@verana-labs/vs-agent-sdk 2.0.0-dev.5 → 2.0.0-dev.51

package/build/blockchain/AnonCredsTrustService.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnonCredsTrustService = exports.AnonCredsTrustError = exports.AnonCredsTrustErrorReason = exports.AnonCredsTrustProblemCode = exports.REQUESTED_CREDENTIAL_SCHEMAS_METADATA = void 0;
+const core_1 = require("@credo-ts/core");
+const util_1 = require("../utils/util");
+const types_1 = require("./types");
+const VTJSC_FETCH_TIMEOUT_MS = 30000;
+const CREDENTIAL_SCHEMA_REFERENCE = /^vpr:verana:([^:/]+):cs:(\d+)$/;
+const RELATED_JSON_SCHEMA_CREDENTIAL_ID_TAG = 'relatedJsonSchemaCredentialId';
+exports.REQUESTED_CREDENTIAL_SCHEMAS_METADATA = '_2060/requestedCredentialSchemas';
+var AnonCredsTrustProblemCode;
+(function (AnonCredsTrustProblemCode) {
+    AnonCredsTrustProblemCode["IssuerNotAuthorized"] = "e.p.issuer-not-authorized";
+    AnonCredsTrustProblemCode["TrustResolutionUnavailable"] = "e.p.trust-resolution-unavailable";
+})(AnonCredsTrustProblemCode || (exports.AnonCredsTrustProblemCode = AnonCredsTrustProblemCode = {}));
+var AnonCredsTrustErrorReason;
+(function (AnonCredsTrustErrorReason) {
+    AnonCredsTrustErrorReason["NotDerivable"] = "not-derivable";
+    AnonCredsTrustErrorReason["NotAuthorized"] = "not-authorized";
+    AnonCredsTrustErrorReason["Unavailable"] = "unavailable";
+})(AnonCredsTrustErrorReason || (exports.AnonCredsTrustErrorReason = AnonCredsTrustErrorReason = {}));
+class AnonCredsTrustError extends Error {
+    constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+        this.name = 'AnonCredsTrustError';
+    }
+}
+exports.AnonCredsTrustError = AnonCredsTrustError;
+function notDerivable(message) {
+    return new AnonCredsTrustError(AnonCredsTrustErrorReason.NotDerivable, message);
+}
+function notAuthorized(message) {
+    return new AnonCredsTrustError(AnonCredsTrustErrorReason.NotAuthorized, message);
+}
+function unavailable(message) {
+    return new AnonCredsTrustError(AnonCredsTrustErrorReason.Unavailable, message);
+}
+function relatedJsonSchemaCredentialIdOf(metadata) {
+    const value = metadata[RELATED_JSON_SCHEMA_CREDENTIAL_ID_TAG];
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+class AnonCredsTrustService {
+    constructor(agent) {
+        this.agent = agent;
+        this.derivations = new Map();
+        this.credentialSchemaLinks = new Map();
+    }
+    async deriveCredentialSchema(reference) {
+        const key = 'credentialDefinitionId' in reference
+            ? `credentialDefinition:${reference.credentialDefinitionId}`
+            : `schema:${reference.schemaId}`;
+        const cached = this.derivations.get(key);
+        if (cached)
+            return cached;
+        const object = await this.resolveAnonCredsObject(reference);
+        const link = await this.resolveCredentialSchemaLink(object.jsonSchemaCredentialId);
+        const derived = {
+            credentialSchemaId: link.credentialSchemaId,
+            ecosystemDid: link.ecosystemDid,
+            jsonSchemaCredentialId: object.jsonSchemaCredentialId,
+            anonCredsSchemaId: object.anonCredsSchemaId,
+            issuerId: object.issuerId,
+        };
+        this.derivations.set(key, derived);
+        return derived;
+    }
+    async assertAuthorized(options) {
+        const { did, role, credentialSchemaId } = options;
+        let participants;
+        try {
+            participants = await this.agent.indexer.listParticipants({
+                did,
+                role,
+                schemaId: credentialSchemaId,
+                participantState: types_1.ParticipantState.Active,
+            });
+        }
+        catch (error) {
+            throw unavailable(`the agent cannot read the Participant entries of "${did}" for the CredentialSchema ${credentialSchemaId}: ${error}`);
+        }
+        const authorized = (participants !== null && participants !== void 0 ? participants : []).some(participant => participant.did === did &&
+            participant.role === role &&
+            Number(participant.schema_id) === credentialSchemaId &&
+            participant.participant_state === types_1.ParticipantState.Active);
+        if (!authorized) {
+            throw notAuthorized(`"${did}" holds no active ${role} Participant for the CredentialSchema ${credentialSchemaId}`);
+        }
+    }
+    async assertOwnAuthorization(options) {
+        if (!this.agent.did) {
+            throw unavailable('the agent has no public DID, so it cannot check its own Participant entry');
+        }
+        await this.assertAuthorized(Object.assign({ did: this.agent.did }, options));
+    }
+    async findUnaccreditedDids(dids, role, credentialSchemaId) {
+        const unaccredited = [];
+        const unchecked = [];
+        for (const did of new Set(dids)) {
+            try {
+                await this.assertAuthorized({ did, role, credentialSchemaId });
