arc402-cli 0.9.18 → 0.10.0

package/dist/daemon/delivery-client.js

@@ -0,0 +1,231 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeliveryClient = void 0;
+/**
+ * ARC-402 Delivery Client
+ *
+ * When this agent receives a /delivery notification with a files_url, this
+ * module fetches the manifest, downloads each file, verifies all keccak256
+ * hashes, and verifies the root hash against the on-chain delivery hash.
+ *
+ * Flow:
+ *   1. Receive POST /delivery { agreementId, deliverableHash, files_url }
+ *   2. Fetch manifest from <files_url base>/manifest
+ *   3. Download each file to local job dir
+ *   4. Verify keccak256 of each file matches manifest
+ *   5. Verify root hash matches on-chain deliverableHash
+ *   6. Return verification result
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const ethers_1 = require("ethers");
+const job_lifecycle_js_1 = require("./job-lifecycle.js");
+// ─── DeliveryClient ───────────────────────────────────────────────────────────
+class DeliveryClient {
+    constructor(opts = {}) {
+        this.log = () => { };
+        this.autoDownload = opts.autoDownload ?? true;
+    }
+    /**
+     * Handle an incoming delivery notification.
+     * If auto_download is true, downloads and verifies the files.
+     * Returns a VerificationResult.
+     */
+    async handleDeliveryNotification(params) {
+        const { agreementId, deliverableHash, filesUrl } = params;
+        if (!this.autoDownload) {
+            this.log({ event: "delivery_client_skipped", agreement_id: agreementId, reason: "auto_download_disabled" });
+            return null;
+        }
+        if (!filesUrl) {
+            this.log({ event: "delivery_client_skipped", agreement_id: agreementId, reason: "no_files_url" });
+            return null;
+        }
+        this.log({ event: "delivery_download_start", agreement_id: agreementId, files_url: filesUrl });
+        try {
+            // Derive manifest URL from files_url
+            // files_url = https://host/job/abc/files  → manifest = https://host/job/abc/manifest
+            const manifestUrl = this.deriveManifestUrl(filesUrl);
+            // Fetch manifest
+            const manifest = await this.fetchJson(manifestUrl);
+            this.log({ event: "manifest_fetched", agreement_id: agreementId, file_count: manifest.files.length, root_hash: manifest.root_hash });
+            // Create local job directory for client
+            const jobDir = (0, job_lifecycle_js_1.createJobDirectory)(agreementId);
+            // Download and verify each file
+            const fileResults = [];
+            let allFilesMatch = true;
+            for (const fileEntry of manifest.files) {
+                const fileUrl = `${filesUrl.replace(/\/$/, "")}/${encodeURIComponent(fileEntry.name)}`;
+                const result = await this.downloadAndVerify(fileUrl, fileEntry, jobDir);
+                fileResults.push(result);
+                if (!result.hashMatch)
+                    allFilesMatch = false;
+            }
+            // Verify root hash
+            const actualRootHash = this.computeRootHash(manifest.files.map(f => f.hash));
+            const rootHashMatch = actualRootHash.toLowerCase() === deliverableHash.toLowerCase() &&
+                actualRootHash.toLowerCase() === manifest.root_hash.toLowerCase();
+            const ok = allFilesMatch && rootHashMatch;
+            const result = {
+                ok,
+                agreementId,
+                rootHashMatch,
+                fileResults,
+            };
+            this.log({
+                event: "delivery_verified",
+                agreement_id: agreementId,
+                ok,
+                root_hash_match: rootHashMatch,
+                files_verified: fileResults.length,
+                files_ok: fileResults.filter(f => f.hashMatch).length,
+            });
+            return result;
+        }
+        catch (err) {
+            const error = String(err instanceof Error ? err.message : err);
+            this.log({ event: "delivery_verify_error", agreement_id: agreementId, error });
+            return {
+                ok: false,
+                agreementId,
+                rootHashMatch: false,
+                fileResults: [],
+                error,
+            };
+        }
+    }
+    // ── Private helpers ───────────────────────────────────────────────────────
+    deriveManifestUrl(filesUrl) {
+        // Strip trailing slash
+        const base = filesUrl.replace(/\/$/, "");
+        // Replace /files at end with /manifest, or append /manifest
