@fileverse/api 0.0.13 → 0.0.14

package/dist/worker.js

@@ -1206,13 +1206,114 @@ var init_key_store = __esm({
   }
 });
 
+// src/sdk/ucan.ts
+import { sign, extractPublicKeyFromSecretKey } from "@stablelib/ed25519";
+import { toUint8Array } from "js-base64";
+function base58btcEncode(bytes) {
+  const digits = [0];
+  for (const byte of bytes) {
+    let carry = byte;
+    for (let j = 0; j < digits.length; j++) {
+      carry += digits[j] << 8;
+      digits[j] = carry % 58;
+      carry = carry / 58 | 0;
+    }
+    while (carry > 0) {
+      digits.push(carry % 58);
+      carry = carry / 58 | 0;
+    }
+  }
+  let result = "";
+  for (let i = 0; i < bytes.length && bytes[i] === 0; i++) {
+    result += BASE58_ALPHABET[0];
+  }
+  for (let i = digits.length - 1; i >= 0; i--) {
+    result += BASE58_ALPHABET[digits[i]];
+  }
+  return result;
+}
+function base64urlEncode(data) {
+  const bytes = typeof data === "string" ? new TextEncoder().encode(data) : data;
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function buildAndEncode(params) {
+  const {
+    issuer,
+    audience,
+    capabilities = [],
+    lifetimeInSeconds = 30,
+    expiration,
+    notBefore,
+    facts,
+    proofs = []
+  } = params;
+  const currentTime = Math.floor(Date.now() / 1e3);
+  const exp = expiration ?? currentTime + lifetimeInSeconds;
+  const header = { alg: issuer.jwtAlg, typ: "JWT", ucv: "0.8.1" };
+  const att = capabilities.map((cap) => ({
+    with: `${cap.with.scheme}:${cap.with.hierPart}`,
+    can: [cap.can.namespace, ...cap.can.segments].join("/")
+  }));
+  const payload = {
+    iss: issuer.did(),
+    aud: audience,
+    exp,
+    att,
+    prf: proofs
+  };
+  if (notBefore !== void 0) payload.nbf = notBefore;
+  if (facts !== void 0) payload.fct = facts;
+  const encodedHeader = base64urlEncode(JSON.stringify(header));
+  const encodedPayload = base64urlEncode(JSON.stringify(payload));
+  const signedData = `${encodedHeader}.${encodedPayload}`;
+  const sig = await issuer.sign(new TextEncoder().encode(signedData));
+  const signature = base64urlEncode(sig);
+  return `${signedData}.${signature}`;
+}
+var BASE58_ALPHABET, EDWARDS_DID_PREFIX, EdKeypair;
+var init_ucan = __esm({
+  "src/sdk/ucan.ts"() {
+    "use strict";
+    init_esm_shims();
+    BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+    EDWARDS_DID_PREFIX = new Uint8Array([237, 1]);
+    EdKeypair = class _EdKeypair {
+      jwtAlg = "EdDSA";
+      secretKey;
+      publicKey;
+      constructor(secretKey, publicKey) {
+        this.secretKey = secretKey;
+        this.publicKey = publicKey;
+      }
+      static fromSecretKey(key) {
+        const secretKey = toUint8Array(key);
+        const publicKey = extractPublicKeyFromSecretKey(secretKey);
+        return new _EdKeypair(secretKey, publicKey);
+      }
+      did() {
+        const bytes = new Uint8Array(EDWARDS_DID_PREFIX.length + this.publicKey.length);
+        bytes.set(EDWARDS_DID_PREFIX);
+        bytes.set(this.publicKey, EDWARDS_DID_PREFIX.length);
+        return "did:key:z" + base58btcEncode(bytes);
+      }
+      async sign(msg) {
+        return sign(this.secretKey, msg);
+      }
+    };
+  }
+});
+
 // src/sdk/auth-token-provider.ts
-import * as ucans from "@ucans/ucans";
 var AuthTokenProvider;
 var init_auth_token_provider = __esm({
   "src/sdk/auth-token-provider.ts"() {
     "use strict";
     init_esm_shims();
+    init_ucan();
     AuthTokenProvider = class {
       DEFAULT_OPTIONS = {
         namespace: "file",
@@ -1226,7 +1327,7 @@ var init_auth_token_provider = __esm({
         this.portalAddress = portalAddress;
       }
       async getAuthToken(audienceDid, options = this.DEFAULT_OPTIONS) {
-        const ucan = await ucans.build({
+        return buildAndEncode({
           audience: audienceDid,
           issuer: this.keyPair,
           lifetimeInSeconds: 7 * 86400,
@@ -1240,7 +1341,6 @@ var init_auth_token_provider = __esm({
             }
           ]
         });
-        return ucans.encode(ucan);
       }
     };
   }
@@ -2414,7 +2514,7 @@ import { derivePBKDF2Key, encryptAesCBC } from "@fileverse/crypto/kdf";
 import { secretBoxEncrypt } from "@fileverse/crypto/nacl";
 import hkdf from "futoin-hkdf";
 import tweetnacl from "tweetnacl";
-import { fromUint8Array, toUint8Array } from "js-base64";
+import { fromUint8Array, toUint8Array as toUint8Array2 } from "js-base64";
 import { toAESKey, aesEncrypt } from "@fileverse/crypto/webcrypto";
 import axios from "axios";
 import { encodeFunctionData, parseEventLogs } from "viem";
@@ -2454,8 +2554,8 @@ var init_file_utils = __esm({
       const encryptedBlob = new Blob([ciphertext], { type: file.type });
       const encryptedBlobWithAuthTagIv = await appendAuthTagIvToBlob(
         encryptedBlob,
-        toUint8Array(authTag),
-        toUint8Array(iv)
+        toUint8Array2(authTag),
+        toUint8Array2(iv)
       );
       return {
         encryptedFile: new File([encryptedBlobWithAuthTagIv], file.name),
@@ -2501,7 +2601,7 @@ var init_file_utils = __esm({
       };
     };
     encryptTitleWithFileKey = async (args) => {
-      const key = await toAESKey(toUint8Array(args.key));
+      const key = await toAESKey(toUint8Array2(args.key));
       if (!key) throw new Error("Key is undefined");
       const titleBytes = new TextEncoder().encode(args.title);
       const encryptedTitle = await aesEncrypt(key, titleBytes, "base64");
@@ -2619,7 +2719,7 @@ var init_file_utils = __esm({
 });
 
