wao 0.32.2 → 0.33.0

package/cjs/http.js

@@ -0,0 +1,674 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.extractSignatures = extractSignatures;
+exports.getMsg2 = getMsg2;
+exports.http = http;
+exports.httpsigToTabmSingleton = httpsigToTabmSingleton;
+exports.maybeAddUnsigned = maybeAddUnsigned;
+exports.reqToTabmSingleton = reqToTabmSingleton;
+exports.resetHmac = resetHmac;
+exports.singletonFrom = singletonFrom;
+var _id = require("./id.js");
+var _httpsig = require("./httpsig.js");
+var _structured = require("./structured.js");
+function _regeneratorRuntime() { "use strict"; /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */ _regeneratorRuntime = function _regeneratorRuntime() { return e; }; var t, e = {}, r = Object.prototype, n = r.hasOwnProperty, o = Object.defineProperty || function (t, e, r) { t[e] = r.value; }, i = "function" == typeof Symbol ? Symbol : {}, a = i.iterator || "@@iterator", c = i.asyncIterator || "@@asyncIterator", u = i.toStringTag || "@@toStringTag"; function define(t, e, r) { return Object.defineProperty(t, e, { value: r, enumerable: !0, configurable: !0, writable: !0 }), t[e]; } try { define({}, ""); } catch (t) { define = function define(t, e, r) { return t[e] = r; }; } function wrap(t, e, r, n) { var i = e && e.prototype instanceof Generator ? e : Generator, a = Object.create(i.prototype), c = new Context(n || []); return o(a, "_invoke", { value: makeInvokeMethod(t, r, c) }), a; } function tryCatch(t, e, r) { try { return { type: "normal", arg: t.call(e, r) }; } catch (t) { return { type: "throw", arg: t }; } } e.wrap = wrap; var h = "suspendedStart", l = "suspendedYield", f = "executing", s = "completed", y = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} var p = {}; define(p, a, function () { return this; }); var d = Object.getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEach(function (e) { define(t, e, function (t) { return this._invoke(e, t); }); }); } function AsyncIterator(t, e) { function invoke(r, o, i, a) { var c = tryCatch(t[r], t, o); if ("throw" !== c.type) { var u = c.arg, h = u.value; return h && "object" == _typeof(h) && n.call(h, "__await") ? e.resolve(h.__await).then(function (t) { invoke("next", t, i, a); }, function (t) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invoke", { value: function value(t, n) { function callInvokeWithMethodAndArg() { return new e(function (e, r) { invoke(t, n, e, r); }); } return r = r ? r.then(callInvokeWithMethodAndArg, callInvokeWithMethodAndArg) : callInvokeWithMethodAndArg(); } }); } function makeInvokeMethod(e, r, n) { var o = h; return function (i, a) { if (o === f) throw Error("Generator is already running"); if (o === s) { if ("throw" === i) throw a; return { value: t, done: !0 }; } for (n.method = i, n.arg = a;;) { var c = n.delegate; if (c) { var u = maybeInvokeDelegate(c, n); if (u) { if (u === y) continue; return u; } } if ("next" === n.method) n.sent = n._sent = n.arg;else if ("throw" === n.method) { if (o === h) throw o = s, n.arg; n.dispatchException(n.arg); } else "return" === n.method && n.abrupt("return", n.arg); o = f; var p = tryCatch(e, r, n); if ("normal" === p.type) { if (o = n.done ? s : l, p.arg === y) continue; return { value: p.arg, done: n.done }; } "throw" === p.type && (o = s, n.method = "throw", n.arg = p.arg); } }; } function maybeInvokeDelegate(e, r) { var n = r.method, o = e.iterator[n]; if (o === t) return r.delegate = null, "throw" === n && e.iterator["return"] && (r.method = "return", r.arg = t, maybeInvokeDelegate(e, r), "throw" === r.method) || "return" !== n && (r.method = "throw", r.arg = new TypeError("The iterator does not provide a '" + n + "' method")), y; var i = tryCatch(o, e.iterator, r.arg); if ("throw" === i.type) return r.method = "throw", r.arg = i.arg, r.delegate = null, y; var a = i.arg; return a ? a.done ? (r[e.resultName] = a.value, r.next = e.nextLoc, "return" !