@xescure/keeta-utils 0.0.0-stage → 0.1.0

package/dist/identity/rules.js

@@ -0,0 +1,184 @@
+import { accountKeyAlgorithm, isNetwork, parseAddress, publicKeyOf } from './account.js';
+import { defaultKeyFormat, localCapabilities } from './drivers.js';
+import { issue } from './error.js';
+import { formatKeyRef, readKeyRef } from './keyref.js';
+import { fieldsOf } from './schema.js';
+export function fieldIssue(field, code, message) {
+    return (issue(code, field.variable, message, field.path));
+}
+function signerCapabilities(ref, registry) {
+    if (ref.kind === 'address') {
+        return (undefined);
+    }
+    const driver = registry.driver(ref.scheme);
+    if (driver?.kind === 'signer') {
+        return (driver.capabilities(ref));
+    }
+    if ((ref.format ?? defaultKeyFormat) === 'public') {
+        return (undefined);
+    }
+    return (localCapabilities(ref));
+}
+function expectedAlgorithm(ref) {
+    if (ref.kind === 'address' || ref.expect === undefined) {
+        return (undefined);
+    }
+    const account = parseAddress(ref.expect);
+    if (account === undefined) {
+        return (undefined);
+    }
+    return (accountKeyAlgorithm(account));
+}
+/**
+ * The static rules for a ref in a signer position, against the driver's
+ * declared capabilities. `network` undefined is unknown, which counts as
+ * `main`.
+ */
+export function checkSignerRef(ref, registry, constraints, network) {
+    const capabilities = signerCapabilities(ref, registry);
+    if (ref.kind === 'address' || capabilities === undefined) {
+        return ([{ code: 'SIGNER_REQUIRED', message: 'is public; this role needs a ref that can sign' }]);
+    }
+    const problems = [];
+    if (constraints.interactive === 'forbid' && capabilities.interactive) {
+        problems.push({ code: 'INTERACTIVE_FORBIDDEN', message: 'needs a human to sign, which this role forbids' });
+    }
+    const missingPurposes = constraints.purposes.filter(function (purpose) {
+        return (!capabilities.purposes.includes(purpose));
+    });
+    if (missingPurposes.length > 0) {
+        problems.push({ code: 'PURPOSE_UNSUPPORTED', message: `cannot sign for ${missingPurposes.join(', ')}` });
+    }
+    const expected = expectedAlgorithm(ref);
+    const possible = capabilities.algorithms.filter(function (algorithm) {
+        if (ref.alg !== undefined && ref.alg !== algorithm) {
+            return (false);
+        }
+        if (expected !== undefined && expected !== algorithm) {
+            return (false);
+        }
+        return (constraints.algorithms.includes(algorithm));
+    });
+    if (possible.length === 0) {
+        problems.push({ code: 'ALGORITHM_UNSUPPORTED', message: `cannot be a ${constraints.algorithms.join(' or ')} key, which this role requires` });
+    }
+    if (ref.expect === undefined) {
+        if (capabilities.publicKeyFrom === 'expect') {
+            problems.push({ code: 'EXPECT_REQUIRED', message: 'cannot report its public key, so it needs #expect=keeta_...' });
+        }
+        else if (network === undefined || network === 'main') {
+            problems.push({ code: 'EXPECT_REQUIRED', message: 'has no #expect=keeta_..., which every signer on main needs' });
+        }
+    }
+    return (problems);
+}
+/**
+ * The static rules for a ref in a signerless position.
+ */
+export function checkPublicRef(ref, registry) {
+    if (ref.kind === 'address') {
+        return ([]);
+    }
+    if (registry.driver(ref.scheme)?.kind === 'signer') {
+        return ([{ code: 'SIGNER_IN_PUBLIC_POSITION', message: 'is a signer; this role takes a keeta_ address or a #format=public ref' }]);
+    }
+    if ((ref.format ?? defaultKeyFormat) !== 'public') {
+        return ([{ code: 'MATERIAL_IN_PUBLIC_POSITION', message: 'holds key material; this role takes a keeta_ address or a #format=public ref' }]);
+    }
+    return ([]);
+}
+/**
+ * After loading: whether the key is the one its ref expects. The message
+ * names the derived public key, never anything else about the key.
