clinch-core 0.2.0 → 0.3.0

package/dist/index.d.ts

@@ -77,3 +77,22 @@ export declare class ClinchCore extends EventEmitter {
     private solvePoW;
     private hasLeadingZeroBits;
 }
+export interface SellerRecord {
+    agent_id: string;
+    endpoint: string;
+    supported_modes: string[];
+    categories: string[];
+    capabilities: string[];
+}
+export declare class ClinchSeller extends EventEmitter {
+    private config;
+    private cachedRegistryUrl;
+    private identityPrivKey;
+    identityPubKey: string;
+    constructor(config?: ClinchConfig & {
+        privateKeyHex?: string;
+    });
+    private resolveRegistry;
+    registerEndpoint(record: SellerRecord): Promise<any>;
+    verifyBuyerSignature(payload: any, signatureHex: string, buyerPubKeyHex: string): boolean;
+}

package/dist/index.js

@@ -36,7 +36,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ClinchCore = void 0;
+exports.ClinchSeller = exports.ClinchCore = void 0;
 const events_1 = require("events");
 const tweetnacl_1 = __importDefault(require("tweetnacl"));
 const js_sha256_1 = require("js-sha256");
@@ -501,7 +501,7 @@ You MUST respond ONLY in valid JSON matching this exact schema. Do not include m
     }
     parseAddress(address) {
         if (!address.includes('.'))
-            throw new Error("Invalid Address Format. Expected MODE.domain (e.g. ANP/A.amazon.anp)");
+            throw new Error("Invalid Address Format. Expected MODE.domain (e.g. ANP/C.amazon.anp)");
         const firstDotIdx = address.indexOf('.');
         const mode = address.substring(0, firstDotIdx);
         const domain = address.substring(firstDotIdx + 1).toLowerCase();
@@ -537,3 +537,68 @@ You MUST respond ONLY in valid JSON matching this exact schema. Do not include m
     }
 }
 exports.ClinchCore = ClinchCore;
+class ClinchSeller extends events_1.EventEmitter {
+    config;
+    cachedRegistryUrl = null;
+    identityPrivKey;
+    identityPubKey;
+    constructor(config = {}) {
+        super();
+        this.config = { timeoutMs: 8000, ...config };
+        if (config.privateKeyHex) {
+            this.identityPrivKey = fromHex(config.privateKeyHex);
+            const kp = tweetnacl_1.default.sign.keyPair.fromSecretKey(this.identityPrivKey);
+            this.identityPubKey = toHex(kp.publicKey);
+            this.emit('log', `[Seller] Loaded permanent identity. PubKey: ${this.identityPubKey.substring(0, 12)}...`);
+        }
+        else {
+            const kp = tweetnacl_1.default.sign.keyPair();
+            this.identityPrivKey = kp.secretKey;
+            this.identityPubKey = toHex(kp.publicKey);
+            console.warn('[Seller] ⚠️  No privateKeyHex provided — using ephemeral key. Registry will reject updates unless this key is pre-registered.');
+        }
+        if (this.config.registryUrl) {
+            this.cachedRegistryUrl = this.config.registryUrl;
+        }
+    }
+    async resolveRegistry() {
+        if (this.cachedRegistryUrl)
+            return this.cachedRegistryUrl;
+        const res = await fetch(FIREBASE_CONFIG_URL);
+        const cfg = JSON.parse(await res.text());
+        this.cachedRegistryUrl = cfg.registry_nodes[PROTOCOL_VERSION];
+        return this.cachedRegistryUrl;
+    }
+    async registerEndpoint(record) {
+        const registry = await this.resolveRegistry();
+        const payload = { ...record, timestamp: Date.now() };
+        const msgUint8 = new TextEncoder().encode(JSON.stringify(payload));
+        const signature = toHex(tweetnacl_1.default.sign.detached(msgUint8, this.identityPrivKey));
+        const res = await fetch(`${registry}/api/sellers/update-endpoint`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                payload,
+                public_key: this.identityPubKey,
+                signature
+            })
+        });
+        if (!res.ok)
+            throw new Error(`Endpoint registration failed: ${await res.text()}`);
+        const data = await res.json();
+        this.emit('log', `[Seller] Registered: ${record.agent_id} → ${record.endpoint}`);
+        return data;
+    }
+    verifyBuyerSignature(payload, signatureHex, buyerPubKeyHex) {
+        try {
+            const msg = new TextEncoder().encode(JSON.stringify(payload));
+            const sig = fromHex(signatureHex);
+            const pubKey = fromHex(buyerPubKeyHex);
+            return tweetnacl_1.default.sign.detached.verify(msg, sig, pubKey);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.ClinchSeller = ClinchSeller;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clinch-core",
-  "version": "0.2.0",
+  "version": "0.3.0",
 