+            }
+            catch (error) {
+                if (!(error instanceof AnonCredsTrustError))
+                    throw error;
+                if (error.reason === AnonCredsTrustErrorReason.Unavailable)
+                    unchecked.push(did);
+                else
+                    unaccredited.push(did);
+            }
+        }
+        return { unaccredited, unchecked };
+    }
+    async resolveAnonCredsObject(reference) {
+        var _a, _b;
+        const anoncreds = this.agent.modules.anoncreds;
+        if ('credentialDefinitionId' in reference) {
+            const { credentialDefinitionId } = reference;
+            const [record] = await anoncreds.getCreatedCredentialDefinitions({ credentialDefinitionId });
+            const localId = record === null || record === void 0 ? void 0 : record.getTag(RELATED_JSON_SCHEMA_CREDENTIAL_ID_TAG);
+            if (record && typeof localId === 'string' && localId.length > 0) {
+                return {
+                    jsonSchemaCredentialId: localId,
+                    anonCredsSchemaId: record.credentialDefinition.schemaId,
+                    issuerId: record.credentialDefinition.issuerId,
+                };
+            }
+            const result = await anoncreds.getCredentialDefinition(credentialDefinitionId, {
+                useLocalRecord: false,
+            });
+            if (!result.credentialDefinition) {
+                throw unavailable(`the agent cannot resolve the credential definition "${credentialDefinitionId}": ${(_a = result.resolutionMetadata.message) !== null && _a !== void 0 ? _a : result.resolutionMetadata.error}`);
+            }
+            const jsonSchemaCredentialId = relatedJsonSchemaCredentialIdOf(result.credentialDefinitionMetadata);
+            if (!jsonSchemaCredentialId) {
+                throw notDerivable(`the credential definition "${credentialDefinitionId}" carries no relatedJsonSchemaCredentialId, so it binds to no CredentialSchema`);
+            }
+            return {
+                jsonSchemaCredentialId,
+                anonCredsSchemaId: result.credentialDefinition.schemaId,
+                issuerId: result.credentialDefinition.issuerId,
+            };
+        }
+        const { schemaId } = reference;
+        const [record] = await anoncreds.getCreatedSchemas({ schemaId });
+        const localId = record === null || record === void 0 ? void 0 : record.getTag(RELATED_JSON_SCHEMA_CREDENTIAL_ID_TAG);
+        if (record && typeof localId === 'string' && localId.length > 0) {
+            return { jsonSchemaCredentialId: localId, anonCredsSchemaId: schemaId };
+        }
+        const result = await anoncreds.getSchema(schemaId, { useLocalRecord: false });
+        if (!result.schema) {
+            throw unavailable(`the agent cannot resolve the AnonCreds schema "${schemaId}": ${(_b = result.resolutionMetadata.message) !== null && _b !== void 0 ? _b : result.resolutionMetadata.error}`);
+        }
+        const jsonSchemaCredentialId = relatedJsonSchemaCredentialIdOf(result.schemaMetadata);
+        if (!jsonSchemaCredentialId) {
+            throw notDerivable(`the AnonCreds schema "${schemaId}" carries no relatedJsonSchemaCredentialId, so it binds to no CredentialSchema`);
+        }
+        return { jsonSchemaCredentialId, anonCredsSchemaId: schemaId };
+    }
+    async resolveCredentialSchemaLink(jsonSchemaCredentialId) {
+        var _a, _b, _c;
+        const cached = this.credentialSchemaLinks.get(jsonSchemaCredentialId);
+        if (cached)
+            return cached;
+        let document;
+        try {
+            document = await (0, util_1.fetchJson)(jsonSchemaCredentialId, VTJSC_FETCH_TIMEOUT_MS);
+        }
+        catch (error) {
+            throw unavailable(`the agent cannot read the VTJSC "${jsonSchemaCredentialId}": ${error}`);
+        }
+        await this.verifyVtjscProof(jsonSchemaCredentialId, document);
+        const subject = Array.isArray(document.credentialSubject)
+            ? document.credentialSubject[0]
+            : document.credentialSubject;
+        const schemaReference = (_a = subject === null || subject === void 0 ? void 0 : subject.jsonSchema) === null || _a === void 0 ? void 0 : _a.$ref;
+        const parsed = schemaReference === null || schemaReference === void 0 ? void 0 : schemaReference.match(CREDENTIAL_SCHEMA_REFERENCE);
+        if (!parsed) {
+            throw notDerivable(`the VTJSC "${jsonSchemaCredentialId}" names "${schemaReference !== null && schemaReference !== void 0 ? schemaReference : 'no'}" in credentialSubject.jsonSchema.$ref, which is no "vpr:verana:<chain>:cs:<id>" reference`);
+        }
+        const chainId = (_b = this.agent.veranaChain) === null || _b === void 0 ? void 0 : _b.getChainId;
+        if (!chainId) {
+            throw unavailable(`the agent runs on no chain, so it cannot read the CredentialSchema of the VTJSC "${jsonSchemaCredentialId}"`);
