iso-ucan 0.5.1 → 0.5.2

package/dist/src/invocation.d.ts

@@ -27,8 +27,9 @@ export class Invocation {
      * @param {Uint8Array} bytes
      * @param {CID} cid
      * @param {Delegation[]} delegations
+     * @param {string} replayKey
      */
-    constructor(envelope: import("./types.js").DecodedEnvelope<"inv">, bytes: Uint8Array, cid: CID, delegations: Delegation[]);
+    constructor(envelope: import("./types.js").DecodedEnvelope<"inv">, bytes: Uint8Array, cid: CID, delegations: Delegation[], replayKey: string);
     /**
      * @type {Delegation[]}
      */
@@ -37,6 +38,16 @@ export class Invocation {
      * @type {CID}
      */
     cid: CID;
+    /**
+     * Key to deduplicate this invocation on: the CID of its signature payload.
+     *
+     * Use this instead of {@link Invocation.cid} to detect replays. The CID
+     * covers the signature bytes, and some signature algorithms (e.g. ECDSA)
+     * accept more than one valid signature for the same payload.
+     *
+     * @type {string}
+     */
+    replayKey: string;
     envelope: import("./types.js").DecodedEnvelope<"inv">;
     payload: import("./types.js").InvocationPayload;
     bytes: Uint8Array<ArrayBufferLike>;

package/dist/src/invocation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/invocation.js"],"names":[],"mappings":"AAsLA;;;;GAIG;AACH,sCAHW,OAAO,YAAY,EAAE,iBAAiB,UACtC,UAAU,EAAE,WA6DtB;AAtOD;;;GAGG;AAEH;;GAEG;AACH;IA0BE;;;OAGG;IACH,qBAFW,OAAO,YAAY,EAAE,qBAAqB,uBAgDpD;IAED;;OAEG;IACH,uBAFW,OAAO,YAAY,EAAE,iBAAiB,uBA0DhD;IA9HD;;;;;;OAMG;IACH,sBALW,OAAO,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,SAC3C,UAAU,OACV,GAAG,eACH,UAAU,EAAE,EAQtB;IAvBD;;OAEG;IACH,aAFU,UAAU,EAAE,CAEX;IAEX;;OAEG;IACH,KAFU,GAAG,CAEV;IAUD,sDAAwB;IACxB,gDAA+B;IAC/B,mCAAkB;CAqHrB;gCAjJ4B,iBAAiB;yBACxB,cAAc"}
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/invocation.js"],"names":[],"mappings":"AA6OA;;;;GAIG;AACH,sCAHW,OAAO,YAAY,EAAE,iBAAiB,UACtC,UAAU,EAAE,WA6DtB;AA3RD;;;GAGG;AAEH;;GAEG;AACH;IAuCE;;;OAGG;IACH,qBAFW,OAAO,YAAY,EAAE,qBAAqB,uBAgEpD;IAED;;OAEG;IACH,uBAFW,OAAO,YAAY,EAAE,iBAAiB,uBAgEhD;IAtJD;;;;;;;OAOG;IACH,sBANW,OAAO,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,SAC3C,UAAU,OACV,GAAG,eACH,UAAU,EAAE,aACZ,MAAM,EAShB;IApCD;;OAEG;IACH,aAFU,UAAU,EAAE,CAEX;IAEX;;OAEG;IACH,KAFU,GAAG,CAEV;IAEH;;;;;;;;OAQG;IACH,WAFU,MAAM,CAEP;IAWP,sDAAwB;IACxB,gDAA+B;IAC/B,mCAAkB;CA4IrB;gCApL4B,iBAAiB;yBACxB,cAAc"}

package/dist/src/replay.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @import {Driver} from 'iso-kv'
+ * @import {ReplayStore} from './types.js'
+ */
+/**
+ * Replay store backed by an `iso-kv` driver.
+ *
+ * Keys are kept until the invocation expires, or forever when the invocation
+ * has no expiration.
+ *
+ * `checkAndSet` is atomic within one JavaScript realm only: calls are
+ * serialized through an in-process queue. When several processes or instances
+ * share a driver, implement {@link ReplayStore} on top of an atomic
+ * set-if-absent operation instead (for example Redis `SET NX` or SQL
+ * `INSERT ... ON CONFLICT DO NOTHING`).
+ *
+ * @implements {ReplayStore}
+ */
+export class KVReplayStore implements ReplayStore {
+    /**
+     * @param {Driver} [driver] - Defaults to a {@link MemoryDriver}.
+     */
+    constructor(driver?: Driver);
+    /** @type {KV} */
+    kv: KV;
+    /**
+     * Record `key` and return `true`, or return `false` if it was already
+     * recorded and has not expired.
+     *
+     * @param {string} key
+     * @param {number | null} expiration - Unix time in seconds, or `null` to keep forever
+     * @returns {Promise<boolean>}
+     */
+    checkAndSet(key: string, expiration: number | null): Promise<boolean>;
+    #private;
+}
+import type { ReplayStore } from './types.js';
+import { KV } from 'iso-kv';
+import type { Driver } from 'iso-kv';
+//# sourceMappingURL=replay.d.ts.map

package/dist/src/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/replay.js"],"names":[],"mappings":"AAGA;;;GAGG;AAEH;;;;;;;;;;;;;GAaG;AACH;IAOE;;OAEG;IACH,qBAFW,MAAM,EAIhB;IAXD,iBAAiB;IACjB,IADW,EAAE,CACX;IAYF;;;;;;;OAOG;IACH,iBAJW,MAAM,cACN,MAAM,GAAG,IAAI,GACX,OAAO,CAAC,OAAO,CAAC,CAc5B;;CACF;iCApD6B,YAAY;mBALvB,QAAQ;4BAIF,QAAQ"}

package/dist/src/rpc/index.d.ts

@@ -1,5 +1,5 @@
 export { defineClient } from "./client.js";
 export { defineCommand } from "./command.js";
-export { defineServer } from "./server.js";
 export { cidSchema, receipt, receiptError, receiptResult, receiptServerError } from "./receipt.js";
+export { DEFAULT_MAX_TTL, defineServer } from "./server.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/src/rpc/server.d.ts

