@bsv/dpp-core 0.3.0-beta.1

package/dist/verifyChain.js

@@ -0,0 +1,314 @@
+import { tryParseDppOutput } from './codec.js';
+import { MANAGED_CUSTODY_PROFILE } from './constants.js';
+import { verifyServerSignature, verifyUserSignature } from './signatures.js';
+import { publisherKeysAt } from './publisherPolicy.js';
+import { checkControl, checkOwnerConsent, normaliseTransferAuthorities } from './owner.js';
+import { checkGenesisState, checkTransition } from './transition.js';
+/** What a reader reports when the managed-custody profile is selected and a version 2 TRANSFER carries no commitment. */
+export const ACCEPTANCE_COMMITMENT_REFUSAL = `TRANSFER carries no authorisation_commitment under ${MANAGED_CUSTODY_PROFILE}`;
+/**
+ * Locate THE DPP output of a transaction (§6 invariant 1: exactly one).
+ * Returns all matches; callers enforce the invariant.
+ */
+export function findDppOutputs(tx) {
+    const refs = [];
+    tx.outputs.forEach((output, outputIndex) => {
+        const parsed = tryParseDppOutput(output.lockingScript);
+        if (parsed != null) {
+            refs.push({ state: parsed.state, outputIndex, lockingPublicKey: parsed.lockingPublicKey });
+        }
+    });
+    return refs;
+}
+export async function inspectChain(txs, options = {}) {
+    const states = [];
+    let anyPending = false;
+    let unavailable;
+    const stop = (index, txid, kind, message) => ({
+        states,
+        failure: { index, txid, kind, message: `state ${index} (${txid}): ${message}` },
+        complete: false,
+        anyPending,
+        ...(unavailable == null ? {} : { spvUnavailable: unavailable }),
+    });
+    const staticPublisherKeys = [
+        ...(options.serverIdentityKey == null ? [] : [options.serverIdentityKey]),
+        ...(options.publisherKeys ?? []),
+    ];
+    const policy = options.publisherPolicy != null && options.publisherPolicy.length > 0 ? options.publisherPolicy : undefined;
+    // Every state-publisher key any version of the policy ever named: a
+    // countersignature that verifies under one of these but not under a key
+    // active at the state's time is a window failure, reported as such rather
+    // than as a stranger's signature.
+    const everPolicyKeys = policy == null ? [] : [...new Set(policy.flatMap((p) => p.publishers.filter((e) => e.role === 'state-publisher').map((e) => e.key)))];
+    const publisherSelected = staticPublisherKeys.length > 0 || policy != null;
+    const publisherKeysFor = (state) => policy == null ? staticPublisherKeys : [...staticPublisherKeys, ...publisherKeysAt(policy, state.timestamp, 'state-publisher')];
+    const consentSelected = options.ownerConsent != null && options.ownerConsent !== false;
+    const consentAuthorities = typeof options.ownerConsent === 'object'
+        ? normaliseTransferAuthorities(options.ownerConsent.authorities)
+        : [];
+    const controlAuthorities = options.controlAuthorities != null ? normaliseTransferAuthorities(options.controlAuthorities) : consentAuthorities;
+    let prev = null;
+    let genesis;
+    for (let i = 0; i < txs.length; i++) {
+        const tx = txs[i];
+        const txid = tx.id('hex');
+        const refs = findDppOutputs(tx);
+        if (refs.length !== 1) {
+            return stop(i, txid, 'encoding', `exactly one DPP output required, found ${refs.length}`);
+        }
+        const { state, outputIndex } = refs[0];
+        const userSignatureValid = verifyUserSignature(state);
+        const serverSignatureValid = !publisherSelected
+            ? null
+            : publisherKeysFor(state).some((key) => verifyServerSignature(state, key));
+        const publisherOutsideWindow = serverSignatureValid === false && everPolicyKeys.some((key) => verifyServerSignature(state, key));
+        let linkError;
+        let controlValid = null;
+        if (prev == null) {
+            linkError = checkGenesisState(state);
+            genesis = { txid, outputIndex };
+        }
+        else {
+            linkError = checkTransition(prev.state, state, prev.txid, {
+                prevOutputIndex: prev.outputIndex,
+                lineageGenesis: genesis,
+                authorities: controlAuthorities,
+            });
+            if (linkError == null) {
+                const spendsPrev = tx.inputs.some((input) => (input.sourceTransaction?.id('hex') ?? input.sourceTXID) === prev.txid &&
+                    input.sourceOutputIndex === prev.outputIndex);
+                if (!spendsPrev)
+                    linkError = 'state does not spend the previous tip output';
+            }
+            // The version 2 control proof is part of the link; it is reported on
+            // its own as well, so a report can say which rule a refused state broke.