+        }
+        if (parsed[1] !== chainId) {
+            throw notDerivable(`the VTJSC "${jsonSchemaCredentialId}" names the chain "${parsed[1]}", and the agent runs on "${chainId}"`);
+        }
+        const credentialSchemaId = Number(parsed[2]);
+        const credentialSchema = await this.requireFromIndexer(() => this.agent.indexer.getCredentialSchema(credentialSchemaId, { allowNotFound: true }), `CredentialSchema ${credentialSchemaId}, which the VTJSC "${jsonSchemaCredentialId}" names`);
+        const ecosystem = await this.requireFromIndexer(() => this.agent.indexer.getEcosystem(credentialSchema.ecosystem_id, { allowNotFound: true }), `Ecosystem ${credentialSchema.ecosystem_id}, which the CredentialSchema ${credentialSchemaId} names`);
+        const ecosystemDid = ecosystem.did;
+        if (!ecosystemDid) {
+            throw notDerivable(`the Ecosystem of the CredentialSchema ${credentialSchemaId} carries no DID`);
+        }
+        const issuer = typeof document.issuer === 'string' ? document.issuer : (_c = document.issuer) === null || _c === void 0 ? void 0 : _c.id;
+        if (issuer !== ecosystemDid) {
+            throw notDerivable(`the VTJSC "${jsonSchemaCredentialId}" carries the issuer "${issuer}", and the Ecosystem of the CredentialSchema ${credentialSchemaId} is "${ecosystemDid}"`);
+        }
+        const link = { credentialSchemaId, ecosystemDid };
+        this.credentialSchemaLinks.set(jsonSchemaCredentialId, link);
+        return link;
+    }
+    async requireFromIndexer(read, describe) {
+        let value;
+        try {
+            value = await read();
+        }
+        catch (error) {
+            throw unavailable(`the agent cannot read the ${describe}: ${error}`);
+        }
+        if (!value)
+            throw notDerivable(`the VPR holds no ${describe}`);
+        return value;
+    }
+    async verifyVtjscProof(jsonSchemaCredentialId, document) {
+        var _a;
+        let credential;
+        try {
+            credential = core_1.JsonTransformer.fromJSON(document, core_1.W3cJsonLdVerifiableCredential);
+        }
+        catch (error) {
+            throw notDerivable(`the document at "${jsonSchemaCredentialId}" is no verifiable credential: ${error}`);
+        }
+        try {
+            const result = await this.agent.w3cCredentials.verifyCredential({ credential });
+            if (result.isValid)
+                return;
+            throw notDerivable(`the proof of the VTJSC "${jsonSchemaCredentialId}" is invalid: ${(_a = result.error) !== null && _a !== void 0 ? _a : 'the verification failed'}`);
+        }
+        catch (error) {
+            if (error instanceof AnonCredsTrustError)
+                throw error;
+            throw unavailable(`the agent cannot verify the proof of the VTJSC "${jsonSchemaCredentialId}": ${error}`);
+        }
+    }
+}
+exports.AnonCredsTrustService = AnonCredsTrustService;
+//# sourceMappingURL=AnonCredsTrustService.js.map

package/build/blockchain/AnonCredsTrustService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AnonCredsTrustService.js","sourceRoot":"","sources":["../../src/blockchain/AnonCredsTrustService.ts"],"names":[],"mappings":";;;AAEA,yCAA+E;AAE/E,wCAAyC;AAEzC,mCAA2E;AAE3E,MAAM,sBAAsB,GAAG,KAAM,CAAA;AAErC,MAAM,2BAA2B,GAAG,gCAAgC,CAAA;AAEpE,MAAM,qCAAqC,GAAG,+BAA+B,CAAA;AAEhE,QAAA,qCAAqC,GAAG,kCAAkC,CAAA;AAEvF,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,8EAAiD,CAAA;IACjD,4FAA+D,CAAA;AACjE,CAAC,EAHW,yBAAyB,yCAAzB,yBAAyB,QAGpC;AAED,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,2DAA8B,CAAA;IAC9B,6DAAgC,CAAA;IAChC,wDAA2B,CAAA;AAC7B,CAAC,EAJW,yBAAyB,yCAAzB,yBAAyB,QAIpC;AAED,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YACkB,MAAiC,EACjD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,WAAM,GAAN,MAAM,CAA2B;QAIjD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AARD,kDAQC;AAqCD,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,+BAA+B,CAAC,QAAiC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,qCAAqC,CAAC,CAAA;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC;AAED,MAAa,qBAAqB;IAIhC,YAAoC,KAAgC;QAAhC,UAAK,GAAL,KAAK,CAA2B;QAHnD,gBAAW,GAAG,IAAI,GAAG,EAAmC,CAAA;QACxD,0BAAqB,GAAG,IAAI,GAAG,EAAgC,CAAA;IAET,CAAC;IAEjE,KAAK,CAAC,sBAAsB,CAAC,SAAmC;QACrE,MAAM,GAAG,GACP,wBAAwB,IAAI,SAAS;YACnC,CAAC,CAAC,wBAAwB,SAAS,CAAC,sBAAsB,EAAE;YAC5D,CAAC,CAAC,UAAU,SAAS,CAAC,QAAQ,EAAE,CAAA;QAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAA;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;QAElF,MAAM,OAAO,GAA4B;YACvC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAA;QAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAClC,OAAO,OAAO,CAAA;IAChB,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,OAI7B;QACC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAA;QAEjD,IAAI,YAA8B,CAAA;QAClC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBACvD,GAAG;gBACH,IAAI;gBACJ,QAAQ,EAAE,kBAAkB;gBAC5B,gBAAgB,EAAE,wBAAgB,CAAC,MAAM;aAC1C,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CACf,qDAAqD,GAAG,8BAA8B,kBAAkB,KAAK,KAAK,EAAE,CACrH,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,EAAE,CAAC,CAAC,IAAI,CAC1C,WAAW,CAAC,EAAE,CACZ,WAAW,CAAC,GAAG,KAAK,GAAG;YACvB,WAAW,CAAC,IAAI,KAAK,IAAI;YACzB,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,kBAAkB;YACpD,WAAW,CAAC,iBAAiB,KAAK,wBAAgB,CAAC,MAAM,CAC5D,CAAA;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,aAAa,CACjB,IAAI,GAAG,qBAAqB,IAAI,yCAAyC,kBAAkB,EAAE,CAC9F,CAAA;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,OAGnC;QACC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,WAAW,CAAC,2EAA2E,CAAC,CAAA;QAChG,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,iBAAG,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAK,OAAO,EAAG,CAAA;IAClE,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAC/B,IAAc,EACd,IAAqB,EACrB,kBAA0B;QAE1B,MAAM,YAAY,GAAa,EAAE,CAAA;QACjC,MAAM,SAAS,GAAa,EAAE,CAAA;QAE9B,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC;oBAAE,MAAM,KAAK,CAAA;gBACxD,IAAI,KAAK,CAAC,MAAM,KAAK,yBAAyB,CAAC,WAAW;oBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;;oBAC1E,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;IACpC,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,SAAmC;;QAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAA;QAE9C,IAAI,wBAAwB,IAAI,SAAS,EAAE,CAAC;YAC1C,MAAM,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;YAE5C,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,+BAA+B,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAA;YAC5F,MAAM,OAAO,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,CAAC,qCAAqC,CAAC,CAAA;YACrE,IAAI,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,OAAO;oBACL,sBAAsB,EAAE,OAAO;oBAC/B,iBAAiB,EAAE,MAAM,CAAC,oBAAoB,CAAC,QAAQ;oBACvD,QAAQ,EAAE,MAAM,CAAC,oBAAoB,CAAC,QAAQ;iBAC/C,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,sBAAsB,EAAE;gBAC7E,cAAc,EAAE,KAAK;aACtB,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACjC,MAAM,WAAW,CACf,uDAAuD,sBAAsB,MAAM,MAAA,MAAM,CAAC,kBAAkB,CAAC,OAAO,mCAAI,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAC1J,CAAA;YACH,CAAC;YAED,MAAM,sBAAsB,GAAG,+BAA+B,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAA;YACnG,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC5B,MAAM,YAAY,CAChB,8BAA8B,sBAAsB,gFAAgF,CACrI,CAAA;YACH,CAAC;YAED,OAAO;gBACL,sBAAsB;gBACtB,iBAAiB,EAAE,MAAM,CAAC,oBAAoB,CAAC,QAAQ;gBACvD,QAAQ,EAAE,MAAM,CAAC,oBAAoB,CAAC,QAAQ;aAC/C,CAAA;QACH,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAA;QAE9B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChE,MAAM,OAAO,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,CAAC,qCAAqC,CAAC,CAAA;QACrE,IAAI,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,WAAW,CACf,kDAAkD,QAAQ,MAAM,MAAA,MAAM,CAAC,kBAAkB,CAAC,OAAO,mCAAI,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,CACvI,CAAA;QACH,CAAC;QAED,MAAM,sBAAsB,GAAG,+BAA+B,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QACrF,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,YAAY,CAChB,yBAAyB,QAAQ,gFAAgF,CAClH,CAAA;QACH,CAAC;QAED,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;IAChE,CAAC;IAEO,KAAK,CAAC,2BAA2B,CAAC,sBAA8B;;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACrE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QAEzB,IAAI,QAAuB,CAAA;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,gBAAS,EAAgB,sBAAsB,EAAE,sBAAsB,CAAC,CAAA;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,oCAAoC,sBAAsB,MAAM,KAAK,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAA;QAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACvD,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAA;QAC9B,MAAM,eAAe,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,0CAAE,IAAI,CAAA;QACjD,MAAM,MAAM,GAAG,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,YAAY,CAChB,cAAc,sBAAsB,YAAY,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,IAAI,4FAA4F,CACpK,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAA,IAAI,CAAC,KAAK,CAAC,WAAW,0CAAE,UAAU,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,WAAW,CACf,oFAAoF,sBAAsB,GAAG,CAC9G,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,YAAY,CAChB,cAAc,sBAAsB,sBAAsB,MAAM,CAAC,CAAC,CAAC,6BAA6B,OAAO,GAAG,CAC3G,CAAA;QACH,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CACpD,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EACzF,oBAAoB,kBAAkB,sBAAsB,sBAAsB,SAAS,CAC5F,CAAA;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC7C,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAC7F,aAAa,gBAAgB,CAAC,YAAY,gCAAgC,kBAAkB,QAAQ,CACrG,CAAA;QAED,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAA;QAClC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,YAAY,CAAC,yCAAyC,kBAAkB,iBAAiB,CAAC,CAAA;QAClG,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAA,QAAQ,CAAC,MAAM,0CAAE,EAAE,CAAA;QAC1F,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,YAAY,CAChB,cAAc,sBAAsB,yBAAyB,MAAM,gDAAgD,kBAAkB,QAAQ,