@agent-network-protocol/dsh-anp-identity 0.1.0-dsh-test.20260831.1

package/lib/http-auth.js

@@ -0,0 +1,142 @@
+import { pluginError } from './errors.js';
+export const ANP_IDENTITY_HTTP_MAX_BODY_BYTES = 4 * 1024 * 1024;
+const CALLER_MANAGED_HEADERS = [
+    'authorization',
+    'signature-input',
+    'signature',
+    'content-digest',
+];
+const PROVIDER_PATCH_HEADERS = new Set(['signature-input', 'signature', 'content-digest']);
+export function createAuthenticatedHttp(reference, lease, allowedOrigins, assertActive, requestSigningKid) {
+    return Object.freeze({
+        async dispatch(request, transport) {
+            validateInput(request, transport, allowedOrigins);
+            await assertActive();
+            const body = await readReplayableBody(request);
+            await assertActive();
+            const kid = await requestSigningKid();
+            await assertActive();
+            const attempt = await lease.prepareHttpSignature({
+                identity: reference,
+                kid,
+                url: request.url,
+                method: request.method,
+                headers: [...request.headers].map(([name, value]) => ({ name, value })),
+                ...(body === undefined ? {} : { body: Buffer.from(body) }),
+            });
+            await assertActive();
+            return transport(authenticatedRequest(request, body, attempt.headerPatch));
+        },
+    });
+}
+function validateInput(request, transport, allowedOrigins) {
+    if (!(request instanceof Request) || typeof transport !== 'function' || request.bodyUsed) {
+        throw pluginError('invalid_request');
+    }
+    let origin;
+    try {
+        const url = new URL(request.url);
+        if (url.protocol !== 'https:' || url.username !== '' || url.password !== '' || url.hash !== '') {
+            throw pluginError('http_origin_forbidden');
+        }
+        origin = url.origin;
+    }
+    catch (error) {
+        if (isPluginError(error))
+            throw error;
+        throw pluginError('invalid_request');
+    }
+    if (!allowedOrigins.has(origin))
+        throw pluginError('http_origin_forbidden');
+    for (const name of CALLER_MANAGED_HEADERS) {
+        if (request.headers.has(name))
+            throw pluginError('invalid_request');
+    }
+}
+async function readReplayableBody(request) {
+    if (request.body === null)
+        return undefined;
+    let clone;
+    try {
+        clone = request.clone();
+    }
+    catch {
+        throw pluginError('http_body_unsupported');
+    }
+    const reader = clone.body?.getReader();
+    if (reader === undefined)
+        return new Uint8Array();
+    const chunks = [];
+    let length = 0;
+    try {
+        while (true) {
+            const result = await reader.read();
+            if (result.done)
+                break;
+            length += result.value.byteLength;
+            if (length > ANP_IDENTITY_HTTP_MAX_BODY_BYTES) {
+                void reader.cancel().catch(() => { });
+                void request.body?.cancel().catch(() => { });
+                throw pluginError('http_body_too_large');
+            }
+            chunks.push(Uint8Array.from(result.value));
+        }
+    }
+    catch (error) {
+        if (isPluginError(error))
+            throw error;
+        throw pluginError('http_body_unsupported');
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const output = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+        output.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return output;
+}
+function authenticatedRequest(original, body, patch) {
+    const headers = new Headers(original.headers);
+    const seen = new Set();
+    for (const entry of patch) {
+        const name = entry.name.toLowerCase();
+        if (!PROVIDER_PATCH_HEADERS.has(name)
+            || seen.has(name)
+            || /[\r\n]/u.test(entry.name)
+            || /[\r\n]/u.test(entry.value)) {
+            throw pluginError('provider_incompatible');
+        }
+        seen.add(name);
+        headers.set(name, entry.value);
+    }
+    if (!seen.has('signature-input') || !seen.has('signature')) {
