@sig-net/midnight 0.15.0 → 0.16.0

package/dist/signet-request-resolver.d.ts

@@ -1,60 +0,0 @@
-import type { SignBidirectionalNotification } from "./signet-contract-state-reader.ts";
-import type { SignetPublicStateSource } from "./signet-request-response-reader.ts";
-import type { RequestIdHex, SignBidirectionalEvent } from "./signet-requests.ts";
-/**
- * A {@link SignBidirectionalNotification} resolved to the authenticated
- * request it refers to: the request record read from `callerAddress`'s own
- * ledger, with `requestId` confirmed to be a member of that contract's index.
- */
-export interface ResolvedSignetRequest {
-    /**
-     * The contract whose authenticated state the request was read from — the
-     * epsilon-derivation predecessor. Key derivation keys off THIS, never off a
-     * field taken from the notification on faith.
-     */
-    callerAddress: string;
-    /** The request id, confirmed to be a member of `callerAddress`'s index. */
-    requestId: RequestIdHex;
-    /** The authenticated request record to sign. */
-    request: SignBidirectionalEvent;
-}
-/** Everything a {@link SignetRequestResolver} needs. */
-export interface SignetRequestResolverConfig {
-    /** Source of raw contract state, e.g. midnight-js's `indexerPublicDataProvider`. */
-    readonly source: SignetPublicStateSource;
-}
-/**
- * Resolves {@link SignBidirectionalNotification}s to authenticated
- * {@link ResolvedSignetRequest}s by reading the named caller's ledger and
- * enforcing the membership check. Construct once and reuse: resolved records
- * are immutable (their ledger key is their hash), so they are cached by request
- * id and a repeated notification for the same request costs no query.
- *
- * NB the cache is keyed by request id, NOT by contract address: a caller
- * contract's state grows as it stores new requests, so caching its state would
- * make the resolver blind to later requests from the same caller. Caching the
- * immutable resolved record instead is the same pattern
- * {@link SignetRequestResponseReader.getSignatureRequest} uses.
- */
-export declare class SignetRequestResolver {
-    private readonly source;
-    private readonly resolvedCache;
-    /**
-     * @param config - The state source to read caller ledgers through.
-     */
-    constructor(config: SignetRequestResolverConfig);
-    /**
-     * Resolve a notification to its authenticated request, or `undefined` when it
-     * cannot be trusted: the caller contract has no state, or `requestId` is not
-     * a member of the map at `requestsPath` (forged, stale, wrong field,
-     * or not yet indexed — poll again). Never throws on an untrusted
-     * notification; a bad one is dropped, not surfaced as an error.
-     *
-     * @param requestId - The request id the notification was registered under
-     *   (the registry map key — the V1 payload does not carry one).
-     * @param notification - The decoded notification.
-     * @returns The authenticated request, or `undefined` to drop the notification.
-     */
-    resolve(requestId: RequestIdHex, notification: SignBidirectionalNotification): Promise<ResolvedSignetRequest | undefined>;
-}
-//# sourceMappingURL=signet-request-resolver.d.ts.map

package/dist/signet-request-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signet-request-resolver.d.ts","sourceRoot":"","sources":["../src/signet-request-resolver.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAE9B;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,SAAS,EAAE,YAAY,CAAC;IACxB,gDAAgD;IAChD,OAAO,EAAE,sBAAsB,CAAC;CACjC;AAED,wDAAwD;AACxD,MAAM,WAAW,2BAA2B;IAC1C,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAIjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkD;IAEhF;;OAEG;gBACS,MAAM,EAAE,2BAA2B;IAI/C;;;;;;;;;;;OAWG;IACG,OAAO,CACX,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,6BAA6B,GAC1C,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;CA8B9C"}

