@enbox/gitd 0.0.1

package/dist/esm/resolver/resolve.js

@@ -0,0 +1,189 @@
+/**
+ * Package resolver — resolves DID-scoped packages from remote DWNs.
+ *
+ * Resolution flow:
+ *   1. Resolve DID → DWN endpoints
+ *   2. Query package record by name + ecosystem
+ *   3. Query version record by semver
+ *   4. Fetch tarball binary
+ *
+ * All queries use the `from:` parameter to route to the remote DWN.
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { DateSort } from '@enbox/dwn-sdk-js';
+// ---------------------------------------------------------------------------
+// Resolve package
+// ---------------------------------------------------------------------------
+/**
+ * Find a package record on a target DID's DWN.
+ *
+ * @param ctx - Agent context for DWN queries
+ * @param targetDid - DID of the package publisher
+ * @param name - Package name
+ * @param ecosystem - Package ecosystem (default: 'npm')
+ */
+export function resolvePackage(ctx_1, targetDid_1, name_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, targetDid, name, ecosystem = 'npm') {
+        var _a, _b, _c;
+        const from = targetDid === ctx.did ? undefined : targetDid;
+        const { records } = yield ctx.registry.records.query('package', {
+            from,
+            filter: { tags: { name, ecosystem } },
+        });
+        if (records.length === 0) {
+            return null;
+        }
+        const rec = records[0];
+        const data = yield rec.data.json();
+        return {
+            name: (_a = data.name) !== null && _a !== void 0 ? _a : name,
+            ecosystem,
+            description: (_b = data.description) !== null && _b !== void 0 ? _b : '',
+            contextId: (_c = rec.contextId) !== null && _c !== void 0 ? _c : '',
+            publisherDid: targetDid,
+        };
+    });
+}
+// ---------------------------------------------------------------------------
+// Resolve version
+// ---------------------------------------------------------------------------
+/**
+ * Find a specific version of a package.
+ *
+ * @param ctx - Agent context
+ * @param targetDid - Publisher DID
+ * @param pkgContextId - Context ID of the package record
+ * @param semver - Semver string to resolve
+ */
+export function resolveVersion(ctx, targetDid, pkgContextId, semver) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e;
+        const from = targetDid === ctx.did ? undefined : targetDid;
+        const { records } = yield ctx.registry.records.query('package/version', {
+            from,
+            filter: {
+                contextId: pkgContextId,
+                tags: { semver },
+            },
+        });
+        if (records.length === 0) {
+            return null;
+        }
+        const rec = records[0];
+        const data = yield rec.data.json();
+        const tags = (_a = rec.tags) !== null && _a !== void 0 ? _a : {};
+        return {
+            semver: String((_c = (_b = tags.semver) !== null && _b !== void 0 ? _b : data.semver) !== null && _c !== void 0 ? _c : semver),
+            contextId: (_d = rec.contextId) !== null && _d !== void 0 ? _d : '',
+            dateCreated: rec.dateCreated,
+            deprecated: tags.deprecated === true,
+            dependencies: (_e = data.dependencies) !== null && _e !== void 0 ? _e : {},
+            author: rec.author,
+        };
+    });
+}
+// ---------------------------------------------------------------------------
+// List versions
+// ---------------------------------------------------------------------------
+/**
+ * List all versions of a package.
+ */
+export function listVersions(ctx, targetDid, pkgContextId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e;
+        const from = targetDid === ctx.did ? undefined : targetDid;
+        const { records } = yield ctx.registry.records.query('package/version', {
+            from,
+            filter: { contextId: pkgContextId },
+            dateSort: DateSort.CreatedDescending,
+        });
+        const versions = [];
+        for (const rec of records) {
+            const data = yield rec.data.json();
+            const tags = (_a = rec.tags) !== null && _a !== void 0 ? _a : {};
+            versions.push({
+                semver: String((_c = (_b = tags.semver) !== null && _b !== void 0 ? _b : data.semver) !== null && _c !== void 0 ? _c : ''),
+                contextId: (_d = rec.contextId) !== null && _d !== void 0 ? _d : '',
+                dateCreated: rec.dateCreated,
+                deprecated: tags.deprecated === true,
+                dependencies: (_e = data.dependencies) !== null && _e !== void 0 ? _e : {},
+                author: rec.author,
+            });
+        }
+        return versions;
+    });
+}
+// ---------------------------------------------------------------------------
+// Fetch tarball
+// ---------------------------------------------------------------------------
+/**
+ * Fetch the tarball for a specific version.