   "description": "Clinch Protocol Edge Client",
   "main": "dist/index.js",

package/src/index.ts

@@ -574,7 +574,7 @@ You MUST respond ONLY in valid JSON matching this exact schema. Do not include m
     }
 
     public parseAddress(address: string): ParsedAddress {
-        if (!address.includes('.')) throw new Error("Invalid Address Format. Expected MODE.domain (e.g. ANP/A.amazon.anp)");
+        if (!address.includes('.')) throw new Error("Invalid Address Format. Expected MODE.domain (e.g. ANP/C.amazon.anp)");
         
         const firstDotIdx = address.indexOf('.');
         const mode = address.substring(0, firstDotIdx);
@@ -608,3 +608,84 @@ You MUST respond ONLY in valid JSON matching this exact schema. Do not include m
         return zeroBits >= bits;
     }
 }
+
+// ============================================================================
+// THE CLINCH SELLER LIBRARY (Server-Side)
+// ============================================================================
+export interface SellerRecord {
+  agent_id:        string;
+  endpoint:        string;
+  supported_modes: string[];
+  categories:      string[];
+  capabilities:    string[];
+}
+
+export class ClinchSeller extends EventEmitter {
+  private config:           ClinchConfig;
+  private cachedRegistryUrl: string | null = null;
+  private identityPrivKey:  Uint8Array;
+  public  identityPubKey:   string;
+
+  constructor(config: ClinchConfig & { privateKeyHex?: string } = {}) {
+    super();
+    this.config = { timeoutMs: 8000, ...config };
+
+    if (config.privateKeyHex) {
+      this.identityPrivKey = fromHex(config.privateKeyHex);
+      const kp = nacl.sign.keyPair.fromSecretKey(this.identityPrivKey);
+      this.identityPubKey = toHex(kp.publicKey);
+      this.emit('log', `[Seller] Loaded permanent identity. PubKey: ${this.identityPubKey.substring(0, 12)}...`);
+    } else {
+      const kp = nacl.sign.keyPair();
+      this.identityPrivKey = kp.secretKey;
+      this.identityPubKey  = toHex(kp.publicKey);
+      console.warn('[Seller] ⚠️  No privateKeyHex provided — using ephemeral key. Registry will reject updates unless this key is pre-registered.');
+    }
+
+    if (this.config.registryUrl) {
+      this.cachedRegistryUrl = this.config.registryUrl;
+    }
+  }
+
+  private async resolveRegistry(): Promise<string> {
+    if (this.cachedRegistryUrl) return this.cachedRegistryUrl;
+    const res = await fetch(FIREBASE_CONFIG_URL);
+    const cfg = JSON.parse(await res.text());
+    this.cachedRegistryUrl = cfg.registry_nodes[PROTOCOL_VERSION];
+    return this.cachedRegistryUrl!;
+  }
+
+  async registerEndpoint(record: SellerRecord): Promise<any> {
+    const registry = await this.resolveRegistry();
+
+    const payload = { ...record, timestamp: Date.now() };
+    const msgUint8 = new TextEncoder().encode(JSON.stringify(payload));
+    const signature = toHex(nacl.sign.detached(msgUint8, this.identityPrivKey));
+
+    const res = await fetch(`${registry}/api/sellers/update-endpoint`, {
+      method:  'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body:    JSON.stringify({
+        payload,
+        public_key: this.identityPubKey,
+        signature
+      })
+    });
+
+    if (!res.ok) throw new Error(`Endpoint registration failed: ${await res.text()}`);
+    const data = await res.json();
+    this.emit('log', `[Seller] Registered: ${record.agent_id} → ${record.endpoint}`);
+    return data;
+  }
+
+  verifyBuyerSignature(payload: any, signatureHex: string, buyerPubKeyHex: string): boolean {
+    try {
+      const msg    = new TextEncoder().encode(JSON.stringify(payload));
+      const sig    = fromHex(signatureHex);
+      const pubKey = fromHex(buyerPubKeyHex);
+      return nacl.sign.detached.verify(msg, sig, pubKey);
+    } catch {
+      return false;
+    }
+  }
+}