+ */
+export function checkExpectedAccount(account, slot) {
+    if (slot.ref.kind === 'address' || slot.ref.expect === undefined || publicKeyOf(account) === slot.ref.expect) {
+        return ([]);
+    }
+    return ([fieldIssue(slot.field, 'EXPECT_MISMATCH', `the key loaded as ${publicKeyOf(account)}, but the ref expects ${slot.ref.expect}`)]);
+}
+/**
+ * Every rule that needs only the spec and the refs, so it runs before any
+ * secret is read.
+ */
+export function analyzeKeyConfig(spec, config, registry) {
+    const issues = [];
+    const networks = new Map();
+    const slots = [];
+    const referencedVariables = new Set();
+    for (const field of fieldsOf(spec)) {
+        const text = config[field.path];
+        if (text === undefined) {
+            if (field.required) {
+                issues.push(fieldIssue(field, 'MISSING_KEY', 'not set'));
+            }
+            continue;
+        }
+        if (field.block.kind === 'network') {
+            if (isNetwork(text)) {
+                networks.set(field.path, text);
+            }
+            else {
+                issues.push(fieldIssue(field, 'INVALID_NETWORK', 'must be one of the known network names'));
+            }
+            continue;
+        }
+        const reading = readKeyRef(text, registry, field.variable, field.path);
+        issues.push(...reading.issues);
+        const ref = reading.ref;
+        if (ref === undefined) {
+            continue;
+        }
+        if (ref.kind === 'driver') {
+            for (const name of registry.driver(ref.scheme)?.readsVariables?.(ref) ?? []) {
+                referencedVariables.add(name);
+            }
+        }
+        let problems;
+        if (field.block.kind === 'signer') {
+            problems = checkSignerRef(ref, registry, field.block.constraints, networkAt(config, field.networkPath));
+        }
+        else {
+            problems = checkPublicRef(ref, registry);
+        }
+        for (const problem of problems) {
+            issues.push(fieldIssue(field, problem.code, `${formatKeyRef(ref)} ${problem.message}`));
+        }
+        slots.push({ field, ref });
+    }
+    return ({ issues, networks, slots, referencedVariables });
+}
+function networkAt(config, path) {
+    if (path === undefined) {
+        return (undefined);
+    }
+    const text = config[path];
+    if (text === undefined || !isNetwork(text)) {
+        return (undefined);
+    }
+    return (text);
+}
+/**
+ * Every variable under a declared prefix (`PREFIX_*`, or a bare actor
+ * prefix) that neither a role nor a ref reads, so that a typo fails.
+ */
+export function checkUnknownVariables(spec, env, referencedVariables) {
+    const fields = fieldsOf(spec);
+    const issues = [];
+    for (const [name, value] of Object.entries(env)) {
+        if (value === undefined || value === '' || referencedVariables.has(name)) {
+            continue;
+        }
+        const declared = fields.some(function (field) {
+            return (field.variable === name);
+        });
+        const underPrefix = fields.some(function (field) {
+            return (name === field.prefix || name.startsWith(`${field.prefix}_`));
+        });
+        if (underPrefix && !declared) {
+            issues.push(issue('UNKNOWN_VARIABLE', name, 'the variable is under a declared prefix but nothing reads it'));
+        }
+    }
+    return (issues);
+}
+//# sourceMappingURL=rules.js.map

package/dist/identity/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/identity/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA6BvC,MAAM,UAAU,UAAU,CAAC,KAAY,EAAE,IAAwB,EAAE,OAAe;IACjF,OAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,QAAwB;IAChE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,gBAAgB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,OAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACrC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxD,OAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,OAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAwB,EAAE,WAA8B,EAAE,OAA4B;IACjI,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1D,OAAM,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,WAAW,CAAC,WAAW,KAAK,QAAQ,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAS,OAAO;QACnE,OAAM,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,mBAAmB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,UAAS,SAAS;QACjE,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACpD,OAAM,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtD,OAAM,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,OAAM,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,eAAe,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,gCAAgC,EAAE,CAAC,CAAC;IAC/I,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,YAAY,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC,CAAC;QACpH,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC,CAAC;QACnH,CAAC;IACF,CAAC;IACD,OAAM,CAAC,QAAQ,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAwB;IACnE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAM,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAM,CAAC,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,gBAAgB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAM,CAAC,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,8EAA8E,EAAE,CAAC,CAAC,CAAC;IAC5I,CAAC;IACD,OAAM,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAuB,EAAE,IAAU;IACvE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9G,OAAM,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;IACD,OAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,WAAW,CAAC,OAAO,CAAC,yBAAyB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1I,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa,EAAE,MAAkB,EAAE,QAAwB;IAC3F,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,wCAAwC,CAAC,CAAC,CAAC;YAC7F,CAAC;YACD,SAAS;QACV,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7E,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QACD,IAAI,QAAmB,CAAC;QACxB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,CAAC;aAAM,CAAC;YACP,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,OAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,MAAkB,EAAE,IAAwB;IAC9D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,OAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,OAAM,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa,EAAE,GAAgB,EAAE,mBAAwC;IAC9G,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1E,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAS,KAAK;YAC1C,OAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAS,KAAK;YAC7C,OAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,IAAI,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,IAAI,EAAE,8DAA8D,CAAC,CAAC,CAAC;QAC9G,CAAC;IACF,CAAC;IACD,OAAM,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC"}

package/dist/identity/schema.d.ts

@@ -0,0 +1,131 @@
+import type { Account, GenericAccount, KeyAlgorithm, Network } from './account.js';
+import type { Purpose } from './drivers.js';
+export interface SignerConstraints {
+    readonly purposes: readonly Purpose[];
+    readonly interactive: 'forbid' | 'allow';
+    readonly algorithms: readonly KeyAlgorithm[];
+}
+export interface NetworkBlock {
+    readonly kind: 'network';
+}
+/**
+ * An account the program refers to but never signs for: a recipient, a
+ * token, a multisig address.
+ */
+export interface PublicAccountBlock {
+    readonly kind: 'publicAccount';
+}
+export interface SignerBlock {
+    readonly kind: 'signer';
+    readonly constraints: SignerConstraints;
+}
+export interface ActorOptions {
+    readonly signer: SignerBlock;
+    /**
+     * Declares `ACCOUNT`, the account the actor acts on; unset, the signer's.
+     */
+    readonly account?: PublicAccountBlock;
+    /**
+     * Declares `FEE_PAYER` and `FEE_ACCOUNT`; the block constrains the fee
+     * payer's signer. Both unset, the actor pays its own fees.
+     */
+    readonly feePayer?: SignerBlock;
+}
+/**
+ * A program identity: a signer on a network, the account it acts on and who
+ * pays its fees.
+ */
+export interface ActorBlock<Options extends ActorOptions = ActorOptions> {
+    readonly kind: 'actor';
+    readonly options: Options;
+}
+export type Block = NetworkBlock | PublicAccountBlock | SignerBlock | ActorBlock;
+export type Roles = Readonly<Record<string, Block>>;
+export interface KeySpec<R extends Roles = Roles> {
+    readonly kind: 'keySpec';
+    readonly roles: R;
+    /**
+     * Environment prefixes that replace the ones derived from role names.
+     */
+    readonly prefixes: Readonly<Record<string, string>>;
+}
+export interface SignerOptions {
+    readonly purposes?: readonly Purpose[];
+    readonly interactive?: 'forbid' | 'allow';
+    readonly algorithms?: readonly KeyAlgorithm[];
+}
+export declare function network(): NetworkBlock;
+export declare function publicAccount(): PublicAccountBlock;
+/**
+ * By default a signer signs blocks, must not need a human, and may use any
+ * algorithm.
