@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/esm/udid/wrapper.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The document the chain points at.
+ *
+ * A bare JWS on chain is honest and unreadable: every existing surface in the
+ * estate — the portal's claim detail, Jambo's credential list, our own
+ * receipt page — fetches a `verificationProof` and expects JSON. So the
+ * on-chain proof is this wrapper, which carries the decoded payload for
+ * anything that only wants to *display* it, and the `jws` plus its address
+ * for anything that wants to *check* it.
+ *
+ * The wrapper is a convenience and says so: `payload` here is a rendering.
+ * The artefact is `jws`, and `cid` is the address the exact bytes live at.
+ */
+/**
+ * The fields a wrapper's reader may rely on — the **base**, not our profile.
+ *
+ * This used to be `UdidPayload`, our own strict shape, and that was wrong in
+ * two ways at once. A determination in somebody else's profile — ixo's evals
+ * engine emits one — is still a determination this wrapper can carry, so
+ * typing it as ours claimed a guarantee the format does not make. And it made
+ * `wrapper.ts` depend on `schema.ts`, which imports zod: a type-only import,
+ * erased at runtime, but `tsc` still resolves it. The youth app builds
+ * standalone from its own package.json, so importing `parseWrapper` there
+ * broke its build on a validation library it neither installs nor needs.
+ *
+ * The index signature is the point: read what the base guarantees, and reach
+ * past it deliberately for anything a particular profile adds.
+ */
+export interface WrappedPayload {
+    iss: string;
+    sub: string;
+    aud: string;
+    iat: number;
+    kind: string;
+    ver: number;
+    sch?: string;
+    act: {
+        cap: string;
+        rub: {
+            id: string;
+        };
+        [key: string]: unknown;
+    };
+    res: {
+        outcome: number;
+        reason?: string;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+export interface UdidWrapper {
+    type: "udid";
+    version: "1.0";
+    kind: "oracle.eval.v1";
+    sch: "oracle.udid.ixo.v1";
+    /** A rendering of the signed bytes, for readers that only display. */
+    payload: WrappedPayload;
+    /** The artefact. Everything else here is derived from it. */
+    jws: string;
+    cid: string;
+    sha256: string;
+    createdAt: string;
+    /**
+     * Everything a stranger needs to check this without asking us anything.
+     *
+     * There is no "where to fetch the signature" here, deliberately: the
+     * signature is the `jws` field above, and `cid` is the content address of
+     * exactly those bytes. A reader holding this document already holds the
+     * artefact, and pointing them at a second copy would only give them a way
+     * to check the wrong one.
+     */
+    verify: {
+        /** Where the issuer's public keys are published, as a JWKS. */
+        issuerKeys: string;
+        /** What `aud` a verifier must pin, or a determination lifted from one
+         *  collection replays perfectly against another. */
+        expectedAud: string;
+    };
+}
+export declare function wrap(args: {
+    payload: WrappedPayload;
+    jws: string;
+    cid: string;
+    sha256: string;
+    createdAt: string;
+    /** Where the issuer's public keys are published. */
+    issuerKeysUrl: string;
+}): UdidWrapper;
+export declare function parseWrapper(text: string): UdidWrapper | null;
+//# sourceMappingURL=wrapper.d.ts.map

package/dist/esm/udid/wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../../../src/udid/wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClE,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,GAAG,EAAE,oBAAoB,CAAC;IAC1B,sEAAsE;IACtE,OAAO,EAAE,cAAc,CAAC;IACxB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,MAAM,EAAE;QACN,+DAA+D;QAC/D,UAAU,EAAE,MAAM,CAAC;QACnB;4DACoD;QACpD,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,WAAW,CAad;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAO7D"}

package/dist/esm/udid/wrapper.js

@@ -0,0 +1,37 @@
+/**
+ * The document the chain points at.
+ *
+ * A bare JWS on chain is honest and unreadable: every existing surface in the
+ * estate — the portal's claim detail, Jambo's credential list, our own
+ * receipt page — fetches a `verificationProof` and expects JSON. So the
+ * on-chain proof is this wrapper, which carries the decoded payload for
+ * anything that only wants to *display* it, and the `jws` plus its address
+ * for anything that wants to *check* it.
+ *
+ * The wrapper is a convenience and says so: `payload` here is a rendering.
+ * The artefact is `jws`, and `cid` is the address the exact bytes live at.
+ */
+export function wrap(args) {
+    return {
+        type: "udid",
+        version: "1.0",
+        kind: "oracle.eval.v1",
+        sch: "oracle.udid.ixo.v1",
+        payload: args.payload,
+        jws: args.jws,
+        cid: args.cid,
+        sha256: `sha256:${args.sha256}`,
+        createdAt: args.createdAt,
+        verify: { issuerKeys: args.issuerKeysUrl, expectedAud: args.payload.aud }
+    };
+}
+export function parseWrapper(text) {
+    try {
+        const doc = JSON.parse(text);
+        return doc?.type === "udid" && typeof doc.jws === "string" ? doc : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=wrapper.js.map

