@tinycloud/sdk-core 3.3.0-beta.15 → 3.3.0-beta.18

package/dist/index.js

@@ -18926,6 +18926,387 @@ function decodeBase64Url4(value) {
   }
   return Uint8Array.from(bytes2);
 }
+
+// src/registry-verdict.ts
+import { ed25519 as ed2551912 } from "@noble/curves/ed25519";
+import { verifyMessage as verifyMessage3 } from "viem";
+var RegistryLookupInputError = class extends TypeError {
+  constructor(code3, message) {
+    super(message);
+    this.code = code3;
+    this.name = "RegistryLookupInputError";
+  }
+};
+var REGISTRY_LOOKUP_MAX_BODY_BYTES = 64 * 1024;
+var REGISTRY_NOT_FOUND_BODY = '{"error":"location record not found"}';
+var MAX_JSON_DEPTH = 32;
+var JSON_SIMPLE_ESCAPES = {
+  '"': '"',
+  "\\": "\\",
+  "/": "/",
+  b: "\b",
+  f: "\f",
+  n: "\n",
+  r: "\r",
+  t: "	"
+};
+var SECP256K1_N = 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n;
+var BASE64URL = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+var IPV4_OCTET = "(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])";
+var IPV4 = new RegExp(`^${IPV4_OCTET}(\\.${IPV4_OCTET}){3}$`);
+var DNS_LABEL = "[A-Za-z0-9]([A-Za-z0-9-]{0,61}[A-Za-z0-9])?";
+var DNS_NAME = new RegExp(`^${DNS_LABEL}(\\.${DNS_LABEL})*$`);
+var HOST_MULTIADDR = /^\/(ip4|ip6|dns|dns4|dns6)\/([^/]+)\/tcp\/([1-9][0-9]{0,4})\/(https|http|tls\/http)$/;
+var RFC3339_DATE_TIME = /^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(\.[0-9]+)?(Z|[+-]([0-9]{2}):([0-9]{2}))$/;
+async function classifyRegistryLookup(subject, response, options2 = {}) {
+  if (!isCanonicalSubject(subject)) {
+    throw new RegistryLookupInputError(
+      "invalid-subject",
+      "subject must be did:pkh:eip155:<chainId>:<EIP-55 address> or an Ed25519 did:key"
+    );
+  }
+  const remembered = options2.rememberedSequence ?? null;
+  if (remembered !== null && (!Number.isSafeInteger(remembered) || remembered < 0)) {
+    throw new RegistryLookupInputError(
+      "invalid-remembered-sequence",
+      "rememberedSequence must be a non-negative safe integer"
+    );
+  }
+  const unavailable = (reason, message) => ({
+    status: "unavailable",
+    subject,
+    source: "offchain",
+    reason,
+    message,
+    hosts: []
+  });
+  if (response.kind === "network-error") {
+    return unavailable("network-error", "location registry could not be reached");
+  }
+  if (response.kind === "timeout") {
+    return unavailable("timeout", "location registry lookup timed out");
+  }
+  if (response.status !== 200 && response.status !== 404) {
+    return unavailable("http-status", `location registry returned HTTP ${response.status}`);
+  }
+  if (response.body.length > REGISTRY_LOOKUP_MAX_BODY_BYTES || new TextEncoder().encode(response.body).byteLength > REGISTRY_LOOKUP_MAX_BODY_BYTES) {
+    return unavailable("oversize-response", "location registry response is too large");
+  }
+  if (response.status === 404) {
+    const body = response.body;
+    let start = 0;
+    let end = body.length;
+    while (start < end && " 	\n\r".includes(body[start])) start++;
+    while (end > start && " 	\n\r".includes(body[end - 1])) end--;
+    if (body.slice(start, end) !== REGISTRY_NOT_FOUND_BODY) {
+      return unavailable(
+        "malformed-response",
+        "location registry 404 is not the registry's not-found response"
+      );
+    }
+    if (remembered !== null) {
+      return unavailable(
+        "not-found-after-registered",
+        `location registry has no record, but sequence ${remembered} was seen before`
+      );
+    }
+    return { status: "unregistered", subject, source: "offchain", hosts: [] };
+  }
+  let record2;
+  try {
+    record2 = parseRecordResponse(response.body);