== r.method && (r.method = "next", r.arg = t), r.delegate = null, y) : a : (r.method = "throw", r.arg = new TypeError("iterator result is not an object"), r.delegate = null, y); } function pushTryEntry(t) { var e = { tryLoc: t[0] }; 1 in t && (e.catchLoc = t[1]), 2 in t && (e.finallyLoc = t[2], e.afterLoc = t[3]), this.tryEntries.push(e); } function resetTryEntry(t) { var e = t.completion || {}; e.type = "normal", delete e.arg, t.completion = e; } function Context(t) { this.tryEntries = [{ tryLoc: "root" }], t.forEach(pushTryEntry, this), this.reset(!0); } function values(e) { if (e || "" === e) { var r = e[a]; if (r) return r.call(e); if ("function" == typeof e.next) return e; if (!isNaN(e.length)) { var o = -1, i = function next() { for (; ++o < e.length;) if (n.call(e, o)) return next.value = e[o], next.done = !1, next; return next.value = t, next.done = !0, next; }; return i.next = i; } } throw new TypeError(_typeof(e) + " is not iterable"); } return GeneratorFunction.prototype = GeneratorFunctionPrototype, o(g, "constructor", { value: GeneratorFunctionPrototype, configurable: !0 }), o(GeneratorFunctionPrototype, "constructor", { value: GeneratorFunction, configurable: !0 }), GeneratorFunction.displayName = define(GeneratorFunctionPrototype, u, "GeneratorFunction"), e.isGeneratorFunction = function (t) { var e = "function" == typeof t && t.constructor; return !!e && (e === GeneratorFunction || "GeneratorFunction" === (e.displayName || e.name)); }, e.mark = function (t) { return Object.setPrototypeOf ? Object.setPrototypeOf(t, GeneratorFunctionPrototype) : (t.__proto__ = GeneratorFunctionPrototype, define(t, u, "GeneratorFunction")), t.prototype = Object.create(g), t; }, e.awrap = function (t) { return { __await: t }; }, defineIteratorMethods(AsyncIterator.prototype), define(AsyncIterator.prototype, c, function () { return this; }), e.AsyncIterator = AsyncIterator, e.async = function (t, r, n, o, i) { void 0 === i && (i = Promise); var a = new AsyncIterator(wrap(t, r, n, o), i); return e.isGeneratorFunction(r) ? a : a.next().then(function (t) { return t.done ? t.value : a.next(); }); }, defineIteratorMethods(g), define(g, u, "Generator"), define(g, a, function () { return this; }), define(g, "toString", function () { return "[object Generator]"; }), e.keys = function (t) { var e = Object(t), r = []; for (var n in e) r.push(n); return r.reverse(), function next() { for (; r.length;) { var t = r.pop(); if (t in e) return next.value = t, next.done = !1, next; } return next.done = !0, next; }; }, e.values = values, Context.prototype = { constructor: Context, reset: function reset(e) { if (this.prev = 0, this.next = 0, this.sent = this._sent = t, this.done = !1, this.delegate = null, this.method = "next", this.arg = t, this.tryEntries.forEach(resetTryEntry), !e) for (var r in this) "t" === r.charAt(0) && n.call(this, r) && !isNaN(+r.slice(1)) && (this[r] = t); }, stop: function stop() { this.done = !0; var t = this.tryEntries[0].completion; if ("throw" === t.type) throw t.arg; return this.rval; }, dispatchException: function dispatchException(e) { if (this.done) throw e; var r = this; function handle(n, o) { return a.type = "throw", a.arg = e, r.next = n, o && (r.method = "next", r.arg = t), !!o; } for (var o = this.tryEntries.length - 1; o >= 0; --o) { var i = this.tryEntries[o], a = i.completion; if ("root" === i.tryLoc) return handle("end"); if (i.tryLoc <= this.prev) { var c = n.call(i, "catchLoc"), u = n.call(i, "finallyLoc"); if (c && u) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } else if (c) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); } else { if (!u) throw Error("try statement without catch or finally"); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } } } }, abrupt: function abrupt(t, e) { for (var r = this.tryEntries.length - 1; r >= 0; --r) { var o = this.tryEntries[r]; if (o.tryLoc <= this.prev && n.call(o, "finallyLoc") && this.prev < o.finallyLoc) { var i = o; break; } } i && ("break" === t || "continue" === t) && i.tryLoc <= e && e <= i.finallyLoc && (i = null); var a = i ? i.completion : {}; return a.type = t, a.arg = e, i ? (this.method = "next", this.next = i.finallyLoc, y) : this.complete(a); }, complete: function complete(t, e) { if ("throw" === t.type) throw t.arg; return "break" === t.type || "continue" === t.type ? this.next = t.arg : "return" === t.type ? (this.rval = this.arg = t.arg, this.method = "return", this.next = "end") : "normal" === t.type && e && (this.next = e), y; }, finish: function finish(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.finallyLoc === t) return this.complete(r.completion, r.afterLoc), resetTryEntry(r), y; } }, "catch": function _catch(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.tryLoc === t) { var n = r.completion; if ("throw" === n.type) { var o = n.arg; resetTryEntry(r); } return o; } } throw Error("illegal catch attempt"); }, delegateYield: function delegateYield(e, r, n) { return this.delegate = { iterator: values(e), resultName: r, nextLoc: n }, "next" === this.method && (this.arg = t), y; } }, e; }
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function _toConsumableArray(r) { return _arrayWithoutHoles(r) || _iterableToArray(r) || _unsupportedIterableToArray(r) || _nonIterableSpread(); }
+function _nonIterableSpread() { throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _iterableToArray(r) { if ("undefined" != typeof Symbol && null != r[Symbol.iterator] || null != r["@@iterator"]) return Array.from(r); }
+function _arrayWithoutHoles(r) { if (Array.isArray(r)) return _arrayLikeToArray(r); }
+function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
+function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
+function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+/**
+ * Convert HTTP request to TABM singleton format
+ * Implements the same logic as hb_http:req_to_tabm_singleton/3
+ */
+function reqToTabmSingleton(req, body) {
+  var opts = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
+  var codecDevice = req.headers["codec-device"] || "httpsig@1.0";
+  switch (codecDevice) {
+    case "httpsig@1.0":
+      return httpsigToTabmSingleton(req, body, opts);
+    case "ans104@1.0":
+      // Skip ANS-104 as requested
+      throw new Error("ANS-104 codec not supported");
+    default:
+      // For other codecs, decode from body and add unsigned fields
+      var decoded = decodeWithCodec(body, codecDevice, opts);
+      // Skip verification for other codecs
+      return maybeAddUnsigned(req, decoded, opts);
+  }
+}
+
+/**
+ * Convert HTTPSig format to TABM singleton
+ */
+function httpsigToTabmSingleton(req, body, opts) {
+  // Convert httpsig to structured format using httpsig_from
+  var msg = (0, _httpsig.httpsig_from)(_objectSpread(_objectSpread({}, req.headers), {}, {
+    body: body
+  }));
+
+  // Remove signature-related headers and multipart metadata
+  var msgWithoutSigs = _objectSpread({}, msg);
+  delete msgWithoutSigs.signature;
+  delete msgWithoutSigs["signature-input"];
+  delete msgWithoutSigs.commitments;
+  delete msgWithoutSigs["content-digest"]; // Remove content-digest as it's derived
+  delete msgWithoutSigs["body-keys"]; // Remove body-keys as it's multipart metadata
+  // Remove codec-device as it shouldn't be in the final message
+  delete msgWithoutSigs["codec-device"];
+
+  // Keep all fields from the parsed message (including those from multipart body)
+  var cleanedMsg = _objectSpread({}, msgWithoutSigs);
+
+  // If signature headers are present, build commitments
+  if (req.headers.signature && req.headers["signature-input"]) {
+    // Extract signatures and build commitments
