@ -579,6 +579,28 @@ declare function markCompromisedTypedData(chainId: number, registry: Hex, a: Mar
 };
 /** The digest the registry recovers the signer from. */
 declare function authorizationDigest(typedData: ReturnType<typeof attestTypedData | typeof reattestTypedData | typeof updateKeyTypedData | typeof revokeTypedData | typeof setRecordTypedData | typeof markCompromisedTypedData>): Hex;
+/** Any client with viem's `getCode` and `readContract` (a viem PublicClient, or a stub in tests). */
+interface PermissionReader {
+    getCode(args: {
+        address: Hex;
+    }): Promise<Hex | undefined>;
+    readContract(args: any): Promise<unknown>;
+}
+type PermissionCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+    signer?: Hex;
+};
+/**
+ * Is `signature` a permission from `owner`? Judged the way the registry judges it: a plain signature
+ * from the owner's key (any address, EIP-7702 accounts included), else, for an account with code (a
+ * Safe, a smart-account wallet), the account's own answer (EIP-1271). An ERC-6492 signature (from an
+ * account not on-chain yet) is refused with the reason: the registry asks the deployed account.
+ * `signer` is set when a plain signature came from someone else.
+ */
+declare function permissionSigned(client: PermissionReader, typedData: Parameters<typeof authorizationDigest>[0], signature: Hex, owner: Hex): Promise<PermissionCheck>;
 /** The hash the registry indexes a record name by (the `kindHash` in `RecordSet` events). */
 declare function recordKind(name: string): Hex;
 
@@ -2076,14 +2098,17 @@ declare function chainFor(network?: NetworkName): {
         };
     };
     sourceId?: number | undefined | undefined;
+    supportsTransactionReplacementDetection?: boolean | undefined | undefined;
     testnet: true;
     custom?: Record<string, unknown> | undefined;
     extendSchema?: Record<string, unknown> | undefined;
     fees?: viem.ChainFees<undefined> | undefined;
     formatters?: undefined;
     prepareTransactionRequest?: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | [fn: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | undefined, options: {
         runAt: readonly ("beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters")[];
@@ -2129,14 +2154,17 @@ declare function chainFor(network?: NetworkName): {
         };
     };
     sourceId?: number | undefined | undefined;
+    supportsTransactionReplacementDetection?: boolean | undefined | undefined;
     testnet?: boolean | undefined | undefined;
     custom?: Record<string, unknown> | undefined;
     extendSchema?: Record<string, unknown> | undefined;
     fees?: viem.ChainFees<undefined> | undefined;
     formatters?: undefined;
     prepareTransactionRequest?: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | [fn: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | undefined, options: {
         runAt: readonly ("beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters")[];
@@ -2173,18 +2201,21 @@ declare function chainFor(network?: NetworkName): {
     experimental_preconfirmationTime?: number | undefined | undefined;
     rpcUrls: {
         readonly default: {
-            readonly http: readonly ["https://eth.merkle.io"];
+            readonly http: readonly ["https://ethereum.reth.rs/rpc"];
         };
     };
     sourceId?: number | undefined | undefined;
+    supportsTransactionReplacementDetection?: boolean | undefined | undefined;
     testnet?: boolean | undefined | undefined;
     custom?: Record<string, unknown> | undefined;
     extendSchema?: Record<string, unknown> | undefined;
     fees?: viem.ChainFees<undefined> | undefined;
     formatters?: undefined;
     prepareTransactionRequest?: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | [fn: ((args: viem.PrepareTransactionRequestParameters, options: {
+        client: viem.Client;
         phase: "beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters";
     }) => Promise<viem.PrepareTransactionRequestParameters>) | undefined, options: {
         runAt: readonly ("beforeFillTransaction" | "beforeFillParameters" | "afterFillParameters")[];
@@ -2618,4 +2649,4 @@ interface EnsTextReader {
 /** Read a name's `id.thurin` record and compare it with the verified fingerprint. */
 declare function fetchEnsHint(client: EnsTextReader, name: string, verifiedFingerprint: string | null | undefined): Promise<EnsHint>;
 
