@claw-network/node 0.2.0

package/dist/services/identity-service.js

@@ -0,0 +1,286 @@
+/**
+ * IdentityService — on-chain identity operations for ClawIdentity.
+ *
+ * This service is the single point of truth for all DID write/read
+ * operations that hit the chain.  API route handlers delegate to it;
+ * it calls the ClawIdentity smart contract via ContractProvider and
+ * reads cached DID data from IndexerQuery when available.
+ *
+ * Design decisions:
+ * - DID string → bytes32 hash via `keccak256(toUtf8Bytes(did))`.
+ * - Ed25519 public keys are 32-byte `Uint8Array`/hex strings.
+ * - `rotationProof` is accepted but NOT verified on-chain in the
+ *   current contract version (deferred to Phase 2 T-0.14).
+ * - Capability CRUD stays off-chain (P2P / event store); this
+ *   service covers only registerDID / rotateKey / revokeDID /
+ *   addPlatformLink and their view counterparts.
+ */
+import { getBytes, keccak256, solidityPacked, toUtf8Bytes } from 'ethers';
+import { createLogger } from '../logger.js';
+// ---------------------------------------------------------------------------
+// Utilities
+// ---------------------------------------------------------------------------
+/**
+ * Derive a unique, deterministic EVM address for a DID.
+ *
+ * The address is a pseudo-address (no one holds its private key) used
+ * solely as a balance-holding account on the ERC-20 token contract.
+ * Token operations (mint / burn) are executed by the node signer which
+ * holds MINTER_ROLE and BURNER_ROLE.
+ *
+ * Formula: `'0x' + keccak256("clawnet:did-address:" + did)[last 20 bytes]`
+ */
+export function deriveAddressForDid(did) {
+    const hash = keccak256(toUtf8Bytes('clawnet:did-address:' + did));
+    // Take last 20 bytes (40 hex chars) of the 32-byte hash
+    return '0x' + hash.slice(26);
+}
+const KEY_PURPOSE_MAP = {
+    authentication: 0,
+    assertion: 1,
+    keyAgreement: 2,
+    recovery: 3,
+};
+const KEY_PURPOSE_REVERSE = {
+    0: 'authentication',
+    1: 'assertion',
+    2: 'keyAgreement',
+    3: 'recovery',
+};
+// ---------------------------------------------------------------------------
+// IdentityService
+// ---------------------------------------------------------------------------
+export class IdentityService {
+    contracts;
+    indexer;
+    log;
+    constructor(contracts, indexer, logger) {
+        this.contracts = contracts;
+        this.indexer = indexer;
+        this.log = logger ?? createLogger({ level: 'info' });
+    }
+    // ========================================================================
+    // READ operations
+    // ========================================================================
+    /**
+     * Resolve a DID to its full on-chain document.
+     *
+     * Reads the DIDRecord + active KeyRecord + platform links from the
+     * ClawIdentity contract.
+     *
+     * @returns The DID document, or `null` if not registered.
+     */
+    async resolve(did) {
+        const didHash = this.hashDid(did);
+        const identity = this.contracts.identity;
+        try {
+            const active = await identity.isActive(didHash);
+            const controller = await identity.getController(didHash);
+            if (controller === '0x0000000000000000000000000000000000000000') {
+                return null;
+            }
+            const publicKeyBytes = await identity.getActiveKey(didHash);
+            const activeKeyHash = keccak256(getBytes(publicKeyBytes));
+            // Get key record for purpose
+            const keyRecord = await identity.getKeyRecord(didHash, activeKeyHash);
+            const purpose = KEY_PURPOSE_REVERSE[Number(keyRecord.purpose)] ?? 'authentication';
+            // DID record for timestamps
+            const didRecord = await identity.dids(didHash);
+            const createdAt = Number(didRecord.createdAt);
+            const updatedAt = Number(didRecord.updatedAt);
+            // Platform links
+            const linkHashes = await identity.getPlatformLinks(didHash);
+            return {
+                did,
+                didHash,
+                controller,
+                publicKey: publicKeyBytes,
+                keyPurpose: purpose,
+                isActive: active,
+                createdAt,
+                updatedAt,
+                platformLinks: linkHashes,
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Get the controller EVM address for a DID.
+     *
+     * @returns The controller address, or `null` if not registered.
+     */
+    async getController(did) {
+        const didHash = this.hashDid(did);
+        try {
+            const controller = await this.contracts.identity.getController(didHash);
+            if (controller === '0x0000000000000000000000000000000000000000') {
+                return null;
+            }
+            return controller;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Check if a DID is active on-chain.