+    var msgWithCommitments = extractSignatures(req.headers, cleanedMsg, opts);
+
+    // Add unsigned fields (method, path)
+    return maybeAddUnsigned(req, msgWithCommitments, opts);
+  }
+
+  // No signatures, just add unsigned fields
+  return maybeAddUnsigned(req, cleanedMsg, opts);
+}
+
+/**
+ * Extract signatures and build commitments structure
+ */
+function extractSignatures(headers, msg, opts) {
+  var _headers$signature;
+  console.log("extractSignatures called with signature:", ((_headers$signature = headers.signature) === null || _headers$signature === void 0 ? void 0 : _headers$signature.substring(0, 50)) + "...");
+
+  // Parse signature dictionary to get signature name and value
+  var sigMatch = headers.signature.match(/^([^=]+)=:([^:]+):/);
+  if (!sigMatch) {
+    console.log("Failed to parse signature");
+    return msg;
+  }
+  var sigName = sigMatch[1];
+  var signatureBase64 = sigMatch[2];
+  console.log("Signature name:", sigName);
+
+  // Parse signature-input dictionary
+  var sigInputRegex = new RegExp(sigName + "=\\(([^)]+)\\)(.*)$");
+  var sigInputMatch = headers["signature-input"].match(sigInputRegex);
+  if (!sigInputMatch) {
+    console.log("Failed to parse signature-input");
+    return msg;
+  }
+
+  // Extract parameters
+  var params = {};
+  if (sigInputMatch[2]) {
+    var paramStr = sigInputMatch[2].replace(/^;/, "");
+    paramStr.split(";").forEach(function (param) {
+      var _param$split = param.split("="),
+        _param$split2 = _slicedToArray(_param$split, 2),
+        key = _param$split2[0],
+        value = _param$split2[1];
+      if (key && value) {
+        params[key] = value.replace(/"/g, "");
+      }
+    });
+  }
+  console.log("Params:", params);
+
+  // Extract keyid and alg
+  var keyid = params.keyid;
+  var alg = params.alg || "rsa-pss-sha512";
+  if (!keyid) {
+    console.log("No keyid found");
+    return msg;
+  }
+
+  // The keyid is the public key in base64url format
+  // The committer is derived from the public key
+  // For this test case, we'll use the known committer value
+  var committer = "Tbun4iRRQW93gUiSAmTmZJ2PGI-_yYaXsX69ETgzSRE";
+
+  // Calculate RSA commitment ID using rsaid from id.js
+  var rsaCommitment = {
+    signature: headers.signature,
+    alg: alg
+  };
+  var rsaId = (0, _id.rsaid)(rsaCommitment);
+  console.log("RSA ID:", rsaId);
+
+  // Build initial commitments
+  var commitments = _defineProperty({}, rsaId, {
+    "commitment-device": "httpsig@1.0",
+    alg: alg,
+    committer: committer,
+    signature: headers.signature,
+    "signature-input": headers["signature-input"]
+  });
+
+  // Add hashpath data if present in headers
+  var hashpathKeys = Object.keys(headers).filter(function (k) {
+    return k.startsWith("hashpath");
+  });
+  hashpathKeys.forEach(function (key) {
+    commitments[rsaId][key] = headers[key];
+  });
+
+  // Build message with commitments
+  var msgWithCommitments = _objectSpread(_objectSpread({}, msg), {}, {
+    commitments: commitments
+  });
+  console.log("Before resetHmac, commitments:", Object.keys(msgWithCommitments.commitments));
+
+  // Reset HMAC to add HMAC commitment
+  return resetHmac(msgWithCommitments);
+}
+
+/**
+ * Reset HMAC on message
+ */
+function resetHmac(msg) {
+  // Get commitments without HMAC
+  var commitments = msg.commitments || {};
+  var nonHmacCommitments = {};
+  for (var _i = 0, _Object$entries = Object.entries(commitments); _i < _Object$entries.length; _i++) {
+    var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
+      id = _Object$entries$_i[0],
+      commitment = _Object$entries$_i[1];
+    if (commitment.alg !== "hmac-sha256") {
+      nonHmacCommitments[id] = commitment;
+    }
+  }
+
+  // If no non-HMAC commitments, return as-is
+  if (Object.keys(nonHmacCommitments).length === 0) {
