@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/lib/ixo/delegation-verify.js

@@ -0,0 +1,101 @@
+/**
+ * Proving an owner→oracle delegation was SIGNED by the issuer it names.
+ *
+ * `parseDelegation` (ucanto's `extract`) decodes a CAR without checking its signature, and
+ * `verifyOwnerDelegation` (ucan.ts) compares only the fields the CAR itself claims — issuer,
+ * audience, resource, expiry. Without this check any holder of an evaluate grant on a collection
+ * (a competing oracle hired on it holds one by definition) could re-register it with a CAR naming
+ * the owner as issuer and signed by anyone: the forgery was stored, its `exp` (or none — valid
+ * forever, never refreshed from the UCAN Store) became the row's, and the claim bot refused every
+ * pull made under it, so a claim held only in Matrix failed for good.
+ *
+ * The signature is checked by `@ixo/ucan`'s own `validateDelegation` (`serverDid = ORACLE_DID`, the
+ * delegation's audience). The issuer's keys are resolved HERE (`resolveIssuerKeys`), through the ixo
+ * resolver on Blocksync over `fetchClient` (timeout, metrics), so its failure can be sorted before
+ * the validator sees it — by the SHAPE of Blocksync's answer, never by message text: a clean GraphQL
+ * answer with no document, or a document with no Ed25519 key, is as deterministic as a bad
+ * signature — a 400 (the store and pull paths read 400 as "skip this CAR", ucan-store.ts /
+ * lib/ixo/index.ts); an HTTP failure, a GraphQL `errors[]` or a throw is a 503 the caller retries. The validator then gets those keys through a closed resolver and makes no
+ * network call. An owner delegation is a root — the owner IS the issuer (`verifyOwnerDelegation`
+ * requires it): the portal signs it with `signerFromMnemonic(<user mnemonic>, did:ixo)`, the CLI
+ * with the AuthHub `edSigningMnemonic` — so the closed resolver answers for that one DID only.
+ */
+import { AppError } from "../errors.js";
+import { fetchClient } from "../http/client.js";
+/**
+ * The `did:key`s `issuerDid` publishes on chain. 400 (`ISSUER_UNRESOLVABLE`) when Blocksync answered
+ * cleanly and the DID has no document or no Ed25519 key; 503 for anything else. Resolve once per
+ * caller and hand the keys to every CAR it verifies (ucan-store.ts tries several).
+ */
+export async function resolveIssuerKeys(config, issuerDid, trace) {
+    const u = await import("@ixo/ucan");
+    let answer = { kind: "trouble" };
+    // The library's resolver decodes the verification methods (multibase, hex, base58); its fetch is
+    // ours, which also records the answer's shape. A throw leaves `trouble`.
+    const resolve = u.createIxoDIDResolver({
+        indexerUrl: config.BLOCKSYNC_GRAPHQL_URL,
+        fetch: async (input, init) => {
+            const res = await fetchClient(String(input instanceof Request ? input.url : input), {
+                ...init,
+                trace,
+            });
+            const json = res.ok
+                ? (await res
+                    .clone()
+                    .json()
+                    .catch(() => null))
+                : null;
+            answer =
+                json && !json.errors?.length && Array.isArray(json.data?.iids?.nodes)
+                    ? { kind: "clean", nodes: json.data.iids.nodes.length }
+                    : { kind: "trouble" };
+            return res;
+        },
+    });
+    const resolved = await resolve(issuerDid);
+    if ("ok" in resolved && resolved.ok.length > 0)
+        return resolved.ok;
+    const reason = "error" in resolved ? resolved.error.message : "no keys";
+    if (answer.kind === "clean") {
+        throw AppError.badRequest("delegation issuer publishes no Ed25519 key on chain", {
+            code: "ISSUER_UNRESOLVABLE",
+            message: answer.nodes === 0 ? `no DID document for ${issuerDid}` : reason,
+        });
+    }
+    throw AppError.unavailable(`could not resolve the delegation issuer's keys (${issuerDid})`, reason);
+}
+/**
+ * Throw unless the CAR's signature verifies against a key `issuerDid` publishes on chain — 400 when
+ * it does not (`details.code` carries the validator's code), and `resolveIssuerKeys`' answers when
+ * the keys cannot be had. `keys` reuses a resolution already made for the same issuer. The CAR must
+ * be a ROOT: a proof inside it is signed by someone else, whom the closed resolver does not answer
+ * for, so it is refused like a bad signature.
