@bsv/dpp-core 0.3.0-beta.1

package/dist/owner.js

@@ -0,0 +1,181 @@
+import { BigNumber, Curve, PublicKey, Utils, } from '@bsv/sdk';
+import { OWNER_LINKAGE_HEX, OWNER_LINKAGE_KEY, OWNER_LINKAGE_REVELATION_PROTOCOL_ID, OWNER_PROTOCOL_ID, } from './constants.js';
+/**
+ * Field 6 as `spec/record-model.md` §3 recommends: the wallet's root derived under
+ * OWNER_PROTOCOL_ID with keyID = passport_id and counterparty 'self'.
+ */
+export async function ownerKeyFor(passportId, wallet) {
+    const { publicKey } = await wallet.getPublicKey({
+        protocolID: OWNER_PROTOCOL_ID,
+        keyID: passportId,
+        counterparty: 'self',
+    });
+    return publicKey;
+}
+/** The same key straight from a key deriver (server-side custodians, tests). */
+export function ownerKeyFromDeriver(passportId, deriver) {
+    return deriver.derivePublicKey(OWNER_PROTOCOL_ID, passportId, 'self').toString();
+}
+/**
+ * The BRC-69 specific key linkage of the owner key, as 64 lower-case hex: the
+ * scalar `s` with `ownerKey = identityKey + s·G`. From a deriver, for the side
+ * that holds the root outright.
+ */
+export function ownerLinkageFromDeriver(passportId, deriver) {
+    return Utils.toHex(deriver.revealSpecificSecret('self', OWNER_PROTOCOL_ID, passportId));
+}
+/**
+ * The BRC-100 path to the scalar: the owner's wallet reveals the linkage of its
+ * own owner key for this passport, encrypted to `verifierIdentityKey`. The
+ * counterparty is the wallet's own identity key, which is what 'self' means and
+ * is the spelling the BRC-100 wire accepts.
+ */
+export async function revealOwnerLinkage(passportId, wallet, verifierIdentityKey) {
+    const { publicKey: identityKey } = await wallet.getPublicKey({ identityKey: true });
+    return await wallet.revealSpecificKeyLinkage({
+        counterparty: identityKey,
+        verifier: verifierIdentityKey,
+        protocolID: OWNER_PROTOCOL_ID,
+        keyID: passportId,
+    });
+}
+/**
+ * The verifier's side of `revealOwnerLinkage`: the scalar as 64 lower-case hex,
+ * ready to carry in event_data. The writing application does this once and then
+ * publishes the scalar in the clear, because on chain the verifier is everyone.
+ */
+export async function decryptOwnerLinkage(revelation, wallet) {
+    const { plaintext } = await wallet.decrypt({
+        ciphertext: revelation.encryptedLinkage,
+        protocolID: OWNER_LINKAGE_REVELATION_PROTOCOL_ID,
+        keyID: revelation.keyID,
+        counterparty: revelation.prover,
+    });
+    if (plaintext.length !== 32) {
+        throw new Error(`owner linkage must decrypt to 32 bytes, got ${plaintext.length}`);
+    }
+    return Utils.toHex(plaintext);
+}
+/**
+ * `previousOwnerKey == actorIdentityKey + s·G`, mirroring PublicKey.deriveChild
+ * exactly: the scalar is the HMAC bytes read big-endian, and Point.mul reduces it
+ * modulo the curve order as derivation itself does. Pure, never throws: a key
+ * that does not parse is a false, not an exception, because the caller has a
+ * reason string to return and this function has none to add.
+ */
+export function verifyOwnerLinkage(actorIdentityKeyHex, previousOwnerKeyHex, linkageHex) {
+    if (!OWNER_LINKAGE_HEX.test(linkageHex))
+        return false;
+    try {
+        const actor = PublicKey.fromString(actorIdentityKeyHex);
+        if (actor.toString() !== actorIdentityKeyHex)
+            return false;
+        const s = new BigNumber(Utils.toArray(linkageHex, 'hex'));
+        const child = new PublicKey(actor.add(new Curve().g.mul(s)));
+        return child.toString() === previousOwnerKeyHex;
+    }
+    catch {
+        return false;
+    }
+}
+/** The three refusals of `spec/custody.md` §4, verbatim; fixtures pin these strings. */
+export const OWNER_CONSENT_REFUSALS = {
+    noLinkage: 'TRANSFER actor is not the previous owner and event_data carries no owner_linkage',
+    malformedLinkage: 'owner_linkage must be 64 lower-case hex characters',
+    notLinked: 'owner_linkage does not link actor_identity_key to the previous owner_identity_key',
+};
+/** Absent (undefined) when event_data is empty, not JSON, not an object, or lacks the property. */
+function readOwnerLinkage(eventData) {
+    if (eventData === '')
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(eventData);
+    }
+    catch {
+        return undefined;
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+        return undefined;
+    if (!Object.hasOwn(parsed, OWNER_LINKAGE_KEY))
+        return undefined;
+    return parsed[OWNER_LINKAGE_KEY];
+}
+/**
+ * The owner-signed transfer (`spec/custody.md` §4). Returns null when the state
+ * passes or the predicate does not apply (not a TRANSFER), otherwise the reason
+ * a conforming reader reports. `authorities` are the profile's transfer
+ * authorities, already canonical (see `normaliseTransferAuthorities`).
