nostr-contact-card 0.2.0

package/LICENCE

@@ -0,0 +1,21 @@
+MIT Licence
+
+Copyright (c) 2026 ForgeSworn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,115 @@
+# nostr-contact-card
+
+[![CI](https://github.com/forgesworn/nostr-contact-card/actions/workflows/ci.yml/badge.svg)](https://github.com/forgesworn/nostr-contact-card/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/nostr-contact-card)](https://www.npmjs.com/package/nostr-contact-card)
+[![licence: MIT](https://img.shields.io/badge/licence-MIT-blue.svg)](./LICENCE)
+[![GitHub Sponsors](https://img.shields.io/github/sponsors/TheCryptoDonkey?logo=githubsponsors&color=ea4aaa&label=Sponsor)](https://github.com/sponsors/TheCryptoDonkey)
+
+**One QR or link that makes a stranger a contact, names their box, and starts a bond.**
+
+A contact card is a small signed JSON object carried after `#` in a link or
+as the whole of a QR code. It holds a person's key and name, their public
+relays, their box (a Link address card, carried opaquely, that the person's
+signature endorses), a rendezvous key and a fresh ephemeral for deriving
+private rendezvous material, an optional attestation pointer, and a bond
+handshake so an in-person ceremony can start from the card.
+
+Reading a card needs nothing from the network: five checks, in order, and
+the result names the step that failed so the client can say why. What comes
+back is rebuilt from the fields the draft names, each checked; an extra key
+on the wire never reaches the caller under a verified signature. Dialling
+the box afterwards is on the person's own word; a later fresh address from
+the box is accepted only under the node id they endorsed, which the client
+pins from the first read (the Link card inside a contact card lasts seven
+days, the card itself thirty, so a client keeps the node id it read).
+
+```ts
+import { buildCard, cardLink, readCard, refreshBox } from 'nostr-contact-card'
+
+const card = buildCard({ identityPrivateKey, rz, ephemeralPrivateKey, name: 'Ada', relays, boxes: [box], bond })
+const link = cardLink('https://your.app/join', card)     // the server never sees the fragment
+
+const r = readCard(scannedText, now())
+if (!r.ok) show(r.step, r.reason)
+else { addContact(r.card.p, r.card.name); for (const b of r.boxes) dial(b.link, b.box.p) }
+
+const fresh = refreshBox(pinnedNodeId, freshLinkCardBytes, now(), highestSerialSeen)
+```
+
+Vectors in `vectors/contact-card.json` are the draft's known-answer file:
+cards failing at each step, extra-key, format-character, surrogate,
+byte-order-mark, empty-field and expiry-window cases, and refresh cases
+including a small-order node id and a nonce point carrying torsion. A
+second implementation, written from the draft alone, must agree on every
+one; the vectors carry the expected `ok` and step, and a verifier that
+disagrees on either is wrong.
+
+## What a card carries
+
+More than two keys: the person's key `p`, their rendezvous key `rz`, a
+fresh ephemeral, each box's key and Link node id (and so its onion
+address), a display name, and a bond nonce that is a bearer secret for the
+card's life: whoever holds the link can start the ceremony. The fragment
+never reaches the server, but it does sit in browser history, clipboards,
+chat logs and photographs of QR codes. Hand a card to the person it is
+for.
+
+Whoever holds it cannot derive rendezvous material from it, because the
+derivation (in nostr-deaddrop) needs the reader's own secret or the
+ephemeral's private half, and a card carries neither. It is never
+identity: the box still decides admission, and a bond still needs the
+ceremony.
+
+## Security notes
+
+- `readCard` returns only the named fields, every hex field lower-cased
+  (bond and persona keys included), bond canonicalised. Names, display
+  names and persona labels pass `isGoodName`: 1 to 100 code points, at
+  least one visible, no control, surrogate, unassigned or private-use
+  character, no separator but an ordinary space and none at the ends, no
+  invisible or direction-changing format character, no run of five
+  combining marks; the joiners and tag characters emoji need are allowed
+  only beside a pictographic character. Empty strings are refused, because
+  an empty name or attest would hash the same as none.
+- The wire is decoded as strict UTF-8: a byte sequence that is not UTF-8,
+  or a leading byte-order mark, is not a card. Nothing decodes to U+FFFD.