+ */
+export async function verifyDelegationSignature(config, car, issuerDid, keys, 
+/** Whom the delegation must be addressed to: this oracle's `ORACLE_DID` unless said (a payment
+ *  delegation is the facilitator's). */
+audience) {
+    const ORACLE_DID = audience ?? config.ORACLE_DID;
+    if (!ORACLE_DID)
+        throw AppError.internal("ORACLE_DID not configured");
+    const u = await import("@ixo/ucan");
+    const issuerKeys = await (keys ? keys() : resolveIssuerKeys(config, issuerDid));
+    const closed = async (did) => did === issuerDid
+        ? { ok: issuerKeys }
+        : { error: { name: "DIDKeyResolutionError", did, message: `not the issuer: ${did}` } };
+    const validator = await u.createUCANValidator({
+        serverDid: ORACLE_DID,
+        rootIssuers: ["*"],
+        didResolver: closed,
+        // A delegation is validated once here; replay protection has nothing to protect.
+        invocationStore: { has: async () => false, add: async () => { } },
+    });
+    const result = await validator.validateDelegation(car);
+    if (!result.ok) {
+        throw AppError.badRequest("delegation signature does not verify against the issuer's keys", {
+            code: result.error?.code,
+            message: result.error?.message,
+        });
+    }
+}
+//# sourceMappingURL=delegation-verify.js.map

package/dist/lib/ixo/delegation-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-verify.js","sourceRoot":"","sources":["../../../src/lib/ixo/delegation-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAU7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,SAAiB,EACjB,KAAoB;IAEpB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAY,CAAC;IAC3C,iGAAiG;IACjG,yEAAyE;IACzE,MAAM,OAAO,GAAG,CAAC,CAAC,oBAAoB,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC,qBAAqB;QACxC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;gBAClF,GAAG,IAAI;gBACP,KAAK;aACN,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE;gBACjB,CAAC,CAAE,CAAC,MAAM,GAAG;qBACR,KAAK,EAAE;qBACP,IAAI,EAAE;qBACN,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAGX;gBACX,CAAC,CAAC,IAAI,CAAC;YACT,MAAM;gBACJ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;oBACnE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBACvD,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAA0C,CAAC,CAAC;IAC3E,IAAI,IAAI,IAAI,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,CAAC,UAAU,CAAC,qDAAqD,EAAE;YAC/E,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,CAAC,WAAW,CACxB,mDAAmD,SAAS,GAAG,EAC/D,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,GAAW,EACX,SAAiB,EACjB,IAAgC;AAChC;wCACwC;AACxC,QAAiB;IAEjB,MAAM,UAAU,GAAG,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAmB,KAAK,EAAE,GAAG,EAAE,EAAE,CAC3C,GAAG,KAAK,SAAS;QACf,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE;QACpB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,GAAG,EAAE,EAAE,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,mBAAmB,CAAC;QAC5C,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,CAAC,GAAG,CAAC;QAClB,WAAW,EAAE,MAAM;QACnB,iFAAiF;QACjF,eAAe,EAAE,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE;KACjE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,QAAQ,CAAC,UAAU,CAAC,gEAAgE,EAAE;YAC1F,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI;YACxB,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;SAC/B,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/lib/ixo/did.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Peer-service did:web resolution. Every UCAN invocation we mint must pin its audience to the
+ * receiving service's DID, resolved from `{serviceUrl}/.well-known/did.json` → `.id` — exactly how
+ * the rest of the fleet advertises identity. Stable per deploy, so cached L1 (in-isolate) + L2 (KV).
+ */
+import type { TraceContext } from "../tracing.js";
+/**
+ * Resolve a peer service's did:web (engine, facilitator, VFS, UCAN Store, claim bot). Unreachable
+ * or invalid did.json, or one naming another host →
+ * `unavailable`: without it we cannot address an invocation, so the caller must fail closed.
+ */
+export declare function resolveServiceDid(trace: TraceContext, cache: KVNamespace, serviceUrl: string): Promise<string>;
+//# sourceMappingURL=did.d.ts.map

package/dist/lib/ixo/did.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../../src/lib/ixo/did.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CA6CjB"}

package/dist/lib/ixo/did.js

@@ -0,0 +1,85 @@
+/**
+ * Peer-service did:web resolution. Every UCAN invocation we mint must pin its audience to the
+ * receiving service's DID, resolved from `{serviceUrl}/.well-known/did.json` → `.id` — exactly how
+ * the rest of the fleet advertises identity. Stable per deploy, so cached L1 (in-isolate) + L2 (KV).
+ */
+import { AppError } from "../errors.js";
+import { fetchClient, readCappedBytes } from "../http/client.js";
+import { countCache, readCache } from "../metrics.js";
+/** A resolved service DID is stable per deploy; cache it a day. */
+const SERVICE_DID_TTL_SEC = 86_400;
+const l1ServiceDids = new Map();
+/**
+ * Resolve a peer service's did:web (engine, facilitator, VFS, UCAN Store, claim bot). Unreachable
+ * or invalid did.json, or one naming another host →
+ * `unavailable`: without it we cannot address an invocation, so the caller must fail closed.
