@brightchain/brightchain-api-lib 0.14.0 → 0.16.0

package/src/lib/controllers/crypto/gitController.js

@@ -0,0 +1,306 @@
+"use strict";
+/**
+ * GitController — REST API for Git commit/tag signing operations.
+ *
+ * Routes:
+ *   POST /sign-commit          — Sign a Git commit
+ *   POST /sign-tag             — Sign a Git tag
+ *   POST /verify               — Verify a Git signature
+ *   POST /export-public-key    — Export the signing public key in PGP format
+ *
+ * Requirements: 7.1-7.10
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitController = void 0;
+const gitSigningService_1 = require("@brightchain/brightchain-lib/lib/services/crypto/gitSigningService");
+const node_express_suite_1 = require("@digitaldefiance/node-express-suite");
+const errorResponse_1 = require("../../utils/errorResponse");
+const base_1 = require("../base");
+// ─── Controller ─────────────────────────────────────────────────────────────
+/**
+ * Controller for Git commit and tag signing operations.
+ *
+ * Delegates to {@link GitSigningService} in brightchain-lib for
+ * core signing logic including ECDSA signing over SHA-256 hashes
+ * wrapped in PGP-armored format.
+ *
+ * @requirements 7.1, 7.2, 7.3, 7.4, 7.5
+ */
+class GitController extends base_1.BaseController {
+    constructor(application) {
+        super(application);
+    }
+    // ─── Route definitions ──────────────────────────────────────────────────
+    initRouteDefinitions() {
+        const noAuth = {
+            useAuthentication: false,
+            useCryptoAuthentication: false,
+        };
+        this.routeDefinitions = [
+            (0, node_express_suite_1.routeConfig)('post', '/sign-commit', {
+                ...noAuth,
+                handlerKey: 'signCommit',
+                openapi: {
+                    summary: 'Sign a Git commit',
+                    description: 'Signs a Git commit payload using ECDSA over SHA-256, producing a PGP-armored signature.',
+                    tags: ['Git'],
+                    responses: {
+                        200: {
+                            schema: 'SignCommitResponse',
+                            description: 'Commit signed successfully',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key or missing content',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('post', '/sign-tag', {
+                ...noAuth,
+                handlerKey: 'signTag',
+                openapi: {
+                    summary: 'Sign a Git tag',
+                    description: 'Signs a Git tag payload using ECDSA over SHA-256, producing a PGP-armored signature.',
+                    tags: ['Git'],
+                    responses: {
+                        200: {
+                            schema: 'SignTagResponse',
+                            description: 'Tag signed successfully',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key or missing content',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('post', '/verify', {
+                ...noAuth,
+                handlerKey: 'verifySignature',
+                openapi: {
+                    summary: 'Verify a Git signature',
+                    description: 'Verifies a Git commit or tag signature using the signer public key or paper key.',
+                    tags: ['Git'],
+                    responses: {
+                        200: {
+                            schema: 'VerifyGitSignatureResponse',
+                            description: 'Verification result',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Missing required fields',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('post', '/export-public-key', {
+                ...noAuth,
+                handlerKey: 'exportPublicKey',
+                openapi: {
+                    summary: 'Export Git signing public key',
+                    description: 'Exports the Git signing public key in PGP-armored format for GPG keyring import.',
+                    tags: ['Git'],
+                    responses: {
+                        200: {
+                            schema: 'ExportGitPublicKeyResponse',
+                            description: 'Public key exported successfully',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key',
+                        },
+                    },
+                },
+            }),
+        ];
+        this.handlers = {
+            signCommit: this.handleSignCommit.bind(this),
+            signTag: this.handleSignTag.bind(this),
+            verifySignature: this.handleVerifySignature.bind(this),
+            exportPublicKey: this.handleExportPublicKey.bind(this),
+        };
+    }
+    // ─── Handlers ─────────────────────────────────────────────────────────
+    /**
+     * POST /sign-commit — Sign a Git commit.
+     *
+     * @requirements 7.1, 7.2
+     */
+    async handleSignCommit(req) {
+        try {
+            const { paperKey, commitContent } = req.body;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: paperKey');
+            }
+            if (!commitContent || typeof commitContent !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: commitContent');
+            }
+            const result = gitSigningService_1.GitSigningService.signCommit(paperKey, commitContent);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        memberId: '',
+                        objectType: 'commit',
+                        contentHashHex: result.contentHashHex,
