space-data-module-sdk 0.6.0 → 0.7.0

package/src/index.d.ts

@@ -409,6 +409,18 @@ export interface RuntimeHost {
   rows: FlatSqlRuntimeStore;
   regions: RuntimeRegionStore;
   moduleRegistry: RuntimeModuleRegistry;
+  listCapabilities(): string[];
+  listSupportedCapabilities(): string[];
+  listOperations(): string[];
+  hasCapability(capability: string): boolean;
+  getCapability(capability: string): Record<string, (...args: any[]) => unknown> | null;
+  registerCapability(
+    capability: string,
+    adapter: Record<string, (...args: any[]) => unknown>,
+  ): Record<string, (...args: any[]) => unknown>;
+  unregisterCapability(capability: string): boolean;
+  invokeCapability(operation: string, params?: Record<string, any>): Promise<unknown>;
+  invoke(operation: string, params?: Record<string, any>): Promise<unknown>;
 }
 
 export function createFlatBufferStreamIngestor(options?: {
@@ -1117,13 +1129,21 @@ export interface BrowserEdgeShims {
     now(): number;
     timeOrigin: number;
   };
+  network?: Record<string, (...args: any[]) => unknown> | null;
+  ipfs?: Record<string, (...args: any[]) => unknown> | null;
+  walletSign?: Record<string, (...args: any[]) => unknown> | null;
+  protocolHandle?: Record<string, (...args: any[]) => unknown> | null;
+  protocolDial?: Record<string, (...args: any[]) => unknown> | null;
   filesystem?: BrowserFilesystemShim;
+  filesystemRoot?: string;
+  capabilityAdapters?: Record<string, Record<string, (...args: any[]) => unknown>>;
 }
 
 export interface BrowserHostOptions {
   capabilities?: string[];
   edgeShims?: BrowserEdgeShims;
   contextStore?: Map<string, Map<string, unknown>>;
+  wasmWallet?: unknown;
   fetch?: (...args: any[]) => Promise<any>;
   WebSocket?: any;
   crypto?: any;
@@ -1133,6 +1153,12 @@ export interface BrowserHostOptions {
   };
   filesystem?: BrowserFilesystemShim;
   filesystemRoot?: string;
+  network?: Record<string, (...args: any[]) => unknown> | null;
+  ipfs?: Record<string, (...args: any[]) => unknown> | null;
+  walletSign?: Record<string, (...args: any[]) => unknown> | null;
+  protocolHandle?: Record<string, (...args: any[]) => unknown> | null;
+  protocolDial?: Record<string, (...args: any[]) => unknown> | null;
+  capabilityAdapters?: Record<string, Record<string, (...args: any[]) => unknown>>;
 }
 
 export interface NodeHostOptions {
@@ -1156,6 +1182,40 @@ export interface NodeHostOptions {
   contextStore?: NodeHostContextStore;
   fetch?: (...args: any[]) => Promise<any>;
   WebSocket?: any;
+  filesystem?: {
+    resolvePath(path: string): string;
+    readFile(
+      path: string,
+      options?: { encoding?: string | null },
+    ): Promise<string | Uint8Array>;
+    writeFile(
+      path: string,
+      value: Uint8Array | ArrayBuffer | ArrayBufferView | string,
+      options?: { encoding?: string | null },
+    ): Promise<{ path: string }>;
+    appendFile(
+      path: string,
+      value: Uint8Array | ArrayBuffer | ArrayBufferView | string,
+      options?: { encoding?: string | null },
+    ): Promise<{ path: string }>;
+    deleteFile(path: string): Promise<{ path: string }>;
+    mkdir(
+      path: string,
+      options?: { recursive?: boolean },
+    ): Promise<{ path: string }>;
+    readdir(path?: string): Promise<NodeHostFilesystemEntry[]>;
+    stat(path: string): Promise<NodeHostFilesystemStat>;
+    rename(
+      fromPath: string,
+      toPath: string,
+    ): Promise<{ from: string; to: string }>;
+  } | null;
+  network?: Record<string, (...args: any[]) => unknown> | null;
+  ipfs?: Record<string, (...args: any[]) => unknown> | null;
+  walletSign?: Record<string, (...args: any[]) => unknown> | null;
+  protocolHandle?: Record<string, (...args: any[]) => unknown> | null;
+  protocolDial?: Record<string, (...args: any[]) => unknown> | null;
+  capabilityAdapters?: Record<string, Record<string, (...args: any[]) => unknown>>;
 }
 