-export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, type AttestAuthorization, type Attestation, type AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, type ClaimCheckKind, type ClaimCheckText, type ClaimFate, type ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, type EncryptRefusal, type EncryptionKey, type EncryptionKeyResult, type EnsHint, type EnsHintState, type EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, type KeyStanding, type KnownKind, type LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, type MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, type NetworkName, type NftAvatar, type Notation, OWNER_REVOKE_REASONS, type PGPKeyInfo, type PGPVerification, type ParsedRecord, type PgpInput, type Proof, type ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, type ReattestAuthorization, type RecordData, type RecordReader, type RegistryDeployment, type ReleaseEntry, type ReleasesRecord, type RevokeAuthorization, type RevokeReason, type SetRecordAuthorization, type SshKey, type StrippedKey, type SubkeyInfo, type UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature };
+export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, type AttestAuthorization, type Attestation, type AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, type ClaimCheckKind, type ClaimCheckText, type ClaimFate, type ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, type EncryptRefusal, type EncryptionKey, type EncryptionKeyResult, type EnsHint, type EnsHintState, type EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, type KeyStanding, type KnownKind, type LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, type MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, type NetworkName, type NftAvatar, type Notation, OWNER_REVOKE_REASONS, type PGPKeyInfo, type PGPVerification, type ParsedRecord, type PermissionCheck, type PermissionReader, type PgpInput, type Proof, type ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, type ReattestAuthorization, type RecordData, type RecordReader, type RegistryDeployment, type ReleaseEntry, type ReleasesRecord, type RevokeAuthorization, type RevokeReason, type SetRecordAuthorization, type SshKey, type StrippedKey, type SubkeyInfo, type UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, permissionSigned, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature };

package/dist/core.js

@@ -70,6 +70,7 @@ import {
   parseRecord,
   parseReleases,
   payloadText,
+  permissionSigned,
   pickRecords,
   proofHref,
   proofSecondaryHref,
@@ -90,7 +91,7 @@ import {
   verifyClearsigned,
   verifyProof,
   verifyStatementSignature
-} from "./chunk-AAJWERE2.js";
+} from "./chunk-SGAMXZDL.js";
 export {
   ARWEAVE_GATEWAY,
   AUTHORIZATION_TYPES,
@@ -163,6 +164,7 @@ export {
   parseRecord,
   parseReleases,
   payloadText,
+  permissionSigned,
   pickRecords,
   proofHref,
   proofSecondaryHref,

package/dist/index.cjs

@@ -90,8 +90,8 @@
 
 
 
-var _chunkDJGCYNJNcjs = require('./chunk-DJGCYNJN.cjs');
 
+var _chunkT4VPFPFPcjs = require('./chunk-T4VPFPFP.cjs');
 
 
 
@@ -183,4 +183,6 @@ var _chunkDJGCYNJNcjs = require('./chunk-DJGCYNJN.cjs');
 
 
 
