@private.me/xbind 3.0.0 → 3.0.2

package/dist-standalone/cjs/connect.js

@@ -1 +1,312 @@
-"use strict";var __createBinding=this&&this.__createBinding||(Object.create?function(e,r,t,i){void 0===i&&(i=t);var o=Object.getOwnPropertyDescriptor(r,t);o&&!("get"in o?!r.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return r[t]}}),Object.defineProperty(e,i,o)}:function(e,r,t,i){void 0===i&&(i=t),e[i]=r[t]}),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?function(e,r){Object.defineProperty(e,"default",{enumerable:!0,value:r})}:function(e,r){e.default=r}),__importStar=this&&this.__importStar||function(){var e=function(r){return e=Object.getOwnPropertyNames||function(e){var r=[];for(var t in e)Object.prototype.hasOwnProperty.call(e,t)&&(r[r.length]=t);return r},e(r)};return function(r){if(r&&r.__esModule)return r;var t={};if(null!=r)for(var i=e(r),o=0;o<i.length;o++)"default"!==i[o]&&__createBinding(t,r,i[o]);return __setModuleDefault(t,r),t}}();Object.defineProperty(exports,"__esModule",{value:!0}),exports.ConnectErrorCode=void 0,exports.connect=connect,exports.acceptInvite=acceptInvite;const shared_1=require("../_deps/shared/index.js"),crypto_utils_js_1=require("./crypto-utils.js"),agent_js_1=require("./agent.js"),discovery_js_1=require("./discovery.js"),transport_js_1=require("./transport.js"),trust_registry_js_1=require("./trust-registry.js"),identity_js_1=require("./identity.js");var ConnectErrorCode;async function connect(e,r={}){const t=r.discovery||new discovery_js_1.ServiceDiscovery,i=await t.discover(e);if(!i.ok)return(0,shared_1.err)({code:ConnectErrorCode.DISCOVERY_FAILED,message:`Failed to discover service: ${i.error.message}`,hint:i.error.hint,cause:i.error});const o=i.value;if(!o.did||!o.endpoint||!o.publicKey)return(0,shared_1.err)({code:ConnectErrorCode.INVALID_SERVICE_INFO,message:"Service info missing required fields (did, endpoint, publicKey)",hint:"Service must provide complete metadata"});const n=r.registry||new trust_registry_js_1.MemoryTrustRegistry;try{const e=(0,crypto_utils_js_1.fromBase64)(o.publicKey),r=await(0,identity_js_1.importPublicKey)(e);if(!r.ok)return(0,shared_1.err)({code:ConnectErrorCode.TRUST_VERIFICATION_FAILED,message:"Invalid service public key",cause:r.error});await n.add({did:o.did,publicKey:r.value,x25519PublicKey:o.x25519PublicKey?await(0,identity_js_1.importPublicKey)((0,crypto_utils_js_1.fromBase64)(o.x25519PublicKey)).then(e=>e.ok?e.value:void 0):void 0,mlKemPublicKey:o.mlKemPublicKey?(0,crypto_utils_js_1.fromBase64)(o.mlKemPublicKey):void 0})}catch(e){return(0,shared_1.err)({code:ConnectErrorCode.TRUST_VERIFICATION_FAILED,message:"Failed to verify service public key",cause:e})}const s=r.transport||new transport_js_1.HttpsTransportAdapter({baseUrl:o.endpoint}),a={name:r.name||`client-${Date.now()}`,registry:n,transport:s,xchange:r.xchange,postQuantumSig:r.postQuantumSig},c=await agent_js_1.Agent.create(a);return c.ok?