+        throw pluginError('provider_incompatible');
+    }
+    try {
+        return new Request(original.url, {
+            method: original.method,
+            headers,
+            redirect: 'manual',
+            signal: original.signal,
+            cache: original.cache,
+            credentials: original.credentials,
+            integrity: original.integrity,
+            keepalive: original.keepalive,
+            mode: original.mode,
+            referrer: original.referrer,
+            referrerPolicy: original.referrerPolicy,
+            ...(body === undefined ? {} : { body: Uint8Array.from(body) }),
+        });
+    }
+    catch {
+        throw pluginError('invalid_request');
+    }
+}
+function isPluginError(error) {
+    return typeof error === 'object' && error !== null && 'name' in error
+        && error.name === 'AnpIdentityPluginError';
+}
+//# sourceMappingURL=http-auth.js.map

package/lib/http-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-auth.js","sourceRoot":"","sources":["../src/http-auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAC/D,MAAM,sBAAsB,GAAG;IAC7B,eAAe;IACf,iBAAiB;IACjB,WAAW;IACX,gBAAgB;CACR,CAAA;AACV,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE1F,MAAM,UAAU,uBAAuB,CACrC,SAA4B,EAC5B,KAAoB,EACpB,cAAmC,EACnC,YAAiC,EACjC,iBAAwC;IAExC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,SAAwB;YACvD,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;YACjD,MAAM,YAAY,EAAE,CAAA;YACpB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAC9C,MAAM,YAAY,EAAE,CAAA;YACpB,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAA;YACrC,MAAM,YAAY,EAAE,CAAA;YACpB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC;gBAC/C,QAAQ,EAAE,SAAS;gBACnB,GAAG;gBACH,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAA;YACF,MAAM,YAAY,EAAE,CAAA;YACpB,OAAO,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QAC5E,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAgB,EAChB,SAAwB,EACxB,cAAmC;IAEnC,IAAI,CAAC,CAAC,OAAO,YAAY,OAAO,CAAC,IAAI,OAAO,SAAS,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzF,MAAM,WAAW,CAAC,iBAAiB,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YAC/F,MAAM,WAAW,CAAC,uBAAuB,CAAC,CAAA;QAC5C,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QACrC,MAAM,WAAW,CAAC,iBAAiB,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,WAAW,CAAC,uBAAuB,CAAC,CAAA;IAC3E,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,CAAC,iBAAiB,CAAC,CAAA;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAgB;IAChD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,CAAC,uBAAuB,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,UAAU,EAAE,CAAA;IACjD,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAK;YACtB,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAA;YACjC,IAAI,MAAM,GAAG,gCAAgC,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACpC,KAAK,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAC3C,MAAM,WAAW,CAAC,qBAAqB,CAAC,CAAA;YAC1C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QACrC,MAAM,WAAW,CAAC,uBAAuB,CAAC,CAAA;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACrC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAiB,EACjB,IAA4B,EAC5B,KAAmE;IAEnE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACrC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;eAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;eACd,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;eAC1B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,WAAW,CAAC,uBAAuB,CAAC,CAAA;QAC5C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,WAAW,CAAC,uBAAuB,CAAC,CAAA;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO;YACP,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,CAAC,iBAAiB,CAAC,CAAA;IACtC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;WAChE,KAAK,CAAC,IAAI,KAAK,wBAAwB,CAAA;AAC9C,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,66 @@
+/** Host-only ANP Identity service for DeepSeek Harness. */
+import { Service, type Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { type AnpIdentityService as AnpIdentityServiceContract, type HostProviderLease, type ProviderRequest } from './provider-api.js';
