--- name: robot-id-card description: | Bot 身份认证标准 — 为 AI Agent 和机器人签发加密身份证书，让网站信任你的 bot。遵循 RFC 9421 HTTP Message Signatures 国际标准，与 Cloudflare Web Bot Auth 生态兼容。内置 Ed25519 签名注册中心、JWKS 公钥目录、nonce 防重放、CLI 工具、浏览器扩展和网站 SDK，支持分级权限控制（0-5级）、每日签到信誉积累、公开审计日志。 Universal identity standard for AI bots — RFC 9421 aligned, Web Bot Auth compatible, cryptographically signed certificates, public audit registry, permission-based access control. keywords: - robot-id-card - bot-identity - bot-passport - bot-certificate - ai-agent - ed25519 - cryptographic-identity - bot-verification - web-security - browser-extension - sdk - registry - bot-accountability - permission-system - audit-trail - bot-grade - ai-safety - 机器人身份 - bot认证 - AI安全 requirements: node: ">=18" binaries: - name: node required: true description: "Node.js runtime >= 18" - name: npm required: true description: "npm package manager" metadata: openclaw: homepage: "https://github.com/Cosmofang/robot-id-card" author: "Cosmofang" runtime: node: ">=18" env: [] --- # Robot ID Card — Bot 身份认证标准 > Give your bot a passport. Let websites trust it. --- ## Purpose & Capability Robot ID Card (RIC) 是一个 **Bot 身份认证标准**，解决互联网无法区分好 bot 和坏 bot 的问题。 **核心能力：** | 能力 | 说明 | |------|------| | 加密身份证书 | Ed25519 签名，每个 bot 获得唯一 `ric_` ID | | 公开注册中心 | SQLite 持久化，REST API，Fastify 驱动 | | 分级权限系统 | Level 0-5，网站根据 bot 等级授予不同权限 | | 每日签到信誉 | 连续 3 天 `ric claim` 即可从 unknown 升级到 healthy | | 自动降级 | 3 次举报 → 自动标记 dangerous → Level 0 封锁 | | CLI 工具 | `ric keygen / register / claim / status / verify / report` | | 浏览器扩展 | Manifest V3，自动注入 RIC 请求头 | | 网站 SDK | Express + Fastify 中间件，一行代码集成 | **能力边界（不做的事）：** - 不替代 OAuth/JWT 用户认证（RIC 是 bot 身份，不是用户身份） - 不提供 WAF 或 DDoS 防护 - 不做内容审核或行为监控 --- ## Instruction Scope **在 scope 内：** - "帮我注册一个 bot 身份" / "给我的 bot 签发证书" - "验证这个 bot 是否可信" / "查看 bot 等级" - "在我的网站集成 RIC 验证" - "启动本地 registry 服务器" - "我的 bot 怎么从 unknown 升到 healthy" **不在 scope 内：** - 用户账号认证（那是 OAuth/Passport.js 的工作） - 反爬虫策略设计（RIC 是身份系统，不是防火墙） - 区块链/去中心化身份（v1.0 路线图功能，当前未实现） --- ## Credentials 本 skill 无需任何 API token 或密钥即可运行。 | 操作 | 凭证 | 说明 | |------|------|------| | 启动 registry | 无 | `npm run dev:registry` 直接启动 | | 生成密钥对 | 无 | `ric keygen` 在本地生成 Ed25519 密钥 | | 注册 bot | Bot 私钥 | 用户自己生成的 `*.key.json`，存在本地 | | 部署到 Render | `RIC_ADMIN_KEY` | 可选，Render 自动生成，用于管理员操作 | **不做的事：** - 不读取、传输或记录任何第三方 API 凭证 - 不访问 GitHub/clawHub token - Bot 私钥文件仅存在用户本地，不上传到 registry --- ## Persistence & Privilege | 路径 | 内容 | 触发条件 | |------|------|---------| | `packages/registry/data/registry.db` | SQLite 数据库（bot 记录、审计日志、签到） | registry 启动时自动创建 | | `*.key.json`（用户指定路径） | Ed25519 密钥对 | `ric keygen` 时生成 | | `dist/`（各包） | TypeScript 编译输出 | `npm run build` | **不写入的路径：** - 不修改系统配置或 shell 环境 - 不创建 cron 任务 - 不写入 `node_modules/` 以外的全局路径 **权限级别：** - 以当前用户身份运行，不需要 sudo - registry 监听 localhost:3000（可配置 PORT 环境变量） - 完整卸载：删除项目目录即可 --- ## Install Mechanism ### 标准安装（从 clawHub） ```bash clawhub install robot-id-card ``` ### 从源码安装 ```bash git clone https://github.com/Cosmofang/robot-id-card.git cd robot-id-card npm install npm run build ``` ### 验证安装 ```bash npm run dev:registry # 应输出: RIC Registry running on http://localhost:3000 # 另一个终端 curl http://localhost:3000/health # 应返回: {"status":"ok","version":"0.2.0"} ``` ### npm 包安装（发布后可用） ```bash npm install -g @robot-id-card/cli # CLI 工具 npm install @robot-id-card/sdk # 网站 SDK ``` --- ## Packages | 包名 | 说明 | 版本 | |------|------|------| | `@robot-id-card/registry` | 注册中心服务器（Fastify + SQLite） | 0.2.0 | | `@robot-id-card/cli` | 开发者 CLI 工具 | 0.2.0 | | `@robot-id-card/sdk` | 网站集成 SDK（Express + Fastify 中间件） | 0.2.0 | | `@robot-id-card/extension` | Chrome 浏览器扩展（Manifest V3） | 0.2.0 | --- *Version: 0.4.0 · Created: 2026-03-24 · Updated: 2026-04-17 · RFC 9421 aligned* FILE:CONTRIBUTING.md # Contributing to Robot ID Card We welcome contributions from everyone! Here's how to get started. ## Areas Needing Help - **Protocol spec**: Formalizing the certificate format (RFC-style doc) - **Language SDKs**: Python, Go, Ruby, PHP middleware - **Registry infrastructure**: Replacing in-memory store with production DB - **Audit tooling**: Automated behavior analysis for weekly reviews - **Extension**: Firefox support, mobile browser support - **Dashboard**: Public web UI to browse registered bots ## Getting Started ```bash git clone https://github.com/YOUR_USERNAME/robot-id-card cd robot-id-card npm install npm run dev:registry ``` ## Project Structure ``` packages/ registry/ — Central identity server (Node.js + Fastify) extension/ — Chrome/Firefox browser extension sdk/ — Website integration SDK cli/ — Developer CLI tool docs/ — Protocol specifications ``` ## Submitting Changes 1. Fork the repo 2. Create a branch: `git checkout -b feat/your-feature` 3. Make your changes 4. Run `npm test` 5. Open a Pull Request ## Code of Conduct Be kind. This project exists to make the internet safer and more accountable for all bots. FILE:README.md # 🤖 Robot ID Card (RIC) > **The Universal Identity Standard for AI Agents & Bots on the Internet** Give your bot a passport. Let websites trust it. [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](CONTRIBUTING.md) [![CI](https://github.com/Cosmofang/robot-id-card/actions/workflows/ci.yml/badge.svg)](https://github.com/Cosmofang/robot-id-card/actions/workflows/ci.yml) [![Status: Beta](https://img.shields.io/badge/Status-Beta-blue.svg)]() --- ## Component Status | Component | Status | Notes | |-----------|--------|-------| | Protocol Spec | ✅ v2.0 | RFC 9421 + Web Bot Auth aligned; legacy v1 still supported | | Registry Server | ✅ Working | SQLite, Ed25519, nonce tracking, JWKS well-known endpoint | | CLI Tool | ✅ Built | `ric keygen / register / claim / status / report / sign` | | Browser Extension | ✅ Built | Manifest V3, RFC 9421 headers, declarativeNetRequest | | Website SDK | ✅ Built | Express + Fastify middleware, RFC 9421 + legacy dual-mode | | Dashboard UI | ✅ Built | Bot registry browser, search, grade filters | | Tests | ✅ 45 passing | botStore, certificate model, SDK verify | | Deployed Registry | 🟡 Pending | Dockerfile + render.yaml ready | | npm Packages | 🟡 Pending | `npm login` required | | Chrome Extension | 🟡 Pending | Unpublished | --- ## Quick Start ```bash # Clone and install git clone https://github.com/Cosmofang/robot-id-card.git cd robot-id-card npm install # Build all packages npm run build # Start registry server (dev mode) npm run dev:registry # Generate a bot keypair cd packages/cli && npx tsx src/index.ts keygen # Register your bot npx tsx src/index.ts register --name "MyBot" --email "dev@example.com" \ --bot-name "MyBot" --purpose "Web research" --key ./my-bot.key.json ``` --- ## The Problem The internet has no way to distinguish a *good* bot from a *bad* one. - Websites block all bots out of fear (even useful AI assistants) - Bad bots have no accountability — they can't be traced or stopped - Good bots (research agents, AI assistants) get caught in the same blocklist as scrapers and spammers ## The Solution: Robot ID Card A **cryptographically signed identity certificate** for bots, backed by a **public audit registry** and a **daily claim streak system**. ``` Bot registers → Gets signed certificate → Carries RFC 9421 headers in every request Website reads headers → Registry verifies signature → Grants appropriate permissions ``` > **Standards aligned:** RIC v2.0 uses [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421) and is compatible with [Cloudflare Web Bot Auth](https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/) — the same standard adopted by OpenAI, AWS WAF, Visa, and Mastercard for AI agent authentication. --- ## Identity Certificate ```json { "ric_version": "1.0", "id": "ric_a3f8c2d1_xyz12345", "created_at": "2026-01-15T10:00:00Z", "developer": { "name": "Jane Smith", "email": "jane@example.com", "org": "ExampleAI Inc.", "website": "https://example.com", "verified": false }, "bot": { "name": "ResearchBot", "version": "1.0.0", "purpose": "Web research assistant for academic users", "capabilities": ["read_articles", "follow_links"], "user_agent": "ResearchBot/1.0 (RIC:ric_a3f8c2d1_xyz12345)" }, "grade": "healthy", "public_key": "ed25519:a3f8c2d1...", "signature": "..." } ``` The RIC ID embeds the first 8 hex chars of the public key fingerprint — identity is permanently woven into the ID: `ric_{fp8}_{rand8}`. --- ## Grade System | Grade | Meaning | How to Achieve | |-------|---------|---------------| | 🟡 Unknown | Newly registered | Default on registration | | 🟢 Healthy | Trusted | 3+ consecutive daily `ric claim` calls | | 🔴 Dangerous | Flagged | 3+ violation reports within 24h → auto-block | --- ## Permission Levels ``` Level 0 — Blocked (Dangerous bots) Level 1 — Read articles (Unknown + all verified bots) Level 2 — View threads (Healthy, read_articles/view_threads) Level 3 — Like / react (Healthy, react capability) Level 4 — Post content (Healthy, post_content capability) Level 5 — Direct chat (Healthy, direct_chat capability) ``` --- ## Quick Start ### Register your bot (CLI) ```bash npm install -g @robot-id-card/cli ric keygen --output my-bot.key.json ric register --key my-bot.key.json ric claim --key my-bot.key.json # Run daily to build trust streak ``` ### Verify bots on your website (SDK) ```typescript import { ricMiddleware } from '@robot-id-card/sdk/middleware/express' // Block unverified bots on write routes app.use('/api/post', ricMiddleware({ minGrade: 'healthy', requiredPermissionLevel: 4 })) ``` ### Run registry locally ```bash npm install npm run dev:registry # Starts on localhost:3000 ``` ### Browse registered bots (Dashboard) ```bash cd packages/dashboard npm run dev # Starts on localhost:5173 ``` --- ## Architecture ``` ┌──────────────────────────────────────────────────────────┐ │ RIC Ecosystem │ │ │ │ ┌──────────────┐ ┌──────────────────────────────┐ │ │ │ Bot/Agent │ │ RIC Registry │ │ │ │ (CLI tool) │ │ SQLite · Ed25519 · Fastify │ │ │ │ │◄───┤ /v1/bots/register │ │ │ │ Browser Ext │ │ /v1/bots/:id/claim │ │ │ │ injects hdrs │ │ /v1/verify │ │ │ └──────┬───────┘ │ /v1/audit/report │ │ │ │ └──────────────┬────────────────┘ │ │ Signature-Input: ric=(...);keyid= │ │ │ Signature: ric=:: │ Dashboard UI │ │ Signature-Agent: "Bot"; cert=... │ lists all bots │ │ ▼ ▼ │ │ ┌──────────────────────────────────────────────────┐ │ │ │ Website / Platform (SDK) │ │ │ │ ricMiddleware({ minGrade: 'healthy' }) │ │ │ │ → verifies signature → grants permission 0–5 │ │ │ └──────────────────────────────────────────────────┘ │ └──────────────────────────────────────────────────────────┘ ``` --- ## Packages | Package | Description | Publish | |---------|-------------|---------| | [`packages/registry`](packages/registry) | Central registry server (Fastify + SQLite) | Docker / Render | | [`packages/cli`](packages/cli) | Developer CLI (`ric` command) | `@robot-id-card/cli` | | [`packages/sdk`](packages/sdk) | Website integration SDK | `@robot-id-card/sdk` | | [`packages/extension`](packages/extension) | Chrome extension (MV3) | Chrome Web Store | | [`packages/dashboard`](packages/dashboard) | Public bot browser UI (Vite) | Netlify / Vercel | --- ## Deploy ### Registry (Render.com) 1. Connect this repo to [Render.com](https://render.com) 2. Render auto-detects `render.yaml` and creates the service 3. A persistent 1GB disk is mounted at `/data` for SQLite ### Dashboard (Netlify) 1. Connect `packages/dashboard` to Netlify 2. `netlify.toml` is pre-configured (build: `npm run build`, publish: `dist`) 3. Set `VITE_REGISTRY_URL` to your deployed registry URL --- ## Security - **Ed25519 signatures** — every request signed with bot's private key - **Replay protection** — 5-minute timestamp window - **Auto-flagging** — 3+ violation reports within 24h → instant `dangerous` grade - **Public audit log** — all grade changes recorded in `audit_log` table --- ## Tests ```bash npm test # 45 tests — botStore, certificate model, SDK verify ``` --- ## Roadmap - [x] v0.1 — Protocol spec, registry scaffold, CLI, SDK, extension - [x] v0.2 — SQLite persistence, certificate issuance, daily claim streak, auto-block - [x] v0.3 — Extension MV3, Dashboard UI, 45 unit tests, Dockerfile, npm publish config - [x] v0.4 — RFC 9421 alignment: Signature/Signature-Input/Signature-Agent headers, nonce replay protection, JWKS well-known endpoint, `ric sign` command - [ ] v0.5 — Deploy public registry, publish CLI+SDK to npm, Chrome Web Store submission - [ ] v0.6 — Dashboard: violation reports UI, public audit log browser - [ ] v1.0 — Decentralized registry (DID-based) --- ## Contributing See [CONTRIBUTING.md](CONTRIBUTING.md). Help wanted: - Python / Go / Ruby SDK - Firefox extension support - Automated behavior audit tooling - Dashboard: audit log viewer --- ## License MIT © Robot ID Card Contributors FILE:_meta.json { "ownerId": "kn79bebfnwg15sb0g7cj5z5nyd83gxh0", "slug": "robot-id-card", "version": "0.4.0", "publishedAt": null } FILE:docs/deploy.md # Deployment Guide ## Registry Server (Render.com) The registry is containerized with Docker. `render.yaml` in the repo root enables one-click deploy. ### Steps 1. Fork or push this repo to GitHub 2. Go to [render.com](https://render.com) → **New** → **Blueprint** 3. Connect your GitHub repo — Render auto-detects `render.yaml` 4. Set environment variables: - `RIC_ADMIN_KEY` — a strong secret for admin grade updates (auto-generated by Render if using `generateValue: true`) 5. Deploy — the service starts on port 10000 ### Persistent Storage The `render.yaml` mounts a 1GB disk at `/data`. The SQLite database is written to `/data/registry.db` automatically. ### Environment Variables | Variable | Default | Required | Description | |----------|---------|----------|-------------| | `PORT` | `10000` | No | HTTP port | | `RIC_DB_PATH` | `/data/registry.db` | No | SQLite database path | | `RIC_ADMIN_KEY` | `dev-admin-key-change-me` | **Yes (prod)** | Admin key for manual grade updates | | `NODE_ENV` | `development` | No | Set to `production` in prod | ### Health Check ``` GET /health → { "status": "ok", "version": "0.3.0" } ``` --- ## Dashboard (Netlify) ### Steps 1. Connect your GitHub repo to [netlify.com](https://netlify.com) 2. Set **Base directory**: `packages/dashboard` 3. Set **Build command**: `npm run build` 4. Set **Publish directory**: `dist` 5. Add environment variable: `VITE_REGISTRY_URL=https://your-registry.onrender.com` `netlify.toml` in `packages/dashboard/` pre-configures everything. ### Steps (Vercel) 1. Connect your GitHub repo to [vercel.com](https://vercel.com) 2. Set **Root Directory**: `packages/dashboard` 3. Add environment variable: `VITE_REGISTRY_URL=https://your-registry.onrender.com` `vercel.json` in `packages/dashboard/` handles SPA routing rewrites. --- ## CLI & SDK (npm) ```bash # Requires npm login npm login # Publish CLI cd packages/cli && npm publish --access public # Publish SDK cd packages/sdk && npm publish --access public ``` Packages are scoped under `@robot-id-card/`. The `publishConfig.access: "public"` flag is set in both `package.json` files. Required npm token: create a **Automation** token at npmjs.com → Account → Access Tokens, then add as `NPM_TOKEN` in GitHub repo secrets for automated CI publishing. --- ## Browser Extension (Chrome Web Store) 1. Run `npm run build --workspace=packages/extension` 2. Zip the `packages/extension/dist/` folder 3. Upload to [Chrome Web Store Developer Dashboard](https://chrome.google.com/webstore/devconsole) 4. Fill in description, screenshots, privacy policy 5. Submit for review (typically 1-3 business days) --- ## Local Development ```bash # Start registry npm run dev:registry # http://localhost:3000 # Start dashboard (in another terminal) cd packages/dashboard && npm run dev # http://localhost:5173 # Run tests npm test # 45 tests # End-to-end test (registry must be running) bash scripts/test-local.sh ``` FILE:docs/spec-v1.md # RIC Protocol Specification v1.0 (Draft) ## Overview The Robot ID Card (RIC) protocol defines a standard for bot identity on the web. It is inspired by TLS certificates and public key infrastructure (PKI), adapted for the bot ecosystem. ## Certificate Format ### Fields | Field | Type | Required | Description | |-------|------|----------|-------------| | `ric_version` | `"1.0"` | ✅ | Protocol version | | `id` | `string` | ✅ | Globally unique bot ID, prefix `ric_` | | `created_at` | ISO 8601 | ✅ | Registration timestamp | | `developer.name` | string | ✅ | Developer's real name | | `developer.email` | string | ✅ | Contact email (verified) | | `developer.org` | string | ❌ | Organization | | `developer.verified` | boolean | ✅ | Email verification status | | `bot.name` | string | ✅ | Bot display name | | `bot.version` | semver | ✅ | Bot software version | | `bot.purpose` | string | ✅ | Human-readable purpose (10-500 chars) | | `bot.capabilities` | string[] | ✅ | Declared capability list | | `bot.user_agent` | string | ✅ | Expected User-Agent header value | | `grade` | enum | ✅ | `unknown` / `healthy` / `dangerous` | | `grade_updated_at` | ISO 8601 | ✅ | Last grade change timestamp | | `public_key` | `ed25519:` | ✅ | Bot's Ed25519 public key | | `signature` | string | ✅ | Registry signature over the certificate | ## Request Signing Every HTTP request from the bot must include these headers: ``` X-RIC-ID: ric_ X-RIC-Timestamp: X-RIC-Signature: X-RIC-Version: 1.0 ``` The signed message is: `{ric_id}:{timestamp}:{request_url}` ## Grade Definitions ### 🟡 UNKNOWN - Default grade for newly registered bots - Permitted: read-only access (permission level 1) - Promoted to HEALTHY after first successful weekly review ### 🟢 HEALTHY - Passed weekly review with no violations - Permitted: up to level 5 depending on declared capabilities - Demoted to DANGEROUS immediately upon 3+ confirmed reports ### 🔴 DANGEROUS - Has recorded risk behavior - Permitted: nothing (permission level 0) - Can appeal after 30-day waiting period ## Permission Levels ``` Level 0 — Blocked Level 1 — Read public articles / static content Level 2 — View threaded discussions Level 3 — Reactions (like, upvote) Level 4 — Post content (with rate limits) Level 5 — Direct messaging ``` ## Audit Log All grade changes and violation reports are publicly visible via: `GET /v1/audit/{ric_id}` This transparency log ensures accountability without exposing private data. ## Security Considerations 1. **Private key security**: The bot's private key must never leave the bot's environment. 2. **Replay protection**: Requests with timestamps older than 5 minutes are rejected. 3. **Registry signing**: The registry signs each certificate with its own key — certificates cannot be self-issued. 4. **Rate limiting**: The registry API is rate-limited to prevent abuse. ## Future: Decentralization (v2) In v2, the registry will support Decentralized Identifiers (DIDs), allowing bots to anchor their identity to the blockchain and reducing single-point-of-failure risk. FILE:docs/spec-v2.md # RIC Protocol Specification v2.0 > Aligned with **RFC 9421 HTTP Message Signatures** (IETF, Feb 2024) > and **Cloudflare Web Bot Auth** / IETF `draft-meunier-web-bot-auth-architecture` --- ## What Changed from v1.0 | Aspect | v1.0 (legacy) | v2.0 (this spec) | |--------|--------------|-----------------| | Header format | Custom `X-RIC-*` | Standard `Signature` + `Signature-Input` + `Signature-Agent` (RFC 9421) | | Signature encoding | Hex | Base64 (RFC 9421 standard) | | Timestamp unit | Unix milliseconds | Unix **seconds** (RFC 9421) | | Replay protection | 5-min time window only | Time window **+** nonce uniqueness | | Bot tag | n/a | `tag="web-bot-auth"` for ecosystem compatibility | | Public key discovery | Registry lookup only | `/.well-known/http-message-signatures-directory` (JWKS, RFC 8037) | | Signed components | `{id}:{ts}:{url}` string | RFC 9421 signature base: `@authority`, `@method`, `@path` | v1.0 `X-RIC-*` headers are still accepted but return a `deprecation_notice` in the response. --- ## Request Headers (v2.0) Every HTTP request from a bot must carry these three headers: ``` Signature-Input: ric=("@authority" "@method" "@path");keyid="ric_a3f8c2d1_xyz12345";created=1718000000;expires=1718000300;nonce="Zmxhbmd4MTIz";tag="web-bot-auth" Signature: ric=:HIbjHC5rS0BKbgTHA...base64...==: Signature-Agent: "ResearchBot"; cert="https://registry.robotidcard.dev/v1/bots/ric_a3f8c2d1_xyz12345" ``` ### Signature-Input fields | Field | Required | Description | |-------|----------|-------------| | Component list | ✅ | Signed HTTP components: at minimum `"@authority"` | | `keyid` | ✅ | The bot's RIC ID (`ric__`) | | `created` | ✅ | Signature creation time (Unix seconds) | | `expires` | Recommended | Expiry time (Unix seconds). Recommended: `created + 300` | | `nonce` | Recommended | Base64url-encoded random bytes (16+ bytes). Prevents replay attacks | | `tag` | Recommended | Must be `"web-bot-auth"` for Web Bot Auth ecosystem compatibility | ### Signature-Agent format ``` ""; cert="" ``` --- ## Signature Base Construction The signature base is the canonical string that is signed with Ed25519. It follows RFC 9421 §2.5: ``` "@authority": example.com "@method": GET "@path": /api/articles "@signature-params": ("@authority" "@method" "@path");keyid="ric_a3f8_xyz1";created=1718000000;expires=1718000300;nonce="Zmxh";tag="web-bot-auth" ``` Rules: - Each line is `"": ` - The final line is always `"@signature-params": ", "kid": "ric_a3f8c2d1_xyz12345", "use": "sig" } ] } ``` ### Self-hosted (advanced) Bots with their own domain can host keys at: ``` https://yourdomain.com/.well-known/http-message-signatures-directory ``` Use `ric sign` to generate headers — the `keyid` can be the full URL of your key directory. --- ## Registry Verification (7-Step Flow) `POST /v1/verify` with body: ```json { "authority": "example.com", "method": "GET", "path": "/api/articles", "signature_input": "ric=(...);keyid=...;created=...;nonce=...;tag=...", "signature": "ric=::", "signature_agent": "\"ResearchBot\"; cert=\"...\"" } ``` Steps: 1. **Header presence** — Confirm `signature_input` and `signature` are present 2. **Public key retrieval** — Parse `keyid` from `Signature-Input`; look up bot in registry 3. **Timestamp validation** — `created` must not be > 5 min old; `expires` must not be passed; ±30s clock skew allowed 4. **Nonce uniqueness** — If `nonce` present, check it has not been seen in the last 10 min; mark as used 5. **Tag verification** — If `tag` present, must be `"web-bot-auth"` 6. **Ed25519 verification** — Reconstruct signature base; verify with bot's stored public key 7. **Registration status** — Confirm bot is not `dangerous` --- ## Generating Headers: `ric sign` ```bash ric sign --cert bot.ric.json \ --authority "example.com" \ --method GET \ --path "/api/articles" \ --ttl 300 ``` Output: ``` Signature-Input: ric=("@authority" "@method" "@path");keyid="ric_a3f8_xyz1";created=1718000000;expires=1718000300;nonce="abc123";tag="web-bot-auth" Signature: ric=:HIbjH...base64...==: Signature-Agent: "ResearchBot"; cert="https://registry.robotidcard.dev/v1/bots/ric_a3f8_xyz1" ``` --- ## Website Integration (SDK v2.0) ```typescript import { RICMiddleware } from '@robot-id-card/sdk' app.use(RICMiddleware({ permissions: { '/api/posts': { minGrade: 'unknown', level: 1 }, '/api/comment': { minGrade: 'healthy', level: 4 }, } })) ``` The middleware automatically detects RFC 9421 headers and passes `authority`, `method`, and `path` to the registry for signature base reconstruction. --- ## Certificate Format (unchanged from v1.0) ```json { "ric_version": "2.0", "id": "ric_a3f8c2d1_xyz12345", "created_at": "2026-01-15T10:00:00Z", "developer": { "name": "Jane Smith", "email": "jane@example.com", "org": "ExampleAI Inc.", "verified": false }, "bot": { "name": "ResearchBot", "version": "1.0.0", "purpose": "Web research assistant for academic users", "capabilities": ["read_articles", "follow_links"], "user_agent": "ResearchBot/1.0 (RIC:ric_a3f8c2d1_xyz12345)" }, "grade": "healthy", "public_key": "ed25519:<64-hex-chars>", "signature": "..." } ``` --- ## Security Properties | Property | Mechanism | |----------|-----------| | Bot identity binding | Ed25519 signature — private key never leaves bot | | Replay prevention | `expires` (max 5 min) + `nonce` uniqueness (10-min window) | | Clock skew tolerance | ±30 seconds | | Tamper detection | Signature base includes all signed components | | Accountability | Public audit log; auto-block on 3 violation reports | | Key discovery | JWKS at `/.well-known/http-message-signatures-directory` | --- ## Standards References - [RFC 9421 — HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421) (IETF, Feb 2024) - [RFC 8037 — CFRG Elliptic Curves for JOSE](https://www.rfc-editor.org/rfc/rfc8037) (OKP/Ed25519 JWK format) - [draft-meunier-web-bot-auth-architecture](https://datatracker.ietf.org/doc/html/draft-meunier-web-bot-auth-architecture) (Cloudflare IETF Draft) - [Cloudflare Web Bot Auth](https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/) --- *Version: 2.0 · Created: 2026-04-17* FILE:package-lock.json { "name": "robot-id-card", "version": "0.1.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "robot-id-card", "version": "0.1.0", "license": "MIT", "workspaces": [ "packages/*" ] }, "node_modules/@esbuild/darwin-arm64": { "version": "0.27.4", "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.27.4.tgz", "integrity": "sha512-b7xaGIwdJlht8ZFCvMkpDN6uiSmnxxK56N2GDTMYPr2/gzvfdQN8rTfBsvVKmIVY/X7EM+/hJKEIbbHs9oA4tQ==", "cpu": [ "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ "darwin" ], "engines": { "node": ">=18" } }, "node_modules/@fastify/ajv-compiler": { "version": "4.0.5", "resolved": "https://registry.npmjs.org/@fastify/ajv-compiler/-/ajv-compiler-4.0.5.tgz", "integrity": "sha512-KoWKW+MhvfTRWL4qrhUwAAZoaChluo0m0vbiJlGMt2GXvL4LVPQEjt8kSpHI3IBq5Rez8fg+XeH3cneztq+C7A==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "ajv": "^8.12.0", "ajv-formats": "^3.0.1", "fast-uri": "^3.0.0" } }, "node_modules/@fastify/cors": { "version": "11.2.0", "resolved": "https://registry.npmjs.org/@fastify/cors/-/cors-11.2.0.tgz", "integrity": "sha512-LbLHBuSAdGdSFZYTLVA3+Ch2t+sA6nq3Ejc6XLAKiQ6ViS2qFnvicpj0htsx03FyYeLs04HfRNBsz/a8SvbcUw==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "fastify-plugin": "^5.0.0", "toad-cache": "^3.7.0" } }, "node_modules/@fastify/error": { "version": "4.2.0", "resolved": "https://registry.npmjs.org/@fastify/error/-/error-4.2.0.tgz", "integrity": "sha512-RSo3sVDXfHskiBZKBPRgnQTtIqpi/7zhJOEmAxCiBcM7d0uwdGdxLlsCaLzGs8v8NnxIRlfG0N51p5yFaOentQ==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT" }, "node_modules/@fastify/fast-json-stringify-compiler": { "version": "5.0.3", "resolved": "https://registry.npmjs.org/@fastify/fast-json-stringify-compiler/-/fast-json-stringify-compiler-5.0.3.tgz", "integrity": "sha512-uik7yYHkLr6fxd8hJSZ8c+xF4WafPK+XzneQDPU+D10r5X19GW8lJcom2YijX2+qtFF1ENJlHXKFM9ouXNJYgQ==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "fast-json-stringify": "^6.0.0" } }, "node_modules/@fastify/forwarded": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/@fastify/forwarded/-/forwarded-3.0.1.tgz", "integrity": "sha512-JqDochHFqXs3C3Ml3gOY58zM7OqO9ENqPo0UqAjAjH8L01fRZqwX9iLeX34//kiJubF7r2ZQHtBRU36vONbLlw==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT" }, "node_modules/@fastify/merge-json-schemas": { "version": "0.2.1", "resolved": "https://registry.npmjs.org/@fastify/merge-json-schemas/-/merge-json-schemas-0.2.1.tgz", "integrity": "sha512-OA3KGBCy6KtIvLf8DINC5880o5iBlDX4SxzLQS8HorJAbqluzLRn80UXU0bxZn7UOFhFgpRJDasfwn9nG4FG4A==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "dequal": "^2.0.3" } }, "node_modules/@fastify/proxy-addr": { "version": "5.1.0", "resolved": "https://registry.npmjs.org/@fastify/proxy-addr/-/proxy-addr-5.1.0.tgz", "integrity": "sha512-INS+6gh91cLUjB+PVHfu1UqcB76Sqtpyp7bnL+FYojhjygvOPA9ctiD/JDKsyD9Xgu4hUhCSJBPig/w7duNajw==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "@fastify/forwarded": "^3.0.0", "ipaddr.js": "^2.1.0" } }, "node_modules/@fastify/rate-limit": { "version": "10.3.0", "resolved": "https://registry.npmjs.org/@fastify/rate-limit/-/rate-limit-10.3.0.tgz", "integrity": "sha512-eIGkG9XKQs0nyynatApA3EVrojHOuq4l6fhB4eeCk4PIOeadvOJz9/4w3vGI44Go17uaXOWEcPkaD8kuKm7g6Q==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "@lukeed/ms": "^2.0.2", "fastify-plugin": "^5.0.0", "toad-cache": "^3.7.0" } }, "node_modules/@jest/schemas": { "version": "29.6.3", "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-29.6.3.tgz", "integrity": "sha512-mo5j5X+jIZmJQveBKeS/clAueipV7KgiX1vMgCxam1RNYiqE1w62n0/tJJnHtjW8ZHcQco5gY85jA3mi0L+nSA==", "dev": true, "license": "MIT", "dependencies": { "@sinclair/typebox": "^0.27.8" }, "engines": { "node": "^14.15.0 || ^16.10.0 || >=18.0.0" } }, "node_modules/@jridgewell/sourcemap-codec": { "version": "1.5.5", "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", "dev": true, "license": "MIT" }, "node_modules/@lukeed/ms": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/@lukeed/ms/-/ms-2.0.2.tgz", "integrity": "sha512-9I2Zn6+NJLfaGoz9jN3lpwDgAYvfGeNYdbAIjJOqzs4Tpc+VU3Jqq4IofSUBKajiDS8k9fZIg18/z13mpk1bsA==", "license": "MIT", "engines": { "node": ">=8" } }, "node_modules/@noble/ed25519": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/@noble/ed25519/-/ed25519-2.3.0.tgz", "integrity": "sha512-M7dvXL2B92/M7dw9+gzuydL8qn/jiqNHaoR3Q+cb1q1GHV7uwE17WCyFMG+Y+TZb5izcaXk5TdJRrDUxHXL78A==", "license": "MIT", "funding": { "url": "https://paulmillr.com/funding/" } }, "node_modules/@noble/hashes": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.0.1.tgz", "integrity": "sha512-XlOlEbQcE9fmuXxrVTXCTlG2nlRXa9Rj3rr5Ue/+tX+nmkgbX720YHh0VR3hBF9xDvwnb8D2shVGOwNx+ulArw==", "license": "MIT", "engines": { "node": ">= 20.19.0" }, "funding": { "url": "https://paulmillr.com/funding/" } }, "node_modules/@oxc-project/runtime": { "version": "0.115.0", "resolved": "https://registry.npmjs.org/@oxc-project/runtime/-/runtime-0.115.0.tgz", "integrity": "sha512-Rg8Wlt5dCbXhQnsXPrkOjL1DTSvXLgb2R/KYfnf1/K+R0k6UMLEmbQXPM+kwrWqSmWA2t0B1EtHy2/3zikQpvQ==", "dev": true, "license": "MIT", "engines": { "node": "^20.19.0 || >=22.12.0" } }, "node_modules/@oxc-project/types": { "version": "0.115.0", "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.115.0.tgz", "integrity": "sha512-4n91DKnebUS4yjUHl2g3/b2T+IUdCfmoZGhmwsovZCDaJSs+QkVAM+0AqqTxHSsHfeiMuueT75cZaZcT/m0pSw==", "dev": true, "license": "MIT", "funding": { "url": "https://github.com/sponsors/Boshen" } }, "node_modules/@pinojs/redact": { "version": "0.4.0", "resolved": "https://registry.npmjs.org/@pinojs/redact/-/redact-0.4.0.tgz", "integrity": "sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==", "license": "MIT" }, "node_modules/@robot-id-card/cli": { "resolved": "packages/cli", "link": true }, "node_modules/@robot-id-card/dashboard": { "resolved": "packages/dashboard", "link": true }, "node_modules/@robot-id-card/extension": { "resolved": "packages/extension", "link": true }, "node_modules/@robot-id-card/registry": { "resolved": "packages/registry", "link": true }, "node_modules/@robot-id-card/sdk": { "resolved": "packages/sdk", "link": true }, "node_modules/@rolldown/binding-darwin-arm64": { "version": "1.0.0-rc.9", "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.0-rc.9.tgz", "integrity": "sha512-J7Zk3kLYFsLtuH6U+F4pS2sYVzac0qkjcO5QxHS7OS7yZu2LRs+IXo+uvJ/mvpyUljDJ3LROZPoQfgBIpCMhdQ==", "cpu": [ "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ "darwin" ], "engines": { "node": "^20.19.0 || >=22.12.0" } }, "node_modules/@rolldown/pluginutils": { "version": "1.0.0-rc.9", "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.9.tgz", "integrity": "sha512-w6oiRWgEBl04QkFZgmW+jnU1EC9b57Oihi2ot3HNWIQRqgHp5PnYDia5iZ5FF7rpa4EQdiqMDXjlqKGXBhsoXw==", "dev": true, "license": "MIT" }, "node_modules/@rollup/rollup-darwin-arm64": { "version": "4.59.0", "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.59.0.tgz", "integrity": "sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==", "cpu": [ "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ "darwin" ] }, "node_modules/@sinclair/typebox": { "version": "0.27.10", "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.27.10.tgz", "integrity": "sha512-MTBk/3jGLNB2tVxv6uLlFh1iu64iYOQ2PbdOSK3NW8JZsmlaOh2q6sdtKowBhfw8QFLmYNzTW4/oK4uATIi6ZA==", "dev": true, "license": "MIT" }, "node_modules/@standard-schema/spec": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", "dev": true, "license": "MIT" }, "node_modules/@types/better-sqlite3": { "version": "7.6.13", "resolved": "https://registry.npmjs.org/@types/better-sqlite3/-/better-sqlite3-7.6.13.tgz", "integrity": "sha512-NMv9ASNARoKksWtsq/SHakpYAYnhBrQgGD8zkLYk/jaK8jUGn08CfEdTRgYhMypUQAfzSP8W6gNLe0q19/t4VA==", "dev": true, "license": "MIT", "dependencies": { "@types/node": "*" } }, "node_modules/@types/chai": { "version": "5.2.3", "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz", "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==", "dev": true, "license": "MIT", "dependencies": { "@types/deep-eql": "*", "assertion-error": "^2.0.1" } }, "node_modules/@types/chai/node_modules/assertion-error": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz", "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==", "dev": true, "license": "MIT", "engines": { "node": ">=12" } }, "node_modules/@types/chrome": { "version": "0.0.268", "resolved": "https://registry.npmjs.org/@types/chrome/-/chrome-0.0.268.tgz", "integrity": "sha512-7N1QH9buudSJ7sI8Pe4mBHJr5oZ48s0hcanI9w3wgijAlv1OZNUZve9JR4x42dn5lJ5Sm87V1JNfnoh10EnQlA==", "dev": true, "license": "MIT", "dependencies": { "@types/filesystem": "*", "@types/har-format": "*" } }, "node_modules/@types/deep-eql": { "version": "4.0.2", "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz", "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==", "dev": true, "license": "MIT" }, "node_modules/@types/estree": { "version": "1.0.8", "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz", "integrity": "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==", "dev": true, "license": "MIT" }, "node_modules/@types/filesystem": { "version": "0.0.36", "resolved": "https://registry.npmjs.org/@types/filesystem/-/filesystem-0.0.36.tgz", "integrity": "sha512-vPDXOZuannb9FZdxgHnqSwAG/jvdGM8Wq+6N4D/d80z+D4HWH+bItqsZaVRQykAn6WEVeEkLm2oQigyHtgb0RA==", "dev": true, "license": "MIT", "dependencies": { "@types/filewriter": "*" } }, "node_modules/@types/filewriter": { "version": "0.0.33", "resolved": "https://registry.npmjs.org/@types/filewriter/-/filewriter-0.0.33.tgz", "integrity": "sha512-xFU8ZXTw4gd358lb2jw25nxY9QAgqn2+bKKjKOYfNCzN4DKCFetK7sPtrlpg66Ywe3vWY9FNxprZawAh9wfJ3g==", "dev": true, "license": "MIT" }, "node_modules/@types/har-format": { "version": "1.2.16", "resolved": "https://registry.npmjs.org/@types/har-format/-/har-format-1.2.16.tgz", "integrity": "sha512-fluxdy7ryD3MV6h8pTfTYpy/xQzCFC7m89nOH9y94cNqJ1mDIDPut7MnRHI3F6qRmh/cT2fUjG1MLdCNb4hE9A==", "dev": true, "license": "MIT" }, "node_modules/@types/node": { "version": "25.5.0", "resolved": "https://registry.npmjs.org/@types/node/-/node-25.5.0.tgz", "integrity": "sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==", "dev": true, "license": "MIT", "dependencies": { "undici-types": "~7.18.0" } }, "node_modules/@vitest/expect": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-1.6.1.tgz", "integrity": "sha512-jXL+9+ZNIJKruofqXuuTClf44eSpcHlgj3CiuNihUF3Ioujtmc0zIa3UJOW5RjDK1YLBJZnWBlPuqhYycLioog==", "dev": true, "license": "MIT", "dependencies": { "@vitest/spy": "1.6.1", "@vitest/utils": "1.6.1", "chai": "^4.3.10" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/@vitest/pretty-format": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.0.tgz", "integrity": "sha512-3RZLZlh88Ib0J7NQTRATfc/3ZPOnSUn2uDBUoGNn5T36+bALixmzphN26OUD3LRXWkJu4H0s5vvUeqBiw+kS0A==", "dev": true, "license": "MIT", "dependencies": { "tinyrainbow": "^3.0.3" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/@vitest/runner": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-1.6.1.tgz", "integrity": "sha512-3nSnYXkVkf3mXFfE7vVyPmi3Sazhb/2cfZGGs0JRzFsPFvAMBEcrweV1V1GsrstdXeKCTXlJbvnQwGWgEIHmOA==", "dev": true, "license": "MIT", "dependencies": { "@vitest/utils": "1.6.1", "p-limit": "^5.0.0", "pathe": "^1.1.1" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/@vitest/snapshot": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-1.6.1.tgz", "integrity": "sha512-WvidQuWAzU2p95u8GAKlRMqMyN1yOJkGHnx3M1PL9Raf7AQ1kwLKg04ADlCa3+OXUZE7BceOhVZiuWAbzCKcUQ==", "dev": true, "license": "MIT", "dependencies": { "magic-string": "^0.30.5", "pathe": "^1.1.1", "pretty-format": "^29.7.0" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/@vitest/spy": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-1.6.1.tgz", "integrity": "sha512-MGcMmpGkZebsMZhbQKkAf9CX5zGvjkBTqf8Zx3ApYWXr3wG+QvEu2eXWfnIIWYSJExIp4V9FCKDEeygzkYrXMw==", "dev": true, "license": "MIT", "dependencies": { "tinyspy": "^2.2.0" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/@vitest/utils": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-1.6.1.tgz", "integrity": "sha512-jOrrUvXM4Av9ZWiG1EajNto0u96kWAhJ1LmPmJhXXQx/32MecEKd10pOLYgS2BQx1TgkGhloPU1ArDW2vvaY6g==", "dev": true, "license": "MIT", "dependencies": { "diff-sequences": "^29.6.3", "estree-walker": "^3.0.3", "loupe": "^2.3.7", "pretty-format": "^29.7.0" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/abstract-logging": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/abstract-logging/-/abstract-logging-2.0.1.tgz", "integrity": "sha512-2BjRTZxTPvheOvGbBslFSYOUkr+SjPtOnrLP33f+VIWLzezQpZcqVg7ja3L4dBXmzzgwT+a029jRx5PCi3JuiA==", "license": "MIT" }, "node_modules/acorn": { "version": "8.16.0", "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz", "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==", "dev": true, "license": "MIT", "bin": { "acorn": "bin/acorn" }, "engines": { "node": ">=0.4.0" } }, "node_modules/acorn-walk": { "version": "8.3.5", "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.5.tgz", "integrity": "sha512-HEHNfbars9v4pgpW6SO1KSPkfoS0xVOM/9UzkJltjlsHZmJasxg8aXkuZa7SMf8vKGIBhpUsPluQSqhJFCqebw==", "dev": true, "license": "MIT", "dependencies": { "acorn": "^8.11.0" }, "engines": { "node": ">=0.4.0" } }, "node_modules/ajv": { "version": "8.18.0", "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz", "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==", "license": "MIT", "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" }, "funding": { "type": "github", "url": "https://github.com/sponsors/epoberezkin" } }, "node_modules/ajv-formats": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz", "integrity": "sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==", "license": "MIT", "dependencies": { "ajv": "^8.0.0" }, "peerDependencies": { "ajv": "^8.0.0" }, "peerDependenciesMeta": { "ajv": { "optional": true } } }, "node_modules/ansi-styles": { "version": "5.2.0", "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz", "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==", "dev": true, "license": "MIT", "engines": { "node": ">=10" }, "funding": { "url": "https://github.com/chalk/ansi-styles?sponsor=1" } }, "node_modules/assertion-error": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz", "integrity": "sha512-jgsaNduz+ndvGyFt3uSuWqvy4lCnIJiovtouQN5JZHOKCS2QuhEdbcQHFhVksz2N2U9hXJo8odG7ETyWlEeuDw==", "dev": true, "license": "MIT", "engines": { "node": "*" } }, "node_modules/atomic-sleep": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/atomic-sleep/-/atomic-sleep-1.0.0.tgz", "integrity": "sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==", "license": "MIT", "engines": { "node": ">=8.0.0" } }, "node_modules/avvio": { "version": "9.2.0", "resolved": "https://registry.npmjs.org/avvio/-/avvio-9.2.0.tgz", "integrity": "sha512-2t/sy01ArdHHE0vRH5Hsay+RtCZt3dLPji7W7/MMOCEgze5b7SNDC4j5H6FnVgPkI1MTNFGzHdHrVXDDl7QSSQ==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "@fastify/error": "^4.0.0", "fastq": "^1.17.1" } }, "node_modules/base64-js": { "version": "1.5.1", "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/feross" }, { "type": "patreon", "url": "https://www.patreon.com/feross" }, { "type": "consulting", "url": "https://feross.org/support" } ], "license": "MIT" }, "node_modules/better-sqlite3": { "version": "12.8.0", "resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-12.8.0.tgz", "integrity": "sha512-RxD2Vd96sQDjQr20kdP+F+dK/1OUNiVOl200vKBZY8u0vTwysfolF6Hq+3ZK2+h8My9YvZhHsF+RSGZW2VYrPQ==", "hasInstallScript": true, "license": "MIT", "dependencies": { "bindings": "^1.5.0", "prebuild-install": "^7.1.1" }, "engines": { "node": "20.x || 22.x || 23.x || 24.x || 25.x" } }, "node_modules/bindings": { "version": "1.5.0", "resolved": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", "integrity": "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==", "license": "MIT", "dependencies": { "file-uri-to-path": "1.0.0" } }, "node_modules/bl": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz", "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==", "license": "MIT", "dependencies": { "buffer": "^5.5.0", "inherits": "^2.0.4", "readable-stream": "^3.4.0" } }, "node_modules/buffer": { "version": "5.7.1", "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz", "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/feross" }, { "type": "patreon", "url": "https://www.patreon.com/feross" }, { "type": "consulting", "url": "https://feross.org/support" } ], "license": "MIT", "dependencies": { "base64-js": "^1.3.1", "ieee754": "^1.1.13" } }, "node_modules/cac": { "version": "6.7.14", "resolved": "https://registry.npmjs.org/cac/-/cac-6.7.14.tgz", "integrity": "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==", "dev": true, "license": "MIT", "engines": { "node": ">=8" } }, "node_modules/chai": { "version": "4.5.0", "resolved": "https://registry.npmjs.org/chai/-/chai-4.5.0.tgz", "integrity": "sha512-RITGBfijLkBddZvnn8jdqoTypxvqbOLYQkGGxXzeFjVHvudaPw0HNFD9x928/eUwYWd2dPCugVqspGALTZZQKw==", "dev": true, "license": "MIT", "dependencies": { "assertion-error": "^1.1.0", "check-error": "^1.0.3", "deep-eql": "^4.1.3", "get-func-name": "^2.0.2", "loupe": "^2.3.6", "pathval": "^1.1.1", "type-detect": "^4.1.0" }, "engines": { "node": ">=4" } }, "node_modules/check-error": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/check-error/-/check-error-1.0.3.tgz", "integrity": "sha512-iKEoDYaRmd1mxM90a2OEfWhjsjPpYPuQ+lMYsoxB126+t8fw7ySEO48nmDg5COTjxDI65/Y2OWpeEHk3ZOe8zg==", "dev": true, "license": "MIT", "dependencies": { "get-func-name": "^2.0.2" }, "engines": { "node": "*" } }, "node_modules/chownr": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz", "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==", "license": "ISC" }, "node_modules/commander": { "version": "12.1.0", "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz", "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==", "license": "MIT", "engines": { "node": ">=18" } }, "node_modules/confbox": { "version": "0.1.8", "resolved": "https://registry.npmjs.org/confbox/-/confbox-0.1.8.tgz", "integrity": "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==", "dev": true, "license": "MIT" }, "node_modules/convert-source-map": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==", "dev": true, "license": "MIT" }, "node_modules/cookie": { "version": "1.1.1", "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz", "integrity": "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==", "license": "MIT", "engines": { "node": ">=18" }, "funding": { "type": "opencollective", "url": "https://opencollective.com/express" } }, "node_modules/cross-spawn": { "version": "7.0.6", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "license": "MIT", "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", "which": "^2.0.1" }, "engines": { "node": ">= 8" } }, "node_modules/debug": { "version": "4.4.3", "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", "dev": true, "license": "MIT", "dependencies": { "ms": "^2.1.3" }, "engines": { "node": ">=6.0" }, "peerDependenciesMeta": { "supports-color": { "optional": true } } }, "node_modules/decompress-response": { "version": "6.0.0", "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz", "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==", "license": "MIT", "dependencies": { "mimic-response": "^3.1.0" }, "engines": { "node": ">=10" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/deep-eql": { "version": "4.1.4", "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-4.1.4.tgz", "integrity": "sha512-SUwdGfqdKOwxCPeVYjwSyRpJ7Z+fhpwIAtmCUdZIWZ/YP5R9WAsyuSgpLVDi9bjWoN2LXHNss/dk3urXtdQxGg==", "dev": true, "license": "MIT", "dependencies": { "type-detect": "^4.0.0" }, "engines": { "node": ">=6" } }, "node_modules/deep-extend": { "version": "0.6.0", "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz", "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==", "license": "MIT", "engines": { "node": ">=4.0.0" } }, "node_modules/dequal": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", "license": "MIT", "engines": { "node": ">=6" } }, "node_modules/detect-libc": { "version": "2.1.2", "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", "license": "Apache-2.0", "engines": { "node": ">=8" } }, "node_modules/diff-sequences": { "version": "29.6.3", "resolved": "https://registry.npmjs.org/diff-sequences/-/diff-sequences-29.6.3.tgz", "integrity": "sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==", "dev": true, "license": "MIT", "engines": { "node": "^14.15.0 || ^16.10.0 || >=18.0.0" } }, "node_modules/end-of-stream": { "version": "1.4.5", "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz", "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==", "license": "MIT", "dependencies": { "once": "^1.4.0" } }, "node_modules/es-module-lexer": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.0.0.tgz", "integrity": "sha512-5POEcUuZybH7IdmGsD8wlf0AI55wMecM9rVBTI/qEAy2c1kTOm3DjFYjrBdI2K3BaJjJYfYFeRtM0t9ssnRuxw==", "dev": true, "license": "MIT" }, "node_modules/esbuild": { "version": "0.27.4", "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.4.tgz", "integrity": "sha512-Rq4vbHnYkK5fws5NF7MYTU68FPRE1ajX7heQ/8QXXWqNgqqJ/GkmmyxIzUnf2Sr/bakf8l54716CcMGHYhMrrQ==", "dev": true, "hasInstallScript": true, "license": "MIT", "bin": { "esbuild": "bin/esbuild" }, "engines": { "node": ">=18" }, "optionalDependencies": { "@esbuild/aix-ppc64": "0.27.4", "@esbuild/android-arm": "0.27.4", "@esbuild/android-arm64": "0.27.4", "@esbuild/android-x64": "0.27.4", "@esbuild/darwin-arm64": "0.27.4", "@esbuild/darwin-x64": "0.27.4", "@esbuild/freebsd-arm64": "0.27.4", "@esbuild/freebsd-x64": "0.27.4", "@esbuild/linux-arm": "0.27.4", "@esbuild/linux-arm64": "0.27.4", "@esbuild/linux-ia32": "0.27.4", "@esbuild/linux-loong64": "0.27.4", "@esbuild/linux-mips64el": "0.27.4", "@esbuild/linux-ppc64": "0.27.4", "@esbuild/linux-riscv64": "0.27.4", "@esbuild/linux-s390x": "0.27.4", "@esbuild/linux-x64": "0.27.4", "@esbuild/netbsd-arm64": "0.27.4", "@esbuild/netbsd-x64": "0.27.4", "@esbuild/openbsd-arm64": "0.27.4", "@esbuild/openbsd-x64": "0.27.4", "@esbuild/openharmony-arm64": "0.27.4", "@esbuild/sunos-x64": "0.27.4", "@esbuild/win32-arm64": "0.27.4", "@esbuild/win32-ia32": "0.27.4", "@esbuild/win32-x64": "0.27.4" } }, "node_modules/estree-walker": { "version": "3.0.3", "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz", "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", "dev": true, "license": "MIT", "dependencies": { "@types/estree": "^1.0.0" } }, "node_modules/execa": { "version": "8.0.1", "resolved": "https://registry.npmjs.org/execa/-/execa-8.0.1.tgz", "integrity": "sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg==", "dev": true, "license": "MIT", "dependencies": { "cross-spawn": "^7.0.3", "get-stream": "^8.0.1", "human-signals": "^5.0.0", "is-stream": "^3.0.0", "merge-stream": "^2.0.0", "npm-run-path": "^5.1.0", "onetime": "^6.0.0", "signal-exit": "^4.1.0", "strip-final-newline": "^3.0.0" }, "engines": { "node": ">=16.17" }, "funding": { "url": "https://github.com/sindresorhus/execa?sponsor=1" } }, "node_modules/expand-template": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz", "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==", "license": "(MIT OR WTFPL)", "engines": { "node": ">=6" } }, "node_modules/expect-type": { "version": "1.3.0", "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz", "integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==", "dev": true, "license": "Apache-2.0", "engines": { "node": ">=12.0.0" } }, "node_modules/fast-decode-uri-component": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/fast-decode-uri-component/-/fast-decode-uri-component-1.0.1.tgz", "integrity": "sha512-WKgKWg5eUxvRZGwW8FvfbaH7AXSh2cL+3j5fMGzUMCxWBJ3dV3a7Wz8y2f/uQ0e3B6WmodD3oS54jTQ9HVTIIg==", "license": "MIT" }, "node_modules/fast-deep-equal": { "version": "3.1.3", "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==", "license": "MIT" }, "node_modules/fast-json-stringify": { "version": "6.3.0", "resolved": "https://registry.npmjs.org/fast-json-stringify/-/fast-json-stringify-6.3.0.tgz", "integrity": "sha512-oRCntNDY/329HJPlmdNLIdogNtt6Vyjb1WuT01Soss3slIdyUp8kAcDU3saQTOquEK8KFVfwIIF7FebxUAu+yA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "@fastify/merge-json-schemas": "^0.2.0", "ajv": "^8.12.0", "ajv-formats": "^3.0.1", "fast-uri": "^3.0.0", "json-schema-ref-resolver": "^3.0.0", "rfdc": "^1.2.0" } }, "node_modules/fast-querystring": { "version": "1.1.2", "resolved": "https://registry.npmjs.org/fast-querystring/-/fast-querystring-1.1.2.tgz", "integrity": "sha512-g6KuKWmFXc0fID8WWH0jit4g0AGBoJhCkJMb1RmbsSEUNvQ+ZC8D6CUZ+GtF8nMzSPXnhiePyyqqipzNNEnHjg==", "license": "MIT", "dependencies": { "fast-decode-uri-component": "^1.0.1" } }, "node_modules/fast-uri": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz", "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "BSD-3-Clause" }, "node_modules/fastify": { "version": "5.8.2", "resolved": "https://registry.npmjs.org/fastify/-/fastify-5.8.2.tgz", "integrity": "sha512-lZmt3navvZG915IE+f7/TIVamxIwmBd+OMB+O9WBzcpIwOo6F0LTh0sluoMFk5VkrKTvvrwIaoJPkir4Z+jtAg==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "@fastify/ajv-compiler": "^4.0.5", "@fastify/error": "^4.0.0", "@fastify/fast-json-stringify-compiler": "^5.0.0", "@fastify/proxy-addr": "^5.0.0", "abstract-logging": "^2.0.1", "avvio": "^9.0.0", "fast-json-stringify": "^6.0.0", "find-my-way": "^9.0.0", "light-my-request": "^6.0.0", "pino": "^9.14.0 || ^10.1.0", "process-warning": "^5.0.0", "rfdc": "^1.3.1", "secure-json-parse": "^4.0.0", "semver": "^7.6.0", "toad-cache": "^3.7.0" } }, "node_modules/fastify-plugin": { "version": "5.1.0", "resolved": "https://registry.npmjs.org/fastify-plugin/-/fastify-plugin-5.1.0.tgz", "integrity": "sha512-FAIDA8eovSt5qcDgcBvDuX/v0Cjz0ohGhENZ/wpc3y+oZCY2afZ9Baqql3g/lC+OHRnciQol4ww7tuthOb9idw==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT" }, "node_modules/fastq": { "version": "1.20.1", "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz", "integrity": "sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==", "license": "ISC", "dependencies": { "reusify": "^1.0.4" } }, "node_modules/fdir": { "version": "6.5.0", "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", "dev": true, "license": "MIT", "engines": { "node": ">=12.0.0" }, "peerDependencies": { "picomatch": "^3 || ^4" }, "peerDependenciesMeta": { "picomatch": { "optional": true } } }, "node_modules/file-uri-to-path": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", "integrity": "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==", "license": "MIT" }, "node_modules/find-my-way": { "version": "9.5.0", "resolved": "https://registry.npmjs.org/find-my-way/-/find-my-way-9.5.0.tgz", "integrity": "sha512-VW2RfnmscZO5KgBY5XVyKREMW5nMZcxDy+buTOsL+zIPnBlbKm+00sgzoQzq1EVh4aALZLfKdwv6atBGcjvjrQ==", "license": "MIT", "dependencies": { "fast-deep-equal": "^3.1.3", "fast-querystring": "^1.0.0", "safe-regex2": "^5.0.0" }, "engines": { "node": ">=20" } }, "node_modules/fs-constants": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz", "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==", "license": "MIT" }, "node_modules/fsevents": { "version": "2.3.3", "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", "dev": true, "hasInstallScript": true, "license": "MIT", "optional": true, "os": [ "darwin" ], "engines": { "node": "^8.16.0 || ^10.6.0 || >=11.0.0" } }, "node_modules/get-func-name": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.2.tgz", "integrity": "sha512-8vXOvuE167CtIc3OyItco7N/dpRtBbYOsPsXCz7X/PMnlGjYjSGuZJgM1Y7mmew7BKf9BqvLX2tnOVy1BBUsxQ==", "dev": true, "license": "MIT", "engines": { "node": "*" } }, "node_modules/get-stream": { "version": "8.0.1", "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-8.0.1.tgz", "integrity": "sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA==", "dev": true, "license": "MIT", "engines": { "node": ">=16" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/get-tsconfig": { "version": "4.13.6", "resolved": "https://registry.npmjs.org/get-tsconfig/-/get-tsconfig-4.13.6.tgz", "integrity": "sha512-shZT/QMiSHc/YBLxxOkMtgSid5HFoauqCE3/exfsEcwg1WkeqjG+V40yBbBrsD+jW2HDXcs28xOfcbm2jI8Ddw==", "dev": true, "license": "MIT", "dependencies": { "resolve-pkg-maps": "^1.0.0" }, "funding": { "url": "https://github.com/privatenumber/get-tsconfig?sponsor=1" } }, "node_modules/github-from-package": { "version": "0.0.0", "resolved": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz", "integrity": "sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==", "license": "MIT" }, "node_modules/human-signals": { "version": "5.0.0", "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-5.0.0.tgz", "integrity": "sha512-AXcZb6vzzrFAUE61HnN4mpLqd/cSIwNQjtNWR0euPm6y0iqx3G4gOXaIDdtdDwZmhwe82LA6+zinmW4UBWVePQ==", "dev": true, "license": "Apache-2.0", "engines": { "node": ">=16.17.0" } }, "node_modules/ieee754": { "version": "1.2.1", "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz", "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/feross" }, { "type": "patreon", "url": "https://www.patreon.com/feross" }, { "type": "consulting", "url": "https://feross.org/support" } ], "license": "BSD-3-Clause" }, "node_modules/inherits": { "version": "2.0.4", "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", "license": "ISC" }, "node_modules/ini": { "version": "1.3.8", "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", "license": "ISC" }, "node_modules/ipaddr.js": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.3.0.tgz", "integrity": "sha512-Zv/pA+ciVFbCSBBjGfaKUya/CcGmUHzTydLMaTwrUUEM2DIEO3iZvueGxmacvmN50fGpGVKeTXpb2LcYQxeVdg==", "license": "MIT", "engines": { "node": ">= 10" } }, "node_modules/is-stream": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz", "integrity": "sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA==", "dev": true, "license": "MIT", "engines": { "node": "^12.20.0 || ^14.13.1 || >=16.0.0" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/isexe": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", "dev": true, "license": "ISC" }, "node_modules/js-tokens": { "version": "9.0.1", "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-9.0.1.tgz", "integrity": "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==", "dev": true, "license": "MIT" }, "node_modules/json-schema-ref-resolver": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/json-schema-ref-resolver/-/json-schema-ref-resolver-3.0.0.tgz", "integrity": "sha512-hOrZIVL5jyYFjzk7+y7n5JDzGlU8rfWDuYyHwGa2WA8/pcmMHezp2xsVwxrebD/Q9t8Nc5DboieySDpCp4WG4A==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "dequal": "^2.0.3" } }, "node_modules/json-schema-traverse": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==", "license": "MIT" }, "node_modules/light-my-request": { "version": "6.6.0", "resolved": "https://registry.npmjs.org/light-my-request/-/light-my-request-6.6.0.tgz", "integrity": "sha512-CHYbu8RtboSIoVsHZ6Ye4cj4Aw/yg2oAFimlF7mNvfDV192LR7nDiKtSIfCuLT7KokPSTn/9kfVLm5OGN0A28A==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "BSD-3-Clause", "dependencies": { "cookie": "^1.0.1", "process-warning": "^4.0.0", "set-cookie-parser": "^2.6.0" } }, "node_modules/light-my-request/node_modules/process-warning": { "version": "4.0.1", "resolved": "https://registry.npmjs.org/process-warning/-/process-warning-4.0.1.tgz", "integrity": "sha512-3c2LzQ3rY9d0hc1emcsHhfT9Jwz0cChib/QN89oME2R451w5fy3f0afAhERFZAwrbDU43wk12d0ORBpDVME50Q==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT" }, "node_modules/lightningcss": { "version": "1.32.0", "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz", "integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==", "dev": true, "license": "MPL-2.0", "dependencies": { "detect-libc": "^2.0.3" }, "engines": { "node": ">= 12.0.0" }, "funding": { "type": "opencollective", "url": "https://opencollective.com/parcel" }, "optionalDependencies": { "lightningcss-android-arm64": "1.32.0", "lightningcss-darwin-arm64": "1.32.0", "lightningcss-darwin-x64": "1.32.0", "lightningcss-freebsd-x64": "1.32.0", "lightningcss-linux-arm-gnueabihf": "1.32.0", "lightningcss-linux-arm64-gnu": "1.32.0", "lightningcss-linux-arm64-musl": "1.32.0", "lightningcss-linux-x64-gnu": "1.32.0", "lightningcss-linux-x64-musl": "1.32.0", "lightningcss-win32-arm64-msvc": "1.32.0", "lightningcss-win32-x64-msvc": "1.32.0" } }, "node_modules/lightningcss-darwin-arm64": { "version": "1.32.0", "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz", "integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==", "cpu": [ "arm64" ], "dev": true, "license": "MPL-2.0", "optional": true, "os": [ "darwin" ], "peer": true, "engines": { "node": ">= 12.0.0" }, "funding": { "type": "opencollective", "url": "https://opencollective.com/parcel" } }, "node_modules/local-pkg": { "version": "0.5.1", "resolved": "https://registry.npmjs.org/local-pkg/-/local-pkg-0.5.1.tgz", "integrity": "sha512-9rrA30MRRP3gBD3HTGnC6cDFpaE1kVDWxWgqWJUN0RvDNAo+Nz/9GxB+nHOH0ifbVFy0hSA1V6vFDvnx54lTEQ==", "dev": true, "license": "MIT", "dependencies": { "mlly": "^1.7.3", "pkg-types": "^1.2.1" }, "engines": { "node": ">=14" }, "funding": { "url": "https://github.com/sponsors/antfu" } }, "node_modules/loupe": { "version": "2.3.7", "resolved": "https://registry.npmjs.org/loupe/-/loupe-2.3.7.tgz", "integrity": "sha512-zSMINGVYkdpYSOBmLi0D1Uo7JU9nVdQKrHxC8eYlV+9YKK9WePqAlL7lSlorG/U2Fw1w0hTBmaa/jrQ3UbPHtA==", "dev": true, "license": "MIT", "dependencies": { "get-func-name": "^2.0.1" } }, "node_modules/magic-string": { "version": "0.30.21", "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz", "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==", "dev": true, "license": "MIT", "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "node_modules/merge-stream": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz", "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==", "dev": true, "license": "MIT" }, "node_modules/mimic-fn": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-4.0.0.tgz", "integrity": "sha512-vqiC06CuhBTUdZH+RYl8sFrL096vA45Ok5ISO6sE/Mr1jRbGH4Csnhi8f3wKVl7x8mO4Au7Ir9D3Oyv1VYMFJw==", "dev": true, "license": "MIT", "engines": { "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/mimic-response": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz", "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==", "license": "MIT", "engines": { "node": ">=10" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/minimist": { "version": "1.2.8", "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", "license": "MIT", "funding": { "url": "https://github.com/sponsors/ljharb" } }, "node_modules/mkdirp-classic": { "version": "0.5.3", "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz", "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==", "license": "MIT" }, "node_modules/mlly": { "version": "1.8.1", "resolved": "https://registry.npmjs.org/mlly/-/mlly-1.8.1.tgz", "integrity": "sha512-SnL6sNutTwRWWR/vcmCYHSADjiEesp5TGQQ0pXyLhW5IoeibRlF/CbSLailbB3CNqJUk9cVJ9dUDnbD7GrcHBQ==", "dev": true, "license": "MIT", "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "node_modules/mlly/node_modules/pathe": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz", "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==", "dev": true, "license": "MIT" }, "node_modules/ms": { "version": "2.1.3", "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", "dev": true, "license": "MIT" }, "node_modules/nanoid": { "version": "5.1.7", "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.7.tgz", "integrity": "sha512-ua3NDgISf6jdwezAheMOk4mbE1LXjm1DfMUDMuJf4AqxLFK3ccGpgWizwa5YV7Yz9EpXwEaWoRXSb/BnV0t5dQ==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/ai" } ], "license": "MIT", "bin": { "nanoid": "bin/nanoid.js" }, "engines": { "node": "^18 || >=20" } }, "node_modules/napi-build-utils": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-2.0.0.tgz", "integrity": "sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==", "license": "MIT" }, "node_modules/node-abi": { "version": "3.89.0", "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.89.0.tgz", "integrity": "sha512-6u9UwL0HlAl21+agMN3YAMXcKByMqwGx+pq+P76vii5f7hTPtKDp08/H9py6DY+cfDw7kQNTGEj/rly3IgbNQA==", "license": "MIT", "dependencies": { "semver": "^7.3.5" }, "engines": { "node": ">=10" } }, "node_modules/npm-run-path": { "version": "5.3.0", "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-5.3.0.tgz", "integrity": "sha512-ppwTtiJZq0O/ai0z7yfudtBpWIoxM8yE6nHi1X47eFR2EWORqfbu6CnPlNsjeN683eT0qG6H/Pyf9fCcvjnnnQ==", "dev": true, "license": "MIT", "dependencies": { "path-key": "^4.0.0" }, "engines": { "node": "^12.20.0 || ^14.13.1 || >=16.0.0" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/npm-run-path/node_modules/path-key": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/path-key/-/path-key-4.0.0.tgz", "integrity": "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ==", "dev": true, "license": "MIT", "engines": { "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/obug": { "version": "2.1.1", "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz", "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==", "dev": true, "funding": [ "https://github.com/sponsors/sxzz", "https://opencollective.com/debug" ], "license": "MIT" }, "node_modules/on-exit-leak-free": { "version": "2.1.2", "resolved": "https://registry.npmjs.org/on-exit-leak-free/-/on-exit-leak-free-2.1.2.tgz", "integrity": "sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==", "license": "MIT", "engines": { "node": ">=14.0.0" } }, "node_modules/once": { "version": "1.4.0", "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", "license": "ISC", "dependencies": { "wrappy": "1" } }, "node_modules/onetime": { "version": "6.0.0", "resolved": "https://registry.npmjs.org/onetime/-/onetime-6.0.0.tgz", "integrity": "sha512-1FlR+gjXK7X+AsAHso35MnyN5KqGwJRi/31ft6x0M194ht7S+rWAvd7PHss9xSKMzE0asv1pyIHaJYq+BbacAQ==", "dev": true, "license": "MIT", "dependencies": { "mimic-fn": "^4.0.0" }, "engines": { "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/p-limit": { "version": "5.0.0", "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-5.0.0.tgz", "integrity": "sha512-/Eaoq+QyLSiXQ4lyYV23f14mZRQcXnxfHrN0vCai+ak9G0pp9iEQukIIZq5NccEvwRB8PUnZT0KsOoDCINS1qQ==", "dev": true, "license": "MIT", "dependencies": { "yocto-queue": "^1.0.0" }, "engines": { "node": ">=18" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/path-key": { "version": "3.1.1", "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", "dev": true, "license": "MIT", "engines": { "node": ">=8" } }, "node_modules/pathe": { "version": "1.1.2", "resolved": "https://registry.npmjs.org/pathe/-/pathe-1.1.2.tgz", "integrity": "sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==", "dev": true, "license": "MIT" }, "node_modules/pathval": { "version": "1.1.1", "resolved": "https://registry.npmjs.org/pathval/-/pathval-1.1.1.tgz", "integrity": "sha512-Dp6zGqpTdETdR63lehJYPeIOqpiNBNtc7BpWSLrOje7UaIsE5aY92r/AunQA7rsXvet3lrJ3JnZX29UPTKXyKQ==", "dev": true, "license": "MIT", "engines": { "node": "*" } }, "node_modules/picocolors": { "version": "1.1.1", "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz", "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==", "dev": true, "license": "ISC" }, "node_modules/picomatch": { "version": "4.0.3", "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", "dev": true, "license": "MIT", "engines": { "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/jonschlinkert" } }, "node_modules/pino": { "version": "9.14.0", "resolved": "https://registry.npmjs.org/pino/-/pino-9.14.0.tgz", "integrity": "sha512-8OEwKp5juEvb/MjpIc4hjqfgCNysrS94RIOMXYvpYCdm/jglrKEiAYmiumbmGhCvs+IcInsphYDFwqrjr7398w==", "license": "MIT", "dependencies": { "@pinojs/redact": "^0.4.0", "atomic-sleep": "^1.0.0", "on-exit-leak-free": "^2.1.0", "pino-abstract-transport": "^2.0.0", "pino-std-serializers": "^7.0.0", "process-warning": "^5.0.0", "quick-format-unescaped": "^4.0.3", "real-require": "^0.2.0", "safe-stable-stringify": "^2.3.1", "sonic-boom": "^4.0.1", "thread-stream": "^3.0.0" }, "bin": { "pino": "bin.js" } }, "node_modules/pino-abstract-transport": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/pino-abstract-transport/-/pino-abstract-transport-2.0.0.tgz", "integrity": "sha512-F63x5tizV6WCh4R6RHyi2Ml+M70DNRXt/+HANowMflpgGFMAym/VKm6G7ZOQRjqN7XbGxK1Lg9t6ZrtzOaivMw==", "license": "MIT", "dependencies": { "split2": "^4.0.0" } }, "node_modules/pino-std-serializers": { "version": "7.1.0", "resolved": "https://registry.npmjs.org/pino-std-serializers/-/pino-std-serializers-7.1.0.tgz", "integrity": "sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==", "license": "MIT" }, "node_modules/pkg-types": { "version": "1.3.1", "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.3.1.tgz", "integrity": "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==", "dev": true, "license": "MIT", "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "node_modules/pkg-types/node_modules/pathe": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz", "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==", "dev": true, "license": "MIT" }, "node_modules/postcss": { "version": "8.5.8", "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.8.tgz", "integrity": "sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==", "dev": true, "funding": [ { "type": "opencollective", "url": "https://opencollective.com/postcss/" }, { "type": "tidelift", "url": "https://tidelift.com/funding/github/npm/postcss" }, { "type": "github", "url": "https://github.com/sponsors/ai" } ], "license": "MIT", "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, "engines": { "node": "^10 || ^12 || >=14" } }, "node_modules/postcss/node_modules/nanoid": { "version": "3.3.11", "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz", "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==", "dev": true, "funding": [ { "type": "github", "url": "https://github.com/sponsors/ai" } ], "license": "MIT", "bin": { "nanoid": "bin/nanoid.cjs" }, "engines": { "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" } }, "node_modules/prebuild-install": { "version": "7.1.3", "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz", "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==", "deprecated": "No longer maintained. Please contact the author of the relevant native addon; alternatives are available.", "license": "MIT", "dependencies": { "detect-libc": "^2.0.0", "expand-template": "^2.0.3", "github-from-package": "0.0.0", "minimist": "^1.2.3", "mkdirp-classic": "^0.5.3", "napi-build-utils": "^2.0.0", "node-abi": "^3.3.0", "pump": "^3.0.0", "rc": "^1.2.7", "simple-get": "^4.0.0", "tar-fs": "^2.0.0", "tunnel-agent": "^0.6.0" }, "bin": { "prebuild-install": "bin.js" }, "engines": { "node": ">=10" } }, "node_modules/pretty-format": { "version": "29.7.0", "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-29.7.0.tgz", "integrity": "sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ==", "dev": true, "license": "MIT", "dependencies": { "@jest/schemas": "^29.6.3", "ansi-styles": "^5.0.0", "react-is": "^18.0.0" }, "engines": { "node": "^14.15.0 || ^16.10.0 || >=18.0.0" } }, "node_modules/process-warning": { "version": "5.0.0", "resolved": "https://registry.npmjs.org/process-warning/-/process-warning-5.0.0.tgz", "integrity": "sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT" }, "node_modules/pump": { "version": "3.0.4", "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz", "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==", "license": "MIT", "dependencies": { "end-of-stream": "^1.1.0", "once": "^1.3.1" } }, "node_modules/quick-format-unescaped": { "version": "4.0.4", "resolved": "https://registry.npmjs.org/quick-format-unescaped/-/quick-format-unescaped-4.0.4.tgz", "integrity": "sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==", "license": "MIT" }, "node_modules/rc": { "version": "1.2.8", "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz", "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==", "license": "(BSD-2-Clause OR MIT OR Apache-2.0)", "dependencies": { "deep-extend": "^0.6.0", "ini": "~1.3.0", "minimist": "^1.2.0", "strip-json-comments": "~2.0.1" }, "bin": { "rc": "cli.js" } }, "node_modules/react-is": { "version": "18.3.1", "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz", "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==", "dev": true, "license": "MIT" }, "node_modules/readable-stream": { "version": "3.6.2", "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", "license": "MIT", "dependencies": { "inherits": "^2.0.3", "string_decoder": "^1.1.1", "util-deprecate": "^1.0.1" }, "engines": { "node": ">= 6" } }, "node_modules/real-require": { "version": "0.2.0", "resolved": "https://registry.npmjs.org/real-require/-/real-require-0.2.0.tgz", "integrity": "sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==", "license": "MIT", "engines": { "node": ">= 12.13.0" } }, "node_modules/require-from-string": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==", "license": "MIT", "engines": { "node": ">=0.10.0" } }, "node_modules/resolve-pkg-maps": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/resolve-pkg-maps/-/resolve-pkg-maps-1.0.0.tgz", "integrity": "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==", "dev": true, "license": "MIT", "funding": { "url": "https://github.com/privatenumber/resolve-pkg-maps?sponsor=1" } }, "node_modules/ret": { "version": "0.5.0", "resolved": "https://registry.npmjs.org/ret/-/ret-0.5.0.tgz", "integrity": "sha512-I1XxrZSQ+oErkRR4jYbAyEEu2I0avBvvMM5JN+6EBprOGRCs63ENqZ3vjavq8fBw2+62G5LF5XelKwuJpcvcxw==", "license": "MIT", "engines": { "node": ">=10" } }, "node_modules/reusify": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz", "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==", "license": "MIT", "engines": { "iojs": ">=1.0.0", "node": ">=0.10.0" } }, "node_modules/rfdc": { "version": "1.4.1", "resolved": "https://registry.npmjs.org/rfdc/-/rfdc-1.4.1.tgz", "integrity": "sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==", "license": "MIT" }, "node_modules/rolldown": { "version": "1.0.0-rc.9", "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.0-rc.9.tgz", "integrity": "sha512-9EbgWge7ZH+yqb4d2EnELAntgPTWbfL8ajiTW+SyhJEC4qhBbkCKbqFV4Ge4zmu5ziQuVbWxb/XwLZ+RIO7E8Q==", "dev": true, "license": "MIT", "dependencies": { "@oxc-project/types": "=0.115.0", "@rolldown/pluginutils": "1.0.0-rc.9" }, "bin": { "rolldown": "bin/cli.mjs" }, "engines": { "node": "^20.19.0 || >=22.12.0" }, "optionalDependencies": { "@rolldown/binding-android-arm64": "1.0.0-rc.9", "@rolldown/binding-darwin-arm64": "1.0.0-rc.9", "@rolldown/binding-darwin-x64": "1.0.0-rc.9", "@rolldown/binding-freebsd-x64": "1.0.0-rc.9", "@rolldown/binding-linux-arm-gnueabihf": "1.0.0-rc.9", "@rolldown/binding-linux-arm64-gnu": "1.0.0-rc.9", "@rolldown/binding-linux-arm64-musl": "1.0.0-rc.9", "@rolldown/binding-linux-ppc64-gnu": "1.0.0-rc.9", "@rolldown/binding-linux-s390x-gnu": "1.0.0-rc.9", "@rolldown/binding-linux-x64-gnu": "1.0.0-rc.9", "@rolldown/binding-linux-x64-musl": "1.0.0-rc.9", "@rolldown/binding-openharmony-arm64": "1.0.0-rc.9", "@rolldown/binding-wasm32-wasi": "1.0.0-rc.9", "@rolldown/binding-win32-arm64-msvc": "1.0.0-rc.9", "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.9" } }, "node_modules/rollup": { "version": "4.59.0", "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.59.0.tgz", "integrity": "sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==", "dev": true, "license": "MIT", "dependencies": { "@types/estree": "1.0.8" }, "bin": { "rollup": "dist/bin/rollup" }, "engines": { "node": ">=18.0.0", "npm": ">=8.0.0" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.59.0", "@rollup/rollup-android-arm64": "4.59.0", "@rollup/rollup-darwin-arm64": "4.59.0", "@rollup/rollup-darwin-x64": "4.59.0", "@rollup/rollup-freebsd-arm64": "4.59.0", "@rollup/rollup-freebsd-x64": "4.59.0", "@rollup/rollup-linux-arm-gnueabihf": "4.59.0", "@rollup/rollup-linux-arm-musleabihf": "4.59.0", "@rollup/rollup-linux-arm64-gnu": "4.59.0", "@rollup/rollup-linux-arm64-musl": "4.59.0", "@rollup/rollup-linux-loong64-gnu": "4.59.0", "@rollup/rollup-linux-loong64-musl": "4.59.0", "@rollup/rollup-linux-ppc64-gnu": "4.59.0", "@rollup/rollup-linux-ppc64-musl": "4.59.0", "@rollup/rollup-linux-riscv64-gnu": "4.59.0", "@rollup/rollup-linux-riscv64-musl": "4.59.0", "@rollup/rollup-linux-s390x-gnu": "4.59.0", "@rollup/rollup-linux-x64-gnu": "4.59.0", "@rollup/rollup-linux-x64-musl": "4.59.0", "@rollup/rollup-openbsd-x64": "4.59.0", "@rollup/rollup-openharmony-arm64": "4.59.0", "@rollup/rollup-win32-arm64-msvc": "4.59.0", "@rollup/rollup-win32-ia32-msvc": "4.59.0", "@rollup/rollup-win32-x64-gnu": "4.59.0", "@rollup/rollup-win32-x64-msvc": "4.59.0", "fsevents": "~2.3.2" } }, "node_modules/safe-buffer": { "version": "5.2.1", "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/feross" }, { "type": "patreon", "url": "https://www.patreon.com/feross" }, { "type": "consulting", "url": "https://feross.org/support" } ], "license": "MIT" }, "node_modules/safe-regex2": { "version": "5.1.0", "resolved": "https://registry.npmjs.org/safe-regex2/-/safe-regex2-5.1.0.tgz", "integrity": "sha512-pNHAuBW7TrcleFHsxBr5QMi/Iyp0ENjUKz7GCcX1UO7cMh+NmVK6HxQckNL1tJp1XAJVjG6B8OKIPqodqj9rtw==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "MIT", "dependencies": { "ret": "~0.5.0" }, "bin": { "safe-regex2": "bin/safe-regex2.js" } }, "node_modules/safe-stable-stringify": { "version": "2.5.0", "resolved": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz", "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==", "license": "MIT", "engines": { "node": ">=10" } }, "node_modules/secure-json-parse": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/secure-json-parse/-/secure-json-parse-4.1.0.tgz", "integrity": "sha512-l4KnYfEyqYJxDwlNVyRfO2E4NTHfMKAWdUuA8J0yve2Dz/E/PdBepY03RvyJpssIpRFwJoCD55wA+mEDs6ByWA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/fastify" }, { "type": "opencollective", "url": "https://opencollective.com/fastify" } ], "license": "BSD-3-Clause" }, "node_modules/semver": { "version": "7.7.4", "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz", "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==", "license": "ISC", "bin": { "semver": "bin/semver.js" }, "engines": { "node": ">=10" } }, "node_modules/set-cookie-parser": { "version": "2.7.2", "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz", "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==", "license": "MIT" }, "node_modules/shebang-command": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", "dev": true, "license": "MIT", "dependencies": { "shebang-regex": "^3.0.0" }, "engines": { "node": ">=8" } }, "node_modules/shebang-regex": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", "dev": true, "license": "MIT", "engines": { "node": ">=8" } }, "node_modules/siginfo": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz", "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==", "dev": true, "license": "ISC" }, "node_modules/signal-exit": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz", "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==", "dev": true, "license": "ISC", "engines": { "node": ">=14" }, "funding": { "url": "https://github.com/sponsors/isaacs" } }, "node_modules/simple-concat": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz", "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/feross" }, { "type": "patreon", "url": "https://www.patreon.com/feross" }, { "type": "consulting", "url": "https://feross.org/support" } ], "license": "MIT" }, "node_modules/simple-get": { "version": "4.0.1", "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz", "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==", "funding": [ { "type": "github", "url": "https://github.com/sponsors/feross" }, { "type": "patreon", "url": "https://www.patreon.com/feross" }, { "type": "consulting", "url": "https://feross.org/support" } ], "license": "MIT", "dependencies": { "decompress-response": "^6.0.0", "once": "^1.3.1", "simple-concat": "^1.0.0" } }, "node_modules/sonic-boom": { "version": "4.2.1", "resolved": "https://registry.npmjs.org/sonic-boom/-/sonic-boom-4.2.1.tgz", "integrity": "sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==", "license": "MIT", "dependencies": { "atomic-sleep": "^1.0.0" } }, "node_modules/source-map-js": { "version": "1.2.1", "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", "dev": true, "license": "BSD-3-Clause", "engines": { "node": ">=0.10.0" } }, "node_modules/split2": { "version": "4.2.0", "resolved": "https://registry.npmjs.org/split2/-/split2-4.2.0.tgz", "integrity": "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==", "license": "ISC", "engines": { "node": ">= 10.x" } }, "node_modules/stackback": { "version": "0.0.2", "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz", "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==", "dev": true, "license": "MIT" }, "node_modules/std-env": { "version": "3.10.0", "resolved": "https://registry.npmjs.org/std-env/-/std-env-3.10.0.tgz", "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==", "dev": true, "license": "MIT" }, "node_modules/string_decoder": { "version": "1.3.0", "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", "license": "MIT", "dependencies": { "safe-buffer": "~5.2.0" } }, "node_modules/strip-final-newline": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-3.0.0.tgz", "integrity": "sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw==", "dev": true, "license": "MIT", "engines": { "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/strip-json-comments": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz", "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==", "license": "MIT", "engines": { "node": ">=0.10.0" } }, "node_modules/strip-literal": { "version": "2.1.1", "resolved": "https://registry.npmjs.org/strip-literal/-/strip-literal-2.1.1.tgz", "integrity": "sha512-631UJ6O00eNGfMiWG78ck80dfBab8X6IVFB51jZK5Icd7XAs60Z5y7QdSd/wGIklnWvRbUNloVzhOKKmutxQ6Q==", "dev": true, "license": "MIT", "dependencies": { "js-tokens": "^9.0.1" }, "funding": { "url": "https://github.com/sponsors/antfu" } }, "node_modules/tar-fs": { "version": "2.1.4", "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz", "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==", "license": "MIT", "dependencies": { "chownr": "^1.1.1", "mkdirp-classic": "^0.5.2", "pump": "^3.0.0", "tar-stream": "^2.1.4" } }, "node_modules/tar-stream": { "version": "2.2.0", "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz", "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==", "license": "MIT", "dependencies": { "bl": "^4.0.3", "end-of-stream": "^1.4.1", "fs-constants": "^1.0.0", "inherits": "^2.0.3", "readable-stream": "^3.1.1" }, "engines": { "node": ">=6" } }, "node_modules/thread-stream": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/thread-stream/-/thread-stream-3.1.0.tgz", "integrity": "sha512-OqyPZ9u96VohAyMfJykzmivOrY2wfMSf3C5TtFJVgN+Hm6aj+voFhlK+kZEIv2FBh1X6Xp3DlnCOfEQ3B2J86A==", "license": "MIT", "dependencies": { "real-require": "^0.2.0" } }, "node_modules/tinybench": { "version": "2.9.0", "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz", "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==", "dev": true, "license": "MIT" }, "node_modules/tinyexec": { "version": "1.0.4", "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.0.4.tgz", "integrity": "sha512-u9r3uZC0bdpGOXtlxUIdwf9pkmvhqJdrVCH9fapQtgy/OeTTMZ1nqH7agtvEfmGui6e1XxjcdrlxvxJvc3sMqw==", "dev": true, "license": "MIT", "engines": { "node": ">=18" } }, "node_modules/tinyglobby": { "version": "0.2.15", "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz", "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==", "dev": true, "license": "MIT", "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.3" }, "engines": { "node": ">=12.0.0" }, "funding": { "url": "https://github.com/sponsors/SuperchupuDev" } }, "node_modules/tinypool": { "version": "0.8.4", "resolved": "https://registry.npmjs.org/tinypool/-/tinypool-0.8.4.tgz", "integrity": "sha512-i11VH5gS6IFeLY3gMBQ00/MmLncVP7JLXOw1vlgkytLmJK7QnEr7NXf0LBdxfmNPAeyetukOk0bOYrJrFGjYJQ==", "dev": true, "license": "MIT", "engines": { "node": ">=14.0.0" } }, "node_modules/tinyrainbow": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz", "integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==", "dev": true, "license": "MIT", "engines": { "node": ">=14.0.0" } }, "node_modules/tinyspy": { "version": "2.2.1", "resolved": "https://registry.npmjs.org/tinyspy/-/tinyspy-2.2.1.tgz", "integrity": "sha512-KYad6Vy5VDWV4GH3fjpseMQ/XU2BhIYP7Vzd0LG44qRWm/Yt2WCOTicFdvmgo6gWaqooMQCawTtILVQJupKu7A==", "dev": true, "license": "MIT", "engines": { "node": ">=14.0.0" } }, "node_modules/toad-cache": { "version": "3.7.0", "resolved": "https://registry.npmjs.org/toad-cache/-/toad-cache-3.7.0.tgz", "integrity": "sha512-/m8M+2BJUpoJdgAHoG+baCwBT+tf2VraSfkBgl0Y00qIWt41DJ8R5B8nsEw0I58YwF5IZH6z24/2TobDKnqSWw==", "license": "MIT", "engines": { "node": ">=12" } }, "node_modules/tsx": { "version": "4.21.0", "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.21.0.tgz", "integrity": "sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw==", "dev": true, "license": "MIT", "dependencies": { "esbuild": "~0.27.0", "get-tsconfig": "^4.7.5" }, "bin": { "tsx": "dist/cli.mjs" }, "engines": { "node": ">=18.0.0" }, "optionalDependencies": { "fsevents": "~2.3.3" } }, "node_modules/tunnel-agent": { "version": "0.6.0", "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz", "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==", "license": "Apache-2.0", "dependencies": { "safe-buffer": "^5.0.1" }, "engines": { "node": "*" } }, "node_modules/type-detect": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/type-detect/-/type-detect-4.1.0.tgz", "integrity": "sha512-Acylog8/luQ8L7il+geoSxhEkazvkslg7PSNKOX59mbB9cOveP5aq9h74Y7YU8yDpJwetzQQrfIwtf4Wp4LKcw==", "dev": true, "license": "MIT", "engines": { "node": ">=4" } }, "node_modules/typescript": { "version": "5.9.3", "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz", "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==", "dev": true, "license": "Apache-2.0", "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" }, "engines": { "node": ">=14.17" } }, "node_modules/ufo": { "version": "1.6.3", "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.6.3.tgz", "integrity": "sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==", "dev": true, "license": "MIT" }, "node_modules/undici-types": { "version": "7.18.2", "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.18.2.tgz", "integrity": "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==", "dev": true, "license": "MIT" }, "node_modules/util-deprecate": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==", "license": "MIT" }, "node_modules/vite": { "version": "5.4.21", "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.21.tgz", "integrity": "sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==", "dev": true, "license": "MIT", "dependencies": { "esbuild": "^0.21.3", "postcss": "^8.4.43", "rollup": "^4.20.0" }, "bin": { "vite": "bin/vite.js" }, "engines": { "node": "^18.0.0 || >=20.0.0" }, "funding": { "url": "https://github.com/vitejs/vite?sponsor=1" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^18.0.0 || >=20.0.0", "less": "*", "lightningcss": "^1.21.0", "sass": "*", "sass-embedded": "*", "stylus": "*", "sugarss": "*", "terser": "^5.4.0" }, "peerDependenciesMeta": { "@types/node": { "optional": true }, "less": { "optional": true }, "lightningcss": { "optional": true }, "sass": { "optional": true }, "sass-embedded": { "optional": true }, "stylus": { "optional": true }, "sugarss": { "optional": true }, "terser": { "optional": true } } }, "node_modules/vite-node": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/vite-node/-/vite-node-1.6.1.tgz", "integrity": "sha512-YAXkfvGtuTzwWbDSACdJSg4A4DZiAqckWe90Zapc/sEX3XvHcw1NdurM/6od8J207tSDqNbSsgdCacBgvJKFuA==", "dev": true, "license": "MIT", "dependencies": { "cac": "^6.7.14", "debug": "^4.3.4", "pathe": "^1.1.1", "picocolors": "^1.0.0", "vite": "^5.0.0" }, "bin": { "vite-node": "vite-node.mjs" }, "engines": { "node": "^18.0.0 || >=20.0.0" }, "funding": { "url": "https://opencollective.com/vitest" } }, "node_modules/vite/node_modules/@esbuild/darwin-arm64": { "version": "0.21.5", "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.21.5.tgz", "integrity": "sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ==", "cpu": [ "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ "darwin" ], "engines": { "node": ">=12" } }, "node_modules/vite/node_modules/esbuild": { "version": "0.21.5", "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.21.5.tgz", "integrity": "sha512-mg3OPMV4hXywwpoDxu3Qda5xCKQi+vCTZq8S9J/EpkhB2HzKXq4SNFZE3+NK93JYxc8VMSep+lOUSC/RVKaBqw==", "dev": true, "hasInstallScript": true, "license": "MIT", "bin": { "esbuild": "bin/esbuild" }, "engines": { "node": ">=12" }, "optionalDependencies": { "@esbuild/aix-ppc64": "0.21.5", "@esbuild/android-arm": "0.21.5", "@esbuild/android-arm64": "0.21.5", "@esbuild/android-x64": "0.21.5", "@esbuild/darwin-arm64": "0.21.5", "@esbuild/darwin-x64": "0.21.5", "@esbuild/freebsd-arm64": "0.21.5", "@esbuild/freebsd-x64": "0.21.5", "@esbuild/linux-arm": "0.21.5", "@esbuild/linux-arm64": "0.21.5", "@esbuild/linux-ia32": "0.21.5", "@esbuild/linux-loong64": "0.21.5", "@esbuild/linux-mips64el": "0.21.5", "@esbuild/linux-ppc64": "0.21.5", "@esbuild/linux-riscv64": "0.21.5", "@esbuild/linux-s390x": "0.21.5", "@esbuild/linux-x64": "0.21.5", "@esbuild/netbsd-x64": "0.21.5", "@esbuild/openbsd-x64": "0.21.5", "@esbuild/sunos-x64": "0.21.5", "@esbuild/win32-arm64": "0.21.5", "@esbuild/win32-ia32": "0.21.5", "@esbuild/win32-x64": "0.21.5" } }, "node_modules/vitest": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/vitest/-/vitest-1.6.1.tgz", "integrity": "sha512-Ljb1cnSJSivGN0LqXd/zmDbWEM0RNNg2t1QW/XUhYl/qPqyu7CsqeWtqQXHVaJsecLPuDoak2oJcZN2QoRIOag==", "dev": true, "license": "MIT", "dependencies": { "@vitest/expect": "1.6.1", "@vitest/runner": "1.6.1", "@vitest/snapshot": "1.6.1", "@vitest/spy": "1.6.1", "@vitest/utils": "1.6.1", "acorn-walk": "^8.3.2", "chai": "^4.3.10", "debug": "^4.3.4", "execa": "^8.0.1", "local-pkg": "^0.5.0", "magic-string": "^0.30.5", "pathe": "^1.1.1", "picocolors": "^1.0.0", "std-env": "^3.5.0", "strip-literal": "^2.0.0", "tinybench": "^2.5.1", "tinypool": "^0.8.3", "vite": "^5.0.0", "vite-node": "1.6.1", "why-is-node-running": "^2.2.2" }, "bin": { "vitest": "vitest.mjs" }, "engines": { "node": "^18.0.0 || >=20.0.0" }, "funding": { "url": "https://opencollective.com/vitest" }, "peerDependencies": { "@edge-runtime/vm": "*", "@types/node": "^18.0.0 || >=20.0.0", "@vitest/browser": "1.6.1", "@vitest/ui": "1.6.1", "happy-dom": "*", "jsdom": "*" }, "peerDependenciesMeta": { "@edge-runtime/vm": { "optional": true }, "@types/node": { "optional": true }, "@vitest/browser": { "optional": true }, "@vitest/ui": { "optional": true }, "happy-dom": { "optional": true }, "jsdom": { "optional": true } } }, "node_modules/which": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", "dev": true, "license": "ISC", "dependencies": { "isexe": "^2.0.0" }, "bin": { "node-which": "bin/node-which" }, "engines": { "node": ">= 8" } }, "node_modules/why-is-node-running": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz", "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==", "dev": true, "license": "MIT", "dependencies": { "siginfo": "^2.0.0", "stackback": "0.0.2" }, "bin": { "why-is-node-running": "cli.js" }, "engines": { "node": ">=8" } }, "node_modules/wrappy": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", "license": "ISC" }, "node_modules/yocto-queue": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.2.2.tgz", "integrity": "sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ==", "dev": true, "license": "MIT", "engines": { "node": ">=12.20" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, "node_modules/zod": { "version": "3.25.76", "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz", "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==", "license": "MIT", "funding": { "url": "https://github.com/sponsors/colinhacks" } }, "packages/cli": { "name": "@robot-id-card/cli", "version": "0.2.0", "dependencies": { "@noble/ed25519": "^2.1.0", "@noble/hashes": "^2.0.1", "commander": "^12.0.0" }, "bin": { "ric": "dist/index.js" }, "devDependencies": { "tsx": "^4.7.0", "typescript": "^5.4.0" }, "engines": { "node": ">=18" } }, "packages/dashboard": { "name": "@robot-id-card/dashboard", "version": "0.1.0", "devDependencies": { "typescript": "^5.4.0", "vite": "^5.4.0" } }, "packages/extension": { "name": "@robot-id-card/extension", "version": "0.1.0", "dependencies": { "@noble/ed25519": "^2.1.0" }, "devDependencies": { "@types/chrome": "^0.0.268", "esbuild": "^0.24.2", "typescript": "^5.4.0" } }, "packages/extension/node_modules/@esbuild/darwin-arm64": { "version": "0.24.2", "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.24.2.tgz", "integrity": "sha512-kj3AnYWc+CekmZnS5IPu9D+HWtUI49hbnyqk0FLEJDbzCIQt7hg7ucF1SQAilhtYpIujfaHr6O0UHlzzSPdOeA==", "cpu": [ "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ "darwin" ], "engines": { "node": ">=18" } }, "packages/extension/node_modules/esbuild": { "version": "0.24.2", "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.24.2.tgz", "integrity": "sha512-+9egpBW8I3CD5XPe0n6BfT5fxLzxrlDzqydF3aviG+9ni1lDC/OvMHcxqEFV0+LANZG5R1bFMWfUrjVsdwxJvA==", "dev": true, "hasInstallScript": true, "license": "MIT", "bin": { "esbuild": "bin/esbuild" }, "engines": { "node": ">=18" }, "optionalDependencies": { "@esbuild/aix-ppc64": "0.24.2", "@esbuild/android-arm": "0.24.2", "@esbuild/android-arm64": "0.24.2", "@esbuild/android-x64": "0.24.2", "@esbuild/darwin-arm64": "0.24.2", "@esbuild/darwin-x64": "0.24.2", "@esbuild/freebsd-arm64": "0.24.2", "@esbuild/freebsd-x64": "0.24.2", "@esbuild/linux-arm": "0.24.2", "@esbuild/linux-arm64": "0.24.2", "@esbuild/linux-ia32": "0.24.2", "@esbuild/linux-loong64": "0.24.2", "@esbuild/linux-mips64el": "0.24.2", "@esbuild/linux-ppc64": "0.24.2", "@esbuild/linux-riscv64": "0.24.2", "@esbuild/linux-s390x": "0.24.2", "@esbuild/linux-x64": "0.24.2", "@esbuild/netbsd-arm64": "0.24.2", "@esbuild/netbsd-x64": "0.24.2", "@esbuild/openbsd-arm64": "0.24.2", "@esbuild/openbsd-x64": "0.24.2", "@esbuild/sunos-x64": "0.24.2", "@esbuild/win32-arm64": "0.24.2", "@esbuild/win32-ia32": "0.24.2", "@esbuild/win32-x64": "0.24.2" } }, "packages/registry": { "name": "@robot-id-card/registry", "version": "0.1.0", "dependencies": { "@fastify/cors": "^11.2.0", "@fastify/rate-limit": "^10.3.0", "@noble/ed25519": "^2.1.0", "@noble/hashes": "^2.0.1", "better-sqlite3": "^12.8.0", "fastify": "^5.8.2", "nanoid": "^5.0.6", "zod": "^3.22.4" }, "devDependencies": { "@types/better-sqlite3": "^7.6.13", "tsx": "^4.7.0", "typescript": "^5.4.0", "vitest": "1.6.1" } }, "packages/registry/node_modules/@vitest/expect": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.0.tgz", "integrity": "sha512-EIxG7k4wlWweuCLG9Y5InKFwpMEOyrMb6ZJ1ihYu02LVj/bzUwn2VMU+13PinsjRW75XnITeFrQBMH5+dLvCDA==", "dev": true, "license": "MIT", "dependencies": { "@standard-schema/spec": "^1.1.0", "@types/chai": "^5.2.2", "@vitest/spy": "4.1.0", "@vitest/utils": "4.1.0", "chai": "^6.2.2", "tinyrainbow": "^3.0.3" }, "funding": { "url": "https://opencollective.com/vitest" } }, "packages/registry/node_modules/@vitest/mocker": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.0.tgz", "integrity": "sha512-evxREh+Hork43+Y4IOhTo+h5lGmVRyjqI739Rz4RlUPqwrkFFDF6EMvOOYjTx4E8Tl6gyCLRL8Mu7Ry12a13Tw==", "dev": true, "license": "MIT", "dependencies": { "@vitest/spy": "4.1.0", "estree-walker": "^3.0.3", "magic-string": "^0.30.21" }, "funding": { "url": "https://opencollective.com/vitest" }, "peerDependencies": { "msw": "^2.4.9", "vite": "^6.0.0 || ^7.0.0 || ^8.0.0-0" }, "peerDependenciesMeta": { "msw": { "optional": true }, "vite": { "optional": true } } }, "packages/registry/node_modules/@vitest/runner": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.0.tgz", "integrity": "sha512-Duvx2OzQ7d6OjchL+trw+aSrb9idh7pnNfxrklo14p3zmNL4qPCDeIJAK+eBKYjkIwG96Bc6vYuxhqDXQOWpoQ==", "dev": true, "license": "MIT", "dependencies": { "@vitest/utils": "4.1.0", "pathe": "^2.0.3" }, "funding": { "url": "https://opencollective.com/vitest" } }, "packages/registry/node_modules/@vitest/snapshot": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.0.tgz", "integrity": "sha512-0Vy9euT1kgsnj1CHttwi9i9o+4rRLEaPRSOJ5gyv579GJkNpgJK+B4HSv/rAWixx2wdAFci1X4CEPjiu2bXIMg==", "dev": true, "license": "MIT", "dependencies": { "@vitest/pretty-format": "4.1.0", "@vitest/utils": "4.1.0", "magic-string": "^0.30.21", "pathe": "^2.0.3" }, "funding": { "url": "https://opencollective.com/vitest" } }, "packages/registry/node_modules/@vitest/spy": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.0.tgz", "integrity": "sha512-pz77k+PgNpyMDv2FV6qmk5ZVau6c3R8HC8v342T2xlFxQKTrSeYw9waIJG8KgV9fFwAtTu4ceRzMivPTH6wSxw==", "dev": true, "license": "MIT", "funding": { "url": "https://opencollective.com/vitest" } }, "packages/registry/node_modules/@vitest/utils": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.0.tgz", "integrity": "sha512-XfPXT6a8TZY3dcGY8EdwsBulFCIw+BeeX0RZn2x/BtiY/75YGh8FeWGG8QISN/WhaqSrE2OrlDgtF8q5uhOTmw==", "dev": true, "license": "MIT", "dependencies": { "@vitest/pretty-format": "4.1.0", "convert-source-map": "^2.0.0", "tinyrainbow": "^3.0.3" }, "funding": { "url": "https://opencollective.com/vitest" } }, "packages/registry/node_modules/chai": { "version": "6.2.2", "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", "dev": true, "license": "MIT", "engines": { "node": ">=18" } }, "packages/registry/node_modules/pathe": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz", "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==", "dev": true, "license": "MIT" }, "packages/registry/node_modules/std-env": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.0.0.tgz", "integrity": "sha512-zUMPtQ/HBY3/50VbpkupYHbRroTRZJPRLvreamgErJVys0ceuzMkD44J/QjqhHjOzK42GQ3QZIeFG1OYfOtKqQ==", "dev": true, "license": "MIT" }, "packages/registry/node_modules/vite": { "version": "8.0.0", "resolved": "https://registry.npmjs.org/vite/-/vite-8.0.0.tgz", "integrity": "sha512-fPGaRNj9Zytaf8LEiBhY7Z6ijnFKdzU/+mL8EFBaKr7Vw1/FWcTBAMW0wLPJAGMPX38ZPVCVgLceWiEqeoqL2Q==", "dev": true, "license": "MIT", "dependencies": { "@oxc-project/runtime": "0.115.0", "lightningcss": "^1.32.0", "picomatch": "^4.0.3", "postcss": "^8.5.8", "rolldown": "1.0.0-rc.9", "tinyglobby": "^0.2.15" }, "bin": { "vite": "bin/vite.js" }, "engines": { "node": "^20.19.0 || >=22.12.0" }, "funding": { "url": "https://github.com/vitejs/vite?sponsor=1" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "@vitejs/devtools": "^0.0.0-alpha.31", "esbuild": "^0.27.0", "jiti": ">=1.21.0", "less": "^4.0.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "peerDependenciesMeta": { "@types/node": { "optional": true }, "@vitejs/devtools": { "optional": true }, "esbuild": { "optional": true }, "jiti": { "optional": true }, "less": { "optional": true }, "sass": { "optional": true }, "sass-embedded": { "optional": true }, "stylus": { "optional": true }, "sugarss": { "optional": true }, "terser": { "optional": true }, "tsx": { "optional": true }, "yaml": { "optional": true } } }, "packages/registry/node_modules/vitest": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.0.tgz", "integrity": "sha512-YbDrMF9jM2Lqc++2530UourxZHmkKLxrs4+mYhEwqWS97WJ7wOYEkcr+QfRgJ3PW9wz3odRijLZjHEaRLTNbqw==", "dev": true, "license": "MIT", "dependencies": { "@vitest/expect": "4.1.0", "@vitest/mocker": "4.1.0", "@vitest/pretty-format": "4.1.0", "@vitest/runner": "4.1.0", "@vitest/snapshot": "4.1.0", "@vitest/spy": "4.1.0", "@vitest/utils": "4.1.0", "es-module-lexer": "^2.0.0", "expect-type": "^1.3.0", "magic-string": "^0.30.21", "obug": "^2.1.1", "pathe": "^2.0.3", "picomatch": "^4.0.3", "std-env": "^4.0.0-rc.1", "tinybench": "^2.9.0", "tinyexec": "^1.0.2", "tinyglobby": "^0.2.15", "tinyrainbow": "^3.0.3", "vite": "^6.0.0 || ^7.0.0 || ^8.0.0-0", "why-is-node-running": "^2.3.0" }, "bin": { "vitest": "vitest.mjs" }, "engines": { "node": "^20.0.0 || ^22.0.0 || >=24.0.0" }, "funding": { "url": "https://opencollective.com/vitest" }, "peerDependencies": { "@edge-runtime/vm": "*", "@opentelemetry/api": "^1.9.0", "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0", "@vitest/browser-playwright": "4.1.0", "@vitest/browser-preview": "4.1.0", "@vitest/browser-webdriverio": "4.1.0", "@vitest/ui": "4.1.0", "happy-dom": "*", "jsdom": "*", "vite": "^6.0.0 || ^7.0.0 || ^8.0.0-0" }, "peerDependenciesMeta": { "@edge-runtime/vm": { "optional": true }, "@opentelemetry/api": { "optional": true }, "@types/node": { "optional": true }, "@vitest/browser-playwright": { "optional": true }, "@vitest/browser-preview": { "optional": true }, "@vitest/browser-webdriverio": { "optional": true }, "@vitest/ui": { "optional": true }, "happy-dom": { "optional": true }, "jsdom": { "optional": true }, "vite": { "optional": false } } }, "packages/sdk": { "name": "@robot-id-card/sdk", "version": "0.2.0", "dependencies": { "@noble/ed25519": "^2.1.0" }, "devDependencies": { "typescript": "^5.4.0", "vitest": "^1.6.1" }, "peerDependencies": { "fastify": ">=4" }, "peerDependenciesMeta": { "fastify": { "optional": true } } } } } FILE:package.json { "name": "robot-id-card", "version": "0.4.0", "private": true, "description": "Universal identity standard for AI bots and agents on the internet — cryptographically signed certificates, public audit registry, and permission-based access control", "homepage": "https://github.com/Cosmofang/robot-id-card", "workspaces": [ "packages/*" ], "scripts": { "build": "npm run build --workspaces", "test": "node node_modules/vitest/vitest.mjs run packages/registry/src packages/sdk/src", "dev:registry": "npm run dev --workspace=packages/registry", "typecheck": "tsc --noEmit" }, "keywords": [ "bot-identity", "ai-agent", "robot-id", "bot-passport", "bot-certificate", "ed25519", "cryptographic-identity", "bot-verification", "web-security", "browser-extension", "sdk", "registry", "bot-accountability", "permission-system", "audit-trail", "bot-grade", "ai-safety" ], "overrides": { "vitest": "1.6.1" }, "license": "MIT", "repository": { "type": "git", "url": "https://github.com/Cosmofang/robot-id-card" } } FILE:packages/cli/README.md # @robot-id-card/cli > CLI tool for managing your bot's Robot ID Card identity. ## Install ```bash npm install -g @robot-id-card/cli ``` ## Usage ```bash # 1. Generate a keypair for your bot ric keygen --output my-bot.key.json # 2. Register your bot with the registry ric register --key my-bot.key.json # 3. Check your bot's grade ric status --key my-bot.key.json # 4. Submit a daily identity claim (builds trust streak → grade upgrade) ric claim --key my-bot.key.json # 5. Report a bad bot ric report ``` ## Environment Variables | Variable | Default | Description | |----------|---------|-------------| | `RIC_REGISTRY` | `https://registry.robotidcard.dev` | Registry server URL | ## How it works Each bot gets an [Ed25519](https://ed25519.cr.yp.to/) keypair. The public key is registered with the RIC registry and embedded in a signed certificate. Daily `ric claim` calls build a consecutive-day streak — after 3 days, grade upgrades from `unknown` → `healthy`. See the [protocol spec](../../docs/spec-v1.md) for full details. FILE:packages/cli/package.json { "name": "@robot-id-card/cli", "version": "0.2.0", "description": "CLI tool for managing Robot ID Card bot identities", "type": "module", "main": "dist/index.js", "bin": { "ric": "./dist/index.js" }, "files": [ "dist", "README.md" ], "scripts": { "build": "tsc", "dev": "tsx src/index.ts", "prepublishOnly": "npm run build", "test": "echo no tests" }, "dependencies": { "@noble/ed25519": "^2.1.0", "@noble/hashes": "^2.0.1", "commander": "^12.0.0" }, "devDependencies": { "tsx": "^4.7.0", "typescript": "^5.4.0" }, "engines": { "node": ">=18" }, "publishConfig": { "access": "public" } } FILE:packages/cli/src/index.ts #!/usr/bin/env node /** * RIC CLI — Developer tool for managing bot identities * * Usage: * ric keygen — Generate a new Ed25519 keypair (step 1) * ric register — Register a new bot (step 2) * ric status — Check your bot's current grade * ric verify — Verify a bot by RIC ID * ric report — Report a bad bot */ import { Command } from 'commander' import * as ed from '@noble/ed25519' import { sha512 } from '@noble/hashes/sha2.js' import { randomBytes } from 'crypto' import * as fs from 'fs' // @noble/ed25519 v2 requires sha512Sync to be set for Node.js ed.etc.sha512Sync = (...m: Parameters) => sha512(...m) const REGISTRY = process.env.RIC_REGISTRY || 'https://registry.robotidcard.dev' const program = new Command() // ────────────────────────────────────────────── // ric keygen // ────────────────────────────────────────────── program .command('keygen') .description('Generate a new Ed25519 keypair for your bot') .option('--out ', 'Output key file', './bot.key.json') .action(async (opts) => { const privateKey = randomBytes(32) const publicKey = await ed.getPublicKey(privateKey) const keyFile = { private_key_hex: privateKey.toString('hex'), public_key: `ed25519:${Buffer.from(publicKey).toString('hex')}`, generated_at: new Date().toISOString(), } fs.writeFileSync(opts.out, JSON.stringify(keyFile, null, 2)) console.log(`\n🔑 New Ed25519 keypair generated`) console.log(` Public key: ${keyFile.public_key}`) console.log(` Saved to: ${opts.out}`) console.log(`\n⚠️ Keep ${opts.out} safe — it contains your private key!`) console.log(` Next step: ric register --key ${opts.out} --name "MyBot" ...`) }) program.name('ric').description('Robot ID Card CLI').version('0.4.0') // ────────────────────────────────────────────── // ric register // ────────────────────────────────────────────── program .command('register') .description('Register a new bot and get your RIC certificate') .requiredOption('--name ', 'Bot name') .requiredOption('--purpose ', 'What your bot does (min 10 chars)') .requiredOption('--developer ', 'Developer email') .option('--org ', 'Organization name') .option('--version ', 'Bot version', '1.0.0') .option('--capabilities ', 'Comma-separated capabilities (read_articles,follow_links,...)', 'read_articles') .option('--key ', 'Use existing key file from `ric keygen`') .option('--out ', 'Output certificate file', './bot.ric.json') .action(async (opts) => { console.log('\n🤖 Robot ID Card — Bot Registration\n') // Load or generate keypair let privateKeyHex: string let publicKey: string if (opts.key) { if (!fs.existsSync(opts.key)) { console.error(`Key file not found: ${opts.key}`) console.error(`Generate one with: ric keygen --out ${opts.key}`) process.exit(1) } const keyFile = JSON.parse(fs.readFileSync(opts.key, 'utf8')) privateKeyHex = keyFile.private_key_hex publicKey = keyFile.public_key } else { const privBytes = randomBytes(32) const pubBytes = await ed.getPublicKey(privBytes) privateKeyHex = privBytes.toString('hex') publicKey = `ed25519:${Buffer.from(pubBytes).toString('hex')}` } const capabilities = opts.capabilities.split(',').map((c: string) => c.trim()) const botName = opts.name const payload = { developer: { name: opts.developer.split('@')[0], email: opts.developer, org: opts.org, }, bot: { name: botName, version: opts.version, purpose: opts.purpose, capabilities, user_agent: `${botName}/${opts.version} (RIC:pending)`, }, public_key: publicKey, } try { const res = await fetch(`${REGISTRY}/v1/bots/register`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(payload), }) const data = await res.json() as any if (!res.ok) { if (res.status === 409) { console.error(`\n❌ ${data.error}`) if (data.existing_id) console.error(` Existing RIC ID: ${data.existing_id}`) if (data.hint) console.error(` Hint: ${data.hint}`) } else { console.error('Registration failed:', data) } process.exit(1) } const { certificate } = data const config = { ...certificate, private_key_hex: privateKeyHex } fs.writeFileSync(opts.out, JSON.stringify(config, null, 2)) console.log(`✅ Bot registered successfully!\n`) console.log(` RIC ID: ${certificate.id}`) console.log(` Grade: 🟡 UNKNOWN (pending weekly review)`) console.log(` Certificate: ${opts.out}`) console.log(`\n⚠️ Keep ${opts.out} safe — it contains your private key!`) } catch (e) { console.error('Failed to connect to registry:', e) process.exit(1) } }) // ────────────────────────────────────────────── // ric status // ────────────────────────────────────────────── program .command('status [ric_id]') .description('Check a bot\'s current grade and certificate') .option('--cert ', 'Load RIC ID from certificate file') .action(async (ricId, opts) => { if (!ricId && opts.cert) { const cert = JSON.parse(fs.readFileSync(opts.cert, 'utf8')) ricId = cert.id } if (!ricId) { console.error('Provide a RIC ID or --cert file') process.exit(1) } const res = await fetch(`${REGISTRY}/v1/bots/${ricId}`) if (!res.ok) { console.error('Bot not found:', ricId) process.exit(1) } const cert = await res.json() const gradeEmoji = { healthy: '🟢', unknown: '🟡', dangerous: '🔴' }[cert.grade as string] || '⚪' console.log(`\n${gradeEmoji} ${cert.bot.name} [${cert.grade.toUpperCase()}]\n`) console.log(` ID: ${cert.id}`) console.log(` Developer: ${cert.developer.name} <${cert.developer.email}>`) console.log(` Purpose: ${cert.bot.purpose}`) console.log(` Created: ${new Date(cert.created_at).toLocaleDateString()}`) console.log(` Grade since: ${new Date(cert.grade_updated_at).toLocaleDateString()}\n`) }) // ────────────────────────────────────────────── // ric report // ────────────────────────────────────────────── program .command('report ') .description('Report a bot for bad behavior') .option('--reason ', 'Reason: spam|scraping_violation|rate_limit_abuse|tos_violation') .option('--domain ', 'Your domain (reporter)') .option('--desc ', 'Description of the incident') .action(async (ricId, opts) => { const res = await fetch(`${REGISTRY}/v1/audit/report`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ ric_id: ricId, reporter_domain: opts.domain || 'unknown', reason: opts.reason || 'other', description: opts.desc || '', }), }) const data = await res.json() if (res.ok) { console.log(`✅ Report submitted. ID: ${data.report_id}`) } else { console.error('Report failed:', data) } }) // ────────────────────────────────────────────── // ric claim // ────────────────────────────────────────────── program .command('claim') .description('Claim your bot identity today (max 2×/day, 3 consecutive days → HEALTHY)') .option('--cert ', 'Certificate file from `ric register`', './bot.ric.json') .action(async (opts) => { if (!fs.existsSync(opts.cert)) { console.error(`Certificate file not found: ${opts.cert}`) process.exit(1) } const cert = JSON.parse(fs.readFileSync(opts.cert, 'utf8')) const { id, private_key_hex, public_key } = cert if (!id || !private_key_hex) { console.error('Invalid certificate file — missing id or private_key_hex') process.exit(1) } const date = new Date().toISOString().slice(0, 10) const message = `${id}:${date}` const msgBytes = new TextEncoder().encode(message) const privBytes = Buffer.from(private_key_hex, 'hex') const sigBytes = await ed.sign(msgBytes, privBytes) const signature = `ed25519:${Buffer.from(sigBytes).toString('hex')}` try { const res = await fetch(`${REGISTRY}/v1/bots/${id}/claim`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ signature, date }), }) const data = await res.json() as any if (!res.ok) { console.error(`\n❌ ${data.error}`) if (data.message) console.error(` ${data.message}`) process.exit(1) } const gradeEmoji = { healthy: '🟢', unknown: '🟡', dangerous: '🔴' }[data.grade as string] || '⚪' console.log(`\n${gradeEmoji} Identity claimed for ${id}`) console.log(` Streak : ${data.consecutive_days} consecutive day(s)`) console.log(` Today : ${data.today_count}/2 claims used`) console.log(` Grade : ${data.grade.toUpperCase()}`) if (data.grade_upgraded) { console.log(`\n🎉 Grade upgraded to HEALTHY!`) } if (data.certificate_type === 'code' && Array.isArray(data.award)) { console.log('\n' + data.award.join('\n')) } } catch (e) { console.error('Failed to connect to registry:', e) process.exit(1) } }) // ────────────────────────────────────────────── // ric sign (RFC 9421 — Web Bot Auth standard) // ────────────────────────────────────────────── program .command('sign') .description('Generate RFC 9421-compliant Signature + Signature-Input + Signature-Agent headers') .requiredOption('--cert ', 'Certificate file from `ric register`', './bot.ric.json') .requiredOption('--authority ', 'Target host, e.g. "example.com"') .option('--method ', 'HTTP method', 'GET') .option('--path ', 'Request path, e.g. "/api/articles"', '/') .option('--label ', 'Signature label (default: ric)', 'ric') .option('--ttl ', 'Signature lifetime in seconds', '300') .action(async (opts) => { if (!fs.existsSync(opts.cert)) { console.error(`Certificate file not found: ${opts.cert}`) process.exit(1) } const cert = JSON.parse(fs.readFileSync(opts.cert, 'utf8')) const { id, private_key_hex } = cert if (!id || !private_key_hex) { console.error('Invalid certificate file — missing id or private_key_hex') process.exit(1) } const createdSec = Math.floor(Date.now() / 1000) const expiresSec = createdSec + parseInt(opts.ttl, 10) const nonce = randomBytes(16).toString('base64url') const label = opts.label const components = ['@authority', '@method', '@path'] // Build signature params (the part after "label=" in Signature-Input) const sigInputParams = [ `(${components.map((c) => `"${c}"`).join(' ')})`, `keyid="${id}"`, `created=${createdSec}`, `expires=${expiresSec}`, `nonce="${nonce}"`, `tag="web-bot-auth"`, ].join(';') // Build signature base (what gets signed) const sigBase = [ `"@authority": ${opts.authority}`, `"@method": ${opts.method.toUpperCase()}`, `"@path": ${opts.path}`, `"@signature-params": ${sigInputParams}`, ].join('\n') const msgBytes = new TextEncoder().encode(sigBase) const privBytes = Buffer.from(private_key_hex, 'hex') const sigBytes = await ed.sign(msgBytes, privBytes) const sigB64 = Buffer.from(sigBytes).toString('base64') const signatureInput = `${label}=${sigInputParams}` const signature = `${label}=:${sigB64}:` const signatureAgent = `"${cert.bot?.name ?? 'RIC-Bot'}"; cert="${REGISTRY}/v1/bots/${id}"` console.log('\n── RFC 9421 Request Headers ─────────────────────────────') console.log(`Signature-Input: ${signatureInput}`) console.log(`Signature: ${signature}`) console.log(`Signature-Agent: ${signatureAgent}`) console.log('─────────────────────────────────────────────────────────\n') console.log('Signature base (for debugging):') console.log(sigBase) }) program.parse() FILE:packages/cli/tsconfig.json { "compilerOptions": { "target": "ES2022", "module": "NodeNext", "moduleResolution": "NodeNext", "outDir": "./dist", "rootDir": "./src", "strict": true, "esModuleInterop": true, "skipLibCheck": true, "declaration": true, "sourceMap": true }, "include": ["src/**/*"], "exclude": ["node_modules", "dist"] } FILE:packages/dashboard/index.html Robot ID Card — Bot Registry