YAAY,GAAG,CAC7J,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,CAAA;QACjD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAI,IAAkC,EAAE,QAAgB;QACtF,IAAI,KAAoB,CAAA;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,EAAE,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,CAAC,KAAK;YAAE,MAAM,YAAY,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAA;QAC9D,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,sBAA8B,EAAE,QAAuB;;QACpF,IAAI,UAAyC,CAAA;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,sBAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,oCAA6B,CAAC,CAAA;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,oBAAoB,sBAAsB,kCAAkC,KAAK,EAAE,CAAC,CAAA;QACzG,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;YAC/E,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAM;YAE1B,MAAM,YAAY,CAChB,2BAA2B,sBAAsB,iBAAiB,MAAA,MAAM,CAAC,KAAK,mCAAI,yBAAyB,EAAE,CAC9G,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,MAAM,KAAK,CAAA;YAErD,MAAM,WAAW,CACf,mDAAmD,sBAAsB,MAAM,KAAK,EAAE,CACvF,CAAA;QACH,CAAC;IACH,CAAC;CACF;AAxQD,sDAwQC"}

package/build/blockchain/AuthorizationService.d.ts

@@ -1,8 +1,10 @@
 import { BaseLogger } from '@credo-ts/core';
 import { VeranaChainService } from './VeranaChainService';
+import { VeranaIndexerService } from './VeranaIndexerService';
 import { CachedVsOperatorAuthorizationRecord } from './types';
 export interface AuthorizationServiceConfig {
     chain: VeranaChainService;
+    indexer: VeranaIndexerService;
     logger: BaseLogger;
     corporationId?: number;
     minRefreshIntervalMs?: number;
@@ -11,13 +13,15 @@ export interface AuthorizationServiceConfig {
 export declare class AuthorizationService {
     private vsoaByParticipant;
     private lastRefreshAt;
+    private lastRefreshAtBlock;
     private readonly chain;
+    private readonly indexer;
     private readonly logger;
     private readonly corporationId?;
     private readonly minRefreshIntervalMs;
     constructor(config: AuthorizationServiceConfig);
     private inScope;
-    refreshForOperator(): Promise<void>;
+    refreshForOperator(minBlock?: number): Promise<void>;
     invalidateParticipant(participantId: number): void;
     canSign(participantId: number, msgType: string): boolean;
     getVsOperatorAuthorizationRecord(participantId: number): CachedVsOperatorAuthorizationRecord | undefined;
@@ -25,6 +29,4 @@ export declare class AuthorizationService {
     hasFeegrant(participantId: number): boolean;
     agentHoldsOperatorGrant(msgType: string): Promise<boolean>;
     callerHoldsOperatorGrant(account: string, msgType: string): Promise<boolean>;
-    callerHoldsAnyVsOperatorGrant(account: string, msgType: string): Promise<boolean>;
-    callerHoldsVsOperatorGrant(account: string, participantId: number, msgType: string): Promise<boolean>;
 }

package/build/blockchain/AuthorizationService.js

@@ -7,19 +7,19 @@ function renews(period) {
     var _a;
     return period != null && (period.seconds > 0 || ((_a = period.nanos) !== null && _a !== void 0 ? _a : 0) > 0);
 }
-function isOperatorAuthorizationActive(expiration, period) {
+// An unset expiration means the grant never expires (AUTHZ-CHECK-3 step 4, AUTHZ-CHECK-1 step 2).
+function isAuthorizationActive(expiration, period) {
     return expiration === undefined || expiration.getTime() > Date.now() || renews(period);
 }
-function isVsoaRecordActive(expiration, period) {
-    return expiration != null && (expiration.getTime() > Date.now() || renews(period));
-}
 /** VS operator authorization records cached for the admin API (https://github.com/verana-labs/vs-agent/issues/472); operator authorizations are queried on demand. */
 class AuthorizationService {
     constructor(config) {
         var _a;
         this.vsoaByParticipant = new Map();
         this.lastRefreshAt = 0;
+        this.lastRefreshAtBlock = 0;
         this.chain = config.chain;
+        this.indexer = config.indexer;
         this.logger = config.logger;
         this.corporationId = config.corporationId;
         this.minRefreshIntervalMs = (_a = config.minRefreshIntervalMs) !== null && _a !== void 0 ? _a : 2000;
@@ -27,12 +27,18 @@ class AuthorizationService {
     inScope(corporationId) {
         return this.corporationId === undefined || corporationId === this.corporationId;
     }
-    async refreshForOperator() {
-        // Catch-up replays hit the same current chain state, so back-to-back refreshes are skipped.
-        if (Date.now() - this.lastRefreshAt < this.minRefreshIntervalMs)
+    // `minBlock` is the block of the indexer event that triggered the refresh. The delegation
+    // projection has its own checkpoint, so without it a read can still answer with pre-event state.
+    async refreshForOperator(minBlock) {
+        // Catch-up replays hit the same current chain state, so back-to-back refreshes are skipped,
+        // unless the caller needs a block this cache has not covered yet.