+ */
+export function fetchTarball(ctx, targetDid, versionContextId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const from = targetDid === ctx.did ? undefined : targetDid;
+        const { records } = yield ctx.registry.records.query('package/version/tarball', {
+            from,
+            filter: { contextId: versionContextId },
+        });
+        if (records.length === 0) {
+            return null;
+        }
+        const rec = records[0];
+        const blob = yield rec.data.blob();
+        return new Uint8Array(yield blob.arrayBuffer());
+    });
+}
+// ---------------------------------------------------------------------------
+// Full resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolve a full package specifier: `did:method:id/name@version`.
+ *
+ * Returns the package metadata, version metadata, and tarball bytes.
+ */
+export function resolveFullPackage(ctx_1, targetDid_1, name_1, semver_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, targetDid, name, semver, ecosystem = 'npm') {
+        const pkg = yield resolvePackage(ctx, targetDid, name, ecosystem);
+        if (!pkg) {
+            return null;
+        }
+        const version = yield resolveVersion(ctx, targetDid, pkg.contextId, semver);
+        if (!version) {
+            return null;
+        }
+        const tarball = yield fetchTarball(ctx, targetDid, version.contextId);
+        return { package: pkg, version, tarball };
+    });
+}
+// ---------------------------------------------------------------------------
+// Parse specifier
+// ---------------------------------------------------------------------------
+/**
+ * Parse a package specifier like `did:dht:abc123/my-pkg@1.0.0`.
+ *
+ * Returns `{ did, name, version }` or `null` if the format is invalid.
+ */
+export function parseSpecifier(specifier) {
+    // Match: did:method:id/name@version
+    const match = specifier.match(/^(did:[a-z0-9]+:[a-zA-Z0-9._:%-]+)\/([^@]+)@(.+)$/);
+    if (!match) {
+        return null;
+    }
+    return {
+        did: match[1],
+        name: match[2],
+        version: match[3],
+    };
+}
+//# sourceMappingURL=resolve.js.map

package/dist/esm/resolver/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/resolver/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAgC7C,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAgB,cAAc;yDAClC,GAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,YAAoB,KAAK;;QAEzB,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE;YAC9D,IAAI;YACJ,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAEnC,OAAO;YACL,IAAI,EAAW,MAAA,IAAI,CAAC,IAAI,mCAAI,IAAI;YAChC,SAAS;YACT,WAAW,EAAI,MAAA,IAAI,CAAC,WAAW,mCAAI,EAAE;YACrC,SAAS,EAAM,MAAA,GAAG,CAAC,SAAS,mCAAI,EAAE;YAClC,YAAY,EAAG,SAAS;SACzB,CAAC;IACJ,CAAC;CAAA;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAgB,cAAc,CAClC,GAAiB,EACjB,SAAiB,EACjB,YAAoB,EACpB,MAAc;;;QAEd,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAwB,EAAE;YAC7E,IAAI;YACJ,MAAM,EAAE;gBACN,SAAS,EAAG,YAAY;gBACxB,IAAI,EAAQ,EAAE,MAAM,EAAE;aACvB;SACF,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAA6B,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAC,GAAG,CAAC,IAA4C,mCAAI,EAAE,CAAC;QAErE,OAAO;YACL,MAAM,EAAS,MAAM,CAAC,MAAA,MAAA,IAAI,CAAC,MAAM,mCAAI,IAAI,CAAC,MAAM,mCAAI,MAAM,CAAC;YAC3D,SAAS,EAAM,MAAA,GAAG,CAAC,SAAS,mCAAI,EAAE;YAClC,WAAW,EAAI,GAAG,CAAC,WAAW;YAC9B,UAAU,EAAK,IAAI,CAAC,UAAU,KAAK,IAAI;YACvC,YAAY,EAAG,MAAC,IAAI,CAAC,YAAuC,mCAAI,EAAE;YAClE,MAAM,EAAS,GAAG,CAAC,MAAM;SAC1B,CAAC;IACJ,CAAC;CAAA;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAgB,YAAY,CAChC,GAAiB,EACjB,SAAiB,EACjB,YAAoB;;;QAEpB,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAwB,EAAE;YAC7E,IAAI;YACJ,MAAM,EAAK,EAAE,SAAS,EAAE,YAAY,EAAE;YACtC,QAAQ,EAAG,QAAQ,CAAC,iBAAiB;SACtC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAA6B,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAC,GAAG,CAAC,IAA4C,mCAAI,EAAE,CAAC;YAErE,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAS,MAAM,CAAC,MAAA,MAAA,IAAI,CAAC,MAAM,mCAAI,IAAI,CAAC,MAAM,mCAAI,EAAE,CAAC;gBACvD,SAAS,EAAM,MAAA,GAAG,CAAC,SAAS,mCAAI,EAAE;gBAClC,WAAW,EAAI,GAAG,CAAC,WAAW;gBAC9B,UAAU,EAAK,IAAI,CAAC,UAAU,KAAK,IAAI;gBACvC,YAAY,EAAG,MAAC,IAAI,CAAC,YAAuC,mCAAI,EAAE;gBAClE,MAAM,EAAS,GAAG,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CAAA;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAgB,YAAY,CAChC,GAAiB,EACjB,SAAiB,EACjB,gBAAwB;;QAExB,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAgC,EAAE;YACrF,IAAI;YACJ,MAAM,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;SACxC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;CAAA;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAgB,kBAAkB;yDACtC,GAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,MAAc,EACd,YAAoB,KAAK;QAEzB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAE1B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAE9B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAEtE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;CAAA;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAiB;IAEjB,oCAAoC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAE5B,OAAO;QACL,GAAG,EAAO,KAAK,CAAC,CAAC,CAAC;QAClB,IAAI,EAAM,KAAK,CAAC,CAAC,CAAC;QAClB,OAAO,EAAG,KAAK,CAAC,CAAC,CAAC;KACnB,CAAC;AACJ,CAAC"}

package/dist/esm/resolver/trust-chain.js

@@ -0,0 +1,155 @@
+/**
+ * Dependency trust chain — recursive verification of a package's
+ * dependency tree.
+ *
+ * Given a root package specifier like `did:dht:abc/utils@1.0.0`, the
+ * trust chain validator:
+ *
+ *   1. Resolves the package from the publisher's DWN
+ *   2. Verifies the package version (author, tarball, attestations)
+ *   3. Reads the version's `dependencies` field
+ *   4. Recursively resolves and verifies each dependency
+ *   5. Returns a tree of verification results
+ *
+ * The entire chain is verifiable without any central authority — each
+ * DID resolution, signature verification, and attestation check uses
+ * decentralized infrastructure.
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { verifyPackageVersion } from './verify.js';
+import { parseSpecifier, resolvePackage, resolveVersion } from './resolve.js';
+// ---------------------------------------------------------------------------
+// Trust chain builder
+// ---------------------------------------------------------------------------
+/**
+ * Build and verify a full dependency trust chain.
+ *
+ * @param ctx - Agent context
+ * @param targetDid - Root package publisher DID
+ * @param name - Root package name
+ * @param semver - Root package version
+ * @param ecosystem - Package ecosystem (default: 'npm')
+ * @param trustedAttestors - DIDs of trusted build services
+ * @param maxDepth - Maximum recursion depth (default: 10)
+ */
+export function buildTrustChain(ctx_1, targetDid_1, name_1, semver_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, targetDid, name, semver, ecosystem = 'npm', trustedAttestors = [], maxDepth = 10) {
+        const visited = new Set();
+        const failures = [];
+        let totalChecked = 0;
+        const root = yield buildNode(ctx, targetDid, name, semver, ecosystem, trustedAttestors, maxDepth, 0, visited, failures);
+        totalChecked = visited.size;
+        const allPassed = failures.length === 0;
+        return { root, totalChecked, allPassed, failures };
+    });
+}
+/**
+ * Recursively build a trust chain node.
+ */
+function buildNode(ctx, targetDid, name, semver, ecosystem, trustedAttestors, maxDepth, depth, visited, failures) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const specifier = `${targetDid}/${name}@${semver}`;
+        const node = {
+            specifier,
+            did: targetDid,
+            name,
+            version: semver,
+            verification: {
+                passed: false,
+                publisherDid: targetDid,
+                packageName: name,
+                version: semver,
+                checks: [],
+                attestations: [],
+            },
+            dependencies: [],
+        };
+        // Cycle detection.
