@zanii/witness 0.1.2 → 0.1.3

package/README.md

@@ -39,6 +39,7 @@ co-signing the root binds the witness to that exact history.
 
 ## Changelog
 
+- **0.1.3** — k-of-n quorum policy, checkpoints as Ed25519 signed notes, equivocation evidence, regulator-scoped witnesses, batch co-signing across logs, time-token binding, uptime, lag dashboard, directory health checks.
 - **0.1.2** — now depends on `@zanii/core` 0.5 (protocol 1.2), so it shares one core with `@zanii/sdk` 0.5 instead of pulling in a second, older copy. No API change.
 - **0.1.0** — initial release: `createWitness`, `verifyCosignature`, `WitnessCosignature`.
 

package/dist/index.d.ts

@@ -27,4 +27,5 @@ export declare function createWitness(keypair: {
  * Both signatures must be valid and both must commit to the same `(size, root)`.
  */
 export declare function verifyCosignature(c: WitnessCosignature, origin: SignedTreeHead): boolean;
+export * from './network.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAI3F,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,kBAAkB,CAAC;CAC5F;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAAG,OAAO,CA+BvF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CASxF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAI3F,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,kBAAkB,CAAC;CAC5F;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAAG,OAAO,CA+BvF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CASxF;AACD,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -57,4 +57,5 @@ export function verifyCosignature(c, origin) {
         c.cosignature.size === origin.size &&
         c.cosignature.root === origin.root);
 }
+export * from './network.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAE3F,MAAM,MAAM,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AAoB/E,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,OAAgD;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE/D,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAEhG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,uBAAuB,CAAC,CAAC;gBACzG,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;gBAC5H,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;oBACpC,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,gCAAgC,CAAC,CAAC;oBAChI,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9H,IAAI,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,6BAA6B,CAAC,CAAC;gBAC5H,CAAC;YACH,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,WAAW,GAAG,SAAS,CAC3B,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAC3E,OAAO,CAAC,UAAU,CACnB,CAAC;YACF,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAqB,EAAE,MAAsB;IAC7E,OAAO,CACL,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,gBAAgB;QACpC,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACxB,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAClC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAE3F,MAAM,MAAM,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AAoB/E,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,OAAgD;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE/D,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAEhG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,uBAAuB,CAAC,CAAC;gBACzG,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;gBAC5H,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;oBACpC,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,gCAAgC,CAAC,CAAC;oBAChI,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9H,IAAI,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,6BAA6B,CAAC,CAAC;gBAC5H,CAAC;YACH,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,WAAW,GAAG,SAAS,CAC3B,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAC3E,OAAO,CAAC,UAAU,CACnB,CAAC;YACF,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAqB,EAAE,MAAsB;IAC7E,OAAO,CACL,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,gBAAgB;QACpC,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACxB,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAClC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CACnC,CAAC;AACJ,CAAC;AACD,cAAc,cAAc,CAAC"}