+ */
+export async function resolveServiceDid(trace, cache, serviceUrl) {
+    const now = Math.floor(Date.now() / 1000);
+    const key = `svc-did:${serviceUrl}`;
+    const l1 = l1ServiceDids.get(key);
+    countCache("svc-did-l1", !!l1 && l1.exp > now);
+    if (l1 && l1.exp > now)
+        return l1.did;
+    const l2 = await readCache("svc-did", () => cache.get(key));
+    if (l2) {
+        l1ServiceDids.set(key, { did: l2, exp: now + SERVICE_DID_TTL_SEC });
+        return l2;
+    }
+    let res;
+    try {
+        res = await fetchClient(`${serviceUrl}/.well-known/did.json`, {
+            trace,
+            attempts: 3,
+            headers: { accept: "application/json" },
+        });
+    }
+    catch (err) {
+        throw AppError.unavailable(`Could not reach ${serviceUrl}/.well-known/did.json`, err);
+    }
+    if (!res.ok) {
+        // Discarded bodies pin one of the isolate's 6 open connections until GC.
+        await res.body?.cancel().catch(() => { });
+        throw AppError.unavailable(`${serviceUrl}/.well-known/did.json returned ${res.status}`);
+    }
+    // Read under a cap and held to the shape of a DID before it is believed: the claim bot's URL is
+    // derived from an entity's on-chain `MatrixHomeServer` (claim-bot.ts), so this document can come
+    // from any host — and its `id` is cached for a day as the audience of our invocations. A host
+    // answering ANOTHER service's did:web would have us mint (owner-delegation-backed) tokens that
+    // service accepts and hand them to it, so the id must name the host it was fetched from.
+    const id = await readDidDocumentId(res);
+    if (!id || !namesHost(id, serviceUrl)) {
+        throw AppError.unavailable(`Invalid did.json at ${serviceUrl} (missing, malformed or foreign id)`);
+    }
+    l1ServiceDids.set(key, { did: id, exp: now + SERVICE_DID_TTL_SEC });
+    await cache.put(key, id, { expirationTtl: SERVICE_DID_TTL_SEC }).catch(() => { });
+    return id;
+}
+/** A DID document is a few hundred bytes; 256 KiB is far past any real one. */
+const MAX_DID_DOCUMENT_BYTES = 256 * 1024;
+/**
+ * A peer service is a `did:web` on its own host (every fleet service — engine, facilitator, VFS,
+ * UCAN Store, claim bot — publishes exactly that; a `:port` percent-encoded). Bounded and
+ * whitespace-free; `:`-separated path segments allowed by the method.
+ */
+const SERVICE_DID_RE = /^did:web:[A-Za-z0-9._%:-]{1,256}$/;
+/** The did:web's host (`%3A` decoded back to the port's `:`) is the URL's own host. */
+function namesHost(did, serviceUrl) {
+    const host = did.slice("did:web:".length).split(":")[0]?.replace(/%3A/gi, ":").toLowerCase();
+    return host === URL.parse(serviceUrl)?.host.toLowerCase();
+}
+/** The document's `id` when the body is a JSON object carrying a did:web; null otherwise. */
+async function readDidDocumentId(res) {
+    try {
+        const bytes = await readCappedBytes(res, MAX_DID_DOCUMENT_BYTES);
+        if (!bytes)
+            return null;
+        const doc = JSON.parse(new TextDecoder().decode(bytes));
+        const id = doc && typeof doc === "object" ? doc.id : undefined;
+        return typeof id === "string" && SERVICE_DID_RE.test(id) ? id : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=did.js.map

package/dist/lib/ixo/did.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.js","sourceRoot":"","sources":["../../../src/lib/ixo/did.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGnD,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAwC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAmB,EACnB,KAAkB,EAClB,UAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,WAAW,UAAU,EAAE,CAAC;IAEpC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAC/C,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAEtC,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,EAAE,EAAE,CAAC;QACP,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,mBAAmB,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,UAAU,uBAAuB,EAAE;YAC5D,KAAK;YACL,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,WAAW,CAAC,mBAAmB,UAAU,uBAAuB,EAAE,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,yEAAyE;QACzE,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,UAAU,kCAAkC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,gGAAgG;IAChG,iGAAiG;IACjG,8FAA8F;IAC9F,+FAA+F;IAC/F,yFAAyF;IACzF,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,CAAC,WAAW,CACxB,uBAAuB,UAAU,qCAAqC,CACvE,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,+EAA+E;AAC/E,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C;;;;GAIG;AACH,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,uFAAuF;AACvF,SAAS,SAAS,CAAC,GAAW,EAAE,UAAkB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7F,OAAO,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,iBAAiB,CAAC,GAAa;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAA4B,CAAC;QACnF,MAAM,EAAE,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/ixo/grant-chain.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Walking a UCAN grant chain ourselves — the parse, the canonical CID, the summary a policy reads,
+ * and every signature checked against a key the issuer's DID resolves to. Shared by the Decision
+ * Console's credential (`middleware/api/console.ts`: role grants over a source) and the chain
+ * lane's reviewer grants (`lib/review/reviewer-grant.ts`: `claims/review` over a collection, company
+ * authority D2). Each caller brings its own policy; this file only says what the chain IS.
