@private.me/xbind 3.0.2 → 3.0.3

package/dist-standalone/did-privateme.js

@@ -1,121 +1 @@
-import { ok, err } from"./_deps/shared/index.js";
-import { publicKeyToDid, didToPublicKeyBytes } from './identity.js';
-/**
- * Mechanism 4: Convert Ed25519 public key to did:privateme DID.
- *
- * Format: did:privateme:z + base58btc(0xed01 || publicKey)
- *
- * This is a new DID method identifier for PRIVATE.ME ACIs.
- * It uses the same base58btc encoding as did:key for compatibility,
- * but signals that the identity is backed by PRIVATE.ME infrastructure.
- *
- * Backward compatible: agents accept both did:key and did:privateme formats.
- *
- * @param rawPublicKey - 32-byte Ed25519 public key
- * @returns DID in format did:privateme:z...
- */
-export function publicKeyToPrivateMeDid(rawPublicKey) {
-    // Use same encoding as did:key, but with privateme method
-    const didKeyFormat = publicKeyToDid(rawPublicKey);
-    // Replace did:key: with did:privateme:
-    return didKeyFormat.replace(/^did:key:/, 'did:privateme:');
-}
-/**
- * Extract raw 32-byte public key from a did:privateme DID.
- *
- * Format: did:privateme:z + base58btc(0xed01 || publicKey)
- *
- * @param did - DID in format did:privateme:z...
- * @returns 32-byte public key or error
- */
-export function privateMeDidToPublicKeyBytes(did) {
-    if (!did.startsWith('did:privateme:z')) {
-        return err('INVALID_DID_FORMAT');
-    }
-    // Convert to did:key format temporarily for parsing
-    const didKeyFormat = did.replace(/^did:privateme:/, 'did:key:');
-    // Use the existing parser
-    const result = didToPublicKeyBytes(didKeyFormat);
-    if (!result.ok) {
-        return err(result.error);
-    }
-    return ok(result.value);
-}
-/**
- * Determine if a DID is in the new did:privateme format.
- *
- * @param did - The DID to check
- * @returns true if DID is did:privateme format, false otherwise
- */
-export function isPrivateMeDid(did) {
-    return did.startsWith('did:privateme:');
-}
-/**
- * Determine if a DID is in the did:key format.
- *
- * @param did - The DID to check
- * @returns true if DID is did:key format, false otherwise
- */
-export function isDidKeyFormat(did) {
-    return did.startsWith('did:key:');
-}
-/**
- * Convert between DID formats (did:key ↔ did:privateme).
- *
- * Allows backward compatibility between old did:key and new did:privateme formats.
- * The public key remains the same; only the method identifier changes.
- *
- * @param did - Source DID in either format
- * @returns Converted DID in the other format, or error
- */
-export function convertDidFormat(did) {
-    if (isDidKeyFormat(did)) {
-        // Convert did:key to did:privateme
-        return ok(did.replace(/^did:key:/, 'did:privateme:'));
-    }
-    if (isPrivateMeDid(did)) {
-        // Convert did:privateme to did:key
-        return ok(did.replace(/^did:privateme:/, 'did:key:'));
-    }
-    return err('UNSUPPORTED_DID_FORMAT');
-}
-/**
- * Normalize a DID to the canonical format (did:privateme).
- *
- * All DIDs are converted to did:privateme format for consistency.
- * Existing did:key DIDs are automatically upgraded.
- *
- * @param did - Source DID in any supported format
- * @returns Normalized DID in did:privateme format
- */
-export function normalizeDid(did) {
-    if (isPrivateMeDid(did)) {
-        // Already in target format
-        return ok(did);
-    }
-    if (isDidKeyFormat(did)) {
-        // Convert to did:privateme
-        return ok(did.replace(/^did:key:/, 'did:privateme:'));
-    }
-    return err('UNSUPPORTED_DID_FORMAT');
-}
-/**
- * Parse a DID into method, identifier, and fragment.