 export class HostCapabilityError extends Error {
@@ -1468,16 +1528,51 @@ export class BrowserHost {
   crypto: {
     sha256(data: Uint8Array | ArrayBuffer | ArrayBufferView | string): Promise<Uint8Array>;
     sha512(data: Uint8Array | ArrayBuffer | ArrayBufferView | string): Promise<Uint8Array>;
+    hkdf(options: {
+      ikm: Uint8Array | ArrayBuffer | ArrayBufferView | number[];
+      salt: Uint8Array | ArrayBuffer | ArrayBufferView | number[];
+      info?: Uint8Array | ArrayBuffer | ArrayBufferView | number[];
+      length: number;
+    }): Promise<Uint8Array>;
     aesGcmEncrypt(options: {
       key: Uint8Array | ArrayBuffer | ArrayBufferView;
       plaintext: Uint8Array | ArrayBuffer | ArrayBufferView;
       iv?: Uint8Array | ArrayBuffer | ArrayBufferView;
-    }): Promise<{ ciphertext: Uint8Array; iv: Uint8Array | ArrayBuffer | ArrayBufferView }>;
+      aad?: Uint8Array | ArrayBuffer | ArrayBufferView | number[] | null;
+    }): Promise<{
+      ciphertext: Uint8Array;
+      tag: Uint8Array;
+      iv: Uint8Array | ArrayBuffer | ArrayBufferView;
+    }>;
     aesGcmDecrypt(options: {
       key: Uint8Array | ArrayBuffer | ArrayBufferView;
       ciphertext: Uint8Array | ArrayBuffer | ArrayBufferView;
+      tag: Uint8Array | ArrayBuffer | ArrayBufferView;
       iv: Uint8Array | ArrayBuffer | ArrayBufferView;
+      aad?: Uint8Array | ArrayBuffer | ArrayBufferView | number[] | null;
     }): Promise<Uint8Array>;
+    generateX25519Keypair(): Promise<X25519Keypair>;
+    x25519PublicKey(
+      privateKey: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+    ): Promise<Uint8Array>;
+    x25519SharedSecret(
+      privateKey: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+      publicKey: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+    ): Promise<Uint8Array>;
+    ed25519: {
+      publicKeyFromSeed(
+        seed: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+      ): Promise<Uint8Array>;
+      sign(
+        message: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+        seed: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+      ): Promise<Uint8Array>;
+      verify(
+        message: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+        signature: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+        publicKey: Uint8Array | ArrayBuffer | ArrayBufferView | number[],
+      ): Promise<boolean>;
+    };
   };
   filesystem: BrowserFilesystemShim;
   constructor(options?: BrowserHostOptions);
@@ -1576,6 +1671,7 @@ export interface BrowserModuleHarness {
   host: BrowserHost;
   bridge: HostcallBridge | null;
   wasi: BrowserWasiShim;
+  callHost(operation: string, params?: Record<string, any>): Promise<unknown>;
   invokeRaw(
     requestBytes: Uint8Array | ArrayBuffer | ArrayBufferView,
   ): Promise<Uint8Array>;
@@ -1594,7 +1690,7 @@ export interface BrowserModuleHarness {
 export function detectArtifactProfile(wasmModule: WebAssembly.Module): string;
 export function createBrowserModuleHarness(options?: {
   wasmSource: Uint8Array | ArrayBuffer | string | WebAssembly.Module | unknown;
-  host?: BrowserHost;
+  host?: BrowserHost | RuntimeHost | Record<string, unknown>;
   hostOptions?: BrowserHostOptions;
   args?: string[];
   env?: Record<string, string>;
@@ -1665,7 +1761,7 @@ export function createModuleFlatBufferStreamPump(options: {
 }): ModuleFlatBufferStreamPump;
 export function loadModule(options?: {
   wasmSource: Uint8Array | ArrayBuffer | string | WebAssembly.Module | unknown;
-  host?: BrowserHost;
+  host?: BrowserHost | RuntimeHost | Record<string, unknown>;
   hostOptions?: BrowserHostOptions;
   args?: string[];
   env?: Record<string, string | undefined>;
@@ -1687,6 +1783,194 @@ export function inspectModule(source: Uint8Array | ArrayBuffer | WebAssembly.Mod
   imports: WebAssembly.ModuleImportDescriptor[];
 }>;
 