+        if (base.endsWith("/files")) {
+            return base.slice(0, -6) + "/manifest";
+        }
+        // Fallback: try stripping /files/ prefix from last segment
+        const parts = base.split("/");
+        const lastPart = parts[parts.length - 1];
+        if (lastPart === "files") {
+            parts[parts.length - 1] = "manifest";
+            return parts.join("/");
+        }
+        return base + "/manifest";
+    }
+    async downloadAndVerify(url, expected, destDir) {
+        const data = await this.fetchBytes(url);
+        const actual = ethers_1.ethers.keccak256(data);
+        const hashMatch = actual.toLowerCase() === expected.hash.toLowerCase();
+        if (hashMatch) {
+            // Write to job dir
+            const destPath = path.join(destDir, path.basename(expected.name));
+            fs.writeFileSync(destPath, data);
+        }
+        return {
+            name: expected.name,
+            hashMatch,
+            expected: expected.hash,
+            actual,
+        };
+    }
+    computeRootHash(fileHashes) {
+        if (fileHashes.length === 0) {
+            return ethers_1.ethers.keccak256(new Uint8Array(0));
+        }
+        const sorted = [...fileHashes].sort();
+        const allBytes = Buffer.concat(sorted.map(h => Buffer.from(ethers_1.ethers.getBytes(h))));
+        return ethers_1.ethers.keccak256(allBytes);
+    }
+    fetchJson(url) {
+        return new Promise((resolve, reject) => {
+            const parsed = new URL(url);
+            const mod = parsed.protocol === "https:" ? https : http;
+            const req = mod.get(url, { headers: { "Accept": "application/json" } }, (res) => {
+                if (res.statusCode !== 200) {
+                    reject(new Error(`fetch_manifest_failed: HTTP ${res.statusCode} for ${url}`));
+                    res.resume();
+                    return;
+                }
+                let raw = "";
+                res.on("data", (c) => { raw += c.toString(); });
+                res.on("end", () => {
+                    try {
+                        resolve(JSON.parse(raw));
+                    }
+                    catch {
+                        reject(new Error(`invalid_manifest_json from ${url}`));
+                    }
+                });
+            });
+            req.on("error", (err) => reject(new Error(`network_error: ${err.message}`)));
+            req.setTimeout(30000, () => {
+                req.destroy(new Error("fetch_timeout"));
+            });
+        });
+    }
+    fetchBytes(url) {
+        return new Promise((resolve, reject) => {
+            const parsed = new URL(url);
+            const mod = parsed.protocol === "https:" ? https : http;
+            const MAX_FILE_BYTES = 200 * 1024 * 1024; // 200MB hard cap for downloads
+            const req = mod.get(url, (res) => {
+                if (res.statusCode !== 200) {
+                    reject(new Error(`fetch_file_failed: HTTP ${res.statusCode} for ${url}`));
+                    res.resume();
+                    return;
+                }
+                const chunks = [];
+                let total = 0;
+                res.on("data", (chunk) => {
+                    total += chunk.length;
+                    if (total > MAX_FILE_BYTES) {
+                        req.destroy(new Error("file_too_large"));
+                        return;
+                    }
+                    chunks.push(chunk);
+                });
+                res.on("end", () => resolve(Buffer.concat(chunks)));
+            });
+            req.on("error", (err) => reject(new Error(`network_error: ${err.message}`)));
+            req.setTimeout(120000, () => {
+                req.destroy(new Error("download_timeout"));
+            });
+        });
+    }
+}
+exports.DeliveryClient = DeliveryClient;
+//# sourceMappingURL=delivery-client.js.map