@@ -6,12 +6,32 @@
  * schema, and dispatches to the corresponding handler in `options.handlers`.
  * The handler's return value is serialized to JSON.
  *
+ * Each invocation is executed at most once: replays are rejected using
+ * `options.replayStore`, which defaults to an in-memory {@link KVReplayStore}.
+ * Pass a shared store when running more than one server instance.
+ *
+ * Invocations must expire within `options.maxTtl` seconds, which defaults to
+ * {@link DEFAULT_MAX_TTL}. Pass `null` to accept any expiration.
+ *
  * @template {CommandsRecord} Commands
  * @param {Commands} commands
  * @param {DefineServerOptions<Commands>} options
  * @returns {ServerRequestHandler}
  */
 export function defineServer<Commands extends CommandsRecord>(commands: Commands, options: DefineServerOptions<Commands>): ServerRequestHandler;
+/**
+ * @import {
+ *   CommandsRecord,
+ *   DefineServerOptions,
+ *   ServerRequestHandler,
+ * } from './types.js'
+ * @import {ReceiptServerError} from './receipt.js'
+ */
+/**
+ * Default maximum invocation lifetime accepted by {@link defineServer}, in
+ * seconds. Twice the client default `ttl`, to tolerate clock skew.
+ */
+export const DEFAULT_MAX_TTL: 600;
 import type { CommandsRecord } from './types.js';
 import type { DefineServerOptions } from './types.js';
 import type { ServerRequestHandler } from './types.js';

package/dist/src/rpc/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/rpc/server.js"],"names":[],"mappings":"AAkDA;;;;;;;;;;;;GAYG;AACH,6BAL8B,QAAQ,SAAzB,cAAgB,YAClB,QAAQ,WACR,oBAAoB,QAAQ,CAAC,GAC3B,oBAAoB,CA6FhC;oCAlJS,YAAY;yCAAZ,YAAY;0CAAZ,YAAY"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/rpc/server.js"],"names":[],"mappings":"AAyDA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,6BAL8B,QAAQ,SAAzB,cAAgB,YAClB,QAAQ,WACR,oBAAoB,QAAQ,CAAC,GAC3B,oBAAoB,CAoGhC;AA3KD;;;;;;;GAOG;AAEH;;;GAGG;AACH,8BAA+B,GAAG,CAAA;oCARxB,YAAY;yCAAZ,YAAY;0CAAZ,YAAY"}

package/dist/src/rpc/types.d.ts

@@ -3,7 +3,7 @@ import type { ISigner } from 'iso-signatures/types';
 import type { Capability } from '../capability.js';
 import type { Invocation } from '../invocation.js';
 import type { Store } from '../store.js';
-import type { ClientOptions, Promisable, VerifierResolver } from '../types.js';
+import type { ClientOptions, Promisable, ReplayStore, VerifierResolver } from '../types.js';
 export interface CommandOptions<Args extends StandardSchemaV1, Cmd extends string = string, ReceiptSchema extends StandardSchemaV1 = StandardSchemaV1> {
     cmd: Cmd;
     args: Args;
@@ -104,6 +104,22 @@ export interface DefineServerOptions<Commands extends CommandsRecord> {
     signer: ISigner;
     store: Store;
     verifierResolver: VerifierResolver;
+    /**
+     * Store of seen invocations, used to reject replays.
+     * Use a store shared by all instances when running more than one server.
+     *
+     * @default new KVReplayStore() (in memory)
+     */
+    replayStore?: ReplayStore;
+    /**
+     * Maximum lifetime in seconds accepted for invocations. Invocations without
+     * an expiration, or expiring later than `maxTtl` seconds from now, are
+     * rejected. This keeps the replay store bounded. Pass `null` to accept any
+     * expiration, including none.
+     *
+     * @default 600
+     */
+    maxTtl?: number | null;
 }
 /**
  * Handler for an incoming HTTP request, returned by {@link defineServer}.

package/dist/src/rpc/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/rpc/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9E,MAAM,WAAW,cAAc,CAC7B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,IAAI,CAAA;IACV,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,WAAW,aAAa,CAC5B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,gBAAgB,EAChB,MAAM,EACN,gBAAgB,CACjB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,SAAS,cAAc,IAAI;KACzD,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;KACrD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC/D,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;KACpD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;AAErE;;GAEG;AACH,MAAM,MAAM,cAAc,CACxB,QAAQ,SAAS,cAAc,EAC/B,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IACvE;IACF,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAAA;CAC5D,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,SAAS,cAAc;IAC5D,OAAO,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC/C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACpE,MAAM,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC9C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,UAAU,CAAC,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB,CAAC,IAAI;IACxC,IAAI,EAAE,IAAI,CAAA;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC3D,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAC5C,OAAO,EAAE,oBAAoB,CAC3B,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAC5D,KACE,UAAU,CACb,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAC/D;CACF,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,cAAc;IAClE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAClC;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,gBAAgB,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/rpc/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,WAAW,EACX,gBAAgB,EACjB,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,cAAc,CAC7B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,IAAI,CAAA;IACV,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,WAAW,aAAa,CAC5B,IAAI,SAAS,gBAAgB,EAC7B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,aAAa,SAAS,gBAAgB,GAAG,gBAAgB;IAEzD,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,gBAAgB,EAChB,MAAM,EACN,gBAAgB,CACjB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,SAAS,cAAc,IAAI;KACzD,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;KACrD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC/D,CAAC,IAAI,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,aAAa,CACtD,MAAM,IAAI,EACV,MAAM,GAAG,EACT,MAAM,aAAa,CACpB,GACG;QACE,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;KACpD,GACD,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAA;AAEjB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;AAErE;;GAEG;AACH,MAAM,MAAM,cAAc,CACxB,QAAQ,SAAS,cAAc,EAC/B,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IACvE;IACF,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAAA;CAC5D,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,SAAS,cAAc;IAC5D,OAAO,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC/C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACpE,MAAM,CAAC,GAAG,SAAS,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAC9C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GACrC,OAAO,CAAC,UAAU,CAAC,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB,CAAC,IAAI;IACxC,IAAI,EAAE,IAAI,CAAA;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,QAAQ,SAAS,cAAc,IAAI;KAC3D,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAC5C,OAAO,EAAE,oBAAoB,CAC3B,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,MAAM,CAAC,CAC5D,KACE,UAAU,CACb,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAC/D;CACF,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,cAAc;IAClE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAClC;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA"}

package/dist/src/types.d.ts

@@ -17,6 +17,13 @@ export * from './types/envelope';
 export * from './types/policy';
 export * from './types/varsig';
 export type ResolveProof = (proof: CID) => Promise<Delegation>;
+/**
+ * Check whether a delegation CID is revoked.
+ *
+ * Called once for each CID the delegation could have been issued under
+ * (up to 2 for ECDSA and 4 for EIP-191 signatures), since those signatures
+ * can be re-encoded into another valid signature with a different CID.
+ */
 export type IsRevoked = (cid: CID) => Promise<boolean>;
 export type VerifierResolver = Resolver;
 export type DidResolver = _DidResolver;
@@ -110,6 +117,32 @@ export interface InvocationFromOptions extends DelegationValidateOptions {
     bytes: Uint8Array;
     audience?: VerifiableDID;
     resolveProof: ResolveProof;
+    /**
+     * Store of seen invocations. When set, an invocation whose signed payload was
+     * already seen is rejected. Checked after all other validation passes.
+     *
+     * Executors MUST use one to prevent replay attacks.
+     */
+    replayStore?: ReplayStore;
+    /**
+     * Maximum lifetime in seconds accepted for the invocation. When set,
+     * invocations without an expiration, or expiring more than `maxTtl` seconds
+     * after `now`, are rejected. This keeps the replay store bounded.
+     */
+    maxTtl?: number;
+}
+/**
+ * Store of seen invocations, used to reject replays.
+ */
+export interface ReplayStore {
+    /**
+     * Atomically record `key` and resolve `true`, or resolve `false` if `key`
+     * was already recorded and has not expired.
+     *
+     * @param key - Replay key of the invocation, see {@link Invocation.replayKey}
+     * @param expiration - Unix time in seconds after which the key can be forgotten, or `null` to keep it forever
+     */
+    checkAndSet(key: string, expiration: number | null): Promise<boolean>;
 }
 /**
  * Capability types
@@ -215,5 +248,10 @@ export type ClientOptions = {
     store: Store;
     capabilities: Capability<StandardSchemaV1, string>[];
     verifierResolver: VerifierResolver;
+    /**
+     * Time to live in seconds of the invocations created by the client
+     * @default 300
+     */
+    ttl?: number;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAE9B,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC9D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AACtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,MAAM,GACN,UAAU,GACV,WAAW,CAAA;AACf,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,CAAA;AAC1D,MAAM,MAAM,UAAU,GAClB;KAAG,GAAG,IAAI,MAAM,GAAG,SAAS;CAAE,GAC9B;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS;CAAE,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE9D;;GAEG;AAEH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,gBAAgB;IAChE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;CAClB;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;IAClE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB;;OAEG;IACH,GAAG,EAAE,UAAU,EAAE,CAAA;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAChC,MAAM,SAAS,gBAAgB,EAC/B,GAAG,SAAS,MAAM,GAAG,MAAM;IAE3B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,gBAAgB,CACxE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,gBAAgB,CACtE,SAAQ,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACvD,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;AAE9C,MAAM,WAAW,cAAc,CAAC,MAAM,SAAS,gBAAgB;IAC7D,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,MAAM,OAAO,CAAC,MAAM,SAAS,gBAAgB,EAAE,MAAM,IAAI,CAC7D,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,KAC5B,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvB,MAAM,WAAW,YAAY,CAC3B,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EACxC,MAAM;IAEN,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI;IAC1E,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,UAAU,CAAC,MAAM,CAAC,CAAA;CACzD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,CACvB,MAAM,SAAS,MAAM,CACnB,MAAM,EACN,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CACnD,IACC;KACD,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,GAAG,EAAE,MAAM,MAAM,CAAC,GACvE;QACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QAC9C,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,GAAG,EAAE,MAAM,CAAA;KACZ,GACD,KAAK;CACV,CAAC,MAAM,MAAM,CAAC,CAAA;AAEf,MAAM,MAAM,QAAQ,CAClB,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,IACrE;IACF,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,OAAO,CAAA;CACb,EAAE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,IAAI,SAAS,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,IAAI;KACxE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,GAC3D,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GACtC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAClB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK;CACV,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,aAAa,CAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CACnE,IACC;IACF,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,EAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,IAAI,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAA;IACpD,gBAAgB,EAAE,gBAAgB,CAAA;CACnC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAE9B,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC9D;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AACtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,MAAM,GACN,UAAU,GACV,WAAW,CAAA;AACf,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,CAAA;AAC1D,MAAM,MAAM,UAAU,GAClB;KAAG,GAAG,IAAI,MAAM,GAAG,SAAS;CAAE,GAC9B;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS;CAAE,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE9D;;GAEG;AAEH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,gBAAgB;IAChE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;CAClB;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;IAClE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB;;OAEG;IACH,GAAG,EAAE,UAAU,EAAE,CAAA;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtE;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAChC,MAAM,SAAS,gBAAgB,EAC/B,GAAG,SAAS,MAAM,GAAG,MAAM;IAE3B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,gBAAgB,CACxE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,gBAAgB,CACtE,SAAQ,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACvD,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;AAE9C,MAAM,WAAW,cAAc,CAAC,MAAM,SAAS,gBAAgB;IAC7D,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,MAAM,OAAO,CAAC,MAAM,SAAS,gBAAgB,EAAE,MAAM,IAAI,CAC7D,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,KAC5B,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvB,MAAM,WAAW,YAAY,CAC3B,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EACxC,MAAM;IAEN,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI;IAC1E,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,UAAU,CAAC,MAAM,CAAC,CAAA;CACzD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,CACvB,MAAM,SAAS,MAAM,CACnB,MAAM,EACN,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CACnD,IACC;KACD,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,GAAG,EAAE,MAAM,MAAM,CAAC,GACvE;QACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QAC9C,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,GAAG,EAAE,MAAM,CAAA;KACZ,GACD,KAAK;CACV,CAAC,MAAM,MAAM,CAAC,CAAA;AAEf,MAAM,MAAM,QAAQ,CAClB,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,IACrE;IACF,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,OAAO,CAAA;CACb,EAAE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,IAAI,SAAS,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,IAAI;KACxE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,GAC3D,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GACtC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAClB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK;CACV,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,aAAa,CAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CACnE,IACC;IACF,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,EAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,IAAI,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAA;IACpD,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}