+ */
+export function checkOwnerConsent(prev, next, authorities = []) {
+    if (next.op !== 'TRANSFER')
+        return null;
+    if (next.actorIdentityKey === prev.ownerIdentityKey)
+        return null;
+    if (authorities.includes(next.actorIdentityKey))
+        return null;
+    const linkage = readOwnerLinkage(next.eventData);
+    if (linkage === undefined)
+        return OWNER_CONSENT_REFUSALS.noLinkage;
+    if (typeof linkage !== 'string' || !OWNER_LINKAGE_HEX.test(linkage)) {
+        return OWNER_CONSENT_REFUSALS.malformedLinkage;
+    }
+    if (!verifyOwnerLinkage(next.actorIdentityKey, prev.ownerIdentityKey, linkage)) {
+        return OWNER_CONSENT_REFUSALS.notLinked;
+    }
+    return null;
+}
+/**
+ * Transfer authorities as the predicate compares them: canonical compressed
+ * lower-case hex, the spelling fields 6 and 7 carry. Upper-case input is
+ * accepted and normalised; anything that is not a valid compressed key throws,
+ * because a misconfigured authority must fail at boot, not silently never match.
+ */
+export function normaliseTransferAuthorities(keys) {
+    return keys.map((key) => {
+        let parsed;
+        try {
+            parsed = PublicKey.fromString(key);
+        }
+        catch {
+            throw new Error(`transfer authority is not a valid public key: ${key}`);
+        }
+        const canonical = parsed.toString();
+        if (canonical !== key.toLowerCase()) {
+            throw new Error(`transfer authority is not a canonical compressed public key: ${key}`);
+        }
+        return canonical;
+    });
+}
+/** The three refusals of `spec/record-model-v2.md` §6 (control), verbatim; fixtures pin these strings. */
+export const CONTROL_REFUSALS = {
+    notProven: 'the actor is not the controller and control_linkage is empty',
+    redundantLinkage: 'control_linkage must be empty when the actor is the controller or a named authority',
+    notLinked: 'control_linkage does not link actor_identity_key to the previous controller_key',
+};
+/**
+ * The control proof of a version 2 UPDATE, TRANSFER or RETIRE
+ * (`spec/record-model-v2.md` §6): the actor is the previous controller by
+ * equality (field 7 equals the previous field 6), or a named authority, or
+ * proves it by linkage (field 14 is the scalar with previous field 6 equal to
+ * field 7 plus the scalar times G). Evaluated in that order, and the linkage
+ * field has one accepted state under each branch: empty under equality and
+ * under an authority, the scalar otherwise. Returns null when the state
+ * passes or the rule does not apply (an ISSUE), otherwise the reason.
+ */
+export function checkControl(prev, next, authorities = []) {
+    if (next.op === 'ISSUE')
+        return null;
+    const controller = next.actorIdentityKey === prev.ownerIdentityKey;
+    const authority = !controller && authorities.includes(next.actorIdentityKey);
+    if (controller || authority) {
+        return next.controlLinkage === '' ? null : CONTROL_REFUSALS.redundantLinkage;
+    }
+    if (next.controlLinkage === '')
+        return CONTROL_REFUSALS.notProven;
+    if (!verifyOwnerLinkage(next.actorIdentityKey, prev.ownerIdentityKey, next.controlLinkage)) {
+        return CONTROL_REFUSALS.notLinked;
+    }
+    return null;
+}
+//# sourceMappingURL=owner.js.map

package/dist/owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner.js","sourceRoot":"","sources":["../src/owner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,KAAK,EACL,SAAS,EACT,KAAK,GAIN,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oCAAoC,EACpC,iBAAiB,GAClB,MAAM,gBAAgB,CAAA;AAoCvB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,MAAsB;IAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QAC9C,UAAU,EAAE,iBAAiB;QAC7B,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,MAAM;KACrB,CAAC,CAAA;IACF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,OAAsB;IAC5E,OAAO,OAAO,CAAC,eAAe,CAAC,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,OAAsB;IAChF,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAA;AACzF,CAAC;AAaD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,MAA0B,EAC1B,mBAA2B;IAE3B,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,MAAM,CAAC,wBAAwB,CAAC;QAC3C,YAAY,EAAE,WAAW;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,iBAAiB;QAC7B,KAAK,EAAE,UAAU;KAClB,CAAC,CAAA;AACJ,CAAC;AAYD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAyF,EACzF,MAAkC;IAElC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACzC,UAAU,EAAE,UAAU,CAAC,gBAAgB;QACvC,UAAU,EAAE,oCAAoC;QAChD,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,YAAY,EAAE,UAAU,CAAC,MAAM;KAChC,CAAC,CAAA;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,mBAA2B,EAC3B,mBAA2B,EAC3B,UAAkB;IAElB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAA;QACvD,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,mBAAmB;YAAE,OAAO,KAAK,CAAA;QAC1D,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,KAAK,CAAC,QAAQ,EAAE,KAAK,mBAAmB,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,kFAAkF;IAC7F,gBAAgB,EAAE,oDAAoD;IACtE,SAAS,EAAE,mFAAmF;CACtF,CAAA;AAEV,mGAAmG;AACnG,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/D,OAAQ,MAAkC,CAAC,iBAAiB,CAAC,CAAA;AAC/D,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA6C,EAC7C,IAAmB,EACnB,cAAiC,EAAE;IAEnC,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IACvC,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAChE,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC,SAAS,CAAA;IAClE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,sBAAsB,CAAC,gBAAgB,CAAA;IAChD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,sBAAsB,CAAC,SAAS,CAAA;IACzC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAuB;IAClE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,IAAI,MAAiB,CAAA;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAA;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QACnC,IAAI,SAAS,KAAK,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gEAAgE,GAAG,EAAE,CAAC,CAAA;QACxF,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,SAAS,EAAE,8DAA8D;IACzE,gBAAgB,EAAE,qFAAqF;IACvG,SAAS,EAAE,iFAAiF;CACpF,CAAA;AAIV;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA4C,EAC5C,IAAmB,EACnB,cAAiC,EAAE;IAEnC,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,CAAA;IAClE,MAAM,SAAS,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC5E,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,gBAAgB,CAAA;IAC9E,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAC,SAAS,CAAA;IACjE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3F,OAAO,gBAAgB,CAAC,SAAS,CAAA;IACnC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/publisherPolicy.d.ts

@@ -0,0 +1,70 @@
+export declare const PUBLISHER_POLICY_FORMAT = "dpp-publisher-policy@1";
+export type PublisherRole = 'state-publisher' | 'anchor-publisher';
+export type PolicyOperatorProfile = 'single-operator@1' | 'federated-operators@1';
+export interface PublisherEntry {
+    /** Compressed public key, hex. */
+    key: string;
+    role: PublisherRole;
+    operator?: string;
+    activeFrom: string;
+    retiredAt?: string;
+    custody?: string;
+}
+export interface PolicyAuthorisation {
+    kind: 'genesis' | 'rotation' | 'handover';
+    signer: string;
+    suite: 'bsv-ecdsa-der';
+    value: string;
+    countersigner?: string;
+    countersignature?: string;
+}
+export interface PublisherPolicy {
+    policyFormat: typeof PUBLISHER_POLICY_FORMAT;
+    policyVersion: number;
+    scope: {
+        operatorProfile: PolicyOperatorProfile;
+        operators: string[];
+        topics?: string[];
+    };
+    issuedAt: string;
+    supersedes?: {
+        policyVersion: number;
+        sha256: string;
+    };
+    publishers: PublisherEntry[];
+    authorisation: PolicyAuthorisation;
+    notes?: string;
+}
+export type PolicyFailureReason = 'format' | 'version-order' | 'time-order' | 'entry-invalid' | 'supersedes-missing' | 'supersedes-mismatch' | 'genesis-signer-not-operator' | 'signer-not-active' | 'signature-invalid' | 'countersignature-missing' | 'countersignature-invalid' | 'countersigner-not-eligible' | 'scope-mismatch';
+export interface PolicyFailure {
+    version: number;
+    reason: PolicyFailureReason;
+    detail: string;
+}
+export interface PolicyChainResult {
+    ok: boolean;
+    versions: number[];
+    failure?: PolicyFailure;
+}
+/** The bytes an authorisation signs: the policy without its signature values, in canonical JSON, UTF-8. */
+export declare function policySigningPreimage(policy: PublisherPolicy): number[];
+/** The digest a later version names in `supersedes.sha256`: the complete policy, signatures included, in canonical JSON. */
+export declare function policyDigest(policy: PublisherPolicy): string;
+/**
+ * Verify a chain of policy versions for one scope, oldest first. The result
+ * names the first version that fails and why; nothing after it is trusted.
+ *
+ * `operatorIdentityKeys` maps each operator identifier to its compressed
+ * identity key, from the reader's own configuration or a resolved DID
+ * document, never from the policy itself.
