opmsec 0.1.0

package/packages/contracts/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@opm/contracts",
+  "version": "0.1.0",
+  "private": true,
+  "devDependencies": {
+    "@nomicfoundation/hardhat-toolbox": "^5.0.0",
+    "dotenv": "^17.3.1",
+    "hardhat": "^2.28.6"
+  }
+}

package/packages/contracts/scripts/deploy.ts

@@ -0,0 +1,28 @@
+import { ethers } from "hardhat";
+
+async function main() {
+  const [deployer] = await ethers.getSigners();
+  console.log("Deploying with:", deployer.address);
+
+  const OPMRegistry = await ethers.getContractFactory("OPMRegistry");
+  const registry = await OPMRegistry.deploy();
+  await registry.waitForDeployment();
+
+  const address = await registry.getAddress();
+  console.log("OPMRegistry deployed to:", address);
+
+  const agentKey = process.env.AGENT_PRIVATE_KEY;
+  if (agentKey) {
+    const agentWallet = new ethers.Wallet(agentKey);
+    const tx = await registry.setAgent(agentWallet.address, true);
+    await tx.wait();
+    console.log("Authorized agent:", agentWallet.address);
+  }
+
+  console.log("\nAdd to .env:\nCONTRACT_ADDRESS=" + address);
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});

package/packages/contracts/test/OPMRegistry.test.ts

@@ -0,0 +1,101 @@
+import { expect } from "chai";
+import { ethers } from "hardhat";
+
+describe("OPMRegistry", function () {
+  async function deploy() {
+    const [owner, agent, author, other] = await ethers.getSigners();
+    const Factory = await ethers.getContractFactory("OPMRegistry");
+    const registry = await Factory.deploy();
+    await registry.waitForDeployment();
+    await registry.setAgent(agent.address, true);
+    return { registry, owner, agent, author, other };
+  }
+
+  it("should register a package", async function () {
+    const { registry, author } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("test-checksum"));
+    const sig = ethers.toUtf8Bytes("test-sig");
+
+    await registry.connect(author).registerPackage("my-pkg", "1.0.0", checksum, sig, "author.eth");
+
+    const info = await registry.getPackageInfo("my-pkg", "1.0.0");
+    expect(info.exists).to.be.true;
+    expect(info.author).to.equal(author.address);
+    expect(info.ensName).to.equal("author.eth");
+  });
+
+  it("should prevent duplicate version registration", async function () {
+    const { registry, author } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("test"));
+    const sig = ethers.toUtf8Bytes("sig");
+
+    await registry.connect(author).registerPackage("my-pkg", "1.0.0", checksum, sig, "");
+    await expect(
+      registry.connect(author).registerPackage("my-pkg", "1.0.0", checksum, sig, "")
+    ).to.be.revertedWith("Version already registered");
+  });
+
+  it("should submit and aggregate scores", async function () {
+    const { registry, agent, author } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("test"));
+    const sig = ethers.toUtf8Bytes("sig");
+
+    await registry.connect(author).registerPackage("my-pkg", "1.0.0", checksum, sig, "");
+    await registry.connect(agent).submitScore("my-pkg", "1.0.0", 30, "Looks safe");
+
+    const score = await registry.getAggregateScore("my-pkg", "1.0.0");
+    expect(score).to.equal(30);
+  });
+
+  it("should reject score from unauthorized caller", async function () {
+    const { registry, author, other } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("test"));
+    const sig = ethers.toUtf8Bytes("sig");
+
+    await registry.connect(author).registerPackage("my-pkg", "1.0.0", checksum, sig, "");
+    await expect(
+      registry.connect(other).submitScore("my-pkg", "1.0.0", 50, "test")
+    ).to.be.revertedWith("Not authorized agent");
+  });
+
+  it("should find safest version", async function () {
+    const { registry, agent, author } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("c"));
+    const sig = ethers.toUtf8Bytes("s");
+
+    await registry.connect(author).registerPackage("pkg", "1.0.0", checksum, sig, "");
+    await registry.connect(author).registerPackage("pkg", "1.1.0", checksum, sig, "");
+    await registry.connect(author).registerPackage("pkg", "2.0.0", checksum, sig, "");
+
+    await registry.connect(agent).submitScore("pkg", "1.0.0", 60, "risky");
+    await registry.connect(agent).submitScore("pkg", "1.1.0", 20, "clean");
+    await registry.connect(agent).submitScore("pkg", "2.0.0", 45, "moderate");
+
+    const safest = await registry.getSafestVersion("pkg", 3);
+    expect(safest).to.equal("1.1.0");
+  });
+
+  it("should set report URI", async function () {
+    const { registry, agent, author } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("c"));
+    const sig = ethers.toUtf8Bytes("s");
+
+    await registry.connect(author).registerPackage("pkg", "1.0.0", checksum, sig, "");
+    await registry.connect(agent).setReportURI("pkg", "1.0.0", "ipfs://Qm123");
+
+    const info = await registry.getPackageInfo("pkg", "1.0.0");
+    expect(info.reportURI).to.equal("ipfs://Qm123");
+  });
+
+  it("should track ENS to author mapping", async function () {
+    const { registry, author } = await deploy();
+    const checksum = ethers.keccak256(ethers.toUtf8Bytes("c"));
+    const sig = ethers.toUtf8Bytes("s");
+
+    await registry.connect(author).registerPackage("pkg", "1.0.0", checksum, sig, "dev.eth");
+
+    const profile = await registry.getAuthorByENS("dev.eth");
+    expect(profile.addr).to.equal(author.address);
+    expect(profile.ensName).to.equal("dev.eth");
+  });
+});

package/packages/contracts/tsconfig.json

@@ -0,0 +1,11 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true
+  }
+}

package/packages/core/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "@opm/core",
+  "version": "0.1.0",
+  "private": true,
+  "main": "src/index.ts",
+  "types": "src/index.ts"
+}