package/dist/esm/udid/wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../../src/udid/wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA4DH,MAAM,UAAU,IAAI,CAAC,IAQpB;IACC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,oBAAoB;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;QAC5C,OAAO,GAAG,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/esm/udid.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `@ixo/openhands-sdk/udid` — the UDID envelope: schema, canonical form, CIDs, keys, verification and DID resolution.
+ *
+ * Isomorphic by contract: nothing reachable from here imports a `node:`
+ * builtin or a server-only package (`barrels.test.ts` walks the graph and
+ * fails if one appears), so a browser bundle can import this barrel. A module
+ * that needs Node stays reachable only by its own subpath.
+ */
+export * from "./udid/base58.ts";
+export * from "./udid/canonical.ts";
+export * from "./udid/cid.ts";
+export * from "./udid/key.ts";
+export * from "./udid/resolve.ts";
+export * from "./udid/schema.ts";
+export * from "./udid/verify.ts";
+export * from "./udid/wrapper.ts";
+//# sourceMappingURL=udid.d.ts.map

package/dist/esm/udid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"udid.d.ts","sourceRoot":"","sources":["../../src/udid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}

package/dist/esm/udid.js

@@ -0,0 +1,17 @@
+/**
+ * `@ixo/openhands-sdk/udid` — the UDID envelope: schema, canonical form, CIDs, keys, verification and DID resolution.
+ *
+ * Isomorphic by contract: nothing reachable from here imports a `node:`
+ * builtin or a server-only package (`barrels.test.ts` walks the graph and
+ * fails if one appears), so a browser bundle can import this barrel. A module
+ * that needs Node stays reachable only by its own subpath.
+ */
+export * from "./udid/base58.js";
+export * from "./udid/canonical.js";
+export * from "./udid/cid.js";
+export * from "./udid/key.js";
+export * from "./udid/resolve.js";
+export * from "./udid/schema.js";
+export * from "./udid/verify.js";
+export * from "./udid/wrapper.js";
+//# sourceMappingURL=udid.js.map

package/dist/esm/udid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"udid.js","sourceRoot":"","sources":["../../src/udid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}

