@bopen-io/wallet-toolbox 2.6.2-brc153.5 → 2.15.0-bopen.1

package/out/src/utility/identityUtils.d.ts

@@ -1,9 +1,14 @@
-import { LookupAnswer, VerifiableCertificate, LookupResolver, DiscoverCertificatesResult, IdentityCertificate, IdentityCertifier, Base64String } from '@bsv/sdk';
+import { LookupAnswer, VerifiableCertificate, LookupResolver, DiscoverCertificatesResult, IdentityCertificate, IdentityCertifier, Base64String, ChainTracker, TransactionEvidenceLimits } from '@bsv/sdk';
 import { TrustSettings } from '../WalletSettingsManager';
+import { OverlayOutputEvidence } from './verifyOverlayOutput';
 export interface ExtendedVerifiableCertificate extends IdentityCertificate {
     certifierInfo: IdentityCertifier;
     publiclyRevealedKeyring: Record<string, Base64String>;
 }
+/** Re-bind authenticated certificates to the identity lookup they answered. */
+export declare function filterCertificatesByIdentityKey(certificates: VerifiableCertificate[], identityKey: string): VerifiableCertificate[];
+/** Re-bind authenticated certificates to the attribute lookup they answered. */
+export declare function filterCertificatesByAttributes(certificates: VerifiableCertificate[], attributes: Record<string, string>): VerifiableCertificate[];
 /**
  * Transforms an array of VerifiableCertificate instances according to the trust settings.
  * Only certificates whose grouped total trust meets the threshold are returned,
@@ -16,22 +21,57 @@ export interface ExtendedVerifiableCertificate extends IdentityCertificate {
 export declare const transformVerifiableCertificatesWithTrust: (trustSettings: TrustSettings, certificates: VerifiableCertificate[]) => DiscoverCertificatesResult;
 /**
  * Performs an identity overlay service lookup query and returns the parsed results.
+ * Requires an independently maintained ChainTracker; missing context returns no identities.
  *
  * Identity paths benefit from a larger grace window (more hosts contribute outputs before the
  * query resolves) — 300 ms is well under the "instant" perception threshold and catches the long
  * tail of healthy-but-slightly-slow hosts.
  */
-export declare const queryOverlay: (query: unknown, resolver: LookupResolver) => Promise<VerifiableCertificate[]>;
+export declare const queryOverlay: (query: unknown, resolver: LookupResolver, chainTracker?: ChainTracker) => Promise<VerifiableCertificate[]>;
+/** Configurable identity intake bounds; share byte limits with IdentityEvidenceVerifier. */
+export interface IdentityEvidenceIntakeLimits {
+    candidateBytes?: number;
+    retainedBytes?: number;
+    outputs?: number;
+}
+/**
+ * Fetch an owned snapshot of UNTRUSTED evidence, suitable only for revalidation.
+ * A limit rejects the lookup because this legacy result cannot represent partial completion.
+ */
+export declare const queryOverlayEvidence: (query: unknown, resolver: LookupResolver, limits?: IdentityEvidenceIntakeLimits) => Promise<LookupAnswer>;
+/**
+ * Wallet/session-owned identity validation. Chain evidence is checked on every
+ * use; bounded certificate crypto results are independent of mutable trust ratings.
+ */
+export declare class IdentityEvidenceVerifier {
+    readonly chainTracker: ChainTracker;
+    readonly chainNamespace: string;
+    private disposed;
+    private readonly coordinator;
+    private readonly certificates;
+    private expiryTimer?;
+    constructor(chainTracker: ChainTracker, chainNamespace?: string, limits?: Partial<TransactionEvidenceLimits>);
+    private clone;
+    parse(output: OverlayOutputEvidence): Promise<{
+        outpoint: string;
+        certificate: VerifiableCertificate;
+    } | null>;
+    private prune;
+    private scheduleExpiry;
+    dispose(): void;
+}
 /**
  * Parse the returned UTXOs, decrypting and verifying each certificate.
+ * An omitted ChainTracker fails closed. Each call revalidates transaction evidence;
+ * returned certificates carry no reusable chain-verdict or unspentness guarantee.
  *
  * On UI runtimes (browser / React Native), yields between iterations so the JS thread does not
  * own the frame for the full duration. On Node, runs straight through.
  */
-export declare const parseResults: (lookupResult: LookupAnswer) => Promise<VerifiableCertificate[]>;
+export declare const parseResults: (lookupResult: LookupAnswer, chainTracker?: ChainTracker, verifier?: IdentityEvidenceVerifier) => Promise<VerifiableCertificate[]>;
 /**
  * Iterable variant of {@link parseResults}: emits each successfully parsed certificate as soon as
  * it's ready, so callers can render progressively instead of waiting for the full set.
  */
-export declare function parseResults$(lookupResult: LookupAnswer): AsyncIterable<VerifiableCertificate>;
+export declare function parseResults$(lookupResult: LookupAnswer, chainTracker?: ChainTracker, verifier?: IdentityEvidenceVerifier): AsyncIterable<VerifiableCertificate>;
 //# sourceMappingURL=identityUtils.d.ts.map