+  } catch (error) {
+    return unavailable(
+      "malformed-response",
+      error instanceof Error ? error.message : "location registry response is invalid"
+    );
+  }
+  if (record2.subject !== subject) {
+    return unavailable(
+      "subject-mismatch",
+      "location record subject does not match requested subject"
+    );
+  }
+  if (!await verifyRecordSignature(record2)) {
+    return unavailable("invalid-signature", "location record signature is invalid");
+  }
+  if (remembered !== null && record2.sequence < remembered) {
+    return unavailable(
+      "rollback",
+      `location record sequence ${record2.sequence} is below remembered sequence ${remembered}`
+    );
+  }
+  const hosts = [];
+  for (const address of record2.multiaddrs) {
+    const origin2 = multiaddrOrigin(address);
+    if (origin2 !== null) hosts.push({ urls: [origin2], source: "offchain" });
+  }
+  return {
+    status: "registered",
+    subject,
+    source: "offchain",
+    sequence: record2.sequence,
+    hosts
+  };
+}
+function isCanonicalSubject(subject) {
+  if (typeof subject !== "string") return false;
+  const pkh = /^did:pkh:eip155:([1-9][0-9]*):(0x[0-9a-fA-F]{40})$/.exec(subject);
+  if (pkh !== null) {
+    try {
+      return pkhDid(pkh[2], Number(pkh[1])) === subject;
+    } catch {
+      return false;
+    }
+  }
+  return ed25519KeyFromDidKey(subject) !== null;
+}
+function ed25519KeyFromDidKey(did) {
+  if (!did.startsWith("did:key:z")) return null;
+  const identifier = did.slice("did:key:".length);
+  let bytes2;
+  try {
+    bytes2 = bases.base58btc.decode(identifier);
+  } catch {
+    return null;
+  }
+  if (bytes2.length !== 34 || bytes2[0] !== 237 || bytes2[1] !== 1) {
+    return null;
+  }
+  return bytes2.slice(2);
+}
+var JsonInteger = class {
+  constructor(lexeme) {
+    this.lexeme = lexeme;
+  }
+};
+function parseStrictJson(text3) {
+  let i = 0;
+  const fail2 = (what) => {
+    throw new SyntaxError(`location registry response is not strict JSON: ${what} at ${i}`);
+  };
+  const skipWhitespace2 = () => {
+    while (i < text3.length && " 	\n\r".includes(text3[i])) i++;
+  };
+  const readHex4 = () => {
+    const hex3 = text3.slice(i, i + 4);
+    if (!/^[0-9a-fA-F]{4}$/.test(hex3)) fail2("bad \\u escape");
+    i += 4;
+    return parseInt(hex3, 16);
+  };
+  const parseString = () => {
+    i++;
+    let out = "";
+    for (; ; ) {
+      if (i >= text3.length) fail2("unterminated string");
+      const code3 = text3.charCodeAt(i);
+      if (code3 === 34) {
+        i++;
+        return out;
+      }
+      if (code3 < 32) fail2("control character in string");
+      if (code3 === 92) {
+        const escape2 = text3[i + 1];
+        i += 2;
+        if (escape2 !== void 0 && Object.prototype.hasOwnProperty.call(JSON_SIMPLE_ESCAPES, escape2)) {
+          out += JSON_SIMPLE_ESCAPES[escape2];
+          continue;
+        }
+        if (escape2 !== "u") fail2("bad escape");
+        const unit = readHex4();
+        if (unit >= 55296 && unit <= 56319) {
+          if (text3[i] !== "\\" || text3[i + 1] !== "u") fail2("unpaired surrogate");
+          i += 2;
+          const low = readHex4();
+          if (low < 56320 || low > 57343) fail2("unpaired surrogate");
+          out += String.fromCharCode(unit, low);
+        } else if (unit >= 56320 && unit <= 57343) {
+          fail2("unpaired surrogate");
+        } else {
+          out += String.fromCharCode(unit);
+        }
+        continue;
+      }
+      out += text3[i];
+      i++;
+    }
+  };
+  const parseValue = (depth) => {
+    skipWhitespace2();
+    const c = text3[i];
+    if (c === "{" || c === "[") {