+import type { AnpIdentityHealth, ClientRequest, IdentityClientLease } from './types.js';
+export type * from './types.js';
+export { AnpIdentityPluginError } from './errors.js';
+export type { AnpIdentityPluginErrorCode } from './errors.js';
+export { ANP_IDENTITY_HTTP_MAX_BODY_BYTES, } from './http-auth.js';
+export { ANP_IDENTITY_PROVIDER_PROTOCOL, ANP_IDENTITY_SERVICE_PROTOCOL, } from './provider-api.js';
+export type { AnpIdentityService as AnpIdentityServiceContract, HostProviderLease, ProviderRequest, } from './provider-api.js';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        anpIdentity: AnpIdentityServiceContract;
+    }
+}
+export interface Config {
+    /** Absolute ANP Identity Store root. Defaults below DSH_HOME. */
+    readonly stateRoot?: string;
+    /** Exact same-process consumer names permitted to acquire leases. */
+    readonly allowConsumers?: string[];
+    /** Narrow Host-only consumers permitted to acquire Provider leases. */
+    readonly allowProviderConsumers?: string[];
+    /** Exact HTTPS origins permitted per consumer for authenticated HTTP. */
+    readonly httpAllowedOrigins?: Record<string, string[]>;
+    /** Run native Store recovery when a Provider opens. */
+    readonly recoveryOnOpen?: boolean;
+}
+export declare const Config: z<Config>;
+/** One multi-DID ANP Identity service with a replaceable native Provider. */
+export declare class AnpIdentityService extends Service implements AnpIdentityServiceContract {
+    static Config: z<Config>;
+    private readonly resolvedConfig;
+    private readonly catalogStore;
+    private providerSlot;
+    constructor(ctx: Context, config: Config);
+    health(): Promise<AnpIdentityHealth>;
+    private registerProvider;
+    acquireClient(input: ClientRequest): Promise<IdentityClientLease>;
+    acquireProvider(input: ProviderRequest): HostProviderLease;
+    private listForClient;
+    private createForClient;
+    private getForClient;
+    private deleteForClient;
+    private recoverForClient;
+    private setHandleForClient;
+    private assertManagedAccess;
+    private assertHostTransitionAccess;
+    private grantConsumer;
+    private revokeConsumer;
+    private createForHost;
+    private deleteForHost;
+    private createNativeWithRecovery;
+    private removeLease;
+    private initializeSlot;
+    private reconcile;
+    private resolveAuthorized;
+    private loadCatalog;
+    private assertAllowedConsumer;
+    private requireSlot;
+    private assertSlot;
+    private awaitProvider;
+    private disposeSlot;
+}
+export default AnpIdentityService;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAK3D,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAyBxC,OAAO,EAIL,KAAK,kBAAkB,IAAI,0BAA0B,EACrD,KAAK,iBAAiB,EAGtB,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EACV,iBAAiB,EAEjB,aAAa,EAIb,mBAAmB,EAMpB,MAAM,YAAY,CAAA;AAEnB,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EACL,gCAAgC,GACjC,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,IAAI,0BAA0B,EAChD,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,WAAW,EAAE,0BAA0B,CAAA;KACxC;CACF;AAED,MAAM,WAAW,MAAM;IACrB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,uEAAuE;IACvE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtD,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAClC;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAM3B,CAAA;AAiFF,6EAA6E;AAC7E,qBAAa,kBAAmB,SAAQ,OAAQ,YAAW,0BAA0B;IACnF,MAAM,CAAC,MAAM,YAAS;IAEtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,YAAY,CAA0B;gBAE3B,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAUzC,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC;IA0B1C,OAAO,CAAC,gBAAgB;IAyBlB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4BvE,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB;YA4B5C,aAAa;YAuBb,eAAe;YA8Cf,YAAY;YAMZ,eAAe;YAuBf,gBAAgB;YAOhB,kBAAkB;YAwBlB,mBAAmB;YAMnB,0BAA0B;YAW1B,aAAa;YAmBb,cAAc;YAmBd,aAAa;YA4Cb,aAAa;YAmCb,wBAAwB;IAyBtC,OAAO,CAAC,WAAW;YAIL,cAAc;YAqBd,SAAS;YA0FT,iBAAiB;YAajB,WAAW;IAWzB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,UAAU;YAIJ,aAAa;YAYb,WAAW;CAO1B;AAyaD,eAAe,kBAAkB,CAAA"}