+ */
+export declare function verifyPolicyChain(chain: PublisherPolicy[], operatorIdentityKeys: Record<string, string>): PolicyChainResult;
+/** The policy version in force at an instant: the newest issued at or before it. */
+export declare function policyInForceAt(chain: PublisherPolicy[], at: string | Date): PublisherPolicy | undefined;
+/**
+ * The publisher keys a state or anchor of the given instant may be
+ * countersigned by, from a chain `verifyPolicyChain` has accepted. A key
+ * not yet active, or already retired, at that instant is not among them.
+ */
+export declare function publisherKeysAt(chain: PublisherPolicy[], at: string | Date, role?: PublisherRole): string[];
+//# sourceMappingURL=publisherPolicy.d.ts.map

package/dist/publisherPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisherPolicy.d.ts","sourceRoot":"","sources":["../src/publisherPolicy.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,uBAAuB,2BAA2B,CAAA;AAC/D,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAClE,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG,uBAAuB,CAAA;AAEjF,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,aAAa,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,eAAe,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,OAAO,uBAAuB,CAAA;IAC5C,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE;QAAE,eAAe,EAAE,qBAAqB,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IACzF,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACtD,UAAU,EAAE,cAAc,EAAE,CAAA;IAC5B,aAAa,EAAE,mBAAmB,CAAA;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,eAAe,GACf,YAAY,GACZ,eAAe,GACf,oBAAoB,GACpB,qBAAqB,GACrB,6BAA6B,GAC7B,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,0BAA0B,GAC1B,4BAA4B,GAC5B,gBAAgB,CAAA;AAEpB,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC/F,MAAM,WAAW,iBAAiB;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAA;CAAE;AAQ/F,2GAA2G;AAC3G,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAGvE;AAED,4HAA4H;AAC5H,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAE5D;AAmDD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,iBAAiB,CA4C3H;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,eAAe,GAAG,SAAS,CAKxG;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,MAAM,EAAE,CAK3G"}

package/dist/publisherPolicy.js

@@ -0,0 +1,186 @@
+/**
+ * The publisher key policy (`spec/services.md` §1, `contracts/publisher-policy.schema.json`).
+ *
+ * The keys that countersign admitted states and anchors are a bounded,
+ * versioned set. Each version is a complete statement; a later version names
+ * the digest of the one it supersedes and carries an authorisation the
+ * superseded version's rules accept. A reader asks which keys were active at
+ * a state's time, so a retired key still authenticates what it signed while
+ * active and a new key authenticates nothing before its activation.
+ *
+ * `verifyPolicyChain` checks a chain once; `publisherKeysAt` then answers the
+ * time question from the verified chain. Neither trusts a list because a node
+ * served it: the chain's own signatures and digests are what is checked.
+ *
+ * A policy nests objects and arrays, so it uses the canonical JSON of
+ * canonicalJson.ts rather than the flat restricted form of native claims.
+ */
+import { Hash, PublicKey, Signature, Utils } from '@bsv/sdk';
+import { canonicalJson, CanonicalJsonError } from './canonicalJson.js';
+export const PUBLISHER_POLICY_FORMAT = 'dpp-publisher-policy@1';
+const KEY = /^0[23][0-9a-f]{64}$/;
+const TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$/;
+const instant = (value) => Date.parse(value);
+/** A well-formed instant that also exists: the grammar alone lets 2026-13-45T25:61:61Z through as NaN, and every NaN comparison is false. */
+const realInstant = (value) => TIME.test(value) && Number.isFinite(Date.parse(value));
+/** The bytes an authorisation signs: the policy without its signature values, in canonical JSON, UTF-8. */
+export function policySigningPreimage(policy) {
+    const { value: _value, countersignature: _counter, ...authorisation } = policy.authorisation;
+    return Utils.toArray(canonicalJson({ ...policy, authorisation }), 'utf8');
+}
+/** The digest a later version names in `supersedes.sha256`: the complete policy, signatures included, in canonical JSON. */
+export function policyDigest(policy) {
+    return Utils.toHex(Hash.sha256(Utils.toArray(canonicalJson(policy), 'utf8')));
+}
+function verifySignature(signer, preimage, der) {
+    try {
+        return PublicKey.fromString(signer).verify(preimage, Signature.fromDER(Utils.toArray(der, 'hex')));
+    }
+    catch {
+        return false;
+    }
+}
+function entryActiveAt(entry, at) {
+    return instant(entry.activeFrom) <= at && (entry.retiredAt == null || at < instant(entry.retiredAt));
+}