+ */
+export declare function signer(options?: SignerOptions): SignerBlock;
+export declare function actor<const Options extends ActorOptions>(options: Options): ActorBlock<Options>;
+export interface DefineKeysOptions<R extends Roles> {
+    readonly prefixes?: {
+        readonly [K in keyof R]?: string;
+    };
+}
+/**
+ * Declares what a program needs. Throws on a malformed role name or prefix,
+ * a prefix for no role, or two roles that would read the same variable.
+ */
+export declare function defineKeys<const R extends Roles>(roles: R, options?: DefineKeysOptions<R>): KeySpec<R>;
+/**
+ * One value a spec reads: a role's own, or one field of an actor.
+ */
+export interface Field {
+    readonly role: string;
+    /**
+     * `anchor.signer`, or the role name for a role that is a single value.
+     */
+    readonly path: string;
+    readonly prefix: string;
+    readonly variable: string;
+    readonly block: NetworkBlock | PublicAccountBlock | SignerBlock;
+    readonly required: boolean;
+    /**
+     * The path of the network a signer is on: its actor's, or the spec's only
+     * top-level network role. Undefined when there is none, which counts as
+     * `main`.
+     */
+    readonly networkPath: string | undefined;
+}
+export declare function fieldsOf(spec: KeySpec): Field[];
+/**
+ * `feeRecipients` to `FEE_RECIPIENTS`, keeping abbreviations whole:
+ * `accountID` to `ACCOUNT_ID`, `baseURLPath` to `BASE_URL_PATH`.
+ */
+export declare function screamingSnakeCase(name: string): string;
+/**
+ * Who pays an actor's fees: `signer` signs the fee block and `account` pays.
+ * A fee payer signer alone pays from its own account; a fee account alone is
+ * paid from by the actor's signer.
+ */
+export interface FeePayer {
+    readonly signer: Account;
+    readonly account: GenericAccount;
+}
+type LoadedFeePayer<O extends ActorOptions> = 'feePayer' extends keyof O ? {
+    readonly feePayer: FeePayer | undefined;
+} : Record<never, never>;
+export type LoadedActor<O extends ActorOptions> = {
+    readonly signer: Account;
+    readonly account: GenericAccount;
+    readonly network: Network;
+} & LoadedFeePayer<O>;
+export type LoadedBlock<B extends Block> = B extends NetworkBlock ? Network : B extends PublicAccountBlock ? GenericAccount : B extends SignerBlock ? Account : B extends ActorBlock<infer O> ? LoadedActor<O> : never;
+/**
+ * What `loadKeys` returns for a spec.
+ */
+export type Loaded<S extends KeySpec> = S extends KeySpec<infer R> ? {
+    readonly [K in keyof R]: LoadedBlock<R[K]>;
+} : never;
+/**
+ * A configuration as text, keyed by field path (`anchor.signer`,
+ * `treasury`). Unset values are absent.
+ */
+export type ConfigText = Readonly<Record<string, string>>;
+export {};
+//# sourceMappingURL=schema.d.ts.map

package/dist/identity/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/identity/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEnF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAI5C,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,SAAS,YAAY,GAAG,YAAY;IACtE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,KAAK,GAAG,YAAY,GAAG,kBAAkB,GAAG,WAAW,GAAG,UAAU,CAAC;AACjF,MAAM,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpD,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,KAAK,GAAG,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CAC9C;AAED,wBAAgB,OAAO,IAAI,YAAY,CAEtC;AAED,wBAAgB,aAAa,IAAI,kBAAkB,CAElD;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,WAAW,CAS/D;AAED,wBAAgB,KAAK,CAAC,KAAK,CAAC,OAAO,SAAS,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAE/F;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,KAAK;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM;KAAE,CAAC;CACzD;AAKD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,iBAAiB,CAAC,CAAC,CAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CA4B1G;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,kBAAkB,GAAG,WAAW,CAAC;IAChE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,EAAE,CA+B/C;AAUD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CACjC;AAED,KAAK,cAAc,CAAC,CAAC,SAAS,YAAY,IAAI,UAAU,SAAS,MAAM,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE9I,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,YAAY,IAAI;IACjD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC1B,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;AAEtB,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,KAAK,IACtC,CAAC,SAAS,YAAY,GAAG,OAAO,GAC7B,CAAC,SAAS,kBAAkB,GAAG,cAAc,GAC5C,CAAC,SAAS,WAAW,GAAG,OAAO,GAC9B,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAC7C,KAAK,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,MAAM,CAAC,CAAC,SAAS,OAAO,IAAI,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG;IAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,KAAK,CAAC;AAE5H;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC"}

package/dist/identity/schema.js

@@ -0,0 +1,117 @@
+import { keyAlgorithms } from './account.js';
+import { issue, KeyConfigError } from './error.js';
+export function network() {
+    return ({ kind: 'network' });
+}
+export function publicAccount() {
+    return ({ kind: 'publicAccount' });
+}
+/**
+ * By default a signer signs blocks, must not need a human, and may use any
+ * algorithm.