+- Link cards are verified as libsodium and ed25519-dalek's `verify_strict`
+  do: canonical encodings only (no ZIP-215), a node id or nonce point of
+  small order refused, `S` below the group order, and the cofactorless
+  equation `[S]B = R + [k]A`. noble's own `verify` multiplies by the
+  cofactor and would accept a node id or nonce carrying torsion that a
+  strict verifier refuses, so the check is done by hand (`verifyStrict`).
+- Relay hints and card relays pass `isRelayUrl`: `wss://`, a URL with a
+  DNS name or IP literal as host, no credentials, no fragment, no comma, no
+  unprintable character, no byte-order mark. Onion hints are a 56-character
+  base32 host with a non-zero port. An ephemeral hint (kind 0x04) has a
+  compressed-point prefix. Kind 0x02 and unknown kinds come back in `hints`
+  exactly as the box wrote them; only `relays` and `onions` are checked
+  views. A serial above 2^53 is refused under rule 3, before the signature.
+- `now` must be a finite number of seconds and `highestSerial` an integer
+  or absent. Anything else fails closed; it never switches a check off.
+- Hex case is normalised and base64url padding tolerated, so one card has
+  several wire forms; so does any JSON re-serialisation. Anything that
+  caches or deduplicates on the encoded string must key on the card's
+  fields, not its bytes.
+- The size cap applies to the card, not the link it rides on. A contact
+  card's `issued` may be up to 300 seconds ahead of `now`, and `expires`
+  must be after `issued`.
+- Replay protection for a box's fresh Link cards is rule 8, and rule 8
+  needs the highest serial this client accepted for that node id. The
+  library pins nothing: persist `link.serial` per node id and pass it to
+  `refreshBox`; without it any unexpired old card of the same node is
+  accepted.
+
+## What remains
+
+In the profile's own words, from its table of what remains: a card is
+trusted on first use. An impostor who hands you a card is an impostor
+you have a contact for; what narrows that is not in this library but in
+how many independent channels confirm the key, shown as a count and never
+as a score, and a bond ceremony spoken live. Whoever holds a card holds
+its bond nonce, a bearer secret for the card's life.
+
+## Licence
+
+MIT. ForgeSworn.

package/dist/card.d.ts

@@ -0,0 +1,128 @@
+import { type LinkCard } from './link-card.js';
+export declare const CARD_DOMAIN = "nostr-contact-card:v1";
+export declare const MAX_CARD_BYTES: number;
+export declare const MAX_AGE_SECONDS: number;
+export declare const MAX_RELAYS = 8;
+export declare const MAX_BOXES = 4;
+/** Longest name, display name or persona label, in code points. */
+export declare const MAX_NAME = 100;
+export declare const MAX_PERSONAS = 16;
+export interface BondHandshake {
+    v?: 1;
+    pubkey: string;
+    displayName?: string;
+    nonce: string;
+    personas?: {
+        pubkey: string;
+        label?: string;
+    }[];
+}
+export interface Box {
+    /** The box's own key, x-only hex. */
+    p: string;
+    /** The box's binding event id, where the box publishes one. */
+    claim: string;
+    /** FSL-CARD-1, base64url without padding, carried opaquely. */
+    card: string;
+    carriers?: string[];
+}
+export interface UnsignedCard {
+    v: 1;
+    p: string;
+    rz: string;
+    name?: string;
+    issued: number;
+    expires: number;
+    relays: string[];
+    boxes: Box[];
+    eph: string;
+    attest?: string;
+    bond?: BondHandshake;
+}
+export interface Card extends UnsignedCard {
+    sig: string;
+}
+/**
+ * A name, display name or persona label a person will see: 1 to 100 code
+ * points, at least one visible one, no control, surrogate, unassigned or
+ * private-use character, no separator other than an ordinary space and none
+ * of those at the ends, no invisible or direction-changing format character,
+ * no run of five combining marks. The format characters emoji sequences use
+ * (the zero-width joiner and the tag characters) are allowed only beside a
+ * pictographic character, so a family or a flag reads and a hidden joiner
+ * does not.
+ */
+export declare function isGoodName(s: unknown): s is string;
+/**
+ * A bond handshake with only the fields the draft names, each checked, in
+ * canonical key order. Throws with a `handshake:` message on anything else.