+ *
+ * Not `@ixo/ucan`'s `validator.validate`: ucanto's `claim()` matches `can` by exact string, and it
+ * resolves `did:ixo` keys through a resolver whose errors cannot be told apart — here a DID's own
+ * fault (`Invalid`) and a Blocksync outage (503, never cached) stay different answers.
+ */
+import type { Delegation, DIDKeyResolver } from "@ixo/ucan";
+import type { Config } from "../../config.js";
+/** One grant link, reduced to what a policy reads. JSON-safe: the console caches it in KV. */
+export interface Link {
+    cid: string;
+    issuer: string;
+    audience: string;
+    /** Seconds; null = no expiry. */
+    exp: number | null;
+    nbf: number | null;
+    caps: {
+        with: string;
+        can: string;
+        protocols?: string[];
+    }[];
+}
+/** A deterministic defect of the token itself (401 on a request, 400 on an upload). */
+export declare class Invalid extends Error {
+}
+/** Well-formed and signed, but not allowed (403 on a request, 400 on an upload). */
+export declare class Refused extends Error {
+}
+export declare function decode(token: string): Promise<Delegation>;
+/**
+ * The grant links under `top`, root first. `top` itself is not included. More than `limit.max`
+ * links is `Refused` with the caller's own words for it — how deep a chain may go is policy.
+ */
+export declare function proofsOf(top: Delegation, limit: {
+    max: number;
+    message: string;
+}): Promise<Delegation[]>;
+export declare const finite: (n: number | undefined) => number | null;
+export declare function summarize(d: Delegation): Promise<Link>;
+/** Tests replace Blocksync's IID lookup; `null` restores it. */
+export declare function setDidResolverForTests(r: DIDKeyResolver | null): void;
+/**
+ * `d` signed by exactly `key` — a did:key the caller has ALREADY tied to `d`'s issuer (an API-lane
+ * root's self-grant must be signed by the key its attestation was, which the attestation check
+ * proved is on the controller's IID), so nothing resolves here.
+ */
+export declare function verifySignedWith(d: Delegation, key: string): Promise<void>;
+/** Signatures of every delegation, and each link's audience is the next one's issuer. */
+export declare function verifyChain(config: Config, chain: Delegation[]): Promise<void>;
+//# sourceMappingURL=grant-chain.d.ts.map

package/dist/lib/ixo/grant-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-chain.d.ts","sourceRoot":"","sources":["../../../src/lib/ixo/grant-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,8FAA8F;AAC9F,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;CAC7D;AAED,uFAAuF;AACvF,qBAAa,OAAQ,SAAQ,KAAK;CAAG;AACrC,oFAAoF;AACpF,qBAAa,OAAQ,SAAQ,KAAK;CAAG;AAkBrC,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAW/D;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,UAAU,EACf,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,UAAU,EAAE,CAAC,CAgBvB;AASD,eAAO,MAAM,MAAM,MAAO,MAAM,GAAG,SAAS,kBACY,CAAC;AAuBzD,wBAAsB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAY5D;AAOD,gEAAgE;AAChE,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAErE;AAwDD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhF;AAED,yFAAyF;AACzF,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CASpF"}

package/dist/lib/ixo/grant-chain.js

@@ -0,0 +1,185 @@
+/**
+ * Walking a UCAN grant chain ourselves — the parse, the canonical CID, the summary a policy reads,
+ * and every signature checked against a key the issuer's DID resolves to. Shared by the Decision
+ * Console's credential (`middleware/api/console.ts`: role grants over a source) and the chain
+ * lane's reviewer grants (`lib/review/reviewer-grant.ts`: `claims/review` over a collection, company
+ * authority D2). Each caller brings its own policy; this file only says what the chain IS.
+ *
+ * Not `@ixo/ucan`'s `validator.validate`: ucanto's `claim()` matches `can` by exact string, and it
+ * resolves `did:ixo` keys through a resolver whose errors cannot be told apart — here a DID's own
+ * fault (`Invalid`) and a Blocksync outage (503, never cached) stay different answers.
+ */
+import { AppError } from "../errors.js";
+/** A deterministic defect of the token itself (401 on a request, 400 on an upload). */
+export class Invalid extends Error {
+}
+/** Well-formed and signed, but not allowed (403 on a request, 400 on an upload). */
+export class Refused extends Error {
+}
+const ucan = () => import("@ixo/ucan");
+/**
+ * Standard, padded base64 and nothing else. `Buffer.from(s, "base64")` also takes base64url, skips
+ * stray characters and ignores missing padding, so many strings decode to one CAR — and a grant is
+ * filed, stored and forwarded as the string. One CAR, one spelling: what decodes must re-encode to
+ * the very input (`@ixo/ucan`'s `serialize*` always produce that form).