+        const staleForBlock = minBlock !== undefined && minBlock > this.lastRefreshAtBlock;
+        if (!staleForBlock && Date.now() - this.lastRefreshAt < this.minRefreshIntervalMs)
             return;
-        const vsoas = await this.chain.listVsOperatorAuthorizations();
+        const vsoas = await this.indexer.listVsOperatorAuthorizations(this.chain.address, minBlock);
         this.lastRefreshAt = Date.now();
+        if (minBlock !== undefined)
+            this.lastRefreshAtBlock = minBlock;
         const rebuilt = new Map();
         for (const vsoa of vsoas) {
             if (!this.inScope(vsoa.corporationId))
@@ -51,7 +57,7 @@ class AuthorizationService {
     }
     canSign(participantId, msgType) {
         const record = this.vsoaByParticipant.get(participantId);
-        return (!!record && record.msgTypes.includes(msgType) && isVsoaRecordActive(record.expiration, record.period));
+        return (!!record && record.msgTypes.includes(msgType) && isAuthorizationActive(record.expiration, record.period));
     }
     getVsOperatorAuthorizationRecord(participantId) {
         return this.vsoaByParticipant.get(participantId);
@@ -72,28 +78,10 @@ class AuthorizationService {
     async callerHoldsOperatorGrant(account, msgType) {
         if (!account.trim())
             return false;
-        const auths = await this.chain.listOperatorAuthorizations(account);
+        const auths = await this.indexer.listOperatorAuthorizations(account);
         return auths.some(a => this.inScope(a.corporationId) &&
             a.msgTypes.includes(msgType) &&
-            isOperatorAuthorizationActive(a.expiration, a.period));
-    }
-    async callerHoldsAnyVsOperatorGrant(account, msgType) {
-        if (!account.trim())
-            return false;
-        const vsoas = await this.chain.listVsOperatorAuthorizations(account);
-        return vsoas.some(vsoa => this.inScope(vsoa.corporationId) &&
-            vsoa.records.some(r => this.vsoaByParticipant.has(r.participantId) &&
-                r.msgTypes.includes(msgType) &&
-                isVsoaRecordActive(r.expiration, r.period)));
-    }
-    async callerHoldsVsOperatorGrant(account, participantId, msgType) {
-        if (!account.trim())
-            return false;
-        const vsoas = await this.chain.listVsOperatorAuthorizations(account);
-        return vsoas.some(vsoa => this.inScope(vsoa.corporationId) &&
-            vsoa.records.some(r => r.participantId === participantId &&
-                r.msgTypes.includes(msgType) &&
-                isVsoaRecordActive(r.expiration, r.period)));
+            isAuthorizationActive(a.expiration, a.period));
     }
 }
 exports.AuthorizationService = AuthorizationService;

package/build/blockchain/AuthorizationService.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthorizationService.js","sourceRoot":"","sources":["../../src/blockchain/AuthorizationService.ts"],"names":[],"mappings":";;;AAKA,sFAAsF;AACtF,mFAAmF;AACnF,SAAS,MAAM,CAAC,MAAsB;;IACpC,OAAO,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAiB,EAAE,MAAsB;IAC9E,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAiB,EAAE,MAAsB;IACnE,OAAO,UAAU,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AACpF,CAAC;AASD,sKAAsK;AACtK,MAAa,oBAAoB;IAQ/B,YAAY,MAAkC;;QAPtC,sBAAiB,GAAG,IAAI,GAAG,EAA+C,CAAA;QAC1E,kBAAa,GAAG,CAAC,CAAA;QAOvB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC3B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAA;QACzC,IAAI,CAAC,oBAAoB,GAAG,MAAA,MAAM,CAAC,oBAAoB,mCAAI,IAAK,CAAA;IAClE,CAAC;IAEO,OAAO,CAAC,aAAqB;QACnC,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,aAAa,CAAA;IACjF,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,4FAA4F;QAC5F,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,oBAAoB;YAAE,OAAM;QAEvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAA;QAC7D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAA;QACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;gBAAE,SAAQ;YAC/C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,kCAC3B,MAAM,KACT,aAAa,EAAE,IAAI,CAAC,aAAa,EACjC,UAAU,EAAE,IAAI,CAAC,UAAU,IAC3B,CAAA;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAA;QAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,IAAI,iBAAiB,CAAC,CAAA;IACtF,CAAC;IAED,qBAAqB,CAAC,aAAqB;QACzC,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,aAAa,EAAE,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,aAAqB,EAAE,OAAe;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QACxD,OAAO,CACL,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CACtG,CAAA;IACH,CAAC;IAED,gCAAgC,CAAC,aAAqB;QACpD,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAClD,CAAC;IAED,kCAAkC;QAChC,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7C,CAAC;IAED,sFAAsF;IACtF,2DAA2D;IAC3D,WAAW,CAAC,aAAqB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QACxD,OAAO,CACL,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CACzG,CAAA;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAe;QAC3C,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACnE,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,OAAe;QAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;QAClE,OAAO,KAAK,CAAC,IAAI,CACf,CAAC,CAAC,EAAE,CACF,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,6BAA6B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CACxD,CAAA;IACH,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,OAAe,EAAE,OAAe;QAClE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAA;QACpE,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,CAAC,EAAE,CACL,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,CAAC,EAAE,CACF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC3C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,kBAAkB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAC7C,CACJ,CAAA;IACH,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,OAAe,EACf,aAAqB,EACrB,OAAe;QAEf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAA;QACpE,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,CAAC,EAAE,CACL,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,CAAC,EAAE,CACF,CAAC,CAAC,aAAa,KAAK,aAAa;gBACjC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,kBAAkB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAC7C,CACJ,CAAA;IACH,CAAC;CACF;AAvHD,oDAuHC"}