- *
- * @param did - Full DID string
- * @returns Parsed DID components or error
- */
-export function parseDid(did) {
-    const fragmentMatch = did.indexOf('#');
-    const base = fragmentMatch >= 0 ? did.substring(0, fragmentMatch) : did;
-    const fragment = fragmentMatch >= 0 ? did.substring(fragmentMatch + 1) : undefined;
-    const parts = base.split(':');
-    if (parts.length < 3 || parts[0] !== 'did') {
-        return err('INVALID_DID_FORMAT');
-    }
-    return ok({
-        method: parts[1],
-        identifier: parts.slice(2).join(':'),
-        fragment,
-    });
-}
+import{ok,err}from"./_deps/shared/index.js";import{publicKeyToDid,didToPublicKeyBytes}from"./identity.js";export function publicKeyToPrivateMeDid(e){return publicKeyToDid(e).replace(/^did:key:/,"did:privateme:")}export function privateMeDidToPublicKeyBytes(e){if(!e.startsWith("did:privateme:z"))return err("INVALID_DID_FORMAT");const i=e.replace(/^did:privateme:/,"did:key:"),r=didToPublicKeyBytes(i);return r.ok?ok(r.value):err(r.error)}export function isPrivateMeDid(e){return e.startsWith("did:privateme:")}export function isDidKeyFormat(e){return e.startsWith("did:key:")}export function convertDidFormat(e){return isDidKeyFormat(e)?ok(e.replace(/^did:key:/,"did:privateme:")):isPrivateMeDid(e)?ok(e.replace(/^did:privateme:/,"did:key:")):err("UNSUPPORTED_DID_FORMAT")}export function normalizeDid(e){return isPrivateMeDid(e)?ok(e):isDidKeyFormat(e)?ok(e.replace(/^did:key:/,"did:privateme:")):err("UNSUPPORTED_DID_FORMAT")}export function parseDid(e){const i=e.indexOf("#"),r=i>=0?e.substring(0,i):e,t=i>=0?e.substring(i+1):void 0,d=r.split(":");return d.length<3||"did"!==d[0]?err("INVALID_DID_FORMAT"):ok({method:d[1],identifier:d.slice(2).join(":"),fragment:t})}

package/dist-standalone/did-web.js

@@ -1,196 +1 @@
-/**
- * did:web resolver — resolves DIDs hosted on developer domains.
- *
- * Implements the W3C did:web method:
- *   did:web:example.com -> https://example.com/.well-known/did.json
- *   did:web:example.com:path:to -> https://example.com/path/to/did.json
- *
- * Enables direct agent-to-agent communication without a centralized registry.
- * Implements TrustRegistry interface for drop-in use with Agent class.
- */
-import { ok, err } from"./_deps/shared/index.js";
-import { fromBase64 } from './crypto-utils.js';
-/**
- * Resolve did:web DIDs by fetching DID documents from the hosting domain.
- *
- * Implements TrustRegistry interface so it can be used as a drop-in
- * replacement for MemoryTrustRegistry or HttpTrustRegistry.
- */
-export class DidWebResolver {
-    fetchFn;
-    cacheTtlMs;
-    cache = new Map();
-    constructor(opts) {
-        this.fetchFn = opts?.fetch ?? globalThis.fetch.bind(globalThis);
-        this.cacheTtlMs = opts?.cacheTtlMs ?? 300_000;
-    }
-    /** Registration not supported for did:web (developers host their own). */
-    async register(_did, _publicKey, _name, _scopes, _x25519PublicKey) {
-        return err('ALREADY_REGISTERED');
-    }
-    /**
-     * Resolve a did:web DID to its raw public key bytes.
-     * @param did - A did:web DID string.
-     * @returns Public key bytes or error.
-     */
-    async resolve(did) {
-        const entry = await this.fetchEntry(did);
-        if (!entry.ok)
-            return entry;
-        if (entry.value.revoked)
-            return err('REVOKED');
-        return ok(entry.value.publicKey);
-    }
-    /**
-     * Check if a did:web DID has a specific scope.
-     * @param did - The DID to check.
-     * @param scope - The scope to verify.
-     * @returns True if scope is granted.