+/** Which operator a key speaks for under a policy: the operator whose identity key it is, else the operator its publisher entry names. */
+function operatorOf(policy, key, identityKeys) {
+    const byIdentity = policy.scope.operators.find((op) => identityKeys[op] === key);
+    if (byIdentity != null)
+        return byIdentity;
+    const entry = policy.publishers.find((p) => p.key === key);
+    return entry?.operator ?? (policy.scope.operators.length === 1 ? policy.scope.operators[0] : undefined);
+}
+function shapeFailure(policy, previous) {
+    const version = policy.policyVersion;
+    if (policy.policyFormat !== PUBLISHER_POLICY_FORMAT)
+        return { version, reason: 'format', detail: `policyFormat is ${String(policy.policyFormat)}` };
+    if (!Number.isInteger(version) || version < 1)
+        return { version, reason: 'format', detail: 'policyVersion must be a positive integer' };
+    if (!realInstant(policy.issuedAt))
+        return { version, reason: 'format', detail: 'issuedAt must be a real instant in UTC' };
+    if (!Array.isArray(policy.scope?.operators) || policy.scope.operators.length === 0 || policy.scope.operators.length > 64 || new Set(policy.scope.operators).size !== policy.scope.operators.length)
+        return { version, reason: 'format', detail: 'scope.operators must name one to sixty-four distinct operators' };
+    if (policy.authorisation?.suite !== 'bsv-ecdsa-der' || !KEY.test(policy.authorisation.signer ?? ''))
+        return { version, reason: 'format', detail: 'authorisation needs the bsv-ecdsa-der suite and a compressed signer key' };
+    if (!Array.isArray(policy.publishers) || policy.publishers.length === 0 || policy.publishers.length > 256)
+        return { version, reason: 'entry-invalid', detail: 'publishers must hold one to 256 entries' };
+    for (const entry of policy.publishers) {
+        if (!KEY.test(entry.key))
+            return { version, reason: 'entry-invalid', detail: `publisher key ${String(entry.key)} is not a compressed key` };
+        if (entry.role !== 'state-publisher' && entry.role !== 'anchor-publisher')
+            return { version, reason: 'entry-invalid', detail: `publisher ${entry.key} has role ${String(entry.role)}` };
+        if (!realInstant(entry.activeFrom) || (entry.retiredAt != null && !realInstant(entry.retiredAt)))
+            return { version, reason: 'entry-invalid', detail: `publisher ${entry.key} has a malformed or unreal time` };
+        if (entry.retiredAt != null && instant(entry.retiredAt) <= instant(entry.activeFrom))
+            return { version, reason: 'entry-invalid', detail: `publisher ${entry.key} retires before it activates` };
+        if (entry.operator != null && !policy.scope.operators.includes(entry.operator))
+            return { version, reason: 'entry-invalid', detail: `publisher ${entry.key} names an operator outside the scope` };
+        if (policy.scope.operators.length > 1 && entry.operator == null)
+            return { version, reason: 'entry-invalid', detail: `publisher ${entry.key} must name its operator in a federated scope` };
+    }
+    if (previous == null) {
+        if (policy.authorisation.kind !== 'genesis')
+            return { version, reason: 'version-order', detail: 'the first version of a scope must be a genesis authorisation' };
+        if (policy.supersedes != null)
+            return { version, reason: 'supersedes-mismatch', detail: 'a genesis version supersedes nothing' };
+    }
+    else {
+        if (policy.authorisation.kind === 'genesis')
+            return { version, reason: 'version-order', detail: 'only the first version of a scope is a genesis' };
+        if (version <= previous.policyVersion)
+            return { version, reason: 'version-order', detail: `version ${version} does not follow ${previous.policyVersion}` };
+        if (instant(policy.issuedAt) <= instant(previous.issuedAt))
+            return { version, reason: 'time-order', detail: 'a later version must be issued after the one it supersedes' };
+        if (policy.supersedes == null)
+            return { version, reason: 'supersedes-missing', detail: 'a later version must name the version it supersedes and its digest' };
+        if (policy.supersedes.policyVersion !== previous.policyVersion || policy.supersedes.sha256 !== policyDigest(previous))
+            return { version, reason: 'supersedes-mismatch', detail: 'supersedes does not name the previous version and its digest' };
+    }
+    return undefined;
+}
+/**
+ * Verify a chain of policy versions for one scope, oldest first. The result
+ * names the first version that fails and why; nothing after it is trusted.
+ *
+ * `operatorIdentityKeys` maps each operator identifier to its compressed
+ * identity key, from the reader's own configuration or a resolved DID
+ * document, never from the policy itself.