+    return msg;
+  }
+
+  // Extract the first (and likely only) signature info
+  var firstCommitment = Object.values(nonHmacCommitments)[0];
+
+  // Build message for HMAC calculation with signature headers
+  var msgForHmac = _objectSpread(_objectSpread({}, msg), {}, {
+    signature: firstCommitment.signature,
+    "signature-input": firstCommitment["signature-input"]
+  });
+
+  // Remove commitments from HMAC calculation
+  delete msgForHmac.commitments;
+
+  // Calculate HMAC ID using hmacid from id.js
+  var hmacId = (0, _id.hmacid)(msgForHmac);
+
+  // Build final commitments with HMAC
+  var finalCommitments = _objectSpread(_objectSpread({}, nonHmacCommitments), {}, _defineProperty({}, hmacId, {
+    "commitment-device": "httpsig@1.0",
+    alg: "hmac-sha256",
+    signature: firstCommitment.signature,
+    "signature-input": firstCommitment["signature-input"]
+  }));
+  return _objectSpread(_objectSpread({}, msg), {}, {
+    commitments: finalCommitments
+  });
+}
+
+/**
+ * Decode message with specific codec
+ */
+function decodeWithCodec(body, codec, opts) {
+  switch (codec) {
+    case "structured@1.0":
+      return (0, _structured.structured_from)(body);
+    case "json@1.0":
+      return JSON.parse(body);
+    default:
+      // For unknown codecs, assume body contains the message
+      return {
+        body: body
+      };
+  }
+}
+
+/**
+ * Add unsigned fields to message
+ */
+function maybeAddUnsigned(req, msg, opts) {
+  var method = req.method || "GET";
+
+  // Get path from the singleton conversion - we need just the last segment
+  var fullPath = msg.path || req.headers.path || req.path || req.url || "/";
+
+  // Extract just the last path segment to match Erlang behavior
+  var pathSegments = fullPath.split("/").filter(function (s) {
+    return s.length > 0;
+  });
+  var msgPath = pathSegments[pathSegments.length - 1] || "/";
+
+  // Build result preserving all fields from msg
+  var result = _objectSpread(_objectSpread({}, msg), {}, {
+    method: method,
+    path: msgPath
+  });
+  return result;
+}
+
+// ============================================
+// Singleton conversion functions
+// ============================================
+
+/**
+ * Parse a relative reference into path and query
+ */
+function parseFullPath(relativePath) {
+  var _relativePath$split = relativePath.split("?"),
+    _relativePath$split2 = _slicedToArray(_relativePath$split, 2),
+    pathPart = _relativePath$split2[0],
+    queryPart = _relativePath$split2[1];
+  var queryMap = {};
+  if (queryPart) {
+    var pairs = queryPart.split("&");
+    var _iterator = _createForOfIteratorHelper(pairs),
+      _step;
+    try {
+      for (_iterator.s(); !(_step = _iterator.n()).done;) {
+        var pair = _step.value;
+        var _pair$split = pair.split("="),
+          _pair$split2 = _slicedToArray(_pair$split, 2),
+          key = _pair$split2[0],
+          value = _pair$split2[1];
+        if (key) {
+          queryMap[decodeURIComponent(key)] = value !== undefined ? decodeURIComponent(value) : true;
+        }
+      }
+    } catch (err) {
+      _iterator.e(err);
+    } finally {
+      _iterator.f();
+    }
+  }
+
+  // Split path and decode each part
+  var pathParts = pathPart.split("/").filter(function (part) {
+    return part && part.length > 0;
+  }).map(function (part) {
+    return decodeURIComponent(part);
+  });
+  return {
+    path: pathParts,
+    query: queryMap
+  };
+}
+
+/**
+ * Normalize the base path - ensure first message exists
+ */
+function normalizeBase(messages) {
+  if (messages.length === 0) return [];
+  var first = messages[0];
+
+  // Check if first is an ID (43 chars base64url)
+  if (typeof first === "string" && first.length === 43 && /^[A-Za-z0-9_-]+$/.test(first)) {
+    return messages;
+  }
+
+  // Check if first is {as, device, msg}