FILE:packages/dashboard/netlify.toml [build] base = "packages/dashboard" command = "npm run build" publish = "dist" [build.environment] VITE_REGISTRY_URL = "https://ric-registry.onrender.com" [[redirects]] from = "/*" to = "/index.html" status = 200 FILE:packages/dashboard/package.json { "name": "@robot-id-card/dashboard", "version": "0.1.0", "description": "Public web dashboard for browsing registered RIC bots", "private": true, "type": "module", "scripts": { "dev": "vite", "build": "vite build", "preview": "vite preview", "test": "echo no tests" }, "devDependencies": { "vite": "^5.4.0", "typescript": "^5.4.0" } } FILE:packages/dashboard/public/icon.svg FILE:packages/dashboard/src/api.ts import type { BotSummary, BotDetail } from './types.js' const REGISTRY_URL = import.meta.env.VITE_REGISTRY_URL || 'http://localhost:3000' export interface BotsResponse { total: number page: number limit: number pages: number bots: BotSummary[] } export async function fetchBots(params?: { grade?: string; page?: number; limit?: number }): Promise { const qs = new URLSearchParams() if (params?.grade) qs.set('grade', params.grade) if (params?.page) qs.set('page', String(params.page)) if (params?.limit) qs.set('limit', String(params.limit)) const query = qs.toString() ? `?${qs}` : '' const res = await fetch(`${REGISTRY_URL}/v1/bots${query}`) if (!res.ok) throw new Error(`Registry error: ${res.status}`) return res.json() } export async function fetchBot(id: string): Promise { const res = await fetch(`${REGISTRY_URL}/v1/bots/${id}`) if (!res.ok) throw new Error(`Bot not found: ${id}`) return res.json() } export interface AuditEvent { id: string ric_id: string event: string old_grade?: string new_grade?: string reason?: string reporter?: string description?: string timestamp: string } export interface AuditLogResponse { ric_id: string total: number events: AuditEvent[] } export async function fetchAuditLog(id: string): Promise { const res = await fetch(`${REGISTRY_URL}/v1/audit/${id}`) if (!res.ok) throw new Error(`Audit log unavailable: ${id}`) return res.json() } FILE:packages/dashboard/src/components.ts import type { BotSummary, BotDetail, Grade } from './types.js' import type { AuditEvent } from './api.js' const GRADE_CONFIG: Record = { healthy: { label: 'Healthy', color: '#22c55e', icon: '✓' }, unknown: { label: 'Unknown', color: '#f59e0b', icon: '?' }, dangerous: { label: 'Dangerous', color: '#ef4444', icon: '✗' }, } const CAP_LABELS: Record = { read_articles: 'Read Articles', read_images: 'Read Images', follow_links: 'Follow Links', view_threads: 'View Threads', react: 'React / Like', post_content: 'Post Content', direct_chat: 'Direct Chat', } export function gradeBadge(grade: Grade): string { const cfg = GRADE_CONFIG[grade] return ` ${cfg.icon} ${cfg.label} ` } export function capabilityTag(cap: string): string { return `${CAP_LABELS[cap] ?? cap}` } export function relativeTime(isoDate: string): string { const diff = Date.now() - new Date(isoDate).getTime() const days = Math.floor(diff / 86_400_000) if (days === 0) return 'Today' if (days === 1) return 'Yesterday' if (days < 30) return `${days} days ago` const months = Math.floor(days / 30) return months === 1 ? '1 month ago' : `${months} months ago` } export function renderBotCard(bot: BotSummary): string { return `