(0,shared_1.ok)({agent:c.value,service:o,did:o.did,endpoint:o.endpoint}):(0,shared_1.err)({code:ConnectErrorCode.AGENT_CREATION_FAILED,message:"Failed to create agent",cause:c.error})}async function acceptInvite(e,r={}){const{InviteService:t}=await Promise.resolve().then(()=>__importStar(require("./invite.js"))),i=new t,o=await i.get(e);if(!o.ok)return(0,shared_1.err)({code:ConnectErrorCode.DISCOVERY_FAILED,message:`Failed to get invite: ${o.error.message}`,cause:o.error});const n=o.value,s={name:n.from.name,did:n.from.did,endpoint:n.from.endpoint,publicKey:n.from.publicKey,x25519PublicKey:n.from.x25519PublicKey,mlKemPublicKey:n.from.mlKemPublicKey},a=r.registry||new trust_registry_js_1.MemoryTrustRegistry;try{const e=(0,crypto_utils_js_1.fromBase64)(s.publicKey),r=await(0,identity_js_1.importPublicKey)(e);if(!r.ok)return(0,shared_1.err)({code:ConnectErrorCode.TRUST_VERIFICATION_FAILED,message:"Invalid service public key",cause:r.error});await a.add({did:s.did,publicKey:r.value,x25519PublicKey:s.x25519PublicKey?await(0,identity_js_1.importPublicKey)((0,crypto_utils_js_1.fromBase64)(s.x25519PublicKey)).then(e=>e.ok?e.value:void 0):void 0,mlKemPublicKey:s.mlKemPublicKey?(0,crypto_utils_js_1.fromBase64)(s.mlKemPublicKey):void 0})}catch(e){return(0,shared_1.err)({code:ConnectErrorCode.TRUST_VERIFICATION_FAILED,message:"Failed to verify service public key",cause:e})}const c=r.transport||new transport_js_1.HttpsTransportAdapter({baseUrl:s.endpoint}),u={name:r.name||`client-${Date.now()}`,registry:a,transport:c,xchange:r.xchange,postQuantumSig:r.postQuantumSig},d=await agent_js_1.Agent.create(u);if(!d.ok)return(0,shared_1.err)({code:ConnectErrorCode.AGENT_CREATION_FAILED,message:"Failed to create agent",cause:d.error});return(await i.accept({inviteUrl:e,acceptor:{name:u.name,did:d.value.did,endpoint:r.endpoint||"",publicKey:(0,crypto_utils_js_1.toBase64)(d.value.identity.rawPublicKey),x25519PublicKey:d.value.identity.rawX25519PublicKey?(0,crypto_utils_js_1.toBase64)(d.value.identity.rawX25519PublicKey):void 0}})).ok,(0,shared_1.ok)({agent:d.value,service:s,did:s.did,endpoint:s.endpoint})}!function(e){e.DISCOVERY_FAILED="CONNECT_DISCOVERY_FAILED",e.AGENT_CREATION_FAILED="CONNECT_AGENT_CREATION_FAILED",e.TRUST_VERIFICATION_FAILED="CONNECT_TRUST_VERIFICATION_FAILED",e.INVALID_SERVICE_INFO="CONNECT_INVALID_SERVICE_INFO"}(ConnectErrorCode||(exports.ConnectErrorCode=ConnectErrorCode={}));
+"use strict";
+/**
+ * @module connect
+ * High-level connect() API for zero-config XBind connections.
+ *
+ * Enables: `const service = await connect('payments-service')`
+ *
+ * Combines:
+ * - Service discovery
+ * - Trust verification
+ * - Agent creation
+ * - Connection establishment
+ *
+ * @example
+ * ```ts
+ * import { connect } from '@private.me/xbind';
+ *
+ * // Connect by name (uses registry):
+ * const payments = await connect('payments-service');
+ *
+ * // Connect by domain (uses .well-known):
+ * const payments = await connect('payments.example.com');
+ *
+ * // Connect by URL (direct):
+ * const payments = await connect('https://api.payments.com/xbind');
+ *
+ * // Use the connection:
+ * await payments.send({
+ *   to: payments.did,
+ *   payload: { action: 'createCharge', amount: 100 },
+ *   scope: 'payments',
+ * });
+ * ```
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectErrorCode = void 0;
+exports.connect = connect;
+exports.acceptInvite = acceptInvite;
+const shared_1 = require("../_deps/shared/index.js");
+const crypto_utils_js_1 = require("./crypto-utils.js");
+const agent_js_1 = require("./agent.js");
+const discovery_js_1 = require("./discovery.js");
+const transport_js_1 = require("./transport.js");
+const trust_registry_js_1 = require("./trust-registry.js");
+const identity_js_1 = require("./identity.js");
+/**
+ * Connect error codes.
