@oxy.so/contracts 2.1.0 → 2.2.0

package/dist/types/identityMove.d.ts

@@ -1,185 +0,0 @@
-/**
- * Identity move contract — give a web root to Commons (add it, or keep it only in
- * Commons; ADR 0024 D6).
- *
- * The web (holding the root) shows a QR carrying only a move id; Commons scans.
- * The relay in between must not be able to take the root, so:
- *
- *  1. `POST /identity/move { initiatorCommitment }` — the web publishes only
- *     `H(initiatorKey, nonce)`, never the key.
- *  2. `POST /identity/move/:moveId/join { responderEphemeralPublicKey }` —
- *     Commons, having read the commitment first, joins with its own key.
- *  3. `POST /identity/move/:moveId/reveal` — only then does the web reveal its
- *     key and nonce; Commons checks them against the commitment it read.
- *  4. Both screens show a 6-digit code over `(moveId, both keys, commitment)`;
- *     the person confirms on the web that they match.
- *  5. `POST /identity/move/:moveId/seal` — the web seals the phrase entropy under
- *     `HKDF(ECDH(both keys), moveId)`, authorized by a one-use root proof over the
- *     exact sealed bytes.
- *  6. `POST /identity/move/:moveId/receipt` — Commons stores the root, reads it
- *     back from its keychain, and signs a receipt over the move, the root, both
- *     keys and the digest of the ciphertext it opened. The server verifies it; the
- *     web verifies it again from what IT sealed before removing anything.
- *
- * Why the commitment: without it the relay sees both keys before committing to
- * anything and can grind a substituted key until the two codes agree (~10⁶
- * tries, seconds). With it, the relay must fix the key it shows Commons before
- * learning Commons' key, and the key it shows the web before the web reveals.
- *
- * The server holds a commitment, two ephemeral public keys, an opaque ciphertext
- * and a receipt — nothing that decrypts the ciphertext.
- *
- * Platform-agnostic — zod only, ESM-safe (no `require()`).
- */
-import { z } from 'zod';
-/** A move lives this long: one interactive handoff. */
-export declare const IDENTITY_MOVE_TTL_MS: number;
-/** 128-bit move id, lowercase hex. */
-export declare const identityMoveIdSchema: z.ZodString;
-/** An ephemeral secp256k1 public key, uncompressed lowercase hex. */
-export declare const identityMoveEphemeralKeySchema: z.ZodString;
-export declare const IDENTITY_MOVE_STATUSES: readonly ["pending", "joined", "sealed", "completed", "cancelled", "expired"];
-export type IdentityMoveStatus = (typeof IDENTITY_MOVE_STATUSES)[number];
-/** The QR payload Commons scans. Carries the move id only. */
-export declare const IDENTITY_MOVE_QR_PREFIX = "oxycommons://move?id=";
-export declare const identityMoveCreateRequestSchema: z.ZodObject<{
-    /** `H(initiator ephemeral key, nonce)` — the key itself is revealed only after Commons joins. */
-    initiatorCommitment: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    initiatorCommitment: string;
-}, {
-    initiatorCommitment: string;
-}>;
-export interface IdentityMoveCreateResponse {
-    moveId: string;
-    expiresAt: string;
-}
-export declare const identityMoveCreateResponseSchema: z.ZodType<IdentityMoveCreateResponse>;
-export declare const identityMoveJoinRequestSchema: z.ZodObject<{
-    responderEphemeralPublicKey: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    responderEphemeralPublicKey: string;
-}, {
-    responderEphemeralPublicKey: string;
-}>;
-/** After Commons joined: the committed key and its nonce. */
-export declare const identityMoveRevealRequestSchema: z.ZodObject<{
-    initiatorEphemeralPublicKey: z.ZodString;
-    commitmentNonce: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    initiatorEphemeralPublicKey: string;
-    commitmentNonce: string;
-}, {
-    initiatorEphemeralPublicKey: string;
-    commitmentNonce: string;
-}>;
-export declare const identityMoveSealRequestSchema: z.ZodObject<{
-    /** 24-byte XChaCha20-Poly1305 nonce, hex. */
-    nonce: z.ZodString;
-    /** The 16–32-byte phrase entropy (12–24 words), tag appended, hex. */
-    ciphertext: z.ZodString;
-    /**
-     * Root proof (`identity_move_seal`), payload `{ moveId, nonce, ciphertext }`,
-     * over a one-use challenge from `POST /identity/proof-challenge`.