package/dist/src/utils.d.ts

@@ -17,6 +17,17 @@ export function nowInSeconds(): number;
  * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
  */
 export function cid(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<CID<any, 113, 18, 1>>;
+/**
+ * Replay key of a UCAN: the CID of its signature payload, the exact bytes the
+ * signature covers.
+ *
+ * Unlike {@link cid}, it does not depend on the signature bytes, so a second
+ * valid signature over the same payload (for example a malleated ECDSA
+ * signature) gets the same key.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export function replayKey(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<string>;
 /**
  * Check if a DID and signature type are compatible
  *
@@ -112,13 +123,41 @@ export function assertArgs(args: unknown): void;
  * @returns {void}
  */
 export function assertMeta(meta: unknown): void;
+/**
+ * Signatures a signer could have issued that verify the same as `signature`.
+ *
+ * ECDSA signatures are malleable: `(r, s)` and `(r, n - s)` are both valid.
+ * EIP-191 signatures additionally carry a recovery byte `v` that wallets
+ * return as 27/28 or 0/1. Verifiers also accept EIP-155 style `v >= 35`,
+ * but no signer issues those for `personal_sign`, so they are not listed.
+ *
+ * The result always includes `signature` itself. Other algorithms (Ed25519,
+ * RSA) have a single valid signature.
+ *
+ * @param {import('iso-signatures/types').SignatureType} alg
+ * @param {Uint8Array} signature
+ * @returns {Uint8Array[]}
+ */
+export function equivalentSignatures(alg: import("iso-signatures/types").SignatureType, signature: Uint8Array): Uint8Array[];
+/**
+ * CIDs of every envelope that verifies the same as `envelope`: one per
+ * signature in {@link equivalentSignatures}, starting with the CID of
+ * `envelope` itself.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export function equivalentCids(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<CID<any, 113, 18, 1>[]>;
 /**
  * Assert that the input is not revoked.
  *
- * @param {import('multiformats/cid').CID} cid
+ * Checks every equivalent CID of the envelope (see {@link equivalentCids}),
+ * so re-encoding a revoked UCAN with another valid signature does not get it
+ * past a CID-based revocation list.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
  * @param {(cid: CID) => Promise<boolean>} [isRevokedFn]
  */
-export function assertNotRevoked(cid: import("multiformats/cid").CID, isRevokedFn?: (cid: CID) => Promise<boolean>): Promise<void>;
+export function assertNotRevoked(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>, isRevokedFn?: (cid: CID) => Promise<boolean>): Promise<void>;
 /**
  * Expiration or TTL (default 300 seconds)
  *