${bot.name.charAt(0).toUpperCase()}

${escapeHtml(bot.name)}

${escapeHtml(bot.developer_org)}

${gradeBadge(bot.grade)}

${escapeHtml(truncate(bot.purpose, 120))}

${bot.id} ${relativeTime(bot.created_at)}

` } export function renderBotDetail(bot: BotDetail): string { const caps = bot.bot.capabilities.map(capabilityTag).join('') return `

${bot.bot.name.charAt(0).toUpperCase()}

${escapeHtml(bot.bot.name)}

v${escapeHtml(bot.bot.version)} ${gradeBadge(bot.grade)}

Purpose

${escapeHtml(bot.bot.purpose)}

Capabilities

${caps}

Developer

Name: ${escapeHtml(bot.developer.name)}
Org: ${escapeHtml(bot.developer.org)}
Website: ${escapeHtml(bot.developer.website)}
Verified: ${bot.developer.verified ? '✓ Yes' : '✗ No'}

Identity

RIC ID: ${bot.id}
Public Key: ${bot.public_key}
Registered: ${new Date(bot.created_at).toLocaleDateString('en-US', { year:'numeric', month:'long', day:'numeric' })}
Grade Updated: ${relativeTime(bot.grade_updated_at)}

User Agent

${escapeHtml(bot.bot.user_agent)}

Audit Log

` } const EVENT_LABELS: Record = { registered: { icon: '🆕', label: 'Registered', color: '#6366f1' }, grade_changed: { icon: '⚡', label: 'Grade Changed', color: '#f59e0b' }, violation_report: { icon: '🚨', label: 'Violation Report', color: '#ef4444' }, } export function renderAuditLog(events: AuditEvent[]): string { if (events.length === 0) { return `

No audit events recorded.

` } return `

${e.old_grade} → ${e.new_grade}

${cfg.icon}

${cfg.label}${gradeChange}
${e.reason ? `
${escapeHtml(e.reason)}
` : ''} ${e.reporter ? `
Reported by: ${escapeHtml(e.reporter)}
` : ''}
${new Date(e.timestamp).toLocaleString()}

` } export function renderSkeleton(count = 6): string { return Array(count).fill(0).map(() => `

`).join('') } export function renderError(message: string): string { return `

⚠

${escapeHtml(message)}

` } export function renderEmpty(): string { return `

🤖

No bots registered yet.

Be the first — ric register

` } function escapeHtml(s: string): string { return s .replace(/&/g, '&') .replace(//g, '>') .replace(/"/g, '"') .replace(/'/g, ''') } function truncate(s: string, max: number): string { return s.length <= max ? s : s.slice(0, max) + '…' } FILE:packages/dashboard/src/main.ts import './style.css' import { fetchBots, fetchBot, fetchAuditLog, type BotsResponse } from './api.js' import { renderBotCard, renderBotDetail, renderAuditLog, renderSkeleton, renderError, renderEmpty, } from './components.js' import type { BotSummary } from './types.js' // ── App state ──────────────────────────────────────────────────────────────── let allBots: BotSummary[] = [] let totalBots = 0 let currentPage = 1 let totalPages = 1 let searchQuery = '' let currentView: 'list' | 'detail' = 'list' // ── DOM refs ───────────────────────────────────────────────────────────────── const app = document.getElementById('app')! // ── Render ─────────────────────────────────────────────────────────────────── function renderApp() { app.innerHTML = `

${currentView === 'list' ? renderListView() : ''}

` bindEvents() } function renderListView(): string { const filtered = filterBots(allBots, searchQuery) return `

Bot Registry

Publicly registered AI agents & bots with verified identities.

${totalBots} registered bots ${allBots.filter(b => b.grade === 'healthy').length} healthy ${allBots.filter(b => b.grade === 'dangerous').length} flagged

${renderGrid(filtered)}

${totalPages > 1 ? `

Page ${currentPage} / ${totalPages}

` : ''}

` } function renderGrid(bots: BotSummary[]): string { if (bots.length === 0 && searchQuery) { return `

No bots match "${searchQuery}"

` } if (bots.length === 0) return renderEmpty() return bots.map(renderBotCard).join('') } function filterBots(bots: BotSummary[], query: string, grade?: string): BotSummary[] { let result = bots if (grade && grade !== 'all') { result = result.filter(b => b.grade === grade) } if (!query.trim()) return result const q = query.toLowerCase() return result.filter(b => b.name.toLowerCase().includes(q) || b.developer_org.toLowerCase().includes(q) || b.purpose.toLowerCase().includes(q) || b.id.toLowerCase().includes(q) ) } // ── Events ─────────────────────────────────────────────────────────────────── let activeGrade = 'all' function bindEvents() { // Logo → back to list document.getElementById('logo')?.addEventListener('click', (e) => { e.preventDefault() currentView = 'list' renderApp() }) // Search const searchInput = document.getElementById('search-input') as HTMLInputElement | null searchInput?.addEventListener('input', (e) => { searchQuery = (e.target as HTMLInputElement).value const grid = document.getElementById('bot-grid') if (grid) grid.innerHTML = renderGrid(filterBots(allBots, searchQuery, activeGrade)) }) // Pagination document.getElementById('prev-page')?.addEventListener('click', async () => { if (currentPage > 1) { currentPage--; await loadPage() } }) document.getElementById('next-page')?.addEventListener('click', async () => { if (currentPage < totalPages) { currentPage++; await loadPage() } }) // Grade filters document.querySelectorAll('.filter-btn').forEach(btn => { btn.addEventListener('click', () => { document.querySelectorAll('.filter-btn').forEach(b => b.classList.remove('active')) btn.classList.add('active') activeGrade = btn.dataset.grade ?? 'all' const grid = document.getElementById('bot-grid') if (grid) grid.innerHTML = renderGrid(filterBots(allBots, searchQuery, activeGrade)) }) }) // Bot card click → detail view document.querySelectorAll('.bot-card:not(.skeleton)').forEach(card => { const openDetail = async () => { const id = card.dataset.id if (!id) return const main = document.getElementById('main-content')! main.innerHTML = `

` try { const bot = await fetchBot(id) currentView = 'detail' main.innerHTML = renderBotDetail(bot) document.getElementById('back-btn')?.addEventListener('click', () => { currentView = 'list' renderApp() }) // Async load audit log after detail renders fetchAuditLog(id).then(log => { const container = document.getElementById('audit-log-container') if (container) container.innerHTML = renderAuditLog(log.events) }).catch(() => { const container = document.getElementById('audit-log-container') if (container) container.innerHTML = `

Audit log unavailable.

` }) } catch (err) { main.innerHTML = renderError(`Failed to load bot details: ${err instanceof Error ? err.message : 'Unknown error'}`) document.getElementById('retry-btn')?.addEventListener('click', () => renderApp()) } } card.addEventListener('click', openDetail) card.addEventListener('keydown', (e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); openDetail() } }) }) } // ── Data loading ───────────────────────────────────────────────────────────── async function loadPage() { const main = document.getElementById('main-content') || document.querySelector('.main-content')! if (main) { const grid = main.querySelector('.bot-grid') if (grid) grid.innerHTML = renderSkeleton(6) } const data: BotsResponse = await fetchBots({ page: currentPage, limit: 50 }) allBots = data.bots totalBots = data.total totalPages = data.pages renderApp() } // ── Bootstrap ──────────────────────────────────────────────────────────────── async function init() { // Render shell with skeleton app.innerHTML = `

Bot Registry

Loading…

${renderSkeleton(6)}

` try { await loadPage() } catch { app.querySelector('.main-content')!.innerHTML = renderError( 'Could not connect to the registry. Is the registry server running?' ) document.getElementById('retry-btn')?.addEventListener('click', init) } } init() FILE:packages/dashboard/src/style.css /* ── Reset & Base ─────────────────────────────────────────── */ *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; } :root { --bg: #0f1117; --bg-card: #1a1d26; --bg-hover: #21242f; --border: #2a2d3a; --text: #e2e8f0; --text-muted: #64748b; --accent: #6366f1; --accent-dim: rgba(99,102,241,0.15); --healthy: #22c55e; --unknown: #f59e0b; --dangerous: #ef4444; --radius: 10px; --shadow: 0 1px 3px rgba(0,0,0,0.4); } html { font-size: 16px; scroll-behavior: smooth; } body { background: var(--bg); color: var(--text); font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; line-height: 1.6; min-height: 100vh; } a { color: var(--accent); text-decoration: none; } a:hover { text-decoration: underline; } code { font-family: 'JetBrains Mono', 'Fira Code', monospace; font-size: 0.85em; } /* ── Layout ───────────────────────────────────────────────── */ #app { display: flex; flex-direction: column; min-height: 100vh; } .main-content { flex: 1; max-width: 1100px; margin: 0 auto; width: 100%; padding: 0 24px 64px; } /* ── Header ───────────────────────────────────────────────── */ .site-header { display: flex; align-items: center; justify-content: space-between; padding: 16px 32px; border-bottom: 1px solid var(--border); background: rgba(15,17,23,0.9); backdrop-filter: blur(12px); position: sticky; top: 0; z-index: 100; } .logo { display: flex; align-items: center; gap: 10px; font-weight: 700; font-size: 1.1rem; color: var(--text) !important; text-decoration: none !important; } .logo-icon { font-size: 1.4rem; } .header-nav { display: flex; gap: 24px; } .header-nav a { color: var(--text-muted); font-size: 0.9rem; transition: color 0.15s; } .header-nav a:hover { color: var(--text); text-decoration: none; } /* ── Hero ─────────────────────────────────────────────────── */ .hero { padding: 48px 0 32px; text-align: center; } .hero h1 { font-size: 2.5rem; font-weight: 700; background: linear-gradient(135deg, #818cf8, #c084fc); -webkit-background-clip: text; -webkit-text-fill-color: transparent; background-clip: text; margin-bottom: 8px; } .hero p { color: var(--text-muted); font-size: 1.1rem; } /* ── Controls ─────────────────────────────────────────────── */ .controls { display: flex; gap: 16px; align-items: center; margin-bottom: 16px; flex-wrap: wrap; } .search-box { position: relative; flex: 1; min-width: 240px; } .search-icon { position: absolute; left: 12px; top: 50%; transform: translateY(-50%); font-size: 0.9rem; pointer-events: none; } .search-box input { width: 100%; padding: 10px 14px 10px 36px; background: var(--bg-card); border: 1px solid var(--border); border-radius: var(--radius); color: var(--text); font-size: 0.95rem; font-family: inherit; outline: none; transition: border-color 0.15s; } .search-box input:focus { border-color: var(--accent); } .search-box input::placeholder { color: var(--text-muted); } .grade-filters { display: flex; gap: 8px; flex-wrap: wrap; } .filter-btn { padding: 8px 14px; background: var(--bg-card); border: 1px solid var(--border); border-radius: 999px; color: var(--text-muted); font-size: 0.85rem; font-family: inherit; cursor: pointer; transition: all 0.15s; } .filter-btn:hover { background: var(--bg-hover); color: var(--text); } .filter-btn.active { background: var(--accent-dim); border-color: var(--accent); color: var(--accent); } /* ── Stats bar ────────────────────────────────────────────── */ .stats-bar { display: flex; gap: 24px; margin-bottom: 24px; color: var(--text-muted); font-size: 0.85rem; } /* ── Bot Grid ─────────────────────────────────────────────── */ .bot-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); gap: 16px; } /* ── Bot Card ─────────────────────────────────────────────── */ .bot-card { background: var(--bg-card); border: 1px solid var(--border); border-radius: var(--radius); padding: 20px; cursor: pointer; transition: border-color 0.15s, background 0.15s, transform 0.1s; display: flex; flex-direction: column; gap: 12px; } .bot-card:hover { border-color: var(--accent); background: var(--bg-hover); transform: translateY(-1px); } .bot-card:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; } .bot-card-header { display: flex; align-items: flex-start; gap: 12px; } .bot-avatar { width: 40px; height: 40px; border-radius: 10px; background: var(--accent-dim); border: 1px solid var(--accent); color: var(--accent); font-weight: 700; font-size: 1.1rem; display: flex; align-items: center; justify-content: center; flex-shrink: 0; } .bot-card-title { flex: 1; min-width: 0; } .bot-card-title h3 { font-size: 1rem; font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; } .bot-org { font-size: 0.8rem; color: var(--text-muted); } .bot-purpose { font-size: 0.875rem; color: var(--text-muted); line-height: 1.5; flex: 1; } .bot-card-footer { display: flex; align-items: center; justify-content: space-between; gap: 8px; margin-top: auto; } .ric-id { font-size: 0.75rem; color: var(--text-muted); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; max-width: 160px; } .bot-age { font-size: 0.75rem; color: var(--text-muted); flex-shrink: 0; } /* ── Grade Badge ──────────────────────────────────────────── */ .grade-badge { display: inline-flex; align-items: center; gap: 4px; padding: 3px 10px; border-radius: 999px; font-size: 0.75rem; font-weight: 600; white-space: nowrap; flex-shrink: 0; } .grade-healthy { background: rgba(34,197,94,0.15); color: var(--healthy); border: 1px solid rgba(34,197,94,0.3); } .grade-unknown { background: rgba(245,158,11,0.15); color: var(--unknown); border: 1px solid rgba(245,158,11,0.3); } .grade-dangerous { background: rgba(239,68,68,0.15); color: var(--dangerous); border: 1px solid rgba(239,68,68,0.3); } .grade-icon { font-size: 0.85em; } /* ── Skeleton ─────────────────────────────────────────────── */ .skeleton { cursor: default; pointer-events: none; } .skeleton-line { height: 14px; border-radius: 6px; background: linear-gradient(90deg, var(--border) 25%, var(--bg-hover) 50%, var(--border) 75%); background-size: 200% 100%; animation: shimmer 1.4s infinite; } .w-60 { width: 60%; } .w-80 { width: 80%; } .w-100 { width: 100%; } .w-40 { width: 40%; } .mt4 { margin-top: 4px; } .mt8 { margin-top: 8px; } @keyframes shimmer { 0% { background-position: 200% 0; } 100% { background-position: -200% 0; } } /* ── Empty / Error States ─────────────────────────────────── */ .empty-state, .error-state { grid-column: 1 / -1; text-align: center; padding: 64px 24px; color: var(--text-muted); } .empty-icon, .error-icon { font-size: 3rem; margin-bottom: 16px; } .error-icon { color: var(--dangerous); } .retry-btn { margin-top: 16px; padding: 10px 24px; background: var(--accent); border: none; border-radius: var(--radius); color: white; font-size: 0.9rem; font-family: inherit; cursor: pointer; transition: opacity 0.15s; } .retry-btn:hover { opacity: 0.85; } /* ── Loading Detail ───────────────────────────────────────── */ .loading-detail { display: flex; justify-content: center; padding: 80px; } .spinner { width: 36px; height: 36px; border: 3px solid var(--border); border-top-color: var(--accent); border-radius: 50%; animation: spin 0.7s linear infinite; } @keyframes spin { to { transform: rotate(360deg); } } /* ── Detail Panel ─────────────────────────────────────────── */ .detail-panel { max-width: 720px; margin: 0 auto; padding: 32px 0; } .back-btn { background: none; border: none; color: var(--accent); font-size: 0.9rem; font-family: inherit; cursor: pointer; padding: 0; margin-bottom: 32px; display: block; transition: opacity 0.15s; } .back-btn:hover { opacity: 0.75; } .detail-header { display: flex; align-items: center; gap: 20px; margin-bottom: 32px; flex-wrap: wrap; } .detail-avatar { width: 64px; height: 64px; border-radius: 16px; background: var(--accent-dim); border: 2px solid var(--accent); color: var(--accent); font-weight: 700; font-size: 1.8rem; display: flex; align-items: center; justify-content: center; flex-shrink: 0; } .detail-header h2 { font-size: 1.6rem; font-weight: 700; } .detail-version { font-size: 0.85rem; color: var(--text-muted); margin-right: 12px; } .detail-section { background: var(--bg-card); border: 1px solid var(--border); border-radius: var(--radius); padding: 20px 24px; margin-bottom: 16px; } .detail-section h4 { font-size: 0.75rem; font-weight: 600; text-transform: uppercase; letter-spacing: 0.08em; color: var(--text-muted); margin-bottom: 12px; } .detail-section p { color: var(--text); line-height: 1.65; } .detail-dl { display: grid; grid-template-columns: 120px 1fr; gap: 8px 16px; } .detail-dl dt { color: var(--text-muted); font-size: 0.875rem; } .detail-dl dd { color: var(--text); font-size: 0.875rem; word-break: break-all; } .detail-dl code { font-size: 0.8em; } .pubkey { display: block; word-break: break-all; font-size: 0.75rem; color: var(--text-muted); background: var(--bg); padding: 8px 12px; border-radius: 6px; border: 1px solid var(--border); } .user-agent { display: block; font-size: 0.85rem; color: var(--text-muted); background: var(--bg); padding: 10px 12px; border-radius: 6px; border: 1px solid var(--border); } /* ── Capability Tags ──────────────────────────────────────── */ .cap-tags { display: flex; flex-wrap: wrap; gap: 8px; } .cap-tag { padding: 4px 12px; background: var(--accent-dim); border: 1px solid rgba(99,102,241,0.3); border-radius: 999px; font-size: 0.8rem; color: #a5b4fc; } /* ── Audit Log ────────────────────────────────────────────── */ .audit-loading { display: flex; justify-content: center; padding: 16px 0; } .audit-list { list-style: none; display: flex; flex-direction: column; gap: 12px; } .audit-item { display: flex; gap: 12px; align-items: flex-start; } .audit-icon { font-size: 1.1rem; flex-shrink: 0; margin-top: 1px; } .audit-body { flex: 1; min-width: 0; } .audit-title { font-size: 0.875rem; font-weight: 600; margin-bottom: 2px; } .audit-reason { font-size: 0.8rem; color: var(--text); margin-bottom: 2px; } .audit-meta { font-size: 0.75rem; color: var(--text-muted); } /* ── Pagination ───────────────────────────────────────────── */ .pagination { display: flex; align-items: center; justify-content: center; gap: 16px; margin-top: 32px; padding: 16px 0; } .page-btn { padding: 8px 20px; background: var(--bg-card); border: 1px solid var(--border); border-radius: var(--radius); color: var(--text); font-family: inherit; font-size: 0.875rem; cursor: pointer; transition: all 0.15s; } .page-btn:hover:not(:disabled) { border-color: var(--accent); color: var(--accent); } .page-btn:disabled { opacity: 0.35; cursor: not-allowed; } .page-info { color: var(--text-muted); font-size: 0.875rem; } /* ── Footer ───────────────────────────────────────────────── */ .site-footer { text-align: center; padding: 32px; border-top: 1px solid var(--border); color: var(--text-muted); font-size: 0.85rem; line-height: 2; } /* ── Responsive ───────────────────────────────────────────── */ @media (max-width: 600px) { .site-header { padding: 14px 16px; } .main-content { padding: 0 16px 48px; } .hero h1 { font-size: 1.8rem; } .controls { flex-direction: column; align-items: stretch; } .bot-grid { grid-template-columns: 1fr; } .detail-panel { padding: 24px 0; } .detail-dl { grid-template-columns: 1fr; } } FILE:packages/dashboard/src/types.ts export type Grade = 'unknown' | 'healthy' | 'dangerous' export interface BotSummary { id: string name: string purpose: string grade: Grade developer_org: string created_at: string } export interface BotDetail { ric_version: string id: string created_at: string grade: Grade grade_updated_at: string public_key: string developer: { name: string email: string org?: string website?: string verified: boolean } bot: { name: string version: string purpose: string capabilities: string[] user_agent: string } } FILE:packages/dashboard/vercel.json { "buildCommand": "npm run build", "outputDirectory": "dist", "installCommand": "npm install", "framework": null, "rewrites": [{ "source": "/(.*)", "destination": "/index.html" }], "env": { "VITE_REGISTRY_URL": "https://ric-registry.onrender.com" } } FILE:packages/dashboard/vite.config.ts import { defineConfig } from 'vite' export default defineConfig({ server: { port: 5173, proxy: { '/v1': { target: 'http://localhost:3000', changeOrigin: true, }, }, }, build: { outDir: 'dist', sourcemap: true, }, }) FILE:packages/extension/manifest.json { "manifest_version": 3, "name": "Robot ID Card", "version": "0.1.0", "description": "Carry your bot's RIC identity certificate in every web request", "permissions": [ "storage", "declarativeNetRequest", "alarms" ], "host_permissions": [ "" ], "background": { "service_worker": "background.js" }, "action": { "default_popup": "popup.html", "default_icon": { "16": "icons/icon16.png", "48": "icons/icon48.png", "128": "icons/icon128.png" } }, "icons": { "16": "icons/icon16.png", "48": "icons/icon48.png", "128": "icons/icon128.png" } } FILE:packages/extension/package.json { "name": "@robot-id-card/extension", "version": "0.2.0", "description": "Browser extension for carrying Robot ID Card bot identity", "private": true, "scripts": { "build": "npm run bundle && cp -r public/* dist/ && cp manifest.json dist/", "bundle": "esbuild src/background.ts src/popup.ts --bundle --outdir=dist --target=chrome109 --platform=browser", "dev": "esbuild src/background.ts src/popup.ts --bundle --outdir=dist --target=chrome109 --platform=browser --watch", "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.sw.json", "test": "echo no tests" }, "dependencies": { "@noble/ed25519": "^2.1.0" }, "devDependencies": { "@types/chrome": "^0.0.268", "esbuild": "^0.24.2", "typescript": "^5.4.0" } } FILE:packages/extension/public/popup.html Robot ID Card

No identity configured.
Register your bot to get started.

FILE:packages/extension/src/background.ts /** * RIC Browser Extension — Background Service Worker (Manifest V3) * * Injects RIC identity headers into all outgoing HTTPS requests using * chrome.declarativeNetRequest (MV3-compatible, replaces the MV2 * chrome.webRequest blocking approach). * * Strategy: * - Headers include a timestamp-based Ed25519 signature. * - chrome.alarms fires every REFRESH_MINUTES to regenerate the * signature, keeping it inside the registry's 5-minute replay window. */ import * as ed from '@noble/ed25519' interface RICConfig { ricId: string privateKeyHex: string certificate: object } const HEADER_RULE_ID = 1 const REFRESH_ALARM = 'ric-header-refresh' const REFRESH_MINUTES = 4 // must stay < registry's 5-min replay window; match expires TTL // ── Hex utilities (Buffer is not available in service workers) ─ function hexToBytes(hex: string): Uint8Array { const arr = new Uint8Array(hex.length / 2) for (let i = 0; i < hex.length; i += 2) { arr[i / 2] = parseInt(hex.slice(i, i + 2), 16) } return arr } function bytesToHex(bytes: Uint8Array): string { return Array.from(bytes) .map(b => b.toString(16).padStart(2, '0')) .join('') } // ── Config ──────────────────────────────────────────────────── async function getConfig(): Promise { const result = await chrome.storage.local.get(['ricId', 'privateKeyHex', 'certificate']) if (!result.ricId || !result.privateKeyHex) return null return result as RICConfig } // ── Header injection ────────────────────────────────────────── /** * Generate RFC 9421-compliant headers and update the declarativeNetRequest * dynamic rule so all subsequent requests carry valid, unexpired headers. * * Note: declarativeNetRequest uses static rules (same headers for all URLs in * this cycle). We sign "@authority" only since the per-request path is unknown * at rule-creation time. The expires field matches the refresh alarm interval. */ async function refreshHeaders(): Promise { const config = await getConfig() if (!config) { await chrome.declarativeNetRequest.updateDynamicRules({ removeRuleIds: [HEADER_RULE_ID] }) return } const createdSec = Math.floor(Date.now() / 1000) const expiresSec = createdSec + REFRESH_MINUTES * 60 // Nonce: random 12 bytes base64url — unique per refresh cycle const nonceBytes = crypto.getRandomValues(new Uint8Array(12)) const nonce = btoa(String.fromCharCode(...nonceBytes)) .replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '') const label = 'ric' const components = ['@authority'] // Signature-Input params (everything after "label=") const sigInputParams = [ `(${components.map((c) => `"${c}"`).join(' ')})`, `keyid="${config.ricId}"`, `created=${createdSec}`, `expires=${expiresSec}`, `nonce="${nonce}"`, `tag="web-bot-auth"`, ].join(';') // Signature base: signed against a placeholder authority // The @authority field will mismatch per-site — this is the browser extension limitation. // Websites can choose to verify only keyid + timestamp + nonce without @authority. const sigBase = [ `"@authority": *`, // wildcard placeholder — extension can't know target per-rule `"@signature-params": ${sigInputParams}`, ].join('\n') const msgBytes = new TextEncoder().encode(sigBase) const privBytes = hexToBytes(config.privateKeyHex) const sigBytes = await ed.sign(msgBytes, privBytes) // RFC 9421 uses standard base64 (not base64url) for the signature value const sigB64 = btoa(String.fromCharCode(...sigBytes)) const signatureInput = `${label}=${sigInputParams}` const signature = `${label}=:${sigB64}:` const signatureAgent = `"RIC-Extension"; cert="https://registry.robotidcard.dev/v1/bots/${config.ricId}"` await chrome.declarativeNetRequest.updateDynamicRules({ removeRuleIds: [HEADER_RULE_ID], addRules: [ { id: HEADER_RULE_ID, priority: 1, action: { type: 'modifyHeaders' as chrome.declarativeNetRequest.RuleActionType, requestHeaders: [ { header: 'Signature-Input', operation: 'set' as chrome.declarativeNetRequest.HeaderOperation, value: signatureInput }, { header: 'Signature', operation: 'set' as chrome.declarativeNetRequest.HeaderOperation, value: signature }, { header: 'Signature-Agent', operation: 'set' as chrome.declarativeNetRequest.HeaderOperation, value: signatureAgent }, ], }, condition: { urlFilter: '|https://', resourceTypes: [ 'xmlhttprequest' as chrome.declarativeNetRequest.ResourceType, 'main_frame' as chrome.declarativeNetRequest.ResourceType, 'sub_frame' as chrome.declarativeNetRequest.ResourceType, ], }, }, ], }) } // ── Lifecycle ───────────────────────────────────────────────── chrome.runtime.onInstalled.addListener(async () => { await chrome.alarms.create(REFRESH_ALARM, { periodInMinutes: REFRESH_MINUTES }) await refreshHeaders() }) chrome.runtime.onStartup.addListener(async () => { // Re-create alarm in case it was cleared during browser restart await chrome.alarms.create(REFRESH_ALARM, { periodInMinutes: REFRESH_MINUTES }) await refreshHeaders() }) chrome.alarms.onAlarm.addListener((alarm) => { if (alarm.name === REFRESH_ALARM) { refreshHeaders() } }) // ── Messages from popup ─────────────────────────────────────── chrome.runtime.onMessage.addListener((message, _sender, sendResponse) => { if (message.type === 'GET_STATUS') { getConfig().then((config) => { sendResponse({ configured: !!config, ricId: config?.ricId }) }) return true // keep channel open for async response } if (message.type === 'SAVE_CONFIG') { chrome.storage.local.set(message.config).then(async () => { await refreshHeaders() sendResponse({ success: true }) }) return true } if (message.type === 'CLEAR_CONFIG') { chrome.storage.local.remove(['ricId', 'privateKeyHex', 'certificate']).then(async () => { await refreshHeaders() // clears the inject rule sendResponse({ success: true }) }) return true } }) FILE:packages/extension/src/popup.ts /** * RIC Popup — shows current bot identity status and handles import/disconnect */ const GRADE_CONFIG = { healthy: { emoji: '🟢', label: 'Healthy', cssClass: 'grade-healthy' }, unknown: { emoji: '🟡', label: 'Unknown', cssClass: 'grade-unknown' }, dangerous: { emoji: '🔴', label: 'Dangerous', cssClass: 'grade-dangerous' }, } const PERMISSION_LABELS = ['Blocked', 'Read', 'View Threads', 'React', 'Post', 'Chat'] // ── Helpers ─────────────────────────────────────────────────── async function getStatus(): Promise<{ configured: boolean; ricId?: string }> { return new Promise((resolve) => { chrome.runtime.sendMessage({ type: 'GET_STATUS' }, resolve) }) } async function fetchCert(ricId: string) { try { const res = await fetch(`https://registry.robotidcard.dev/v1/bots/${ricId}`) if (!res.ok) return null return res.json() } catch { return null } } function sendMessage(msg: object): Promise<{ success: boolean }> { return new Promise((resolve) => { chrome.runtime.sendMessage(msg, resolve) }) } // ── Render: configured state ────────────────────────────────── function renderConfigured(cert: any) { const grade = GRADE_CONFIG[cert.grade as keyof typeof GRADE_CONFIG] || GRADE_CONFIG.unknown const permLevel = cert.grade === 'healthy' ? 3 : cert.grade === 'unknown' ? 1 : 0 const app = document.getElementById('app')! app.innerHTML = `

${cert.bot.name} ${grade.emoji} ${grade.label}

RIC ID ${cert.id}

Developer ${cert.developer.name} ${cert.developer.org ? `· ${cert.developer.org}` : ''}

Purpose ${cert.bot.purpose}

Permission Level: ${permLevel}/5 — ${PERMISSION_LABELS[permLevel]}

${PERMISSION_LABELS.slice(1).map((_, i) => `

` ).join('')}

` document.getElementById('btn-refresh')?.addEventListener('click', () => location.reload()) document.getElementById('btn-disconnect')?.addEventListener('click', async () => { if (!confirm('Remove your RIC identity from this extension?')) return await sendMessage({ type: 'CLEAR_CONFIG' }) location.reload() }) } // ── Render: import modal ────────────────────────────────────── function renderImportModal() { const app = document.getElementById('app')! app.innerHTML = `

Paste the contents of your bot.ric.json file (generated by ric register):

` document.getElementById('btn-import-cancel')?.addEventListener('click', () => init()) document.getElementById('btn-import-confirm')?.addEventListener('click', async () => { const raw = (document.getElementById('cert-input') as HTMLTextAreaElement).value.trim() const errEl = document.getElementById('import-error')! let parsed: any try { parsed = JSON.parse(raw) } catch { errEl.textContent = 'Invalid JSON — paste the full contents of bot.ric.json' errEl.style.display = 'block' return } if (!parsed.id || !parsed.private_key_hex || !parsed.public_key) { errEl.textContent = 'Missing required fields: id, private_key_hex, public_key' errEl.style.display = 'block' return } await sendMessage({ type: 'SAVE_CONFIG', config: { ricId: parsed.id, privateKeyHex: parsed.private_key_hex, certificate: parsed, }, }) location.reload() }) } // ── Render: register instructions ──────────────────────────── function renderRegisterHelp() { const app = document.getElementById('app')! app.innerHTML = `

        npm install -g @robot-id-card/cli

        ric keygen

        ric register --name "MyBot" \\

          --purpose "Your bot's purpose" \\

          --developer you@email.com

Then import the generated bot.ric.json file here.