package/package.json

@@ -1,6 +1,212 @@
 {
   "name": "@ixo/openhands-sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "The Openhands protocol, board, campaign, chain, rubric, geo and UDID modules as one tree-shakeable package. Configuration is passed in (configure()) rather than read from the environment at import.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/impactsai/openhands-network.git",
+    "directory": "packages/openhands-sdk"
+  },
+  "homepage": "https://github.com/impactsai/openhands-network/tree/main/packages/openhands-sdk",
+  "bugs": {
+    "url": "https://github.com/impactsai/openhands-network/issues"
+  },
+  "keywords": [
+    "openhands-network",
+    "ixo",
+    "cosmos",
+    "udid",
+    "claims",
+    "sdk"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "!dist/**/*.test.*",
+    "LICENSE"
+  ],
+  "exports": {
+    "./config": {
+      "import": {
+        "types": "./dist/esm/config.d.ts",
+        "default": "./dist/esm/config.js"
+      },
+      "require": {
+        "types": "./dist/cjs/config.d.ts",
+        "default": "./dist/cjs/config.js"
+      }
+    },
+    "./protocol": {
+      "import": {
+        "types": "./dist/esm/protocol.d.ts",
+        "default": "./dist/esm/protocol.js"
+      },
+      "require": {
+        "types": "./dist/cjs/protocol.d.ts",
+        "default": "./dist/cjs/protocol.js"
+      }
+    },
+    "./board": {
+      "import": {
+        "types": "./dist/esm/board.d.ts",
+        "default": "./dist/esm/board.js"
+      },
+      "require": {
+        "types": "./dist/cjs/board.d.ts",
+        "default": "./dist/cjs/board.js"
+      }
+    },
+    "./campaign": {
+      "import": {
+        "types": "./dist/esm/campaign.d.ts",
+        "default": "./dist/esm/campaign.js"
+      },
+      "require": {
+        "types": "./dist/cjs/campaign.d.ts",
+        "default": "./dist/cjs/campaign.js"
+      }
+    },
+    "./geo": {
+      "import": {
+        "types": "./dist/esm/geo.d.ts",
+        "default": "./dist/esm/geo.js"
+      },
+      "require": {
+        "types": "./dist/cjs/geo.d.ts",
+        "default": "./dist/cjs/geo.js"
+      }
+    },
+    "./udid": {
+      "import": {
+        "types": "./dist/esm/udid.d.ts",
+        "default": "./dist/esm/udid.js"
+      },
+      "require": {
+        "types": "./dist/cjs/udid.d.ts",
+        "default": "./dist/cjs/udid.js"
+      }
+    },
+    "./rubric": {
+      "import": {
+        "types": "./dist/esm/rubric.d.ts",
+        "default": "./dist/esm/rubric.js"
+      },
+      "require": {
+        "types": "./dist/cjs/rubric.d.ts",
+        "default": "./dist/cjs/rubric.js"
+      }
+    },
+    "./chain": {
+      "import": {
+        "types": "./dist/esm/chain.d.ts",
+        "default": "./dist/esm/chain.js"
+      },
+      "require": {
+        "types": "./dist/cjs/chain.d.ts",
+        "default": "./dist/cjs/chain.js"
+      }
+    },
+    "./data": {
+      "import": {
+        "types": "./dist/esm/data/index.d.ts",
+        "default": "./dist/esm/data/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/data/index.d.ts",
+        "default": "./dist/cjs/data/index.js"
+      }
+    },
+    "./data/*": {
+      "import": {
+        "types": "./dist/esm/data/*.d.ts",
+        "default": "./dist/esm/data/*.js"
+      },
+      "require": {
+        "types": "./dist/cjs/data/*.d.ts",
+        "default": "./dist/cjs/data/*.js"
+      }
+    },
+    "./chain/*": {
+      "import": {
+        "types": "./dist/esm/chain/*.d.ts",
+        "default": "./dist/esm/chain/*.js"
+      },
+      "require": {
+        "types": "./dist/cjs/chain/*.d.ts",
+        "default": "./dist/cjs/chain/*.js"
+      }
+    },
+    "./rubric/*": {
+      "import": {
+        "types": "./dist/esm/rubric/*.d.ts",
+        "default": "./dist/esm/rubric/*.js"
+      },
+      "require": {
+        "types": "./dist/cjs/rubric/*.d.ts",
+        "default": "./dist/cjs/rubric/*.js"
+      }
+    },
+    "./geo/*": {
+      "import": {
+        "types": "./dist/esm/geo/*.d.ts",
+        "default": "./dist/esm/geo/*.js"
+      },
+      "require": {
+        "types": "./dist/cjs/geo/*.d.ts",
+        "default": "./dist/cjs/geo/*.js"
+      }
+    },
+    "./udid/*": {
+      "import": {
+        "types": "./dist/esm/udid/*.d.ts",
+        "default": "./dist/esm/udid/*.js"
+      },
+      "require": {
+        "types": "./dist/cjs/udid/*.d.ts",
+        "default": "./dist/cjs/udid/*.js"
+      }
+    },
+    "./campaign/*": {
+      "import": {
+        "types": "./dist/esm/campaign/*.d.ts",
+        "default": "./dist/esm/campaign/*.js"
+      },
+      "require": {
+        "types": "./dist/cjs/campaign/*.d.ts",
+        "default": "./dist/cjs/campaign/*.js"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "typecheck": "tsc -p tsconfig.json",
+    "test": "node --experimental-strip-types --test src/*.test.ts src/data/*.test.ts src/data/board/*.test.ts src/chain/*.test.ts src/rubric/*.test.ts src/geo/*.test.ts src/udid/*.test.ts src/campaign/*.test.ts"
+  },
+  "dependencies": {
+    "long": "^5.2.3",
+    "zod": "^4.4.3"
+  },
+  "peerDependencies": {
+    "@cosmjs/crypto": "^0.39.0",
+    "@cosmjs/encoding": "^0.39.0",
+    "@cosmjs/proto-signing": "^0.39.0",
+    "@cosmjs/stargate": "^0.39.0",
+    "@ixo/impactxclient-sdk": "3.0.0",
+    "@ixo/ucan": "^2.1.0"
+  },
+  "devDependencies": {
+    "@ixo/udid-verify": "0.1.1",
+    "@types/node": "^22.10.0",
+    "multiformats": "14.0.5",
+    "typescript": "^5.7.3"
+  },
+  "engines": {
+    "node": ">=22.12"
+  }
+}