opacity-issuer-core 0.2.1

package/dist/documents/index.js

@@ -0,0 +1,5 @@
+export { SANDBOX_CHAIN_ID, SANDBOX_DEPLOYMENTS, SANDBOX_IMPLEMENTATION_VERSION, SANDBOX_TRAIT_IDS, SEPOLIA_CHAIN_ID, assertDocumentMatchesHash, buildAttestDocumentTransaction, buildDocumentAcceptanceTypedData, buildSandboxAddSelfTransaction, buildSandboxRegisterIssuerTransaction, buildSandboxSetSelfTraitTransaction, documentAttestorAbi, documentTraitId, getSandboxDeployment, hashDocument, hashDocumentAcceptance, probeSandboxRegistry, requireSandboxDeployment, sandboxAllowlistRegistryAbi, sandboxUserId, toEip1193Json, toEip1193TypedData, toEip712Json, toEip712JsonPayload, toEthersTypedData, toJsonRpcTransaction, toSandboxAddSelfWriteContractRequest, toSandboxRegisterIssuerWriteContractRequest, toSandboxSetSelfTraitWriteContractRequest, toViemTypedData, toWriteContractRequest, verifyAttestationSession } from '../chunk-7ODYBEZH.js';
+export { DOCUMENT_ACCEPTANCE_PRIMARY_TYPE, DOCUMENT_ACCEPTANCE_TYPEHASH, DOCUMENT_ACCEPTANCE_TYPES, DOCUMENT_ATTESTOR_DOMAIN_NAME, DOCUMENT_ATTESTOR_DOMAIN_VERSION, ECDSA_SIGNATURE_BYTES, EIP712_DOMAIN_TYPE, MAX_ATTESTATION_LIFETIME_SECONDS } from '../chunk-2STMWRIV.js';
+import '../chunk-54Q3MU62.js';
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/documents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/documents/validate.cjs

@@ -0,0 +1,53 @@
+'use strict';
+
+var chunk3L7NNVUV_cjs = require('../chunk-3L7NNVUV.cjs');
+require('../chunk-HJQZWNZJ.cjs');
+
+
+
+Object.defineProperty(exports, "assertAddress", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertAddress; }
+});
+Object.defineProperty(exports, "assertBoolean", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertBoolean; }
+});
+Object.defineProperty(exports, "assertBytes32", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertBytes32; }
+});
+Object.defineProperty(exports, "assertChainId", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertChainId; }
+});
+Object.defineProperty(exports, "assertDocHash", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertDocHash; }
+});
+Object.defineProperty(exports, "assertNonce", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertNonce; }
+});
+Object.defineProperty(exports, "assertServerSignature", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertServerSignature; }
+});
+Object.defineProperty(exports, "assertSessionWindow", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertSessionWindow; }
+});
+Object.defineProperty(exports, "assertTimestamp", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertTimestamp; }
+});
+Object.defineProperty(exports, "assertTraitId", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertTraitId; }
+});
+Object.defineProperty(exports, "assertUserSignature", {
+  enumerable: true,
+  get: function () { return chunk3L7NNVUV_cjs.assertUserSignature; }
+});
+//# sourceMappingURL=validate.cjs.map
+//# sourceMappingURL=validate.cjs.map

package/dist/documents/validate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"validate.cjs"}

package/dist/documents/validate.d.cts

@@ -0,0 +1,70 @@
+import { Address, Hex } from 'viem';
+import { C as ClockOptions } from '../types-B4Yi7WA4.cjs';
+
+/**
+ * Normalises an address and rejects the zero address.
+ *
+ * Returns the checksummed form: `attestDocument` takes `wallet` as a plain `address`, so casing
+ * does not affect the calldata, but returning the canonical form keeps the descriptor comparable.
+ */
+declare function assertAddress(value: Address, field: string): Address;
+/**
+ * Rejects anything that is not 32 bytes of hex. Zero-ness is checked separately, per field.
+ *
+ * Length is checked on the string, not via `size()`, which rounds a half-byte up — `0x` followed
+ * by 63 hex chars has a `size()` of 32 but is not a valid `bytes32`.
+ */
+declare function assertBytes32(value: Hex, field: string): Hex;
+/**
+ * `traitId` must be non-zero — `InvalidTraitId`.
+ *
+ * A zero trait id is almost always an un-set config value rather than a real trait.
+ */
+declare function assertTraitId(value: Hex): Hex;
+/** Strict runtime boolean validation for callers that bypass TypeScript declarations. */
+declare function assertBoolean(value: boolean, field: string): boolean;
+/**
+ * `docHash` must be non-zero — `InvalidDocHash`.
+ *
+ * No executed document hashes to zero, so a zero here is a server-side bug and must not be attested.
+ */
+declare function assertDocHash(value: Hex): Hex;
+/**
+ * `nonce` must be well-formed, but may be zero.
+ *
+ * The contract applies no zero-check to the nonce — slot zero is burnable like any other — so
+ * rejecting it here would be stricter than the chain.
+ */
+declare function assertNonce(value: Hex): Hex;
+/** Rejects negative or non-`bigint` unix timestamps before they are encoded as `uint256`. */
+declare function assertTimestamp(value: bigint, field: string): bigint;
+/**
+ * The 65-byte rule for the SERVER signature only.
+ *
+ * `ECDSA.recover` accepts exactly one length and reverts `ECDSAInvalidSignatureLength` on any
+ * other. The investor signature must NOT be length-checked: `SignatureChecker` routes a
+ * code-bearing wallet (a Safe, or an EIP-7702-delegated EOA) to ERC-1271, where the signature is
+ * whatever that wallet's own validation logic accepts.
+ */
+declare function assertServerSignature(value: Hex): Hex;
+/**
+ * The investor signature: hex, any BYTE length — an ERC-1271 wallet is not 65 bytes.
+ *
+ * Only the half-byte case is rejected, since it cannot encode as `bytes`.
+ */
+declare function assertUserSignature(value: Hex): Hex;
+/**
+ * The session-lifetime rules, split by whether they need a clock.
+ *
+ * `deadline <= issuedAt + MAX_ATTESTATION_LIFETIME` is absolute and always checked. The two
+ * clock-relative rules run only when `now` is supplied — see {@link ClockOptions} for why that is
+ * opt-in.
+ */
+declare function assertSessionWindow(session: {
+    issuedAt?: bigint | undefined;
+    deadline: bigint;
+}, options?: ClockOptions): void;
+/** Rejects a non-integer / out-of-range chain id before it lands in a signed domain. */
+declare function assertChainId(value: number): number;
+
+export { assertAddress, assertBoolean, assertBytes32, assertChainId, assertDocHash, assertNonce, assertServerSignature, assertSessionWindow, assertTimestamp, assertTraitId, assertUserSignature };