+        if (visited.has(specifier)) {
+            node.verification.passed = true;
+            node.verification.checks = [{ check: 'cycle-skip', passed: true, detail: 'Already verified (cycle)' }];
+            return node;
+        }
+        visited.add(specifier);
+        // Depth guard.
+        if (depth > maxDepth) {
+            node.verification.checks = [{ check: 'max-depth', passed: true, detail: `Max depth ${maxDepth} reached` }];
+            node.verification.passed = true;
+            return node;
+        }
+        // Verify this package version.
+        node.verification = yield verifyPackageVersion(ctx, targetDid, name, semver, ecosystem, trustedAttestors);
+        if (!node.verification.passed) {
+            failures.push(`${specifier}: ${node.verification.checks.filter((c) => !c.passed).map((c) => c.detail).join('; ')}`);
+        }
+        // Resolve dependencies.
+        const pkg = yield resolvePackage(ctx, targetDid, name, ecosystem);
+        if (!pkg) {
+            return node;
+        }
+        const version = yield resolveVersion(ctx, targetDid, pkg.contextId, semver);
+        if (!version || !version.dependencies) {
+            return node;
+        }
+        const deps = version.dependencies;
+        for (const [depSpec, depVersion] of Object.entries(deps)) {
+            const parsed = parseSpecifier(`${depSpec}@${depVersion}`);
+            if (!parsed) {
+                // Dependency specifier is not a DID-scoped package — skip.
+                continue;
+            }
+            const childNode = yield buildNode(ctx, parsed.did, parsed.name, parsed.version, ecosystem, trustedAttestors, maxDepth, depth + 1, visited, failures);
+            node.dependencies.push(childNode);
+        }
+        return node;
+    });
+}
+// ---------------------------------------------------------------------------
+// Formatting
+// ---------------------------------------------------------------------------
+/**
+ * Format a trust chain tree as an indented string for CLI output.
+ */
+export function formatTrustChain(result) {
+    const lines = [];
+    lines.push(`Trust chain for ${result.root.specifier}`);
+    lines.push(`  Total packages checked: ${result.totalChecked}`);
+    lines.push(`  All passed: ${result.allPassed ? 'yes' : 'NO'}`);
+    if (result.failures.length > 0) {
+        lines.push('  Failures:');
+        for (const f of result.failures) {
+            lines.push(`    - ${f}`);
+        }
+    }
+    lines.push('');
+    formatNode(result.root, lines, 0);
+    return lines.join('\n');
+}
+function formatNode(node, lines, depth) {
+    const indent = '  '.repeat(depth);
+    const status = node.verification.passed ? 'PASS' : 'FAIL';
+    lines.push(`${indent}${status} ${node.specifier}`);
+    for (const check of node.verification.checks) {
+        const mark = check.passed ? '+' : 'x';
+        lines.push(`${indent}  [${mark}] ${check.check}: ${check.detail}`);
+    }
+    if (node.verification.attestations.length > 0) {
+        for (const att of node.verification.attestations) {
+            lines.push(`${indent}  [a] ${att.claim} by ${att.attestorDid}`);
+        }
+    }
+    for (const child of node.dependencies) {
+        formatNode(child, lines, depth + 1);
+    }
+}
+//# sourceMappingURL=trust-chain.js.map

package/dist/esm/resolver/trust-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-chain.js","sourceRoot":"","sources":["../../../src/resolver/trust-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;;;AAKH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAwB9E,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAgB,eAAe;yDACnC,GAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,MAAc,EACd,YAAoB,KAAK,EACzB,mBAA6B,EAAE,EAC/B,WAAmB,EAAE;QAErB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EACzD,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAC/B,CAAC;QAEF,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAExC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;CAAA;AAED;;GAEG;AACH,SAAe,SAAS,CACtB,GAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,gBAA0B,EAC1B,QAAgB,EAChB,KAAa,EACb,OAAoB,EACpB,QAAkB;;QAElB,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACnD,MAAM,IAAI,GAAmB;YAC3B,SAAS;YACT,GAAG,EAAY,SAAS;YACxB,IAAI;YACJ,OAAO,EAAQ,MAAM;YACrB,YAAY,EAAG;gBACb,MAAM,EAAS,KAAK;gBACpB,YAAY,EAAG,SAAS;gBACxB,WAAW,EAAI,IAAI;gBACnB,OAAO,EAAQ,MAAM;gBACrB,MAAM,EAAS,EAAE;gBACjB,YAAY,EAAG,EAAE;aAClB;YACD,YAAY,EAAE,EAAE;SACjB,CAAC;QAEF,mBAAmB;QACnB,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvB,eAAe;QACf,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,QAAQ,UAAU,EAAE,CAAC,CAAC;YAC3G,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,YAAY,GAAG,MAAM,oBAAoB,CAC5C,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAC1D,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,wBAAwB;QACxB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAE1B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAEvD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,2DAA2D;gBAC3D,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EACvD,gBAAgB,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,CACzD,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CAAA;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAElC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB,EAAE,KAAe,EAAE,KAAa;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAEnD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,IAAI,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/esm/resolver/verify.js

@@ -0,0 +1,186 @@
+/**
+ * Package verification — cryptographic verification of DWN package records.