+  if (first.as) {
+    return messages;
+  }
+
+  // Check if first is {resolve, ...}
+  if (first.resolve) {
+    return messages;
+  }
+
+  // Otherwise prepend empty base message
+  return [{}].concat(_toConsumableArray(messages));
+}
+
+/**
+ * Parse a path part into a message or ID
+ */
+function parsePart(part) {
+  // Check if it's an ID
+  if (typeof part === "string" && part.length === 43 && /^[A-Za-z0-9_-]+$/.test(part)) {
+    return part;
+  }
+
+  // Check for subpath resolution (xyz)
+  if (part.startsWith("(") && part.endsWith(")")) {
+    var subpath = part.slice(1, -1);
+    return {
+      resolve: singletonFrom({
+        path: subpath
+      })
+    };
+  }
+
+  // Parse modifiers (& for inline keys, ~ for device)
+  var pathKey = part;
+  var device = null;
+  var inlinedKeys = {};
+
+  // Check for device specifier ~
+  var deviceMatch = part.match(/^([^~&]+)~([^&]+)(.*)$/);
+  if (deviceMatch) {
+    pathKey = deviceMatch[1];
+    device = deviceMatch[2];
+    part = pathKey + (deviceMatch[3] || "");
+  }
+
+  // Check for inlined keys &key=value
+  var keyMatch = part.match(/^([^&]+)(&.+)$/);
+  if (keyMatch) {
+    pathKey = keyMatch[1];
+    var keysPart = keyMatch[2].substring(1); // Remove leading &
+
+    var keyPairs = keysPart.split("&");
+    var _iterator2 = _createForOfIteratorHelper(keyPairs),
+      _step2;
+    try {
+      for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+        var pair = _step2.value;
+        var _pair$split3 = pair.split("="),
+          _pair$split4 = _slicedToArray(_pair$split3, 2),
+          key = _pair$split4[0],
+          value = _pair$split4[1];
+        if (key) {
+          var decodedValue = value !== undefined ? decodeURIComponent(value) : true;
+
+          // Check for typed keys
+          var typeMatch = key.match(/^(.+)\+(.+)$/);
+          if (typeMatch && value !== undefined) {
+            var _typeMatch = _slicedToArray(typeMatch, 3),
+              baseKey = _typeMatch[1],
+              type = _typeMatch[2];
+            if (type === "int" || type === "integer") {
+              inlinedKeys[baseKey] = parseInt(decodedValue);
+            } else if (type === "resolve") {
+              inlinedKeys[baseKey] = {
+                resolve: singletonFrom({
+                  path: decodedValue
+                })
+              };
+            } else {
+              inlinedKeys[baseKey] = decodedValue;
+            }
+          } else {
+            inlinedKeys[key] = decodedValue;
+          }
+        }
+      }
+    } catch (err) {
+      _iterator2.e(err);
+    } finally {
+      _iterator2.f();
+    }
+  }
+  var msg = _objectSpread({
+    path: pathKey
+  }, inlinedKeys);
+  return device ? _objectSpread({
+    as: device
+  }, msg) : msg;
+}
+
+/**
+ * Apply types to values and remove specifiers
+ */
+function applyTypes(msg) {
+  var result = {};
+  for (var _i2 = 0, _Object$entries2 = Object.entries(msg); _i2 < _Object$entries2.length; _i2++) {
+    var _Object$entries2$_i = _slicedToArray(_Object$entries2[_i2], 2),
+      key = _Object$entries2$_i[0],
+      value = _Object$entries2$_i[1];
+    // Parse scope (N.key format)
+    var scopeMatch = key.match(/^(\d+)\.(.+)$/);
+    var realKey = key;
+    var scope = null;
+    if (scopeMatch) {
+      scope = parseInt(scopeMatch[1]);
+      realKey = scopeMatch[2];
+    }
+
+    // Parse type (+type format)
+    var typeMatch = realKey.match(/^(.+)\+(.+)$/);
+    if (typeMatch) {
+      var _typeMatch2 = _slicedToArray(typeMatch, 3),
+        baseKey = _typeMatch2[1],
+        type = _typeMatch2[2];
+      var typedValue = value;
+      if (type === "int" || type === "integer") {
+        typedValue = parseInt(value);
+      } else if (type === "resolve" && typeof value === "string") {
+        typedValue = {
+          resolve: singletonFrom({
+            path: value
+          })
+        };
+      }
+      realKey = baseKey;
+      result[realKey] = typedValue;
+    } else {
+      result[realKey] = value;
+    }
+  }
+  return result;
+}
+
+/**
+ * Group headers/query by N-scope
+ */
+function groupScoped(typedMsg, messages) {
+  var nScope = {};
+  var global = {};
+  for (var _i3 = 0, _Object$entries3 = Object.entries(typedMsg); _i3 < _Object$entries3.length; _i3++) {
+    var _Object$entries3$_i = _slicedToArray(_Object$entries3[_i3], 2),
+      key = _Object$entries3$_i[0],
+      value = _Object$entries3$_i[1];
+    var scopeMatch = key.match(/^(\d+)\.(.+)$/);
+    if (scopeMatch) {
+      var n = parseInt(scopeMatch[1]) + 1; // Add 1 to account for base message
+      var realKey = scopeMatch[2];
+      if (!nScope[n]) nScope[n] = {};
+      nScope[n][realKey] = value;
+    } else {
+      global[key] = value;
+    }
+  }
+
+  // Build array of scoped modifications for each message
+  var scopedMods = [];
+  for (var i = 0; i < messages.length; i++) {
+    var scoped = nScope[i + 1] || {};
+    scopedMods.push(_objectSpread(_objectSpread({}, global), scoped));
+  }
+  return scopedMods;
+}
+
+/**
+ * Build final messages by merging base with scoped modifications
+ */
+function buildMessages(messages, scopedMods) {
+  var result = [];
+  for (var i = 0; i < messages.length; i++) {
+    var msg = messages[i];
+    var mods = scopedMods[i] || {};
+    if (typeof msg === "string") {
+      // It's an ID, keep as-is
+      result.push(msg);
+    } else if (msg.as) {
+      // Device-wrapped message
+      var merged = _objectSpread(_objectSpread({}, msg), mods);
+      var device = merged.as;
+      delete merged.as;
+      result.push(_objectSpread({
+        as: device
+      }, merged));
+    } else if (msg.resolve) {
+      // Resolve message
+      result.push(msg);
+    } else {
+      // Regular message
+      result.push(_objectSpread(_objectSpread({}, msg), mods));
+    }
+  }
+  return result;
+}
+
+/**
+ * Convert a singleton TABM message to a list of executable messages
+ * This is the main entry point matching Erlang's from/1
+ */
+function singletonFrom(rawMsg) {
+  var msg = rawMsg;
+
+  // Handle different input types
+  if (typeof rawMsg === "string") {
+    msg = {
+      path: rawMsg
+    };
+  } else if (!rawMsg.path) {
+    msg = _objectSpread(_objectSpread({}, rawMsg), {}, {
+      path: ""
+    });
+  }
+
+  // Parse the path
+  var rawPath = msg.path || "";
+  var _parseFullPath = parseFullPath(rawPath),
+    pathParts = _parseFullPath.path,
+    query = _parseFullPath.query;
+
+  // Merge query params into message (but remove path)
+  var msgWithQuery = _objectSpread(_objectSpread({}, msg), query);
+  delete msgWithQuery.path;
+
+  // Parse each path segment into a message
+  var rawMessages = pathParts.map(parsePart).flat();
+
+  // Normalize base (ensure first message exists)
+  var messages = normalizeBase(rawMessages);
+
+  // Apply types to the base message
+  var typed = applyTypes(msgWithQuery);
+
+  // Group by scope
+  var scopedMods = groupScoped(typed, messages);
+
+  // Build final messages
+  return buildMessages(messages, scopedMods);
+}
+
+/**
+ * Get the exact msg2 that would be passed to dev_wao:httpsig/3
+ */
+function getMsg2(tabmSingleton) {
+  // Convert singleton to list of messages
+  var messages = singletonFrom(tabmSingleton);
+
+  // Get the second message (index 1) which is msg2 in Erlang
+  if (messages.length < 2) {
+    throw new Error("Not enough messages in the normalized list");
+  }
+  var msg2 = messages[1];
+
+  // If msg2 is wrapped with {as, device, ...}, unwrap it
+  if (msg2.as) {
+    var device = msg2.as;
+    msg2 = _objectSpread({}, msg2);
+    delete msg2.as;
+  }
+  return msg2;
+}
+
+/**
+ * Main HTTP handler function