+{"version":3,"file":"AuthorizationService.js","sourceRoot":"","sources":["../../src/blockchain/AuthorizationService.ts"],"names":[],"mappings":";;;AAMA,sFAAsF;AACtF,mFAAmF;AACnF,SAAS,MAAM,CAAC,MAAsB;;IACpC,OAAO,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED,kGAAkG;AAClG,SAAS,qBAAqB,CAAC,UAAiB,EAAE,MAAsB;IACtE,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAA;AACxF,CAAC;AAUD,sKAAsK;AACtK,MAAa,oBAAoB;IAU/B,YAAY,MAAkC;;QATtC,sBAAiB,GAAG,IAAI,GAAG,EAA+C,CAAA;QAC1E,kBAAa,GAAG,CAAC,CAAA;QACjB,uBAAkB,GAAG,CAAC,CAAA;QAQ5B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC3B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAA;QACzC,IAAI,CAAC,oBAAoB,GAAG,MAAA,MAAM,CAAC,oBAAoB,mCAAI,IAAK,CAAA;IAClE,CAAC;IAEO,OAAO,CAAC,aAAqB;QACnC,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,aAAa,CAAA;IACjF,CAAC;IAED,0FAA0F;IAC1F,iGAAiG;IACjG,KAAK,CAAC,kBAAkB,CAAC,QAAiB;QACxC,4FAA4F;QAC5F,kEAAkE;QAClE,MAAM,aAAa,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAA;QAClF,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,oBAAoB;YAAE,OAAM;QAEzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC3F,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC/B,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAA;QAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAA;QACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;gBAAE,SAAQ;YAC/C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,kCAC3B,MAAM,KACT,aAAa,EAAE,IAAI,CAAC,aAAa,EACjC,UAAU,EAAE,IAAI,CAAC,UAAU,IAC3B,CAAA;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAA;QAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,IAAI,iBAAiB,CAAC,CAAA;IACtF,CAAC;IAED,qBAAqB,CAAC,aAAqB;QACzC,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,aAAa,EAAE,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,aAAqB,EAAE,OAAe;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QACxD,OAAO,CACL,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CACzG,CAAA;IACH,CAAC;IAED,gCAAgC,CAAC,aAAqB;QACpD,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAClD,CAAC;IAED,kCAAkC;QAChC,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7C,CAAC;IAED,sFAAsF;IACtF,2DAA2D;IAC3D,WAAW,CAAC,aAAqB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QACxD,OAAO,CACL,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CACzG,CAAA;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAe;QAC3C,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACnE,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,OAAe;QAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;QACpE,OAAO,KAAK,CAAC,IAAI,CACf,CAAC,CAAC,EAAE,CACF,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,qBAAqB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAChD,CAAA;IACH,CAAC;CACF;AA7FD,oDA6FC"}

package/build/blockchain/IndexerWebSocketService.d.ts

@@ -7,6 +7,7 @@ export interface IndexerWebSocketServiceOptions {
     corporationId?: number;
     agentCorporationId?: number;
 }
+export type IndexerSyncStatus = 'never-synced' | 'catching-up' | 'disconnected' | 'synced';
 export declare class IndexerWebSocketService {
     private readonly options;
     private ws;
@@ -15,18 +16,22 @@ export declare class IndexerWebSocketService {
     private watchdog;
     private stopped;
     private syncing;
+    private phase;
+    private everSynced;
     private generation;
     private chain;
     private syncBuffer;
-    private subscribeSent;
+    private settleSubscribed;
     private readonly indexer;
     private readonly handlerRegistry;
     constructor(options: IndexerWebSocketServiceOptions);
     start(): Promise<void>;
+    get syncStatus(): IndexerSyncStatus;
     stop(): void;
     private get logger();
     private connect;
     private openWebSocket;
+    private resolveSubscribed;
     private handleMessage;
     private syncRest;
     private drainSyncBuffer;
@@ -34,6 +39,7 @@ export declare class IndexerWebSocketService {
     private runExclusive;
     private applyEvent;
     private applyChanges;
+    private emitNotification;
     private fetchActivity;
     private fetchEntity;
     private armWatchdog;

package/build/blockchain/IndexerWebSocketService.js

@@ -29,10 +29,12 @@ class IndexerWebSocketService {
         this.watchdog = null;
         this.stopped = false;
         this.syncing = false;
+        this.phase = 'connecting';
+        this.everSynced = false;
         this.generation = 0;
         this.chain = Promise.resolve();
         this.syncBuffer = [];
-        this.subscribeSent = null;
+        this.settleSubscribed = null;
         this.indexer = new VeranaIndexerService_1.VeranaIndexerService({
             baseUrl: options.indexerUrl,
             logger: options.agent.config.logger,
@@ -43,6 +45,13 @@ class IndexerWebSocketService {
         this.stopped = false;
         await this.connect();
     }
+    get syncStatus() {
+        if (this.phase === 'catching-up')
+            return 'catching-up';
+        if (this.phase === 'synced')
+            return 'synced';
+        return this.everSynced ? 'disconnected' : 'never-synced';
+    }
     stop() {
         var _a;
         this.stopped = true;
@@ -62,14 +71,24 @@ class IndexerWebSocketService {
             return;
         const generation = ++this.generation;
         this.syncing = true;
+        this.phase = 'connecting';
         this.syncBuffer = [];
         const subscribed = new Promise(resolve => {
-            this.subscribeSent = resolve;
+            this.settleSubscribed = resolve;
         });
         this.openWebSocket();
-        await Promise.race([subscribed, delay(SUBSCRIBE_TIMEOUT_MS)]);
+        const outcome = await Promise.race([
+            subscribed,
+            delay(SUBSCRIBE_TIMEOUT_MS).then(() => 'timed-out'),
+        ]);
         if (this.stopped || generation !== this.generation)
             return;
+        if (outcome === 'disconnected')
+            return;
+        if (outcome === 'timed-out') {
+            this.logger.warn(`[IndexerWS] No 'subscribed' acknowledgement within ${SUBSCRIBE_TIMEOUT_MS}ms; starting the catch-up anyway. Events landing before the subscription becomes active may be missed.`);
+        }
+        this.phase = 'catching-up';
         try {
             await this.syncRest(generation);
         }
@@ -82,6 +101,8 @@ class IndexerWebSocketService {
         if (this.stopped || generation !== this.generation)
             return;
         this.syncing = false;
+        this.phase = 'synced';
+        this.everSynced = true;
         this.drainSyncBuffer(generation);