+     */
+    async isActive(did) {
+        const didHash = this.hashDid(did);
+        try {
+            return await this.contracts.identity.isActive(didHash);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Resolve a DID from the indexer cache (faster, eventually consistent).
+     *
+     * @returns Cached DID record or `null`.
+     */
+    getCachedDid(did) {
+        if (!this.indexer)
+            return null;
+        const didHash = this.hashDid(did);
+        return this.indexer.getDid(didHash);
+    }
+    // ========================================================================
+    // WRITE operations
+    // ========================================================================
+    /**
+     * Register a new DID on-chain.
+     *
+     * @param did        Full DID string (`did:claw:z6Mk...`)
+     * @param publicKey  Ed25519 public key (32 bytes, hex-encoded with `0x` prefix)
+     * @param purpose    Key purpose (default: `authentication`)
+     * @param evmAddress EVM address for cross-reference (default: signer address)
+     */
+    async registerDID(did, publicKey, purpose = 'authentication', evmAddress) {
+        const didHash = this.hashDid(did);
+        const purposeNum = KEY_PURPOSE_MAP[purpose];
+        const evmAddr = evmAddress ?? '0x0000000000000000000000000000000000000000';
+        // Contract defaults controller to msg.sender when evmAddress is zero
+        const controller = evmAddr === '0x0000000000000000000000000000000000000000'
+            ? this.contracts.signerAddress
+            : evmAddr;
+        this.log.info('Identity register: %s (purpose=%s)', did, purpose);
+        // H-01: sign registration digest for on-chain verification
+        const message = solidityPacked(['string', 'bytes32', 'address'], ['clawnet:register:v1:', didHash, controller]);
+        const digest = keccak256(message);
+        const evmSig = await this.contracts.signer.signMessage(getBytes(digest));
+        const tx = await this.contracts.identity.registerDID(didHash, publicKey, purposeNum, evmAddr, evmSig);
+        const receipt = await tx.wait();
+        return {
+            txHash: receipt.hash,
+            did,
+            controller,
+            timestamp: Date.now(),
+        };
+    }
+    /**
+     * Rotate the active key for a DID.
+     *
+     * @param did           Full DID string
+     * @param newPublicKey  New Ed25519 public key (hex, 32 bytes)
+     * @param rotationProof Signature proof from old key (hex).
+     *                      Not verified on-chain in current contract version.
+     */
+    async rotateKey(did, newPublicKey, rotationProof = '0x') {
+        const didHash = this.hashDid(did);
+        this.log.info('Identity rotate key: %s', did);
+        const tx = await this.contracts.identity.rotateKey(didHash, newPublicKey, rotationProof);
+        const receipt = await tx.wait();
+        // Extract old/new key hashes from the KeyRotated event
+        let oldKeyHash = '';
+        let newKeyHash = '';
+        for (const log of receipt.logs) {
+            try {
+                const parsed = this.contracts.identity.interface.parseLog({
+                    topics: log.topics,
+                    data: log.data,
+                });
+                if (parsed?.name === 'KeyRotated') {
+                    oldKeyHash = parsed.args[1];
+                    newKeyHash = parsed.args[2];
+                    break;
+                }
+            }
+            catch {
+                // Not our event — skip.
+            }
+        }
+        return {
+            txHash: receipt.hash,
+            did,
+            oldKeyHash,
+            newKeyHash,
+            timestamp: Date.now(),
+        };
+    }
+    /**
+     * Permanently revoke a DID.  This cannot be undone.
+     */
+    async revokeDID(did) {
+        const didHash = this.hashDid(did);
+        this.log.info('Identity revoke: %s', did);
+        const tx = await this.contracts.identity.revokeDID(didHash);
+        const receipt = await tx.wait();
+        return {
+            txHash: receipt.hash,
+            did,
+            timestamp: Date.now(),
+        };
+    }
+    /**
+     * Anchor a platform link hash to a DID on-chain.
+     */
+    async addPlatformLink(did, linkHash) {
+        const didHash = this.hashDid(did);
+        this.log.info('Identity add platform link: %s', did);
+        const tx = await this.contracts.identity.addPlatformLink(didHash, linkHash);
+        const receipt = await tx.wait();
+        return {
+            txHash: receipt.hash,
+            did,
+            linkHash,
+            timestamp: Date.now(),
+        };
+    }
+    // ========================================================================
+    // Helpers
+    // ========================================================================
+    /**
+     * Ensure a DID is registered on-chain.  If already registered, returns
+     * the existing controller.  If not, auto-registers via `batchRegisterDID`
+     * (REGISTRAR_ROLE — no ECDSA signature needed) with a **unique derived
+     * address** as controller so each DID has its own balance slot.
