iso-ucan 0.5.0 → 0.5.2

package/dist/src/envelope.d.ts

@@ -52,7 +52,7 @@ export function sign(options: EnvelopeSignOptions): Promise<{
  * @param {EnvelopeEncodeOptions} options
  *
  */
-export function encode(options: EnvelopeEncodeOptions): ByteView<(Uint8Array<ArrayBufferLike> | SignaturePayload<unknown>)[]>;
+export function encode(options: EnvelopeEncodeOptions): ByteView<(Uint8Array<ArrayBufferLike> | SignaturePayload<unknown>)[], ArrayBufferLike>;
 /**
  * Decode a UCAN envelope
  *

package/dist/src/envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/envelope.js"],"names":[],"mappings":"AAYA;;;;;;;;GAQG;AACH,6CALG;IAA6B,IAAI,EAAzB,WAAW;IACM,OAAO,EAAxB,OAAO;IACU,OAAO;IAC8B,aAAa,EAAnE,OAAO,sBAAsB,EAAE,aAAa;CACtD,oBAgBA;AAED;;;;GAIG;AACH,8CAFW,UAAU;;;;EAkCpB;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;GAGG;AACH,8BAFW,mBAAmB;;;GAgB7B;AAED;;;;;;GAMG;AACH,gCAHW,qBAAqB,yEAS/B;AAED;;;;;;;GAOG;AACH,uBAL2B,IAAI,SAAlB,WAAa,WAEf,qBAAqB,GACnB,gBAAgB,IAAI,CAAC,CAgCjC;AAtKD;;;GAGG;AAEH,cAAc;AACd,sBAAuB,YAAY,CAAA;iCALuK,YAAY;6BAAZ,YAAY;sCAAZ,YAAY;uCAAZ,YAAY;uCAAZ,YAAY;yCAAZ,YAAY;2CAAZ,YAAY;8BACzL,cAAc;2CAD+J,YAAY;qCAAZ,YAAY"}
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/envelope.js"],"names":[],"mappings":"AAYA;;;;;;;;GAQG;AACH,6CALG;IAA6B,IAAI,EAAzB,WAAW;IACM,OAAO,EAAxB,OAAO;IACU,OAAO;IAC8B,aAAa,EAAnE,OAAO,sBAAsB,EAAE,aAAa;CACtD,oBAgBA;AAED;;;;GAIG;AACH,8CAFW,UAAU;;;;EAkCpB;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;GAGG;AACH,8BAFW,mBAAmB;;;GAgB7B;AAED;;;;;;GAMG;AACH,gCAHW,qBAAqB,0FAS/B;AAED;;;;;;;GAOG;AACH,uBAL2B,IAAI,SAAlB,WAAa,WAEf,qBAAqB,GACnB,gBAAgB,IAAI,CAAC,CAgCjC;AAtKD;;;GAGG;AAEH,cAAc;AACd,sBAAuB,YAAY,CAAA;iCALuK,YAAY;6BAAZ,YAAY;sCAAZ,YAAY;uCAAZ,YAAY;uCAAZ,YAAY;yCAAZ,YAAY;2CAAZ,YAAY;8BACzL,cAAc;2CAD+J,YAAY;qCAAZ,YAAY"}

package/dist/src/invocation.d.ts

@@ -27,8 +27,9 @@ export class Invocation {
      * @param {Uint8Array} bytes
      * @param {CID} cid
      * @param {Delegation[]} delegations
+     * @param {string} replayKey
      */
-    constructor(envelope: import("./types.js").DecodedEnvelope<"inv">, bytes: Uint8Array, cid: CID, delegations: Delegation[]);
+    constructor(envelope: import("./types.js").DecodedEnvelope<"inv">, bytes: Uint8Array, cid: CID, delegations: Delegation[], replayKey: string);
     /**
      * @type {Delegation[]}
      */
@@ -37,6 +38,16 @@ export class Invocation {
      * @type {CID}
      */
     cid: CID;
+    /**
+     * Key to deduplicate this invocation on: the CID of its signature payload.
+     *
+     * Use this instead of {@link Invocation.cid} to detect replays. The CID
+     * covers the signature bytes, and some signature algorithms (e.g. ECDSA)
+     * accept more than one valid signature for the same payload.
+     *
+     * @type {string}
+     */
+    replayKey: string;
     envelope: import("./types.js").DecodedEnvelope<"inv">;
     payload: import("./types.js").InvocationPayload;
     bytes: Uint8Array<ArrayBufferLike>;

package/dist/src/invocation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/invocation.js"],"names":[],"mappings":"AAqLA;;;;GAIG;AACH,sCAHW,OAAO,YAAY,EAAE,iBAAiB,UACtC,UAAU,EAAE,WA6DtB;AAtOD;;;GAGG;AAEH;;GAEG;AACH;IA0BE;;;OAGG;IACH,qBAFW,OAAO,YAAY,EAAE,qBAAqB,uBAgDpD;IAED;;OAEG;IACH,uBAFW,OAAO,YAAY,EAAE,iBAAiB,uBA0DhD;IA9HD;;;;;;OAMG;IACH,sBALW,OAAO,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,SAC3C,UAAU,OACV,GAAG,eACH,UAAU,EAAE,EAQtB;IAvBD;;OAEG;IACH,aAFU,UAAU,EAAE,CAEX;IAEX;;OAEG;IACH,KAFU,GAAG,CAEV;IAUD,sDAAwB;IACxB,gDAA+B;IAC/B,mCAAkB;CAqHrB;gCAjJ4B,iBAAiB;yBACxB,cAAc"}
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/invocation.js"],"names":[],"mappings":"AA6OA;;;;GAIG;AACH,sCAHW,OAAO,YAAY,EAAE,iBAAiB,UACtC,UAAU,EAAE,WA6DtB;AA3RD;;;GAGG;AAEH;;GAEG;AACH;IAuCE;;;OAGG;IACH,qBAFW,OAAO,YAAY,EAAE,qBAAqB,uBAgEpD;IAED;;OAEG;IACH,uBAFW,OAAO,YAAY,EAAE,iBAAiB,uBAgEhD;IAtJD;;;;;;;OAOG;IACH,sBANW,OAAO,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,SAC3C,UAAU,OACV,GAAG,eACH,UAAU,EAAE,aACZ,MAAM,EAShB;IApCD;;OAEG;IACH,aAFU,UAAU,EAAE,CAEX;IAEX;;OAEG;IACH,KAFU,GAAG,CAEV;IAEH;;;;;;;;OAQG;IACH,WAFU,MAAM,CAEP;IAWP,sDAAwB;IACxB,gDAA+B;IAC/B,mCAAkB;CA4IrB;gCApL4B,iBAAiB;yBACxB,cAAc"}

package/dist/src/replay.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @import {Driver} from 'iso-kv'
+ * @import {ReplayStore} from './types.js'
+ */
+/**
+ * Replay store backed by an `iso-kv` driver.
+ *
+ * Keys are kept until the invocation expires, or forever when the invocation
+ * has no expiration.
+ *
+ * `checkAndSet` is atomic within one JavaScript realm only: calls are
+ * serialized through an in-process queue. When several processes or instances
+ * share a driver, implement {@link ReplayStore} on top of an atomic
+ * set-if-absent operation instead (for example Redis `SET NX` or SQL
+ * `INSERT ... ON CONFLICT DO NOTHING`).
+ *
+ * @implements {ReplayStore}
+ */
+export class KVReplayStore implements ReplayStore {
+    /**
+     * @param {Driver} [driver] - Defaults to a {@link MemoryDriver}.
+     */
+    constructor(driver?: Driver);
+    /** @type {KV} */
+    kv: KV;
+    /**
+     * Record `key` and return `true`, or return `false` if it was already
+     * recorded and has not expired.
+     *
+     * @param {string} key
+     * @param {number | null} expiration - Unix time in seconds, or `null` to keep forever
+     * @returns {Promise<boolean>}
+     */
+    checkAndSet(key: string, expiration: number | null): Promise<boolean>;
+    #private;
+}
+import type { ReplayStore } from './types.js';
+import { KV } from 'iso-kv';
+import type { Driver } from 'iso-kv';
+//# sourceMappingURL=replay.d.ts.map

package/dist/src/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/replay.js"],"names":[],"mappings":"AAGA;;;GAGG;AAEH;;;;;;;;;;;;;GAaG;AACH;IAOE;;OAEG;IACH,qBAFW,MAAM,EAIhB;IAXD,iBAAiB;IACjB,IADW,EAAE,CACX;IAYF;;;;;;;OAOG;IACH,iBAJW,MAAM,cACN,MAAM,GAAG,IAAI,GACX,OAAO,CAAC,OAAO,CAAC,CAc5B;;CACF;iCApD6B,YAAY;mBALvB,QAAQ;4BAIF,QAAQ"}

package/dist/src/rpc/index.d.ts

@@ -1,5 +1,5 @@
 export { defineClient } from "./client.js";
 export { defineCommand } from "./command.js";
-export { defineServer } from "./server.js";
 export { cidSchema, receipt, receiptError, receiptResult, receiptServerError } from "./receipt.js";
+export { DEFAULT_MAX_TTL, defineServer } from "./server.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/src/rpc/receipt.d.ts

@@ -75,7 +75,7 @@ export function receipt<Result extends z.ZodType, Error extends z.ZodType>(resul
  * produces when serialized through `JSON.stringify`) and normalizes to a
  * {@link CID}.
  */
-export const cidSchema: z.ZodUnion<readonly [z.ZodCustom<CID<unknown, number, number, import("multiformats").Version>, CID<unknown, number, number, import("multiformats").Version>>, z.ZodPipe<z.ZodUnion<readonly [z.ZodString, z.ZodPipe<z.ZodObject<{
+export const cidSchema: z.ZodUnion<readonly [z.ZodInstanceOf<CID<unknown, number, number, import("multiformats").Version>>, z.ZodPipe<z.ZodUnion<readonly [z.ZodString, z.ZodPipe<z.ZodObject<{
     '/': z.ZodString;
 }, z.core.$strip>, z.ZodTransform<string, {
     '/': string;
@@ -100,7 +100,7 @@ export const receiptServerError: z.ZodObject<{
     error: z.ZodObject<{
         code: z.ZodLiteral<"SERVER_ERROR">;
         message: z.ZodString;
-        cid: z.ZodOptional<z.ZodUnion<readonly [z.ZodCustom<CID<unknown, number, number, import("multiformats").Version>, CID<unknown, number, number, import("multiformats").Version>>, z.ZodPipe<z.ZodUnion<readonly [z.ZodString, z.ZodPipe<z.ZodObject<{
+        cid: z.ZodOptional<z.ZodUnion<readonly [z.ZodInstanceOf<CID<unknown, number, number, import("multiformats").Version>>, z.ZodPipe<z.ZodUnion<readonly [z.ZodString, z.ZodPipe<z.ZodObject<{
             '/': z.ZodString;
         }, z.core.$strip>, z.ZodTransform<string, {
             '/': string;

package/dist/src/rpc/server.d.ts

@@ -6,12 +6,32 @@
  * schema, and dispatches to the corresponding handler in `options.handlers`.
  * The handler's return value is serialized to JSON.
  *
+ * Each invocation is executed at most once: replays are rejected using
+ * `options.replayStore`, which defaults to an in-memory {@link KVReplayStore}.
+ * Pass a shared store when running more than one server instance.
+ *
+ * Invocations must expire within `options.maxTtl` seconds, which defaults to
+ * {@link DEFAULT_MAX_TTL}. Pass `null` to accept any expiration.
+ *
  * @template {CommandsRecord} Commands
  * @param {Commands} commands
  * @param {DefineServerOptions<Commands>} options
  * @returns {ServerRequestHandler}
  */
 export function defineServer<Commands extends CommandsRecord>(commands: Commands, options: DefineServerOptions<Commands>): ServerRequestHandler;
+/**
+ * @import {
+ *   CommandsRecord,
+ *   DefineServerOptions,
+ *   ServerRequestHandler,
+ * } from './types.js'
+ * @import {ReceiptServerError} from './receipt.js'
+ */
+/**
+ * Default maximum invocation lifetime accepted by {@link defineServer}, in
+ * seconds. Twice the client default `ttl`, to tolerate clock skew.
+ */
+export const DEFAULT_MAX_TTL: 600;
 import type { CommandsRecord } from './types.js';
 import type { DefineServerOptions } from './types.js';
 import type { ServerRequestHandler } from './types.js';

package/dist/src/rpc/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/rpc/server.js"],"names":[],"mappings":"AAkDA;;;;;;;;;;;;GAYG;AACH,6BAL8B,QAAQ,SAAzB,cAAgB,YAClB,QAAQ,WACR,oBAAoB,QAAQ,CAAC,GAC3B,oBAAoB,CA6FhC;oCAlJS,YAAY;yCAAZ,YAAY;0CAAZ,YAAY"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/rpc/server.js"],"names":[],"mappings":"AAyDA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,6BAL8B,QAAQ,SAAzB,cAAgB,YAClB,QAAQ,WACR,oBAAoB,QAAQ,CAAC,GAC3B,oBAAoB,CAoGhC;AA3KD;;;;;;;GAOG;AAEH;;;GAGG;AACH,8BAA+B,GAAG,CAAA;oCARxB,YAAY;yCAAZ,YAAY;0CAAZ,YAAY"}

package/dist/src/rpc/types.d.ts

@@ -3,7 +3,7 @@ import type { ISigner } from 'iso-signatures/types';
 import type { Capability } from '../capability.js';
 import type { Invocation } from '../invocation.js';
 import type { Store } from '../store.js';
-import type { ClientOptions, Promisable, VerifierResolver } from '../types.js';
+import type { ClientOptions, Promisable, ReplayStore, VerifierResolver } from '../types.js';
 export interface CommandOptions<Args extends StandardSchemaV1, Cmd extends string = string, ReceiptSchema extends StandardSchemaV1 = StandardSchemaV1> {
     cmd: Cmd;
     args: Args;
@@ -104,6 +104,22 @@ export interface DefineServerOptions<Commands extends CommandsRecord> {
     signer: ISigner;
     store: Store;
     verifierResolver: VerifierResolver;
+    /**
+     * Store of seen invocations, used to reject replays.
+     * Use a store shared by all instances when running more than one server.
+     *
+     * @default new KVReplayStore() (in memory)
+     */
+    replayStore?: ReplayStore;
+    /**
+     * Maximum lifetime in seconds accepted for invocations. Invocations without
+     * an expiration, or expiring later than `maxTtl` seconds from now, are
+     * rejected. This keeps the replay store bounded. Pass `null` to accept any
+     * expiration, including none.
+     *
+     * @default 600
+     */
+    maxTtl?: number | null;
 }
 /**
  * Handler for an incoming HTTP request, returned by {@link defineServer}.

package/dist/src/rpc/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/rpc/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9E,MAAM,WAAW,cAAc,CAC7B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,IAAI,CAAA;IACV,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,WAAW,aAAa,CAC5B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,gBAAgB,EAChB,MAAM,EACN,gBAAgB,CACjB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,SAAS,cAAc,IAAI;KACzD,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;KACrD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC/D,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;KACpD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;AAErE;;GAEG;AACH,MAAM,MAAM,cAAc,CACxB,QAAQ,SAAS,cAAc,EAC/B,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IACvE;IACF,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAAA;CAC5D,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,SAAS,cAAc;IAC5D,OAAO,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC/C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACpE,MAAM,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC9C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,UAAU,CAAC,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB,CAAC,IAAI;IACxC,IAAI,EAAE,IAAI,CAAA;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC3D,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAC5C,OAAO,EAAE,oBAAoB,CAC3B,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAC5D,KACE,UAAU,CACb,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAC/D;CACF,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,cAAc;IAClE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAClC;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,gBAAgB,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/rpc/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,WAAW,EACX,gBAAgB,EACjB,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,cAAc,CAC7B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,IAAI,CAAA;IACV,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,WAAW,aAAa,CAC5B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,gBAAgB,EAChB,MAAM,EACN,gBAAgB,CACjB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,SAAS,cAAc,IAAI;KACzD,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;KACrD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC/D,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;KACpD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;AAErE;;GAEG;AACH,MAAM,MAAM,cAAc,CACxB,QAAQ,SAAS,cAAc,EAC/B,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IACvE;IACF,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAAA;CAC5D,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,SAAS,cAAc;IAC5D,OAAO,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC/C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACpE,MAAM,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC9C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,UAAU,CAAC,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB,CAAC,IAAI;IACxC,IAAI,EAAE,IAAI,CAAA;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC3D,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAC5C,OAAO,EAAE,oBAAoB,CAC3B,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAC5D,KACE,UAAU,CACb,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAC/D;CACF,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,cAAc;IAClE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAClC;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA"}

package/dist/src/types.d.ts

@@ -17,6 +17,13 @@ export * from './types/envelope';
 export * from './types/policy';
 export * from './types/varsig';
 export type ResolveProof = (proof: CID) => Promise<Delegation>;
+/**
+ * Check whether a delegation CID is revoked.
+ *
+ * Called once for each CID the delegation could have been issued under
+ * (up to 2 for ECDSA and 4 for EIP-191 signatures), since those signatures
+ * can be re-encoded into another valid signature with a different CID.
+ */
 export type IsRevoked = (cid: CID) => Promise<boolean>;
 export type VerifierResolver = Resolver;
 export type DidResolver = _DidResolver;
@@ -110,6 +117,32 @@ export interface InvocationFromOptions extends DelegationValidateOptions {
     bytes: Uint8Array;
     audience?: VerifiableDID;
     resolveProof: ResolveProof;
+    /**
+     * Store of seen invocations. When set, an invocation whose signed payload was
+     * already seen is rejected. Checked after all other validation passes.
+     *
+     * Executors MUST use one to prevent replay attacks.
+     */
+    replayStore?: ReplayStore;
+    /**
+     * Maximum lifetime in seconds accepted for the invocation. When set,
+     * invocations without an expiration, or expiring more than `maxTtl` seconds
+     * after `now`, are rejected. This keeps the replay store bounded.
+     */
+    maxTtl?: number;
+}
+/**
+ * Store of seen invocations, used to reject replays.
+ */
+export interface ReplayStore {
+    /**
+     * Atomically record `key` and resolve `true`, or resolve `false` if `key`
+     * was already recorded and has not expired.
+     *
+     * @param key - Replay key of the invocation, see {@link Invocation.replayKey}
+     * @param expiration - Unix time in seconds after which the key can be forgotten, or `null` to keep it forever
+     */
+    checkAndSet(key: string, expiration: number | null): Promise<boolean>;
 }
 /**
  * Capability types
@@ -215,5 +248,10 @@ export type ClientOptions = {
     store: Store;
     capabilities: Capability<StandardSchemaV1, string>[];
     verifierResolver: VerifierResolver;
+    /**
+     * Time to live in seconds of the invocations created by the client
+     * @default 300
+     */
+    ttl?: number;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAE9B,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC9D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AACtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,MAAM,GACN,UAAU,GACV,WAAW,CAAA;AACf,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,CAAA;AAC1D,MAAM,MAAM,UAAU,GAClB;KAAG,GAAG,IAAI,MAAM,GAAG,SAAS;CAAE,GAC9B;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS;CAAE,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE9D;;GAEG;AAEH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,gBAAgB;IAChE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;CAClB;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;IAClE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB;;OAEG;IACH,GAAG,EAAE,UAAU,EAAE,CAAA;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAChC,MAAM,SAAS,gBAAgB,EAC/B,GAAG,SAAS,MAAM,GAAG,MAAM;IAE3B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,gBAAgB,CACxE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,gBAAgB,CACtE,SAAQ,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACvD,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;AAE9C,MAAM,WAAW,cAAc,CAAC,MAAM,SAAS,gBAAgB;IAC7D,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,MAAM,OAAO,CAAC,MAAM,SAAS,gBAAgB,EAAE,MAAM,IAAI,CAC7D,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,KAC5B,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvB,MAAM,WAAW,YAAY,CAC3B,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EACxC,MAAM;IAEN,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI;IAC1E,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,UAAU,CAAC,MAAM,CAAC,CAAA;CACzD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,CACvB,MAAM,SAAS,MAAM,CACnB,MAAM,EACN,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CACnD,IACC;KACD,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,GAAG,EAAE,MAAM,MAAM,CAAC,GACvE;QACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QAC9C,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,GAAG,EAAE,MAAM,CAAA;KACZ,GACD,KAAK;CACV,CAAC,MAAM,MAAM,CAAC,CAAA;AAEf,MAAM,MAAM,QAAQ,CAClB,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,IACrE;IACF,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,OAAO,CAAA;CACb,EAAE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,IAAI,SAAS,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,IAAI;KACxE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,GAC3D,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GACtC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAClB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK;CACV,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,aAAa,CAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CACnE,IACC;IACF,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,EAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,IAAI,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAA;IACpD,gBAAgB,EAAE,gBAAgB,CAAA;CACnC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAE9B,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC9D;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AACtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,MAAM,GACN,UAAU,GACV,WAAW,CAAA;AACf,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,CAAA;AAC1D,MAAM,MAAM,UAAU,GAClB;KAAG,GAAG,IAAI,MAAM,GAAG,SAAS;CAAE,GAC9B;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS;CAAE,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE9D;;GAEG;AAEH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,gBAAgB;IAChE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;CAClB;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;IAClE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB;;OAEG;IACH,GAAG,EAAE,UAAU,EAAE,CAAA;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtE;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAChC,MAAM,SAAS,gBAAgB,EAC/B,GAAG,SAAS,MAAM,GAAG,MAAM;IAE3B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,gBAAgB,CACxE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,gBAAgB,CACtE,SAAQ,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACvD,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;AAE9C,MAAM,WAAW,cAAc,CAAC,MAAM,SAAS,gBAAgB;IAC7D,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,MAAM,OAAO,CAAC,MAAM,SAAS,gBAAgB,EAAE,MAAM,IAAI,CAC7D,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,KAC5B,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvB,MAAM,WAAW,YAAY,CAC3B,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EACxC,MAAM;IAEN,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI;IAC1E,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,UAAU,CAAC,MAAM,CAAC,CAAA;CACzD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,CACvB,MAAM,SAAS,MAAM,CACnB,MAAM,EACN,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CACnD,IACC;KACD,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,GAAG,EAAE,MAAM,MAAM,CAAC,GACvE;QACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QAC9C,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,GAAG,EAAE,MAAM,CAAA;KACZ,GACD,KAAK;CACV,CAAC,MAAM,MAAM,CAAC,CAAA;AAEf,MAAM,MAAM,QAAQ,CAClB,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,IACrE;IACF,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,OAAO,CAAA;CACb,EAAE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,IAAI,SAAS,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,IAAI;KACxE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,GAC3D,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GACtC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAClB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK;CACV,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,aAAa,CAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CACnE,IACC;IACF,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,EAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,IAAI,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAA;IACpD,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}

package/dist/src/utils.d.ts

@@ -17,6 +17,17 @@ export function nowInSeconds(): number;
  * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
  */
 export function cid(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<CID<any, 113, 18, 1>>;
+/**
+ * Replay key of a UCAN: the CID of its signature payload, the exact bytes the
+ * signature covers.
+ *
+ * Unlike {@link cid}, it does not depend on the signature bytes, so a second
+ * valid signature over the same payload (for example a malleated ECDSA
+ * signature) gets the same key.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export function replayKey(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<string>;
 /**
  * Check if a DID and signature type are compatible
  *
@@ -53,6 +64,21 @@ export function validateIssuerAndSignature(envelope: import("./types.js").Decode
  * @param {import('iso-did').Resolver} [didResolver]
  */
 export function verifySignature(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>, signatureVerifierResolver: import("iso-signatures/verifiers/resolver.js").Resolver, didResolver?: import("iso-did").Resolver): Promise<boolean>;
+/**
+ * Check if a command is covered by (equal to or a segment-wise child of) another command.
+ *
+ * Commands are compared by path segment, not by string prefix: `/crypto` covers
+ * `/crypto` and `/crypto/sign` but not `/cryptocurrency`. The command `/` covers
+ * every command.
+ *
+ * Both commands are expected to be valid per {@link assertIsValidCommand}, so
+ * `${parent}/` is always a real segment boundary.
+ *
+ * @param {string} parent - The broader command, e.g. from a delegation.
+ * @param {string} child - The command that must be attenuated from `parent`.
+ * @returns {boolean}
+ */
+export function commandCovers(parent: string, child: string): boolean;
 /**
  * Asserts that a UCAN command string is syntactically valid.
  * If the command is invalid, it throws a descriptive error.
@@ -97,13 +123,41 @@ export function assertArgs(args: unknown): void;
  * @returns {void}
  */
 export function assertMeta(meta: unknown): void;
+/**
+ * Signatures a signer could have issued that verify the same as `signature`.
+ *
+ * ECDSA signatures are malleable: `(r, s)` and `(r, n - s)` are both valid.
+ * EIP-191 signatures additionally carry a recovery byte `v` that wallets
+ * return as 27/28 or 0/1. Verifiers also accept EIP-155 style `v >= 35`,
+ * but no signer issues those for `personal_sign`, so they are not listed.
+ *
+ * The result always includes `signature` itself. Other algorithms (Ed25519,
+ * RSA) have a single valid signature.
+ *
+ * @param {import('iso-signatures/types').SignatureType} alg
+ * @param {Uint8Array} signature
+ * @returns {Uint8Array[]}
+ */
+export function equivalentSignatures(alg: import("iso-signatures/types").SignatureType, signature: Uint8Array): Uint8Array[];
+/**
+ * CIDs of every envelope that verifies the same as `envelope`: one per
+ * signature in {@link equivalentSignatures}, starting with the CID of
+ * `envelope` itself.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export function equivalentCids(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<CID<any, 113, 18, 1>[]>;
 /**
  * Assert that the input is not revoked.
  *
- * @param {import('multiformats/cid').CID} cid
+ * Checks every equivalent CID of the envelope (see {@link equivalentCids}),
+ * so re-encoding a revoked UCAN with another valid signature does not get it
+ * past a CID-based revocation list.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
  * @param {(cid: CID) => Promise<boolean>} [isRevokedFn]
  */
-export function assertNotRevoked(cid: import("multiformats/cid").CID, isRevokedFn?: (cid: CID) => Promise<boolean>): Promise<void>;
+export function assertNotRevoked(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>, isRevokedFn?: (cid: CID) => Promise<boolean>): Promise<void>;
 /**
  * Expiration or TTL (default 300 seconds)
  *

package/dist/src/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.js"],"names":[],"mappings":"AASA;;GAEG;AAEH;;;;;GAKG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC;;;EAe3D;AAED,uCAEC;AAED;;;GAGG;AACH,8BAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,iCAW3D;AAED;;;;;GAKG;AACH,2CAHW,OAAO,eAAe,EAAE,aAAa,WACrC,OAAO,sBAAsB,EAAE,aAAa,WA+BtD;AAED;;;;;GAKG;AACH,sCAHW,MAAM,GAAG,IAAI,QACb,MAAM,QAchB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,QACN,MAAM,QAMhB;AAED;;;;;GAKG;AACH,qDAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,OAAO,SAAS,EAAE,QAAQ,gBAYpC;AAED;;;;;;GAMG;AACH,0CAJW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,6BACjD,OAAO,sCAAsC,EAAE,QAAQ,gBACvD,OAAO,SAAS,EAAE,QAAQ,oBAwBpC;AAED;;;;;;;;;;;;;GAaG;AACH,8CAJW,MAAM,GAEJ,IAAI,CAuChB;AAED;;;;;;;;;;;;;GAaG;AACH,mCAXW,OAAO,GAEL,IAAI,CAehB;AACD;;;;GAIG;AACH,iCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,iCAJW,OAAO,GAEL,IAAI,CAWhB;AAED;;;;;GAKG;AACH,sCAHW,OAAO,kBAAkB,EAAE,GAAG,gBAC9B,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,iBAQxC;AAED;;;;;;GAMG;AACH,uCAHG;IAAgC,GAAG;IACV,GAAG;CAAC,iBAU/B;AAgED;;GAEG;AACH,qCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,gCAJW,OAAO,GACL,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAKjD;AAnFD,iJAeI;AACJ,4KAAyD;AAEzD,oGAGE;AAEF;;GAEG;AAEH;;GAEG;AACH,mKA4BI;AAEJ,kLAA8C;uBApCjC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC;iCAjUP,YAAY;oBARtB,kBAAkB;oBADlB,SAAS;kBAGX,QAAQ"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.js"],"names":[],"mappings":"AAUA;;GAEG;AAEH;;;;;GAKG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC;;;EAe3D;AAED,uCAEC;AAED;;;GAGG;AACH,8BAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,iCAW3D;AAED;;;;;;;;;GASG;AACH,oCAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,mBAM3D;AAED;;;;;GAKG;AACH,2CAHW,OAAO,eAAe,EAAE,aAAa,WACrC,OAAO,sBAAsB,EAAE,aAAa,WA+BtD;AAED;;;;;GAKG;AACH,sCAHW,MAAM,GAAG,IAAI,QACb,MAAM,QAchB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,QACN,MAAM,QAMhB;AAED;;;;;GAKG;AACH,qDAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,OAAO,SAAS,EAAE,QAAQ,gBAYpC;AAED;;;;;;GAMG;AACH,0CAJW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,6BACjD,OAAO,sCAAsC,EAAE,QAAQ,gBACvD,OAAO,SAAS,EAAE,QAAQ,oBAwBpC;AAED;;;;;;;;;;;;;GAaG;AACH,sCAJW,MAAM,SACN,MAAM,GACJ,OAAO,CAKnB;AAED;;;;;;;;;;;;;GAaG;AACH,8CAJW,MAAM,GAEJ,IAAI,CAuChB;AAED;;;;;;;;;;;;;GAaG;AACH,mCAXW,OAAO,GAEL,IAAI,CAehB;AACD;;;;GAIG;AACH,iCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,iCAJW,OAAO,GAEL,IAAI,CAWhB;AAqDD;;;;;;;;;;;;;;GAcG;AACH,0CAJW,OAAO,sBAAsB,EAAE,aAAa,aAC5C,UAAU,GACR,UAAU,EAAE,CAyCxB;AAED;;;;;;GAMG;AACH,yCAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,mCAQ3D;AAED;;;;;;;;;GASG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,iBAWxC;AAED;;;;;;GAMG;AACH,uCAHG;IAAgC,GAAG;IACV,GAAG;CAAC,iBAU/B;AAgED;;GAEG;AACH,qCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,gCAJW,OAAO,GACL,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAKjD;AAnFD,iJAeI;AACJ,4KAAyD;AAEzD,oGAGE;AAEF;;GAEG;AAEH;;GAEG;AACH,mKA4BI;AAEJ,kLAA8C;uBApCjC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC;iCAreP,YAAY;oBARtB,kBAAkB;oBADlB,SAAS;kBAGX,QAAQ"}

package/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Hugo Dias <hugomrdias@gmail.com> (hugodias.me)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iso-ucan",
   "type": "module",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Isomorphic UCAN",
   "author": "Hugo Dias <hugomrdias@gmail.com> (hugodias.me)",
   "license": "MIT",
@@ -44,6 +44,10 @@
       "types": "./dist/src/varsig.d.ts",
       "default": "./src/varsig.js"
     },
+    "./replay": {
+      "types": "./dist/src/replay.d.ts",
+      "default": "./src/replay.js"
+    },
     "./policy": {
       "types": "./dist/src/policy.d.ts",
       "default": "./src/policy.js"
@@ -81,6 +85,9 @@
       "policy": [
         "dist/src/policy"
       ],
+      "replay": [
+        "dist/src/replay"
+      ],
       "rpc": [
         "dist/src/rpc/index"
       ],
@@ -95,24 +102,25 @@
     "dist/src/**/*.d.ts.map"
   ],
   "dependencies": {
-    "@ipld/dag-cbor": "^9.2.5",
+    "@ipld/dag-cbor": "^10.0.2",
     "@standard-schema/spec": "^1.1.0",
     "@standard-schema/utils": "^0.3.0",
     "iobuffer": "^6.0.1",
-    "iso-kv": "^3.1.1",
-    "iso-web": "^2.1.0",
-    "it-merge": "^3.0.12",
-    "multiformats": "^13.4.1",
-    "zod": "^4.3.6",
-    "iso-base": "^4.3.1",
-    "iso-did": "^2.1.1",
-    "iso-signatures": "^0.5.1"
+    "iso-base": "^4.4.0",
+    "iso-did": "^3.0.0",
+    "iso-kv": "^3.2.0",
+    "iso-signatures": "^0.5.2",
+    "iso-web": "^4.0.0",
+    "it-merge": "^3.0.15",
+    "multiformats": "^14.0.5",
+    "zod": "^4.6.5"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
+    "@types/node": "^26.6.2",
     "delay": "^7.0.0",
-    "playwright-test": "^14.1.13",
-    "typescript": "5.9.3"
+    "playwright-test": "^15.0.1",
+    "typescript": "^6.0.3",
+    "viem": "~2.56.9"
   },
   "publishConfig": {
     "provenance": true

package/readme.md

@@ -1,6 +1,23 @@
 # iso-ucan [![NPM Version](https://img.shields.io/npm/v/iso-ucan.svg)](https://www.npmjs.com/package/iso-ucan) [![License](https://img.shields.io/npm/l/iso-ucan.svg)](https://github.com/hugomrdias/iso-repo/blob/main/license) [![iso-ucan](https://github.com/hugomrdias/iso-repo/actions/workflows/iso-ucan.yml/badge.svg)](https://github.com/hugomrdias/iso-repo/actions/workflows/iso-ucan.yml)
 
-> Isomorphic UCAN
+> Isomorphic UCAN primitives for delegations, invocations, proof storage, and
+> typed RPC.
+
+## Overview
+
+UCAN is a local-first authorization model where permissions are
+cryptographically signed, delegated, and verified without relying on a central
+authority. See [ucan.xyz](https://ucan.xyz/) for more background.
+
+`iso-ucan` provides:
+
+- Typed capabilities backed by schema validation.
+- Delegation and invocation builders for UCAN authorization flows.
+- Proof storage with pluggable `iso-kv` drivers.
+- Signer and verifier support through `iso-signatures`.
+- EIP-191 wallet signing support through `iso-signatures` `EIP191Signer`.
+- Filsnap-powered UCAN signature insights in MetaMask signature popups.
+- A typed RPC layer for request/response APIs built on UCAN invocations.
 
 ## Install
 
@@ -43,39 +60,100 @@ const invoker = await EdDSASigner.generate()
 const nowInSeconds = Math.floor(Date.now() / 1000)
 
 const ownerDelegation = await AccountCap.delegate({
-iss: owner,
-aud: bob,
-sub: owner,
-pol: [],
-exp: nowInSeconds + 1000,
+  iss: owner,
+  aud: bob,
+  sub: owner,
+  pol: [],
+  exp: nowInSeconds + 1000,
 })
 
 await store.set(ownerDelegation)
 
 const bobDelegation = await AccountCap.delegate({
-iss: bob,
-aud: invoker,
-sub: owner,
-pol: [],
-exp: nowInSeconds + 1000,
+  iss: bob,
+  aud: invoker,
+  sub: owner,
+  pol: [],
+  exp: nowInSeconds + 1000,
 })
 
 await store.set(bobDelegation)
 
 const invocation = await AccountCreateCap.invoke({
-iss: invoker,
-sub: owner,
-args: {
+  iss: invoker,
+  sub: owner,
+  args: {
     type: 'account',
     properties: {
-    name: 'John Doe',
+      name: 'John Doe',
     },
-},
-store,
-exp: nowInSeconds + 1000,
+  },
+  store,
+  exp: nowInSeconds + 1000,
 })
 ```
 
+## Replay protection
+
+The UCAN spec requires executors to reject replayed invocations. Pass a
+`replayStore` to `Invocation.from` so an invocation is accepted only once, and
+set `maxTtl` so invocations must expire soon, which keeps the store bounded:
+
+```ts
+import { Invocation } from 'iso-ucan/invocation'
+import { KVReplayStore } from 'iso-ucan/replay'
+
+const replayStore = new KVReplayStore() // in memory by default
+
+const invocation = await Invocation.from({
+  bytes,
+  audience: executor,
+  verifierResolver,
+  resolveProof: (cid) => store.resolveProof(cid),
+  replayStore,
+  maxTtl: 300,
+})
+```
+
+The store is keyed on `invocation.replayKey`, the CID of the signed payload.
+Do not deduplicate on `invocation.cid`: it also covers the signature, and
+some signature algorithms (such as ECDSA) accept more than one valid signature
+for the same payload.
+
+`KVReplayStore` is atomic within one process only. When several processes or
+instances execute invocations, implement the `ReplayStore` interface on a
+shared store with an atomic set-if-absent, such as Redis `SET NX` or SQL
+`INSERT ... ON CONFLICT DO NOTHING`.
+
+## Revocation
+
+Pass `isRevoked` to `Delegation.from`, `Delegation#validate` or
+`Invocation.from` to reject revoked delegations by CID. Because ECDSA and
+EIP-191 signatures can be re-encoded into another valid signature, a revoked
+delegation can reappear under a different CID. `iso-ucan` therefore calls
+`isRevoked` with every CID the delegation could have been issued under (up to
+2 for ECDSA and 4 for EIP-191), and rejects it if any is revoked.
+
+## EIP-191 wallet signing
+
+`iso-ucan` can use EIP-191 wallet signatures through `EIP191Signer` from
+`iso-signatures`. That lets UCAN delegations and invocations be issued by an
+Ethereum account exposed through an EIP-1193 provider, such as an injected
+MetaMask wallet, while verification is handled by the matching EIP-191 verifier
+from `iso-signatures`.
+
+[`examples/eip191`](../../examples/eip191) shows this flow in a browser web
+app. It uses `wagmi` to connect the wallet, wraps the provider in
+`EIP191Signer`, then creates and verifies UCAN delegations and invocations
+directly in the browser.
+
+The example uses `filsnap-adapter` to install or enable
+[Filsnap](https://github.com/filecoin-project/filsnap), the Filecoin Wallet
+MetaMask Snap. Filsnap supports UCAN signature insights for EIP-191 signers, so
+when the app asks MetaMask to sign a UCAN delegation, the MetaMask signature
+popup can show a readable summary of the issuer, audience, subject, command,
+expiration, and raw payload.
+
 ## RPC
 
 `iso-ucan/rpc` is a small request/response layer on top of UCAN
@@ -177,6 +255,14 @@ app.post('/rpc', (c) => rpc(c.req.raw))
 serve({ fetch: app.fetch, port: 3000 })
 ```
 