+// --- Licensing ---
+
+export class LicensingProtocolError extends Error {
+  code: string;
+  constructor(code: string, message: string);
+}
+
+export interface LicensingChallengeMessage {
+  messageType: string;
+  role: string;
+  reqId: string;
+  moduleId: string;
+  moduleVersion?: string;
+  requesterPeerId?: string;
+  requesterXpub?: string;
+  requesterSigningPublicKey?: Uint8Array;
+  requesterEphemeralPublicKey?: Uint8Array;
+  requestedDomain?: string;
+  requestedTimeoutMs?: number;
+  requestedAtMs?: number;
+  challengeNonce?: Uint8Array;
+  expiresAtMs?: number;
+  providerPeerId?: string;
+  errorCode?: string;
+  errorMessage?: string;
+  rawBytes: Uint8Array;
+}
+
+export interface LicensingProofMessage {
+  messageType: string;
+  reqId: string;
+  moduleId: string;
+  moduleVersion?: string;
+  requesterPeerId?: string;
+  requesterXpub?: string;
+  requestedDomain?: string;
+  requestedTimeoutMs: number;
+  requesterEphemeralPublicKey: Uint8Array;
+  challengeNonce: Uint8Array;
+  challengeExpiresAtMs: number;
+  providerPeerId?: string;
+  signature: Uint8Array;
+  requesterSigningPublicKey: Uint8Array;
+  timestampMs: number;
+  rejectionCode?: string;
+  rejectionMessage?: string;
+  rawBytes: Uint8Array;
+}
+
+export interface LicensingGrantModuleDescriptor {
+  cid: string;
+  contentHash: Uint8Array;
+  sizeBytes: number;
+  moduleId: string;
+  moduleVersion?: string;
+  requiredScope?: string;
+  keyId?: string;
+  allowedDomains: string[];
+  maxGrantTimeoutMs: number;
+  encrypted: boolean;
+}
+
+export interface LicensingWrappedContentKeyHeader {
+  version: number;
+  keyExchange: string;
+  symmetric: string;
+  keyDerivation: string;
+  ephemeralPublicKey: Uint8Array;
+  nonceStart: Uint8Array;
+  recipientKeyId: Uint8Array;
+  context?: string;
+  schemaHash: Uint8Array;
+  rootType?: string;
+  timestamp?: number;
+}
+
+export interface LicensingWrappedContentKey {
+  wrappingAlgorithm: string;
+  contentKeyId?: string;
+  contentKeyRole?: string;
+  contentKeyAlgorithm?: string;
+  contentKeyEncoding?: string;
+  keyBytes: Uint8Array;
+  contentKeyVersion?: number;
+  recipientKeyId?: string;
+  requesterEphemeralPublicKey: Uint8Array;
+  providerEphemeralPublicKey: Uint8Array;
+  hkdfSalt: Uint8Array;
+  iv: Uint8Array;
+  ciphertext: Uint8Array;
+  tag: Uint8Array;
+  expiresAtMs: number;
+  recipientPublicKey: Uint8Array;
+  ephemeralPublicKey: Uint8Array;
+  nonce: Uint8Array;
+  header: LicensingWrappedContentKeyHeader;
+  encryptedPayload: Uint8Array;
+  recipientKeyIdBytes: Uint8Array;
+  schemaHash: Uint8Array;
+  keyMaterialRootType?: string;
+}
+
+export interface LicensingGrantMessage {
+  messageType: string;
+  reqId: string;
+  moduleId: string;
+  moduleVersion?: string;
+  requesterPeerId?: string;
+  requesterXpub?: string;
+  requestedDomain?: string;
+  requestedTimeoutMs: number;
+  grantedDomain?: string;
+  grantedTimeoutMs: number;
+  expiresAtMs: number;
+  requiredScope?: string;
+  grantStatus?: string;
+  denialReason?: string;
+  capabilityToken: Uint8Array;
+  grantVerifierPublicKey: Uint8Array;
+  providerSignature: Uint8Array;
+  moduleDescriptor: LicensingGrantModuleDescriptor | null;
+  wrappedContentKey: LicensingWrappedContentKey | null;
+  rawBytes: Uint8Array;
+}
+
+export function encodeLicensingChallengeRequest(options: {
+  reqId: string;
+  moduleId: string;
+  moduleVersion?: string;
+  requesterPeerId: string;
+  requesterXpub?: string;
+  requesterSigningPublicKey: Uint8Array;
+  requesterEphemeralPublicKey: Uint8Array;
+  requesterDomain: string;
+  requestedTimeoutMs: number;
+  requestedAtMs: number;
+  providerPeerId: string;
+}): Uint8Array;
+
+export function decodeLicensingChallengeMessage(
+  bytes: Uint8Array | ArrayBuffer | ArrayBufferView,
+): LicensingChallengeMessage;
+
+export function encodeLicensingProof(options: {
+  reqId: string;
+  moduleId: string;
+  moduleVersion?: string;
+  requesterPeerId: string;
+  requesterXpub?: string;
+  requesterDomain: string;
+  requestedTimeoutMs: number;
+  requesterEphemeralPublicKey: Uint8Array;
+  challengeNonce: Uint8Array;
+  challengeExpiresAtMs: number;
+  providerPeerId: string;
+  signature: Uint8Array;
+  requesterSigningPublicKey: Uint8Array;
+  timestampMs: number;
+}): Uint8Array;
+
+export function decodeLicensingProofMessage(
+  bytes: Uint8Array | ArrayBuffer | ArrayBufferView,
+): LicensingProofMessage;
+
+export function decodeLicensingGrant(
+  bytes: Uint8Array | ArrayBuffer | ArrayBufferView,
+): LicensingGrantMessage;
+
+export function validateLicensingGrant(
+  grant: LicensingGrantMessage,
+  options?: {
+    reqId?: string;
+    moduleId?: string;
+    moduleVersion?: string;
+    expectedDomain?: string;
+    requestedTimeoutMs?: number;
+    grantVerifierPublicKeyLength?: number;
+  },
+): LicensingGrantMessage;
+
+export function extractGrantModuleDescriptor(
+  grant: LicensingGrantMessage,
+): LicensingGrantModuleDescriptor;
+
+export function extractWrappedContentKey(
+  grant: LicensingGrantMessage,
+): LicensingWrappedContentKey;
+
 // --- Runtime constants ---
 