package/dist/signet-request-resolver.js

@@ -1,78 +0,0 @@
-// Turn a SignBidirectionalNotification into an AUTHENTICATED request record.
-// This is the security core of the discovery flow (see
-// knowledge-base/caller-attribution.md): the notification says only WHERE to
-// look; the request that gets signed is read from the named caller's own
-// authenticated ledger, and the notification's `requestId` must be a member
-// of that contract's request index. An attacker cannot write into a contract
-// it does not control, so a forged notification can at most re-point at a
-// legitimate request that already exists — never inject one.
-//
-// Key derivation stays f(callerAddress, path), keyed off the contract whose
-// authenticated state was actually read — the notification registry is a
-// pointer board, never an authority.
-import { lookupSignetRequestAt } from "./signature-requests-state-reader.js";
-/**
- * Resolves {@link SignBidirectionalNotification}s to authenticated
- * {@link ResolvedSignetRequest}s by reading the named caller's ledger and
- * enforcing the membership check. Construct once and reuse: resolved records
- * are immutable (their ledger key is their hash), so they are cached by request
- * id and a repeated notification for the same request costs no query.
- *
- * NB the cache is keyed by request id, NOT by contract address: a caller
- * contract's state grows as it stores new requests, so caching its state would
- * make the resolver blind to later requests from the same caller. Caching the
- * immutable resolved record instead is the same pattern
- * {@link SignetRequestResponseReader.getSignatureRequest} uses.
- */
-export class SignetRequestResolver {
-    source;
-    // Resolved records never change; cache them so a redelivered notification for
-    // the same request id does not re-query the caller's state.
-    resolvedCache = new Map();
-    /**
-     * @param config - The state source to read caller ledgers through.
-     */
-    constructor(config) {
-        this.source = config.source;
-    }
-    /**
-     * Resolve a notification to its authenticated request, or `undefined` when it
-     * cannot be trusted: the caller contract has no state, or `requestId` is not
-     * a member of the map at `requestsPath` (forged, stale, wrong field,
-     * or not yet indexed — poll again). Never throws on an untrusted
-     * notification; a bad one is dropped, not surfaced as an error.
-     *
-     * @param requestId - The request id the notification was registered under
-     *   (the registry map key — the V1 payload does not carry one).
-     * @param notification - The decoded notification.
-     * @returns The authenticated request, or `undefined` to drop the notification.
-     */
-    async resolve(requestId, notification) {
-        const cached = this.resolvedCache.get(requestId);
-        if (cached !== undefined) {
-            return cached;
-        }
-        let state;
-        try {
-            state = await this.source.queryContractState(notification.callerAddress);
-        }
-        catch {
-            return undefined; // caller address not a contract / transient read error
-        }
-        if (!state?.data) {
-            return undefined; // no state at the named caller — cannot authenticate
-        }
-        const request = lookupSignetRequestAt(state.data, notification.requestsPath, requestId);
-        if (request === undefined) {
-            return undefined; // membership check failed — drop the notification
-        }
-        const resolved = {
-            callerAddress: notification.callerAddress,
-            requestId,
-            request,
-        };
-        this.resolvedCache.set(requestId, resolved);
-        return resolved;
-    }
-}
-//# sourceMappingURL=signet-request-resolver.js.map

package/dist/signet-request-resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signet-request-resolver.js","sourceRoot":"","sources":["../src/signet-request-resolver.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,uDAAuD;AACvD,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,qCAAqC;AAErC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAiC7E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IACf,MAAM,CAA0B;IAEjD,8EAA8E;IAC9E,4DAA4D;IAC3C,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;IAEhF;;OAEG;IACH,YAAY,MAAmC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO,CACX,SAAuB,EACvB,YAA2C;QAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,KAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,CAAC,uDAAuD;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC,CAAC,qDAAqD;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CACnC,KAAK,CAAC,IAAI,EACV,YAAY,CAAC,YAAY,EACzB,SAAS,CACV,CAAC;QACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC,CAAC,kDAAkD;QACtE,CAAC;QACD,MAAM,QAAQ,GAA0B;YACtC,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,SAAS;YACT,OAAO;SACR,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}