+                        armoredSignature: result.armoredSignature,
+                        signatureHex: result.signatureHex,
+                        derivationPath: result.derivationPath,
+                        signedAt: new Date(),
+                    },
+                    message: 'Commit signed successfully',
+                },
+            };
+        }
+        catch (error) {
+            return this.mapGitError(error);
+        }
+    }
+    /**
+     * POST /sign-tag — Sign a Git tag.
+     *
+     * @requirements 7.3
+     */
+    async handleSignTag(req) {
+        try {
+            const { paperKey, tagContent } = req.body;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: paperKey');
+            }
+            if (!tagContent || typeof tagContent !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: tagContent');
+            }
+            const result = gitSigningService_1.GitSigningService.signTag(paperKey, tagContent);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        memberId: '',
+                        objectType: 'tag',
+                        contentHashHex: result.contentHashHex,
+                        armoredSignature: result.armoredSignature,
+                        signatureHex: result.signatureHex,
+                        derivationPath: result.derivationPath,
+                        signedAt: new Date(),
+                    },
+                    message: 'Tag signed successfully',
+                },
+            };
+        }
+        catch (error) {
+            return this.mapGitError(error);
+        }
+    }
+    /**
+     * POST /verify — Verify a Git signature.
+     *
+     * Supports verification by paper key or by raw public key hex.
+     *
+     * @requirements 7.4
+     */
+    async handleVerifySignature(req) {
+        try {
+            const { content, signatureHex, contentHashHex, armoredSignature, derivationPath, paperKey, publicKeyHex, } = req.body;
+            if (!content || typeof content !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: content');
+            }
+            if (!signatureHex || typeof signatureHex !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: signatureHex');
+            }
+            if (!paperKey && !publicKeyHex) {
+                return (0, errorResponse_1.validationError)('Either paperKey or publicKeyHex must be provided');
+            }
+            const sigResult = {
+                armoredSignature: armoredSignature ?? '',
+                signatureHex,
+                contentHashHex: contentHashHex ?? '',
+                derivationPath: derivationPath ?? "m/44'/60'/0'/2/0",
+            };
+            let valid;
+            let verifyPubKeyHex;
+            let fingerprint;
+            if (publicKeyHex) {
+                valid = gitSigningService_1.GitSigningService.verifyWithPublicKey(content, sigResult, publicKeyHex);
+                verifyPubKeyHex = publicKeyHex;
+                fingerprint = '';
+            }
+            else {
+                valid = gitSigningService_1.GitSigningService.verify(content, sigResult, paperKey);
+                const exported = gitSigningService_1.GitSigningService.exportPublicKey(paperKey);
+                verifyPubKeyHex = exported.publicKeyHex;
+                fingerprint = exported.fingerprint;
+            }
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        valid,
+                        publicKeyHex: verifyPubKeyHex,
+                        fingerprint,
+                        verifiedAt: new Date(),
+                    },
+                    message: valid
+                        ? 'Signature is valid'
+                        : 'Signature verification failed',
+                },
+            };
+        }
+        catch (error) {
+            return this.mapGitError(error);
+        }
+    }
+    /**
+     * POST /export-public-key — Export the Git signing public key.
+     *
+     * @requirements 7.5
+     */
+    async handleExportPublicKey(req) {
+        try {
+            const { paperKey } = req.body;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: paperKey');
+            }
+            const result = gitSigningService_1.GitSigningService.exportPublicKey(paperKey);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        memberId: '',
+                        armoredPublicKey: result.armoredPublicKey,
+                        publicKeyHex: result.publicKeyHex,
+                        fingerprint: result.fingerprint,
+                        derivationPath: result.derivationPath,
+                        exportedAt: new Date(),
+                    },
+                    message: 'Public key exported successfully',
+                },
+            };
+        }
+        catch (error) {
+            return this.mapGitError(error);
+        }
+    }
+    // ─── Error mapping ──────────────────────────────────────────────────
+    /**
+     * Map Git signing errors to appropriate HTTP responses.
+     */
+    mapGitError(error) {
+        if (error instanceof gitSigningService_1.GitSigningError) {
+            return {
+                statusCode: 400,
+                response: {
+                    message: error.message,
+                    error: 'GIT_SIGNING_ERROR',
+                },
+            };
+        }
+        return (0, errorResponse_1.handleError)(error);
+    }
+}
+exports.GitController = GitController;
+//# sourceMappingURL=gitController.js.map