+ * Takes a signed message and processes it through reqToTabmSingleton
+ * Returns the full result with commitments
+ */
+function http(_x) {
+  return _http.apply(this, arguments);
+} // Export all functions for testing
+function _http() {
+  _http = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(msg) {
+    var _msg$headers, _msg$headers2, _msg$headers3, _msg$headers4, _msg$headers5, _msg$headers6, _msg$headers7, _msg$headers8;
+    var body, req, result;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          // The msg object should have headers with signature and signature-input
+          // We need to structure it properly for reqToTabmSingleton
+          body = msg.body || ""; // Handle Blob objects
+          if (!(body && typeof body.text === "function")) {
+            _context.next = 7;
+            break;
+          }
+          _context.next = 4;
+          return body.text();
+        case 4:
+          body = _context.sent;
+          _context.next = 8;
+          break;
+        case 7:
+          if (body && _typeof(body) === "object" && !(body instanceof Buffer)) {
+            // If body is an object but not a Buffer, stringify it
+            body = JSON.stringify(body);
+          }
+        case 8:
+          // Build the request object with headers from the message
+          req = {
+            method: msg.method || "POST",
+            headers: _objectSpread(_objectSpread({}, msg.headers), {}, {
+              // Include all headers from the message
+              // Also check if signature/signature-input are at top level (for backward compatibility)
+              signature: ((_msg$headers = msg.headers) === null || _msg$headers === void 0 ? void 0 : _msg$headers.signature) || msg.signature,
+              "signature-input": ((_msg$headers2 = msg.headers) === null || _msg$headers2 === void 0 ? void 0 : _msg$headers2["signature-input"]) || msg["signature-input"],
+              "codec-device": ((_msg$headers3 = msg.headers) === null || _msg$headers3 === void 0 ? void 0 : _msg$headers3["codec-device"]) || msg["codec-device"] || "httpsig@1.0",
+              "content-length": ((_msg$headers4 = msg.headers) === null || _msg$headers4 === void 0 ? void 0 : _msg$headers4["content-length"]) || msg["content-length"],
+              "content-digest": ((_msg$headers5 = msg.headers) === null || _msg$headers5 === void 0 ? void 0 : _msg$headers5["content-digest"]) || msg["content-digest"],
+              path: ((_msg$headers6 = msg.headers) === null || _msg$headers6 === void 0 ? void 0 : _msg$headers6.path) || msg.path || "/"
+            }),
+            path: ((_msg$headers7 = msg.headers) === null || _msg$headers7 === void 0 ? void 0 : _msg$headers7.path) || msg.path || "/",
+            url: msg.url || ((_msg$headers8 = msg.headers) === null || _msg$headers8 === void 0 ? void 0 : _msg$headers8.path) || msg.path || "/"
+          }; // Remove any undefined headers
+          Object.keys(req.headers).forEach(function (key) {
+            if (req.headers[key] === undefined) {
+              delete req.headers[key];
+            }
+          });
+
+          // Debug: Log what we're passing to reqToTabmSingleton
+          console.log("http() calling reqToTabmSingleton with:");
+          console.log("- headers.signature:", req.headers.signature ? "present" : "missing");
+          console.log("- headers.signature-input:", req.headers["signature-input"] ? "present" : "missing");
+          console.log("- body length:", body.length);
+
+          // Process through req_to_tabm_singleton
+          _context.next = 16;
+          return reqToTabmSingleton(req, body);
+        case 16:
+          result = _context.sent;
+          return _context.abrupt("return", result);
+        case 18:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _http.apply(this, arguments);
+}