package/dist/daemon/delivery-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-client.js","sourceRoot":"","sources":["../../src/daemon/delivery-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;GAcG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA6B;AAC7B,6CAA+B;AAC/B,mCAAgC;AAChC,yDAAwD;AAkBxD,iFAAiF;AAEjF,MAAa,cAAc;IAIzB,YAAY,OAAmC,EAAE;QAFjD,QAAG,GAA6C,GAAG,EAAE,GAAE,CAAC,CAAC;QAGvD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,0BAA0B,CAAC,MAIhC;QACC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAE1D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC5G,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE/F,IAAI,CAAC;YACH,qCAAqC;YACrC,qFAAqF;YACrF,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAErD,iBAAiB;YACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAmB,WAAW,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YAErI,wCAAwC;YACxC,MAAM,MAAM,GAAG,IAAA,qCAAkB,EAAC,WAAW,CAAC,CAAC;YAE/C,gCAAgC;YAChC,MAAM,WAAW,GAAsC,EAAE,CAAC;YAC1D,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACxE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,aAAa,GAAG,KAAK,CAAC;YAC/C,CAAC;YAED,mBAAmB;YACnB,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7E,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE;gBAC/D,cAAc,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAEvF,MAAM,EAAE,GAAG,aAAa,IAAI,aAAa,CAAC;YAE1C,MAAM,MAAM,GAAuB;gBACjC,EAAE;gBACF,WAAW;gBACX,aAAa;gBACb,WAAW;aACZ,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC;gBACP,KAAK,EAAE,mBAAmB;gBAC1B,YAAY,EAAE,WAAW;gBACzB,EAAE;gBACF,eAAe,EAAE,aAAa;gBAC9B,cAAc,EAAE,WAAW,CAAC,MAAM;gBAClC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;aACtD,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAEhB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,WAAW;gBACX,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,EAAE;gBACf,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAErE,iBAAiB,CAAC,QAAgB;QACxC,uBAAuB;QACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,4DAA4D;QAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;QACzC,CAAC;QACD,2DAA2D;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC;YACrC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,GAAG,WAAW,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,GAAW,EACX,QAA2B,EAC3B,OAAe;QAEf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,eAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAEvE,IAAI,SAAS,EAAE,CAAC;YACd,mBAAmB;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,MAAM;SACP,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,UAAoB;QAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,eAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,eAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAEO,SAAS,CAAI,GAAW;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAExD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9E,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,UAAU,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC9E,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC,CAAC;oBAChC,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,GAAG,CAAC,UAAU,CAAC,KAAM,EAAE,GAAG,EAAE;gBAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,GAAW;QAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,+BAA+B;YAEzE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,UAAU,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC1E,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;gBAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;oBACtB,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;wBAC3B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;wBACzC,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,GAAG,CAAC,UAAU,CAAC,MAAO,EAAE,GAAG,EAAE;gBAC3B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA9MD,wCA8MC"}

package/dist/daemon/file-delivery.d.ts

@@ -0,0 +1,98 @@
+import * as http from "http";
+export interface DeliveryFileEntry {
+    name: string;
+    size: number;
+    hash: string;
+}
+export interface DeliveryManifest {
+    agreement_id: string;
+    files: DeliveryFileEntry[];
+    root_hash: string;
+    total_size: number;
+    created_at: string;
+    updated_at: string;
+}
+/**
+ * Resolves agreement parties (hirer + provider) for access control.
+ * Injected by the daemon so file-delivery doesn't depend on the DB schema.
+ */
+export type AgreementPartyResolver = (agreementId: string) => {
+    hirerAddress: string;
+    providerAddress: string;
+} | null;
+export declare class FileDeliveryManager {
+    private readonly maxFileSizeBytes;
+    private readonly maxJobSizeBytes;
+    private partyResolver;
+    /** Temporary arbitrator access tokens: token → { agreementId, expiresAt } */
+    private readonly arbitratorTokens;
+    constructor(opts?: {
+        maxFileSizeMb?: number;
+        maxJobSizeMb?: number;
+    });
+    setPartyResolver(resolver: AgreementPartyResolver): void;
+    /**
+     * Generate a time-limited arbitrator access token for dispute resolution.
+     * Valid for the specified agreement only.
+     */
+    generateArbitratorToken(agreementId: string, ttlSeconds?: number): string;
+    /**
+     * Verify that a request has valid party auth for a given agreement.