+      if (depth >= MAX_JSON_DEPTH) fail2("nesting too deep");
+      i++;
+      skipWhitespace2();
+      const close = c === "{" ? "}" : "]";
+      const object4 = /* @__PURE__ */ new Map();
+      const array = [];
+      if (text3[i] === close) {
+        i++;
+        return c === "{" ? object4 : array;
+      }
+      for (; ; ) {
+        if (c === "{") {
+          skipWhitespace2();
+          if (text3[i] !== '"') fail2("expected key");
+          const key = parseString();
+          if (object4.has(key)) fail2("duplicate key");
+          skipWhitespace2();
+          if (text3[i] !== ":") fail2("expected ':'");
+          i++;
+          object4.set(key, parseValue(depth + 1));
+        } else {
+          array.push(parseValue(depth + 1));
+        }
+        skipWhitespace2();
+        if (text3[i] === ",") {
+          i++;
+          continue;
+        }
+        if (text3[i] !== close) fail2(`expected ',' or '${close}'`);
+        i++;
+        return c === "{" ? object4 : array;
+      }
+    }
+    if (c === '"') return parseString();
+    for (const [literal, value2] of [["true", true], ["false", false], ["null", null]]) {
+      if (text3.startsWith(literal, i)) {
+        i += literal.length;
+        return value2;
+      }
+    }
+    const number = /-?(0|[1-9][0-9]*)(\.[0-9]+)?([eE][+-]?[0-9]+)?/y;
+    number.lastIndex = i;
+    const match = number.exec(text3);
+    if (match === null) return fail2("unexpected token");
+    if (match[2] !== void 0 || match[3] !== void 0) fail2("non-integer number");
+    i += match[0].length;
+    return new JsonInteger(match[0]);
+  };
+  const value = parseValue(0);
+  skipWhitespace2();
+  if (i !== text3.length) fail2("trailing data");
+  return value;
+}
+function parseRecordResponse(body) {
+  const root = parseStrictJson(body);
+  const record2 = root instanceof Map ? root.get("record") : void 0;
+  if (!(record2 instanceof Map)) {
+    throw new SyntaxError("location registry response has no record object");
+  }
+  const version = record2.get("version");
+  const subject = record2.get("subject");
+  const multiaddrs = record2.get("multiaddrs");
+  const updatedAt = record2.get("updated_at");
+  const sequence = record2.get("sequence");
+  const signature = record2.get("signature");
+  if (!(version instanceof JsonInteger) || version.lexeme !== "1") {
+    throw new SyntaxError("record.version must be the integer 1");
+  }
+  if (typeof subject !== "string") {
+    throw new SyntaxError("record.subject must be a string");
+  }
+  if (!Array.isArray(multiaddrs) || !multiaddrs.every((entry) => typeof entry === "string" && entry.length > 0)) {
+    throw new SyntaxError("record.multiaddrs must be an array of non-empty strings");
+  }
+  if (typeof updatedAt !== "string" || !isRfc3339DateTime(updatedAt)) {
+    throw new SyntaxError("record.updated_at must be an RFC 3339 date-time");
+  }
+  if (!(sequence instanceof JsonInteger) || !/^(0|[1-9][0-9]*)$/.test(sequence.lexeme) || !Number.isSafeInteger(Number(sequence.lexeme))) {
+    throw new SyntaxError("record.sequence must be a non-negative safe integer");
+  }
+  if (typeof signature !== "string" || signature.length === 0) {
+    throw new SyntaxError("record.signature must be a non-empty string");
+  }
+  return {
+    subject,
+    multiaddrs,
+    updated_at: updatedAt,
+    sequence: Number(sequence.lexeme),
+    signature
+  };
+}
+function isRfc3339DateTime(value) {
+  const match = RFC3339_DATE_TIME.exec(value);
+  if (match === null) return false;
+  const [year, month, day, hour, minute, second] = match.slice(1, 7).map(Number);
