anymal-protocol 1.0.57 → 1.0.60

package/dist/cli/index.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+"use strict";
+
+// src/cli/index.ts
+var import_commander = require("commander");
+
+// src/helpers/CryptoUtils.tsx
+var import_elliptic = require("elliptic");
+var ec = new import_elliptic.ec("secp256k1");
+var NETWORK_HOSTS = {
+  ["testnet" /* Testnet */]: "dev-db.petastic.com",
+  ["localnet" /* Localnet */]: "host.docker.internal:9181"
+};
+var AUTH_API_ENDPOINTS = {
+  ["testnet" /* Testnet */]: "https://dev-auth-api.petastic.com",
+  ["localnet" /* Localnet */]: "http://localhost:3005"
+};
+function loadExistingSecp256k1PrivateKey(hexKey) {
+  if (!hexKey) {
+    throw new Error("Private key hex must be provided");
+  }
+  return ec.keyFromPrivate(hexKey, "hex");
+}
+function serializePublicKeyCompressed(keyPair) {
+  return keyPair.getPublic(true, "hex");
+}
+function base64url(input) {
+  let buf;
+  if (typeof input === "string") buf = Buffer.from(input);
+  else if (input instanceof ArrayBuffer) buf = Buffer.from(input);
+  else buf = input;
+  return buf.toString("base64").replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function sha256HashNode(data) {
+  const { createHash } = require("crypto");
+  return createHash("sha256").update(data).digest();
+}
+async function hashInput(data) {
+  if (typeof window !== "undefined" && window.crypto?.subtle) {
+    const encoder = new TextEncoder();
+    const encoded = encoder.encode(data);
+    const hashBuffer = await window.crypto.subtle.digest("SHA-256", encoded);
+    return Buffer.from(hashBuffer);
+  } else {
+    return sha256HashNode(data);
+  }
+}
+async function generateJWT(sub, aud, keyPair, expiresInSeconds = 24 * 60 * 60) {
+  const iat = Math.floor(Date.now() / 1e3);
+  const exp = iat + expiresInSeconds;
+  const header = { alg: "ES256", typ: "JWT" };
+  const payload = { sub, aud, iat, exp };
+  const encodedHeader = base64url(JSON.stringify(header));
+  const encodedPayload = base64url(JSON.stringify(payload));
+  const signingInput = `${encodedHeader}.${encodedPayload}`;
+  const hash = await hashInput(signingInput);
+  const signature = keyPair.sign(hash, { canonical: true });
+  const rBuf = signature.r.toArrayLike(Buffer, "be", 32);
+  const sBuf = signature.s.toArrayLike(Buffer, "be", 32);
+  const rawSig = Buffer.concat([rBuf, sBuf]);
+  const encodedSig = base64url(rawSig);
+  return `${signingInput}.${encodedSig}`;
+}
+async function createAuthEnvelope(privateKeyHex, network = "testnet" /* Testnet */, options) {
+  const keyPair = loadExistingSecp256k1PrivateKey(privateKeyHex);
+  const publicKey = serializePublicKeyCompressed(keyPair);
+  const host = NETWORK_HOSTS[network];
+  if (!host) {
+    throw new Error(`Unsupported network: ${network}`);
+  }
+  const token = await generateJWT(publicKey, host, keyPair, options?.expiresInSeconds);
+  return { publicKey, token };
+}
+
+// src/helpers/AppHelpers.tsx
+async function createApp(privateKeyHex, name, metadataURI, ownerEmail, network = "testnet" /* Testnet */, options) {
+  const { publicKey, token } = await createAuthEnvelope(
+    privateKeyHex,
+    network,
+    options
+  );
+  const host = AUTH_API_ENDPOINTS[network];
+  if (!host) {
+    throw new Error(`Unsupported network: ${network}`);
+  }
+  const url = `${host}/create-app`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({
+      name,
+      publicKey,
+      metadataURI,
+      ownerEmail
+    })
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`Error creating app (${response.status}): ${text}`);
+  }
+  return response.json();
+}
+
+// src/cli/index.ts
+var program = new import_commander.Command();
+program.name("anymal").description("Anymal Protocol helper CLI").version("1.0.0");
+program.command("keygen").description("Generate a new secp256k1 private key (hex)").action(() => {
+  const { ec: EC2 } = require("elliptic");
+  const ec2 = new EC2("secp256k1");
+  const keyPair = ec2.genKeyPair();
+  const privateKeyHex = keyPair.getPrivate("hex");
+  console.log(privateKeyHex);
+});
+program.command("auth").description("Print publicKey and JWT for your APP_PRIV_HEX").option("-n, --network <net>", "network to target", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  const { publicKey, token } = await createAuthEnvelope(hex, net);
+  console.log("publicKey:", publicKey);
+  console.log("token:", token);
+});
+program.command("create-app").description("Register a new application on-chain").requiredOption("--name <name>", "application name").requiredOption("--email <ownerEmail>", "owner email").option("--metadata <uri>", "metadata URI", "").option("-n, --network <net>", "network", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  try {
+    const res = await createApp(hex, opts.name, opts.metadata, opts.email, net);
+    console.log(JSON.stringify(res, null, 2));
+  } catch (e) {
+    console.error("\u274C  create-app failed:", e.message);
+    process.exit(1);
+  }
+});
+program.parse();