-     */
-    async hasScope(did, scope) {
-        const entry = await this.fetchEntry(did);
-        if (!entry.ok)
-            return false;
-        return entry.value.scopes.has(scope);
-    }
-    /**
-     * Check if a did:web DID has a specific receive scope.
-     * @param did - The DID to check.
-     * @param scope - The scope to verify.
-     * @returns True if receive scope is granted.
-     */
-    async hasReceiveScope(did, scope) {
-        const entry = await this.fetchEntry(did);
-        if (!entry.ok)
-            return false;
-        // Undefined = accept all scopes (backward compatibility)
-        if (!entry.value.receiveScopes)
-            return true;
-        return entry.value.receiveScopes.has(scope);
-    }
-    /** Revocation not supported for did:web (developer controls their domain). */
-    async revoke(_did) {
-        return err('NOT_FOUND');
-    }
-    /**
-     * Get the full registry entry for a did:web DID.
-     * @param did - The DID to look up.
-     * @returns Full entry or error.
-     */
-    async getEntry(did) {
-        return this.fetchEntry(did);
-    }
-    /** Number of cached entries (for testing). */
-    get cacheSize() {
-        return this.cache.size;
-    }
-    /** Fetch and parse a DID document, with caching. */
-    async fetchEntry(did) {
-        // Check cache
-        const cached = this.cache.get(did);
-        if (cached && Date.now() - cached.fetchedAt < this.cacheTtlMs) {
-            return ok(cached.entry);
-        }
-        const url = didWebToUrl(did);
-        if (!url)
-            return err('NOT_FOUND');
-        try {
-            const res = await this.fetchFn(url);
-            if (!res.ok)
-                return err('NOT_FOUND');
-            const doc = (await res.json());
-            const entry = parseDidDocument(did, doc);
-            if (!entry)
-                return err('NOT_FOUND');
-            this.cache.set(did, { entry, fetchedAt: Date.now() });
-            return ok(entry);
-        }
-        catch {
-            return err('NETWORK_ERROR');
-        }
-    }
-}
-/**
- * Convert a did:web DID to its HTTPS URL.
- *   did:web:example.com -> https://example.com/.well-known/did.json
- *   did:web:example.com:path:to -> https://example.com/path/to/did.json
- * @param did - The did:web DID string.
- * @returns HTTPS URL or null if invalid.
- */
-export function didWebToUrl(did) {
-    if (!did.startsWith('did:web:'))
-        return null;
-    const parts = did.slice('did:web:'.length).split(':');
-    if (parts.length === 0 || !parts[0])
-        return null;
-    const domain = decodeURIComponent(parts[0]);
-    if (parts.length === 1) {
-        return `https://${domain}/.well-known/did.json`;
-    }
-    const path = parts.slice(1).map(decodeURIComponent).join('/');
-    return `https://${domain}/${path}/did.json`;
-}
-/** Parse a DID document into a RegistryEntry. */
-function parseDidDocument(did, doc) {
-    if (!doc.verificationMethod || doc.verificationMethod.length === 0) {
-        return null;
-    }
-    const vm = doc.verificationMethod[0];
-    if (!vm)
-        return null;
-    let publicKey = null;
-    if (vm.publicKeyMultibase) {
-        publicKey = decodeMultibase(vm.publicKeyMultibase);
-    }
-    else if (vm.publicKeyBase64) {
-        publicKey = fromBase64(vm.publicKeyBase64);
-    }
-    if (!publicKey)
-        return null;
-    return {
-        did,
-        publicKey,
-        name: doc.xailName ?? did,
-        scopes: new Set(doc.xailScopes ?? []),
-        revoked: doc.deactivated === true,
-        rotation_sequence: 1, // DID documents don't track rotation, default to 1