+ */
+function strictBase64(token) {
+    const bytes = Buffer.from(token, "base64");
+    if (bytes.length === 0 || bytes.toString("base64") !== token) {
+        throw new Invalid("it is not a UCAN token (a standard, padded base64 CAR)");
+    }
+    return new Uint8Array(bytes);
+}
+export async function decode(token) {
+    const bytes = strictBase64(token);
+    const { UcantoServer } = await ucan();
+    let extracted;
+    try {
+        extracted = await UcantoServer.Delegation.extract(bytes);
+    }
+    catch {
+        throw new Invalid("it is not a UCAN token (a base64 CAR)");
+    }
+    if (extracted.error)
+        throw new Invalid(`it is not a UCAN token: ${extracted.error.message}`);
+    return extracted.ok;
+}
+/**
+ * The grant links under `top`, root first. `top` itself is not included. More than `limit.max`
+ * links is `Refused` with the caller's own words for it — how deep a chain may go is policy.
+ */
+export async function proofsOf(top, limit) {
+    const { UcantoServer } = await ucan();
+    const links = [];
+    let node = top;
+    while (node.proofs.length > 0) {
+        const [proof, ...more] = node.proofs;
+        if (more.length > 0)
+            throw new Invalid("each grant in the token may carry only one proof");
+        if (!proof || !UcantoServer.isDelegation(proof))
+            throw new Invalid("a grant the token names is not included in it — send the whole proof chain");
+        links.unshift(proof);
+        if (links.length > limit.max)
+            throw new Refused(limit.message);
+        node = proof;
+    }
+    return links;
+}
+/** `nb.protocols` as given; a malformed one narrows to nothing (fail closed). */
+function protocolsOf(nb) {
+    if (!nb || typeof nb !== "object" || !("protocols" in nb))
+        return undefined;
+    const p = nb.protocols;
+    return Array.isArray(p) && p.every((x) => typeof x === "string") ? p : [];
+}
+export const finite = (n) => typeof n === "number" && Number.isFinite(n) ? n : null;
+/**
+ * The CID a delegation IS: what its signature covers — the model as the signed JWT payload
+ * formats it, parsed back and encoded as DAG-CBOR under sha2-256 (what ucanto issues). Not
+ * `d.cid`, the key the CAR filed the block under, which nothing checks: the same signed grant
+ * re-filed under a sha2-512 CID, re-wrapped as a raw JWT block, or re-encoded with a field the
+ * signed payload drops (an empty `nnc`) would each dodge a CID-keyed revocation. Going through
+ * the signed form maps every such variant to the one grant; any other CID is refused.
+ */
+async function canonicalCid(d) {
+    const { UcantoServer } = await ucan();
+    const { jwt: _jwt, ...model } = d.data.model;
+    const { UCAN } = UcantoServer;
+    const cid = (await UCAN.write(UCAN.parse(UCAN.format(model)))).cid.toString();
+    if (cid !== d.cid.toString()) {
+        throw new Invalid(`grant ${d.cid} was re-encoded (its signed form is ${cid}) — send it exactly as it was issued`);
+    }
+    return cid;
+}
+export async function summarize(d) {
+    return {
+        cid: await canonicalCid(d),
+        issuer: d.issuer.did(),
+        audience: d.audience.did(),
+        exp: finite(d.expiration),
+        nbf: finite(d.notBefore),
+        caps: d.capabilities.map((cap) => {
+            const protocols = protocolsOf(cap.nb);
+            return { with: cap.with, can: cap.can, ...(protocols ? { protocols } : {}) };
+        }),
+    };
+}
+// --- DID resolution ----------------------------------------------------------------------------
+let resolver = null;
+let testResolver = null;
+/** Tests replace Blocksync's IID lookup; `null` restores it. */
+export function setDidResolverForTests(r) {
+    testResolver = r;
+}
+async function resolverFor(config) {
+    if (testResolver)
+        return testResolver;
+    resolver ??= (await ucan()).createIxoDIDResolver({ indexerUrl: config.BLOCKSYNC_GRAPHQL_URL });
+    return resolver;
+}
+/**
+ * The resolver answers `{ error }` for a missing IID and for a network blip alike; only these
+ * messages (`@ixo/ucan` 2.1's `ixo-resolver.js`) are the DID's own fault. Anything else is 503 and
+ * never cached — a Blocksync outage must not lock a signed-in member out for 30 s.