package/dist/cli/index.mjs

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+import {
+  AUTH_API_ENDPOINTS,
+  __require,
+  createAuthEnvelope
+} from "../chunk-F72KTNHS.mjs";
+
+// src/cli/index.ts
+import { Command } from "commander";
+
+// src/helpers/AppHelpers.tsx
+async function createApp(privateKeyHex, name, metadataURI, ownerEmail, network = "testnet" /* Testnet */, options) {
+  const { publicKey, token } = await createAuthEnvelope(
+    privateKeyHex,
+    network,
+    options
+  );
+  const host = AUTH_API_ENDPOINTS[network];
+  if (!host) {
+    throw new Error(`Unsupported network: ${network}`);
+  }
+  const url = `${host}/create-app`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({
+      name,
+      publicKey,
+      metadataURI,
+      ownerEmail
+    })
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`Error creating app (${response.status}): ${text}`);
+  }
+  return response.json();
+}
+
+// src/cli/index.ts
+var program = new Command();
+program.name("anymal").description("Anymal Protocol helper CLI").version("1.0.0");
+program.command("keygen").description("Generate a new secp256k1 private key (hex)").action(() => {
+  const { ec: EC } = __require("elliptic");
+  const ec = new EC("secp256k1");
+  const keyPair = ec.genKeyPair();
+  const privateKeyHex = keyPair.getPrivate("hex");
+  console.log(privateKeyHex);
+});
+program.command("auth").description("Print publicKey and JWT for your APP_PRIV_HEX").option("-n, --network <net>", "network to target", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  const { publicKey, token } = await createAuthEnvelope(hex, net);
+  console.log("publicKey:", publicKey);
+  console.log("token:", token);
+});
+program.command("create-app").description("Register a new application on-chain").requiredOption("--name <name>", "application name").requiredOption("--email <ownerEmail>", "owner email").option("--metadata <uri>", "metadata URI", "").option("-n, --network <net>", "network", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  try {
+    const res = await createApp(hex, opts.name, opts.metadata, opts.email, net);
+    console.log(JSON.stringify(res, null, 2));
+  } catch (e) {
+    console.error("\u274C  create-app failed:", e.message);
+    process.exit(1);
+  }
+});
+program.parse();

package/dist/index.d.mts

@@ -1,4 +1,5 @@
 import { BundlerClient } from 'viem/account-abstraction';
+import { ec } from 'elliptic';
 
 declare function useVerifyAccount(): (pid: string, campaignId: string, dbAuthToken: string, bundlerClient: any, smartAccount: any, accountRewardsContractAddress: `0x${string}`) => Promise<{
     success: boolean;
@@ -82,6 +83,14 @@ declare function useUploadAnymalImage(): (imageFile: File, type: string, idToken
     type: string;
 }>;
 
+declare function fetchAnymals({ dbAuthToken, endpoint, userPid, }: {
+    dbAuthToken: string;
+    endpoint: string;
+    userPid: string;
+}): Promise<any>;
+
+declare function useFetchAnymals(): typeof fetchAnymals;
+
 declare function useProcessPartialKibblePayment(): (pid: string, nftId: string, orderId: string, dbAuthToken: string, marketplaceContract: string, smartAccount: any, bundlerClient: any, amountInTokens: string, maxTokenPayment: string, nonce: string, deadline: string, backendSignature: string) => Promise<{
     success: boolean;
     message: string;
@@ -137,6 +146,74 @@ declare function useUpdateOrgWalletAddress(): (dbAuthToken: string, docID: strin
 
 declare const generateBytes32Nonce: () => `0x${string}`;
 