package/dist/src/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.js"],"names":[],"mappings":"AASA;;GAEG;AAEH;;;;;GAKG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC;;;EAe3D;AAED,uCAEC;AAED;;;GAGG;AACH,8BAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,iCAW3D;AAED;;;;;GAKG;AACH,2CAHW,OAAO,eAAe,EAAE,aAAa,WACrC,OAAO,sBAAsB,EAAE,aAAa,WA+BtD;AAED;;;;;GAKG;AACH,sCAHW,MAAM,GAAG,IAAI,QACb,MAAM,QAchB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,QACN,MAAM,QAMhB;AAED;;;;;GAKG;AACH,qDAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,OAAO,SAAS,EAAE,QAAQ,gBAYpC;AAED;;;;;;GAMG;AACH,0CAJW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,6BACjD,OAAO,sCAAsC,EAAE,QAAQ,gBACvD,OAAO,SAAS,EAAE,QAAQ,oBAwBpC;AAED;;;;;;;;;;;;;GAaG;AACH,sCAJW,MAAM,SACN,MAAM,GACJ,OAAO,CAKnB;AAED;;;;;;;;;;;;;GAaG;AACH,8CAJW,MAAM,GAEJ,IAAI,CAuChB;AAED;;;;;;;;;;;;;GAaG;AACH,mCAXW,OAAO,GAEL,IAAI,CAehB;AACD;;;;GAIG;AACH,iCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,iCAJW,OAAO,GAEL,IAAI,CAWhB;AAED;;;;;GAKG;AACH,sCAHW,OAAO,kBAAkB,EAAE,GAAG,gBAC9B,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,iBAQxC;AAED;;;;;;GAMG;AACH,uCAHG;IAAgC,GAAG;IACV,GAAG;CAAC,iBAU/B;AAgED;;GAEG;AACH,qCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,gCAJW,OAAO,GACL,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAKjD;AAnFD,iJAeI;AACJ,4KAAyD;AAEzD,oGAGE;AAEF;;GAEG;AAEH;;GAEG;AACH,mKA4BI;AAEJ,kLAA8C;uBApCjC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC;iCApVP,YAAY;oBARtB,kBAAkB;oBADlB,SAAS;kBAGX,QAAQ"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.js"],"names":[],"mappings":"AAUA;;GAEG;AAEH;;;;;GAKG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC;;;EAe3D;AAED,uCAEC;AAED;;;GAGG;AACH,8BAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,iCAW3D;AAED;;;;;;;;;GASG;AACH,oCAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,mBAM3D;AAED;;;;;GAKG;AACH,2CAHW,OAAO,eAAe,EAAE,aAAa,WACrC,OAAO,sBAAsB,EAAE,aAAa,WA+BtD;AAED;;;;;GAKG;AACH,sCAHW,MAAM,GAAG,IAAI,QACb,MAAM,QAchB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,QACN,MAAM,QAMhB;AAED;;;;;GAKG;AACH,qDAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,OAAO,SAAS,EAAE,QAAQ,gBAYpC;AAED;;;;;;GAMG;AACH,0CAJW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,6BACjD,OAAO,sCAAsC,EAAE,QAAQ,gBACvD,OAAO,SAAS,EAAE,QAAQ,oBAwBpC;AAED;;;;;;;;;;;;;GAaG;AACH,sCAJW,MAAM,SACN,MAAM,GACJ,OAAO,CAKnB;AAED;;;;;;;;;;;;;GAaG;AACH,8CAJW,MAAM,GAEJ,IAAI,CAuChB;AAED;;;;;;;;;;;;;GAaG;AACH,mCAXW,OAAO,GAEL,IAAI,CAehB;AACD;;;;GAIG;AACH,iCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,iCAJW,OAAO,GAEL,IAAI,CAWhB;AAqDD;;;;;;;;;;;;;;GAcG;AACH,0CAJW,OAAO,sBAAsB,EAAE,aAAa,aAC5C,UAAU,GACR,UAAU,EAAE,CAyCxB;AAED;;;;;;GAMG;AACH,yCAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,mCAQ3D;AAED;;;;;;;;;GASG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,iBAWxC;AAED;;;;;;GAMG;AACH,uCAHG;IAAgC,GAAG;IACV,GAAG;CAAC,iBAU/B;AAgED;;GAEG;AACH,qCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,gCAJW,OAAO,GACL,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAKjD;AAnFD,iJAeI;AACJ,4KAAyD;AAEzD,oGAGE;AAEF;;GAEG;AAEH;;GAEG;AACH,mKA4BI;AAEJ,kLAA8C;uBApCjC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC;iCAreP,YAAY;oBARtB,kBAAkB;oBADlB,SAAS;kBAGX,QAAQ"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iso-ucan",
   "type": "module",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Isomorphic UCAN",
   "author": "Hugo Dias <hugomrdias@gmail.com> (hugodias.me)",
   "license": "MIT",
@@ -44,6 +44,10 @@
       "types": "./dist/src/varsig.d.ts",
       "default": "./src/varsig.js"
     },
+    "./replay": {
+      "types": "./dist/src/replay.d.ts",
+      "default": "./src/replay.js"
+    },
     "./policy": {
       "types": "./dist/src/policy.d.ts",
       "default": "./src/policy.js"
@@ -81,6 +85,9 @@
       "policy": [
         "dist/src/policy"
       ],
+      "replay": [
+        "dist/src/replay"
+      ],
       "rpc": [
         "dist/src/rpc/index"
       ],
@@ -112,7 +119,8 @@
     "@types/node": "^26.6.2",
     "delay": "^7.0.0",
     "playwright-test": "^15.0.1",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "viem": "~2.56.9"
   },
   "publishConfig": {
     "provenance": true

package/readme.md

@@ -93,6 +93,47 @@ const invocation = await AccountCreateCap.invoke({
 })
 ```
 
+## Replay protection
+
+The UCAN spec requires executors to reject replayed invocations. Pass a
+`replayStore` to `Invocation.from` so an invocation is accepted only once, and
+set `maxTtl` so invocations must expire soon, which keeps the store bounded:
+
+```ts
+import { Invocation } from 'iso-ucan/invocation'
+import { KVReplayStore } from 'iso-ucan/replay'
+
+const replayStore = new KVReplayStore() // in memory by default
+
+const invocation = await Invocation.from({
+  bytes,
+  audience: executor,
+  verifierResolver,
+  resolveProof: (cid) => store.resolveProof(cid),
+  replayStore,
+  maxTtl: 300,
+})
+```
+
+The store is keyed on `invocation.replayKey`, the CID of the signed payload.
+Do not deduplicate on `invocation.cid`: it also covers the signature, and
+some signature algorithms (such as ECDSA) accept more than one valid signature
+for the same payload.
+
+`KVReplayStore` is atomic within one process only. When several processes or
+instances execute invocations, implement the `ReplayStore` interface on a
+shared store with an atomic set-if-absent, such as Redis `SET NX` or SQL
+`INSERT ... ON CONFLICT DO NOTHING`.
+
+## Revocation
+
+Pass `isRevoked` to `Delegation.from`, `Delegation#validate` or
+`Invocation.from` to reject revoked delegations by CID. Because ECDSA and
+EIP-191 signatures can be re-encoded into another valid signature, a revoked
+delegation can reappear under a different CID. `iso-ucan` therefore calls
+`isRevoked` with every CID the delegation could have been issued under (up to
+2 for ECDSA and 4 for EIP-191), and rejects it if any is revoked.
+
 ## EIP-191 wallet signing
 
 `iso-ucan` can use EIP-191 wallet signatures through `EIP191Signer` from
@@ -214,6 +255,14 @@ app.post('/rpc', (c) => rpc(c.req.raw))
 serve({ fetch: app.fetch, port: 3000 })
 ```
 