package/dist/network.d.ts

@@ -0,0 +1,128 @@
+import { type SignedTreeHead } from '@zanii/core';
+import { type Witness, type WitnessCosignature } from './index.js';
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/** A verifier's rule: accept a tree head only when at least `k` of these witnesses co-signed it. */
+export declare function verifyQuorum(origin: SignedTreeHead, cosigs: WitnessCosignature[], policy: {
+    trusted: string[];
+    k: number;
+}): {
+    ok: boolean;
+    witnesses: string[];
+    needed: number;
+};
+/** The checkpoint body: origin line, tree size, base64 root hash, each ending in a newline. */
+export declare function checkpointBody(sth: SignedTreeHead, origin: string): string;
+/** Key ID for an Ed25519 note key: the first 4 bytes of SHA-256(name, newline, 0x01, public key). */
+export declare function noteKeyId(name: string, publicKey: Uint8Array): Buffer;
+/** A signature line for a note: `— <name> <base64(key id || signature)>`. */
+export declare function signNote(body: string, name: string, privateKey: Uint8Array): string;
+/** The whole signed checkpoint: body, a blank line, then one signature line per signer. */
+export declare function signedCheckpoint(sth: SignedTreeHead, origin: string, signers: Array<{
+    name: string;
+    privateKey: Uint8Array;
+}>): string;
+/** Names whose signature lines verify against the keys you trust. */
+export declare function verifyCheckpoint(note: string, keys: Array<{
+    name: string;
+    publicKey: Uint8Array;
+}>): {
+    body: null;
+    signers: string[];
+} | {
+    body: string;
+    signers: string[];
+};
+/**
+ * Evidence that a witness signed two different roots at the same size for the same log:
+ * the basis for slashing a bonded witness. Returns null when the two do not conflict.
+ */
+export declare function equivocationEvidence(a: WitnessCosignature, b: WitnessCosignature): {
+    type: string;
+    witness: string;
+    log: string;
+    size: number;
+    roots: string[];
+    evidence: WitnessCosignature[];
+} | null;
+/** A witness that only co-signs the logs it supervises, and keeps every co-signature it issued. */
+export declare function regulatorWitness(keypair: {
+    did: string;
+    privateKey: Uint8Array;
+}, supervisedLogs: string[]): {
+    did: string;
+    cosign(origin: SignedTreeHead, opts?: {
+        consistencyProof?: string[];
+    }): WitnessCosignature;
+    issued: () => WitnessCosignature[];
+};
+/** Co-sign checkpoints from several logs in one pass; failures are reported per item, never thrown. */
+export declare function cosignMany(witness: Witness, items: Array<{
+    origin: SignedTreeHead;
+    consistencyProof?: string[];
+}>): ({
+    log: string;
+    ok: true;
+    cosignature: WitnessCosignature;
+    error?: undefined;
+} | {
+    log: string;
+    ok: false;
+    error: string;
+    cosignature?: undefined;
+})[];
+/**
+ * Bind a co-signature to an external time token (RFC 3161 TSA or Roughtime response, by hash):
+ * the trust root for "seen by time T" is that time source.
+ */
+export declare function timeBoundCosignature(c: WitnessCosignature, token: {
+    source: string;
+    ts: string;
+    tokenHash: string;
+}): {
+    time: {
+        source: string;
+        ts: string;
+        tokenHash: string;
+    };
+    v: 1;
+    witnessed_log_id: string;
+    cosignature: SignedTreeHead;
+};
+/** Uptime from co-signature times: share of expected slots covered and the longest silence. */
+export declare function witnessUptime(times: string[], opts: {
+    from: string;
+    to: string;
+    everyMs: number;
+}): {
+    slots: number;
+    covered: number;
+    uptimePermille: number;
+    maxGapMs: number;
+};
+/** For each log, the newest size each witness co-signed and how far it lags the newest co-signed size. */
+export declare function witnessDashboard(cosigs: WitnessCosignature[]): {
+    log: string;
+    head: number;
+    witnesses: {
+        witness: string;
+        size: number;
+        lag: number;
+    }[];
+}[];
+/** Health of listed witnesses: GET `<url>/health` with a timeout; latency in ms when up. */
+export declare function witnessHealth(directory: Array<{
+    did: string;
+    url: string;
+    operator?: string;
+}>, opts?: {
+    fetchImpl?: FetchLike;
+    timeoutMs?: number;
+}): Promise<{
+    up: boolean;
+    latencyMs: number | null;
+    did: string;
+    url: string;
+    operator?: string;
+}[]>;
+export {};
+//# sourceMappingURL=network.d.ts.map

package/dist/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AASA,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAoC,KAAK,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErG,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAM1E,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;;;;EAG1H;AAMD,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG1E;AAED,qGAAqG;AACrG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,MAAM,CAErE;AAED,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAGnF;AAED,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC,GAAG,MAAM,CAGtI;AAED,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC;;aAE9C,MAAM,EAAE;;;;EAe5D;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,kBAAkB;;;;;;;SAGhF;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EAAE,cAAc,EAAE,MAAM,EAAE;;mBAKxF,cAAc,SAAS;QAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;;EAQxE;AAED,uGAAuG;AACvG,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;;;;;;;;;;KAQjH;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;;gBAAvC,MAAM;YAAM,MAAM;mBAAa,MAAM;;;;;EAGjH;AAMD,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;;;;;EAQjG;AAED,0GAA0G;AAC1G,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,EAAE;;;;;;;;IAW5D;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO;;;SAAnG,MAAM;SAAO,MAAM;eAAa,MAAM;KAWjG"}