package/src/lib/controllers/crypto/gitController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitController.js","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/crypto/gitController.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAQH,0GAG4E;AAG5E,4EAK6C;AAG7C,6DAAyE;AACzE,kCAAyC;AA0DzC,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAa,aAEX,SAAQ,qBAAkE;IAC1E,YAAY,WAAyC;QACnD,KAAK,CAAC,WAAW,CAAC,CAAC;IACrB,CAAC;IAED,2EAA2E;IAEjE,oBAAoB;QAC5B,MAAM,MAAM,GAAG;YACb,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,KAAK;SAC/B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG;YACtB,IAAA,gCAAW,EAAC,MAAM,EAAE,cAAc,EAAE;gBAClC,GAAG,MAAM;gBACT,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE;oBACP,OAAO,EAAE,mBAAmB;oBAC5B,WAAW,EACT,yFAAyF;oBAC3F,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,oBAAoB;4BAC5B,WAAW,EAAE,4BAA4B;yBAC1C;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,sCAAsC;yBACpD;qBACF;iBACF;aACF,CAAC;YACF,IAAA,gCAAW,EAAC,MAAM,EAAE,WAAW,EAAE;gBAC/B,GAAG,MAAM;gBACT,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE;oBACP,OAAO,EAAE,gBAAgB;oBACzB,WAAW,EACT,sFAAsF;oBACxF,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,iBAAiB;4BACzB,WAAW,EAAE,yBAAyB;yBACvC;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,sCAAsC;yBACpD;qBACF;iBACF;aACF,CAAC;YACF,IAAA,gCAAW,EAAC,MAAM,EAAE,SAAS,EAAE;gBAC7B,GAAG,MAAM;gBACT,UAAU,EAAE,iBAAiB;gBAC7B,OAAO,EAAE;oBACP,OAAO,EAAE,wBAAwB;oBACjC,WAAW,EACT,kFAAkF;oBACpF,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,4BAA4B;4BACpC,WAAW,EAAE,qBAAqB;yBACnC;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,yBAAyB;yBACvC;qBACF;iBACF;aACF,CAAC;YACF,IAAA,gCAAW,EAAC,MAAM,EAAE,oBAAoB,EAAE;gBACxC,GAAG,MAAM;gBACT,UAAU,EAAE,iBAAiB;gBAC7B,OAAO,EAAE;oBACP,OAAO,EAAE,+BAA+B;oBACxC,WAAW,EACT,kFAAkF;oBACpF,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,4BAA4B;4BACpC,WAAW,EAAE,kCAAkC;yBAChD;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,mBAAmB;yBACjC;qBACF;iBACF;aACF,CAAC;SACH,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YACtD,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,yEAAyE;IAEzE;;;;OAIG;IACK,KAAK,CAAC,gBAAgB,CAAC,GAAY;QAIzC,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAI,GAAsB,CAAC,IAAI,CAAC;YAEjE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAA,+BAAe,EAAC,kCAAkC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,IAAA,+BAAe,EAAC,uCAAuC,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,MAAM,GAAG,qCAAiB,CAAC,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAErE,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE;wBACJ,QAAQ,EAAE,EAAE;wBACZ,UAAU,EAAE,QAAQ;wBACpB,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,QAAQ,EAAE,IAAI,IAAI,EAAE;qBACrB;oBACD,OAAO,EAAE,4BAA4B;iBACR;aAChC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,aAAa,CAAC,GAAY;QAItC,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAI,GAAmB,CAAC,IAAI,CAAC;YAE3D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAA,+BAAe,EAAC,kCAAkC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,IAAA,+BAAe,EAAC,oCAAoC,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,MAAM,GAAG,qCAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAE/D,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE;wBACJ,QAAQ,EAAE,EAAE;wBACZ,UAAU,EAAE,KAAK;wBACjB,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,QAAQ,EAAE,IAAI,IAAI,EAAE;qBACrB;oBACD,OAAO,EAAE,yBAAyB;iBACR;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,qBAAqB,CAAC,GAAY;QAI9C,IAAI,CAAC;YACH,MAAM,EACJ,OAAO,EACP,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,YAAY,GACb,GAAI,GAA8B,CAAC,IAAI,CAAC;YAEzC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,OAAO,IAAA,+BAAe,EAAC,iCAAiC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,IAAA,+BAAe,EAAC,sCAAsC,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/B,OAAO,IAAA,+BAAe,EACpB,kDAAkD,CACnD,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG;gBAChB,gBAAgB,EAAE,gBAAgB,IAAI,EAAE;gBACxC,YAAY;gBACZ,cAAc,EAAE,cAAc,IAAI,EAAE;gBACpC,cAAc,EAAE,cAAc,IAAI,kBAAkB;aACrD,CAAC;YAEF,IAAI,KAAc,CAAC;YACnB,IAAI,eAAuB,CAAC;YAC5B,IAAI,WAAmB,CAAC;YAExB,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,GAAG,qCAAiB,CAAC,mBAAmB,CAC3C,OAAO,EACP,SAAS,EACT,YAAY,CACb,CAAC;gBACF,eAAe,GAAG,YAAY,CAAC;gBAC/B,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,qCAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,QAAS,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,qCAAiB,CAAC,eAAe,CAAC,QAAS,CAAC,CAAC;gBAC9D,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC;gBACxC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;YACrC,CAAC;YAED,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE;wBACJ,KAAK;wBACL,YAAY,EAAE,eAAe;wBAC7B,WAAW;wBACX,UAAU,EAAE,IAAI,IAAI,EAAE;qBACvB;oBACD,OAAO,EAAE,KAAK;wBACZ,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,+BAA+B;iBACE;aACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB,CAAC,GAAY;QAI9C,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAI,GAA2B,CAAC,IAAI,CAAC;YAEvD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAA,+BAAe,EAAC,kCAAkC,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,MAAM,GAAG,qCAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAE3D,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE;wBACJ,QAAQ,EAAE,EAAE;wBACZ,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,UAAU,EAAE,IAAI,IAAI,EAAE;qBACvB;oBACD,OAAO,EAAE,kCAAkC;iBACN;aACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACK,WAAW,CAAC,KAAc;QAIhC,IAAI,KAAK,YAAY,mCAAe,EAAE,CAAC;YACrC,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,mBAAmB;iBAC3B;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF;AA1UD,sCA0UC"}