+ */
+export function verifyPolicyChain(chain, operatorIdentityKeys) {
+    const versions = [];
+    if (chain.length === 0)
+        return { ok: false, versions, failure: { version: 0, reason: 'format', detail: 'an empty chain authorises no key' } };
+    let previous;
+    for (const policy of chain) {
+        const failure = shapeFailure(policy, previous);
+        if (failure != null)
+            return { ok: false, versions, failure };
+        const version = policy.policyVersion;
+        let preimage;
+        try {
+            preimage = policySigningPreimage(policy);
+        }
+        catch (error) {
+            return { ok: false, versions, failure: { version, reason: 'format', detail: error instanceof CanonicalJsonError ? error.message : 'the policy has no canonical form' } };
+        }
+        const { signer, value, kind, countersigner, countersignature } = policy.authorisation;
+        if (!verifySignature(signer, preimage, value))
+            return { ok: false, versions, failure: { version, reason: 'signature-invalid', detail: `the authorisation does not verify under ${signer}` } };
+        if (previous == null) {
+            if (!policy.scope.operators.some((op) => operatorIdentityKeys[op] === signer)) {
+                return { ok: false, versions, failure: { version, reason: 'genesis-signer-not-operator', detail: 'a genesis is signed by the identity key of an operator in its scope' } };
+            }
+        }
+        else {
+            const issued = instant(policy.issuedAt);
+            const activeUnderPrevious = previous.publishers.some((p) => p.key === signer && entryActiveAt(p, issued)) || previous.scope.operators.some((op) => operatorIdentityKeys[op] === signer);
+            if (!activeUnderPrevious)
+                return { ok: false, versions, failure: { version, reason: 'signer-not-active', detail: 'the signer was not active under the superseded version at issue time' } };
+            const same = previous.scope.operators.length === policy.scope.operators.length && previous.scope.operators.every((op) => policy.scope.operators.includes(op));
+            if (kind === 'rotation' && !same)
+                return { ok: false, versions, failure: { version, reason: 'scope-mismatch', detail: 'a rotation keeps the operator set; a changed set is a handover' } };
+            if (kind === 'handover' && same)
+                return { ok: false, versions, failure: { version, reason: 'scope-mismatch', detail: 'a handover changes the operator set; an unchanged set is a rotation' } };
+            const signerOperator = operatorOf(previous, signer, operatorIdentityKeys);
+            const needsCounter = kind === 'handover' || previous.scope.operators.length > 1;
+            if (needsCounter) {
+                if (countersigner == null || countersignature == null)
+                    return { ok: false, versions, failure: { version, reason: 'countersignature-missing', detail: kind === 'handover' ? 'a handover is countersigned by an incoming operator' : 'no operator of a federation authorises a key alone' } };
+                const incoming = policy.scope.operators.filter((op) => !previous.scope.operators.includes(op));
+                const eligible = kind === 'handover'
+                    ? incoming.some((op) => operatorIdentityKeys[op] === countersigner)
+                    : previous.scope.operators.some((op) => op !== signerOperator && operatorIdentityKeys[op] === countersigner);
+                if (!eligible)
+                    return { ok: false, versions, failure: { version, reason: 'countersigner-not-eligible', detail: kind === 'handover' ? 'the countersigner is not the identity key of an incoming operator' : 'the countersigner is not another operator of the federation' } };
+                if (!verifySignature(countersigner, preimage, countersignature))
+                    return { ok: false, versions, failure: { version, reason: 'countersignature-invalid', detail: `the countersignature does not verify under ${countersigner}` } };
+            }
+        }
+        versions.push(version);
+        previous = policy;
+    }
+    return { ok: true, versions };
+}
+/** The policy version in force at an instant: the newest issued at or before it. */
+export function policyInForceAt(chain, at) {
+    const t = typeof at === 'string' ? instant(at) : at.getTime();
+    let inForce;
+    for (const policy of chain)
+        if (instant(policy.issuedAt) <= t && (inForce == null || policy.policyVersion > inForce.policyVersion))
+            inForce = policy;
+    return inForce;
+}
+/**
+ * The publisher keys a state or anchor of the given instant may be
+ * countersigned by, from a chain `verifyPolicyChain` has accepted. A key
+ * not yet active, or already retired, at that instant is not among them.