package/dist/documents/validate.d.ts

@@ -0,0 +1,70 @@
+import { Address, Hex } from 'viem';
+import { C as ClockOptions } from '../types-B4Yi7WA4.js';
+
+/**
+ * Normalises an address and rejects the zero address.
+ *
+ * Returns the checksummed form: `attestDocument` takes `wallet` as a plain `address`, so casing
+ * does not affect the calldata, but returning the canonical form keeps the descriptor comparable.
+ */
+declare function assertAddress(value: Address, field: string): Address;
+/**
+ * Rejects anything that is not 32 bytes of hex. Zero-ness is checked separately, per field.
+ *
+ * Length is checked on the string, not via `size()`, which rounds a half-byte up — `0x` followed
+ * by 63 hex chars has a `size()` of 32 but is not a valid `bytes32`.
+ */
+declare function assertBytes32(value: Hex, field: string): Hex;
+/**
+ * `traitId` must be non-zero — `InvalidTraitId`.
+ *
+ * A zero trait id is almost always an un-set config value rather than a real trait.
+ */
+declare function assertTraitId(value: Hex): Hex;
+/** Strict runtime boolean validation for callers that bypass TypeScript declarations. */
+declare function assertBoolean(value: boolean, field: string): boolean;
+/**
+ * `docHash` must be non-zero — `InvalidDocHash`.
+ *
+ * No executed document hashes to zero, so a zero here is a server-side bug and must not be attested.
+ */
+declare function assertDocHash(value: Hex): Hex;
+/**
+ * `nonce` must be well-formed, but may be zero.
+ *
+ * The contract applies no zero-check to the nonce — slot zero is burnable like any other — so
+ * rejecting it here would be stricter than the chain.
+ */
+declare function assertNonce(value: Hex): Hex;
+/** Rejects negative or non-`bigint` unix timestamps before they are encoded as `uint256`. */
+declare function assertTimestamp(value: bigint, field: string): bigint;
+/**
+ * The 65-byte rule for the SERVER signature only.
+ *
+ * `ECDSA.recover` accepts exactly one length and reverts `ECDSAInvalidSignatureLength` on any
+ * other. The investor signature must NOT be length-checked: `SignatureChecker` routes a
+ * code-bearing wallet (a Safe, or an EIP-7702-delegated EOA) to ERC-1271, where the signature is
+ * whatever that wallet's own validation logic accepts.
+ */
+declare function assertServerSignature(value: Hex): Hex;
+/**
+ * The investor signature: hex, any BYTE length — an ERC-1271 wallet is not 65 bytes.
+ *
+ * Only the half-byte case is rejected, since it cannot encode as `bytes`.
+ */
+declare function assertUserSignature(value: Hex): Hex;
+/**
+ * The session-lifetime rules, split by whether they need a clock.
+ *
+ * `deadline <= issuedAt + MAX_ATTESTATION_LIFETIME` is absolute and always checked. The two
+ * clock-relative rules run only when `now` is supplied — see {@link ClockOptions} for why that is
+ * opt-in.
+ */
+declare function assertSessionWindow(session: {
+    issuedAt?: bigint | undefined;
+    deadline: bigint;
+}, options?: ClockOptions): void;
+/** Rejects a non-integer / out-of-range chain id before it lands in a signed domain. */
+declare function assertChainId(value: number): number;
+
+export { assertAddress, assertBoolean, assertBytes32, assertChainId, assertDocHash, assertNonce, assertServerSignature, assertSessionWindow, assertTimestamp, assertTraitId, assertUserSignature };

package/dist/documents/validate.js

@@ -0,0 +1,4 @@
+export { assertAddress, assertBoolean, assertBytes32, assertChainId, assertDocHash, assertNonce, assertServerSignature, assertSessionWindow, assertTimestamp, assertTraitId, assertUserSignature } from '../chunk-2STMWRIV.js';
+import '../chunk-54Q3MU62.js';
+//# sourceMappingURL=validate.js.map
+//# sourceMappingURL=validate.js.map

package/dist/documents/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"validate.js"}