+ */
+var ConnectErrorCode;
+(function (ConnectErrorCode) {
+    ConnectErrorCode["DISCOVERY_FAILED"] = "CONNECT_DISCOVERY_FAILED";
+    ConnectErrorCode["AGENT_CREATION_FAILED"] = "CONNECT_AGENT_CREATION_FAILED";
+    ConnectErrorCode["TRUST_VERIFICATION_FAILED"] = "CONNECT_TRUST_VERIFICATION_FAILED";
+    ConnectErrorCode["INVALID_SERVICE_INFO"] = "CONNECT_INVALID_SERVICE_INFO";
+})(ConnectErrorCode || (exports.ConnectErrorCode = ConnectErrorCode = {}));
+/**
+ * Connect to a service with zero configuration.
+ *
+ * @param nameOrUrl - Service name, domain, or URL
+ * @param options - Connection options
+ * @returns Connection or error
+ *
+ * @example
+ * ```ts
+ * // Minimal:
+ * const connection = await connect('payments-service');
+ * if (connection.ok) {
+ *   await connection.value.agent.send({
+ *     to: connection.value.did,
+ *     payload: { action: 'test' },
+ *     scope: 'test',
+ *   });
+ * }
+ *
+ * // With options:
+ * const connection = await connect('payments-service', {
+ *   name: 'billing-service',
+ *   xchange: true, // Use faster Xchange mode
+ *   splitChannel: true, // Use split-channel by default
+ * });
+ * ```
+ */
+async function connect(nameOrUrl, options = {}) {
+    // Step 1: Discover service
+    const discovery = options.discovery || new discovery_js_1.ServiceDiscovery();
+    const serviceResult = await discovery.discover(nameOrUrl);
+    if (!serviceResult.ok) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.DISCOVERY_FAILED,
+            message: `Failed to discover service: ${serviceResult.error.message}`,
+            hint: serviceResult.error.hint,
+            cause: serviceResult.error,
+        });
+    }
+    const service = serviceResult.value;
+    // Step 2: Validate service info
+    if (!service.did || !service.endpoint || !service.publicKey) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.INVALID_SERVICE_INFO,
+            message: 'Service info missing required fields (did, endpoint, publicKey)',
+            hint: 'Service must provide complete metadata',
+        });
+    }
+    // Step 3: Create trust registry and add service
+    const registry = options.registry || new trust_registry_js_1.MemoryTrustRegistry();
+    try {
+        // Import public key (convert from base64 string)
+        const publicKeyBytes = (0, crypto_utils_js_1.fromBase64)(service.publicKey);
+        const publicKeyResult = await (0, identity_js_1.importPublicKey)(publicKeyBytes);
+        if (!publicKeyResult.ok) {
+            return (0, shared_1.err)({
+                code: ConnectErrorCode.TRUST_VERIFICATION_FAILED,
+                message: 'Invalid service public key',
+                cause: publicKeyResult.error,
+            });
+        }
+        // Add to trust registry
+        await registry.add({
+            did: service.did,
+            publicKey: publicKeyResult.value,
+            x25519PublicKey: service.x25519PublicKey
+                ? await (0, identity_js_1.importPublicKey)((0, crypto_utils_js_1.fromBase64)(service.x25519PublicKey)).then(r => r.ok ? r.value : undefined)
+                : undefined,
+            mlKemPublicKey: service.mlKemPublicKey
+                ? (0, crypto_utils_js_1.fromBase64)(service.mlKemPublicKey)
+                : undefined,
+        });
+    }
+    catch (error) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.TRUST_VERIFICATION_FAILED,
+            message: 'Failed to verify service public key',
+            cause: error,
+        });
+    }
+    // Step 4: Create transport
+    const transport = options.transport || new transport_js_1.HttpsTransportAdapter({
+        baseUrl: service.endpoint,
+    });
+    // Step 5: Create agent
+    const agentName = options.name || `client-${Date.now()}`;
+    const agentOptions = {
+        name: agentName,
+        registry,
+        transport,
+        xchange: options.xchange,
+        postQuantumSig: options.postQuantumSig,
+    };
+    const agentResult = await agent_js_1.Agent.create(agentOptions);
+    if (!agentResult.ok) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.AGENT_CREATION_FAILED,
+            message: 'Failed to create agent',
+            cause: agentResult.error,
+        });
+    }
+    // Step 6: Return connection
+    return (0, shared_1.ok)({
+        agent: agentResult.value,
+        service,
+        did: service.did,
+        endpoint: service.endpoint,
+    });
+}
+/**
+ * Accept an invite and establish connection.