+ */
+export declare function cleanBond(p: unknown): BondHandshake;
+/** The canonical bytes of a bond handshake: fixed key order, no whitespace, absent keys omitted. */
+export declare function handshakeBytes(p: BondHandshake): Uint8Array;
+/**
+ * §2 of the draft: the digest the card's signature covers. Fields are
+ * colon-joined; every field that could carry a separator is constrained by
+ * `readCard` step 2 (relays no comma, box cards base64url, carriers a
+ * short token alphabet and never an empty list, attest no colon, and no
+ * empty name or attest, which would hash the same as absence) so no two
+ * well-formed cards share a digest.
+ */
+export declare function cardDigest(c: UnsignedCard): Uint8Array;
+export interface BuildOptions {
+    identityPrivateKey: Uint8Array;
+    /** The rendezvous public key, a child of the root, x-only hex. */
+    rz: string;
+    /** A fresh ephemeral secret for this card; its public half goes on the card. */
+    ephemeralPrivateKey: Uint8Array;
+    name?: string;
+    relays?: string[];
+    boxes?: Box[];
+    attest?: string;
+    bond?: Omit<BondHandshake, 'v'>;
+    /** Card lifetime in seconds, at most 30 days. */
+    ttlSeconds?: number;
+    now?: () => number;
+}
+/** Build and sign a card. Throws when it would not fit or would not verify. */
+export declare function buildCard(o: BuildOptions): Card;
+export declare function encodeCard(card: Card): string;
+/** A link a person can send: the card rides after `#`, so no server sees it. */
+export declare function cardLink(base: string, card: Card): string;
+export interface ReadOk {
+    ok: true;
+    /** Only the fields the draft names, each checked; nothing else from the wire survives. */
+    card: Card;
+    /** Each box with its verified Link card; the node id is the one `p` endorsed. */
+    boxes: {
+        box: Box;
+        link: LinkCard;
+    }[];
+}
+export type ReadResult = ReadOk | {
+    ok: false;
+    step: 1 | 2 | 3 | 4 | 5;
+    reason: string;
+};
+/**
+ * §3 steps 1 to 5. The result names the step that failed, for the words a
+ * client shows. The card returned is rebuilt from the fields the draft
+ * names: an extra key on the wire, `__proto__` included, never reaches the
+ * caller under a verified signature.
+ */
+export declare function readCard(encoded: string, now: number): ReadResult;
+/**
+ * §3 step 6: accept a fresh Link card from a box only under the node id the
+ * person endorsed. Pass the highest serial previously accepted for that node
+ * id, persisted by the caller; without it any unexpired old card of the same
+ * node replays, which is rule 8's job to stop and this function cannot do
+ * alone.
+ */
+export declare function refreshBox(pinnedNodeId: string | Uint8Array, freshCard: Uint8Array, now: number, highestSerial?: number): {
+    ok: true;
+    link: LinkCard;
+} | {
+    ok: false;
+    reason: string;
+};
+//# sourceMappingURL=card.d.ts.map

package/dist/card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.d.ts","sourceRoot":"","sources":["../src/card.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8B,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAE1E,eAAO,MAAM,WAAW,0BAA0B,CAAA;AAClD,eAAO,MAAM,cAAc,QAAY,CAAA;AACvC,eAAO,MAAM,eAAe,QAAiB,CAAA;AAC7C,eAAO,MAAM,UAAU,IAAI,CAAA;AAC3B,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,mEAAmE;AACnE,eAAO,MAAM,QAAQ,MAAM,CAAA;AAC3B,eAAO,MAAM,YAAY,KAAK,CAAA;AAE9B,MAAM,WAAW,aAAa;IAC5B,CAAC,CAAC,EAAE,CAAC,CAAA;IACL,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAChD;AAED,MAAM,WAAW,GAAG;IAClB,qCAAqC;IACrC,CAAC,EAAE,MAAM,CAAA;IACT,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAA;IACb,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,CAAC,CAAA;IACJ,CAAC,EAAE,MAAM,CAAA;IACT,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,EAAE,GAAG,EAAE,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,aAAa,CAAA;CACrB;AACD,MAAM,WAAW,IAAK,SAAQ,YAAY;IAAG,GAAG,EAAE,MAAM,CAAA;CAAE;AAqB1D;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAkBlD;AAID;;;GAGG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,GAAG,aAAa,CAqBnD;AAED,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAO3D;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,YAAY,GAAG,UAAU,CAMtD;AAED,MAAM,WAAW,