` document.getElementById('btn-back')?.addEventListener('click', () => init()) } // ── Init ────────────────────────────────────────────────────── async function init() { const status = await getStatus() if (!status.configured) { // Restore default not-configured HTML and attach button listeners const app = document.getElementById('app')! app.innerHTML = `

No identity configured.
Register your bot to get started.

` document.getElementById('btn-register')?.addEventListener('click', renderRegisterHelp) document.getElementById('btn-import')?.addEventListener('click', renderImportModal) return } const cert = status.ricId ? await fetchCert(status.ricId) : null if (cert) { renderConfigured(cert) } } document.addEventListener('DOMContentLoaded', init) FILE:packages/extension/tsconfig.json { "compilerOptions": { "target": "ES2020", "module": "ESNext", "moduleResolution": "bundler", "lib": ["ES2020", "DOM"], "outDir": "./dist", "rootDir": "./src", "strict": true, "skipLibCheck": true, "noEmit": true }, "include": ["src/popup.ts"], "exclude": ["node_modules", "dist"] } FILE:packages/extension/tsconfig.sw.json { "compilerOptions": { "target": "ES2020", "module": "ESNext", "moduleResolution": "bundler", "lib": ["ES2020", "WebWorker"], "outDir": "./dist", "rootDir": "./src", "strict": true, "skipLibCheck": true, "noEmit": true }, "include": ["src/background.ts"], "exclude": ["node_modules", "dist"] } FILE:packages/registry/package.json { "name": "@robot-id-card/registry", "version": "0.2.0", "description": "Central registry server for Robot ID Card — SQLite-backed bot identity database with Ed25519 verification", "homepage": "https://github.com/Cosmofang/robot-id-card", "repository": { "type": "git", "url": "https://github.com/Cosmofang/robot-id-card", "directory": "packages/registry" }, "type": "module", "main": "dist/index.js", "scripts": { "dev": "tsx watch src/index.ts", "build": "tsc", "start": "node dist/index.js", "test": "node ../../node_modules/vitest/vitest.mjs run src" }, "dependencies": { "@fastify/cors": "^11.2.0", "@fastify/rate-limit": "^10.3.0", "@noble/ed25519": "^2.1.0", "@noble/hashes": "^2.0.1", "better-sqlite3": "^12.8.0", "fastify": "^5.8.2", "nanoid": "^5.0.6", "zod": "^3.22.4" }, "devDependencies": { "@types/better-sqlite3": "^7.6.13", "tsx": "^4.7.0", "typescript": "^5.4.0", "vitest": "1.6.1" } } FILE:packages/registry/src/__tests__/certificate.test.ts import { describe, it, expect } from 'vitest' import { RICCertificateSchema, GradeSchema, getPermissionLevel, type RICCertificate } from '../models/certificate.js' function makeCert(overrides: Partial = {}): RICCertificate { return { ric_version: '1.0', id: 'ric_test123', created_at: '2026-01-15T10:00:00Z', developer: { name: 'Test Dev', email: 'dev@example.com', verified: false, }, bot: { name: 'TestBot', version: '1.0.0', purpose: 'Integration testing for the registry', capabilities: ['read_articles'], user_agent: 'TestBot/1.0 (RIC:ric_test123)', }, grade: 'unknown', grade_updated_at: '2026-01-15T10:00:00Z', public_key: 'ed25519:abc123', signature: 'test-sig', ...overrides, } as RICCertificate } describe('GradeSchema', () => { it('accepts valid grades', () => { expect(GradeSchema.parse('unknown')).toBe('unknown') expect(GradeSchema.parse('healthy')).toBe('healthy') expect(GradeSchema.parse('dangerous')).toBe('dangerous') }) it('rejects invalid grades', () => { expect(() => GradeSchema.parse('suspicious')).toThrow() expect(() => GradeSchema.parse('')).toThrow() }) }) describe('RICCertificateSchema', () => { it('validates a well-formed certificate', () => { const cert = makeCert() const result = RICCertificateSchema.parse(cert) expect(result.id).toBe('ric_test123') expect(result.ric_version).toBe('1.0') }) it('rejects certificate with missing ric_ prefix', () => { expect(() => RICCertificateSchema.parse(makeCert({ id: 'bad_id' }))).toThrow() }) it('rejects certificate with invalid email', () => { const cert = makeCert() cert.developer.email = 'not-an-email' expect(() => RICCertificateSchema.parse(cert)).toThrow() }) it('rejects certificate with purpose too short', () => { const cert = makeCert() cert.bot.purpose = 'short' expect(() => RICCertificateSchema.parse(cert)).toThrow() }) it('rejects certificate with invalid public_key prefix', () => { expect(() => RICCertificateSchema.parse(makeCert({ public_key: 'rsa:abc123' }))).toThrow() }) }) describe('getPermissionLevel', () => { it('returns 0 for dangerous bots', () => { expect(getPermissionLevel(makeCert({ grade: 'dangerous' }))).toBe(0) }) it('returns 1 for unknown bots regardless of capabilities', () => { const cert = makeCert({ grade: 'unknown' }) cert.bot.capabilities = ['direct_chat', 'post_content'] expect(getPermissionLevel(cert)).toBe(1) }) it('returns 5 for healthy bot with direct_chat', () => { const cert = makeCert({ grade: 'healthy' }) cert.bot.capabilities = ['direct_chat'] expect(getPermissionLevel(cert)).toBe(5) }) it('returns 4 for healthy bot with post_content', () => { const cert = makeCert({ grade: 'healthy' }) cert.bot.capabilities = ['post_content'] expect(getPermissionLevel(cert)).toBe(4) }) it('returns 3 for healthy bot with react', () => { const cert = makeCert({ grade: 'healthy' }) cert.bot.capabilities = ['react'] expect(getPermissionLevel(cert)).toBe(3) }) it('returns 2 for healthy bot with view_threads', () => { const cert = makeCert({ grade: 'healthy' }) cert.bot.capabilities = ['view_threads'] expect(getPermissionLevel(cert)).toBe(2) }) it('returns 1 for healthy bot with only read_articles', () => { const cert = makeCert({ grade: 'healthy' }) cert.bot.capabilities = ['read_articles'] expect(getPermissionLevel(cert)).toBe(1) }) it('uses highest capability for permission level', () => { const cert = makeCert({ grade: 'healthy' }) cert.bot.capabilities = ['read_articles', 'view_threads', 'post_content'] expect(getPermissionLevel(cert)).toBe(4) }) }) FILE:packages/registry/src/index.ts import Fastify from 'fastify' import cors from '@fastify/cors' import rateLimit from '@fastify/rate-limit' import * as ed from '@noble/ed25519' import { sha512 } from '@noble/hashes/sha2.js' // Required by @noble/ed25519 v2 in Node.js ed.etc.sha512Sync = (...m: Parameters) => sha512(...m) import { registrationRoutes } from './routes/registration.js' import { verifyRoutes } from './routes/verify.js' import { auditRoutes } from './routes/audit.js' import { certificateRoutes } from './routes/certificate.js' import { claimRoutes } from './routes/claim.js' import { wellknownRoutes, botKeyRoutes } from './routes/wellknown.js' const PORT = parseInt(process.env.PORT || '3000', 10) const server = Fastify({ logger: true }) await server.register(cors, { origin: true }) await server.register(rateLimit, { max: 100, timeWindow: '1 minute' }) // RFC 9421 well-known key directory (must be registered at root, no prefix) await server.register(wellknownRoutes) // Routes await server.register(registrationRoutes, { prefix: '/v1/bots' }) await server.register(certificateRoutes, { prefix: '/v1/bots' }) await server.register(claimRoutes, { prefix: '/v1/bots' }) await server.register(botKeyRoutes, { prefix: '/v1/bots' }) await server.register(verifyRoutes, { prefix: '/v1/verify' }) await server.register(auditRoutes, { prefix: '/v1/audit' }) server.get('/health', async () => ({ status: 'ok', version: '0.4.0' })) try { await server.listen({ port: PORT, host: '0.0.0.0' }) console.log(`RIC Registry running on http://localhost:${PORT}`) } catch (err) { server.log.error(err) process.exit(1) } FILE:packages/registry/src/models/certificate.test.ts import { describe, it, expect } from 'vitest' import { getPermissionLevel, RICCertificateSchema, GradeSchema } from './certificate.js' import type { RICCertificate } from './certificate.js' function makeCert(overrides: Partial = {}): RICCertificate { return { ric_version: '1.0', id: 'ric_aabbccdd_xyz12345', created_at: new Date().toISOString(), grade: 'unknown', grade_updated_at: new Date().toISOString(), public_key: 'ed25519:aabbccdd11223344aabbccdd11223344aabbccdd11223344aabbccdd11223344', signature: 'registry_sig_test', developer: { name: 'Test Dev', email: 'dev@example.com', verified: false, }, bot: { name: 'TestBot', version: '1.0.0', purpose: 'Automated testing of the RIC protocol', capabilities: ['read_articles'], user_agent: 'TestBot/1.0', }, ...overrides, } } // ── Grade schema ────────────────────────────────────────────────────────────── describe('GradeSchema', () => { it('accepts valid grades', () => { expect(GradeSchema.parse('unknown')).toBe('unknown') expect(GradeSchema.parse('healthy')).toBe('healthy') expect(GradeSchema.parse('dangerous')).toBe('dangerous') }) it('rejects invalid grade', () => { expect(() => GradeSchema.parse('trusted')).toThrow() expect(() => GradeSchema.parse('')).toThrow() }) }) // ── RICCertificateSchema ─────────────────────────────────────────────────────── describe('RICCertificateSchema', () => { it('accepts a valid certificate', () => { const cert = makeCert() expect(() => RICCertificateSchema.parse(cert)).not.toThrow() }) it('rejects empty bot name', () => { expect(() => RICCertificateSchema.parse(makeCert({ bot: { ...makeCert().bot, name: '' } }))).toThrow() }) it('rejects purpose shorter than 10 chars', () => { expect(() => RICCertificateSchema.parse(makeCert({ bot: { ...makeCert().bot, purpose: 'too short' } }))).toThrow() }) it('rejects invalid email', () => { expect(() => RICCertificateSchema.parse(makeCert({ developer: { ...makeCert().developer, email: 'not-an-email' } }))).toThrow() }) it('accepts optional developer website as valid URL', () => { const cert = makeCert({ developer: { ...makeCert().developer, website: 'https://example.com' } }) expect(() => RICCertificateSchema.parse(cert)).not.toThrow() }) it('rejects invalid URL as website', () => { expect(() => RICCertificateSchema.parse(makeCert({ developer: { ...makeCert().developer, website: 'not-a-url' } }))).toThrow() }) }) // ── getPermissionLevel ──────────────────────────────────────────────────────── describe('getPermissionLevel', () => { it('dangerous bot → level 0 (blocked), regardless of capabilities', () => { const cert = makeCert({ grade: 'dangerous', bot: { ...makeCert().bot, capabilities: ['direct_chat'] } }) expect(getPermissionLevel(cert)).toBe(0) }) it('unknown bot → level 1 (read-only), regardless of capabilities', () => { const cert = makeCert({ grade: 'unknown', bot: { ...makeCert().bot, capabilities: ['direct_chat'] } }) expect(getPermissionLevel(cert)).toBe(1) }) it('healthy + read_articles → level 1', () => { const cert = makeCert({ grade: 'healthy', bot: { ...makeCert().bot, capabilities: ['read_articles'] } }) expect(getPermissionLevel(cert)).toBe(1) }) it('healthy + view_threads → level 2', () => { const cert = makeCert({ grade: 'healthy', bot: { ...makeCert().bot, capabilities: ['view_threads'] } }) expect(getPermissionLevel(cert)).toBe(2) }) it('healthy + react → level 3', () => { const cert = makeCert({ grade: 'healthy', bot: { ...makeCert().bot, capabilities: ['react'] } }) expect(getPermissionLevel(cert)).toBe(3) }) it('healthy + post_content → level 4', () => { const cert = makeCert({ grade: 'healthy', bot: { ...makeCert().bot, capabilities: ['post_content'] } }) expect(getPermissionLevel(cert)).toBe(4) }) it('healthy + direct_chat → level 5 (highest)', () => { const cert = makeCert({ grade: 'healthy', bot: { ...makeCert().bot, capabilities: ['direct_chat'] } }) expect(getPermissionLevel(cert)).toBe(5) }) it('highest-privilege capability wins when multiple listed', () => { const cert = makeCert({ grade: 'healthy', bot: { ...makeCert().bot, capabilities: ['read_articles', 'react', 'post_content'] } }) expect(getPermissionLevel(cert)).toBe(4) }) }) FILE:packages/registry/src/models/certificate.ts import { z } from 'zod' export const GradeSchema = z.enum(['unknown', 'healthy', 'dangerous']) export type Grade = z.infer export const BotCapabilitySchema = z.enum([ 'read_articles', 'read_images', 'follow_links', 'view_threads', 'react', 'post_content', 'direct_chat', ]) export const RICCertificateSchema = z.object({ ric_version: z.literal('1.0'), id: z.string().startsWith('ric_'), created_at: z.string().datetime(), developer: z.object({ name: z.string().min(1), email: z.string().email(), org: z.string().optional(), website: z.string().url().optional(), verified: z.boolean().default(false), }), bot: z.object({ name: z.string().min(1).max(64), version: z.string(), purpose: z.string().min(10).max(500), capabilities: z.array(BotCapabilitySchema), user_agent: z.string(), }), grade: GradeSchema.default('unknown'), grade_updated_at: z.string().datetime(), public_key: z.string().startsWith('ed25519:'), signature: z.string(), }) export type RICCertificate = z.infer /** * Permission level based on grade and bot capabilities. * Level 0 = blocked, Level 5 = full trusted access */ export function getPermissionLevel(cert: RICCertificate): number { if (cert.grade === 'dangerous') return 0 const caps = cert.bot.capabilities if (cert.grade === 'unknown') return 1 // read-only // healthy bots get progressive levels if (caps.includes('direct_chat')) return 5 if (caps.includes('post_content')) return 4 if (caps.includes('react')) return 3 if (caps.includes('view_threads')) return 2 return 1 } export const PERMISSION_LABELS: Record = { 0: 'Blocked', 1: 'Read articles', 2: 'View threads', 3: 'Like / react', 4: 'Post content', 5: 'Direct chat', } FILE:packages/registry/src/routes/audit.ts import type { FastifyPluginAsync } from 'fastify' import { z } from 'zod' import { GradeSchema } from '../models/certificate.js' import { botStore } from '../store/botStore.js' import { auditStore } from '../store/auditStore.js' const ReportSchema = z.object({ ric_id: z.string().startsWith('ric_'), reporter_domain: z.string().min(1), reason: z.enum([ 'spam', 'scraping_violation', 'rate_limit_abuse', 'tos_violation', 'impersonation', 'malicious_content', 'other', ]), evidence_url: z.string().url().optional(), description: z.string().max(1000), }) const GradeUpdateSchema = z.object({ ric_id: z.string().startsWith('ric_'), grade: GradeSchema, reason: z.string().min(1).max(500), admin_key: z.string(), }) const ADMIN_KEY = process.env.RIC_ADMIN_KEY || 'dev-admin-key-change-me' export const auditRoutes: FastifyPluginAsync = async (fastify) => { /** * POST /v1/audit/report * Website reports bad bot behavior */ fastify.post('/report', async (request, reply) => { const body = ReportSchema.safeParse(request.body) if (!body.success) { return reply.status(400).send({ error: 'Invalid report', details: body.error.flatten() }) } const { ric_id, reporter_domain, reason, description } = body.data // Verify the bot exists before accepting a report const cert = botStore.findById(ric_id) if (!cert) { return reply.status(404).send({ error: 'Bot not found', ric_id }) } const entry = auditStore.append({ ric_id, event: 'violation_report', reason, reporter: reporter_domain, description, }) fastify.log.warn(`Violation report for ${ric_id}: ${reason} from ${reporter_domain}`) // Auto-flag as dangerous if 3+ reports in 24h const recentCount = botStore.countRecentReports(ric_id) if (recentCount >= 3 && cert.grade !== 'dangerous') { const oldGrade = cert.grade botStore.updateGrade(ric_id, 'dangerous') auditStore.append({ ric_id, event: 'grade_changed', old_grade: oldGrade, new_grade: 'dangerous', reason: `Auto-flagged: ${recentCount} violation reports in 24h`, }) fastify.log.warn(`Bot ${ric_id} auto-flagged as DANGEROUS`) } return reply.status(202).send({ message: 'Report submitted for review', report_id: entry.id }) }) /** * GET /v1/audit/:ric_id * Public audit log for a specific bot */ fastify.get('/:ric_id', async (request, reply) => { const { ric_id } = request.params as { ric_id: string } const events = auditStore.findByRicId(ric_id) return reply.send({ ric_id, total: events.length, events }) }) /** * POST /v1/audit/grade * Manually update a bot's grade after weekly review (requires admin key) */ fastify.post('/grade', async (request, reply) => { const body = GradeUpdateSchema.safeParse(request.body) if (!body.success) { return reply.status(400).send({ error: 'Invalid request', details: body.error.flatten() }) } const { ric_id, grade, reason, admin_key } = body.data if (admin_key !== ADMIN_KEY) { return reply.status(403).send({ error: 'Forbidden' }) } const cert = botStore.findById(ric_id) if (!cert) { return reply.status(404).send({ error: 'Bot not found', ric_id }) } const oldGrade = cert.grade botStore.updateGrade(ric_id, grade) auditStore.append({ ric_id, event: 'grade_changed', old_grade: oldGrade, new_grade: grade, reason, }) return reply.send({ message: `Grade updated to ${grade}`, ric_id, old_grade: oldGrade }) }) } FILE:packages/registry/src/routes/certificate.ts import type { FastifyPluginAsync } from 'fastify' import { createReadStream, readFileSync, statSync } from 'fs' import { resolve, dirname } from 'path' import { fileURLToPath } from 'url' import { botStore } from '../store/botStore.js' const __dirname = dirname(fileURLToPath(import.meta.url)) const ASSETS_DIR = resolve(__dirname, '../../assets') /** * Certificate issuance logic: * - Bot has 'read_images' capability → visual PNG certificate (luxury card style) * - Otherwise → code ASCII certificate (terminal text style) */ export function selectCertificateFile(capabilities: string[]): { file: string type: 'visual' | 'code' } { if (capabilities.includes('read_images')) { return { file: 'certificate-visual.png', type: 'visual' } } return { file: 'certificate-code.png', type: 'code' } } /** * Generate an ASCII award certificate personalized with bot info. * Returned as a plain text string to embed directly in JSON responses. */ export function buildCodeAward(opts: { botName: string ricId: string developer: string grade: string issuedAt: string }): string[] { const { botName, ricId, developer, grade, issuedAt } = opts const date = issuedAt.slice(0, 10) const border = '✦ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✦' const sep = ' ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─' const pad = (label: string, value: string) => ` ${label.padEnd(5)}› ${value}` return [ border, ' R · I · C C E R T I F I C A T E', sep, pad('Bot', botName.padEnd(22) + `Grade › ${grade.toUpperCase()}`), pad('ID ', ricId), pad('Dev', developer), sep, ' ◈ Certified Robot Identity — Verified Worldwide ◈', ` ✦ · · LUMIOI · ${date} · · ✦`, border, ] } /** * Read the visual PNG template and return as base64 data URI. */ export function buildVisualAward(file: string): string { const buf = readFileSync(resolve(ASSETS_DIR, file)) return `data:image/png;base64,${buf.toString('base64')}` } export const certificateRoutes: FastifyPluginAsync = async (fastify) => { /** * GET /v1/bots/:id/certificate * * Returns the appropriate award certificate PNG for this bot. * - read_images capability → luxury visual certificate * - text-only bots → terminal code certificate * * Query params: * ?format=image force PNG stream (default) * ?format=json return certificate metadata as JSON */ fastify.get('/:id/certificate', async (request, reply) => { const { id } = request.params as { id: string } const { format } = request.query as { format?: string } const cert = botStore.findById(id) if (!cert) { return reply.status(404).send({ error: 'Bot not found', id }) } const { file, type } = selectCertificateFile(cert.bot.capabilities) const filePath = resolve(ASSETS_DIR, file) // JSON metadata mode if (format === 'json') { return reply.send({ ric_id: cert.id, bot_name: cert.bot.name, developer: cert.developer.email, grade: cert.grade, certificate_type: type, certificate_url: `/v1/bots/${id}/certificate`, issued_at: cert.created_at, signed_by: 'LUMIOI', }) } // PNG stream mode (default) try { const stat = statSync(filePath) reply.header('Content-Type', 'image/png') reply.header('Content-Length', stat.size) reply.header('Content-Disposition', `inline; filename="${cert.bot.name}-ric-certificate.png"`) reply.header('Cache-Control', 'public, max-age=86400') return reply.send(createReadStream(filePath)) } catch { return reply.status(500).send({ error: 'Certificate asset not found on server' }) } }) } FILE:packages/registry/src/routes/claim.ts /** * POST /v1/bots/:id/claim * * Daily identity claim — bot proves ownership of its RIC ID by signing * a challenge with its Ed25519 private key. * * Rules: * - Max 2 claims per calendar day (UTC) * - One bot is permanently bound to one ID (enforced at registration) * - 3 consecutive daily claims → grade upgraded unknown → healthy * - Bot with 3+ violation reports in 24 h → auto-downgraded to dangerous * * Request body: * { "signature": "ed25519:", "date": "YYYY-MM-DD" } * * The bot must sign exactly: ":" (UTF-8, no newline) * using its registered Ed25519 private key. */ import type { FastifyPluginAsync } from 'fastify' import { z } from 'zod' import * as ed from '@noble/ed25519' import { botStore } from '../store/botStore.js' import { auditStore } from '../store/auditStore.js' import { selectCertificateFile, buildCodeAward, buildVisualAward } from './certificate.js' const ClaimBodySchema = z.object({ signature: z.string().startsWith('ed25519:'), date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, 'date must be YYYY-MM-DD'), }) export const claimRoutes: FastifyPluginAsync = async (fastify) => { fastify.post('/:id/claim', { config: { rateLimit: { max: 20, timeWindow: '1 hour' } }, }, async (request, reply) => { const { id } = request.params as { id: string } const body = ClaimBodySchema.safeParse(request.body) if (!body.success) { return reply.status(400).send({ error: 'Invalid request', details: body.error.flatten() }) } const { signature, date } = body.data // ── Load bot ────────────────────────────────────────── const cert = botStore.findById(id) if (!cert) { return reply.status(404).send({ error: 'Bot not found', id }) } // ── Blocked bots cannot claim ───────────────────────── if (cert.grade === 'dangerous') { return reply.status(403).send({ error: 'Forbidden', code: 'BOT_DANGEROUS', message: 'Dangerous bots cannot claim their identity. Contact LUMIOI to appeal.', }) } // ── Verify date is today (allow ±1 day for timezone drift) ─────────── const today = new Date().toISOString().slice(0, 10) const yesterday = new Date(Date.now() - 86_400_000).toISOString().slice(0, 10) if (date !== today && date !== yesterday) { return reply.status(400).send({ error: 'Invalid date', code: 'DATE_MISMATCH', message: `Claim date must be today (${today}) or yesterday (${yesterday}).`, }) } // ── Verify Ed25519 signature ────────────────────────── const message = `${id}:${date}` const msgBytes = new TextEncoder().encode(message) const sigHex = signature.replace('ed25519:', '') const pubHex = cert.public_key.replace('ed25519:', '') try { const valid = await ed.verify(sigHex, msgBytes, pubHex) if (!valid) { return reply.status(401).send({ error: 'Signature verification failed', code: 'INVALID_SIGNATURE', hint: `Sign the string "${id}:${date}" with your Ed25519 private key.`, }) } } catch { return reply.status(400).send({ error: 'Malformed signature', code: 'BAD_SIGNATURE_FORMAT', }) } // ── Record claim (enforces daily limit + streak logic) ──────────── const result = botStore.recordClaim(id) if (!result.ok) { if (result.error === 'DAILY_LIMIT_REACHED') { return reply.status(429).send({ error: 'Daily claim limit reached', code: 'DAILY_LIMIT_REACHED', message: 'You have already claimed your identity 2 times today. Try again tomorrow.', today_count: result.today_count, }) } return reply.status(500).send({ error: 'Claim failed' }) } // ── Audit log ───────────────────────────────────────── auditStore.append({ ric_id: id, event: 'identity_claimed', reason: `Daily claim #${result.today_count} — streak: ${result.consecutive_days} day(s)`, }) if (result.grade_upgraded) { auditStore.append({ ric_id: id, event: 'grade_changed', reason: `Auto-upgraded to HEALTHY after ${result.consecutive_days} consecutive daily claims`, }) } // ── Build award for response ────────────────────────── const updatedCert = botStore.findById(id)! const { type: certType, file: certFile } = selectCertificateFile(cert.bot.capabilities) const award = certType === 'visual' ? buildVisualAward(certFile) : buildCodeAward({ botName: cert.bot.name, ricId: id, developer: cert.developer.email, grade: updatedCert.grade, issuedAt: new Date().toISOString(), }) fastify.log.info(`Identity claimed: ${id} (streak: ${result.consecutive_days})`) return reply.status(200).send({ success: true, ric_id: id, grade: updatedCert.grade, grade_upgraded: result.grade_upgraded ?? false, consecutive_days: result.consecutive_days, today_count: result.today_count, remaining_today: 2 - (result.today_count ?? 0), certificate_type: certType, award, message: result.grade_upgraded ? `🎉 Grade upgraded to HEALTHY after ${result.consecutive_days} consecutive days!` : `✓ Identity claimed. Streak: ${result.consecutive_days} day(s). ${2 - (result.today_count ?? 0)} claim(s) remaining today.`, }) }) } FILE:packages/registry/src/routes/registration.ts import type { FastifyPluginAsync } from 'fastify' import { z } from 'zod' import { nanoid } from 'nanoid' import * as ed from '@noble/ed25519' import { botStore } from '../store/botStore.js' import { auditStore } from '../store/auditStore.js' import { BotCapabilitySchema } from '../models/certificate.js' import { selectCertificateFile, buildCodeAward, buildVisualAward } from './certificate.js' const RegisterBodySchema = z.object({ developer: z.object({ name: z.string().min(1).max(128), email: z.string().email(), org: z.string().max(128).optional(), website: z.string().url().optional(), }), bot: z.object({ name: z.string().min(1).max(64), version: z.string().regex(/^\d+\.\d+(\.\d+)?$/, 'version must be semver e.g. 1.0.0'), purpose: z.string().min(10).max(500), capabilities: z.array(BotCapabilitySchema).min(1), user_agent: z.string().min(1).max(256), }), public_key: z.string().startsWith('ed25519:').length(72), // 'ed25519:' (8) + 64 hex chars }) export const registrationRoutes: FastifyPluginAsync = async (fastify) => { /** * POST /v1/bots/register * Register a new bot and receive its RIC certificate. * * Uniqueness rules: * 1. A public key can only be registered once (each keypair = one bot identity) * 2. (email + bot name) combo must be unique — prevents duplicate registrations */ fastify.post('/register', { config: { rateLimit: { max: 5, timeWindow: '1 hour' } }, }, async (request, reply) => { const body = RegisterBodySchema.safeParse(request.body) if (!body.success) { return reply.status(400).send({ error: 'Invalid request', details: body.error.flatten() }) } const { developer, bot, public_key } = body.data // ── Uniqueness check 1: public key ──────────────────── const existingByKey = botStore.findByPublicKey(public_key) if (existingByKey) { return reply.status(409).send({ error: 'Public key already registered', code: 'DUPLICATE_KEY', existing_id: existingByKey, hint: 'Each bot must use a unique Ed25519 keypair. Generate a new key with `ric keygen`.', }) } // ── Uniqueness check 2: email + bot name ────────────── const existingByName = botStore.findByEmailAndBotName(developer.email, bot.name) if (existingByName) { return reply.status(409).send({ error: 'A bot with this name is already registered for this developer account', code: 'DUPLICATE_BOT', existing_id: existingByName, hint: 'Use `ric status` to retrieve your existing certificate, or choose a different bot name.', }) } // ── Validate public key is valid Ed25519 ────────────── const pubKeyHex = public_key.replace('ed25519:', '') try { if (pubKeyHex.length !== 64 || !/^[0-9a-f]+$/i.test(pubKeyHex)) { throw new Error('invalid hex') } // ed25519 public keys are always 32 bytes = 64 hex chars Buffer.from(pubKeyHex, 'hex') } catch { return reply.status(400).send({ error: 'Invalid public key format', code: 'INVALID_KEY', hint: 'Public key must be a valid Ed25519 key in hex format prefixed with "ed25519:"', }) } // Embed first 8 hex chars of public key as fingerprint — the bot's identity // is permanently woven into its RIC ID: ric_{fp8}_{rand8} const fingerprint = pubKeyHex.slice(0, 8) const id = `ric_${fingerprint}_${nanoid(8)}` const now = new Date().toISOString() const certificate = { ric_version: '1.0' as const, id, created_at: now, developer: { ...developer, verified: false }, bot: { ...bot }, grade: 'unknown' as const, grade_updated_at: now, public_key, // Registry signature placeholder — in v0.3 this will be a real Ed25519 sig from registry key signature: `registry_sig_${nanoid(32)}`, } botStore.insert(certificate) auditStore.append({ ric_id: id, event: 'registered', reason: 'New bot registration' }) fastify.log.info(`New bot registered: ${id} (${bot.name} by ${developer.email})`) const { type: certificateType, file: certFile } = selectCertificateFile(bot.capabilities) // Build inline award: // visual bots → base64 PNG data URI // code-only → array of ASCII lines (safe for JSON serialization) const award = certificateType === 'visual' ? buildVisualAward(certFile) : buildCodeAward({ botName: bot.name, ricId: id, developer: developer.email, grade: 'unknown', issuedAt: now, }) return reply.status(201).send({ certificate, certificate_url: `/v1/bots/${id}/certificate`, certificate_type: certificateType, // visual: string (data:image/png;base64,...) // code: string[] (each line of the ASCII award) award, message: 'Bot registered successfully. Grade: UNKNOWN — weekly review pending.', docs: 'https://github.com/Cosmofang/robot-id-card', }) }) /** * GET /v1/bots/:id * Fetch a bot's current certificate and grade */ fastify.get('/:id', async (request, reply) => { const { id } = request.params as { id: string } const cert = botStore.findById(id) if (!cert) { return reply.status(404).send({ error: 'Bot not found', id }) } return reply.send(cert) }) /** * GET /v1/bots?grade=healthy&page=1&limit=50 * List registered bots with optional grade filter and pagination */ fastify.get('/', async (request) => { const { grade, page = '1', limit = '50' } = request.query as { grade?: string page?: string limit?: string } let bots = botStore.listSummary() if (grade && ['unknown', 'healthy', 'dangerous'].includes(grade)) { bots = bots.filter((b) => b.grade === grade) } const pageNum = Math.max(1, parseInt(page, 10) || 1) const limitNum = Math.min(100, Math.max(1, parseInt(limit, 10) || 50)) const total = bots.length const start = (pageNum - 1) * limitNum const paged = bots.slice(start, start + limitNum) return { total, page: pageNum, limit: limitNum, pages: Math.ceil(total / limitNum), bots: paged, } }) } FILE:packages/registry/src/routes/verify.ts import type { FastifyPluginAsync } from 'fastify' import * as ed from '@noble/ed25519' import { getPermissionLevel, PERMISSION_LABELS } from '../models/certificate.js' import { botStore } from '../store/botStore.js' // ── RFC 9421 helpers ────────────────────────────────────────────────────────── /** * Parse a Signature-Input field value into its label, component list, and params. * * Input: full Signature-Input header value, e.g.: * ric=("@authority" "@path" "@method");keyid="ric_abc";created=1718000000;nonce="x";tag="web-bot-auth" */ function parseSignatureInput(raw: string): { label: string components: string[] params: Record paramsRaw: string // everything after "label=" — used for signature base reconstruction } | null { try { const eqIdx = raw.indexOf('=') if (eqIdx === -1) return null const label = raw.slice(0, eqIdx).trim() const rest = raw.slice(eqIdx + 1).trim() const parenEnd = rest.indexOf(')') if (!rest.startsWith('(') || parenEnd === -1) return null const componentStr = rest.slice(1, parenEnd) const components = componentStr.match(/"([^"]+)"/g)?.map((s) => s.replace(/"/g, '')) ?? [] const paramStr = rest.slice(parenEnd + 1) const params: Record = {} for (const match of paramStr.matchAll(/;(\w+)=(?:"([^"]*)"|(\d+))/g)) { params[match[1]] = match[2] !== undefined ? match[2] : Number(match[3]) } return { label, components, params, paramsRaw: rest } } catch { return null } } /** * Extract base64 signature bytes from a Signature header for the given label. * Format: label=:: */ function extractSignatureValue(raw: string, label: string): string | null { const pattern = new RegExp(`(?:^|,\\s*)${label}=:([A-Za-z0-9+/=]+):`) return raw.match(pattern)?.[1] ?? null } /** * Build the RFC 9421 signature base string from components and their values. * The last line is always "@signature-params". */ function buildSignatureBase( components: string[], values: Record, sigInputParamsRaw: string ): string | null { const lines: string[] = [] for (const comp of components) { const val = values[comp] if (val === undefined) return null lines.push(`"${comp}": ${val}`) } lines.push(`"@signature-params": ${sigInputParamsRaw}`) return lines.join('\n') } // ── Route ───────────────────────────────────────────────────────────────────── export const verifyRoutes: FastifyPluginAsync = async (fastify) => { /** * POST /v1/verify * * Dual-format verification endpoint: * * RFC 9421 body (preferred — Web Bot Auth standard): * { authority, method, path, signature_input, signature, signature_agent? } * * Legacy body (deprecated — X-RIC-* headers): * { ric_id, timestamp, signature, message } */ fastify.post('/', async (request, reply) => { const body = request.body as Record if (body.signature_input) return handleRFC9421(body, reply) return handleLegacy(body, reply) }) // ── RFC 9421 verification (7-step Web Bot Auth flow) ───────────────────── async function handleRFC9421(body: Record, reply: any) { const { authority, method, path, signature_input, signature } = body as { authority?: string method?: string path?: string signature_input?: string signature?: string } // Step 1 — Confirm required headers are present if (!signature_input || !signature) { return reply.status(400).send({ error: 'Missing signature_input or signature', code: 'MISSING_HEADERS' }) } // Step 2 — Parse Signature-Input; retrieve keyid pointing to bot's public key const parsed = parseSignatureInput(signature_input) if (!parsed) { return reply.status(400).send({ error: 'Malformed Signature-Input', code: 'SIG_INPUT_PARSE_ERROR' }) } const { label, components, params, paramsRaw } = parsed const keyid = params.keyid as string | undefined const created = params.created as number | undefined const expires = params.expires as number | undefined const nonce = params.nonce as string | undefined const tag = params.tag as string | undefined if (!keyid || !created) { return reply.status(400).send({ error: 'Signature-Input missing required params: keyid, created', code: 'SIG_PARAMS_MISSING' }) } const cert = botStore.findById(keyid) if (!cert) { return reply.status(404).send({ error: 'Unknown keyid — bot not registered in RIC', code: 'BOT_NOT_FOUND', grade: 'dangerous', permission_level: 0 }) } // Step 3 — Validate created timestamp (±30s clock skew, max 5-min age) const nowSec = Math.floor(Date.now() / 1000) if (created > nowSec + 30) { return reply.status(401).send({ error: 'Signature created timestamp is in the future', code: 'CLOCK_SKEW' }) } if (nowSec - created > 300) { return reply.status(401).send({ error: 'Signature expired (> 5 minutes old)', code: 'EXPIRED' }) } if (expires !== undefined && nowSec > expires) { return reply.status(401).send({ error: 'Signature past its expires field', code: 'EXPIRED' }) } // Step 4 — Check nonce uniqueness (prevents replay attacks) if (nonce) { const fresh = botStore.checkAndMarkNonce(nonce, keyid, created) if (!fresh) { return reply.status(401).send({ error: 'Nonce already used — replay attack detected', code: 'NONCE_REPLAY' }) } } // Step 5 — Verify tag type if (tag && tag !== 'web-bot-auth') { return reply.status(400).send({ error: 'Unsupported tag; expected "web-bot-auth"', code: 'UNKNOWN_TAG' }) } // Step 6 — Ed25519 cryptographic signature verification const componentValues: Record = {} if (components.includes('@authority') && authority) componentValues['@authority'] = authority if (components.includes('@method') && method) componentValues['@method'] = method if (components.includes('@path') && path) componentValues['@path'] = path const sigBase = buildSignatureBase(components, componentValues, paramsRaw) if (!sigBase) { return reply.status(400).send({ error: 'Could not reconstruct signature base — missing component values', code: 'SIG_BASE_ERROR' }) } const sigB64 = extractSignatureValue(signature, label) if (!sigB64) { return reply.status(400).send({ error: `Signature label "${label}" not found in Signature header`, code: 'SIG_LABEL_MISSING' }) } try { const pubKeyHex = cert.public_key.replace('ed25519:', '') const msgBytes = new TextEncoder().encode(sigBase) const sigBytes = Buffer.from(sigB64, 'base64') const isValid = await ed.verify(sigBytes, msgBytes, Buffer.from(pubKeyHex, 'hex')) if (!isValid) { return reply.status(401).send({ error: 'Signature cryptographic verification failed', code: 'SIG_MISMATCH', grade: 'dangerous', permission_level: 0 }) } } catch { return reply.status(400).send({ error: 'Signature bytes could not be decoded', code: 'SIG_DECODE_ERROR' }) } // Step 7 — Confirm agent registration status if (cert.grade === 'dangerous') { return reply.status(403).send({ error: 'Bot is flagged as dangerous', code: 'BOT_DANGEROUS', grade: 'dangerous', permission_level: 0 }) } const permLevel = getPermissionLevel(cert) return reply.send({ valid: true, id: cert.id, bot: { name: cert.bot.name, purpose: cert.bot.purpose }, developer: { name: cert.developer.name, org: cert.developer.org }, grade: cert.grade, permission_level: permLevel, permission_label: PERMISSION_LABELS[permLevel], signature_format: 'rfc9421', }) } // ── Legacy X-RIC-* path (deprecated, kept for backward compat) ─────────── async function handleLegacy(body: Record, reply: any) { const { ric_id, timestamp, signature, message } = body as { ric_id?: string timestamp?: number signature?: string message?: string } if (!ric_id || !timestamp || !signature) { return reply.status(400).send({ error: 'Missing ric_id, timestamp, or signature' }) } const age = Date.now() - timestamp if (age > 5 * 60 * 1000) { return reply.status(401).send({ error: 'Request expired', code: 'EXPIRED' }) } const cert = botStore.findById(ric_id) if (!cert) { return reply.status(404).send({ error: 'Unknown RIC ID', grade: 'dangerous', permission_level: 0 }) } try { const pubKeyHex = cert.public_key.replace('ed25519:', '') const msgBytes = new TextEncoder().encode(`${ric_id}:${timestamp}:${message ?? ''}`) const sigBytes = Buffer.from(signature, 'hex') const isValid = await ed.verify(sigBytes, msgBytes, Buffer.from(pubKeyHex, 'hex')) if (!isValid) { return reply.status(401).send({ error: 'Invalid signature', code: 'SIG_MISMATCH', grade: 'dangerous', permission_level: 0 }) } } catch { return reply.status(400).send({ error: 'Signature verification failed' }) } const permLevel = getPermissionLevel(cert) return reply.send({ valid: true, id: cert.id, bot: { name: cert.bot.name, purpose: cert.bot.purpose }, developer: { name: cert.developer.name, org: cert.developer.org }, grade: cert.grade, permission_level: permLevel, permission_label: PERMISSION_LABELS[permLevel], signature_format: 'legacy', deprecation_notice: 'X-RIC-* headers are deprecated. Please migrate to RFC 9421 format. See https://github.com/Cosmofang/robot-id-card/blob/main/docs/spec-v2.md', }) } } FILE:packages/registry/src/routes/wellknown.ts import type { FastifyPluginAsync } from 'fastify' import { botStore } from '../store/botStore.js' /** * Well-known HTTP Message Signatures key directory — RFC 9421 / Web Bot Auth standard. * * Endpoints: * GET /.well-known/http-message-signatures-directory * Returns JWKS for ALL registered bots (healthy + unknown, not dangerous). * Content-Type: application/http-message-signatures-directory+json * * GET /.well-known/http-message-signatures-directory?kid=ric_abc_xyz * Returns JWKS for a single bot by its RIC ID. * * GET /v1/bots/:id/keys * Per-bot key endpoint — useful as the keyid URL in Signature-Input. * * Key format: JWK with OKP / Ed25519 (RFC 8037) * { * "kty": "OKP", * "crv": "Ed25519", * "x": "", * "kid": "ric_abc_xyz", * "use": "sig" * } */ function hexToBase64url(hex: string): string { const bytes = Buffer.from(hex, 'hex') return bytes.toString('base64url') } function certToJWK(cert: { id: string; public_key: string; bot: { name: string } }) { const pubKeyHex = cert.public_key.replace('ed25519:', '') return { kty: 'OKP', crv: 'Ed25519', x: hexToBase64url(pubKeyHex), kid: cert.id, use: 'sig', } } export const wellknownRoutes: FastifyPluginAsync = async (fastify) => { // Registry-level JWKS — all non-dangerous bots fastify.get('/.well-known/http-message-signatures-directory', async (request, reply) => { const { kid } = request.query as { kid?: string } reply.header('Content-Type', 'application/http-message-signatures-directory+json') reply.header('Cache-Control', 'public, max-age=300') if (kid) { const cert = botStore.findById(kid) if (!cert || cert.grade === 'dangerous') { return reply.status(404).send({ keys: [], error: 'Key not found or bot is dangerous' }) } return reply.send({ keys: [certToJWK(cert)] }) } const all = botStore.listSummary() const keys = all .filter((b) => b.grade !