+ */
+export function publisherKeysAt(chain, at, role) {
+    const policy = policyInForceAt(chain, at);
+    if (policy == null)
+        return [];
+    const t = typeof at === 'string' ? instant(at) : at.getTime();
+    return [...new Set(policy.publishers.filter((p) => (role == null || p.role === role) && entryActiveAt(p, t)).map((p) => p.key))];
+}
+//# sourceMappingURL=publisherPolicy.js.map

package/dist/publisherPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisherPolicy.js","sourceRoot":"","sources":["../src/publisherPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAA;AAoD/D,MAAM,GAAG,GAAG,qBAAqB,CAAA;AACjC,MAAM,IAAI,GAAG,gDAAgD,CAAA;AAC7D,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC5D,6IAA6I;AAC7I,MAAM,WAAW,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAEtG,2GAA2G;AAC3G,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,GAAG,MAAM,CAAC,aAAa,CAAA;IAC5F,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;AAC3E,CAAC;AAED,4HAA4H;AAC5H,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,QAAkB,EAAE,GAAW;IACtE,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAqB,EAAE,EAAU;IACtD,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;AACtG,CAAC;AAED,0IAA0I;AAC1I,SAAS,UAAU,CAAC,MAAuB,EAAE,GAAW,EAAE,YAAoC;IAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAA;IAChF,IAAI,UAAU,IAAI,IAAI;QAAE,OAAO,UAAU,CAAA;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAC1D,OAAO,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AACzG,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB,EAAE,QAAqC;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAA;IACpC,IAAI,MAAM,CAAC,YAAY,KAAK,uBAAuB;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAA;IACnJ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAA;IACvI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAA;IACzH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gEAAgE,EAAE,CAAA;IAClT,IAAI,MAAM,CAAC,aAAa,EAAE,KAAK,KAAK,eAAe,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,yEAAyE,EAAE,CAAA;IAC5N,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAA;IACzM,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAA;QAC3I,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,GAAG,aAAa,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;QACvL,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,GAAG,iCAAiC,EAAE,CAAA;QAC9M,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,GAAG,8BAA8B,EAAE,CAAA;QAC/L,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,GAAG,sCAAsC,EAAE,CAAA;QACjM,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,GAAG,8CAA8C,EAAE,CAAA;IAC5L,CAAC;IACD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAA;QAChK,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAA;IAClI,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAA;QAClJ,IAAI,OAAO,IAAI,QAAQ,CAAC,aAAa;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,OAAO,oBAAoB,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAA;QAC1J,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,4DAA4D,EAAE,CAAA;QAC1K,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,oEAAoE,EAAE,CAAA;QAC7J,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAA;IAClP,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,oBAA4C;IACtG,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,EAAE,CAAA;IAC7I,IAAI,QAAqC,CAAA;IACzC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC9C,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAA;QACpC,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,EAAE,EAAE,CAAA;QAC1K,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC,aAAa,CAAA;QACrF,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,2CAA2C,MAAM,EAAE,EAAE,EAAE,CAAA;QAE7L,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE,qEAAqE,EAAE,EAAE,CAAA;YAC5K,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACvC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAA;YACvL,IAAI,CAAC,mBAAmB;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,sEAAsE,EAAE,EAAE,CAAA;YAC3L,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;YAC7J,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,gEAAgE,EAAE,EAAE,CAAA;YAC1L,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,qEAAqE,EAAE,EAAE,CAAA;YAC9L,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAA;YACzE,MAAM,YAAY,GAAG,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAA;YAC/E,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,aAAa,IAAI,IAAI,IAAI,gBAAgB,IAAI,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,oDAAoD,EAAE,EAAE,CAAA;gBAC3R,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAS,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;gBAC/F,MAAM,QAAQ,GAAG,IAAI,KAAK,UAAU;oBAClC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,aAAa,CAAC;oBACnE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,cAAc,IAAI,oBAAoB,CAAC,EAAE,CAAC,KAAK,aAAa,CAAC,CAAA;gBAC9G,IAAI,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,6DAA6D,EAAE,EAAE,CAAA;gBAC5Q,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,gBAAgB,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,8CAA8C,aAAa,EAAE,EAAE,EAAE,CAAA;YAClO,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtB,QAAQ,GAAG,MAAM,CAAA;IACnB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAC/B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,KAAwB,EAAE,EAAiB;IACzE,MAAM,CAAC,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAA;IAC7D,IAAI,OAAoC,CAAA;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK;QAAE,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YAAE,OAAO,GAAG,MAAM,CAAA;IACpJ,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAwB,EAAE,EAAiB,EAAE,IAAoB;IAC/F,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACzC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,EAAE,CAAA;IAC7B,MAAM,CAAC,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAA;IAC7D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAClI,CAAC"}

package/dist/signatures.d.ts

@@ -0,0 +1,84 @@
+import { type WalletProtocol } from '@bsv/sdk';
+import type { AnyDppStateData, DppState, DppStateData, DppStateDataV2 } from './types.js';
+/**
+ * Canonical version 1 user-signature preimage (`spec/record-model.md` §5): the
+ * concatenated raw bytes of fields 1–12 in standard order - never a JSON
+ * serialization.
+ *
+ * Framing note: §5 mandates plain concatenation, so the preimage bytes alone
+ * do not bind field boundaries. Boundary uniqueness comes from field
+ * validation (op enum, ISO timestamp, fixed-width keys/hashes, JSON rules)
+ * plus the chain invariants (genesis must be ACTIVATE, spend linkage,
+ * passport_id immutability), which together block re-split states from
+ * verifying in any spec-sanctioned consumer. Version 2 replaces this with a
+ * framed, domain-tagged preimage (`actorPreimageV2`); version 1 keeps it
+ * because a published state keeps the contract it was signed under.
+ */
+export declare function userPreimageV1(d: DppStateData): number[];
+/** Canonical version 1 server-signature preimage: fields 1–13 (user preimage + user_signature). */
+export declare function serverPreimageV1(d: DppStateData, userSignature: number[]): number[];
+/**
+ * Length framing (`spec/record-model-v2.md` §5): each item as its Bitcoin
+ * VarInt byte length followed by its bytes, in order. The same framing the
+ * anchor rail uses (`spec/rules.md` §5), so one rule serves both.