+ *
+ * Verification checks:
+ *   1. **Author verification**: the record's `author` DID matches the publisher
+ *   2. **Attestation verification**: third-party attestation records are present
+ *      and signed by trusted attestors
+ *   3. **Integrity check**: tarball exists and is non-empty
+ *
+ * Since every DWN record is cryptographically signed via JWS in the
+ * `authorization` field, verification relies on the DWN SDK having
+ * already validated signatures during record ingestion.  Our verification
+ * layer adds semantic checks on top of that foundation.
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { DateSort } from '@enbox/dwn-sdk-js';
+// ---------------------------------------------------------------------------
+// Attestation queries
+// ---------------------------------------------------------------------------
+/**
+ * Fetch attestation records for a specific package version.
+ */
+export function fetchAttestations(ctx, targetDid, versionContextId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const from = targetDid === ctx.did ? undefined : targetDid;
+        const { records } = yield ctx.registry.records.query('package/version/attestation', {
+            from,
+            filter: { contextId: versionContextId },
+            dateSort: DateSort.CreatedAscending,
+        });
+        const attestations = [];
+        for (const rec of records) {
+            const data = yield rec.data.json();
+            attestations.push({
+                attestorDid: String((_a = data.attestorDid) !== null && _a !== void 0 ? _a : ''),
+                claim: String((_b = data.claim) !== null && _b !== void 0 ? _b : ''),
+                sourceCommit: data.sourceCommit,
+                sourceRepo: data.sourceRepo,
+                dateCreated: rec.dateCreated,
+            });
+        }
+        return attestations;
+    });
+}
+// ---------------------------------------------------------------------------
+// Verification
+// ---------------------------------------------------------------------------
+/**
+ * Verify a package version's integrity and provenance.
+ *
+ * Performs the following checks:
+ *   1. Package record exists and is owned by the expected DID
+ *   2. Version record exists and is authored by the publisher
+ *   3. Tarball exists and is non-empty
+ *   4. Attestations are present (informational — not required to pass)
+ *
+ * @param ctx - Agent context
+ * @param targetDid - Expected publisher DID
+ * @param name - Package name
+ * @param semver - Version string
+ * @param ecosystem - Ecosystem (default: 'npm')
+ * @param trustedAttestors - DIDs of trusted attestors (optional)
+ */
+export function verifyPackageVersion(ctx_1, targetDid_1, name_1, semver_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, targetDid, name, semver, ecosystem = 'npm', trustedAttestors = []) {
+        var _a, _b;
+        const checks = [];
+        const from = targetDid === ctx.did ? undefined : targetDid;
+        // -------------------------------------------------------------------------
+        // 1. Package record exists
+        // -------------------------------------------------------------------------
+        const { records: pkgRecords } = yield ctx.registry.records.query('package', {
+            from,
+            filter: { tags: { name, ecosystem } },
+        });
+        if (pkgRecords.length === 0) {
+            checks.push({ check: 'package-exists', passed: false, detail: `Package '${name}' not found on ${targetDid}` });
+            return { passed: false, publisherDid: targetDid, packageName: name, version: semver, checks, attestations: [] };
+        }
+        const pkgRec = pkgRecords[0];
+        checks.push({ check: 'package-exists', passed: true, detail: `Package '${name}' found` });
+        // -------------------------------------------------------------------------
+        // 2. Publisher matches — the record author is the expected DID
+        // -------------------------------------------------------------------------
+        const authorMatchesPkg = pkgRec.author === targetDid || pkgRec.creator === targetDid;
+        checks.push({
+            check: 'publisher-match',
+            passed: authorMatchesPkg,
+            detail: authorMatchesPkg
+                ? `Package authored by ${targetDid}`