-     */
-    proof: z.ZodObject<{
-        v: z.ZodLiteral<2>;
-        challenge: z.ZodString;
-        expiresAt: z.ZodNumber;
-        signature: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    }, {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    }>;
-}, "strict", z.ZodTypeAny, {
-    proof: {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    };
-    nonce: string;
-    ciphertext: string;
-}, {
-    proof: {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    };
-    nonce: string;
-    ciphertext: string;
-}>;
-export declare const identityMoveReceiptRequestSchema: z.ZodObject<{
-    /** Root signature over `buildMoveReceiptMessage(...)`. */
-    signature: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    signature: string;
-}, {
-    signature: string;
-}>;
-/** `GET /identity/move/:moveId` — everything either side needs, nothing that decrypts. */
-export interface IdentityMoveState {
-    moveId: string;
-    status: IdentityMoveStatus;
-    /** The commitment Commons must read before joining. */
-    initiatorCommitment: string;
-    /** The commitment's nonce, published with the key at reveal. */
-    initiatorCommitmentNonce: string | null;
-    /** The identity being moved (so Commons can check the key it will import). */
-    publicKey: string;
-    /** `null` until the web reveals it, after Commons joined. */
-    initiatorEphemeralPublicKey: string | null;
-    responderEphemeralPublicKey: string | null;
-    nonce: string | null;
-    ciphertext: string | null;
-    receiptSignature: string | null;
-    expiresAt: string;
-}
-export declare const identityMoveStateSchema: z.ZodType<IdentityMoveState>;
-export type IdentityMoveCreateRequest = z.infer<typeof identityMoveCreateRequestSchema>;
-export type IdentityMoveJoinRequest = z.infer<typeof identityMoveJoinRequestSchema>;
-export type IdentityMoveRevealRequest = z.infer<typeof identityMoveRevealRequestSchema>;
-export type IdentityMoveSealRequest = z.infer<typeof identityMoveSealRequestSchema>;
-export type IdentityMoveReceiptRequest = z.infer<typeof identityMoveReceiptRequestSchema>;
-/**
- * The initiator's commitment input, `canonicalJson({ v, purpose, key, nonce })`,
- * which the caller hashes with SHA-256.
- */
-export declare function buildMoveCommitmentInput(initiatorEphemeralPublicKey: string, nonce: string): string;
-/** The bytes both sides hash for the 6-digit code. */
-export declare function buildMoveSasInput(input: {
-    moveId: string;
-    initiatorEphemeralPublicKey: string;
-    responderEphemeralPublicKey: string;
-    initiatorCommitment: string;
-}): string;
-/** The ciphertext digest input the receipt binds: `canonicalJson({ nonce, ciphertext })`. */
-export declare function buildMoveCiphertextDigestInput(sealed: {
-    nonce: string;
-    ciphertext: string;
-}): string;
-/** The payload a seal proof digests. */
-export declare function buildMoveSealPayload(moveId: string, sealed: {
-    nonce: string;
-    ciphertext: string;
-}): {
-    moveId: string;
-    nonce: string;
-    ciphertext: string;
-};
-/** The exact bytes a receipt signs. */
-export declare function buildMoveReceiptMessage(input: {
-    moveId: string;
-    rootPublicKey: string;
-    initiatorEphemeralPublicKey: string;
-    responderEphemeralPublicKey: string;
-    ciphertextDigest: string;
-}): string;

package/dist/types/identityRecovery.d.ts

@@ -1,246 +0,0 @@
-/**
- * Signed-out recovery contract (ADR 0024 D5) — get an EXISTING account back from
- * its root alone, with no passkey, session or email.
- *
- *  1. `POST /identity/recovery/challenge` → a one-use challenge. It says nothing
- *     about any account.
- *  2. The holder derives the root locally from recovery material (12/24 words or a
- *     raw key) and signs `recover_account_start` over that challenge:
- *     `POST /identity/recovery/start { publicKey, proof }`. Only a valid proof
- *     learns which account the root belongs to; the response carries passkey
- *     registration options for THAT account and a short-lived ticket.
- *  3. The holder creates the passkey, seals the root under it (PRF), and signs
- *     `recover_account_complete` over the registration challenge and the envelope
- *     digest: `POST /identity/recovery/complete`. The passkey, the envelope and a
- *     session are created in one transaction.
- *
- * The recovery material and the root never leave the holder. Platform-agnostic —
- * zod only, ESM-safe.