package/src/lib/controllers/crypto/index.d.ts

@@ -0,0 +1,3 @@
+export * from './gitController';
+export * from './walletController';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/controllers/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC"}

package/src/lib/controllers/crypto/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./gitController"), exports);
+tslib_1.__exportStar(require("./walletController"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/controllers/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/crypto/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,6DAAmC"}

package/src/lib/controllers/crypto/walletController.d.ts

@@ -0,0 +1,64 @@
+/**
+ * WalletController — REST API for Ethereum wallet operations.
+ *
+ * Routes:
+ *   POST /derive-address       — Derive an Ethereum address from a paper key
+ *   POST /sign-message         — Sign a message with the member's key
+ *   POST /verify-signature     — Verify a signed message
+ *   GET  /address              — Get the wallet address for a member
+ *
+ * Requirements: 6.1-6.10
+ */
+import type { IDeriveAddressResponse, IGetWalletResponse, ISignMessageResponse, IVerifySignatureResponse } from '@brightchain/brightchain-lib/lib/interfaces/responses/cryptoResponses';
+import { PlatformID } from '@digitaldefiance/ecies-lib';
+import { CoreLanguageCode } from '@digitaldefiance/i18n-lib';
+import { ApiErrorResponse, ApiRequestHandler, TypedHandlers } from '@digitaldefiance/node-express-suite';
+import { IBrightChainApplication } from '../../interfaces/application';
+import { DefaultBackendIdType } from '../../shared-types';
+import { BaseController } from '../base';
+type WalletApiResponse = IDeriveAddressResponse | ISignMessageResponse | IVerifySignatureResponse | IGetWalletResponse | ApiErrorResponse;
+interface WalletHandlers extends TypedHandlers {
+    deriveAddress: ApiRequestHandler<IDeriveAddressResponse | ApiErrorResponse>;
+    signMessage: ApiRequestHandler<ISignMessageResponse | ApiErrorResponse>;
+    verifySignature: ApiRequestHandler<IVerifySignatureResponse | ApiErrorResponse>;
+    getWallet: ApiRequestHandler<IGetWalletResponse | ApiErrorResponse>;
+}
+/**
+ * Controller for Ethereum wallet operations.
+ *
+ * Delegates to {@link EthereumWalletService} in brightchain-lib for
+ * core wallet logic including address derivation, message signing,
+ * and signature verification.
+ *
+ * @requirements 6.1, 6.2, 6.3, 6.7, 6.8
+ */
+export declare class WalletController<TID extends PlatformID = DefaultBackendIdType> extends BaseController<TID, WalletApiResponse, WalletHandlers, CoreLanguageCode> {
+    constructor(application: IBrightChainApplication<TID>);
+    protected initRouteDefinitions(): void;
+    /**
+     * POST /derive-address — Derive an Ethereum address from a paper key.
+     *
+     * @requirements 6.1, 6.4
+     */
+    private handleDeriveAddress;
+    /**
+     * POST /sign-message — Sign a message with the member's Ethereum key.
+     *
+     * @requirements 6.2, 6.3
+     */
+    private handleSignMessage;
+    /**
+     * POST /verify-signature — Verify a signed message.
+     *
+     * @requirements 6.7, 6.8
+     */
+    private handleVerifySignature;
+    /**
+     * GET /address — Get the wallet address for a paper key.
+     *
+     * @requirements 6.1
+     */
+    private handleGetWallet;
+}
+export {};
+//# sourceMappingURL=walletController.d.ts.map