+                : `Package author ${pkgRec.author} does not match expected ${targetDid}`,
+        });
+        // -------------------------------------------------------------------------
+        // 3. Version record exists and is authored by the publisher
+        // -------------------------------------------------------------------------
+        const { records: verRecords } = yield ctx.registry.records.query('package/version', {
+            from,
+            filter: {
+                contextId: pkgRec.contextId,
+                tags: { semver },
+            },
+        });
+        if (verRecords.length === 0) {
+            checks.push({ check: 'version-exists', passed: false, detail: `Version ${semver} not found` });
+            return { passed: false, publisherDid: targetDid, packageName: name, version: semver, checks, attestations: [] };
+        }
+        const verRec = verRecords[0];
+        checks.push({ check: 'version-exists', passed: true, detail: `Version ${semver} found` });
+        const authorMatchesVer = verRec.author === targetDid || verRec.creator === targetDid;
+        checks.push({
+            check: 'version-author',
+            passed: authorMatchesVer,
+            detail: authorMatchesVer
+                ? `Version authored by ${targetDid}`
+                : `Version author ${verRec.author} does not match expected ${targetDid}`,
+        });
+        // -------------------------------------------------------------------------
+        // 4. Tarball exists and is non-empty
+        // -------------------------------------------------------------------------
+        const { records: tarRecords } = yield ctx.registry.records.query('package/version/tarball', {
+            from,
+            filter: { contextId: verRec.contextId },
+        });
+        if (tarRecords.length === 0) {
+            checks.push({ check: 'tarball-exists', passed: false, detail: 'No tarball found' });
+        }
+        else {
+            const tarRec = tarRecords[0];
+            const size = (_a = tarRec.dataSize) !== null && _a !== void 0 ? _a : 0;
+            const hasData = size > 0;
+            checks.push({
+                check: 'tarball-exists',
+                passed: hasData,
+                detail: hasData ? `Tarball present (${size} bytes)` : 'Tarball is empty',
+            });
+        }
+        // -------------------------------------------------------------------------
+        // 5. Attestations
+        // -------------------------------------------------------------------------
+        const attestations = yield fetchAttestations(ctx, targetDid, (_b = verRec.contextId) !== null && _b !== void 0 ? _b : '');
+        if (attestations.length > 0) {
+            checks.push({
+                check: 'has-attestations',
+                passed: true,
+                detail: `${attestations.length} attestation(s) found`,
+            });
+        }
+        else {
+            checks.push({
+                check: 'has-attestations',
+                passed: true, // Informational — not required
+                detail: 'No attestations (none required)',
+            });
+        }
+        // -------------------------------------------------------------------------
+        // 6. Trusted attestor check (only if trustedAttestors provided)
+        // -------------------------------------------------------------------------
+        if (trustedAttestors.length > 0) {
+            const trustedFound = attestations.filter((a) => trustedAttestors.includes(a.attestorDid));
+            checks.push({
+                check: 'trusted-attestor',
+                passed: trustedFound.length > 0,
+                detail: trustedFound.length > 0
+                    ? `${trustedFound.length} trusted attestation(s): ${trustedFound.map((a) => a.claim).join(', ')}`
+                    : `No attestations from trusted attestors: ${trustedAttestors.join(', ')}`,
+            });
+        }
+        // -------------------------------------------------------------------------
+        // Overall result
+        // -------------------------------------------------------------------------
+        const passed = checks.every((c) => c.passed);
+        return { passed, publisherDid: targetDid, packageName: name, version: semver, checks, attestations };
+    });
+}