package/dist/network.js

@@ -0,0 +1,153 @@
+/**
+ * Witnesses as a network: quorum policies for verifiers, checkpoints as signed notes
+ * (the text format transparency-log tooling uses), equivocation evidence for slashing,
+ * scoped regulator witnesses, batch co-signing across logs, time tokens, uptime and a
+ * dashboard, and a directory with health checks.
+ */
+import { createHash } from 'node:crypto';
+import { ed25519 } from '@noble/curves/ed25519';
+import { hexToBytes } from '@noble/hashes/utils';
+import { verifySTH } from '@zanii/core';
+import { createWitness, verifyCosignature } from './index.js';
+// ------------------------------------------------------------------------------ //
+// Verifier policy
+// ------------------------------------------------------------------------------ //
+/** A verifier's rule: accept a tree head only when at least `k` of these witnesses co-signed it. */
+export function verifyQuorum(origin, cosigs, policy) {
+    const by = new Set(cosigs.filter((c) => policy.trusted.includes(c.cosignature.log_id) && verifyCosignature(c, origin)).map((c) => c.cosignature.log_id));
+    return { ok: by.size >= policy.k, witnesses: [...by].sort(), needed: policy.k };
+}
+// ------------------------------------------------------------------------------ //
+// Signed-note checkpoints
+// ------------------------------------------------------------------------------ //
+/** The checkpoint body: origin line, tree size, base64 root hash, each ending in a newline. */
+export function checkpointBody(sth, origin) {
+    if (!origin || /\n/.test(origin))
+        throw new Error('witness: origin must be one non-empty line');
+    return `${origin}\n${sth.size}\n${Buffer.from(hexToBytes(sth.root.replace('sha256:', ''))).toString('base64')}\n`;
+}
+/** Key ID for an Ed25519 note key: the first 4 bytes of SHA-256(name, newline, 0x01, public key). */
+export function noteKeyId(name, publicKey) {
+    return createHash('sha256').update(Buffer.concat([Buffer.from(`${name}\n`), Buffer.from([0x01]), Buffer.from(publicKey)])).digest().subarray(0, 4);
+}
+/** A signature line for a note: `— <name> <base64(key id || signature)>`. */
+export function signNote(body, name, privateKey) {
+    const sig = ed25519.sign(new Uint8Array(Buffer.from(body)), privateKey);
+    return `— ${name} ${Buffer.concat([noteKeyId(name, ed25519.getPublicKey(privateKey)), Buffer.from(sig)]).toString('base64')}\n`;
+}
+/** The whole signed checkpoint: body, a blank line, then one signature line per signer. */
+export function signedCheckpoint(sth, origin, signers) {
+    const body = checkpointBody(sth, origin);
+    return `${body}\n${signers.map((s) => signNote(body, s.name, s.privateKey)).join('')}`;
+}
+/** Names whose signature lines verify against the keys you trust. */
+export function verifyCheckpoint(note, keys) {
+    const split = note.indexOf('\n\n');
+    if (split < 0)
+        return { body: null, signers: [] };
+    const body = note.slice(0, split + 1);
+    const signers = new Set();
+    for (const l of note.slice(split + 2).split('\n').filter(Boolean)) {
+        const m = /^— (\S+) (\S+)$/.exec(l);
+        if (!m)
+            continue;
+        const raw = Buffer.from(m[2], 'base64');
+        const k = keys.find((x) => x.name === m[1] && noteKeyId(x.name, x.publicKey).equals(raw.subarray(0, 4)));
+        try {
+            if (k && raw.length === 68 && ed25519.verify(new Uint8Array(raw.subarray(4)), new Uint8Array(Buffer.from(body)), k.publicKey))
+                signers.add(k.name);
+        }
+        catch {
+            // a malformed line is simply not counted
+        }
+    }
+    return { body, signers: [...signers].sort() };
+}
+// ------------------------------------------------------------------------------ //
+// Accountability
+// ------------------------------------------------------------------------------ //
+/**
+ * Evidence that a witness signed two different roots at the same size for the same log:
+ * the basis for slashing a bonded witness. Returns null when the two do not conflict.
+ */
+export function equivocationEvidence(a, b) {