+     * Returns true if:
+     *   1. X-ARC402-Signature is a valid EIP-191 sig of "arc402:download:<agreementId>"
+     *      from an address that is the hirer or provider on the agreement, OR
+     *   2. Authorization: Bearer <daemon-token> (local access), OR
+     *   3. X-Arbitrator-Token is a valid unexpired arbitrator token for this agreement
+     */
+    verifyPartyAccess(req: http.IncomingMessage, agreementId: string, daemonToken: string): {
+        allowed: boolean;
+        party?: string;
+        reason?: string;
+    };
+    deliveryDir(agreementId: string): string;
+    manifestPath(agreementId: string): string;
+    filePath(agreementId: string, filename: string): string;
+    computeFileHash(data: Buffer): string;
+    computeRootHash(fileHashes: string[]): string;
+    getManifest(agreementId: string): DeliveryManifest | null;
+    private writeManifest;
+    private recomputeManifest;
+    /**
+     * Store a file for an agreement. Immutable — returns existing entry if
+     * the file already exists (no overwrite).
+     */
+    storeFile(agreementId: string, filename: string, data: Buffer): {
+        entry: DeliveryFileEntry;
+        manifest: DeliveryManifest;
+        alreadyExisted: boolean;
+    };
+    /**
+     * Scan a directory for output files and store all of them.
+     * Returns the final manifest with root_hash.
+     */
+    storeDirectory(agreementId: string, sourceDir: string, excludes?: string[]): DeliveryManifest;
+    /**
+     * POST /job/:id/upload
+     * Auth required. Accepts raw binary body with X-Filename header.
+     * Also accepts Content-Disposition: attachment; filename="..."
+     */
+    handleUpload(req: http.IncomingMessage, res: http.ServerResponse, agreementId: string, log: (entry: Record<string, unknown>) => void): Promise<void>;
+    /**
+     * GET /job/:id/files
+     * Party-gated. Returns list of files (same as manifest but concise).
+     * Requires valid party auth (signature, daemon token, or arbitrator token).
+     */
+    handleListFiles(req: http.IncomingMessage, res: http.ServerResponse, agreementId: string, daemonToken: string, log: (entry: Record<string, unknown>) => void): void;
+    /**
+     * GET /job/:id/files/:filename
+     * Party-gated. Streams the file content to authenticated agreement parties.
+     */
+    handleDownloadFile(req: http.IncomingMessage, res: http.ServerResponse, agreementId: string, filename: string, daemonToken: string, log: (entry: Record<string, unknown>) => void): void;
+    /**
+     * GET /job/:id/manifest
+     * Party-gated. Returns full manifest with hashes for verification.
+     */
+    handleManifest(req: http.IncomingMessage, res: http.ServerResponse, agreementId: string, daemonToken: string, log: (entry: Record<string, unknown>) => void): void;
+    private readUploadBody;
+}
+//# sourceMappingURL=file-delivery.d.ts.map

package/dist/daemon/file-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-delivery.d.ts","sourceRoot":"","sources":["../../src/daemon/file-delivery.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAQ7B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,IAAI,CAAC;AAET,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,aAAa,CAAuC;IAC5D,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiE;gBAEtF,IAAI,GAAE;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB;IAMN,gBAAgB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAIxD;;;OAGG;IACH,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,GAAE,MAAc,GAAG,MAAM;IAShF;;;;;;;OAOG;IACH,iBAAiB,CACf,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IA+DxD,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIxC,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIzC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAQvD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIrC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM;IAW7C,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAUzD,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,iBAAiB;IAsCzB;;;OAGG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAC9D,KAAK,EAAE,iBAAiB,CAAC;QACzB,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,cAAc,EAAE,OAAO,CAAC;KACzB;IA0CD;;;OAGG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,EAAO,GAAG,gBAAgB;IAuBjG;;;;OAIG;IACG,YAAY,CAChB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAC5C,OAAO,CAAC,IAAI,CAAC;IA+ChB;;;;OAIG;IACH,eAAe,CACb,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAC5C,IAAI;IA2BP;;;OAGG;IACH,kBAAkB,CAChB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAC5C,IAAI;IAuCP;;;OAGG;IACH,cAAc,CACZ,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAC5C,IAAI;IAuBP,OAAO,CAAC,cAAc;CAgCvB"}