+     *
+     * @param did       Full DID string (`did:claw:z...`)
+     * @param publicKey Ed25519 public key (32 bytes, hex 0x-prefixed)
+     * @returns The controller (EVM) address (unique per DID).
+     */
+    async ensureRegistered(did, publicKey) {
+        // Check if already registered
+        const existing = await this.getController(did);
+        if (existing)
+            return existing;
+        const didHash = this.hashDid(did);
+        const controller = deriveAddressForDid(did);
+        this.log.info('Identity auto-register (batchRegisterDID): %s → %s', did, controller);
+        const tx = await this.contracts.identity.batchRegisterDID([didHash], [publicKey], [KEY_PURPOSE_MAP.authentication], [controller]);
+        await tx.wait();
+        return controller;
+    }
+    /**
+     * Hash a DID string to bytes32 for on-chain use.
+     *
+     * Uses keccak256(toUtf8Bytes(did)) — consistent with WalletService.
+     */
+    hashDid(did) {
+        return keccak256(toUtf8Bytes(did));
+    }
+}
+//# sourceMappingURL=identity-service.js.map

package/dist/services/identity-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-service.js","sourceRoot":"","sources":["../../src/services/identity-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAI5C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,CAAC;IAClE,wDAAwD;IACxD,OAAO,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAWD,MAAM,eAAe,GAA+B;IAClD,cAAc,EAAE,CAAC;IACjB,SAAS,EAAE,CAAC;IACZ,YAAY,EAAE,CAAC;IACf,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,mBAAmB,GAA+B;IACtD,CAAC,EAAE,gBAAgB;IACnB,CAAC,EAAE,WAAW;IACd,CAAC,EAAE,cAAc;IACjB,CAAC,EAAE,UAAU;CACd,CAAC;AA4CF,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,OAAO,eAAe;IAIP;IACA;IAJF,GAAG,CAAS;IAE7B,YACmB,SAA2B,EAC3B,OAAsB,EACvC,MAAe;QAFE,cAAS,GAAT,SAAS,CAAkB;QAC3B,YAAO,GAAP,OAAO,CAAe;QAGvC,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,2EAA2E;IAC3E,kBAAkB;IAClB,2EAA2E;IAE3E;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,UAAU,GAAW,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,UAAU,KAAK,4CAA4C,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,cAAc,GAAW,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACpE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;YAE1D,6BAA6B;YAC7B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,gBAAgB,CAAC;YAEnF,4BAA4B;YAC5B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAE9C,iBAAiB;YACjB,MAAM,UAAU,GAAa,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAEtE,OAAO;gBACL,GAAG;gBACH,OAAO;gBACP,UAAU;gBACV,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,OAAO;gBACnB,QAAQ,EAAE,MAAM;gBAChB,SAAS;gBACT,SAAS;gBACT,aAAa,EAAE,UAAU;aAC1B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,UAAU,GAAW,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAChF,IAAI,UAAU,KAAK,4CAA4C,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,2EAA2E;IAC3E,mBAAmB;IACnB,2EAA2E;IAE3E;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACf,GAAW,EACX,SAAiB,EACjB,UAAsB,gBAAgB,EACtC,UAAmB;QAEnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,UAAU,IAAI,4CAA4C,CAAC;QAC3E,qEAAqE;QACrE,MAAM,UAAU,GAAG,OAAO,KAAK,4CAA4C;YACzE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa;YAC9B,CAAC,CAAC,OAAO,CAAC;QAEZ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAElE,2DAA2D;QAC3D,MAAM,OAAO,GAAG,cAAc,CAC5B,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAChC,CAAC,sBAAsB,EAAE,OAAO,EAAE,UAAU,CAAC,CAC9C,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAClD,OAAO,EACP,SAAS,EACT,UAAU,EACV,OAAO,EACP,MAAM,CACP,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,GAAG;YACH,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACb,GAAW,EACX,YAAoB,EACpB,gBAAwB,IAAI;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAE9C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAChD,OAAO,EACP,YAAY,EACZ,aAAa,CACd,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhC,uDAAuD;QACvD,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;oBACxD,MAAM,EAAE,GAAG,CAAC,MAAkB;oBAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;iBACf,CAAC,CAAC;gBACH,IAAI,MAAM,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBAClC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC;oBACtC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC;oBACtC,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,GAAG;YACH,UAAU;YACV,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAE1C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,GAAG;YACH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,GAAW,EACX,QAAgB;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;QAErD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,GAAG;YACH,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,UAAU;IACV,2EAA2E;IAE3E;;;;;;;;;OASG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAAW,EACX,SAAiB;QAEjB,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAErF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CACvD,CAAC,OAAO,CAAC,EACT,CAAC,SAAS,CAAC,EACX,CAAC,eAAe,CAAC,cAAc,CAAC,EAChC,CAAC,UAAU,CAAC,CACb,CAAC;QACF,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,GAAW;QACzB,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/services/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Service layer barrel exports.