-exports.ARWEAVE_GATEWAY = _chunkDJGCYNJNcjs.ARWEAVE_GATEWAY; exports.AUTHORIZATION_TYPES = _chunkDJGCYNJNcjs.AUTHORIZATION_TYPES; exports.CLAIM_CHECK_LABEL = _chunkDJGCYNJNcjs.CLAIM_CHECK_LABEL; exports.CLAIM_LIMIT = _chunkDJGCYNJNcjs.CLAIM_LIMIT; exports.CONTRACT_ERROR_TEXT = _chunkDJGCYNJNcjs.CONTRACT_ERROR_TEXT; exports.EIP712_NAME = _chunkDJGCYNJNcjs.EIP712_NAME; exports.EIP712_VERSION = _chunkDJGCYNJNcjs.EIP712_VERSION; exports.ENS_HINT_KEY = _chunkDJGCYNJNcjs.ENS_HINT_KEY; exports.ENS_TEXT_RESOLVER_ABI = _chunkDJGCYNJNcjs.ENS_TEXT_RESOLVER_ABI; exports.FARCASTER_HUB = _chunkDJGCYNJNcjs.FARCASTER_HUB; exports.IPFS_GATEWAY = _chunkDJGCYNJNcjs.IPFS_GATEWAY; exports.IPFS_GATEWAYS = _chunkDJGCYNJNcjs.IPFS_GATEWAYS; exports.KNOWN_KINDS = _chunkDJGCYNJNcjs.KNOWN_KINDS; exports.MAX_KIND_BYTES = _chunkDJGCYNJNcjs.MAX_KIND_BYTES; exports.MAX_RECORD_BYTES = _chunkDJGCYNJNcjs.MAX_RECORD_BYTES; exports.NETWORKS = _chunkDJGCYNJNcjs.NETWORKS; exports.NFT_AVATAR_ABI = _chunkDJGCYNJNcjs.NFT_AVATAR_ABI; exports.OWNER_REVOKE_REASONS = _chunkDJGCYNJNcjs.OWNER_REVOKE_REASONS; exports.REGISTRY_ABI = _chunkDJGCYNJNcjs.REGISTRY_ABI; exports.REGISTRY_ADDRESS = _chunkDJGCYNJNcjs.REGISTRY_ADDRESS; exports.REVOKE_REASONS = _chunkDJGCYNJNcjs.REVOKE_REASONS; exports.addRelease = _chunkDJGCYNJNcjs.addRelease; exports.attestTypedData = _chunkDJGCYNJNcjs.attestTypedData; exports.authorizationDigest = _chunkDJGCYNJNcjs.authorizationDigest; exports.avatarFallbacks = _chunkDJGCYNJNcjs.avatarFallbacks; exports.avatarUrl = _chunkDJGCYNJNcjs.avatarUrl; exports.bytesToFingerprint = _chunkDJGCYNJNcjs.bytesToFingerprint; exports.chainFor = _chunkDJGCYNJNcjs.chainFor; exports.checkKindName = _chunkDJGCYNJNcjs.checkKindName; exports.checkRecordValue = _chunkDJGCYNJNcjs.checkRecordValue; exports.claimCheckText = _chunkDJGCYNJNcjs.claimCheckText; exports.claimFateText = _chunkDJGCYNJNcjs.claimFateText; exports.claimFates = _chunkDJGCYNJNcjs.claimFates; exports.claimSignature = _chunkDJGCYNJNcjs.claimSignature; exports.contractErrorName = _chunkDJGCYNJNcjs.contractErrorName; exports.contractErrorText = _chunkDJGCYNJNcjs.contractErrorText; exports.displayUrl = _chunkDJGCYNJNcjs.displayUrl; exports.encryptRefusalText = _chunkDJGCYNJNcjs.encryptRefusalText; exports.encryptTo = _chunkDJGCYNJNcjs.encryptTo; exports.encryptionKeyFor = _chunkDJGCYNJNcjs.encryptionKeyFor; exports.ensHintFor = _chunkDJGCYNJNcjs.ensHintFor; exports.ensHintValue = _chunkDJGCYNJNcjs.ensHintValue; exports.ensHintWrite = _chunkDJGCYNJNcjs.ensHintWrite; exports.expiresSoon = _chunkDJGCYNJNcjs.expiresSoon; exports.expiresSoonText = _chunkDJGCYNJNcjs.expiresSoonText; exports.fetchEnsHint = _chunkDJGCYNJNcjs.fetchEnsHint; exports.fetchRecords = _chunkDJGCYNJNcjs.fetchRecords; exports.findOwners = _chunkDJGCYNJNcjs.findOwners; exports.fingerprintHash = _chunkDJGCYNJNcjs.fingerprintHash; exports.fingerprintToBytes = _chunkDJGCYNJNcjs.fingerprintToBytes; exports.formatClaimDate = _chunkDJGCYNJNcjs.formatClaimDate; exports.getRegistry = _chunkDJGCYNJNcjs.getRegistry; exports.hasEmailUserID = _chunkDJGCYNJNcjs.hasEmailUserID; exports.identifyProof = _chunkDJGCYNJNcjs.identifyProof; exports.isNetworkName = _chunkDJGCYNJNcjs.isNetworkName; exports.keyChangedText = _chunkDJGCYNJNcjs.keyChangedText; exports.keyIdOf = _chunkDJGCYNJNcjs.keyIdOf; exports.keyIdToBytes = _chunkDJGCYNJNcjs.keyIdToBytes; exports.keyProblemText = _chunkDJGCYNJNcjs.keyProblemText; exports.keyStanding = _chunkDJGCYNJNcjs.keyStanding; exports.kindName = _chunkDJGCYNJNcjs.kindName; exports.leanKey = _chunkDJGCYNJNcjs.leanKey; exports.markCompromisedTypedData = _chunkDJGCYNJNcjs.markCompromisedTypedData; exports.nftAvatarImage = _chunkDJGCYNJNcjs.nftAvatarImage; exports.normalizeFingerprint = _chunkDJGCYNJNcjs.normalizeFingerprint; exports.pageRecords = _chunkDJGCYNJNcjs.pageRecords; exports.parseNftAvatar = _chunkDJGCYNJNcjs.parseNftAvatar; exports.parsePgpKey = _chunkDJGCYNJNcjs.parsePgpKey; exports.parseRecord = _chunkDJGCYNJNcjs.parseRecord; exports.parseReleases = _chunkDJGCYNJNcjs.parseReleases; exports.payloadText = _chunkDJGCYNJNcjs.payloadText; exports.pickRecords = _chunkDJGCYNJNcjs.pickRecords; exports.proofHref = _chunkDJGCYNJNcjs.proofHref; exports.proofSecondaryHref = _chunkDJGCYNJNcjs.proofSecondaryHref; exports.readClaims = _chunkDJGCYNJNcjs.readClaims; exports.reattestTypedData = _chunkDJGCYNJNcjs.reattestTypedData; exports.recordKind = _chunkDJGCYNJNcjs.recordKind; exports.registryDomain = _chunkDJGCYNJNcjs.registryDomain; exports.renderReleases = _chunkDJGCYNJNcjs.renderReleases; exports.revokeTypedData = _chunkDJGCYNJNcjs.revokeTypedData; exports.sameFingerprint = _chunkDJGCYNJNcjs.sameFingerprint; exports.setRecordTypedData = _chunkDJGCYNJNcjs.setRecordTypedData; exports.signatureEmail = _chunkDJGCYNJNcjs.signatureEmail; exports.sshKeys = _chunkDJGCYNJNcjs.sshKeys; exports.statementText = _chunkDJGCYNJNcjs.statementText; exports.stripEmailUserIDs = _chunkDJGCYNJNcjs.stripEmailUserIDs; exports.updateKeyTypedData = _chunkDJGCYNJNcjs.updateKeyTypedData; exports.verifyAttestation = _chunkDJGCYNJNcjs.verifyAttestation; exports.verifyClearsigned = _chunkDJGCYNJNcjs.verifyClearsigned; exports.verifyProof = _chunkDJGCYNJNcjs.verifyProof; exports.verifyStatementSignature = _chunkDJGCYNJNcjs.verifyStatementSignature;
+
+
+exports.ARWEAVE_GATEWAY = _chunkT4VPFPFPcjs.ARWEAVE_GATEWAY; exports.AUTHORIZATION_TYPES = _chunkT4VPFPFPcjs.AUTHORIZATION_TYPES; exports.CLAIM_CHECK_LABEL = _chunkT4VPFPFPcjs.CLAIM_CHECK_LABEL; exports.CLAIM_LIMIT = _chunkT4VPFPFPcjs.CLAIM_LIMIT; exports.CONTRACT_ERROR_TEXT = _chunkT4VPFPFPcjs.CONTRACT_ERROR_TEXT; exports.EIP712_NAME = _chunkT4VPFPFPcjs.EIP712_NAME; exports.EIP712_VERSION = _chunkT4VPFPFPcjs.EIP712_VERSION; exports.ENS_HINT_KEY = _chunkT4VPFPFPcjs.ENS_HINT_KEY; exports.ENS_TEXT_RESOLVER_ABI = _chunkT4VPFPFPcjs.ENS_TEXT_RESOLVER_ABI; exports.FARCASTER_HUB = _chunkT4VPFPFPcjs.FARCASTER_HUB; exports.IPFS_GATEWAY = _chunkT4VPFPFPcjs.IPFS_GATEWAY; exports.IPFS_GATEWAYS = _chunkT4VPFPFPcjs.IPFS_GATEWAYS; exports.KNOWN_KINDS = _chunkT4VPFPFPcjs.KNOWN_KINDS; exports.MAX_KIND_BYTES = _chunkT4VPFPFPcjs.MAX_KIND_BYTES; exports.MAX_RECORD_BYTES = _chunkT4VPFPFPcjs.MAX_RECORD_BYTES; exports.NETWORKS = _chunkT4VPFPFPcjs.NETWORKS; exports.NFT_AVATAR_ABI = _chunkT4VPFPFPcjs.NFT_AVATAR_ABI; exports.OWNER_REVOKE_REASONS = _chunkT4VPFPFPcjs.OWNER_REVOKE_REASONS; exports.REGISTRY_ABI = _chunkT4VPFPFPcjs.REGISTRY_ABI; exports.REGISTRY_ADDRESS = _chunkT4VPFPFPcjs.REGISTRY_ADDRESS; exports.REVOKE_REASONS = _chunkT4VPFPFPcjs.REVOKE_REASONS; exports.addRelease = _chunkT4VPFPFPcjs.addRelease; exports.attestTypedData = _chunkT4VPFPFPcjs.attestTypedData; exports.authorizationDigest = _chunkT4VPFPFPcjs.authorizationDigest; exports.avatarFallbacks = _chunkT4VPFPFPcjs.avatarFallbacks; exports.avatarUrl = _chunkT4VPFPFPcjs.avatarUrl; exports.bytesToFingerprint = _chunkT4VPFPFPcjs.bytesToFingerprint; exports.chainFor = _chunkT4VPFPFPcjs.chainFor; exports.checkKindName = _chunkT4VPFPFPcjs.checkKindName; exports.checkRecordValue = _chunkT4VPFPFPcjs.checkRecordValue; exports.claimCheckText = _chunkT4VPFPFPcjs.claimCheckText; exports.claimFateText = _chunkT4VPFPFPcjs.claimFateText; exports.claimFates = _chunkT4VPFPFPcjs.claimFates; exports.claimSignature = _chunkT4VPFPFPcjs.claimSignature; exports.contractErrorName = _chunkT4VPFPFPcjs.contractErrorName; exports.contractErrorText = _chunkT4VPFPFPcjs.contractErrorText; exports.displayUrl = _chunkT4VPFPFPcjs.displayUrl; exports.encryptRefusalText = _chunkT4VPFPFPcjs.encryptRefusalText; exports.encryptTo = _chunkT4VPFPFPcjs.encryptTo; exports.encryptionKeyFor = _chunkT4VPFPFPcjs.encryptionKeyFor; exports.ensHintFor = _chunkT4VPFPFPcjs.ensHintFor; exports.ensHintValue = _chunkT4VPFPFPcjs.ensHintValue; exports.ensHintWrite = _chunkT4VPFPFPcjs.ensHintWrite; exports.expiresSoon = _chunkT4VPFPFPcjs.expiresSoon; exports.expiresSoonText = _chunkT4VPFPFPcjs.expiresSoonText; exports.fetchEnsHint = _chunkT4VPFPFPcjs.fetchEnsHint; exports.fetchRecords = _chunkT4VPFPFPcjs.fetchRecords; exports.findOwners = _chunkT4VPFPFPcjs.findOwners; exports.fingerprintHash = _chunkT4VPFPFPcjs.fingerprintHash; exports.fingerprintToBytes = _chunkT4VPFPFPcjs.fingerprintToBytes; exports.formatClaimDate = _chunkT4VPFPFPcjs.formatClaimDate; exports.getRegistry = _chunkT4VPFPFPcjs.getRegistry; exports.hasEmailUserID = _chunkT4VPFPFPcjs.hasEmailUserID; exports.identifyProof = _chunkT4VPFPFPcjs.identifyProof; exports.isNetworkName = _chunkT4VPFPFPcjs.isNetworkName; exports.keyChangedText = _chunkT4VPFPFPcjs.keyChangedText; exports.keyIdOf = _chunkT4VPFPFPcjs.keyIdOf; exports.keyIdToBytes = _chunkT4VPFPFPcjs.keyIdToBytes; exports.keyProblemText = _chunkT4VPFPFPcjs.keyProblemText; exports.keyStanding = _chunkT4VPFPFPcjs.keyStanding; exports.kindName = _chunkT4VPFPFPcjs.kindName; exports.leanKey = _chunkT4VPFPFPcjs.leanKey; exports.markCompromisedTypedData = _chunkT4VPFPFPcjs.markCompromisedTypedData; exports.nftAvatarImage = _chunkT4VPFPFPcjs.nftAvatarImage; exports.normalizeFingerprint = _chunkT4VPFPFPcjs.normalizeFingerprint; exports.pageRecords = _chunkT4VPFPFPcjs.pageRecords; exports.parseNftAvatar = _chunkT4VPFPFPcjs.parseNftAvatar; exports.parsePgpKey = _chunkT4VPFPFPcjs.parsePgpKey; exports.parseRecord = _chunkT4VPFPFPcjs.parseRecord; exports.parseReleases = _chunkT4VPFPFPcjs.parseReleases; exports.payloadText = _chunkT4VPFPFPcjs.payloadText; exports.permissionSigned = _chunkT4VPFPFPcjs.permissionSigned; exports.pickRecords = _chunkT4VPFPFPcjs.pickRecords; exports.proofHref = _chunkT4VPFPFPcjs.proofHref; exports.proofSecondaryHref = _chunkT4VPFPFPcjs.proofSecondaryHref; exports.readClaims = _chunkT4VPFPFPcjs.readClaims; exports.reattestTypedData = _chunkT4VPFPFPcjs.reattestTypedData; exports.recordKind = _chunkT4VPFPFPcjs.recordKind; exports.registryDomain = _chunkT4VPFPFPcjs.registryDomain; exports.renderReleases = _chunkT4VPFPFPcjs.renderReleases; exports.revokeTypedData = _chunkT4VPFPFPcjs.revokeTypedData; exports.sameFingerprint = _chunkT4VPFPFPcjs.sameFingerprint; exports.setRecordTypedData = _chunkT4VPFPFPcjs.setRecordTypedData; exports.signatureEmail = _chunkT4VPFPFPcjs.signatureEmail; exports.sshKeys = _chunkT4VPFPFPcjs.sshKeys; exports.statementText = _chunkT4VPFPFPcjs.statementText; exports.stripEmailUserIDs = _chunkT4VPFPFPcjs.stripEmailUserIDs; exports.updateKeyTypedData = _chunkT4VPFPFPcjs.updateKeyTypedData; exports.verifyAttestation = _chunkT4VPFPFPcjs.verifyAttestation; exports.verifyClearsigned = _chunkT4VPFPFPcjs.verifyClearsigned; exports.verifyProof = _chunkT4VPFPFPcjs.verifyProof; exports.verifyStatementSignature = _chunkT4VPFPFPcjs.verifyStatementSignature;