+ */
+const DETERMINISTIC = /^(DID document not found|No valid Ed25519|Cannot resolve .*not a did:ixo)/;
+async function keysOf(config, did) {
+    if (did.startsWith("did:key:"))
+        return [did];
+    if (!did.startsWith("did:ixo:"))
+        throw new Invalid(`${did} cannot sign here — use a did:ixo or did:key identity`);
+    const resolved = await (await resolverFor(config))(did);
+    if ("ok" in resolved)
+        return resolved.ok;
+    if (DETERMINISTIC.test(resolved.error.message)) {
+        throw new Invalid(`${did} cannot be checked: ${resolved.error.message}`);
+    }
+    throw AppError.unavailable("DID resolution temporarily unavailable", resolved.error);
+}
+/** Does `d`'s signature verify under `key` (a did:key) — the key standing in for `d`'s issuer? */
+async function signedBy(d, key) {
+    const { UcantoServer, ed25519 } = await ucan();
+    const issuer = d.issuer.did();
+    try {
+        const real = ed25519.Verifier.parse(key);
+        // The UCAN names the did:ixo; the key is the did:key it resolves to.
+        const verifier = {
+            did: () => issuer,
+            verify: (payload, sig) => real.verify(payload, sig),
+        };
+        // biome-ignore lint/suspicious/noExplicitAny: ucanto's view/verifier generics are not worth spelling out
+        return !!(await UcantoServer.UCAN.verifySignature(d.data, verifier));
+    }
+    catch {
+        // a non-Ed25519 key, or a malformed one
+        return false;
+    }
+}
+async function verifySignature(config, d) {
+    const issuer = d.issuer.did();
+    for (const key of await keysOf(config, issuer)) {
+        if (await signedBy(d, key))
+            return;
+    }
+    throw new Invalid(`the signature does not match any Ed25519 key on ${issuer}'s DID document — sign with the key registered on chain for that DID`);
+}
+/**
+ * `d` signed by exactly `key` — a did:key the caller has ALREADY tied to `d`'s issuer (an API-lane
+ * root's self-grant must be signed by the key its attestation was, which the attestation check
+ * proved is on the controller's IID), so nothing resolves here.
+ */
+export async function verifySignedWith(d, key) {
+    if (!(await signedBy(d, key))) {
+        throw new Invalid(`the signature does not match ${key}, the key the answers were signed with`);
+    }
+}
+/** Signatures of every delegation, and each link's audience is the next one's issuer. */
+export async function verifyChain(config, chain) {
+    chain.slice(1).forEach((next, i) => {
+        if (chain[i]?.audience.did() !== next.issuer.did()) {
+            throw new Invalid("the proof chain does not connect: each grant must be issued to the next signer");
+        }
+    });
+    await Promise.all(chain.map((d) => verifySignature(config, d)));
+}
+//# sourceMappingURL=grant-chain.js.map

package/dist/lib/ixo/grant-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-chain.js","sourceRoot":"","sources":["../../../src/lib/ixo/grant-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAarC,uFAAuF;AACvF,MAAM,OAAO,OAAQ,SAAQ,KAAK;CAAG;AACrC,oFAAoF;AACpF,MAAM,OAAO,OAAQ,SAAQ,KAAK;CAAG;AAErC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,OAAO,CAAC,wDAAwD,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;IACtC,IAAI,SAAsE,CAAC;IAC3E,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,SAAS,CAAC,KAAK;QAAE,MAAM,IAAI,OAAO,CAAC,2BAA2B,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7F,OAAO,SAAS,CAAC,EAAgB,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,KAAuC;IAEvC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,kDAAkD,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC;YAC7C,MAAM,IAAI,OAAO,CACf,4EAA4E,CAC7E,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,KAAmB,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG;YAAE,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,GAAG,KAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAAC,EAAW;IAC9B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,CAAC,GAAI,EAA6B,CAAC,SAAS,CAAC;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAqB,EAAE,EAAE,CAC9C,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEzD;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY,CAAC,CAAa;IACvC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;IACtC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAA+C,CAAC;IACvF,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC9E,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CACf,SAAS,CAAC,CAAC,GAAG,uCAAuC,GAAG,sCAAsC,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,CAAa;IAC3C,OAAO;QACL,GAAG,EAAE,MAAM,YAAY,CAAC,CAAC,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE;QAC1B,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC/B,MAAM,SAAS,GAAG,WAAW,CAAE,GAAwB,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/E,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,kGAAkG;AAElG,IAAI,QAAQ,GAA0B,IAAI,CAAC;AAC3C,IAAI,YAAY,GAA0B,IAAI,CAAC;AAE/C,gEAAgE;AAChE,MAAM,UAAU,sBAAsB,CAAC,CAAwB;IAC7D,YAAY,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,QAAQ,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAG,2EAA2E,CAAC;AAElG,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,GAAW;IAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,GAAG,GAAG,uDAAuD,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAgC,CAAC,CAAC;IACrF,IAAI,IAAI,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IACzC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,OAAO,CAAC,GAAG,GAAG,uBAAuB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,CAAC,WAAW,CAAC,wCAAwC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,QAAQ,CAAC,CAAa,EAAE,GAAW;IAChD,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAA0B,CAAC,CAAC;QAChE,qEAAqE;QACrE,MAAM,QAAQ,GAAG;YACf,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,CAAC,OAAmB,EAAE,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAY,CAAC;SAClF,CAAC;QACF,yGAAyG;QACzG,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAW,EAAE,QAAe,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,CAAa;IAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,MAAM,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,IAAI,OAAO,CACf,mDAAmD,MAAM,sEAAsE,CAChI,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CAAa,EAAE,GAAW;IAC/D,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,OAAO,CAAC,gCAAgC,GAAG,wCAAwC,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,KAAmB;IACnE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,OAAO,CACf,gFAAgF,CACjF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/lib/ixo/identity.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Dynamic did:web identity derived from a mnemonic + hostname.