+            if (state.version === '2')
+                controlValid = checkControl(prev.state, state, controlAuthorities) == null;
+        }
+        // The eighth, optional invariant of version 1 runs only where it is
+        // defined: on a TRANSFER whose link holds, under a profile that selects
+        // it. Anywhere else it reports null, so a consumer prints "not applicable"
+        // and never a pass the predicate did not earn. The managed-custody
+        // profile's requirement on a version 2 TRANSFER is reported the same way.
+        let consentError = null;
+        let ownerConsentValid = null;
+        if (prev != null && linkError == null && state.op === 'TRANSFER') {
+            if (state.version === '1' && consentSelected) {
+                consentError = checkOwnerConsent(prev.state, state, consentAuthorities);
+                ownerConsentValid = consentError == null;
+            }
+            else if (state.version === '2' && options.managedAcceptance === true && state.authorisationCommitment === '') {
+                consentError = ACCEPTANCE_COMMITMENT_REFUSAL;
+            }
+        }
+        let spv;
+        let spvReason;
+        let spvFailReason = 'merkle path does not validate against block headers';
+        const tracker = options.chainTracker;
+        if (tx.merklePath == null) {
+            spv = 'pending';
+            spvReason = 'no-proof';
+            anyPending = true;
+        }
+        else if (tracker == null || tracker === 'scripts only') {
+            spv = 'pending';
+            spvReason = 'header-check-disabled';
+            anyPending = true;
+        }
+        else {
+            // Three outcomes, not two. `verify` returns false only when the tracker
+            // answered and the root it holds for that height is a different root:
+            // that is evidence the proof is wrong, and the chain must fail. It
+            // throws when the tracker could not answer at all (service down, rate
+            // limited, socket error), which is evidence of nothing.
+            //
+            // Both used to land on 'failed', so one header service having a bad
+            // afternoon made every passport in the demonstration read "Could not
+            // verify" - the strongest accusation the product can make about a
+            // product, published because we could not reach a website. Unchecked is
+            // 'pending', and the reason travels with the result so an operator can
+            // see the outage instead of inferring it from complaints.
+            //
+            // A proof can also refute itself before any source is asked: one that
+            // does not contain this transaction's txid fails on local inspection,
+            // deterministically, and no outage explains it. That throw used to
+            // share the tracker's catch and land on 'pending', so a chain carrying
+            // a proof for some OTHER transaction stayed valid-with-pending forever.
+            // computeRoot is pre-flighted on its own so the two throws separate.
+            let proven = null;
+            let coversTxid = true;
+            try {
+                tx.merklePath.computeRoot(txid);
+            }
+            catch {
+                coversTxid = false;
+            }
+            if (!coversTxid) {
+                spv = 'failed';
+                spvReason = 'proof-does-not-contain-txid';
+                spvFailReason = 'merkle path does not contain this transaction';
+            }
+            else {
+                try {
+                    proven = await tx.merklePath.verify(txid, tracker);
+                }
+                catch (cause) {
+                    proven = null;
+                    unavailable ??= cause instanceof Error ? cause.message : String(cause);
+                }
+                if (proven == null) {
+                    spv = 'pending';
+                    spvReason = 'header-source-unavailable';
+                    anyPending = true;
+                }
+                else if (proven) {
+                    spv = 'verified';
+                }
+                else {
+                    spv = 'failed';
+                    spvReason = 'proof-refuted';
+                }
+            }
+        }
+        states.push({
+            index: i,
+            outputIndex,
+            state,
+            version: state.version,
+            txid,
+            op: state.op,
+            userSignatureValid,
+            serverSignatureValid,