+/**
+ * Supported networks
+ */
+declare enum Network {
+    Testnet = "testnet",
+    Localnet = "localnet"
+}
+/**
+ * Mapping from network to audience host
+ */
+declare const NETWORK_HOSTS: Record<Network, string>;
+/**
+ * Mapping from network to audience host
+ */
+declare const AUTH_API_ENDPOINTS: Record<Network, string>;
+/**
+ * Output of authentication envelope
+ */
+interface AuthEnvelope {
+    publicKey: string;
+    token: string;
+}
+/**
+ * Options when creating JWT
+ */
+interface JWTOptions {
+    /**
+     * Time-to-live in seconds (default: 24h)
+     */
+    expiresInSeconds?: number;
+}
+/**
+ * Load a secp256k1 private key from a hex string.
+ * @param hexKey - Hex‑encoded private key
+ */
+declare function loadExistingSecp256k1PrivateKey(hexKey: string): ec.KeyPair;
+/**
+ * Serialize the public key (compressed 02/03 + X) to hex.
+ * @param keyPair - The elliptic KeyPair
+ */
+declare function serializePublicKeyCompressed(keyPair: ec.KeyPair): string;
+/**
+ * Generate a JWT signed with ES256 (ECDSA + SHA-256) directly from a secp256k1 key pair.
+ * Using `ES256` header so it matches PyJWT verification.
+ * @param sub - Subject claim (e.g., compressed public key)
+ * @param aud - Audience claim (e.g., host/domain)
+ * @param keyPair - Elliptic KeyPair for signing
+ * @param expiresInSeconds - TTL in seconds (default: 24h)
+ */
+declare function generateJWT(sub: string, aud: string, keyPair: ec.KeyPair, expiresInSeconds?: number): Promise<string>;
+/**
+ * Convenience wrapper: given a hex private key and host/domain,
+ * returns a compressed public key and a JWT signed with that key.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param network - testnet/mainnet network identifier
+ * @param options - Optional settings like expiresInSeconds
+ */
+declare function createAuthEnvelope(privateKeyHex: string, network?: Network, options?: JWTOptions): Promise<AuthEnvelope>;
+/**
+ * Generate a hex‑encoded DER signature for the OAuth‑style
+ * verify‑app‑session call.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param clientId - Your app’s App ID
+ * @param redirectUri - Redirect URI used in the OAuth flow
+ * @param state - CSRF/state parameter used in the flow
+ */
+declare function generateAppSignature(privateKeyHex: string, clientId: string, redirectUri: string, state: string): Promise<string>;
+
 declare function useCreateUserAppData(): (appId: string, pid: string, dbAuthToken: string, endpoint: string) => Promise<{
     success: boolean;
     data: any;
@@ -149,4 +226,4 @@ declare function useCreateOrganizationAppData(): (appId: string, pid: string, db
 
 declare function useFetchBalance(): (publicClient: any, walletAddress: string, kibbleTokenAddress: string) => Promise<number | undefined>;
 
-export { type AnymalNftMetadataInputData, type CreateAnymalInputData, generateBytes32Nonce, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };
+export { AUTH_API_ENDPOINTS, type AnymalNftMetadataInputData, type AuthEnvelope, type CreateAnymalInputData, type JWTOptions, NETWORK_HOSTS, Network, createAuthEnvelope, fetchAnymals, generateAppSignature, generateBytes32Nonce, generateJWT, loadExistingSecp256k1PrivateKey, serializePublicKeyCompressed, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchAnymals, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { BundlerClient } from 'viem/account-abstraction';
+import { ec } from 'elliptic';
 
 declare function useVerifyAccount(): (pid: string, campaignId: string, dbAuthToken: string, bundlerClient: any, smartAccount: any, accountRewardsContractAddress: `0x${string}`) => Promise<{
     success: boolean;
@@ -82,6 +83,14 @@ declare function useUploadAnymalImage(): (imageFile: File, type: string, idToken
     type: string;
 }>;
 