YAAY;IAC3B,kBAAkB,EAAE,UAAU,CAAA;IAC9B,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAA;IACV,gFAAgF;IAChF,mBAAmB,EAAE,UAAU,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,CAAC,EAAE,GAAG,EAAE,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;IAC/B,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,CAAC,EAAE,YAAY,GAAG,IAAI,CAuB/C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAE7C;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,CAEzD;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAA;IACR,0FAA0F;IAC1F,IAAI,EAAE,IAAI,CAAA;IACV,iFAAiF;IACjF,KAAK,EAAE;QAAE,GAAG,EAAE,GAAG,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAA;CACtC;AACD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAExF;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAiEjE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOtL"}

package/dist/card.js

@@ -0,0 +1,293 @@
+import { schnorr } from '@noble/curves/secp256k1.js';
+import { base64urlnopad } from '@scure/base';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';
+import { verifyLinkCard, isRelayUrl } from './link-card.js';
+export const CARD_DOMAIN = 'nostr-contact-card:v1';
+export const MAX_CARD_BYTES = 16 * 1024;
+export const MAX_AGE_SECONDS = 30 * 24 * 3600;
+export const MAX_RELAYS = 8;
+export const MAX_BOXES = 4;
+/** Longest name, display name or persona label, in code points. */
+export const MAX_NAME = 100;
+export const MAX_PERSONAS = 16;
+const HEX64 = /^[0-9a-f]{64}$/, HEX128 = /^[0-9a-f]{128}$/, HEX32 = /^[0-9a-f]{32}$/;
+const B64URL = /^[A-Za-z0-9_-]+$/;
+const CARRIER = /^[A-Za-z0-9._-]{1,32}$/;
+/** What no text field may carry: control, surrogate, unassigned, private-use, line and paragraph separators. */
+const UNPRINTABLE = /[\p{Cc}\p{Cs}\p{Cn}\p{Co}\p{Zl}\p{Zp}]/u;
+/** Invisible and direction-changing format characters that spoof a name; the format characters emoji need are handled apart. */
+const INVISIBLE = /[\u200B\u200C\u200E\u200F\u202A-\u202E\u2060-\u2064\u2066-\u2069\uFEFF\u00AD\u061C\u180E]/u;
+const VISIBLE = /[\p{L}\p{N}\p{S}\p{P}]/u;
+const MARK_RUN = /\p{M}{5}/u;
+const PICTOGRAPHIC = /\p{Extended_Pictographic}/u;
+// base64url without padding, as the draft specifies; @scure/base is the
+// same family as the curves and hashes and runs in a browser.
+const b64url = {
+    encode: (b) => base64urlnopad.encode(b),
+    decode: (s) => base64urlnopad.decode(s.replace(/=+$/, '')),
+};
+const sha256hex = (b) => bytesToHex(sha256(b));
+const utf8Strict = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true });
+/**
+ * A name, display name or persona label a person will see: 1 to 100 code
+ * points, at least one visible one, no control, surrogate, unassigned or
+ * private-use character, no separator other than an ordinary space and none
+ * of those at the ends, no invisible or direction-changing format character,
+ * no run of five combining marks. The format characters emoji sequences use
+ * (the zero-width joiner and the tag characters) are allowed only beside a
+ * pictographic character, so a family or a flag reads and a hidden joiner
+ * does not.
+ */
+export function isGoodName(s) {
+    if (typeof s !== 'string')
+        return false;
+    const cps = [...s];
+    if (cps.length === 0 || cps.length > MAX_NAME)
+        return false;
+    if (UNPRINTABLE.test(s) || INVISIBLE.test(s) || MARK_RUN.test(s) || !VISIBLE.test(s))
+        return false;
+    if (s.startsWith(' ') || s.endsWith(' '))
+        return false;
+    for (let i = 0; i < cps.length; i++) {
+        const c = cps[i];
+        const code = c.codePointAt(0);
+        if (/\p{Zs}/u.test(c) && c !== ' ')
+            return false;
+        if (/\p{Cf}/u.test(c)) {
+            const near = (cps[i - 1] ?? '') + (cps[i + 1] ?? '');
+            if (code === 0x200d && PICTOGRAPHIC.test(near))
+                continue;
+            if (code >= 0xe0020 && code <= 0xe007f && PICTOGRAPHIC.test(cps.slice(Math.max(0, i - 8), i).join('')))
+                continue;
+            return false;
+        }
+    }
+    return true;
+}
+const goodText = isGoodName;
+/**
+ * A bond handshake with only the fields the draft names, each checked, in
+ * canonical key order. Throws with a `handshake:` message on anything else.
+ */
+export function cleanBond(p) {
+    if (!p || typeof p !== 'object' || Array.isArray(p))
+        throw new Error('handshake: not an object');
+    const h = p;
+    if (h.v !== undefined && h.v !== 1)
+        throw new Error('handshake: v must be 1');
+    const pubkey = typeof h.pubkey === 'string' ? h.pubkey.toLowerCase() : '';
+    const nonce = typeof h.nonce === 'string' ? h.nonce.toLowerCase() : '';
+    if (!HEX64.test(pubkey))
+        throw new Error('handshake: pubkey must be 64 hex chars');
+    if (!HEX32.test(nonce))
+        throw new Error('handshake: nonce must be 32 hex chars');
+    if (h.displayName !== undefined && !goodText(h.displayName))
+        throw new Error('handshake: displayName');
+    const out = { v: 1, pubkey, nonce };
+    if (h.displayName !== undefined)
+        out.displayName = h.displayName;
+    if (h.personas !== undefined) {
+        if (!Array.isArray(h.personas) || h.personas.length > MAX_PERSONAS)
+            throw new Error('handshake: personas');
+        out.personas = h.personas.map((x) => {
+            const pk = x && typeof x === 'object' && typeof x.pubkey === 'string' ? x.pubkey.toLowerCase() : '';
+            if (!HEX64.test(pk))
+                throw new Error('handshake: persona pubkey');
+            if (x.label !== undefined && !goodText(x.label))
+                throw new Error('handshake: persona label');
+            return x.label !== undefined ? { pubkey: pk, label: x.label } : { pubkey: pk };
+        });
+    }
+    return out;
+}
+/** The canonical bytes of a bond handshake: fixed key order, no whitespace, absent keys omitted. */
+export function handshakeBytes(p) {
+    const c = cleanBond(p);
+    const o = { v: 1, pubkey: c.pubkey };
+    if (c.displayName !== undefined)
+        o.displayName = c.displayName;
+    o.nonce = c.nonce;
+    if (c.personas !== undefined)
+        o.personas = c.personas;
+    return utf8ToBytes(JSON.stringify(o));
+}
+/**
+ * §2 of the draft: the digest the card's signature covers. Fields are
+ * colon-joined; every field that could carry a separator is constrained by
+ * `readCard` step 2 (relays no comma, box cards base64url, carriers a
+ * short token alphabet and never an empty list, attest no colon, and no
+ * empty name or attest, which would hash the same as absence) so no two
+ * well-formed cards share a digest.
+ */
+export function cardDigest(c) {
+    const box = (b) => `${b.p}/${b.claim}/${b.card}/${(b.carriers ?? []).join('+')}`;
+    const s = [CARD_DOMAIN, c.p, c.rz, String(c.issued), String(c.expires), c.eph,
+        c.relays.join(','), c.boxes.map(box).join(','), c.attest ?? '',
+        c.bond ? sha256hex(handshakeBytes(c.bond)) : '', sha256hex(utf8ToBytes(c.name ?? ''))].join(':');
+    return sha256(utf8ToBytes(s));
+}
+/** Build and sign a card. Throws when it would not fit or would not verify. */
+export function buildCard(o) {
+    const now = (o.now ?? (() => Math.floor(Date.now() / 1000)))();
+    const ttl = o.ttlSeconds ?? MAX_AGE_SECONDS;
+    if (ttl <= 0 || ttl > MAX_AGE_SECONDS)
+        throw new Error('ttl must be within 30 days');
+    const unsigned = {
+        v: 1,
+        p: bytesToHex(schnorr.getPublicKey(o.identityPrivateKey)),
+        rz: o.rz,
+        ...(o.name !== undefined ? { name: o.name } : {}),
+        issued: now,
+        expires: now + ttl,
+        relays: o.relays ?? [],
+        boxes: o.boxes ?? [],
+        eph: bytesToHex(schnorr.getPublicKey(o.ephemeralPrivateKey)),
+        ...(o.attest !== undefined ? { attest: o.attest } : {}),
+        ...(o.bond !== undefined ? { bond: cleanBond({ v: 1, ...o.bond }) } : {}),
+    };
+    const card = { ...unsigned, sig: bytesToHex(schnorr.sign(cardDigest(unsigned), o.identityPrivateKey)) };
+    const encoded = encodeCard(card);
+    if (encoded.length > MAX_CARD_BYTES)
+        throw new Error('card exceeds 16 KiB; drop a box');
+    const r = readCard(encoded, now);
+    if (!r.ok)
+        throw new Error(`built a card that does not read: step ${r.step} ${r.reason}`);
+    return card;
+}
+export function encodeCard(card) {
+    return b64url.encode(utf8ToBytes(JSON.stringify(card)));
+}
+/** A link a person can send: the card rides after `#`, so no server sees it. */
+export function cardLink(base, card) {
+    return `${base.replace(/#.*$/, '')}#${encodeCard(card)}`;
+}
+/**
+ * §3 steps 1 to 5. The result names the step that failed, for the words a
+ * client shows. The card returned is rebuilt from the fields the draft
+ * names: an extra key on the wire, `__proto__` included, never reaches the
+ * caller under a verified signature.
+ */
+export function readCard(encoded, now) {
+    if (typeof encoded !== 'string')
+        return { ok: false, step: 1, reason: 'size' };
+    const body = encoded.slice(encoded.lastIndexOf('#') + 1);
+    if (body.length === 0 || body.length > MAX_CARD_BYTES)
+        return { ok: false, step: 1, reason: 'size' };
+    if (!Number.isFinite(now))
+        return { ok: false, step: 3, reason: 'clock' };
+    let c;
+    // Strict UTF-8: a byte sequence that is not UTF-8 is not a card, not a card with U+FFFD in it.
+    try {
+        c = JSON.parse(utf8Strict.decode(b64url.decode(body)));
+    }
+    catch {
+        return { ok: false, step: 1, reason: 'decode' };
+    }
+    if (!c || typeof c !== 'object' || Array.isArray(c) || c.v !== 1)
+        return { ok: false, step: 1, reason: 'version' };
+    const hex = { p: '', rz: '', eph: '' };
+    for (const f of ['p', 'rz', 'eph']) {
+        if (typeof c[f] !== 'string')
+            return { ok: false, step: 2, reason: f };
+        hex[f] = c[f].toLowerCase();
+        if (!HEX64.test(hex[f]))
+            return { ok: false, step: 2, reason: f };
+    }
+    if (typeof c.sig !== 'string')
+        return { ok: false, step: 2, reason: 'sig' };
+    const sig = c.sig.toLowerCase();
+    if (!HEX128.test(sig))
+        return { ok: false, step: 2, reason: 'sig' };
+    if (c.name !== undefined && !goodText(c.name))
+        return { ok: false, step: 2, reason: 'name' };
+    if (!Array.isArray(c.relays) || c.relays.length > MAX_RELAYS || c.relays.some((r) => !isRelayUrl(r)))
+        return { ok: false, step: 2, reason: 'relays' };
+    if (!Array.isArray(c.boxes) || c.boxes.length > MAX_BOXES)
+        return { ok: false, step: 2, reason: 'boxes' };
+    const boxesClean = [];
+    for (const b of c.boxes) {
+        if (!b || typeof b !== 'object' || Array.isArray(b))
+            return { ok: false, step: 2, reason: 'box' };
+        const p = typeof b.p === 'string' ? b.p.toLowerCase() : '';
+        const claim = typeof b.claim === 'string' ? b.claim.toLowerCase() : '';
+        if (!HEX64.test(p))
+            return { ok: false, step: 2, reason: 'box p' };
+        if (!HEX64.test(claim))
+            return { ok: false, step: 2, reason: 'box claim' };
+        if (typeof b.card !== 'string' || !B64URL.test(b.card))
+            return { ok: false, step: 2, reason: 'box card' };
+        if (b.carriers !== undefined && (!Array.isArray(b.carriers) || b.carriers.length === 0 || b.carriers.length > 8 || b.carriers.some((x) => typeof x !== 'string' || !CARRIER.test(x))))
+            return { ok: false, step: 2, reason: 'box carriers' };
+        boxesClean.push({ p, claim, card: b.card, ...(b.carriers !== undefined ? { carriers: [...b.carriers] } : {}) });
+    }
+    if (c.attest !== undefined && (typeof c.attest !== 'string' || c.attest.length === 0 || c.attest.includes(':') || UNPRINTABLE.test(c.attest) || INVISIBLE.test(c.attest) || /\p{Z}/u.test(c.attest) || c.attest.length > 512))
+        return { ok: false, step: 2, reason: 'attest' };
+    let bond;
+    if (c.bond !== undefined) {
+        try {
+            bond = cleanBond(c.bond);
+        }
+        catch {
+            return { ok: false, step: 2, reason: 'bond' };
+        }
+    }
+    if (!Number.isSafeInteger(c.issued) || !Number.isSafeInteger(c.expires))
+        return { ok: false, step: 3, reason: 'times' };
+    if (c.expires <= now)
+        return { ok: false, step: 3, reason: 'expired' };
+    if (c.expires <= c.issued || c.expires - c.issued > MAX_AGE_SECONDS)
+        return { ok: false, step: 3, reason: 'expiry window' };
+    if (c.issued > now + 300)
+        return { ok: false, step: 3, reason: 'issued in the future' };
+    const unsigned = {
+        v: 1,
+        p: hex.p,
+        rz: hex.rz,
+        ...(c.name !== undefined ? { name: c.name } : {}),
+        issued: c.issued,
+        expires: c.expires,
+        relays: [...c.relays],
+        boxes: boxesClean,
+        eph: hex.eph,
+        ...(c.attest !== undefined ? { attest: c.attest } : {}),
+        ...(bond ? { bond } : {}),
+    };
+    if (!schnorr.verify(hexToBytes(sig), cardDigest(unsigned), hexToBytes(unsigned.p)))
+        return { ok: false, step: 4, reason: 'signature' };
+    const card = { ...unsigned, sig };
+    const boxes = [];
+    for (const b of card.boxes) {
+        let bytes;
+        try {