-    };
-}
-/** Decode z-prefixed base58btc multibase to bytes. */
-function decodeMultibase(mb) {
-    if (!mb.startsWith('z'))
-        return null;
-    return base58Decode(mb.slice(1));
-}
-/** Base58 decode (Bitcoin alphabet). */
-function base58Decode(s) {
-    const ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
-    const BASE = BigInt(58);
-    let num = BigInt(0);
-    for (const char of s) {
-        const idx = ALPHABET.indexOf(char);
-        if (idx < 0)
-            return new Uint8Array(0);
-        num = num * BASE + BigInt(idx);
-    }
-    const hex = num.toString(16);
-    const padded = hex.length % 2 ? '0' + hex : hex;
-    const bytes = new Uint8Array(padded.length / 2);
-    for (let i = 0; i < bytes.length; i++) {
-        bytes[i] = parseInt(padded.slice(i * 2, i * 2 + 2), 16);
-    }
-    // Handle leading zeros (base58 "1" = 0x00)
-    let leadingZeros = 0;
-    for (const c of s) {
-        if (c === '1')
-            leadingZeros++;
-        else
-            break;
-    }
-    if (leadingZeros > 0) {
-        const result = new Uint8Array(leadingZeros + bytes.length);
-        result.set(bytes, leadingZeros);
-        return result;
-    }
-    return bytes;
-}
+import{ok,err}from"./_deps/shared/index.js";import{fromBase64}from"./crypto-utils.js";export class DidWebResolver{fetchFn;cacheTtlMs;cache=new Map;constructor(e){this.fetchFn=e?.fetch??globalThis.fetch.bind(globalThis),this.cacheTtlMs=e?.cacheTtlMs??3e5}async register(e,t,n,r,c){return err("ALREADY_REGISTERED")}async resolve(e){const t=await this.fetchEntry(e);return t.ok?t.value.revoked?err("REVOKED"):ok(t.value.publicKey):t}async hasScope(e,t){const n=await this.fetchEntry(e);return!!n.ok&&n.value.scopes.has(t)}async hasReceiveScope(e,t){const n=await this.fetchEntry(e);return!!n.ok&&(!n.value.receiveScopes||n.value.receiveScopes.has(t))}async revoke(e){return err("NOT_FOUND")}async getEntry(e){return this.fetchEntry(e)}get cacheSize(){return this.cache.size}async fetchEntry(e){const t=this.cache.get(e);if(t&&Date.now()-t.fetchedAt<this.cacheTtlMs)return ok(t.entry);const n=didWebToUrl(e);if(!n)return err("NOT_FOUND");try{const t=await this.fetchFn(n);if(!t.ok)return err("NOT_FOUND");const r=parseDidDocument(e,await t.json());return r?(this.cache.set(e,{entry:r,fetchedAt:Date.now()}),ok(r)):err("NOT_FOUND")}catch{return err("NETWORK_ERROR")}}}export function didWebToUrl(e){if(!e.startsWith("did:web:"))return null;const t=e.slice(8).split(":");if(0===t.length||!t[0])return null;const n=decodeURIComponent(t[0]);if(1===t.length)return`https://${n}/.well-known/did.json`;return`https://${n}/${t.slice(1).map(decodeURIComponent).join("/")}/did.json`}function parseDidDocument(e,t){if(!t.verificationMethod||0===t.verificationMethod.length)return null;const n=t.verificationMethod[0];if(!n)return null;let r=null;return n.publicKeyMultibase?r=decodeMultibase(n.publicKeyMultibase):n.publicKeyBase64&&(r=fromBase64(n.publicKeyBase64)),r?{did:e,publicKey:r,name:t.xailName??e,scopes:new Set(t.xailScopes??[]),revoked:!0===t.deactivated,rotation_sequence:1}:null}function decodeMultibase(e){return e.startsWith("z")?base58Decode(e.slice(1)):null}function base58Decode(e){const t=BigInt(58);let n=BigInt(0);for(const r of e){const e="123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz".indexOf(r);if(e<0)return new Uint8Array(0);n=n*t+BigInt(e)}const r=n.toString(16),c=r.length%2?"0"+r:r,s=new Uint8Array(c.length/2);for(let e=0;e<s.length;e++)s[e]=parseInt(c.slice(2*e,2*e+2),16);let i=0;for(const t of e){if("1"!==t)break;i++}if(i>0){const e=new Uint8Array(i+s.length);return e.set(s,i),e}return s}