+ *
+ * @param inviteUrl - Invite URL
+ * @param options - Connection options
+ * @returns Connection or error
+ *
+ * @example
+ * ```ts
+ * const connection = await acceptInvite('https://xbind.to/invite/abc123', {
+ *   name: 'my-service',
+ * });
+ *
+ * if (connection.ok) {
+ *   console.log('Connected to:', connection.value.service.name);
+ * }
+ * ```
+ */
+async function acceptInvite(inviteUrl, options = {}) {
+    const { InviteService } = await Promise.resolve().then(() => __importStar(require('./invite.js')));
+    const inviteService = new InviteService();
+    // Get invite details
+    const inviteResult = await inviteService.get(inviteUrl);
+    if (!inviteResult.ok) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.DISCOVERY_FAILED,
+            message: `Failed to get invite: ${inviteResult.error.message}`,
+            cause: inviteResult.error,
+        });
+    }
+    const invite = inviteResult.value;
+    // Convert invite.from to ServiceInfo
+    const service = {
+        name: invite.from.name,
+        did: invite.from.did,
+        endpoint: invite.from.endpoint,
+        publicKey: invite.from.publicKey,
+        x25519PublicKey: invite.from.x25519PublicKey,
+        mlKemPublicKey: invite.from.mlKemPublicKey,
+    };
+    // Connect to service (same as connect())
+    // Create trust registry and add service
+    const registry = options.registry || new trust_registry_js_1.MemoryTrustRegistry();
+    try {
+        // Import public key (convert from base64 string)
+        const publicKeyBytes = (0, crypto_utils_js_1.fromBase64)(service.publicKey);
+        const publicKeyResult = await (0, identity_js_1.importPublicKey)(publicKeyBytes);
+        if (!publicKeyResult.ok) {
+            return (0, shared_1.err)({
+                code: ConnectErrorCode.TRUST_VERIFICATION_FAILED,
+                message: 'Invalid service public key',
+                cause: publicKeyResult.error,
+            });
+        }
+        await registry.add({
+            did: service.did,
+            publicKey: publicKeyResult.value,
+            x25519PublicKey: service.x25519PublicKey
+                ? await (0, identity_js_1.importPublicKey)((0, crypto_utils_js_1.fromBase64)(service.x25519PublicKey)).then(r => r.ok ? r.value : undefined)
+                : undefined,
+            mlKemPublicKey: service.mlKemPublicKey
+                ? (0, crypto_utils_js_1.fromBase64)(service.mlKemPublicKey)
+                : undefined,
+        });
+    }
+    catch (error) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.TRUST_VERIFICATION_FAILED,
+            message: 'Failed to verify service public key',
+            cause: error,
+        });
+    }
+    const transport = options.transport || new transport_js_1.HttpsTransportAdapter({
+        baseUrl: service.endpoint,
+    });
+    const agentName = options.name || `client-${Date.now()}`;
+    const agentOptions = {
+        name: agentName,
+        registry,
+        transport,
+        xchange: options.xchange,
+        postQuantumSig: options.postQuantumSig,
+    };
+    const agentResult = await agent_js_1.Agent.create(agentOptions);
+    if (!agentResult.ok) {
+        return (0, shared_1.err)({
+            code: ConnectErrorCode.AGENT_CREATION_FAILED,
+            message: 'Failed to create agent',
+            cause: agentResult.error,
+        });
+    }
+    // Accept the invite
+    const acceptResult = await inviteService.accept({
+        inviteUrl,
+        acceptor: {
+            name: agentOptions.name,
+            did: agentResult.value.did,
+            endpoint: options.endpoint || '', // Agent's endpoint (where it can be reached), empty for client-only agents
+            publicKey: (0, crypto_utils_js_1.toBase64)(agentResult.value.identity.rawPublicKey),
+            x25519PublicKey: agentResult.value.identity.rawX25519PublicKey
+                ? (0, crypto_utils_js_1.toBase64)(agentResult.value.identity.rawX25519PublicKey)
+                : undefined,
+        },
+    });
+    if (!acceptResult.ok) {
+        // Connection created but invite acceptance failed - still return connection
+        // (invite acceptance is for tracking/notification, not required for connectivity)
+    }
+    return (0, shared_1.ok)({
+        agent: agentResult.value,
+        service,
+        did: service.did,
+        endpoint: service.endpoint,
+    });
+}