+declare function fetchAnymals({ dbAuthToken, endpoint, userPid, }: {
+    dbAuthToken: string;
+    endpoint: string;
+    userPid: string;
+}): Promise<any>;
+
+declare function useFetchAnymals(): typeof fetchAnymals;
+
 declare function useProcessPartialKibblePayment(): (pid: string, nftId: string, orderId: string, dbAuthToken: string, marketplaceContract: string, smartAccount: any, bundlerClient: any, amountInTokens: string, maxTokenPayment: string, nonce: string, deadline: string, backendSignature: string) => Promise<{
     success: boolean;
     message: string;
@@ -137,6 +146,74 @@ declare function useUpdateOrgWalletAddress(): (dbAuthToken: string, docID: strin
 
 declare const generateBytes32Nonce: () => `0x${string}`;
 
+/**
+ * Supported networks
+ */
+declare enum Network {
+    Testnet = "testnet",
+    Localnet = "localnet"
+}
+/**
+ * Mapping from network to audience host
+ */
+declare const NETWORK_HOSTS: Record<Network, string>;
+/**
+ * Mapping from network to audience host
+ */
+declare const AUTH_API_ENDPOINTS: Record<Network, string>;
+/**
+ * Output of authentication envelope
+ */
+interface AuthEnvelope {
+    publicKey: string;
+    token: string;
+}
+/**
+ * Options when creating JWT
+ */
+interface JWTOptions {
+    /**
+     * Time-to-live in seconds (default: 24h)
+     */
+    expiresInSeconds?: number;
+}
+/**
+ * Load a secp256k1 private key from a hex string.
+ * @param hexKey - Hex‑encoded private key
+ */
+declare function loadExistingSecp256k1PrivateKey(hexKey: string): ec.KeyPair;
+/**
+ * Serialize the public key (compressed 02/03 + X) to hex.
+ * @param keyPair - The elliptic KeyPair
+ */
+declare function serializePublicKeyCompressed(keyPair: ec.KeyPair): string;
+/**
+ * Generate a JWT signed with ES256 (ECDSA + SHA-256) directly from a secp256k1 key pair.
+ * Using `ES256` header so it matches PyJWT verification.
+ * @param sub - Subject claim (e.g., compressed public key)
+ * @param aud - Audience claim (e.g., host/domain)
+ * @param keyPair - Elliptic KeyPair for signing
+ * @param expiresInSeconds - TTL in seconds (default: 24h)
+ */
+declare function generateJWT(sub: string, aud: string, keyPair: ec.KeyPair, expiresInSeconds?: number): Promise<string>;
+/**
+ * Convenience wrapper: given a hex private key and host/domain,
+ * returns a compressed public key and a JWT signed with that key.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param network - testnet/mainnet network identifier
+ * @param options - Optional settings like expiresInSeconds
+ */
+declare function createAuthEnvelope(privateKeyHex: string, network?: Network, options?: JWTOptions): Promise<AuthEnvelope>;
+/**
+ * Generate a hex‑encoded DER signature for the OAuth‑style
+ * verify‑app‑session call.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param clientId - Your app’s App ID
+ * @param redirectUri - Redirect URI used in the OAuth flow
+ * @param state - CSRF/state parameter used in the flow
+ */
+declare function generateAppSignature(privateKeyHex: string, clientId: string, redirectUri: string, state: string): Promise<string>;
+
 declare function useCreateUserAppData(): (appId: string, pid: string, dbAuthToken: string, endpoint: string) => Promise<{
     success: boolean;
     data: any;
@@ -149,4 +226,4 @@ declare function useCreateOrganizationAppData(): (appId: string, pid: string, db
 
 declare function useFetchBalance(): (publicClient: any, walletAddress: string, kibbleTokenAddress: string) => Promise<number | undefined>;
 
-export { type AnymalNftMetadataInputData, type CreateAnymalInputData, generateBytes32Nonce, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };
+export { AUTH_API_ENDPOINTS, type AnymalNftMetadataInputData, type AuthEnvelope, type CreateAnymalInputData, type JWTOptions, NETWORK_HOSTS, Network, createAuthEnvelope, fetchAnymals, generateAppSignature, generateBytes32Nonce, generateJWT, loadExistingSecp256k1PrivateKey, serializePublicKeyCompressed, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchAnymals, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };