@umbra-privacy/ceremony 0.1.1 → 0.1.2

package/dist/index.js

@@ -111,13 +111,44 @@ var api = {
       `/api/ceremonies/${ceremonyId2}/contributions/${contributionId}/receipt`
     );
   },
-  // Admin
-  adminDashboard(ceremonyId2, adminKey) {
-    return request(`/api/admin/ceremonies/${ceremonyId2}/dashboard`, {
-      headers: { "X-Admin-Key": adminKey }
-    });
+  // Admin — signed-request flow. Caller supplies the 64-byte Solana keypair
+  // bytes (32 secret + 32 public). The helper fetches a one-time challenge,
+  // builds the canonical message, hashes it with Keccak256, signs with
+  // Ed25519, and posts the actual GET with the three X-Admin-* headers.
+  async adminDashboard(ceremonyId2, keypair) {
+    const path = `/api/admin/ceremonies/${ceremonyId2}/dashboard`;
+    const headers = await signAdminRequest(keypair, "GET", path, new Uint8Array());
+    return request(path, { headers });
   }
 };
+async function signAdminRequest(keypair, method, path, body) {
+  const { default: bs58 } = await import("bs58");
+  const ed = await import("@noble/ed25519");
+  const { keccak_256 } = await import("@noble/hashes/sha3");
+  const pubkeyB58 = bs58.encode(keypair.publicKey);
+  const chRes = await fetch(`${BASE}/api/admin/challenge`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ pubkey: pubkeyB58 })
+  });
+  if (!chRes.ok) {
+    const text = await chRes.text();
+    throw new Error(`admin challenge failed: HTTP ${chRes.status}: ${text}`);
+  }
+  const { challenge } = await chRes.json();
+  const bodyHashHex = createHash("sha256").update(Buffer.from(body)).digest("hex");
+  const canonical = `${challenge}
+${method}
+${path}
+${bodyHashHex}`;
+  const digest = keccak_256(new TextEncoder().encode(canonical));
+  const signature = await ed.signAsync(digest, keypair.secretKey);
+  return {
+    "X-Admin-Pubkey": pubkeyB58,
+    "X-Admin-Challenge": challenge,
+    "X-Admin-Signature": Buffer.from(signature).toString("base64")
+  };
+}
 var ChallengeIntegrityError = class extends Error {
   name = "ChallengeIntegrityError";
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umbra-privacy/ceremony",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Terminal UI for the Umbra Phase 2 trusted setup ceremony",
   "type": "module",
   "bin": {
@@ -26,8 +26,12 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
+    "@noble/ed25519": "^2.1.0",
+    "@noble/hashes": "^1.5.0",
+    "bs58": "^6.0.0",
     "ink": "^5.1.0",
     "ink-spinner": "^5.0.0",
+    "js-sha3": "^0.9.3",
     "react": "^18.3.1",
     "snarkjs": "^0.7.6"
   },