did-beta-bch 3.1.0 → 3.1.1

package/dist/bip47.js

@@ -32,10 +32,14 @@ function base58Decode(s) {
             throw new Error(`Invalid Base58 character: ${c}`);
         n = n * 58n + BigInt(d);
     }
-    const hex = n.toString(16).padStart(PC_TOTAL_BYTES * 2, "0");
-    const bytes = new Uint8Array(hex.length / 2);
-    for (let i = 0; i < bytes.length; i++)
-        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    // Compute minimum byte length needed to represent n
+    let byteLen = 0;
+    let tmp = n;
+    while (tmp > 0n) {
+        byteLen++;
+        tmp >>= 8n;
+    }
+    // Count leading '1's (each = a leading zero byte)
     let leading = 0;
     for (const c of s) {
         if (c === "1")
@@ -43,9 +47,14 @@ function base58Decode(s) {
         else
             break;
     }
-    const result = new Uint8Array(leading + bytes.length);
-    result.set(bytes, leading);
-    return result;
+    const totalLen = leading + byteLen;
+    if (totalLen !== PC_TOTAL_BYTES)
+        throw new Error(`Invalid payment code length: ${totalLen}`);
+    const hex = n.toString(16).padStart(byteLen * 2, "0");
+    const bytes = new Uint8Array(PC_TOTAL_BYTES);
+    for (let i = 0; i < byteLen; i++)
+        bytes[leading + i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    return bytes;
 }
 async function sha256Once(data) {
     if (typeof crypto !== "undefined" && crypto.subtle)

package/dist/verify.js

@@ -8,6 +8,8 @@ import { BCH_PROOF_FORMAT, normalizeBchMessageSignature, } from "./signing.js";
 export const NOSTR_CHALLENGE_KIND = 27235;
 /** Encode n as a Bitcoin CompactSize integer. */
 export function encodeBitcoinCompactSize(n) {
+    if (!Number.isSafeInteger(n) || n < 0)
+        throw new RangeError("CompactSize value must be a non-negative safe integer");
     if (n < 0xfd)
         return new Uint8Array([n]);
     const value = BigInt(n);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "did-beta-bch",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Decentralised identity protocol binding BCH addresses to Nostr public keys",
   "type": "module",
   "main": "./dist/index.js",