+`defineServer` rejects replayed invocations with an in-memory `KVReplayStore`
+by default. Pass `replayStore` to share it between server instances.
+
+It also rejects invocations that never expire or expire more than `maxTtl`
+seconds from now (default 600). Pass a different `maxTtl` to change the
+limit, or `null` to accept any expiration. See
+[Replay protection](#replay-protection).
+
 ### Client
 
 ```ts
@@ -226,7 +275,11 @@ const client = defineClient(Protocol, {
   store,
   verifierResolver,
 })
+```
 
+Invocations created by the client expire after `ttl` seconds (default 300).
+
+```ts
 // `args` and the returned receipt are typed from the protocol entry for `cmd`.
 const r = await client.request({ cmd: '/todo/complete', args: { id: '42' } })
 

package/src/delegation.js

@@ -89,7 +89,7 @@ export class Delegation {
     await verifySignature(envelope, verifierResolver, didResolveOptions)
 
     const _cid = await cid(envelope)
-    await assertNotRevoked(_cid, options.isRevoked)
+    await assertNotRevoked(envelope, options.isRevoked)
 
     return new Delegation(envelope, bytes, _cid)
   }
@@ -182,7 +182,7 @@ export class Delegation {
       options.verifierResolver,
       options.didResolver
     )
-    await assertNotRevoked(this.cid, options.isRevoked)
+    await assertNotRevoked(this.envelope, options.isRevoked)
 
     return true
   }

package/src/invocation.js

@@ -11,6 +11,8 @@ import {
   cid,
   commandCovers,
   expOrTtl,
+  nowInSeconds,
+  replayKey,
   verifySignature,
 } from './utils.js'
 
@@ -33,19 +35,32 @@ export class Invocation {
    */
   cid
 
+  /**
+   * Key to deduplicate this invocation on: the CID of its signature payload.
+   *
+   * Use this instead of {@link Invocation.cid} to detect replays. The CID
+   * covers the signature bytes, and some signature algorithms (e.g. ECDSA)
+   * accept more than one valid signature for the same payload.
+   *
+   * @type {string}
+   */
+  replayKey
+
   /**
    *
    * @param {import("./types.js").DecodedEnvelope<'inv'>} envelope
    * @param {Uint8Array} bytes
    * @param {CID} cid
    * @param {Delegation[]} delegations
+   * @param {string} replayKey
    */
-  constructor(envelope, bytes, cid, delegations) {
+  constructor(envelope, bytes, cid, delegations, replayKey) {
     this.envelope = envelope
     this.payload = envelope.payload
     this.bytes = bytes
     this.cid = cid
     this.delegations = delegations
+    this.replayKey = replayKey
   }
 
   /**
@@ -96,8 +111,24 @@ export class Invocation {
       assertProofs(envelope.payload, proofs)
     }
 
+    if (options.maxTtl !== undefined) {
+      assertMaxTtl(envelope.payload.exp, options.maxTtl, options.now)
+    }
+
+    const _replayKey = await replayKey(envelope)
+
+    // Must run last, so only fully validated invocations are recorded
+    if (
+      options.replayStore &&
+      !(await options.replayStore.checkAndSet(_replayKey, envelope.payload.exp))
+    ) {
+      throw new Error(
+        `UCAN Invocation replay detected, already seen ${_replayKey}`
+      )
+    }
+
     const _cid = await cid(envelope)
-    return new Invocation(envelope, bytes, _cid, proofs)
+    return new Invocation(envelope, bytes, _cid, proofs, _replayKey)
   }
 
   /**
@@ -158,7 +189,31 @@ export class Invocation {
       version: Envelope.VERSION,
     }
 
-    return new Invocation(envelope, bytes, await cid(envelope), options.prf)
+    return new Invocation(
+      envelope,
+      bytes,
+      await cid(envelope),
+      options.prf,
+      await replayKey(envelope)
+    )
+  }
+}
+
+/**
+ * @param {number | null} exp
+ * @param {number} maxTtl
+ * @param {number} [now]
+ */
+function assertMaxTtl(exp, maxTtl, now = nowInSeconds()) {
+  if (exp === null) {
+    throw new Error(
+      `UCAN Invocation must expire within ${maxTtl} seconds, but has no expiration`
+    )
+  }
+  if (exp > now + maxTtl) {
+    throw new Error(
+      `UCAN Invocation must expire within ${maxTtl} seconds. Received: ${exp} but current time is ${now}`
+    )
   }
 }
 

package/src/replay.js

@@ -0,0 +1,58 @@
+import { KV } from 'iso-kv'
+import { MemoryDriver } from 'iso-kv/drivers/memory.js'
+
+/**
+ * @import {Driver} from 'iso-kv'
+ * @import {ReplayStore} from './types.js'
+ */
+
+/**
+ * Replay store backed by an `iso-kv` driver.
+ *
+ * Keys are kept until the invocation expires, or forever when the invocation
+ * has no expiration.
+ *
+ * `checkAndSet` is atomic within one JavaScript realm only: calls are
+ * serialized through an in-process queue. When several processes or instances
+ * share a driver, implement {@link ReplayStore} on top of an atomic
+ * set-if-absent operation instead (for example Redis `SET NX` or SQL
+ * `INSERT ... ON CONFLICT DO NOTHING`).
+ *
+ * @implements {ReplayStore}
+ */
+export class KVReplayStore {
+  /** @type {KV} */
+  kv
+
+  /** @type {Promise<unknown>} */
+  #queue = Promise.resolve()
+
+  /**
+   * @param {Driver} [driver] - Defaults to a {@link MemoryDriver}.
+   */
+  constructor(driver = new MemoryDriver()) {
+    this.kv = new KV({ driver })
+  }
+
+  /**
+   * Record `key` and return `true`, or return `false` if it was already
+   * recorded and has not expired.
+   *
+   * @param {string} key
+   * @param {number | null} expiration - Unix time in seconds, or `null` to keep forever
+   * @returns {Promise<boolean>}
+   */
+  checkAndSet(key, expiration) {
+    const result = this.#queue.then(async () => {
+      if (await this.kv.has([key])) {
+        return false
+      }
+      await this.kv.set([key], true, { expiration })
+      return true
+    })
+    this.#queue = result.catch(() => {
+      // Errors are reported to the caller, keep the queue going
+    })