+ *
+ * Re-exports the chain configuration schema and the ContractProvider —
+ * the foundational building blocks on which individual module services
+ * (WalletService, IdentityService, …) will be built in later phases.
+ */
+export { ChainConfigSchema, ContractAddressesSchema, SignerConfigSchema, parseDeploymentAddresses, CONTRACT_NAMES, CONTRACT_KEYS, type ChainConfig, type ContractAddresses, type ContractKey, type SignerConfig, } from './chain-config.js';
+export { ContractProvider } from './contract-provider.js';
+export { WalletService } from './wallet-service.js';
+export type { TransferResult, BalanceResult, EscrowView, EscrowActionResult, EscrowCreateResult, TransactionHistoryResult, } from './wallet-service.js';
+export { IdentityService } from './identity-service.js';
+export type { KeyPurpose, DIDRegistrationResult, KeyRotationResult, DIDRevocationResult, PlatformLinkResult, DIDDocument, } from './identity-service.js';
+export { ReputationService } from './reputation-service.js';
+export type { ReputationDimensionName, ReputationProfile, ReviewRecordResult, AnchorResult, ReviewListResult, ReviewItem, } from './reputation-service.js';
+export { ContractsService } from './contracts-service.js';
+export type { ContractStatus, MilestoneStatus, DisputeResolution, ServiceContractView, MilestoneView, ContractCreateResult, ContractTxResult, MilestoneTxResult, ContractListResult, ServiceContractListItem, } from './contracts-service.js';
+export { DaoService } from './dao-service.js';
+export type { ProposalType, ProposalStatus, VoteSupport, ProposalView, VoteReceipt, VotingPowerResult, ProposalCreateResult, ProposalTxResult, VoteCastResult, TreasuryView, TreasuryDepositResult, GovParam, GovParamsResult, ProposalListResult, VoteListResult, } from './dao-service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACd,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EACV,cAAc,EACd,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EACV,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EACV,YAAY,EACZ,cAAc,EACd,WAAW,EACX,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,QAAQ,EACR,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,kBAAkB,CAAC"}

package/dist/services/index.js

@@ -0,0 +1,15 @@
+/**
+ * Service layer barrel exports.
+ *
+ * Re-exports the chain configuration schema and the ContractProvider —
+ * the foundational building blocks on which individual module services
+ * (WalletService, IdentityService, …) will be built in later phases.
+ */
+export { ChainConfigSchema, ContractAddressesSchema, SignerConfigSchema, parseDeploymentAddresses, CONTRACT_NAMES, CONTRACT_KEYS, } from './chain-config.js';
+export { ContractProvider } from './contract-provider.js';
+export { WalletService } from './wallet-service.js';
+export { IdentityService } from './identity-service.js';
+export { ReputationService } from './reputation-service.js';
+export { ContractsService } from './contracts-service.js';
+export { DaoService } from './dao-service.js';
+//# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACd,aAAa,GAKd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAUxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAU5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAc1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/services/reputation-service.d.ts

@@ -0,0 +1,128 @@
+/**
+ * ReputationService — on-chain reputation operations for ClawReputation.
+ *
+ * This service handles all reputation write/read operations that hit the
+ * chain.  Route handlers delegate to it; it calls ClawReputation.sol via
+ * ContractProvider and reads indexed review data from IndexerQuery.
+ *
+ * Design decisions:
+ * - DID → bytes32 hash via `keccak256(toUtf8Bytes(did))`.
+ * - Review hash is `keccak256(toUtf8Bytes(reviewId))` where
+ *   `reviewId` is the opaque identifier from the REST layer.
+ * - `anchorReputation` requires ANCHOR_ROLE — the node signer
+ *   must hold that role on the contract.
+ * - `recordReview` also requires ANCHOR_ROLE.
+ * - Scores are uint16, max 1000 (contract-enforced).