+  const leap = year % 4 === 0 && year % 100 !== 0 || year % 400 === 0;
+  const daysInMonth = [31, leap ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31][month - 1];
+  return daysInMonth !== void 0 && day >= 1 && day <= daysInMonth && hour <= 23 && minute <= 59 && second <= 59 && (match[8] === "Z" || Number(match[9]) <= 23 && Number(match[10]) <= 59);
+}
+async function verifyRecordSignature(record2) {
+  const payload = canonicalLocationPayload({
+    version: 1,
+    subject: record2.subject,
+    multiaddrs: record2.multiaddrs,
+    updated_at: record2.updated_at,
+    sequence: record2.sequence
+  });
+  const { signature } = record2;
+  if (record2.subject.startsWith("did:pkh:")) {
+    if (!/^0x[0-9a-fA-F]{130}$/.test(signature)) return false;
+    const r = BigInt(`0x${signature.slice(2, 66)}`);
+    const s = BigInt(`0x${signature.slice(66, 130)}`);
+    const v = parseInt(signature.slice(130), 16);
+    if (r === 0n || r >= SECP256K1_N || s === 0n || s > SECP256K1_N / 2n) return false;
+    if (v !== 0 && v !== 1 && v !== 27 && v !== 28) return false;
+    const address = record2.subject.slice(record2.subject.lastIndexOf(":") + 1);
+    try {
+      return await verifyMessage3({
+        address,
+        message: payload,
+        signature
+      });
+    } catch {
+      return false;
+    }
+  }
+  const publicKey = ed25519KeyFromDidKey(record2.subject);
+  if (publicKey === null || !/^[A-Za-z0-9_-]{86}$/.test(signature)) return false;
+  const bytes2 = new Uint8Array(64);
+  let buffer = 0;
+  let bits = 0;
+  let length2 = 0;
+  for (const char of signature) {
+    buffer = (buffer << 6 | BASE64URL.indexOf(char)) & 65535;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      bytes2[length2++] = buffer >> bits & 255;
+    }
+  }
+  try {
+    return ed2551912.verify(bytes2, new TextEncoder().encode(payload), publicKey, { zip215: false });
+  } catch {
+    return false;
+  }
+}
+function multiaddrOrigin(address) {
+  const match = HOST_MULTIADDR.exec(address);
+  if (match === null) return null;
+  const [, protocol, host, portText, transport] = match;
+  const port = Number(portText);
+  if (port > 65535) return null;
+  let authority;
+  if (protocol === "ip4") {
+    if (!IPV4.test(host)) return null;
+    authority = host;
+  } else if (protocol === "ip6") {
+    if (!/^[0-9A-Fa-f:.]+$/.test(host) || !host.includes(":")) return null;
+    authority = `[${host}]`;
+  } else {
+    if (host.length > 253 || !DNS_NAME.test(host) || /^(0[xX][0-9a-fA-F]*|[0-9]+)$/.test(host.slice(host.lastIndexOf(".") + 1))) {
+      return null;
+    }
+    authority = host;
+  }
+  const scheme = transport === "http" ? "http" : "https";
+  try {
+    return new URL(`${scheme}://${authority}:${port}`).origin;
+  } catch {
+    return null;
+  }
+}
 export {
   ACCOUNT_INDEX_SCHEMA2 as ACCOUNT_INDEX_SCHEMA,
   ACCOUNT_MANIFEST_PERMISSIONS2 as ACCOUNT_MANIFEST_PERMISSIONS,
@@ -19058,6 +19439,8 @@ export {
   PermissionNotInManifestError,
   PrefixedKVService,
   ProtocolMismatchError,
+  REGISTRY_LOOKUP_MAX_BODY_BYTES,
+  REGISTRY_NOT_FOUND_BODY,
   REQUESTER_ENGINE_RETRY_ATTEMPTS,
   REQUESTER_ENGINE_RETRY_MAX_DELAY_MS,
   REQUESTER_NEAR_EXPIRY_SECONDS,
@@ -19066,6 +19449,7 @@ export {
   ROOT_STATUS_CHECKPOINT_V1_SCHEMA,
   ROOT_STATUS_RENEWAL_V1_DOMAIN,
   ROOT_STATUS_V1_DOMAIN,
+  RegistryLookupInputError,
   SECRETS_SPACE,
   SECRET_NAME_RE2 as SECRET_NAME_RE,
   SECRET_RECORDS_SCHEMA,
@@ -19165,6 +19549,7 @@ export {
   canonicalizeUnifiedPolicyCapability,
   checkDecryptInvocationInput,
   checkNodeInfo,
+  classifyRegistryLookup,
   clearTinyCloudDebugLogs,
   compactAttenuationContains,
   composeBootstrapSpaceManifest,