package/dist/index.d.cts

@@ -1,2 +1,2 @@
-export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, AttestAuthorization, Attestation, AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, ClaimCheckKind, ClaimCheckText, ClaimFate, ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, EncryptRefusal, EncryptionKey, EncryptionKeyResult, EnsHint, EnsHintState, EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, KeyStanding, KnownKind, LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, NetworkName, NftAvatar, Notation, OWNER_REVOKE_REASONS, PGPKeyInfo, PGPVerification, ParsedRecord, PgpInput, Proof, ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, ReattestAuthorization, RecordData, RecordReader, RegistryDeployment, ReleaseEntry, ReleasesRecord, RevokeAuthorization, RevokeReason, SetRecordAuthorization, SshKey, StrippedKey, SubkeyInfo, UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature } from './core.cjs';
+export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, AttestAuthorization, Attestation, AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, ClaimCheckKind, ClaimCheckText, ClaimFate, ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, EncryptRefusal, EncryptionKey, EncryptionKeyResult, EnsHint, EnsHintState, EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, KeyStanding, KnownKind, LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, NetworkName, NftAvatar, Notation, OWNER_REVOKE_REASONS, PGPKeyInfo, PGPVerification, ParsedRecord, PermissionCheck, PermissionReader, PgpInput, Proof, ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, ReattestAuthorization, RecordData, RecordReader, RegistryDeployment, ReleaseEntry, ReleasesRecord, RevokeAuthorization, RevokeReason, SetRecordAuthorization, SshKey, StrippedKey, SubkeyInfo, UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, permissionSigned, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature } from './core.cjs';
 import 'viem';