+ */
+export function signer(options = {}) {
+    return ({
+        kind: 'signer',
+        constraints: {
+            purposes: options.purposes ?? ['block'],
+            interactive: options.interactive ?? 'forbid',
+            algorithms: options.algorithms ?? keyAlgorithms
+        }
+    });
+}
+export function actor(options) {
+    return ({ kind: 'actor', options });
+}
+const roleNamePattern = /^[a-z][a-zA-Z0-9]*$/;
+const prefixPattern = /^[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$/;
+/**
+ * Declares what a program needs. Throws on a malformed role name or prefix,
+ * a prefix for no role, or two roles that would read the same variable.
+ */
+export function defineKeys(roles, options = {}) {
+    const prefixes = {};
+    const issues = [];
+    for (const [role, prefix] of Object.entries(options.prefixes ?? {})) {
+        if (!Object.hasOwn(roles, role)) {
+            issues.push(issue('INVALID_SCHEMA', role, 'a prefix is given for a role that is not declared'));
+        }
+        else if (prefix !== undefined) {
+            prefixes[role] = prefix;
+        }
+    }
+    for (const role of Object.keys(roles)) {
+        if (!roleNamePattern.test(role)) {
+            issues.push(issue('INVALID_SCHEMA', role, 'a role name must be camelCase, [a-z][a-zA-Z0-9]*'));
+        }
+        else if (!prefixPattern.test(prefixes[role] ?? screamingSnakeCase(role))) {
+            issues.push(issue('INVALID_SCHEMA', role, 'a prefix must be SCREAMING_SNAKE_CASE, [A-Z][A-Z0-9]*(_[A-Z0-9]+)*'));
+        }
+    }
+    const spec = { kind: 'keySpec', roles, prefixes };
+    const owners = new Map();
+    for (const field of fieldsOf(spec)) {
+        const owner = owners.get(field.variable);
+        if (owner !== undefined && owner !== field.role) {
+            issues.push(issue('INVALID_SCHEMA', field.role, `the role reads ${field.variable}, which the role ${owner} reads too`));
+        }
+        owners.set(field.variable, field.role);
+    }
+    KeyConfigError.throwIfAny(issues);
+    return (spec);
+}
+export function fieldsOf(spec) {
+    const networkRoles = Object.keys(spec.roles).filter(function (role) {
+        return (spec.roles[role]?.kind === 'network');
+    });
+    let schemaNetwork;
+    if (networkRoles.length === 1) {
+        schemaNetwork = networkRoles[0];
+    }
+    const fields = [];
+    for (const [role, block] of Object.entries(spec.roles)) {
+        const prefix = spec.prefixes[role] ?? screamingSnakeCase(role);
+        if (block.kind !== 'actor') {
+            fields.push({ role, path: role, prefix, variable: prefix, block, required: true, networkPath: schemaNetwork });
+            continue;
+        }
+        const networkPath = `${role}.network`;
+        function add(name, fieldBlock, required) {
+            fields.push({ role, path: `${role}.${name}`, prefix, variable: `${prefix}_${screamingSnakeCase(name)}`, block: fieldBlock, required, networkPath });
+        }
+        add('network', { kind: 'network' }, true);
+        add('signer', block.options.signer, true);
+        if (block.options.account !== undefined) {
+            add('account', block.options.account, false);
+        }
+        if (block.options.feePayer !== undefined) {
+            add('feePayer', block.options.feePayer, false);
+            add('feeAccount', { kind: 'publicAccount' }, false);
+        }
+    }
+    return (fields);
+}
+function isUpper(character) {
+    return (character !== character.toLowerCase());
+}
+function isLower(character) {
+    return (character !== character.toUpperCase());
+}
+/**
+ * `feeRecipients` to `FEE_RECIPIENTS`, keeping abbreviations whole:
+ * `accountID` to `ACCOUNT_ID`, `baseURLPath` to `BASE_URL_PATH`.