+ */
+import { createLogger } from '../logger.js';
+import type { ContractProvider } from './contract-provider.js';
+import type { IndexerQuery } from '../indexer/query.js';
+type Logger = ReturnType<typeof createLogger>;
+export type ReputationDimensionName = 'transaction' | 'fulfillment' | 'quality' | 'social' | 'behavior';
+export interface ReputationProfile {
+    did: string;
+    score: number;
+    epoch: number;
+    dimensions: {
+        transaction: number;
+        fulfillment: number;
+        quality: number;
+        social: number;
+        behavior: number;
+    };
+    merkleRoot: string;
+    timestamp: number;
+}
+export interface ReviewRecordResult {
+    txHash: string;
+    reviewHash: string;
+    subjectDid: string;
+    reviewerDid: string;
+    timestamp: number;
+}
+export interface AnchorResult {
+    txHash: string;
+    did: string;
+    overallScore: number;
+    epoch: number;
+    timestamp: number;
+}
+export interface ReviewListResult {
+    reviews: ReviewItem[];
+    total: number;
+    pagination: {
+        limit: number;
+        offset: number;
+        hasMore: boolean;
+    };
+}
+export interface ReviewItem {
+    reviewHash: string;
+    reviewerDid: string;
+    subjectDid: string;
+    relatedTxHash: string;
+    timestamp: number;
+}
+export declare class ReputationService {
+    private readonly contracts;
+    private readonly indexer?;
+    private readonly log;
+    constructor(contracts: ContractProvider, indexer?: IndexerQuery | undefined, logger?: Logger);
+    /**
+     * Fetch an agent's on-chain reputation profile.
+     *
+     * Reads `getReputation()` for the top-level score and epoch, then
+     * `getLatestSnapshot()` for dimensional scores and merkle root.
+     *
+     * @returns Profile, or `null` if DID has no reputation on-chain.
+     */
+    getProfile(did: string): Promise<ReputationProfile | null>;
+    /**
+     * Get reviews for a DID from the indexer.
+     *
+     * @param subjectDid  The DID whose reviews to fetch.
+     * @param opts        Pagination options.
+     */
+    getReviews(subjectDid: string, opts?: {
+        limit?: number;
+        offset?: number;
+    }): ReviewListResult | null;
+    /**
+     * Verify a review anchor on-chain.
+     */
+    verifyReview(reviewId: string): Promise<{
+        reviewerDid: string;
+        subjectDid: string;
+        txHash: string;
+        timestamp: number;
+        exists: boolean;
+    } | null>;
+    /**
+     * Record a review on-chain.
+     *
+     * The node signer must have ANCHOR_ROLE on ClawReputation.
+     *
+     * @param reviewId    Opaque review identifier (hashed to bytes32).
+     * @param reviewerDid Reviewer's full DID string.
+     * @param subjectDid  Subject's full DID string.
+     * @param relatedTxHash Associated transaction hash (bytes32).
+     */
+    recordReview(reviewId: string, reviewerDid: string, subjectDid: string, relatedTxHash: string): Promise<ReviewRecordResult>;
+    /**
+     * Anchor a reputation snapshot on-chain.
+     *
+     * The node signer must have ANCHOR_ROLE on ClawReputation.
+     *
+     * @param did              Agent's full DID string.
+     * @param overallScore     0–1000.
+     * @param dimensionScores  [transaction, fulfillment, quality, social, behavior] — each 0–1000.
+     * @param merkleRoot       Merkle root of all reviews in this epoch.
+     */
+    anchorReputation(did: string, overallScore: number, dimensionScores: [number, number, number, number, number], merkleRoot: string): Promise<AnchorResult>;
+    /** Hash a DID string to bytes32. */
+    private hashDid;
+    /** Hash an opaque identifier string to bytes32. */
+    private hashId;
+}
+export {};
+//# sourceMappingURL=reputation-service.d.ts.map

package/dist/services/reputation-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reputation-service.d.ts","sourceRoot":"","sources":["../../src/services/reputation-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,qBAAqB,CAAC;AAMtE,KAAK,MAAM,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;AAI9C,MAAM,MAAM,uBAAuB,GAC/B,aAAa,GACb,aAAa,GACb,SAAS,GACT,QAAQ,GACR,UAAU,CAAC;AAIf,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACjE;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAJ3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAGV,SAAS,EAAE,gBAAgB,EAC3B,OAAO,CAAC,EAAE,YAAY,YAAA,EACvC,MAAM,CAAC,EAAE,MAAM;IASjB;;;;;;;OAOG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAmChE;;;;;OAKG;IACH,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAC7C,gBAAgB,GAAG,IAAI;IA6B1B;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,IAAI,CAAC;IAoBT;;;;;;;;;OASG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,kBAAkB,CAAC;IA4B9B;;;;;;;;;OASG;IACG,gBAAgB,CACpB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EACzD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,CAAC;IA+CxB,oCAAoC;IACpC,OAAO,CAAC,OAAO;IAIf,mDAAmD;IACnD,OAAO,CAAC,MAAM;CAGf"}