+    const conflict = a.cosignature.log_id === b.cosignature.log_id && a.witnessed_log_id === b.witnessed_log_id && a.cosignature.size === b.cosignature.size && a.cosignature.root !== b.cosignature.root && verifySTH(a.cosignature) && verifySTH(b.cosignature);
+    return conflict ? { type: 'witness.equivocation', witness: a.cosignature.log_id, log: a.witnessed_log_id, size: a.cosignature.size, roots: [a.cosignature.root, b.cosignature.root].sort(), evidence: [a, b] } : null;
+}
+/** A witness that only co-signs the logs it supervises, and keeps every co-signature it issued. */
+export function regulatorWitness(keypair, supervisedLogs) {
+    const inner = createWitness(keypair);
+    const issued = [];
+    return {
+        did: inner.did,
+        cosign(origin, opts) {
+            if (!supervisedLogs.includes(origin.log_id))
+                throw new Error(`witness: ${origin.log_id} is not a supervised log`);
+            const c = inner.cosign(origin, opts);
+            issued.push(c);
+            return c;
+        },
+        issued: () => [...issued],
+    };
+}
+/** Co-sign checkpoints from several logs in one pass; failures are reported per item, never thrown. */
+export function cosignMany(witness, items) {
+    return items.map((i) => {
+        try {
+            return { log: i.origin.log_id, ok: true, cosignature: witness.cosign(i.origin, { consistencyProof: i.consistencyProof }) };
+        }
+        catch (err) {
+            return { log: i.origin.log_id, ok: false, error: err.message };
+        }
+    });
+}
+/**
+ * Bind a co-signature to an external time token (RFC 3161 TSA or Roughtime response, by hash):
+ * the trust root for "seen by time T" is that time source.
+ */
+export function timeBoundCosignature(c, token) {
+    if (token.ts < c.cosignature.ts)
+        throw new Error('witness: the time token predates the checkpoint');
+    return { ...c, time: token };
+}
+// ------------------------------------------------------------------------------ //
+// Operations
+// ------------------------------------------------------------------------------ //
+/** Uptime from co-signature times: share of expected slots covered and the longest silence. */
+export function witnessUptime(times, opts) {
+    const from = Date.parse(opts.from);
+    const to = Date.parse(opts.to);
+    const slots = Math.max(1, Math.ceil((to - from) / opts.everyMs));
+    const covered = new Set(times.map((t) => Math.floor((Date.parse(t) - from) / opts.everyMs)).filter((i) => i >= 0 && i < slots));
+    const sorted = [from, ...times.map(Date.parse).filter((t) => t >= from && t <= to).sort((a, b) => a - b), to];
+    const maxGapMs = Math.max(...sorted.slice(1).map((t, i) => t - sorted[i]));
+    return { slots, covered: covered.size, uptimePermille: Math.round((covered.size / slots) * 1000), maxGapMs };
+}
+/** For each log, the newest size each witness co-signed and how far it lags the newest co-signed size. */
+export function witnessDashboard(cosigs) {
+    const logs = new Map();
+    for (const c of cosigs) {
+        const m = logs.get(c.witnessed_log_id) ?? new Map();
+        m.set(c.cosignature.log_id, Math.max(m.get(c.cosignature.log_id) ?? 0, c.cosignature.size));
+        logs.set(c.witnessed_log_id, m);
+    }
+    return [...logs].map(([log, m]) => {
+        const head = Math.max(...m.values());
+        return { log, head, witnesses: [...m].map(([w, size]) => ({ witness: w, size, lag: head - size })).sort((a, b) => a.lag - b.lag) };
+    });
+}
+/** Health of listed witnesses: GET `<url>/health` with a timeout; latency in ms when up. */
+export async function witnessHealth(directory, opts = {}) {
+    const f = opts.fetchImpl ?? ((u, i) => fetch(u, i));
+    return Promise.all(directory.map(async (w) => {
+        const t = performance.now();
+        try {
+            const res = await f(`${w.url.replace(/\/$/, '')}/health`, { signal: AbortSignal.timeout(opts.timeoutMs ?? 5000) });
+            return { ...w, up: res.ok, latencyMs: res.ok ? Math.round(performance.now() - t) : null };
+        }
+        catch {
+            return { ...w, up: false, latencyMs: null };
+        }
+    }));
+}
+//# sourceMappingURL=network.js.map