+ */
+export function screamingSnakeCase(name) {
+    let result = '';
+    const characters = [...name];
+    for (const [position, character] of characters.entries()) {
+        const previous = characters[position - 1];
+        const next = characters[position + 1] ?? '';
+        if (previous !== undefined && isUpper(character) && (!isUpper(previous) || isLower(next))) {
+            result += '_';
+        }
+        result += character.toUpperCase();
+    }
+    return (result);
+}
+//# sourceMappingURL=schema.js.map

package/dist/identity/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/identity/schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAkEnD,MAAM,UAAU,OAAO;IACtB,OAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,OAAO,GAAkB,EAAE;IACjD,OAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC;YACvC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,aAAa;SAC/C;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,KAAK,CAAqC,OAAgB;IACzE,OAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACpC,CAAC;AAMD,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C,MAAM,aAAa,GAAG,+BAA+B,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAwB,KAAQ,EAAE,OAAO,GAAyB,EAAE;IAC7F,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,mDAAmD,CAAC,CAAC,CAAC;QACjG,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QACzB,CAAC;IACF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,kDAAkD,CAAC,CAAC,CAAC;QAChG,CAAC;aAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,oEAAoE,CAAC,CAAC,CAAC;QAClH,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAe,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,EAAE,kBAAkB,KAAK,CAAC,QAAQ,oBAAoB,KAAK,YAAY,CAAC,CAAC,CAAC;QACzH,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,OAAM,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAuBD,MAAM,UAAU,QAAQ,CAAC,IAAa;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAS,IAAI;QAChE,OAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,IAAI,aAAiC,CAAC;IACtC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/G,SAAS;QACV,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,IAAI,UAAU,CAAC;QACtC,SAAS,GAAG,CAAC,IAAY,EAAE,UAA0B,EAAE,QAAiB;YACvE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACrJ,CAAC;QACD,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1C,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1C,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/C,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;IACF,CAAC;IACD,OAAM,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB;IACjC,OAAM,CAAC,SAAS,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB;IACjC,OAAM,CAAC,SAAS,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,GAAG,CAAC;QACf,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IACD,OAAM,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './identity/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export * from './identity/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/package.json

@@ -1,6 +1,47 @@
 {
-  "name": "@xescure/keeta-utils",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+	"name": "@xescure/keeta-utils",
+	"version": "0.1.0",
+	"description": "How a Keeta program gets its keys",
+	"license": "MPL-2.0",
+	"publishConfig": {
+		"access": "public"
+	},
+	"type": "module",
+	"sideEffects": false,
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/xescure/keeta-utils.git"
+	},
+	"files": [
+		"dist",
+		"!dist/**/*.test.*",
+		"!dist/.done"
+	],
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"default": "./dist/index.js"
+		},
+		"./identity": {
+			"types": "./dist/identity/index.d.ts",
+			"default": "./dist/identity/index.js"
+		}
+	},
+	"scripts": {
+		"tsc": "tsc",
+		"vitest": "vitest"
+	},
+	"peerDependencies": {
+		"@keetanetwork/keetanet-client": ">=0.18.7 <0.19"
+	},
+	"devDependencies": {
+		"@keetanetwork/keetanet-client": "0.18.7",
+		"@types/node": "24.19.2",
+		"typescript": "7.0.2",
+		"vite": "8.3.5",
+		"vitest": "5.0.5"
+	},
+	"engines": {
+		"node": ">=24"
+	}
+}