+            ...(publisherOutsideWindow ? { publisherOutsideWindow: true } : {}),
+            linkageValid: linkError == null,
+            ownerConsentValid,
+            controlValid,
+            spv,
+            linkError,
+            consentError,
+            ...(spvReason == null ? {} : { spvReason }),
+        });
+        if (!userSignatureValid)
+            return stop(i, txid, 'userSignature', 'user_signature invalid');
+        if (serverSignatureValid === false) {
+            return stop(i, txid, 'serverSignature', publisherOutsideWindow
+                ? `server_signature verifies under a publisher key that was not active at ${state.timestamp}`
+                : 'server_signature invalid for configured service key');
+        }
+        if (linkError != null)
+            return stop(i, txid, 'linkage', linkError);
+        if (consentError != null)
+            return stop(i, txid, 'consent', consentError);
+        if (spv === 'failed')
+            return stop(i, txid, 'inclusion', spvFailReason);
+        prev = { state, txid, outputIndex };
+    }
+    return {
+        states,
+        complete: true,
+        anyPending,
+        ...(unavailable == null ? {} : { spvUnavailable: unavailable }),
+    };
+}
+/** The `StateCheck` a `ChainVerifyResult` carries, without the inspection's extra findings. */
+function toStateCheck(s) {
+    return {
+        txid: s.txid,
+        op: s.op,
+        userSignatureValid: s.userSignatureValid,
+        serverSignatureValid: s.serverSignatureValid,
+        linkageValid: s.linkageValid,
+        ownerConsentValid: s.ownerConsentValid,
+        spv: s.spv,
+    };
+}
+/**
+ * Verify a full passport chain, ordered genesis → tip (§6 + §8).
+ *
+ * What "Authentic ✓" means (§8): (1) the genesis maker signature is valid;
+ * (2) every link satisfies invariants 1–5, checked here both structurally
+ * (the next state spends the previous DPP output) and on the readable field
+ * (previous_txid equality); (3) SPV - each mined transaction's merkle path
+ * validates against block headers via the chain tracker. An unmined state
+ * passes with SPV 'pending'. Any failure ⇒ valid: false ("Could not verify").
+ *
+ * Script execution of spends is enforced by the network and is not
+ * re-evaluated here; the in-app checks are exactly the three above.
+ *
+ * This is supplied-history verification and nothing more: it says whether the
+ * states handed to it form a valid chain, not that the last one is the current
+ * tip, that its genesis was authorised, or that the attestation rail was
+ * checked. `verifyPassportEvidence` (evidence.ts) is the report that keeps
+ * those findings apart; this function keeps its one Boolean for the callers
+ * that mean exactly what it says.
+ */
+export async function verifyChain(txs, options = {}) {
+    // 'verified' is a claim that every mined state proved against block headers,
+    // and a failed chain never makes it, whatever its proofs said. It used to:
+    // first because the summary read only `anyPending`, then because it guarded
+    // a flag that only an SPV failure set, so a chain failing on a signature or
+    // on linkage - every proof good - still came back
+    // `{ valid: false, spv: 'verified' }`, and a consumer showing the two
+    // separately printed "inclusion proved" beside "did not check out". The
+    // failure path now says 'pending' outright; the per-state truth, including
+    // 'failed' where a proof was refuted, stays in `states`.
+    if (txs.length === 0)
+        return { valid: false, spv: 'pending', states: [], error: 'empty chain' };
+    const inspection = await inspectChain(txs, options);
+    const states = inspection.states.map(toStateCheck);
+    const unavailable = inspection.spvUnavailable == null ? {} : { spvUnavailable: inspection.spvUnavailable };
+    if (inspection.failure != null) {
+        return { valid: false, spv: 'pending', states, error: inspection.failure.message, ...unavailable };
+    }
+    return {
+        valid: true,
+        spv: inspection.anyPending ? 'pending' : 'verified',
+        states,
+        ...unavailable,
+    };
+}
+/**
+ * Reconstruct the ordered passport chain (genesis → tip) from a BEEF, e.g.
+ * as returned by the ls_dpp lookup. Transactions come out hydrated: merkle
+ * paths attached, input source transactions linked - ready for verifyChain.
+ * States of either version link by `previousTxid`; a version 2 state also
+ * carries the predecessor's output index, which the verifier checks.