+`defineServer` rejects replayed invocations with an in-memory `KVReplayStore`
+by default. Pass `replayStore` to share it between server instances.
+
+It also rejects invocations that never expire or expire more than `maxTtl`
+seconds from now (default 600). Pass a different `maxTtl` to change the
+limit, or `null` to accept any expiration. See
+[Replay protection](#replay-protection).
+
 ### Client
 
 ```ts
@@ -189,7 +275,11 @@ const client = defineClient(Protocol, {
   store,
   verifierResolver,
 })
+```
 
+Invocations created by the client expire after `ttl` seconds (default 300).
+
+```ts
 // `args` and the returned receipt are typed from the protocol entry for `cmd`.
 const r = await client.request({ cmd: '/todo/complete', args: { id: '42' } })
 

package/src/delegation.js

@@ -89,7 +89,7 @@ export class Delegation {
     await verifySignature(envelope, verifierResolver, didResolveOptions)
 
     const _cid = await cid(envelope)
-    await assertNotRevoked(_cid, options.isRevoked)
+    await assertNotRevoked(envelope, options.isRevoked)
 
     return new Delegation(envelope, bytes, _cid)
   }
@@ -182,7 +182,7 @@ export class Delegation {
       options.verifierResolver,
       options.didResolver
     )
-    await assertNotRevoked(this.cid, options.isRevoked)
+    await assertNotRevoked(this.envelope, options.isRevoked)
 
     return true
   }

package/src/invocation.js

@@ -9,7 +9,10 @@ import {
   assertMeta,
   assertNonce,
   cid,
+  commandCovers,
   expOrTtl,
+  nowInSeconds,
+  replayKey,
   verifySignature,
 } from './utils.js'
 
@@ -32,19 +35,32 @@ export class Invocation {
    */
   cid
 
+  /**
+   * Key to deduplicate this invocation on: the CID of its signature payload.
+   *
+   * Use this instead of {@link Invocation.cid} to detect replays. The CID
+   * covers the signature bytes, and some signature algorithms (e.g. ECDSA)
+   * accept more than one valid signature for the same payload.
+   *
+   * @type {string}
+   */
+  replayKey
+
   /**
    *
    * @param {import("./types.js").DecodedEnvelope<'inv'>} envelope
    * @param {Uint8Array} bytes
    * @param {CID} cid
    * @param {Delegation[]} delegations
+   * @param {string} replayKey
    */
-  constructor(envelope, bytes, cid, delegations) {
+  constructor(envelope, bytes, cid, delegations, replayKey) {
     this.envelope = envelope
     this.payload = envelope.payload
     this.bytes = bytes
     this.cid = cid
     this.delegations = delegations
+    this.replayKey = replayKey
   }
 
   /**
@@ -95,8 +111,24 @@ export class Invocation {
       assertProofs(envelope.payload, proofs)
     }
 
+    if (options.maxTtl !== undefined) {
+      assertMaxTtl(envelope.payload.exp, options.maxTtl, options.now)
+    }
+
+    const _replayKey = await replayKey(envelope)
+
+    // Must run last, so only fully validated invocations are recorded
+    if (
+      options.replayStore &&
+      !(await options.replayStore.checkAndSet(_replayKey, envelope.payload.exp))
+    ) {
+      throw new Error(
+        `UCAN Invocation replay detected, already seen ${_replayKey}`
+      )
+    }
+
     const _cid = await cid(envelope)
-    return new Invocation(envelope, bytes, _cid, proofs)
+    return new Invocation(envelope, bytes, _cid, proofs, _replayKey)
   }
 
   /**
@@ -157,7 +189,31 @@ export class Invocation {
       version: Envelope.VERSION,
     }
 
-    return new Invocation(envelope, bytes, await cid(envelope), options.prf)
+    return new Invocation(
+      envelope,
+      bytes,
+      await cid(envelope),
+      options.prf,
+      await replayKey(envelope)
+    )
+  }
+}
+
+/**
+ * @param {number | null} exp
+ * @param {number} maxTtl
+ * @param {number} [now]
+ */
+function assertMaxTtl(exp, maxTtl, now = nowInSeconds()) {
+  if (exp === null) {
+    throw new Error(
+      `UCAN Invocation must expire within ${maxTtl} seconds, but has no expiration`
+    )
+  }
+  if (exp > now + maxTtl) {
+    throw new Error(
+      `UCAN Invocation must expire within ${maxTtl} seconds. Received: ${exp} but current time is ${now}`
+    )
   }
 }
 
@@ -235,9 +291,9 @@ export function assertProofs(payload, proofs) {
       )
     }
 
-    if (!next.cmd.startsWith(current.cmd)) {
+    if (!commandCovers(current.cmd, next.cmd)) {
       throw new Error(
-        `UCAN Invocation command mismatch, expected ${current.cmd} to be a broader than ${next.cmd}`
+        `UCAN Invocation command mismatch, expected ${current.cmd} to cover ${next.cmd}`
       )
     }
   }

package/src/replay.js

@@ -0,0 +1,58 @@
+import { KV } from 'iso-kv'
+import { MemoryDriver } from 'iso-kv/drivers/memory.js'
+
+/**
+ * @import {Driver} from 'iso-kv'
+ * @import {ReplayStore} from './types.js'
+ */
+
+/**
+ * Replay store backed by an `iso-kv` driver.
+ *
+ * Keys are kept until the invocation expires, or forever when the invocation
+ * has no expiration.
+ *
+ * `checkAndSet` is atomic within one JavaScript realm only: calls are
+ * serialized through an in-process queue. When several processes or instances
+ * share a driver, implement {@link ReplayStore} on top of an atomic
+ * set-if-absent operation instead (for example Redis `SET NX` or SQL
+ * `INSERT ... ON CONFLICT DO NOTHING`).
+ *
+ * @implements {ReplayStore}
+ */
+export class KVReplayStore {
+  /** @type {KV} */
+  kv
+
+  /** @type {Promise<unknown>} */
+  #queue = Promise.resolve()
+
+  /**
+   * @param {Driver} [driver] - Defaults to a {@link MemoryDriver}.
+   */
+  constructor(driver = new MemoryDriver()) {
+    this.kv = new KV({ driver })
+  }
+
+  /**
+   * Record `key` and return `true`, or return `false` if it was already
+   * recorded and has not expired.
+   *
+   * @param {string} key
+   * @param {number | null} expiration - Unix time in seconds, or `null` to keep forever
+   * @returns {Promise<boolean>}
+   */
+  checkAndSet(key, expiration) {
+    const result = this.#queue.then(async () => {
+      if (await this.kv.has([key])) {
+        return false
+      }
+      await this.kv.set([key], true, { expiration })
+      return true
+    })
+    this.#queue = result.catch(() => {
+      // Errors are reported to the caller, keep the queue going
+    })
+    return result
+  }
+}

package/src/rpc/client.js

@@ -39,7 +39,7 @@ export function defineClient(commands, options) {
         iss: options.issuer,
         sub: options.audience.did,
         store: options.store,
-        exp: null,
+        ttl: options.ttl,
         verifierResolver: options.verifierResolver,
       })
 
@@ -77,7 +77,7 @@ export function defineClient(commands, options) {
         iss: options.issuer,
         sub: options.audience.did,
         store: options.store,
-        exp: null,
+        ttl: options.ttl,
         verifierResolver: options.verifierResolver,
       })
     },

package/src/rpc/index.js

@@ -7,4 +7,4 @@ export {
   receiptResult,
   receiptServerError,
 } from './receipt.js'
-export { defineServer } from './server.js'
+export { DEFAULT_MAX_TTL, defineServer } from './server.js'

package/src/rpc/server.js

@@ -1,5 +1,6 @@
 import { u8 } from 'iso-base/utils'
 import { Invocation } from '../invocation.js'
+import { KVReplayStore } from '../replay.js'
 
 /**
  * @import {
@@ -10,6 +11,12 @@ import { Invocation } from '../invocation.js'
  * @import {ReceiptServerError} from './receipt.js'
  */
 
+/**
+ * Default maximum invocation lifetime accepted by {@link defineServer}, in
+ * seconds. Twice the client default `ttl`, to tolerate clock skew.
+ */
+export const DEFAULT_MAX_TTL = 600
+
 /**
  * Build a {@link ReceiptServerError} payload.
  *
@@ -56,6 +63,13 @@ function serverErrorResponse(status, message, extra) {
  * schema, and dispatches to the corresponding handler in `options.handlers`.
  * The handler's return value is serialized to JSON.
  *
+ * Each invocation is executed at most once: replays are rejected using
+ * `options.replayStore`, which defaults to an in-memory {@link KVReplayStore}.
+ * Pass a shared store when running more than one server instance.
+ *
+ * Invocations must expire within `options.maxTtl` seconds, which defaults to
+ * {@link DEFAULT_MAX_TTL}. Pass `null` to accept any expiration.
+ *
  * @template {CommandsRecord} Commands
  * @param {Commands} commands
  * @param {DefineServerOptions<Commands>} options
@@ -70,6 +84,11 @@ export function defineServer(commands, options) {
 
   /** @type {Record<string, (opts: any) => unknown>} */
   const handlers = options.handlers
+  const replayStore = options.replayStore ?? new KVReplayStore()
+  const maxTtl =
+    options.maxTtl === undefined
+      ? DEFAULT_MAX_TTL
+      : (options.maxTtl ?? undefined)
 
   return async (request) => {
     /** @type {Invocation | undefined} */
@@ -83,6 +102,8 @@ export function defineServer(commands, options) {
         audience: options.signer,
         verifierResolver: options.verifierResolver,
         resolveProof: options.store.resolveProof.bind(options.store),
+        replayStore,
+        maxTtl,
       })
     } catch (error) {
       return serverErrorResponse(

package/src/rpc/types.ts

@@ -3,7 +3,12 @@ import type { ISigner } from 'iso-signatures/types'
 import type { Capability } from '../capability.js'
 import type { Invocation } from '../invocation.js'
 import type { Store } from '../store.js'
-import type { ClientOptions, Promisable, VerifierResolver } from '../types.js'
+import type {
+  ClientOptions,
+  Promisable,
+  ReplayStore,
+  VerifierResolver,
+} from '../types.js'
 
 export interface CommandOptions<
   Args extends StandardSchemaV1,
@@ -145,6 +150,22 @@ export interface DefineServerOptions<Commands extends CommandsRecord> {
   signer: ISigner
   store: Store
   verifierResolver: VerifierResolver
+  /**
+   * Store of seen invocations, used to reject replays.
+   * Use a store shared by all instances when running more than one server.
+   *
+   * @default new KVReplayStore() (in memory)
+   */
+  replayStore?: ReplayStore
+  /**
+   * Maximum lifetime in seconds accepted for invocations. Invocations without
+   * an expiration, or expiring later than `maxTtl` seconds from now, are
+   * rejected. This keeps the replay store bounded. Pass `null` to accept any
+   * expiration, including none.
+   *
+   * @default 600
+   */
+  maxTtl?: number | null
 }
 
 /**

package/src/types.ts

@@ -19,6 +19,13 @@ export * from './types/policy'
 export * from './types/varsig'
 
 export type ResolveProof = (proof: CID) => Promise<Delegation>
+/**
+ * Check whether a delegation CID is revoked.
+ *
+ * Called once for each CID the delegation could have been issued under
+ * (up to 2 for ECDSA and 4 for EIP-191 signatures), since those signatures
+ * can be re-encoded into another valid signature with a different CID.
+ */
 export type IsRevoked = (cid: CID) => Promise<boolean>
 export type VerifierResolver = Resolver
 export type DidResolver = _DidResolver
@@ -126,6 +133,33 @@ export interface InvocationFromOptions extends DelegationValidateOptions {
   bytes: Uint8Array
   audience?: VerifiableDID
   resolveProof: ResolveProof
+  /**
+   * Store of seen invocations. When set, an invocation whose signed payload was
+   * already seen is rejected. Checked after all other validation passes.
+   *
+   * Executors MUST use one to prevent replay attacks.
+   */
+  replayStore?: ReplayStore
+  /**
+   * Maximum lifetime in seconds accepted for the invocation. When set,
+   * invocations without an expiration, or expiring more than `maxTtl` seconds
+   * after `now`, are rejected. This keeps the replay store bounded.
+   */
+  maxTtl?: number
+}
+
+/**
+ * Store of seen invocations, used to reject replays.
+ */
+export interface ReplayStore {
+  /**
+   * Atomically record `key` and resolve `true`, or resolve `false` if `key`
+   * was already recorded and has not expired.
+   *
+   * @param key - Replay key of the invocation, see {@link Invocation.replayKey}
+   * @param expiration - Unix time in seconds after which the key can be forgotten, or `null` to keep it forever
+   */
+  checkAndSet(key: string, expiration: number | null): Promise<boolean>
 }
 
 /**
@@ -276,4 +310,9 @@ export type ClientOptions = {
   store: Store
   capabilities: Capability<StandardSchemaV1, string>[]
   verifierResolver: VerifierResolver
+  /**
+   * Time to live in seconds of the invocations created by the client
+   * @default 300
+   */
+  ttl?: number
 }

package/src/utils.js

@@ -1,4 +1,5 @@
 import * as dagCbor from '@ipld/dag-cbor'
+import { equals } from 'iso-base/utils'
 import { DID } from 'iso-did'
 import { CID } from 'multiformats/cid'
 import { sha256 } from 'multiformats/hashes/sha2'
@@ -50,6 +51,22 @@ export async function cid(envelope) {
   return CID.create(1, dagCbor.code, hash)
 }
 
+/**
+ * Replay key of a UCAN: the CID of its signature payload, the exact bytes the
+ * signature covers.
+ *
+ * Unlike {@link cid}, it does not depend on the signature bytes, so a second
+ * valid signature over the same payload (for example a malleated ECDSA
+ * signature) gets the same key.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export async function replayKey(envelope) {
+  const hash = await sha256.digest(dagCbor.encode(signaturePayload(envelope)))
+
+  return CID.create(1, dagCbor.code, hash).toString()
+}
+
 /**
  * Check if a DID and signature type are compatible
  *
@@ -168,6 +185,25 @@ export async function verifySignature(
   return true
 }
 
+/**
+ * Check if a command is covered by (equal to or a segment-wise child of) another command.
+ *
+ * Commands are compared by path segment, not by string prefix: `/crypto` covers
+ * `/crypto` and `/crypto/sign` but not `/cryptocurrency`. The command `/` covers
+ * every command.
+ *
+ * Both commands are expected to be valid per {@link assertIsValidCommand}, so
+ * `${parent}/` is always a real segment boundary.
+ *
+ * @param {string} parent - The broader command, e.g. from a delegation.
+ * @param {string} child - The command that must be attenuated from `parent`.
+ * @returns {boolean}
+ */
+export function commandCovers(parent, child) {
+  if (parent === '/') return child.startsWith('/')
+  return child === parent || child.startsWith(`${parent}/`)
+}
+
 /**
  * Asserts that a UCAN command string is syntactically valid.
  * If the command is invalid, it throws a descriptive error.
@@ -274,17 +310,146 @@ export function assertMeta(meta) {
   }
 }
 
+/**
+ * ECDSA curve orders by signature algorithm, with the byte length of each
+ * signature component.
+ *
+ * @type {Record<string, {n: bigint, size: number}>}
+ */
+const ECDSA_CURVES = {
+  ES256: {
+    n: 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n,
+    size: 32,
+  },
+  ES384: {
+    n: 0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973n,
+    size: 48,
+  },
+  ES512: {
+    n: 0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409n,
+    size: 66,
+  },
+  ES256K: {
+    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
+    size: 32,
+  },
+  EIP191: {
+    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
+    size: 32,
+  },
+}
+
+/**
+ * @param {Uint8Array} bytes
+ */
+function bytesToBigInt(bytes) {
+  let n = 0n
+  for (const b of bytes) n = (n << 8n) | BigInt(b)
+  return n
+}
+
+/**
+ * @param {bigint} n
+ * @param {number} size
+ */
+function bigIntToBytes(n, size) {
+  const out = new Uint8Array(size)
+  for (let i = size - 1; i >= 0; i--) {
+    out[i] = Number(n & 0xffn)
+    n >>= 8n
+  }
+  return out
+}
+
+/**
+ * Signatures a signer could have issued that verify the same as `signature`.
+ *
+ * ECDSA signatures are malleable: `(r, s)` and `(r, n - s)` are both valid.
+ * EIP-191 signatures additionally carry a recovery byte `v` that wallets
+ * return as 27/28 or 0/1. Verifiers also accept EIP-155 style `v >= 35`,
+ * but no signer issues those for `personal_sign`, so they are not listed.
+ *
+ * The result always includes `signature` itself. Other algorithms (Ed25519,
+ * RSA) have a single valid signature.
+ *
+ * @param {import('iso-signatures/types').SignatureType} alg
+ * @param {Uint8Array} signature
+ * @returns {Uint8Array[]}
+ */
+export function equivalentSignatures(alg, signature) {
+  const curve = ECDSA_CURVES[alg]
+  if (!curve) {
+    return [signature]
+  }
+
+  const { n, size } = curve
+  const isEip191 = alg === 'EIP191'
+  if (signature.length !== size * 2 + (isEip191 ? 1 : 0)) {
+    return [signature]
+  }
+
+  const r = signature.subarray(0, size)
+  const s = bytesToBigInt(signature.subarray(size, size * 2))
+  if (s === 0n || s >= n) {
+    return [signature]
+  }
+  const sFlipped = bigIntToBytes(n - s, size)
+
+  if (!isEip191) {
+    return [signature, new Uint8Array([...r, ...sFlipped])]
+  }
+
+  const v = signature[size * 2]
+  /** @type {number} */
+  let parity
+  if (v === 0 || v === 27) parity = 0
+  else if (v === 1 || v === 28) parity = 1
+  else if (v >= 35) parity = v % 2 === 0 ? 1 : 0
+  else return [signature]
+
+  const sBytes = signature.subarray(size, size * 2)
+  const candidates = [
+    new Uint8Array([...r, ...sBytes, parity]),
+    new Uint8Array([...r, ...sBytes, parity + 27]),
+    new Uint8Array([...r, ...sFlipped, 1 - parity]),
+    new Uint8Array([...r, ...sFlipped, 28 - parity]),
+  ]
+  return [signature, ...candidates.filter((c) => !equals(c, signature))]
+}
+
+/**
+ * CIDs of every envelope that verifies the same as `envelope`: one per
+ * signature in {@link equivalentSignatures}, starting with the CID of
+ * `envelope` itself.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export async function equivalentCids(envelope) {
+  return await Promise.all(
+    equivalentSignatures(envelope.alg, envelope.signature).map((signature) =>
+      cid({ ...envelope, signature })
+    )
+  )
+}
+
 /**
  * Assert that the input is not revoked.
  *
- * @param {import('multiformats/cid').CID} cid
+ * Checks every equivalent CID of the envelope (see {@link equivalentCids}),
+ * so re-encoding a revoked UCAN with another valid signature does not get it
+ * past a CID-based revocation list.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
  * @param {(cid: CID) => Promise<boolean>} [isRevokedFn]
  */
-export async function assertNotRevoked(cid, isRevokedFn) {
-  isRevokedFn = isRevokedFn ?? (async () => false)
-  const isRevoked = await isRevokedFn(cid)
-  if (isRevoked) {
-    throw new Error('UCAN revoked')
+export async function assertNotRevoked(envelope, isRevokedFn) {
+  if (!isRevokedFn) {
+    return
+  }
+  for (const c of await equivalentCids(envelope)) {
+    if (await isRevokedFn(c)) {
+      throw new Error('UCAN revoked')
+    }
   }
 }