package/src/lib/controllers/crypto/walletController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletController.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/crypto/walletController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,uEAAuE,CAAC;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EAEd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIzC,KAAK,iBAAiB,GAClB,sBAAsB,GACtB,oBAAoB,GACpB,wBAAwB,GACxB,kBAAkB,GAClB,gBAAgB,CAAC;AAIrB,UAAU,cAAe,SAAQ,aAAa;IAC5C,aAAa,EAAE,iBAAiB,CAAC,sBAAsB,GAAG,gBAAgB,CAAC,CAAC;IAC5E,WAAW,EAAE,iBAAiB,CAAC,oBAAoB,GAAG,gBAAgB,CAAC,CAAC;IACxE,eAAe,EAAE,iBAAiB,CAChC,wBAAwB,GAAG,gBAAgB,CAC5C,CAAC;IACF,SAAS,EAAE,iBAAiB,CAAC,kBAAkB,GAAG,gBAAgB,CAAC,CAAC;CACrE;AAgCD;;;;;;;;GAQG;AACH,qBAAa,gBAAgB,CAC3B,GAAG,SAAS,UAAU,GAAG,oBAAoB,CAC7C,SAAQ,cAAc,CACtB,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,gBAAgB,CACjB;gBACa,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;IAMrD,SAAS,CAAC,oBAAoB,IAAI,IAAI;IAmGtC;;;;OAIG;YACW,mBAAmB;IAiCjC;;;;OAIG;YACW,iBAAiB;IAkC/B;;;;OAIG;YACW,qBAAqB;IA0CnC;;;;OAIG;YACW,eAAe;CA+B9B"}