package/out/src/utility/identityUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identityUtils.d.ts","sourceRoot":"","sources":["../../../src/utility/identityUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAGZ,qBAAqB,EAGrB,cAAc,EACd,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACb,MAAM,UAAU,CAAA;AACjB,OAAO,EAAa,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAGnE,MAAM,WAAW,6BAA8B,SAAQ,mBAAmB;IACxE,aAAa,EAAE,iBAAiB,CAAA;IAChC,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACtD;AASD;;;;;;;;GAQG;AACH,eAAO,MAAM,wCAAwC,kBACpC,aAAa,gBACd,qBAAqB,EAAE,KACpC,0BAwDF,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,UAAiB,OAAO,YAAY,cAAc,KAAG,OAAO,CAAC,qBAAqB,EAAE,CAO5G,CAAA;AAqDD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,iBAAwB,YAAY,KAAG,OAAO,CAAC,qBAAqB,EAAE,CAU9F,CAAA;AAED;;;GAGG;AACH,wBAAwB,aAAa,CAAE,YAAY,EAAE,YAAY,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAQvG"}
+{"version":3,"file":"identityUtils.d.ts","sourceRoot":"","sources":["../../../src/utility/identityUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAEZ,qBAAqB,EAErB,cAAc,EACd,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EAGZ,yBAAyB,EAG1B,MAAM,UAAU,CAAA;AAEjB,OAAO,EAAE,aAAa,EAAyB,MAAM,0BAA0B,CAAA;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAmH7D,MAAM,WAAW,6BAA8B,SAAQ,mBAAmB;IACxE,aAAa,EAAE,iBAAiB,CAAA;IAChC,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACtD;AA4GD,+EAA+E;AAC/E,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,qBAAqB,EAAE,EACrC,WAAW,EAAE,MAAM,GAClB,qBAAqB,EAAE,CAKzB;AA2BD,gFAAgF;AAChF,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,qBAAqB,EAAE,EACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,qBAAqB,EAAE,CAOzB;AAWD;;;;;;;;GAQG;AACH,eAAO,MAAM,wCAAwC,kBACpC,aAAa,gBACd,qBAAqB,EAAE,KACpC,0BAqEF,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,UAChB,OAAO,YACJ,cAAc,iBACT,YAAY,KAC1B,OAAO,CAAC,qBAAqB,EAAE,CAGjC,CAAA;AAED,4FAA4F;AAC5F,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,UACxB,OAAO,YACJ,cAAc,WAChB,4BAA4B,KACnC,OAAO,CAAC,YAAY,CAoDtB,CAAA;AA0FD;;;GAGG;AACH,qBAAa,wBAAwB;IAOjC,QAAQ,CAAC,YAAY,EAAE,YAAY;IACnC,QAAQ,CAAC,cAAc;IAPzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyD;IACtF,OAAO,CAAC,WAAW,CAAC,CAA+B;IAEnD,YACW,YAAY,EAAE,YAAY,EAC1B,cAAc,SAAyB,EAChD,MAAM,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,EAQ5C;IAED,OAAO,CAAC,KAAK;IAgBP,KAAK,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,qBAAqB,CAAA;KAAE,GAAG,IAAI,CAAC,CAmCnH;IAED,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,cAAc;IActB,OAAO,IAAI,IAAI,CAKd;CACF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,iBACT,YAAY,iBACX,YAAY,aAChB,wBAAwB,KAClC,OAAO,CAAC,qBAAqB,EAAE,CAIjC,CAAA;AAED;;;GAGG;AACH,wBAAuB,aAAa,CAClC,YAAY,EAAE,YAAY,EAC1B,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,CAAC,EAAE,wBAAwB,GAClC,aAAa,CAAC,qBAAqB,CAAC,CAmBtC"}