+    return result
+  }
+}

package/src/rpc/client.js

@@ -39,7 +39,7 @@ export function defineClient(commands, options) {
         iss: options.issuer,
         sub: options.audience.did,
         store: options.store,
-        exp: null,
+        ttl: options.ttl,
         verifierResolver: options.verifierResolver,
       })
 
@@ -77,7 +77,7 @@ export function defineClient(commands, options) {
         iss: options.issuer,
         sub: options.audience.did,
         store: options.store,
-        exp: null,
+        ttl: options.ttl,
         verifierResolver: options.verifierResolver,
       })
     },

package/src/rpc/index.js

@@ -7,4 +7,4 @@ export {
   receiptResult,
   receiptServerError,
 } from './receipt.js'
-export { defineServer } from './server.js'
+export { DEFAULT_MAX_TTL, defineServer } from './server.js'

package/src/rpc/server.js

@@ -1,5 +1,6 @@
 import { u8 } from 'iso-base/utils'
 import { Invocation } from '../invocation.js'
+import { KVReplayStore } from '../replay.js'
 
 /**
  * @import {
@@ -10,6 +11,12 @@ import { Invocation } from '../invocation.js'
  * @import {ReceiptServerError} from './receipt.js'
  */
 
+/**
+ * Default maximum invocation lifetime accepted by {@link defineServer}, in
+ * seconds. Twice the client default `ttl`, to tolerate clock skew.
+ */
+export const DEFAULT_MAX_TTL = 600
+
 /**
  * Build a {@link ReceiptServerError} payload.
  *
@@ -56,6 +63,13 @@ function serverErrorResponse(status, message, extra) {
  * schema, and dispatches to the corresponding handler in `options.handlers`.
  * The handler's return value is serialized to JSON.
  *
+ * Each invocation is executed at most once: replays are rejected using
+ * `options.replayStore`, which defaults to an in-memory {@link KVReplayStore}.
+ * Pass a shared store when running more than one server instance.
+ *
+ * Invocations must expire within `options.maxTtl` seconds, which defaults to
+ * {@link DEFAULT_MAX_TTL}. Pass `null` to accept any expiration.
+ *
  * @template {CommandsRecord} Commands
  * @param {Commands} commands
  * @param {DefineServerOptions<Commands>} options
@@ -70,6 +84,11 @@ export function defineServer(commands, options) {
 
   /** @type {Record<string, (opts: any) => unknown>} */
   const handlers = options.handlers
+  const replayStore = options.replayStore ?? new KVReplayStore()
+  const maxTtl =
+    options.maxTtl === undefined
+      ? DEFAULT_MAX_TTL
+      : (options.maxTtl ?? undefined)
 
   return async (request) => {
     /** @type {Invocation | undefined} */
@@ -83,6 +102,8 @@ export function defineServer(commands, options) {
         audience: options.signer,
         verifierResolver: options.verifierResolver,
         resolveProof: options.store.resolveProof.bind(options.store),
+        replayStore,
+        maxTtl,
       })
     } catch (error) {
       return serverErrorResponse(

package/src/rpc/types.ts

@@ -3,7 +3,12 @@ import type { ISigner } from 'iso-signatures/types'
 import type { Capability } from '../capability.js'
 import type { Invocation } from '../invocation.js'
 import type { Store } from '../store.js'
-import type { ClientOptions, Promisable, VerifierResolver } from '../types.js'
+import type {
+  ClientOptions,
+  Promisable,
+  ReplayStore,
+  VerifierResolver,
+} from '../types.js'
 
 export interface CommandOptions<
   Args extends StandardSchemaV1,
@@ -145,6 +150,22 @@ export interface DefineServerOptions<Commands extends CommandsRecord> {
   signer: ISigner
   store: Store
   verifierResolver: VerifierResolver
+  /**
+   * Store of seen invocations, used to reject replays.
+   * Use a store shared by all instances when running more than one server.
+   *
+   * @default new KVReplayStore() (in memory)
+   */
+  replayStore?: ReplayStore
+  /**
+   * Maximum lifetime in seconds accepted for invocations. Invocations without
+   * an expiration, or expiring later than `maxTtl` seconds from now, are
+   * rejected. This keeps the replay store bounded. Pass `null` to accept any
+   * expiration, including none.
+   *
+   * @default 600
+   */
+  maxTtl?: number | null
 }
 
 /**

package/src/types.ts

@@ -19,6 +19,13 @@ export * from './types/policy'
 export * from './types/varsig'
 
 export type ResolveProof = (proof: CID) => Promise<Delegation>
+/**
+ * Check whether a delegation CID is revoked.
+ *
+ * Called once for each CID the delegation could have been issued under
+ * (up to 2 for ECDSA and 4 for EIP-191 signatures), since those signatures
+ * can be re-encoded into another valid signature with a different CID.
+ */
 export type IsRevoked = (cid: CID) => Promise<boolean>
 export type VerifierResolver = Resolver
 export type DidResolver = _DidResolver
@@ -126,6 +133,33 @@ export interface InvocationFromOptions extends DelegationValidateOptions {
   bytes: Uint8Array
   audience?: VerifiableDID
   resolveProof: ResolveProof
+  /**
+   * Store of seen invocations. When set, an invocation whose signed payload was
+   * already seen is rejected. Checked after all other validation passes.
+   *
+   * Executors MUST use one to prevent replay attacks.
+   */
+  replayStore?: ReplayStore
+  /**
+   * Maximum lifetime in seconds accepted for the invocation. When set,
+   * invocations without an expiration, or expiring more than `maxTtl` seconds
+   * after `now`, are rejected. This keeps the replay store bounded.
+   */
+  maxTtl?: number
+}
+
+/**
+ * Store of seen invocations, used to reject replays.
+ */
+export interface ReplayStore {
+  /**
+   * Atomically record `key` and resolve `true`, or resolve `false` if `key`
+   * was already recorded and has not expired.
+   *
+   * @param key - Replay key of the invocation, see {@link Invocation.replayKey}