package/dist/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAyC,MAAM,YAAY,CAAC;AAIrG,oFAAoF;AACpF,kBAAkB;AAClB,oFAAoF;AAEpF,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,MAAsB,EAAE,MAA4B,EAAE,MAAwC;IACzH,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACzJ,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,oFAAoF;AACpF,0BAA0B;AAC1B,oFAAoF;AAEpF,+FAA+F;AAC/F,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,MAAc;IAChE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChG,OAAO,GAAG,MAAM,KAAK,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;AACpH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,SAAqB;IAC3D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,UAAsB;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;AAClI,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAwD;IAC5H,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,GAAG,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAoD;IACjG,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAc,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrJ,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,oFAAoF;AACpF,iBAAiB;AACjB,oFAAoF;AAEpF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAqB,EAAE,CAAqB;IAC/E,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC9P,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxN,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,OAAgD,EAAE,cAAwB;IACzG,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,CAAC,MAAsB,EAAE,IAAsC;YACnE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,MAAM,0BAA0B,CAAC,CAAC;YAClH,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,UAAU,CAAC,OAAgB,EAAE,KAAqE;IAChH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,IAAa,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACtI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAqB,EAAE,KAAwD;IAClH,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpG,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,oFAAoF;AACpF,aAAa;AACb,oFAAoF;AAEpF,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,KAAe,EAAE,IAAmD;IAChG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC/G,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,gBAAgB,CAAC,MAA4B;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA+B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;QACpE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrI,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiE,EAAE,OAAsD,EAAE;IAC7J,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,CAAe,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YACnH,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/witness",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "An independent co-signer for a Zanii transparency log. Verifies a checkpoint is append-only, then counter-signs it so others can trust that tree state without running their own monitor.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -29,12 +29,13 @@
     "@types/node": "^26.1.0",
     "typescript": "^5.8.2",
     "vitest": "^3.0.9",
-    "@zanii/sdk": "0.5.2",
-    "@zanii/testing": "0.1.2"
+    "@zanii/sdk": "0.5.3",
+    "@zanii/testing": "0.1.3"
   },
   "dependencies": {
     "@noble/hashes": "^1.7.1",
-    "@zanii/core": "^0.5.2"
+    "@noble/curves": "^1.8.1",
+    "@zanii/core": "^0.5.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/index.ts

@@ -81,3 +81,4 @@ export function verifyCosignature(c: WitnessCosignature, origin: SignedTreeHead)
     c.cosignature.root === origin.root
   );
 }
+export * from './network.js';