     }
     openWebSocket() {
@@ -98,13 +119,9 @@ class IndexerWebSocketService {
             if (ws === this.ws)
                 this.logger.info(`[IndexerWS] Connected to indexer`);
         });
-        const releaseSubscribeWait = () => {
-            var _a;
-            (_a = this.subscribeSent) === null || _a === void 0 ? void 0 : _a.call(this);
-            this.subscribeSent = null;
-        };
-        ws.on('error', releaseSubscribeWait);
-        ws.on('close', releaseSubscribeWait);
+        const abandonSubscribeWait = () => this.resolveSubscribed('disconnected');
+        ws.on('error', abandonSubscribeWait);
+        ws.on('close', abandonSubscribeWait);
         ws.on('ping', () => {
             if (ws === this.ws)
                 this.armWatchdog();
@@ -119,6 +136,7 @@ class IndexerWebSocketService {
             if (ws !== this.ws)
                 return;
             this.clearWatchdog();
+            this.phase = 'connecting';
             if (!this.stopped)
                 this.scheduleReconnect();
         });
@@ -126,6 +144,11 @@ class IndexerWebSocketService {
             this.logger.error(`[IndexerWS] Error: ${error.message}`);
         });
     }
+    resolveSubscribed(outcome) {
+        var _a;
+        (_a = this.settleSubscribed) === null || _a === void 0 ? void 0 : _a.call(this, outcome);
+        this.settleSubscribed = null;
+    }
     handleMessage(ws, data) {
         let message;
         try {
@@ -140,11 +163,12 @@ class IndexerWebSocketService {
             const subscribe = this.options.corporationId != null
                 ? { action: 'subscribe', corporationId: this.options.corporationId }
                 : { action: 'subscribe', dids: this.options.agent.did ? [this.options.agent.did] : undefined };
-            ws.send(JSON.stringify(subscribe), () => {
-                var _a;
-                (_a = this.subscribeSent) === null || _a === void 0 ? void 0 : _a.call(this);
-                this.subscribeSent = null;
-            });
+            ws.send(JSON.stringify(subscribe));
+            return;
+        }
+        if (message.type === 'subscribed') {
+            this.logger.debug(`[IndexerWS] Subscription active, delivery starts at block ${message.block}`);
+            this.resolveSubscribed('acknowledged');
             return;
         }
         if (message.type !== 'block')
@@ -222,8 +246,7 @@ class IndexerWebSocketService {
         const activity = await this.fetchActivity(event);
         if (this.stopped || generation !== this.generation)
             return;
-        if (activity)
-            await this.applyChanges(event, activity, state);
+        await this.applyChanges(event, activity, state);
         if (state.partialBlock === undefined || block > state.partialBlock) {
             state.partialBlock = block;
             state.partialKeys = [key];
@@ -238,30 +261,38 @@ class IndexerWebSocketService {
     async applyChanges(event, activity, state) {
         const syncState = state !== null && state !== void 0 ? state : (await (0, VeranaHelpers_1.loadSyncState)(this.options.agent));
         const block = event.block_height;
-        (0, handlers_1.applyStateMutation)(syncState, activity);
-        await this.handlerRegistry.dispatch(activity, {
-            agent: this.options.agent,
-            blockHeight: block,
-            operatorAddress: event.payload.sender,
-            agentCorporationId: this.options.agentCorporationId,
-            state: syncState,
-            txHash: event.tx_hash,
-        });
+        if (activity) {
+            (0, handlers_1.applyStateMutation)(syncState, activity);
+            await this.handlerRegistry.dispatch(activity, {
+                agent: this.options.agent,
+                blockHeight: block,
+                operatorAddress: event.payload.sender,
+                agentCorporationId: this.options.agentCorporationId,
+                state: syncState,
+                txHash: event.tx_hash,
+            });
+        }
         if (!state) {
             syncState.lastBlockHeight = Math.max(syncState.lastBlockHeight, block);
             await (0, VeranaHelpers_1.saveSyncState)(this.options.agent, syncState);
         }
+        this.emitNotification(event, activity === null || activity === void 0 ? void 0 : activity.changes);
+    }
+    emitNotification(event, changes) {
+        const { payload } = event;
+        const resolved = changes && Object.keys(changes).length > 0;
         try {
-            (0, events_1.emitVsAgentEvent)(this.options.agent, events_1.VsAgentEventTypes.IndexerNotification, new vs_agent_model_1.IndexerNotification({
-                msg: activity.msg,
-                entityType: String(activity.entity_type),
-                entityId: String(activity.entity_id),
-                changes: activity.changes,
-                blockHeight: block,
-                txHash: event.tx_hash,
-                operatorAddress: event.payload.sender,
-                timestamp: new Date(event.timestamp),
-            }));
+            (0, events_1.emitVsAgentEvent)(this.options.agent, events_1.VsAgentEventTypes.IndexerNotification, new vs_agent_model_1.IndexerNotification(Object.assign({ eventType: event.event_type, did: event.did, blockHeight: event.block_height, txHash: event.tx_hash, timestamp: new Date(event.timestamp), payload: {
+                    module: payload.module,
+                    action: payload.action,
+                    messageType: payload.message_type,
+                    txIndex: payload.tx_index,
+                    messageIndex: payload.message_index,
+                    sender: payload.sender,
+                    relatedDids: payload.related_dids,
+                    entityType: payload.entity_type,
+                    entityId: payload.entity_id,
+                } }, (resolved ? { changes } : {}))));
         }
         catch (err) {
             this.logger.error(`[IndexerWS] Failed to emit indexer notification: ${err.message}`);
@@ -314,6 +345,7 @@ class IndexerWebSocketService {
         if (this.stopped)
             return;
         this.logger.warn(`[IndexerWS] Forcing reconnect: ${reason}`);
+        this.phase = 'connecting';
         this.generation++; // stops queued work so it cannot move the height past the failed event
         this.clearWatchdog();
         const ws = this.ws;