+//# sourceMappingURL=verify.js.map

package/dist/esm/resolver/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/resolver/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAgC7C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAgB,iBAAiB,CACrC,GAAiB,EACjB,SAAiB,EACjB,gBAAwB;;;QAExB,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,6BAAoC,EAAE;YACzF,IAAI;YACJ,MAAM,EAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE;YAC1C,QAAQ,EAAG,QAAQ,CAAC,gBAAgB;SACrC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAwB,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAA6B,CAAC;YAC9D,YAAY,CAAC,IAAI,CAAC;gBAChB,WAAW,EAAI,MAAM,CAAC,MAAA,IAAI,CAAC,WAAW,mCAAI,EAAE,CAAC;gBAC7C,KAAK,EAAU,MAAM,CAAC,MAAA,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC;gBACvC,YAAY,EAAG,IAAI,CAAC,YAAkC;gBACtD,UAAU,EAAK,IAAI,CAAC,UAAgC;gBACpD,WAAW,EAAI,GAAG,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CAAA;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAgB,oBAAoB;yDACxC,GAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,MAAc,EACd,YAAoB,KAAK,EACzB,mBAA6B,EAAE;;QAE/B,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3D,4EAA4E;QAC5E,2BAA2B;QAC3B,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE;YAC1E,IAAI;YACJ,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,kBAAkB,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/G,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAClH,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;QAE1F,4EAA4E;QAC5E,+DAA+D;QAC/D,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAI,iBAAiB;YAC1B,MAAM,EAAG,gBAAgB;YACzB,MAAM,EAAG,gBAAgB;gBACvB,CAAC,CAAC,uBAAuB,SAAS,EAAE;gBACpC,CAAC,CAAC,kBAAkB,MAAM,CAAC,MAAM,4BAA4B,SAAS,EAAE;SAC3E,CAAC,CAAC;QAEH,4EAA4E;QAC5E,4DAA4D;QAC5D,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAwB,EAAE;YACzF,IAAI;YACJ,MAAM,EAAE;gBACN,SAAS,EAAG,MAAM,CAAC,SAAS;gBAC5B,IAAI,EAAQ,EAAE,MAAM,EAAE;aACvB;SACF,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,MAAM,YAAY,EAAE,CAAC,CAAC;YAC/F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAClH,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,MAAM,QAAQ,EAAE,CAAC,CAAC;QAE1F,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAI,gBAAgB;YACzB,MAAM,EAAG,gBAAgB;YACzB,MAAM,EAAG,gBAAgB;gBACvB,CAAC,CAAC,uBAAuB,SAAS,EAAE;gBACpC,CAAC,CAAC,kBAAkB,MAAM,CAAC,MAAM,4BAA4B,SAAS,EAAE;SAC3E,CAAC,CAAC;QAEH,4EAA4E;QAC5E,qCAAqC;QACrC,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAgC,EAAE;YACjG,IAAI;YACJ,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;SACxC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAA,MAAM,CAAC,QAAQ,mCAAI,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAI,gBAAgB;gBACzB,MAAM,EAAG,OAAO;gBAChB,MAAM,EAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,SAAS,CAAC,CAAC,CAAC,kBAAkB;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAC5E,kBAAkB;QAClB,4EAA4E;QAC5E,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAA,MAAM,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC;QAErF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAI,kBAAkB;gBAC3B,MAAM,EAAG,IAAI;gBACb,MAAM,EAAG,GAAG,YAAY,CAAC,MAAM,uBAAuB;aACvD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAI,kBAAkB;gBAC3B,MAAM,EAAG,IAAI,EAAE,+BAA+B;gBAC9C,MAAM,EAAG,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAC5E,gEAAgE;QAChE,4EAA4E;QAC5E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAChD,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAI,kBAAkB;gBAC3B,MAAM,EAAG,YAAY,CAAC,MAAM,GAAG,CAAC;gBAChC,MAAM,EAAG,YAAY,CAAC,MAAM,GAAG,CAAC;oBAC9B,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,4BAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACjG,CAAC,CAAC,2CAA2C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAC5E,iBAAiB;QACjB,4EAA4E;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAE7C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACvG,CAAC;CAAA"}

package/dist/esm/shims/go/index.js

@@ -0,0 +1,9 @@
+/**
+ * Go module proxy shim module — DID-scoped module resolution via the
+ * GOPROXY HTTP protocol.
+ *
+ * @module
+ */
+export { handleGoProxyRequest, parseGoModulePath } from './proxy.js';
+export { startGoShim } from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/shims/go/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/shims/go/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIrE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}