+ */
+export function chainFromBeef(beef, passportId) {
+    const entries = [];
+    for (const beefTx of beef.txs) {
+        const tx = beefTx.tx;
+        if (tx == null)
+            continue;
+        const refs = findDppOutputs(tx);
+        const ref = refs.find((r) => passportId == null || r.state.passportId === passportId);
+        if (ref != null)
+            entries.push({ txid: beefTx.txid, state: ref.state });
+    }
+    if (entries.length === 0) {
+        throw new Error('BEEF contains no DPP states' + (passportId ? ` for ${passportId}` : ''));
+    }
+    const genesis = entries.filter((e) => e.state.previousTxid === '');
+    if (genesis.length !== 1) {
+        throw new Error(`expected exactly one genesis state, found ${genesis.length}`);
+    }
+    const byPrev = new Map(entries
+        .filter((e) => e.state.previousTxid !== '')
+        .map((e) => [e.state.previousTxid, e]));
+    const ordered = [];
+    let current = genesis[0];
+    while (current != null) {
+        const hydrated = beef.findAtomicTransaction(current.txid);
+        if (hydrated == null) {
+            throw new Error(`BEEF is missing transaction ${current.txid}`);
+        }
+        ordered.push(hydrated);
+        current = byPrev.get(current.txid);
+    }
+    if (ordered.length !== entries.length) {
+        throw new Error('BEEF contains DPP states that do not link into one chain');
+    }
+    return ordered;
+}
+//# sourceMappingURL=verifyChain.js.map

package/dist/verifyChain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChain.js","sourceRoot":"","sources":["../src/verifyChain.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,EAAE,eAAe,EAAwB,MAAM,sBAAsB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAA;AAC1F,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAkDpE,yHAAyH;AACzH,MAAM,CAAC,MAAM,6BAA6B,GAAG,sDAAsD,uBAAuB,EAAE,CAAA;AAE5H;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,EAAe;IAC5C,MAAM,IAAI,GAAmB,EAAE,CAAA;IAC/B,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACtD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC;AAiED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAkB,EAAE,UAA+B,EAAE;IACtF,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,WAA+B,CAAA;IACnC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,IAAsB,EAAE,OAAe,EAAmB,EAAE,CAAC,CAAC;QACvG,MAAM;QACN,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,KAAK,KAAK,IAAI,MAAM,OAAO,EAAE,EAAE;QAC/E,QAAQ,EAAE,KAAK;QACf,UAAU;QACV,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;KAChE,CAAC,CAAA;IAEF,MAAM,mBAAmB,GAAG;QAC1B,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;KACjC,CAAA;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1H,oEAAoE;IACpE,wEAAwE;IACxE,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,cAAc,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5J,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,IAAI,CAAA;IAC1E,MAAM,gBAAgB,GAAG,CAAC,KAAe,EAAY,EAAE,CACrD,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACjI,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAA;IACtF,MAAM,kBAAkB,GACtB,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;QACtC,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;QAChE,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,kBAAkB,GACtB,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAA;IAEpH,IAAI,IAAI,GAAkE,IAAI,CAAA;IAC9E,IAAI,OAA6B,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACjB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QAEzB,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,0CAA0C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,oBAAoB,GAAG,CAAC,iBAAiB;YAC7C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QAC5E,MAAM,sBAAsB,GAC1B,oBAAoB,KAAK,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QAEnG,IAAI,SAAwB,CAAA;QAC5B,IAAI,YAAY,GAAmB,IAAI,CAAA;QACvC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;YACpC,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxD,eAAe,EAAE,IAAI,CAAC,WAAW;gBACjC,cAAc,EAAE,OAAO;gBACvB,WAAW,EAAE,kBAAkB;aAChC,CAAC,CAAA;YACF,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAC/B,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,IAAK,CAAC,IAAI;oBACvE,KAAK,CAAC,iBAAiB,KAAK,IAAK,CAAC,WAAW,CAChD,CAAA;gBACD,IAAI,CAAC,UAAU;oBAAE,SAAS,GAAG,8CAA8C,CAAA;YAC7E,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG;gBAAE,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,IAAI,CAAA;QACvG,CAAC;QAED,oEAAoE;QACpE,wEAAwE;QACxE,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1E,IAAI,YAAY,GAAkB,IAAI,CAAA;QACtC,IAAI,iBAAiB,GAAmB,IAAI,CAAA;QAC5C,IAAI,IAAI,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;YACjE,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;gBAC7C,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAA;gBACvE,iBAAiB,GAAG,YAAY,IAAI,IAAI,CAAA;YAC1C,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,KAAK,EAAE,EAAE,CAAC;gBAC/G,YAAY,GAAG,6BAA6B,CAAA;YAC9C,CAAC;QACH,CAAC;QAED,IAAI,GAAsB,CAAA;QAC1B,IAAI,SAAuC,CAAA;QAC3C,IAAI,aAAa,GAAG,