package/src/lib/controllers/crypto/walletController.js

@@ -0,0 +1,260 @@
+"use strict";
+/**
+ * WalletController — REST API for Ethereum wallet operations.
+ *
+ * Routes:
+ *   POST /derive-address       — Derive an Ethereum address from a paper key
+ *   POST /sign-message         — Sign a message with the member's key
+ *   POST /verify-signature     — Verify a signed message
+ *   GET  /address              — Get the wallet address for a member
+ *
+ * Requirements: 6.1-6.10
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WalletController = void 0;
+const ethereumWalletService_1 = require("@brightchain/brightchain-lib/lib/services/crypto/ethereumWalletService");
+const node_express_suite_1 = require("@digitaldefiance/node-express-suite");
+const errorResponse_1 = require("../../utils/errorResponse");
+const base_1 = require("../base");
+// ─── Controller ─────────────────────────────────────────────────────────────
+/**
+ * Controller for Ethereum wallet operations.
+ *
+ * Delegates to {@link EthereumWalletService} in brightchain-lib for
+ * core wallet logic including address derivation, message signing,
+ * and signature verification.
+ *
+ * @requirements 6.1, 6.2, 6.3, 6.7, 6.8
+ */
+class WalletController extends base_1.BaseController {
+    constructor(application) {
+        super(application);
+    }
+    // ─── Route definitions ──────────────────────────────────────────────────
+    initRouteDefinitions() {
+        const noAuth = {
+            useAuthentication: false,
+            useCryptoAuthentication: false,
+        };
+        this.routeDefinitions = [
+            (0, node_express_suite_1.routeConfig)('post', '/derive-address', {
+                ...noAuth,
+                handlerKey: 'deriveAddress',
+                openapi: {
+                    summary: 'Derive an Ethereum address',
+                    description: 'Derives an Ethereum address from a paper key using BIP44 derivation.',
+                    tags: ['Wallet'],
+                    responses: {
+                        200: {
+                            schema: 'DeriveAddressResponse',
+                            description: 'Address derived successfully',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('post', '/sign-message', {
+                ...noAuth,
+                handlerKey: 'signMessage',
+                openapi: {
+                    summary: 'Sign a message',
+                    description: 'Signs a message using EIP-191 personal message signing.',
+                    tags: ['Wallet'],
+                    responses: {
+                        200: {
+                            schema: 'SignMessageResponse',
+                            description: 'Message signed successfully',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key or message',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('post', '/verify-signature', {
+                ...noAuth,
+                handlerKey: 'verifySignature',
+                openapi: {
+                    summary: 'Verify a message signature',
+                    description: 'Verifies an EIP-191 signed message and recovers the signer address.',
+                    tags: ['Wallet'],
+                    responses: {
+                        200: {
+                            schema: 'VerifySignatureResponse',
+                            description: 'Signature verification result',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Missing required fields',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('get', '/address', {
+                ...noAuth,
+                handlerKey: 'getWallet',
+                openapi: {
+                    summary: 'Get wallet address',
+                    description: 'Returns the Ethereum wallet address for a given paper key.',
+                    tags: ['Wallet'],
+                    responses: {
+                        200: {
+                            schema: 'GetWalletResponse',
+                            description: 'Wallet address returned',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key',
+                        },
+                    },
+                },
+            }),
+        ];
+        this.handlers = {
+            deriveAddress: this.handleDeriveAddress.bind(this),
+            signMessage: this.handleSignMessage.bind(this),
+            verifySignature: this.handleVerifySignature.bind(this),
+            getWallet: this.handleGetWallet.bind(this),
+        };
+    }
+    // ─── Handlers ─────────────────────────────────────────────────────────
+    /**
+     * POST /derive-address — Derive an Ethereum address from a paper key.
+     *
+     * @requirements 6.1, 6.4
+     */
+    async handleDeriveAddress(req) {
+        try {
+            const { paperKey, label } = req.body;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: paperKey');
+            }
+            const result = ethereumWalletService_1.EthereumWalletService.deriveAddress(paperKey);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        memberId: '',
+                        address: result.address,
+                        publicKeyHex: result.publicKeyHex,
+                        derivationPath: result.derivationPath,
+                        createdAt: new Date(),
+                        label,
+                    },
+                    message: 'Ethereum address derived successfully',
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+    /**
+     * POST /sign-message — Sign a message with the member's Ethereum key.
+     *
+     * @requirements 6.2, 6.3
+     */
+    async handleSignMessage(req) {
+        try {
+            const { paperKey, message } = req.body;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: paperKey');
+            }
+            if (!message || typeof message !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: message');
+            }
+            const result = ethereumWalletService_1.EthereumWalletService.signMessage(paperKey, message);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        memberId: '',
+                        message,
+                        signature: result.signature,
+                        recoveryParam: result.recoveryParam,
+                    },
+                    message: 'Message signed successfully',
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+    /**
+     * POST /verify-signature — Verify a signed message.
+     *
+     * @requirements 6.7, 6.8
+     */
+    async handleVerifySignature(req) {
+        try {
+            const body = req.body;
+            const { message, signature, address } = body;
+            if (!message || typeof message !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: message');
+            }
+            if (!signature || typeof signature !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: signature');
+            }
+            if (!address || typeof address !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: address');
+            }
+            const valid = ethereumWalletService_1.EthereumWalletService.verifySignature(message, signature, address);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        valid,
+                        recoveredAddress: address,
+                    },
+                    message: valid
+                        ? 'Signature is valid'
+                        : 'Signature verification failed',
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+    /**
+     * GET /address — Get the wallet address for a paper key.
+     *
+     * @requirements 6.1
+     */
+    async handleGetWallet(req) {
+        try {
+            const { paperKey } = req.query;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required query parameter: paperKey');
+            }
+            const result = ethereumWalletService_1.EthereumWalletService.deriveAddress(paperKey);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        memberId: '',
+                        address: result.address,
+                        publicKeyHex: result.publicKeyHex,
+                        derivationPath: result.derivationPath,
+                        createdAt: new Date(),
+                    },
+                    message: 'Wallet address retrieved',
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+}
+exports.WalletController = WalletController;
+//# sourceMappingURL=walletController.js.map