- */
-import { z } from 'zod';
-/** A recovery attempt lives this long between steps. */
-export declare const IDENTITY_RECOVERY_TTL_MS: number;
-export interface IdentityRecoveryChallengeResponse {
-    /** 32 bytes, lowercase hex. */
-    challenge: string;
-    /** Unix milliseconds. */
-    expiresAt: number;
-}
-export declare const identityRecoveryChallengeResponseSchema: z.ZodType<IdentityRecoveryChallengeResponse>;
-export declare const identityRecoveryStartRequestSchema: z.ZodObject<{
-    publicKey: z.ZodString;
-    /** `recover_account_start`, subject `root:<publicKey>`, actor `anonymous`. */
-    proof: z.ZodObject<{
-        v: z.ZodLiteral<2>;
-        challenge: z.ZodString;
-        expiresAt: z.ZodNumber;
-        signature: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    }, {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    }>;
-}, "strict", z.ZodTypeAny, {
-    publicKey: string;
-    proof: {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    };
-}, {
-    publicKey: string;
-    proof: {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    };
-}>;
-export type IdentityRecoveryStartRequest = z.infer<typeof identityRecoveryStartRequestSchema>;
-export interface IdentityRecoveryStartResponse {
-    /** Opaque, one-use; presented once to `complete`. */
-    ticket: string;
-    accountId: string;
-    username: string | null;
-    /** `PublicKeyCredentialCreationOptionsJSON` for the account's new passkey. */
-    registrationOptions: Record<string, unknown>;
-    /** Unix milliseconds. */
-    expiresAt: number;
-}
-export declare const identityRecoveryCompleteRequestSchema: z.ZodObject<{
-    ticket: z.ZodString;
-    /** The browser `RegistrationResponseJSON`, verified by the API's WebAuthn library. */
-    response: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    /** The root sealed under the new passkey — exactly one wrap, for that credential. */
-    envelope: z.ZodEffects<z.ZodObject<{
-        version: z.ZodLiteral<2>;
-        algorithm: z.ZodLiteral<"xchacha20poly1305">;
-        publicKey: z.ZodString;
-        secretKind: z.ZodEnum<["mnemonic-entropy", "raw-private-key"]>;
-        secretNonce: z.ZodString;
-        sealedSecret: z.ZodString;
-        wraps: z.ZodArray<z.ZodObject<{
-            credentialId: z.ZodString;
-            nonce: z.ZodString;
-            wrappedKey: z.ZodString;
-            createdAt: z.ZodString;
-            rpId: z.ZodString;
-            verifiedAt: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }, {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }>, "many">;
-    }, "strip", z.ZodTypeAny, {
-        version: 2;
-        publicKey: string;
-        algorithm: "xchacha20poly1305";
-        secretKind: "mnemonic-entropy" | "raw-private-key";
-        secretNonce: string;
-        sealedSecret: string;
-        wraps: {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }[];
-    }, {
-        version: 2;
-        publicKey: string;
-        algorithm: "xchacha20poly1305";
-        secretKind: "mnemonic-entropy" | "raw-private-key";
-        secretNonce: string;
-        sealedSecret: string;
-        wraps: {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }[];
-    }>, {
-        version: 2;
-        publicKey: string;
-        algorithm: "xchacha20poly1305";
-        secretKind: "mnemonic-entropy" | "raw-private-key";
-        secretNonce: string;
-        sealedSecret: string;
-        wraps: {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }[];
-    }, {
-        version: 2;
-        publicKey: string;
-        algorithm: "xchacha20poly1305";
-        secretKind: "mnemonic-entropy" | "raw-private-key";
-        secretNonce: string;
-        sealedSecret: string;
-        wraps: {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }[];
-    }>;
-    /** `recover_account_complete`, subject = account id, actor `credential:<id>`, challenge = registration challenge (hex). */
-    proof: z.ZodObject<{
-        v: z.ZodLiteral<2>;
-        challenge: z.ZodString;
-        expiresAt: z.ZodNumber;
-        signature: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    }, {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    }>;
-    deviceName: z.ZodOptional<z.ZodString>;
-    deviceFingerprint: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    proof: {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    };
-    envelope: {
-        version: 2;
-        publicKey: string;
-        algorithm: "xchacha20poly1305";
-        secretKind: "mnemonic-entropy" | "raw-private-key";
-        secretNonce: string;
-        sealedSecret: string;
-        wraps: {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }[];
-    };
-    response: Record<string, unknown>;
-    ticket: string;
-    deviceName?: string | undefined;
-    deviceFingerprint?: string | undefined;
-}, {
-    proof: {
-        expiresAt: number;
-        signature: string;
-        v: 2;
-        challenge: string;
-    };
-    envelope: {
-        version: 2;
-        publicKey: string;
-        algorithm: "xchacha20poly1305";
-        secretKind: "mnemonic-entropy" | "raw-private-key";
-        secretNonce: string;
-        sealedSecret: string;
-        wraps: {
-            credentialId: string;
-            createdAt: string;
-            nonce: string;
-            wrappedKey: string;
-            rpId: string;
-            verifiedAt?: string | undefined;
-        }[];
-    };
-    response: Record<string, unknown>;
-    ticket: string;
-    deviceName?: string | undefined;
-    deviceFingerprint?: string | undefined;
-}>;
-export type IdentityRecoveryCompleteRequest = z.infer<typeof identityRecoveryCompleteRequestSchema>;