qDAAqD,CAAA;QACzE,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAA;QACpC,IAAI,EAAE,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;YAC1B,GAAG,GAAG,SAAS,CAAA;YACf,SAAS,GAAG,UAAU,CAAA;YACtB,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;aAAM,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YACzD,GAAG,GAAG,SAAS,CAAA;YACf,SAAS,GAAG,uBAAuB,CAAA;YACnC,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,wDAAwD;YACxD,EAAE;YACF,oEAAoE;YACpE,qEAAqE;YACrE,kEAAkE;YAClE,wEAAwE;YACxE,uEAAuE;YACvE,0DAA0D;YAC1D,EAAE;YACF,sEAAsE;YACtE,sEAAsE;YACtE,mEAAmE;YACnE,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,MAAM,GAAmB,IAAI,CAAA;YACjC,IAAI,UAAU,GAAG,IAAI,CAAA;YACrB,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,KAAK,CAAA;YACpB,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,GAAG,QAAQ,CAAA;gBACd,SAAS,GAAG,6BAA6B,CAAA;gBACzC,aAAa,GAAG,+CAA+C,CAAA;YACjE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;gBACpD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,GAAG,IAAI,CAAA;oBACb,WAAW,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACxE,CAAC;gBACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,GAAG,GAAG,SAAS,CAAA;oBACf,SAAS,GAAG,2BAA2B,CAAA;oBACvC,UAAU,GAAG,IAAI,CAAA;gBACnB,CAAC;qBAAM,IAAI,MAAM,EAAE,CAAC;oBAClB,GAAG,GAAG,UAAU,CAAA;gBAClB,CAAC;qBAAM,CAAC;oBACN,GAAG,GAAG,QAAQ,CAAA;oBACd,SAAS,GAAG,eAAe,CAAA;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,CAAC;YACR,WAAW;YACX,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI;YACJ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,kBAAkB;YAClB,oBAAoB;YACpB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,YAAY,EAAE,SAAS,IAAI,IAAI;YAC/B,iBAAiB;YACjB,YAAY;YACZ,GAAG;YACH,SAAS;YACT,YAAY;YACZ,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;SAC5C,CAAC,CAAA;QAEF,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAA;QACxF,IAAI,oBAAoB,KAAK,KAAK,EAAE,CAAC;YACnC,OAAO,IAAI,CACT,CAAC,EACD,IAAI,EACJ,iBAAiB,EACjB,sBAAsB;gBACpB,CAAC,CAAC,0EAA0E,KAAK,CAAC,SAAS,EAAE;gBAC7F,CAAC,CAAC,qDAAqD,CAC1D,CAAA;QACH,CAAC;QACD,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACjE,IAAI,YAAY,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QACvE,IAAI,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;QAEtE,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;IACrC,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,UAAU;QACV,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;KAChE,CAAA;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,CAAkB;IACtC,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;QAC5C,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,GAAG,EAAE,CAAC,CAAC,GAAG;KACX,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAkB,EAClB,UAA8B,EAAE;IAEhC,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,kDAAkD;IAClD,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;IAE/F,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAClD,MAAM,WAAW,GAAG,UAAU,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,CAAA;IAC1G,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;IACpG,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;QACnD,MAAM;QACN,GAAG,WAAW;KACf,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAU,EAAE,UAAmB;IAC3D,MAAM,OAAO,GAA6C,EAAE,CAAA;IAC5D,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAA;QACpB,IAAI,EAAE,IAAI,IAAI;YAAE,SAAQ;QACxB,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAC/D,CAAA;QACD,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC,CAAA;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO;SACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CACzC,CAAA;IACD,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,IAAI,OAAO,GAAkD,OAAO,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,OAAO,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACzD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtB,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@bsv/dpp-core",
+  "version": "0.3.0-beta.1",
+  "description": "Experimental prerelease: DPP standard reference implementation: record versions 1 and 2, signature preimages, chain verification with SPV, the verification report, the native lifecycle claim, the generic anchor, the managed acceptance record, publisher key policy and the evidence package manifest",
+  "license": "SEE LICENSE IN LICENSE",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./schemas/*": "./schemas/*"
+  },
+  "files": [
+    "dist",
+    "schemas"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node ../../scripts/package-schemas.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@bsv/sdk": "2.4.2"
+  },
+  "devDependencies": {
+    "typescript": "^5.9.3",
+    "vitest": "4.1.11"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bsv-blockchain/dpp.git",
+    "directory": "packages/dpp-core"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "tag": "next"
+  },
+  "engines": {
+    "node": ">=22"
+  }
+}

package/schemas/capabilities.schema.json

@@ -0,0 +1,129 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://bsv-blockchain.github.io/dpp/contracts/capabilities.schema.json",