 // src/sdk/file-manager.ts
-import { fromUint8Array as fromUint8Array2, toUint8Array as toUint8Array2 } from "js-base64";
+import { fromUint8Array as fromUint8Array2, toUint8Array as toUint8Array3 } from "js-base64";
 import { generateAESKey, exportAESKey } from "@fileverse/crypto/webcrypto";
 import { markdownToYjs } from "@fileverse/content-processor";
 var FileManager;
@@ -2640,8 +2740,8 @@ var init_file_manager = __esm({
       }
       createLocks(key, encryptedSecretKey, commentKey) {
         const appLock = {
-          lockedFileKey: this.keyStore.encryptData(toUint8Array2(key)),
-          lockedLinkKey: this.keyStore.encryptData(toUint8Array2(encryptedSecretKey)),
+          lockedFileKey: this.keyStore.encryptData(toUint8Array3(key)),
+          lockedLinkKey: this.keyStore.encryptData(toUint8Array3(encryptedSecretKey)),
           lockedChatKey: this.keyStore.encryptData(commentKey)
         };
         return { appLock, ownerLock: { ...appLock } };
@@ -2678,8 +2778,8 @@ var init_file_manager = __esm({
         console.log("Submitting add file trx");
         logger.debug(`Preparing to add file ${file.ddocId}`);
         const encryptedSecretKey = file.linkKey;
-        const nonce = toUint8Array2(file.linkKeyNonce);
-        const secretKey = toUint8Array2(file.secretKey);
+        const nonce = toUint8Array3(file.linkKeyNonce);
+        const secretKey = toUint8Array3(file.secretKey);
         console.log("Got encrypted secret key, nonce, and secret key");
         const yJSContent = markdownToYjs(file.content);
         console.log("Generated yjs content");
@@ -2690,7 +2790,7 @@ var init_file_manager = __esm({
         console.log("Generated comment key");
         const { appLock, ownerLock } = this.createLocks(key, encryptedSecretKey, commentKey);
         console.log("Built app lock and owner lock");
-        const linkLock = buildLinklock(secretKey, toUint8Array2(key), commentKey);
+        const linkLock = buildLinklock(secretKey, toUint8Array3(key), commentKey);
         console.log("Built link lock");
         const encryptedTitle = await encryptTitleWithFileKey({
           title: file.title || "Untitled",
@@ -2739,13 +2839,13 @@ var init_file_manager = __esm({
       async submitUpdateFile(file) {
         logger.debug(`Submitting update for file ${file.ddocId} with onChainFileId ${file.onChainFileId}`);
         const encryptedSecretKey = file.linkKey;
-        const nonce = toUint8Array2(file.linkKeyNonce);
-        const secretKey = toUint8Array2(file.secretKey);
+        const nonce = toUint8Array3(file.linkKeyNonce);
+        const secretKey = toUint8Array3(file.secretKey);
         const yjsContent = markdownToYjs(file.content);
         const { encryptedFile, key } = await createEncryptedContentFile(yjsContent);
-        const commentKey = toUint8Array2(file.commentKey);
+        const commentKey = toUint8Array3(file.commentKey);
         const { appLock, ownerLock } = this.createLocks(key, encryptedSecretKey, commentKey);
-        const linkLock = buildLinklock(secretKey, toUint8Array2(key), commentKey);
+        const linkLock = buildLinklock(secretKey, toUint8Array3(key), commentKey);
         const encryptedTitle = await encryptTitleWithFileKey({
           title: file.title || "Untitled",
           key
@@ -2787,14 +2887,14 @@ var init_file_manager = __esm({
       async updateFile(file) {
         logger.debug(`Updating file ${file.ddocId} with onChainFileId ${file.onChainFileId}`);
         const encryptedSecretKey = file.linkKey;
-        const nonce = toUint8Array2(file.linkKeyNonce);
-        const secretKey = toUint8Array2(file.secretKey);
+        const nonce = toUint8Array3(file.linkKeyNonce);
+        const secretKey = toUint8Array3(file.secretKey);
         logger.debug(`Generating encrypted content file for file ${file.ddocId} with onChainFileId ${file.onChainFileId}`);
         const yjsContent = markdownToYjs(file.content);
         const { encryptedFile, key } = await createEncryptedContentFile(yjsContent);
-        const commentKey = toUint8Array2(file.commentKey);
+        const commentKey = toUint8Array3(file.commentKey);
         const { appLock, ownerLock } = this.createLocks(key, encryptedSecretKey, commentKey);
-        const linkLock = buildLinklock(secretKey, toUint8Array2(key), commentKey);
+        const linkLock = buildLinklock(secretKey, toUint8Array3(key), commentKey);
         const encryptedTitle = await encryptTitleWithFileKey({
           title: file.title || "Untitled",
           key
@@ -2846,11 +2946,10 @@ var init_file_manager = __esm({
 });
 