+ */
+export declare function frameFields(items: number[][]): number[];
+/**
+ * The version 2 actor preimage: the actor tag, then fields 1–15, every item
+ * length-framed. Two field tuples that differ anywhere produce different
+ * bytes, and the tag keeps a signature made for the publisher role, or for
+ * version 1, from verifying here.
+ */
+export declare function actorPreimageV2(d: DppStateDataV2): number[];
+/** The version 2 publisher preimage: the publisher tag, fields 1–15 and the actor signature, every item length-framed. */
+export declare function publisherPreimageV2(d: DppStateDataV2, actorSignature: number[]): number[];
+/** The actor's preimage under the version the data declares: version 1 unframed, version 2 framed and tagged. */
+export declare function userPreimage(d: AnyDppStateData): number[];
+/** The publisher's preimage under the version the data declares. */
+export declare function serverPreimage(d: AnyDppStateData, userSignature: number[]): number[];
+/** The BRC-43 protocol both signatures of a state derive under: one per version, so keys never cross. */
+export declare function protocolIdFor(d: object): WalletProtocol;
+/**
+ * The signing capability dpp-core needs: satisfied by @bsv/sdk ProtoWallet
+ * (backend, holds a root key) and by a BRC-100 WalletClient (connected path).
+ * createSignature signs ECDSA over sha256(data) with the BRC-42 child key for
+ * (protocolID, keyID, counterparty).
+ */
+export interface DataSigner {
+    createSignature: (args: {
+        data: number[];
+        protocolID: WalletProtocol;
+        keyID: string;
+        counterparty: string;
+    }) => Promise<{
+        signature: number[];
+    }>;
+}
+/**
+ * Create the actor signature (field 13 in version 1, field 16 in version 2):
+ * the actor signs the version's actor preimage with the child key for
+ * (the version's protocol, actor_keyID, counterparty 'anyone').
+ */
+export declare function createUserSignature(d: AnyDppStateData, actorWallet: DataSigner): Promise<number[]>;
+/**
+ * Create the publisher signature (field 14 in version 1, field 17 in version
+ * 2): the service signs the version's publisher preimage with the child key
+ * for (the version's protocol, keyID = passport_id, counterparty 'anyone').
+ * keyID is pinned to passport_id so verifiers can re-derive the service child
+ * key from on-chain data plus the published service identity key (§5).
+ */
+export declare function createServerSignature(d: AnyDppStateData, userSignature: number[], serverWallet: DataSigner): Promise<number[]>;
+/** Sign the actor and publisher preimages and assemble the complete state of the version the data declares. */
+export declare function completeState(d: AnyDppStateData, actorWallet: DataSigner, serverWallet: DataSigner): Promise<DppState>;
+/**
+ * Verify the actor signature against actor_identity_key + actor_keyID (§5;
+ * §8 check 1), under the version the state carries. Open verification: the
+ * key is derived with counterparty 'anyone', so no wallet or secret is needed.
+ */
+export declare function verifyUserSignature(state: DppState): boolean;
+/**
+ * Verify the publisher signature against a configured service identity key.
+ * Admission policy, not token validity (§5).
+ */
+export declare function verifyServerSignature(state: DppState, serverIdentityKey: string): boolean;
+//# sourceMappingURL=signatures.d.ts.map

package/dist/signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.d.ts","sourceRoot":"","sources":["../src/signatures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,cAAc,EAAE,MAAM,UAAU,CAAA;AAUlF,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEzF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,EAAE,CAExD;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAEnF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,CAOvD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,EAAE,CAE3D;AAED,0HAA0H;AAC1H,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAEzF;AAED,iHAAiH;AACjH,wBAAgB,YAAY,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CAEzD;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,CAAC,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAEpF;AAED,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,cAAc,CAEvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,MAAM,EAAE,CAAA;QACd,UAAU,EAAE,cAAc,CAAA;QAC1B,KAAK,EAAE,MAAM,CAAA;QACb,YAAY,EAAE,MAAM,CAAA;KACrB,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACvC;AAKD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,CAAC,EAAE,eAAe,EAClB,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,EAAE,CAAC,CAQnB;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,CAAC,EAAE,eAAe,EAClB,aAAa,EAAE,MAAM,EAAE,EACvB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,MAAM,EAAE,CAAC,CAQnB;AAED,+GAA+G;AAC/G,wBAAsB,aAAa,CACjC,CAAC,EAAE,eAAe,EAClB,WAAW,EAAE,UAAU,EACvB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,QAAQ,CAAC,CAanB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAW5D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,QAAQ,EACf,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAcT"}