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, AttestAuthorization, Attestation, AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, ClaimCheckKind, ClaimCheckText, ClaimFate, ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, EncryptRefusal, EncryptionKey, EncryptionKeyResult, EnsHint, EnsHintState, EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, KeyStanding, KnownKind, LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, NetworkName, NftAvatar, Notation, OWNER_REVOKE_REASONS, PGPKeyInfo, PGPVerification, ParsedRecord, PgpInput, Proof, ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, ReattestAuthorization, RecordData, RecordReader, RegistryDeployment, ReleaseEntry, ReleasesRecord, RevokeAuthorization, RevokeReason, SetRecordAuthorization, SshKey, StrippedKey, SubkeyInfo, UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature } from './core.js';
+export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, AttestAuthorization, Attestation, AuthorizationAction, CLAIM_CHECK_LABEL, CLAIM_LIMIT, CONTRACT_ERROR_TEXT, ClaimCheckKind, ClaimCheckText, ClaimFate, ClaimReader, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, EncryptRefusal, EncryptionKey, EncryptionKeyResult, EnsHint, EnsHintState, EnsTextReader, FARCASTER_HUB, IPFS_GATEWAY, IPFS_GATEWAYS, KNOWN_KINDS, KeyStanding, KnownKind, LeanKey, MAX_KIND_BYTES, MAX_RECORD_BYTES, MarkCompromisedAuthorization, NETWORKS, NFT_AVATAR_ABI, NetworkName, NftAvatar, Notation, OWNER_REVOKE_REASONS, PGPKeyInfo, PGPVerification, ParsedRecord, PermissionCheck, PermissionReader, PgpInput, Proof, ProofOptions, REGISTRY_ABI, REGISTRY_ADDRESS, REVOKE_REASONS, ReattestAuthorization, RecordData, RecordReader, RegistryDeployment, ReleaseEntry, ReleasesRecord, RevokeAuthorization, RevokeReason, SetRecordAuthorization, SshKey, StrippedKey, SubkeyInfo, UpdateKeyAuthorization, addRelease, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, checkKindName, checkRecordValue, claimCheckText, claimFateText, claimFates, claimSignature, contractErrorName, contractErrorText, displayUrl, encryptRefusalText, encryptTo, encryptionKeyFor, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEnsHint, fetchRecords, findOwners, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, isNetworkName, keyChangedText, keyIdOf, keyIdToBytes, keyProblemText, keyStanding, kindName, leanKey, markCompromisedTypedData, nftAvatarImage, normalizeFingerprint, pageRecords, parseNftAvatar, parsePgpKey, parseRecord, parseReleases, payloadText, permissionSigned, pickRecords, proofHref, proofSecondaryHref, readClaims, reattestTypedData, recordKind, registryDomain, renderReleases, revokeTypedData, sameFingerprint, setRecordTypedData, signatureEmail, sshKeys, statementText, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof, verifyStatementSignature } from './core.js';
 import 'viem';

package/dist/index.js

@@ -70,6 +70,7 @@ import {
   parseRecord,
   parseReleases,
   payloadText,
+  permissionSigned,
   pickRecords,
   proofHref,
   proofSecondaryHref,
@@ -90,7 +91,7 @@ import {
   verifyClearsigned,
   verifyProof,
   verifyStatementSignature
-} from "./chunk-AAJWERE2.js";
+} from "./chunk-SGAMXZDL.js";
 export {
   ARWEAVE_GATEWAY,
   AUTHORIZATION_TYPES,
@@ -163,6 +164,7 @@ export {
   parseRecord,
   parseReleases,
   payloadText,
+  permissionSigned,
   pickRecords,
   proofHref,
   proofSecondaryHref,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thurinlabs/identity-kit",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Check Thurin.id claims (PGP keys on Ethereum addresses) in Node, workers, or the browser",
   "repository": {
     "type": "git",
@@ -47,7 +47,8 @@
     "tsup": "^8.0.0",
     "typescript": "^5.5.0",
     "viem": "^2.21.0",
-    "vitest": "^2.0.0"
+    "vite": "^8.3.1",
+    "vitest": "^5.0.2"
   },
   "license": "MIT"
 }