 export const DefaultManifestExports: {

package/src/index.js

@@ -2,6 +2,7 @@ export * from "./manifest/index.js";
 export * from "./compliance/index.js";
 export * from "./auth/index.js";
 export * from "./transport/index.js";
+export * from "./licensing/index.js";
 export * from "./compiler/index.js";
 export * from "./bundle/index.js";
 export * from "./capabilities.js";

package/src/licensing/index.d.ts

@@ -0,0 +1,20 @@
+export { LicensingProtocolError } from "../index.js";
+export {
+  decodeLicensingChallengeMessage,
+  decodeLicensingGrant,
+  decodeLicensingProofMessage,
+  encodeLicensingChallengeRequest,
+  encodeLicensingProof,
+  extractGrantModuleDescriptor,
+  extractWrappedContentKey,
+  validateLicensingGrant,
+} from "../index.js";
+
+export type {
+  LicensingChallengeMessage,
+  LicensingGrantMessage,
+  LicensingGrantModuleDescriptor,
+  LicensingProofMessage,
+  LicensingWrappedContentKey,
+  LicensingWrappedContentKeyHeader,
+} from "../index.js";

package/src/licensing/index.js

@@ -0,0 +1,11 @@
+export {
+  LicensingProtocolError,
+  decodeLicensingChallengeMessage,
+  decodeLicensingGrant,
+  decodeLicensingProofMessage,
+  encodeLicensingChallengeRequest,
+  encodeLicensingProof,
+  extractGrantModuleDescriptor,
+  extractWrappedContentKey,
+  validateLicensingGrant,
+} from "./records.js";