+ *
+ * Mirrors subscriptions-api/src/lib/did-web/did-web.ts and the rest of the IXO fleet: uses the Web
+ * Crypto API (workerd-compatible, no libsodium/__dirname issues) and the shared derivation
+ *   SHA256(mnemonic UTF-8) -> 32-byte seed -> Ed25519 keypair -> multibase pubkey
+ * so our service DID resolves the same way every other IXO service resolves theirs.
+ *
+ * The hostname MUST be the pinned ORACLE_HOSTNAME (config), never the request Host header —
+ * otherwise an attacker-controlled Host could mint a service DID for a different origin and replay
+ * tokens across services.
+ */
+export interface DIDWebResult {
+    didDocument: Record<string, unknown>;
+    serviceDid: string;
+    publicKeyMultibase: string;
+}
+/** The derived service key. `privateKey` signs the UCAN invocations we mint; the public halves are published. */
+export interface ServiceKey {
+    privateKey: CryptoKey;
+    /** Raw 32-byte Ed25519 public key — the JWK `x` a verifier needs. */
+    publicKeyRaw: Uint8Array;
+    publicKeyMultibase: string;
+}
+/**
+ * SHA256(mnemonic) -> 32-byte seed -> Ed25519 keypair. The ONE place the service key is derived.
+ * The private handle never leaves this module's callers as bytes — only as a Web Crypto `CryptoKey`.
+ */
+export declare function deriveServiceKey(mnemonic: string): Promise<ServiceKey>;
+/** Derive (and memoize) the service did:web identity from mnemonic + hostname. */
+export declare function getDIDWeb(mnemonic: string, hostname: string): Promise<DIDWebResult>;
+//# sourceMappingURL=identity.d.ts.map

package/dist/lib/ixo/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/lib/ixo/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuBH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,iHAAiH;AACjH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,SAAS,CAAC;IACtB,qEAAqE;IACrE,YAAY,EAAE,UAAU,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAQD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAMtE;AAoCD,kFAAkF;AAClF,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA2BzF"}

package/dist/lib/ixo/identity.js

@@ -0,0 +1,104 @@
+/**
+ * Dynamic did:web identity derived from a mnemonic + hostname.
+ *
+ * Mirrors subscriptions-api/src/lib/did-web/did-web.ts and the rest of the IXO fleet: uses the Web
+ * Crypto API (workerd-compatible, no libsodium/__dirname issues) and the shared derivation
+ *   SHA256(mnemonic UTF-8) -> 32-byte seed -> Ed25519 keypair -> multibase pubkey
+ * so our service DID resolves the same way every other IXO service resolves theirs.
+ *
+ * The hostname MUST be the pinned ORACLE_HOSTNAME (config), never the request Host header —
+ * otherwise an attacker-controlled Host could mint a service DID for a different origin and replay
+ * tokens across services.
+ */
+// Base58btc alphabet.
+const ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+function base58btcEncode(bytes) {
+    let zeros = 0;
+    for (const byte of bytes) {
+        if (byte !== 0)
+            break;
+        zeros++;
+    }
+    let num = 0n;
+    for (const byte of bytes) {
+        num = num * 256n + BigInt(byte);
+    }
+    let result = "";
+    while (num > 0n) {
+        result = ALPHABET[Number(num % 58n)] + result;
+        num = num / 58n;
+    }
+    return "1".repeat(zeros) + result;
+}
+// Memoized per hostname for the isolate's lifetime — the key derivation is pure and expensive-ish.
+let cached = null;
+// Memoized per mnemonic: the same derivation backs the DID document and every invocation we sign,
+// so they cannot drift — an invocation always verifies against the key we publish.
+let keyCached = null;
+/**
+ * SHA256(mnemonic) -> 32-byte seed -> Ed25519 keypair. The ONE place the service key is derived.
+ * The private handle never leaves this module's callers as bytes — only as a Web Crypto `CryptoKey`.
+ */
+export function deriveServiceKey(mnemonic) {
+    const trimmed = mnemonic.trim();
+    if (keyCached?.mnemonic !== trimmed) {
+        keyCached = { mnemonic: trimmed, key: deriveServiceKeyUncached(trimmed) };
+    }
+    return keyCached.key;
+}
+async function deriveServiceKeyUncached(mnemonic) {
+    const mnemonicBytes = new TextEncoder().encode(mnemonic.trim());
+    const hashBuffer = await crypto.subtle.digest("SHA-256", mnemonicBytes);
+    const seed = new Uint8Array(hashBuffer).slice(0, 32);
+    // PKCS8 DER envelope for an Ed25519 private-key seed.