package/src/network.ts

@@ -0,0 +1,162 @@
+/**
+ * Witnesses as a network: quorum policies for verifiers, checkpoints as signed notes
+ * (the text format transparency-log tooling uses), equivocation evidence for slashing,
+ * scoped regulator witnesses, batch co-signing across logs, time tokens, uptime and a
+ * dashboard, and a directory with health checks.
+ */
+import { createHash } from 'node:crypto';
+import { ed25519 } from '@noble/curves/ed25519';
+import { hexToBytes } from '@noble/hashes/utils';
+import { verifySTH, type SignedTreeHead } from '@zanii/core';
+import { createWitness, verifyCosignature, type Witness, type WitnessCosignature } from './index.js';
+
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+
+// ------------------------------------------------------------------------------ //
+// Verifier policy
+// ------------------------------------------------------------------------------ //
+
+/** A verifier's rule: accept a tree head only when at least `k` of these witnesses co-signed it. */
+export function verifyQuorum(origin: SignedTreeHead, cosigs: WitnessCosignature[], policy: { trusted: string[]; k: number }) {
+  const by = new Set(cosigs.filter((c) => policy.trusted.includes(c.cosignature.log_id) && verifyCosignature(c, origin)).map((c) => c.cosignature.log_id));
+  return { ok: by.size >= policy.k, witnesses: [...by].sort(), needed: policy.k };
+}
+
+// ------------------------------------------------------------------------------ //
+// Signed-note checkpoints
+// ------------------------------------------------------------------------------ //
+
+/** The checkpoint body: origin line, tree size, base64 root hash, each ending in a newline. */
+export function checkpointBody(sth: SignedTreeHead, origin: string): string {
+  if (!origin || /\n/.test(origin)) throw new Error('witness: origin must be one non-empty line');
+  return `${origin}\n${sth.size}\n${Buffer.from(hexToBytes(sth.root.replace('sha256:', ''))).toString('base64')}\n`;
+}
+
+/** Key ID for an Ed25519 note key: the first 4 bytes of SHA-256(name, newline, 0x01, public key). */
+export function noteKeyId(name: string, publicKey: Uint8Array): Buffer {
+  return createHash('sha256').update(Buffer.concat([Buffer.from(`${name}\n`), Buffer.from([0x01]), Buffer.from(publicKey)])).digest().subarray(0, 4);
+}
+
+/** A signature line for a note: `— <name> <base64(key id || signature)>`. */
+export function signNote(body: string, name: string, privateKey: Uint8Array): string {
+  const sig = ed25519.sign(new Uint8Array(Buffer.from(body)), privateKey);
+  return `— ${name} ${Buffer.concat([noteKeyId(name, ed25519.getPublicKey(privateKey)), Buffer.from(sig)]).toString('base64')}\n`;
+}
+
+/** The whole signed checkpoint: body, a blank line, then one signature line per signer. */
+export function signedCheckpoint(sth: SignedTreeHead, origin: string, signers: Array<{ name: string; privateKey: Uint8Array }>): string {
+  const body = checkpointBody(sth, origin);
+  return `${body}\n${signers.map((s) => signNote(body, s.name, s.privateKey)).join('')}`;
+}
+
+/** Names whose signature lines verify against the keys you trust. */
+export function verifyCheckpoint(note: string, keys: Array<{ name: string; publicKey: Uint8Array }>) {
+  const split = note.indexOf('\n\n');
+  if (split < 0) return { body: null, signers: [] as string[] };
+  const body = note.slice(0, split + 1);
+  const signers = new Set<string>();
+  for (const l of note.slice(split + 2).split('\n').filter(Boolean)) {
+    const m = /^— (\S+) (\S+)$/.exec(l);
+    if (!m) continue;
+    const raw = Buffer.from(m[2]!, 'base64');
+    const k = keys.find((x) => x.name === m[1] && noteKeyId(x.name, x.publicKey).equals(raw.subarray(0, 4)));
+    try {
+      if (k && raw.length === 68 && ed25519.verify(new Uint8Array(raw.subarray(4)), new Uint8Array(Buffer.from(body)), k.publicKey)) signers.add(k.name);
+    } catch {
+      // a malformed line is simply not counted
+    }
+  }
+  return { body, signers: [...signers].sort() };
+}
+
+// ------------------------------------------------------------------------------ //
+// Accountability
+// ------------------------------------------------------------------------------ //
+
+/**
+ * Evidence that a witness signed two different roots at the same size for the same log:
+ * the basis for slashing a bonded witness. Returns null when the two do not conflict.
+ */
+export function equivocationEvidence(a: WitnessCosignature, b: WitnessCosignature) {