+  "title": "DPP capability document, version 1",
+  "description": "What one implementation declares it supports (spec/conformance.md section 4): roles, protocol versions, exact profiles with artefact digests, representations, proof suites, anchor formats, topics and services, limits, and what it explicitly does not support. A claim of support, checkable against the ledger; never proof of authority or conformance.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["capabilitiesVersion", "implementation", "roles", "protocols", "profiles", "representations", "proofSuites", "anchorFormats", "unsupported"],
+  "properties": {
+    "capabilitiesVersion": { "const": "1" },
+    "implementation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 },
+        "sourceRevision": { "type": "string", "pattern": "^[0-9a-f]{7,64}$" },
+        "baselineId": { "type": "string", "description": "The recommended baseline claimed, for example native-baseline@1." }
+      }
+    },
+    "roles": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "enum": ["passport-reader", "attestation-verifier", "passport-writer", "attestation-issuer", "registry", "overlay"] }
+    },
+    "protocols": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "version"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1, "description": "For example dpp-record, dpp-lifecycle, bsv-attestation-anchor, overlay-http, registry-http, verification-report." },
+          "version": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+    "profiles": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "version", "kind"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "version": { "type": "string", "minLength": 1 },
+          "kind": { "enum": ["industry", "exchange", "operator", "custody"] },
+          "artefactDigests": {
+            "type": "object",
+            "additionalProperties": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+            "description": "SHA-256 per artefact path or identifier the profile publishes."
+          },
+          "options": { "type": "object", "additionalProperties": true, "description": "The named options selected under the profile, for example ownerConsent or transferAuthorities." }
+        }
+      }
+    },
+    "representations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "mediaType", "verification"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "mediaType": { "type": "string", "minLength": 1 },
+          "verification": { "enum": ["content", "commitment-only"], "description": "content: the representation's own rules are implemented; commitment-only: anchors are indexed and content verification returns unsupported." }
+        }
+      }
+    },
+    "proofSuites": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "anchorFormats": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["prefix", "status"],
+        "properties": {
+          "prefix": { "type": "string", "minLength": 1 },
+          "status": { "enum": ["current", "historical", "refused"] }
+        }
+      }
+    },
+    "topics": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "services": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "publisherPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "How an overlay or registry authorises publishers and anchoring services, separately from its own identity.",
+      "properties": {
+        "policyVersion": { "type": "string" },
+        "publisherKeys": { "type": "array", "items": { "type": "string", "pattern": "^0[23][0-9a-f]{64}$" } },
+        "anchoringServices": { "type": "array", "items": { "type": "string", "pattern": "^0[23][0-9a-f]{64}$" } },
+        "ownerConsent": { "enum": ["not-selected", "required"] },
+        "transferAuthorities": { "type": "array", "items": { "type": "string", "pattern": "^0[23][0-9a-f]{64}$" } }
+      }
+    },
+    "synchronisation": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "The operator profile actually configured, so a client knows whether a second operator can be expected to hold the same evidence.",
+      "required": ["profile"],
+      "properties": {
+        "profile": { "type": "string", "minLength": 1, "description": "For example single-operator@1 or federated-operators@1." },
+        "discovery": { "enum": ["none", "ship-slap", "static-peers"] },
+        "gasp": { "type": "boolean" },
+        "peers": { "type": "array", "items": { "type": "string", "format": "uri" } }
+      }
+    },
+    "limits": {
+      "type": "object",
+      "additionalProperties": { "type": ["integer", "string"] },
+      "description": "Named service limits, for example maxLookupResults, defaultPageSize, maxBodyBytes, statusFetchTimeoutMs."
+    },
+    "unsupported": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "reason"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "reason": { "type": "string", "minLength": 1 }
+        }
+      }
+    }
+  }
+}