+   * @param expiration - Unix time in seconds after which the key can be forgotten, or `null` to keep it forever
+   */
+  checkAndSet(key: string, expiration: number | null): Promise<boolean>
 }
 
 /**
@@ -276,4 +310,9 @@ export type ClientOptions = {
   store: Store
   capabilities: Capability<StandardSchemaV1, string>[]
   verifierResolver: VerifierResolver
+  /**
+   * Time to live in seconds of the invocations created by the client
+   * @default 300
+   */
+  ttl?: number
 }

package/src/utils.js

@@ -1,4 +1,5 @@
 import * as dagCbor from '@ipld/dag-cbor'
+import { equals } from 'iso-base/utils'
 import { DID } from 'iso-did'
 import { CID } from 'multiformats/cid'
 import { sha256 } from 'multiformats/hashes/sha2'
@@ -50,6 +51,22 @@ export async function cid(envelope) {
   return CID.create(1, dagCbor.code, hash)
 }
 
+/**
+ * Replay key of a UCAN: the CID of its signature payload, the exact bytes the
+ * signature covers.
+ *
+ * Unlike {@link cid}, it does not depend on the signature bytes, so a second
+ * valid signature over the same payload (for example a malleated ECDSA
+ * signature) gets the same key.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export async function replayKey(envelope) {
+  const hash = await sha256.digest(dagCbor.encode(signaturePayload(envelope)))
+
+  return CID.create(1, dagCbor.code, hash).toString()
+}
+
 /**
  * Check if a DID and signature type are compatible
  *
@@ -293,17 +310,146 @@ export function assertMeta(meta) {
   }
 }
 
+/**
+ * ECDSA curve orders by signature algorithm, with the byte length of each
+ * signature component.
+ *
+ * @type {Record<string, {n: bigint, size: number}>}
+ */
+const ECDSA_CURVES = {
+  ES256: {
+    n: 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n,
+    size: 32,
+  },
+  ES384: {
+    n: 0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973n,
+    size: 48,
+  },
+  ES512: {
+    n: 0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409n,
+    size: 66,
+  },
+  ES256K: {
+    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
+    size: 32,
+  },
+  EIP191: {
+    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
+    size: 32,
+  },
+}
+
+/**
+ * @param {Uint8Array} bytes
+ */
+function bytesToBigInt(bytes) {
+  let n = 0n
+  for (const b of bytes) n = (n << 8n) | BigInt(b)
+  return n
+}
+
+/**
+ * @param {bigint} n
+ * @param {number} size
+ */
+function bigIntToBytes(n, size) {
+  const out = new Uint8Array(size)
+  for (let i = size - 1; i >= 0; i--) {
+    out[i] = Number(n & 0xffn)
+    n >>= 8n
+  }
+  return out
+}
+
+/**
+ * Signatures a signer could have issued that verify the same as `signature`.
+ *
+ * ECDSA signatures are malleable: `(r, s)` and `(r, n - s)` are both valid.
+ * EIP-191 signatures additionally carry a recovery byte `v` that wallets
+ * return as 27/28 or 0/1. Verifiers also accept EIP-155 style `v >= 35`,
+ * but no signer issues those for `personal_sign`, so they are not listed.
+ *
+ * The result always includes `signature` itself. Other algorithms (Ed25519,
+ * RSA) have a single valid signature.
+ *
+ * @param {import('iso-signatures/types').SignatureType} alg
+ * @param {Uint8Array} signature
+ * @returns {Uint8Array[]}
+ */
+export function equivalentSignatures(alg, signature) {
+  const curve = ECDSA_CURVES[alg]
+  if (!curve) {
+    return [signature]
+  }
+
+  const { n, size } = curve
+  const isEip191 = alg === 'EIP191'
+  if (signature.length !== size * 2 + (isEip191 ? 1 : 0)) {
+    return [signature]
+  }
+
+  const r = signature.subarray(0, size)
+  const s = bytesToBigInt(signature.subarray(size, size * 2))
+  if (s === 0n || s >= n) {
+    return [signature]
+  }
+  const sFlipped = bigIntToBytes(n - s, size)
+
+  if (!isEip191) {
+    return [signature, new Uint8Array([...r, ...sFlipped])]
+  }
+
+  const v = signature[size * 2]
+  /** @type {number} */
+  let parity
+  if (v === 0 || v === 27) parity = 0
+  else if (v === 1 || v === 28) parity = 1
+  else if (v >= 35) parity = v % 2 === 0 ? 1 : 0
+  else return [signature]
+
+  const sBytes = signature.subarray(size, size * 2)
+  const candidates = [
+    new Uint8Array([...r, ...sBytes, parity]),
+    new Uint8Array([...r, ...sBytes, parity + 27]),
+    new Uint8Array([...r, ...sFlipped, 1 - parity]),
+    new Uint8Array([...r, ...sFlipped, 28 - parity]),
+  ]
+  return [signature, ...candidates.filter((c) => !equals(c, signature))]
+}
+
+/**
+ * CIDs of every envelope that verifies the same as `envelope`: one per
+ * signature in {@link equivalentSignatures}, starting with the CID of
+ * `envelope` itself.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ */
+export async function equivalentCids(envelope) {
+  return await Promise.all(
+    equivalentSignatures(envelope.alg, envelope.signature).map((signature) =>
+      cid({ ...envelope, signature })
+    )
+  )
+}
+
 /**
  * Assert that the input is not revoked.
  *
- * @param {import('multiformats/cid').CID} cid
+ * Checks every equivalent CID of the envelope (see {@link equivalentCids}),
+ * so re-encoding a revoked UCAN with another valid signature does not get it
+ * past a CID-based revocation list.
+ *
+ * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
  * @param {(cid: CID) => Promise<boolean>} [isRevokedFn]
  */
-export async function assertNotRevoked(cid, isRevokedFn) {
-  isRevokedFn = isRevokedFn ?? (async () => false)
-  const isRevoked = await isRevokedFn(cid)
-  if (isRevoked) {
-    throw new Error('UCAN revoked')
+export async function assertNotRevoked(envelope, isRevokedFn) {
+  if (!isRevokedFn) {
+    return
+  }
+  for (const c of await equivalentCids(envelope)) {
+    if (await isRevokedFn(c)) {
+      throw new Error('UCAN revoked')
+    }
   }
 }