 // src/domain/portal/publish.ts
-import { fromUint8Array as fromUint8Array3, toUint8Array as toUint8Array3 } from "js-base64";
+import { fromUint8Array as fromUint8Array3, toUint8Array as toUint8Array4 } from "js-base64";
 import { stringToBytes } from "viem";
 import { deriveHKDFKey } from "@fileverse/crypto/kdf";
 import { generateKeyPairFromSeed } from "@stablelib/ed25519";
-import * as ucans2 from "@ucans/ucans";
 async function getPortalData(fileId) {
   const file = await FilesModel.findByIdIncludingDeleted(fileId);
   if (!file) {
@@ -2882,16 +2981,15 @@ var init_publish = __esm({
     init_infra();
     init_key_store();
     init_auth_token_provider();
+    init_ucan();
     init_smart_agent();
     init_file_manager();
     init_config();
     init_pimlico_utils();
     createFileManager = async (portalSeed, portalAddress, ucanSecret, privateAccountKey) => {
-      const keyPair = ucans2.EdKeypair.fromSecretKey(fromUint8Array3(ucanSecret), {
-        exportable: true
-      });
+      const keyPair = EdKeypair.fromSecretKey(fromUint8Array3(ucanSecret));
       const authTokenProvider = new AuthTokenProvider(keyPair, portalAddress);
-      const keyStore = new KeyStore(toUint8Array3(portalSeed), portalAddress, authTokenProvider);
+      const keyStore = new KeyStore(toUint8Array4(portalSeed), portalAddress, authTokenProvider);
       const agentClient = new AgentClient(authTokenProvider);
       await agentClient.initializeAgentClient(privateAccountKey);
       return new FileManager(keyStore, agentClient);
@@ -2910,7 +3008,7 @@ var init_publish = __esm({
     handleExistingFileOp = async (fileId, operation) => {
       try {
         const { file, portalDetails, apiKey } = await getPortalData(fileId);
-        const apiKeySeed = toUint8Array3(apiKey);
+        const apiKeySeed = toUint8Array4(apiKey);
         const { privateAccountKey, ucanSecret } = deriveCollaboratorKeys(apiKeySeed);
         const fileManager = await createFileManager(
           portalDetails.portalSeed,
@@ -2927,7 +3025,7 @@ var init_publish = __esm({
     handleNewFileOp = async (fileId) => {
       const { file, portalDetails, apiKey } = await getPortalData(fileId);
       console.log("Got portal data");
-      const apiKeySeed = toUint8Array3(apiKey);
+      const apiKeySeed = toUint8Array4(apiKey);
       const { privateAccountKey, ucanSecret } = deriveCollaboratorKeys(apiKeySeed);
       console.log("Derived collaborator keys");
       const fileManager = await createFileManager(
@@ -2941,7 +3039,7 @@ var init_publish = __esm({
     };
     getProxyAuthParams = async (fileId) => {
       const { portalDetails, apiKey } = await getPortalData(fileId);
-      const apiKeySeed = toUint8Array3(apiKey);
+      const apiKeySeed = toUint8Array4(apiKey);
       const { privateAccountKey, ucanSecret } = deriveCollaboratorKeys(apiKeySeed);
       const fileManager = await createFileManager(
         portalDetails.portalSeed,