+            bytes = b64url.decode(b.card);
+        }
+        catch {
+            return { ok: false, step: 5, reason: 'link: decode' };
+        }
+        const v = verifyLinkCard(bytes, now);
+        if (!v.ok)
+            return { ok: false, step: 5, reason: `link: ${v.reason}` };
+        boxes.push({ box: b, link: v.card });
+    }
+    return { ok: true, card, boxes };
+}
+/**
+ * §3 step 6: accept a fresh Link card from a box only under the node id the
+ * person endorsed. Pass the highest serial previously accepted for that node
+ * id, persisted by the caller; without it any unexpired old card of the same
+ * node replays, which is rule 8's job to stop and this function cannot do
+ * alone.
+ */
+export function refreshBox(pinnedNodeId, freshCard, now, highestSerial) {
+    const pin = pinnedNodeId instanceof Uint8Array ? bytesToHex(pinnedNodeId) : typeof pinnedNodeId === 'string' ? pinnedNodeId.toLowerCase() : '';
+    if (!HEX64.test(pin))
+        return { ok: false, reason: 'pinned node id is not 32 bytes of hex' };
+    const v = verifyLinkCard(freshCard, now, highestSerial);
+    if (!v.ok)
+        return { ok: false, reason: v.reason };
+    if (v.card.nodeId !== pin)
+        return { ok: false, reason: 'node id is not the endorsed one' };
+    return { ok: true, link: v.card };
+}
+//# sourceMappingURL=card.js.map

package/dist/card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.js","sourceRoot":"","sources":["../src/card.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,UAAU,EAAiB,MAAM,gBAAgB,CAAA;AAE1E,MAAM,CAAC,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAA;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAA;AAC1B,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAA;AAC3B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAA;AAmC9B,MAAM,KAAK,GAAG,gBAAgB,EAAE,MAAM,GAAG,iBAAiB,EAAE,KAAK,GAAG,gBAAgB,CAAA;AACpF,MAAM,MAAM,GAAG,kBAAkB,CAAA;AACjC,MAAM,OAAO,GAAG,wBAAwB,CAAA;AACxC,gHAAgH;AAChH,MAAM,WAAW,GAAG,yCAAyC,CAAA;AAC7D,gIAAgI;AAChI,MAAM,SAAS,GAAG,4FAA4F,CAAA;AAC9G,MAAM,OAAO,GAAG,yBAAyB,CAAA;AACzC,MAAM,QAAQ,GAAG,WAAW,CAAA;AAC5B,MAAM,YAAY,GAAG,4BAA4B,CAAA;AACjD,wEAAwE;AACxE,8DAA8D;AAC9D,MAAM,MAAM,GAAG;IACb,MAAM,EAAE,CAAC,CAAa,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;CACnE,CAAA;AACD,MAAM,SAAS,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1D,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACvC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAClB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAClG,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAA;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAA;QAC9B,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA;QAChD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YACpD,IAAI,IAAI,KAAK,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACxD,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAE,SAAQ;YAChH,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,UAAU,CAAA;AAE3B;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAChG,MAAM,CAAC,GAAG,CAA4B,CAAA;IACtC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAClF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAChF,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IACtG,MAAM,GAAG,GAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAClD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAqB,CAAA;IAC1E,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QAC1G,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;YACnG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YACjE,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC5F,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QAChF,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,cAAc,CAAC,CAAgB;IAC7C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,CAAC,GAA4B,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IAC7D,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAA;IAC9D,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;IACjB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAA;IACrD,OAAO,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,CAAe;IACxC,MAAM,GAAG,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IACrF,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG;QAC3E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;QAC9D,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClG,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAC/B,CAAC;AAkBD,