+  const conflict = a.cosignature.log_id === b.cosignature.log_id && a.witnessed_log_id === b.witnessed_log_id && a.cosignature.size === b.cosignature.size && a.cosignature.root !== b.cosignature.root && verifySTH(a.cosignature) && verifySTH(b.cosignature);
+  return conflict ? { type: 'witness.equivocation', witness: a.cosignature.log_id, log: a.witnessed_log_id, size: a.cosignature.size, roots: [a.cosignature.root, b.cosignature.root].sort(), evidence: [a, b] } : null;
+}
+
+/** A witness that only co-signs the logs it supervises, and keeps every co-signature it issued. */
+export function regulatorWitness(keypair: { did: string; privateKey: Uint8Array }, supervisedLogs: string[]) {
+  const inner = createWitness(keypair);
+  const issued: WitnessCosignature[] = [];
+  return {
+    did: inner.did,
+    cosign(origin: SignedTreeHead, opts?: { consistencyProof?: string[] }) {
+      if (!supervisedLogs.includes(origin.log_id)) throw new Error(`witness: ${origin.log_id} is not a supervised log`);
+      const c = inner.cosign(origin, opts);
+      issued.push(c);
+      return c;
+    },
+    issued: () => [...issued],
+  };
+}
+
+/** Co-sign checkpoints from several logs in one pass; failures are reported per item, never thrown. */
+export function cosignMany(witness: Witness, items: Array<{ origin: SignedTreeHead; consistencyProof?: string[] }>) {
+  return items.map((i) => {
+    try {
+      return { log: i.origin.log_id, ok: true as const, cosignature: witness.cosign(i.origin, { consistencyProof: i.consistencyProof }) };
+    } catch (err) {
+      return { log: i.origin.log_id, ok: false as const, error: (err as Error).message };
+    }
+  });
+}
+
+/**
+ * Bind a co-signature to an external time token (RFC 3161 TSA or Roughtime response, by hash):
+ * the trust root for "seen by time T" is that time source.
+ */
+export function timeBoundCosignature(c: WitnessCosignature, token: { source: string; ts: string; tokenHash: string }) {
+  if (token.ts < c.cosignature.ts) throw new Error('witness: the time token predates the checkpoint');
+  return { ...c, time: token };
+}
+
+// ------------------------------------------------------------------------------ //
+// Operations
+// ------------------------------------------------------------------------------ //
+
+/** Uptime from co-signature times: share of expected slots covered and the longest silence. */
+export function witnessUptime(times: string[], opts: { from: string; to: string; everyMs: number }) {
+  const from = Date.parse(opts.from);
+  const to = Date.parse(opts.to);
+  const slots = Math.max(1, Math.ceil((to - from) / opts.everyMs));
+  const covered = new Set(times.map((t) => Math.floor((Date.parse(t) - from) / opts.everyMs)).filter((i) => i >= 0 && i < slots));
+  const sorted = [from, ...times.map(Date.parse).filter((t) => t >= from && t <= to).sort((a, b) => a - b), to];
+  const maxGapMs = Math.max(...sorted.slice(1).map((t, i) => t - sorted[i]!));
+  return { slots, covered: covered.size, uptimePermille: Math.round((covered.size / slots) * 1000), maxGapMs };
+}
+
+/** For each log, the newest size each witness co-signed and how far it lags the newest co-signed size. */
+export function witnessDashboard(cosigs: WitnessCosignature[]) {
+  const logs = new Map<string, Map<string, number>>();
+  for (const c of cosigs) {
+    const m = logs.get(c.witnessed_log_id) ?? new Map<string, number>();
+    m.set(c.cosignature.log_id, Math.max(m.get(c.cosignature.log_id) ?? 0, c.cosignature.size));
+    logs.set(c.witnessed_log_id, m);
+  }
+  return [...logs].map(([log, m]) => {
+    const head = Math.max(...m.values());
+    return { log, head, witnesses: [...m].map(([w, size]) => ({ witness: w, size, lag: head - size })).sort((a, b) => a.lag - b.lag) };
+  });
+}
+
+/** Health of listed witnesses: GET `<url>/health` with a timeout; latency in ms when up. */
+export async function witnessHealth(directory: Array<{ did: string; url: string; operator?: string }>, opts: { fetchImpl?: FetchLike; timeoutMs?: number } = {}) {
+  const f = opts.fetchImpl ?? ((u: string, i?: RequestInit) => fetch(u, i));
+  return Promise.all(directory.map(async (w) => {
+    const t = performance.now();
+    try {
+      const res = await f(`${w.url.replace(/\/$/, '')}/health`, { signal: AbortSignal.timeout(opts.timeoutMs ?? 5000) });
+      return { ...w, up: res.ok, latencyMs: res.ok ? Math.round(performance.now() - t) : null };
+    } catch {
+      return { ...w, up: false, latencyMs: null };
+    }
+  }));
+}