+    const pkcs8Header = new Uint8Array([
+        0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,
+    ]);
+    const pkcs8 = new Uint8Array(pkcs8Header.length + seed.length);
+    pkcs8.set(pkcs8Header);
+    pkcs8.set(seed, pkcs8Header.length);
+    const privateKey = await crypto.subtle.importKey("pkcs8", pkcs8, { name: "Ed25519" }, true, [
+        "sign",
+    ]);
+    const jwk = (await crypto.subtle.exportKey("jwk", privateKey));
+    // JWK 'x' is the base64url-encoded 32-byte public key.
+    const publicKeyRaw = new Uint8Array([...atob((jwk.x ?? "").replace(/-/g, "+").replace(/_/g, "/"))].map((c) => c.charCodeAt(0)));
+    // Multicodec prefix for ed25519-pub (0xed 0x01); multibase 'z' = base58btc.
+    const multicodecPrefixed = new Uint8Array(34);
+    multicodecPrefixed[0] = 0xed;
+    multicodecPrefixed[1] = 0x01;
+    multicodecPrefixed.set(publicKeyRaw, 2);
+    return {
+        privateKey,
+        publicKeyRaw,
+        publicKeyMultibase: `z${base58btcEncode(multicodecPrefixed)}`,
+    };
+}
+/** Derive (and memoize) the service did:web identity from mnemonic + hostname. */
+export async function getDIDWeb(mnemonic, hostname) {
+    if (cached && cached.hostname === hostname)
+        return cached;
+    const { publicKeyMultibase } = await deriveServiceKey(mnemonic);
+    // Percent-encode colons per the did:web spec (localhost:8787 -> localhost%3A8787).
+    const serviceDid = `did:web:${hostname.replace(/:/g, "%3A")}`;
+    const didDocument = {
+        "@context": [
+            "https://www.w3.org/ns/did/v1",
+            "https://w3id.org/security/suites/ed25519-2020/v1",
+        ],
+        id: serviceDid,
+        verificationMethod: [
+            {
+                id: `${serviceDid}#key-1`,
+                type: "Ed25519VerificationKey2020",
+                controller: serviceDid,
+                publicKeyMultibase,
+            },
+        ],
+        authentication: [`${serviceDid}#key-1`],
+        assertionMethod: [`${serviceDid}#key-1`],
+    };
+    cached = { hostname, didDocument, serviceDid, publicKeyMultibase };
+    return cached;
+}
+//# sourceMappingURL=identity.js.map

package/dist/lib/ixo/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/lib/ixo/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sBAAsB;AACtB,MAAM,QAAQ,GAAG,4DAA4D,CAAC;AAE9E,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM;QACtB,KAAK,EAAE,CAAC;IACV,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,GAAG,GAAG,EAAE,EAAE,CAAC;QAChB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;QAC9C,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;AACpC,CAAC;AAgBD,mGAAmG;AACnG,IAAI,MAAM,GAAiD,IAAI,CAAC;AAChE,kGAAkG;AAClG,mFAAmF;AACnF,IAAI,SAAS,GAA0D,IAAI,CAAC;AAE5E;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,SAAS,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;QACpC,SAAS,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAgB;IACtD,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAErD,sDAAsD;IACtD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC;QACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;KAC/F,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE;QAC1F,MAAM;KACP,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAe,CAAC;IAC7E,uDAAuD;IACvD,MAAM,YAAY,GAAG,IAAI,UAAU,CACjC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC3F,CAAC;IAEF,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9C,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO;QACL,UAAU;QACV,YAAY;QACZ,kBAAkB,EAAE,IAAI,eAAe,CAAC,kBAAkB,CAAC,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,QAAgB;IAChE,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE1D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChE,mFAAmF;IACnF,MAAM,UAAU,GAAG,WAAW,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;IAE9D,MAAM,WAAW,GAAG;QAClB,UAAU,EAAE;YACV,8BAA8B;YAC9B,kDAAkD;SACnD;QACD,EAAE,EAAE,UAAU;QACd,kBAAkB,EAAE;YAClB;gBACE,EAAE,EAAE,GAAG,UAAU,QAAQ;gBACzB,IAAI,EAAE,4BAA4B;gBAClC,UAAU,EAAE,UAAU;gBACtB,kBAAkB;aACnB;SACF;QACD,cAAc,EAAE,CAAC,GAAG,UAAU,QAAQ,CAAC;QACvC,eAAe,EAAE,CAAC,GAAG,UAAU,QAAQ,CAAC;KACzC,CAAC;IAEF,MAAM,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC"}