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,CAAe;IACvC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,eAAe,CAAA;IAC3C,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACpF,MAAM,QAAQ,GAAiB;QAC7B,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACzD,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,GAAG,GAAG,GAAG;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC5D,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAA;IACD,MAAM,IAAI,GAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAA;IAC7G,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACvF,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAChC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACzF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAU;IAC/C,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAA;AAC1D,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,GAAW;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IACpG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACzE,IAAI,CAAM,CAAA;IACV,+FAA+F;IAC/F,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAAC,CAAC;IACxH,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAClH,MAAM,GAAG,GAAuC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;IAC1E,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAU,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;QACtE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACnE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAW,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IACxK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACzG,MAAM,UAAU,GAAU,EAAE,CAAA;IAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QACjG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACtE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAClE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QAC1E,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QACzG,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QACrP,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7H,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAC9Q,IAAI,IAA+B,CAAA;IACnC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACvH,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACtE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC3H,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAA;IACvF,MAAM,QAAQ,GAAiB;QAC7B,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAa;QACjC,KAAK,EAAE,UAAU;QACjB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IACtI,MAAM,IAAI,GAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,CAAA;IACvC,MAAM,KAAK,GAAoB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,KAAiB,CAAA;QACrB,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QAAC,CAAC;QACrG,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAA;QACrE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,YAAiC,EAAE,SAAqB,EAAE,GAAW,EAAE,aAAsB;IACtH,MAAM,GAAG,GAAG,YAAY,YAAY,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9I,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAA;IAC3F,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IACjD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAA;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { CARD_DOMAIN, MAX_CARD_BYTES, MAX_AGE_SECONDS, MAX_RELAYS, MAX_BOXES, MAX_NAME, MAX_PERSONAS, isGoodName, cleanBond, handshakeBytes, cardDigest, buildCard, encodeCard, cardLink, readCard, refreshBox } from './card.js';
+export type { BondHandshake, Box, UnsignedCard, Card, BuildOptions, ReadOk, ReadResult } from './card.js';
+export { verifyLinkCard, verifyStrict, isRelayUrl, buildLinkCard, LINK_CARD_MAX, LINK_CARD_MIN, LINK_CARD_MAX_AGE } from './link-card.js';
+export type { LinkCard, LinkHint, LinkVerdict } from './link-card.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACjO,YAAY,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACzG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACzI,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { CARD_DOMAIN, MAX_CARD_BYTES, MAX_AGE_SECONDS, MAX_RELAYS, MAX_BOXES, MAX_NAME, MAX_PERSONAS, isGoodName, cleanBond, handshakeBytes, cardDigest, buildCard, encodeCard, cardLink, readCard, refreshBox } from './card.js';
+export { verifyLinkCard, verifyStrict, isRelayUrl, buildLinkCard, LINK_CARD_MAX, LINK_CARD_MIN, LINK_CARD_MAX_AGE } from './link-card.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEjO,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA"}