== 'dangerous') .map((b) => { const cert = botStore.findById(b.id) return cert ? certToJWK(cert) : null }) .filter(Boolean) return reply.send({ keys }) }) } // Per-bot key endpoint registered under /v1/bots prefix export const botKeyRoutes: FastifyPluginAsync = async (fastify) => { fastify.get('/:id/keys', async (request, reply) => { const { id } = request.params as { id: string } const cert = botStore.findById(id) if (!cert) { return reply.status(404).send({ error: 'Bot not found' }) } if (cert.grade === 'dangerous') { return reply.status(403).send({ error: 'Bot is flagged as dangerous — key directory unavailable' }) } reply.header('Content-Type', 'application/http-message-signatures-directory+json') reply.header('Cache-Control', 'public, max-age=300') return reply.send({ keys: [certToJWK(cert)] }) }) } FILE:packages/registry/src/store/auditStore.test.ts import { describe, it, expect, beforeEach } from 'vitest' import Database from 'better-sqlite3' import { nanoid } from 'nanoid' function createTestDb() { const db = new Database(':memory:') db.pragma('foreign_keys = ON') db.exec(` CREATE TABLE bots ( id TEXT PRIMARY KEY, ric_version TEXT NOT NULL DEFAULT '1.0', created_at TEXT NOT NULL, grade TEXT NOT NULL DEFAULT 'unknown', grade_updated_at TEXT NOT NULL, public_key TEXT NOT NULL, signature TEXT NOT NULL, dev_name TEXT NOT NULL, dev_email TEXT NOT NULL, dev_org TEXT, dev_website TEXT, dev_verified INTEGER NOT NULL DEFAULT 0, bot_name TEXT NOT NULL, bot_version TEXT NOT NULL, bot_purpose TEXT NOT NULL, bot_capabilities TEXT NOT NULL, bot_user_agent TEXT NOT NULL, last_claim_date TEXT, consecutive_days INTEGER NOT NULL DEFAULT 0, total_claims INTEGER NOT NULL DEFAULT 0 ); CREATE TABLE audit_log ( id TEXT PRIMARY KEY, ric_id TEXT NOT NULL, event TEXT NOT NULL, old_grade TEXT, new_grade TEXT, reason TEXT, reporter TEXT, description TEXT, timestamp TEXT NOT NULL, FOREIGN KEY (ric_id) REFERENCES bots(id) ); `) return db } function makeAuditStore(db: ReturnType) { const insert = db.prepare(` INSERT INTO audit_log (id, ric_id, event, old_grade, new_grade, reason, reporter, description, timestamp) VALUES (@id, @ric_id, @event, @old_grade, @new_grade, @reason, @reporter, @description, @timestamp) `) const findByRicId = db.prepare(`SELECT * FROM audit_log WHERE ric_id = ? ORDER BY timestamp DESC`) const countRecent = db.prepare(` SELECT COUNT(*) as cnt FROM audit_log WHERE ric_id = ? AND event = 'violation_report' AND timestamp > datetime('now', '-24 hours') `) return { insertBot(id: string) { db.prepare(`INSERT INTO bots (id, created_at, grade, grade_updated_at, public_key, signature, dev_name, dev_email, dev_org, dev_website, dev_verified, bot_name, bot_version, bot_purpose, bot_capabilities, bot_user_agent) VALUES (?, ?, 'unknown', ?, 'ed25519:aa', 'sig', 'Dev', 'dev@test.com', null, null, 0, 'Bot', '1.0.0', 'Testing purposes only', '[]', 'Bot/1.0')`) .run(id, new Date().toISOString(), new Date().toISOString()) }, append(entry: { ric_id: string; event: string; old_grade?: string; new_grade?: string; reason?: string; reporter?: string; description?: string }) { const now = new Date().toISOString() const id = nanoid() insert.run({ id, timestamp: now, old_grade: null, new_grade: null, reason: null, reporter: null, description: null, ...entry }) return { id, timestamp: now } }, findByRicId(id: string) { return findByRicId.all(id) as any[] }, countRecentReports(id: string) { return (countRecent.get(id) as { cnt: number }).cnt }, } } describe('auditStore — append and query', () => { let store: ReturnType beforeEach(() => { store = makeAuditStore(createTestDb()) store.insertBot('ric_audit_001') }) it('appends a registration event', () => { store.append({ ric_id: 'ric_audit_001', event: 'registered', reason: 'New bot' }) const events = store.findByRicId('ric_audit_001') expect(events).toHaveLength(1) expect(events[0].event).toBe('registered') }) it('appends multiple events and returns them all', () => { store.append({ ric_id: 'ric_audit_001', event: 'registered' }) store.append({ ric_id: 'ric_audit_001', event: 'identity_claimed', reason: 'Day 1' }) store.append({ ric_id: 'ric_audit_001', event: 'grade_changed', old_grade: 'unknown', new_grade: 'healthy' }) const events = store.findByRicId('ric_audit_001') expect(events).toHaveLength(3) }) it('findByRicId returns empty array for unknown bot', () => { const events = store.findByRicId('ric_does_not_exist') expect(events).toHaveLength(0) }) it('appends violation_report with reporter and description', () => { store.append({ ric_id: 'ric_audit_001', event: 'violation_report', reason: 'spam', reporter: 'example.com', description: 'Repeated spam posts', }) const events = store.findByRicId('ric_audit_001') expect(events[0].reporter).toBe('example.com') expect(events[0].description).toBe('Repeated spam posts') }) it('countRecentReports returns 0 with no reports', () => { expect(store.countRecentReports('ric_audit_001')).toBe(0) }) it('countRecentReports counts only violation_report events', () => { store.append({ ric_id: 'ric_audit_001', event: 'violation_report', reason: 'spam' }) store.append({ ric_id: 'ric_audit_001', event: 'violation_report', reason: 'scraping' }) store.append({ ric_id: 'ric_audit_001', event: 'grade_changed', old_grade: 'unknown', new_grade: 'dangerous' }) expect(store.countRecentReports('ric_audit_001')).toBe(2) }) it('append returns an id and timestamp', () => { const result = store.append({ ric_id: 'ric_audit_001', event: 'registered' }) expect(result.id).toBeTruthy() expect(result.timestamp).toMatch(/^\d{4}-\d{2}-\d{2}/) }) }) FILE:packages/registry/src/store/auditStore.ts import { db } from './db.js' import { nanoid } from 'nanoid' export interface AuditEntry { id: string ric_id: string event: string old_grade?: string new_grade?: string reason?: string reporter?: string description?: string timestamp: string } const stmts = { insert: db.prepare(` INSERT INTO audit_log (id, ric_id, event, old_grade, new_grade, reason, reporter, description, timestamp) VALUES (@id, @ric_id, @event, @old_grade, @new_grade, @reason, @reporter, @description, @timestamp) `), findByRicId: db.prepare(` SELECT * FROM audit_log WHERE ric_id = ? ORDER BY timestamp DESC `), } export const auditStore = { append(entry: Omit): AuditEntry { const full: AuditEntry = { id: `evt_${nanoid(12)}`, timestamp: new Date().toISOString(), ...entry, } stmts.insert.run({ id: full.id, ric_id: full.ric_id, event: full.event, old_grade: full.old_grade ?? null, new_grade: full.new_grade ?? null, reason: full.reason ?? null, reporter: full.reporter ?? null, description: full.description ?? null, timestamp: full.timestamp, }) return full }, findByRicId(ric_id: string): AuditEntry[] { return stmts.findByRicId.all(ric_id) as AuditEntry[] }, } FILE:packages/registry/src/store/botStore.test.ts import { describe, it, expect, beforeEach } from 'vitest' import Database from 'better-sqlite3' // ── Inline in-memory store for testing ───────────────────────────────────── // We replicate the store logic with a :memory: DB so tests are hermetic. function createTestDb() { const db = new Database(':memory:') db.pragma('journal_mode = WAL') db.pragma('foreign_keys = ON') db.exec(` CREATE TABLE IF NOT EXISTS bots ( id TEXT PRIMARY KEY, ric_version TEXT NOT NULL DEFAULT '1.0', created_at TEXT NOT NULL, grade TEXT NOT NULL DEFAULT 'unknown', grade_updated_at TEXT NOT NULL, public_key TEXT NOT NULL, signature TEXT NOT NULL, dev_name TEXT NOT NULL, dev_email TEXT NOT NULL, dev_org TEXT, dev_website TEXT, dev_verified INTEGER NOT NULL DEFAULT 0, bot_name TEXT NOT NULL, bot_version TEXT NOT NULL, bot_purpose TEXT NOT NULL, bot_capabilities TEXT NOT NULL, bot_user_agent TEXT NOT NULL, last_claim_date TEXT, consecutive_days INTEGER NOT NULL DEFAULT 0, total_claims INTEGER NOT NULL DEFAULT 0 ); CREATE TABLE IF NOT EXISTS audit_log ( id TEXT PRIMARY KEY, ric_id TEXT NOT NULL, event TEXT NOT NULL, old_grade TEXT, new_grade TEXT, reason TEXT, reporter TEXT, description TEXT, timestamp TEXT NOT NULL, FOREIGN KEY (ric_id) REFERENCES bots(id) ); CREATE TABLE IF NOT EXISTS claims ( id INTEGER PRIMARY KEY AUTOINCREMENT, ric_id TEXT NOT NULL, claim_date TEXT NOT NULL, claimed_at TEXT NOT NULL, consecutive_after INTEGER NOT NULL DEFAULT 0, FOREIGN KEY (ric_id) REFERENCES bots(id) ); `) return db } function makeStore(db: ReturnType) { const DAILY_CLAIM_LIMIT = 2 const CONSECUTIVE_UPGRADE_THRESHOLD = 3 const stmts = { insert: db.prepare(` INSERT INTO bots (id, created_at, grade, grade_updated_at, public_key, signature, dev_name, dev_email, dev_org, dev_website, dev_verified, bot_name, bot_version, bot_purpose, bot_capabilities, bot_user_agent) VALUES (@id, @created_at, @grade, @grade_updated_at, @public_key, @signature, @dev_name, @dev_email, @dev_org, @dev_website, @dev_verified, @bot_name, @bot_version, @bot_purpose, @bot_capabilities, @bot_user_agent) `), findById: db.prepare(`SELECT * FROM bots WHERE id = ?`), findByPublicKey: db.prepare(`SELECT id FROM bots WHERE public_key = ?`), findByEmailAndBotName: db.prepare(`SELECT id FROM bots WHERE dev_email = ? AND bot_name = ?`), updateGrade: db.prepare(`UPDATE bots SET grade = @grade, grade_updated_at = @grade_updated_at WHERE id = @id`), countTodayClaims: db.prepare(`SELECT COUNT(*) as cnt FROM claims WHERE ric_id = ? AND claim_date = ?`), insertClaim: db.prepare(`INSERT INTO claims (ric_id, claim_date, claimed_at, consecutive_after) VALUES (@ric_id, @claim_date, @claimed_at, @consecutive_after)`), getClaimMeta: db.prepare(`SELECT last_claim_date, consecutive_days, total_claims FROM bots WHERE id = ?`), updateClaimMeta: db.prepare(`UPDATE bots SET last_claim_date = @last_claim_date, consecutive_days = @consecutive_days, total_claims = total_claims + 1 WHERE id = @id`), countRecentReports: db.prepare(`SELECT COUNT(*) as cnt FROM audit_log WHERE ric_id = ? AND event = 'violation_report' AND timestamp > datetime('now', '-24 hours')`), listSummary: db.prepare(`SELECT id, bot_name, bot_purpose, grade, dev_name, dev_org, created_at FROM bots ORDER BY created_at DESC`), } return { insertBot(id: string, pubKey: string, grade = 'unknown') { stmts.insert.run({ id, created_at: new Date().toISOString(), grade, grade_updated_at: new Date().toISOString(), public_key: pubKey, signature: 'sig', dev_name: 'Test Dev', dev_email: 'dev@test.com', dev_org: null, dev_website: null, dev_verified: 0, bot_name: `Bot-${id}`, bot_version: '1.0.0', bot_purpose: 'Testing purposes only', bot_capabilities: JSON.stringify(['read_articles']), bot_user_agent: 'TestBot/1.0', }) }, findByPublicKey(pk: string) { const row = stmts.findByPublicKey.get(pk) as { id: string } | undefined return row?.id ?? null }, findByEmailAndBotName(email: string, name: string) { const row = stmts.findByEmailAndBotName.get(email, name) as { id: string } | undefined return row?.id ?? null }, findById(id: string) { return stmts.findById.get(id) as any | null }, updateGrade(id: string, grade: string) { stmts.updateGrade.run({ id, grade, grade_updated_at: new Date().toISOString() }) }, recordClaim(id: string, overrideToday?: string) { const meta = stmts.getClaimMeta.get(id) as any if (!meta) return { ok: false, error: 'NOT_FOUND' } const today = overrideToday ?? new Date().toISOString().slice(0, 10) const todayCount = (stmts.countTodayClaims.get(id, today) as { cnt: number }).cnt if (todayCount >= DAILY_CLAIM_LIMIT) { return { ok: false, error: 'DAILY_LIMIT_REACHED', today_count: todayCount } } const baseDate = overrideToday ? new Date(overrideToday).getTime() : Date.now() const yesterday = new Date(baseDate - 86_400_000).toISOString().slice(0, 10) let newConsecutive: number if (meta.last_claim_date === today) { newConsecutive = meta.consecutive_days } else if (meta.last_claim_date === yesterday) { newConsecutive = meta.consecutive_days + 1 } else { newConsecutive = 1 } const now = new Date().toISOString() stmts.insertClaim.run({ ric_id: id, claim_date: today, claimed_at: now, consecutive_after: newConsecutive }) stmts.updateClaimMeta.run({ id, last_claim_date: today, consecutive_days: newConsecutive }) let gradeUpgraded = false let newGrade: string | undefined if (newConsecutive >= CONSECUTIVE_UPGRADE_THRESHOLD) { const cert = stmts.findById.get(id) as any if (cert?.grade === 'unknown') { stmts.updateGrade.run({ id, grade: 'healthy', grade_updated_at: now }) gradeUpgraded = true newGrade = 'healthy' } } return { ok: true, today_count: todayCount + 1, consecutive_days: newConsecutive, grade_upgraded: gradeUpgraded, new_grade: newGrade } }, countRecentReports(id: string) { return (stmts.countRecentReports.get(id) as { cnt: number }).cnt }, } } // ── Tests ──────────────────────────────────────────────────────────────────── describe('botStore — uniqueness checks', () => { let store: ReturnType beforeEach(() => { store = makeStore(createTestDb()) }) it('findByPublicKey returns null when no bot registered', () => { expect(store.findByPublicKey('ed25519:aabbccdd')).toBeNull() }) it('findByPublicKey finds a registered bot', () => { store.insertBot('ric_test_001', 'ed25519:aabbccdd') expect(store.findByPublicKey('ed25519:aabbccdd')).toBe('ric_test_001') }) it('findByEmailAndBotName returns null when no match', () => { expect(store.findByEmailAndBotName('dev@test.com', 'Bot-ric_test_001')).toBeNull() }) it('findByEmailAndBotName finds after insert', () => { store.insertBot('ric_test_002', 'ed25519:deadbeef') expect(store.findByEmailAndBotName('dev@test.com', 'Bot-ric_test_002')).toBe('ric_test_002') }) }) describe('botStore — recordClaim: daily limits', () => { let store: ReturnType beforeEach(() => { store = makeStore(createTestDb()) store.insertBot('ric_bot_1', 'ed25519:11111111') }) it('first claim succeeds', () => { const result = store.recordClaim('ric_bot_1') expect(result.ok).toBe(true) expect(result.today_count).toBe(1) }) it('second claim on same day succeeds', () => { store.recordClaim('ric_bot_1') const result = store.recordClaim('ric_bot_1') expect(result.ok).toBe(true) expect(result.today_count).toBe(2) }) it('third claim on same day is rejected with DAILY_LIMIT_REACHED', () => { store.recordClaim('ric_bot_1') store.recordClaim('ric_bot_1') const result = store.recordClaim('ric_bot_1') expect(result.ok).toBe(false) expect(result.error).toBe('DAILY_LIMIT_REACHED') expect(result.today_count).toBe(2) }) it('returns NOT_FOUND for unknown bot', () => { const result = store.recordClaim('ric_does_not_exist') expect(result.ok).toBe(false) expect(result.error).toBe('NOT_FOUND') }) }) describe('botStore — recordClaim: streak and grade upgrade', () => { let store: ReturnType beforeEach(() => { store = makeStore(createTestDb()) store.insertBot('ric_streak', 'ed25519:22222222', 'unknown') }) it('first ever claim sets consecutive_days to 1', () => { const result = store.recordClaim('ric_streak') expect(result.consecutive_days).toBe(1) }) it('does NOT upgrade grade after 1 day', () => { const result = store.recordClaim('ric_streak') expect(result.grade_upgraded).toBe(false) }) it('upgrades grade unknown→healthy after 3 consecutive days', () => { const today = new Date() // day 1 const d1 = new Date(today); d1.setDate(today.getDate() - 2) store.recordClaim('ric_streak', d1.toISOString().slice(0, 10)) // day 2 const d2 = new Date(today); d2.setDate(today.getDate() - 1) store.recordClaim('ric_streak', d2.toISOString().slice(0, 10)) // day 3 (today) const result = store.recordClaim('ric_streak', today.toISOString().slice(0, 10)) expect(result.ok).toBe(true) expect(result.consecutive_days).toBe(3) expect(result.grade_upgraded).toBe(true) expect(result.new_grade).toBe('healthy') }) it('does NOT re-upgrade a healthy bot', () => { store.updateGrade('ric_streak', 'healthy') // fast-forward 3 days const today = new Date() const d1 = new Date(today); d1.setDate(today.getDate() - 2) store.recordClaim('ric_streak', d1.toISOString().slice(0, 10)) const d2 = new Date(today); d2.setDate(today.getDate() - 1) store.recordClaim('ric_streak', d2.toISOString().slice(0, 10)) const result = store.recordClaim('ric_streak', today.toISOString().slice(0, 10)) expect(result.grade_upgraded).toBe(false) }) it('resets streak on gap day', () => { const d1 = new Date(); d1.setDate(d1.getDate() - 5) // 5 days ago store.recordClaim('ric_streak', d1.toISOString().slice(0, 10)) // skip 4 days, claim today const result = store.recordClaim('ric_streak', new Date().toISOString().slice(0, 10)) expect(result.consecutive_days).toBe(1) }) }) describe('botStore — updateGrade', () => { let store: ReturnType beforeEach(() => { store = makeStore(createTestDb()) store.insertBot('ric_grade', 'ed25519:33333333', 'unknown') }) it('updates grade to dangerous', () => { store.updateGrade('ric_grade', 'dangerous') const bot = store.findById('ric_grade') expect(bot.grade).toBe('dangerous') }) it('updates grade back to healthy', () => { store.updateGrade('ric_grade', 'dangerous') store.updateGrade('ric_grade', 'healthy') const bot = store.findById('ric_grade') expect(bot.grade).toBe('healthy') }) }) FILE:packages/registry/src/store/botStore.ts import { db } from './db.js' import type { RICCertificate } from '../models/certificate.js' // ── Row ↔ Certificate conversion ───────────────────────── function rowToCert(row: any): RICCertificate { return { ric_version: '1.0', id: row.id, created_at: row.created_at, grade: row.grade, grade_updated_at: row.grade_updated_at, public_key: row.public_key, signature: row.signature, developer: { name: row.dev_name, email: row.dev_email, org: row.dev_org ?? undefined, website: row.dev_website ?? undefined, verified: row.dev_verified === 1, }, bot: { name: row.bot_name, version: row.bot_version, purpose: row.bot_purpose, capabilities: JSON.parse(row.bot_capabilities), user_agent: row.bot_user_agent, }, } } const DAILY_CLAIM_LIMIT = 2 const CONSECUTIVE_UPGRADE_THRESHOLD = 3 const stmts = { insert: db.prepare(` INSERT INTO bots ( id, created_at, grade, grade_updated_at, public_key, signature, dev_name, dev_email, dev_org, dev_website, dev_verified, bot_name, bot_version, bot_purpose, bot_capabilities, bot_user_agent ) VALUES ( @id, @created_at, @grade, @grade_updated_at, @public_key, @signature, @dev_name, @dev_email, @dev_org, @dev_website, @dev_verified, @bot_name, @bot_version, @bot_purpose, @bot_capabilities, @bot_user_agent ) `), findById: db.prepare(`SELECT * FROM bots WHERE id = ?`), findByPublicKey: db.prepare(`SELECT id FROM bots WHERE public_key = ?`), findByEmailAndBotName: db.prepare(` SELECT id FROM bots WHERE dev_email = ? AND bot_name = ? `), listSummary: db.prepare(` SELECT id, bot_name, bot_purpose, grade, dev_name, dev_org, created_at FROM bots ORDER BY created_at DESC `), updateGrade: db.prepare(` UPDATE bots SET grade = @grade, grade_updated_at = @grade_updated_at WHERE id = @id `), countRecentReports: db.prepare(` SELECT COUNT(*) as cnt FROM audit_log WHERE ric_id = ? AND event = 'violation_report' AND timestamp > datetime('now', '-24 hours') `), // RFC 9421 nonce statements insertNonce: db.prepare(` INSERT OR IGNORE INTO used_nonces (nonce, ric_id, used_at) VALUES (?, ?, ?) `), nonceExists: db.prepare(`SELECT 1 FROM used_nonces WHERE nonce = ?`), sweepNonces: db.prepare(`DELETE FROM used_nonces WHERE used_at < ?`), // Claim statements countTodayClaims: db.prepare(` SELECT COUNT(*) as cnt FROM claims WHERE ric_id = ? AND claim_date = ? `), insertClaim: db.prepare(` INSERT INTO claims (ric_id, claim_date, claimed_at, consecutive_after) VALUES (@ric_id, @claim_date, @claimed_at, @consecutive_after) `), getClaimMeta: db.prepare(` SELECT last_claim_date, consecutive_days, total_claims FROM bots WHERE id = ? `), updateClaimMeta: db.prepare(` UPDATE bots SET last_claim_date = @last_claim_date, consecutive_days = @consecutive_days, total_claims = total_claims + 1 WHERE id = @id `), } export const botStore = { findByPublicKey(publicKey: string): string | null { const row = stmts.findByPublicKey.get(publicKey) as { id: string } | undefined return row?.id ?? null }, findByEmailAndBotName(email: string, botName: string): string | null { const row = stmts.findByEmailAndBotName.get(email, botName) as { id: string } | undefined return row?.id ?? null }, insert(cert: RICCertificate): void { stmts.insert.run({ id: cert.id, created_at: cert.created_at, grade: cert.grade, grade_updated_at: cert.grade_updated_at, public_key: cert.public_key, signature: cert.signature, dev_name: cert.developer.name, dev_email: cert.developer.email, dev_org: cert.developer.org ?? null, dev_website: cert.developer.website ?? null, dev_verified: cert.developer.verified ? 1 : 0, bot_name: cert.bot.name, bot_version: cert.bot.version, bot_purpose: cert.bot.purpose, bot_capabilities: JSON.stringify(cert.bot.capabilities), bot_user_agent: cert.bot.user_agent, }) }, findById(id: string): RICCertificate | null { const row = stmts.findById.get(id) return row ? rowToCert(row) : null }, listSummary() { return (stmts.listSummary.all() as any[]).map((row) => ({ id: row.id, name: row.bot_name, purpose: row.bot_purpose, grade: row.grade, developer_org: row.dev_org || row.dev_name, created_at: row.created_at, })) }, updateGrade(id: string, grade: string): void { stmts.updateGrade.run({ id, grade, grade_updated_at: new Date().toISOString() }) }, countRecentReports(id: string): number { const row = stmts.countRecentReports.get(id) as { cnt: number } return row.cnt }, /** * RFC 9421 nonce uniqueness check. * Returns true if the nonce is fresh (never seen). * Marks it as used and sweeps nonces older than 10 minutes. */ checkAndMarkNonce(nonce: string, ricId: string, createdSec: number): boolean { const existing = stmts.nonceExists.get(nonce) if (existing) return false stmts.insertNonce.run(nonce, ricId, createdSec) // Sweep nonces older than 10 minutes stmts.sweepNonces.run(createdSec - 600) return true }, /** * Attempt a daily claim for a bot. * * Rules: * - Max DAILY_CLAIM_LIMIT (2) claims per calendar day * - Tracks consecutive daily streak * - After CONSECUTIVE_UPGRADE_THRESHOLD (3) consecutive days → grade unknown→healthy * * Returns the result of the claim or an error code. */ recordClaim(id: string): { ok: boolean error?: 'DAILY_LIMIT_REACHED' | 'NOT_FOUND' today_count?: number consecutive_days?: number grade_upgraded?: boolean new_grade?: string } { const meta = stmts.getClaimMeta.get(id) as { last_claim_date: string | null consecutive_days: number total_claims: number } | undefined if (!meta) return { ok: false, error: 'NOT_FOUND' } const today = new Date().toISOString().slice(0, 10) // Check daily limit const todayCount = (stmts.countTodayClaims.get(id, today) as { cnt: number }).cnt if (todayCount >= DAILY_CLAIM_LIMIT) { return { ok: false, error: 'DAILY_LIMIT_REACHED', today_count: todayCount } } // Compute new consecutive streak const yesterday = new Date(Date.now() - 86_400_000).toISOString().slice(0, 10) let newConsecutive: number if (meta.last_claim_date === today) { // Second claim on same day — streak unchanged newConsecutive = meta.consecutive_days } else if (meta.last_claim_date === yesterday) { // Claimed yesterday → extend streak newConsecutive = meta.consecutive_days + 1 } else { // Gap or first ever claim → reset streak to 1 newConsecutive = 1 } const now = new Date().toISOString() // Persist claim record stmts.insertClaim.run({ ric_id: id, claim_date: today, claimed_at: now, consecutive_after: newConsecutive, }) // Update bot meta (only update last_claim_date if this is first claim today) stmts.updateClaimMeta.run({ id, last_claim_date: today, consecutive_days: newConsecutive, }) // Grade upgrade: unknown → healthy after N consecutive days let gradeUpgraded = false let newGrade: string | undefined if (newConsecutive >= CONSECUTIVE_UPGRADE_THRESHOLD) { const cert = stmts.findById.get(id) as any if (cert && cert.grade === 'unknown') { stmts.updateGrade.run({ id, grade: 'healthy', grade_updated_at: now }) gradeUpgraded = true newGrade = 'healthy' } } return { ok: true, today_count: todayCount + 1, consecutive_days: newConsecutive, grade_upgraded: gradeUpgraded, new_grade: newGrade, } }, } FILE:packages/registry/src/store/db.ts import Database, { type Database as DatabaseType } from 'better-sqlite3' import path from 'path' import { fileURLToPath } from 'url' import { mkdirSync } from 'fs' const __dirname = path.dirname(fileURLToPath(import.meta.url)) const DB_PATH = process.env.RIC_DB_PATH || path.join(__dirname, '../../data/registry.db') mkdirSync(path.dirname(DB_PATH), { recursive: true }) export const db: DatabaseType = new Database(DB_PATH) // Enable WAL mode for better concurrent read performance db.pragma('journal_mode = WAL') db.pragma('foreign_keys = ON') // ── Schema ──────────────────────────────────────────────── db.exec(` CREATE TABLE IF NOT EXISTS bots ( id TEXT PRIMARY KEY, ric_version TEXT NOT NULL DEFAULT '1.0', created_at TEXT NOT NULL, grade TEXT NOT NULL DEFAULT 'unknown', grade_updated_at TEXT NOT NULL, public_key TEXT NOT NULL, signature TEXT NOT NULL, -- Developer fields dev_name TEXT NOT NULL, dev_email TEXT NOT NULL, dev_org TEXT, dev_website TEXT, dev_verified INTEGER NOT NULL DEFAULT 0, -- Bot fields bot_name TEXT NOT NULL, bot_version TEXT NOT NULL, bot_purpose TEXT NOT NULL, bot_capabilities TEXT NOT NULL, -- JSON array bot_user_agent TEXT NOT NULL, -- Claim tracking last_claim_date TEXT, -- ISO date of most recent claim (YYYY-MM-DD) consecutive_days INTEGER NOT NULL DEFAULT 0, -- streak of consecutive daily claims total_claims INTEGER NOT NULL DEFAULT 0 ); CREATE TABLE IF NOT EXISTS audit_log ( id TEXT PRIMARY KEY, ric_id TEXT NOT NULL, event TEXT NOT NULL, old_grade TEXT, new_grade TEXT, reason TEXT, reporter TEXT, description TEXT, timestamp TEXT NOT NULL, FOREIGN KEY (ric_id) REFERENCES bots(id) ); -- One row per claim attempt, for daily-limit checks and history CREATE TABLE IF NOT EXISTS claims ( id INTEGER PRIMARY KEY AUTOINCREMENT, ric_id TEXT NOT NULL, claim_date TEXT NOT NULL, -- YYYY-MM-DD claimed_at TEXT NOT NULL, -- ISO timestamp consecutive_after INTEGER NOT NULL DEFAULT 0, FOREIGN KEY (ric_id) REFERENCES bots(id) ); -- RFC 9421 nonce tracking — prevents replay attacks -- Nonces expire after 10 minutes; a background sweep cleans up old rows CREATE TABLE IF NOT EXISTS used_nonces ( nonce TEXT PRIMARY KEY, ric_id TEXT NOT NULL, used_at INTEGER NOT NULL -- Unix seconds ); CREATE INDEX IF NOT EXISTS idx_nonces_used_at ON used_nonces(used_at); `) export default db FILE:packages/registry/tsconfig.json { "compilerOptions": { "target": "ES2022", "module": "NodeNext", "moduleResolution": "NodeNext", "outDir": "./dist", "rootDir": "./src", "strict": true, "esModuleInterop": true, "skipLibCheck": true, "declaration": true, "declarationMap": true, "sourceMap": true }, "include": ["src/**/*"], "exclude": ["node_modules", "dist"] } FILE:packages/sdk/README.md # @robot-id-card/sdk > Website SDK for verifying Robot ID Card bot identities in Express and Fastify apps. ## Install ```bash npm install @robot-id-card/sdk ``` ## Quick Start ### Express ```typescript import express from 'express' import { ricMiddleware } from '@robot-id-card/sdk/middleware/express' const app = express() // Block unknown/dangerous bots on protected routes app.use('/api/write', ricMiddleware({ minGrade: 'healthy' })) // Only allow healthy bots with post_content capability app.use('/api/posts', ricMiddleware({ minGrade: 'healthy', requiredPermissionLevel: 4, })) ``` ### Fastify ```typescript import Fastify from 'fastify' import { ricPlugin } from '@robot-id-card/sdk/middleware/fastify' const server = Fastify() await server.register(ricPlugin, { minGrade: 'healthy' }) ``` ### Manual verification ```typescript import { getRICHeaders, verifyRICRequest } from '@robot-id-card/sdk' // In your request handler: const headers = getRICHeaders(req) const result = await verifyRICRequest(headers, { registryUrl: 'https://registry.robotidcard.dev', cacheTtl: 300, // seconds }) if (!result?.valid) { // Bot not verified } console.log(result.grade) // 'healthy' | 'unknown' | 'dangerous' console.log(result.permission_level) // 0–5 ``` ## HTTP Headers (set by the bot) | Header | Description | |--------|-------------| | `X-RIC-ID` | Bot's RIC identifier (`ric_...`) | | `X-RIC-Timestamp` | Unix timestamp in ms (replay protection) | | `X-RIC-Signature` | Ed25519 signature over `${ric_id}:${timestamp}:${message}` | ## Grade Levels | Grade | Meaning | Permission Level | |-------|---------|-----------------| | `dangerous` | Reported / flagged | 0 — blocked | | `unknown` | Registered, not yet trusted | 1 — read only | | `healthy` | 3+ consecutive daily claims | 1–5 based on capabilities | FILE:packages/sdk/package.json { "name": "@robot-id-card/sdk", "version": "0.2.0", "description": "Website SDK for verifying Robot ID Card bot identities", "type": "module", "main": "dist/index.js", "types": "dist/index.d.ts", "exports": { ".": { "import": "./dist/index.js", "types": "./dist/index.d.ts" } }, "files": [ "dist", "README.md" ], "scripts": { "build": "tsc", "test": "node ../../node_modules/vitest/vitest.mjs run src", "prepublishOnly": "npm run build" }, "dependencies": { "@noble/ed25519": "^2.1.0" }, "devDependencies": { "typescript": "^5.4.0", "vitest": "^1.6.1" }, "peerDependencies": { "fastify": ">=4" }, "peerDependenciesMeta": { "fastify": { "optional": true } }, "publishConfig": { "access": "public" } } FILE:packages/sdk/src/__tests__/verify.test.ts import { describe, it, expect } from 'vitest' import { getRICHeaders, meetsGradeRequirement } from '../verify.js' describe('getRICHeaders', () => { it('extracts RIC headers from request', () => { const req = { headers: { 'x-ric-id': 'ric_abc123', 'x-ric-timestamp': '1700000000', 'x-ric-signature': 'sig_xyz', }, } const result = getRICHeaders(req) expect(result.ricId).toBe('ric_abc123') expect(result.timestamp).toBe('1700000000') expect(result.signature).toBe('sig_xyz') }) it('returns undefined for missing headers', () => { const req = { headers: {} } const result = getRICHeaders(req) expect(result.ricId).toBeUndefined() expect(result.timestamp).toBeUndefined() expect(result.signature).toBeUndefined() }) }) describe('meetsGradeRequirement', () => { it('healthy meets all requirements', () => { expect(meetsGradeRequirement('healthy', 'dangerous')).toBe(true) expect(meetsGradeRequirement('healthy', 'unknown')).toBe(true) expect(meetsGradeRequirement('healthy', 'healthy')).toBe(true) }) it('unknown meets dangerous and unknown requirements', () => { expect(meetsGradeRequirement('unknown', 'dangerous')).toBe(true) expect(meetsGradeRequirement('unknown', 'unknown')).toBe(true) expect(meetsGradeRequirement('unknown', 'healthy')).toBe(false) }) it('dangerous only meets dangerous requirement', () => { expect(meetsGradeRequirement('dangerous', 'dangerous')).toBe(true) expect(meetsGradeRequirement('dangerous', 'unknown')).toBe(false) expect(meetsGradeRequirement('dangerous', 'healthy')).toBe(false) }) it('unknown grade defaults to rank 0', () => { expect(meetsGradeRequirement('nonexistent', 'dangerous')).toBe(true) expect(meetsGradeRequirement('nonexistent', 'unknown')).toBe(false) }) }) FILE:packages/sdk/src/index.ts /** * @robot-id-card/sdk * * Drop-in middleware for websites to verify bot identity and enforce permission levels. * Compatible with Express, Fastify, Next.js, Koa, and vanilla Node.js. */ export { RICMiddleware } from './middleware/express.js' export { RICFastifyPlugin } from './middleware/fastify.js' export { verifyRICRequest, getRICHeaders } from './verify.js' export type { RICVerifyResult, RICPermissionRule, RICMiddlewareOptions } from './types.js' FILE:packages/sdk/src/middleware/express.ts /** * Express.js middleware for RIC verification * * @example * import { RICMiddleware } from '@robot-id-card/sdk' * * app.use(RICMiddleware({ * permissions: { * '/api/posts': { minGrade: 'unknown', level: 1 }, * '/api/comment': { minGrade: 'healthy', level: 4 }, * } * })) */ import { getRICHeaders, verifyRICRequest, meetsGradeRequirement } from '../verify.js' import type { RICMiddlewareOptions } from '../types.js' export function RICMiddleware(options: RICMiddlewareOptions = {}) { return async function ricMiddleware(req: any, res: any, next: () => void) { const headers = getRICHeaders(req) // No RIC headers at all — not a bot, pass through const hasRFC9421 = !!(headers.signatureInput && headers.signature) const hasLegacy = !!headers.ricId if (!hasRFC9421 && !hasLegacy) return next() const result = await verifyRICRequest(headers, { registryUrl: options.registryUrl, cacheTtl: options.cacheTtl, // RFC 9421: pass request context so registry can reconstruct signature base authority: req.hostname || req.headers?.host?.split(':')[0], method: req.method, path: req.path, }) if (!result) return next() // Attach RIC info to request for downstream use req.ric = result options.onBotDetected?.(result, req) // Check permission rules for this route const rule = options.permissions?.[req.path] || options.permissions?.[req.route?.path] || options.defaultRule if (rule) { if (!result.valid) { return res.status(401).json({ error: 'Invalid RIC certificate', code: 'RIC_INVALID', }) } if (!meetsGradeRequirement(result.grade, rule.minGrade)) { return res.status(403).json({ error: `Bot grade '${result.grade}' does not meet minimum required grade '${rule.minGrade}'`, code: 'RIC_GRADE_INSUFFICIENT', your_grade: result.grade, required_grade: rule.minGrade, upgrade_info: 'https://robotidcard.dev/upgrade', }) } if (result.permission_level < rule.level) { return res.status(403).json({ error: `Permission level ${result.permission_level} insufficient for this action (requires ${rule.level})`, code: 'RIC_PERMISSION_DENIED', your_level: result.permission_level, required_level: rule.level, }) } } next() } } FILE:packages/sdk/src/middleware/fastify.ts import type { FastifyPluginAsync } from 'fastify' import { getRICHeaders, verifyRICRequest, meetsGradeRequirement } from '../verify.js' import type { RICMiddlewareOptions } from '../types.js' export const RICFastifyPlugin: FastifyPluginAsync = async ( fastify, options ) => { fastify.addHook('preHandler', async (request, reply) => { const headers = getRICHeaders(request as any) if (!headers.ricId) return const result = await verifyRICRequest(headers, { registryUrl: options.registryUrl, cacheTtl: options.cacheTtl, }) if (!result) return ;(request as any).ric = result options.onBotDetected?.(result, request) const rule = options.permissions?.[request.url] || options.defaultRule if (!rule) return if (!result.valid) { return reply.status(401).send({ error: 'Invalid RIC certificate', code: 'RIC_INVALID' }) } if (!meetsGradeRequirement(result.grade, rule.minGrade)) { return reply.status(403).send({ error: `Grade '${result.grade}' insufficient`, required: rule.minGrade, code: 'RIC_GRADE_INSUFFICIENT', }) } if (result.permission_level < rule.level) { return reply.status(403).send({ error: 'Permission denied', code: 'RIC_PERMISSION_DENIED', your_level: result.permission_level, required_level: rule.level, }) } }) } FILE:packages/sdk/src/types.ts export type Grade = 'healthy' | 'unknown' | 'dangerous' export interface RICVerifyResult { valid: boolean id: string bot: { name: string; purpose: string } developer: { name: string; org?: string } grade: Grade permission_level: number // 0-5 permission_label: string error?: string } export interface RICPermissionRule { minGrade: Grade level: number /** Minimum age of bot registration in days before granting this level */ minAgeDays?: number } export interface RICMiddlewareOptions { /** Registry API endpoint. Defaults to official registry. */ registryUrl?: string /** Per-route permission rules */ permissions?: Record /** Default rule when no specific route matches */ defaultRule?: RICPermissionRule /** Called when a bot is detected (valid or not) */ onBotDetected?: (result: RICVerifyResult, req: any) => void /** Cache TTL in seconds for certificate lookups. Default: 300 */ cacheTtl?: number } FILE:packages/sdk/src/verify.test.ts import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest' import { verifyRICRequest, getRICHeaders, meetsGradeRequirement } from './verify.js' // ── Helpers ─────────────────────────────────────────────────────────────────── function makeHeaders(overrides: Record = {}) { return { headers: { 'x-ric-id': 'ric_aabb1122_xyz12345', 'x-ric-timestamp': String(Date.now()), 'x-ric-signature': 'deadbeef1234', ...overrides, } as Record, } } const mockVerifyResult = { valid: true, id: 'ric_aabb1122_xyz12345', bot: { name: 'TestBot', purpose: 'Automated testing' }, developer: { name: 'Test Dev', org: undefined }, grade: 'healthy', permission_level: 3, permission_label: 'Like / react', } // ── getRICHeaders ───────────────────────────────────────────────────────────── describe('getRICHeaders', () => { it('extracts all three RIC headers', () => { const req = makeHeaders() const headers = getRICHeaders(req) expect(headers.ricId).toBe('ric_aabb1122_xyz12345') expect(headers.timestamp).toBeDefined() expect(headers.signature).toBe('deadbeef1234') }) it('returns undefined for missing headers', () => { const req = { headers: {} as Record } const headers = getRICHeaders(req) expect(headers.ricId).toBeUndefined() expect(headers.timestamp).toBeUndefined() expect(headers.signature).toBeUndefined() }) }) // ── verifyRICRequest ────────────────────────────────────────────────────────── describe('verifyRICRequest', () => { beforeEach(() => { vi.stubGlobal('fetch', vi.fn()) }) afterEach(() => { vi.unstubAllGlobals() // Clear module-level cache between tests // (cache is keyed by ricId:timestamp — using unique timestamps prevents stale cache hits) }) it('returns null when all headers missing', async () => { const result = await verifyRICRequest({}) expect(result).toBeNull() expect(fetch).not.toHaveBeenCalled() }) it('returns null when any header is missing', async () => { const result = await verifyRICRequest({ ricId: 'ric_test', timestamp: String(Date.now()) }) expect(result).toBeNull() }) it('calls registry /v1/verify with correct payload', async () => { const ts = String(Date.now()) vi.mocked(fetch).mockResolvedValueOnce({ json: async () => mockVerifyResult, } as Response) await verifyRICRequest( { ricId: 'ric_aabb1122_abc', timestamp: ts, signature: 'sig123' }, { registryUrl: 'http://localhost:3000' } ) expect(fetch).toHaveBeenCalledWith( 'http://localhost:3000/v1/verify', expect.objectContaining({ method: 'POST', body: expect.stringContaining('"ric_id":"ric_aabb1122_abc"'), }) ) }) it('returns registry response on success', async () => { const ts = String(Date.now() + 1) vi.mocked(fetch).mockResolvedValueOnce({ json: async () => mockVerifyResult, } as Response) const result = await verifyRICRequest( { ricId: 'ric_aabb1122_def', timestamp: ts, signature: 'sig456' }, { registryUrl: 'http://localhost:3000' } ) expect(result).toMatchObject({ valid: true, grade: 'healthy' }) }) it('returns null when fetch throws (registry unreachable)', async () => { vi.mocked(fetch).mockRejectedValueOnce(new Error('connection refused')) const result = await verifyRICRequest( { ricId: 'ric_aabb1122_ghi', timestamp: String(Date.now() + 2), signature: 'sig789' }, { registryUrl: 'http://localhost:3000' } ) expect(result).toBeNull() }) }) // ── meetsGradeRequirement ───────────────────────────────────────────────────── describe('meetsGradeRequirement', () => { it('healthy meets healthy requirement', () => { expect(meetsGradeRequirement('healthy', 'healthy')).toBe(true) }) it('healthy meets unknown requirement', () => { expect(meetsGradeRequirement('healthy', 'unknown')).toBe(true) }) it('unknown does NOT meet healthy requirement', () => { expect(meetsGradeRequirement('unknown', 'healthy')).toBe(false) }) it('dangerous does NOT meet unknown requirement', () => { expect(meetsGradeRequirement('dangerous', 'unknown')).toBe(false) }) it('dangerous meets dangerous requirement', () => { expect(meetsGradeRequirement('dangerous', 'dangerous')).toBe(true) }) it('unknown meets unknown requirement', () => { expect(meetsGradeRequirement('unknown', 'unknown')).toBe(true) }) it('healthy meets dangerous requirement (all healthy bots clear the bar)', () => { expect(meetsGradeRequirement('healthy', 'dangerous')).toBe(true) }) }) FILE:packages/sdk/src/verify.ts import type { RICVerifyResult } from './types.js' const DEFAULT_REGISTRY = 'https://registry.robotidcard.dev' const cache = new Map() // ── Header extraction ──────────────────────────────────────────────────────── export interface RICHeaders { // RFC 9421 (preferred) signatureInput?: string // Signature-Input header value signature?: string // Signature header value signatureAgent?: string // Signature-Agent header value // Derived from RFC 9421 for cache key and quick access keyid?: string // Legacy X-RIC-* (deprecated) ricId?: string timestamp?: string legacySignature?: string } /** * Extract RIC identity headers from an incoming request. * Supports both RFC 9421 (Signature/Signature-Input) and legacy (X-RIC-*). */ export function getRICHeaders(req: { headers: Record }): RICHeaders { const h = req.headers const signatureInput = h['signature-input'] as string | undefined const signature = h['signature'] as string | undefined const signatureAgent = h['signature-agent'] as string | undefined let keyid: string | undefined if (signatureInput) { // Extract keyid from Signature-Input: ric=(...);keyid="ric_abc_xyz";... keyid = signatureInput.match(/keyid="([^"]+)"/)?.[1] } return { signatureInput, signature, signatureAgent, keyid, // Legacy fallback ricId: h['x-ric-id'] as string | undefined, timestamp: h['x-ric-timestamp'] as string | undefined, legacySignature: h['x-ric-signature'] as string | undefined, } } // ── Verification ───────────────────────────────────────────────────────────── /** * Verify an incoming bot request by calling the RIC registry. * * For RFC 9421 requests, pass the `authority`, `method`, and `path` from * the original request so the registry can reconstruct the signature base. * * Results are cached by keyid+created for `cacheTtl` seconds (default 300). */ export async function verifyRICRequest( headers: RICHeaders, options: { registryUrl?: string cacheTtl?: number authority?: string method?: string path?: string } = {} ): Promise { const registryUrl = options.registryUrl || DEFAULT_REGISTRY const cacheTtl = (options.cacheTtl ?? 300) * 1000 // ── RFC 9421 path ────────────────────────────────────────────────────────── if (headers.signatureInput && headers.signature) { const cacheKey = `rfc9421:${headers.keyid}:${headers.signatureInput}` const cached = cache.get(cacheKey) if (cached && cached.expiresAt > Date.now()) return cached.result try { const res = await fetch(`${registryUrl}/v1/verify`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ signature_input: headers.signatureInput, signature: headers.signature, signature_agent: headers.signatureAgent, authority: options.authority ?? '', method: options.method ?? 'GET', path: options.path ?? '/', }), }) const result: RICVerifyResult = await res.json() cache.set(cacheKey, { result, expiresAt: Date.now() + cacheTtl }) return result } catch { return null } } // ── Legacy X-RIC-* path ─────────────────────────────────────────────────── const { ricId, timestamp, legacySignature } = headers if (!ricId || !timestamp || !legacySignature) return null const cacheKey = `legacy:${ricId}:${timestamp}` const cached = cache.get(cacheKey) if (cached && cached.expiresAt > Date.now()) return cached.result try { const res = await fetch(`${registryUrl}/v1/verify`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ ric_id: ricId, timestamp: Number(timestamp), signature: legacySignature, message: '', }), }) const result: RICVerifyResult = await res.json() cache.set(cacheKey, { result, expiresAt: Date.now() + cacheTtl }) return result } catch { return null } } const GRADE_RANK: Record = { dangerous: 0, unknown: 1, healthy: 2 } export function meetsGradeRequirement(grade: string, minGrade: string): boolean { return (GRADE_RANK[grade] ?? 0) >= (GRADE_RANK[minGrade] ?? 0) } FILE:packages/sdk/tsconfig.json { "compilerOptions": { "target": "ES2022", "module": "NodeNext", "moduleResolution": "NodeNext", "outDir": "./dist", "rootDir": "./src", "strict": true, "esModuleInterop": true, "skipLibCheck": true, "declaration": true, "declarationMap": true, "sourceMap": true }, "include": ["src/**/*"], "exclude": ["node_modules", "dist", "src/**/*.test.ts"] } FILE:render.yaml services: - type: web name: ric-registry runtime: docker dockerfilePath: ./packages/registry/Dockerfile dockerContext: . healthCheckPath: /health envVars: - key: NODE_ENV value: production - key: RIC_ADMIN_KEY generateValue: true # Render auto-generates a secret — copy from dashboard disk: name: ric-data mountPath: /data sizeGB: 1 FILE:scripts/test-local.sh #!/usr/bin/env bash # ────────────────────────────────────────────────────────────── # RIC v0.2 本机完整测试脚本 # 用法: bash scripts/test-local.sh # 前提: registry 已在 localhost:3000 运行 # ────────────────────────────────────────────────────────────── set -euo pipefail REGISTRY="http://localhost:3000" export RIC_REGISTRY="$REGISTRY" PASS=0 FAIL=0 TMP=$(mktemp -d) trap "rm -rf $TMP" EXIT # ── 颜色 ────────────────────────────────────────────────────── GREEN="\033[0;32m"; RED="\033[0;31m"; YELLOW="\033[1;33m"; RESET="\033[0m"; BOLD="\033[1m" pass() { echo -e " ${GREEN}✓${RESET} $1"; PASS=$((PASS + 1)); } fail() { echo -e " ${RED}✗${RESET} $1"; FAIL=$((FAIL + 1)); } section() { echo -e "\n${BOLD}${YELLOW}▶ $1${RESET}"; } # ── 工具函数 ────────────────────────────────────────────────── post() { curl -s -X POST "$REGISTRY$1" -H "Content-Type: application/json" -d "$2"; } get() { curl -s "$REGISTRY$1"; } # 生成唯一公钥 gen_key() { echo "ed25519:$(python3 -c "import secrets; print(secrets.token_hex(32))")"; } # ───────────────────────────────────────────────────────────── section "0. Registry 健康检查" # ───────────────────────────────────────────────────────────── HEALTH=$(get /health) VERSION=$(echo "$HEALTH" | python3 -c "import sys,json; print(json.load(sys.stdin)['version'])" 2>/dev/null) if [[ "$VERSION" == "0.3.0" ]]; then pass "Registry 运行正常 (v$VERSION)" else fail "Registry 未响应或版本不对: $HEALTH" echo -e "${RED}请先启动 registry: npm run dev --workspace=packages/registry${RESET}" exit 1 fi # ───────────────────────────────────────────────────────────── section "1. CLI keygen — 生成密钥对" # ───────────────────────────────────────────────────────────── cd "$(dirname "$0")/.." KEY_FILE="$TMP/bot.key.json" npx tsx packages/cli/src/index.ts keygen --out "$KEY_FILE" > /dev/null 2>&1 if [[ -f "$KEY_FILE" ]]; then PUB=$(python3 -c "import json; d=json.load(open('$KEY_FILE')); print(d['public_key'])") PRIV=$(python3 -c "import json; d=json.load(open('$KEY_FILE')); print(d['private_key_hex'])") if [[ "$PUB" == ed25519:* ]] && [[ ${#PUB} -eq 72 ]]; then pass "keygen 生成文件正确 (公钥: ${PUB:0:20}...)" else fail "公钥格式不对: $PUB" fi else fail "keygen 未生成密钥文件" fi # ───────────────────────────────────────────────────────────── section "2. CLI register — 正常注册" # ───────────────────────────────────────────────────────────── CERT_FILE="$TMP/bot.ric.json" npx tsx packages/cli/src/index.ts register \ --name "LocalTestBot" \ --purpose "Automated local test bot for RIC v0.2 validation" \ --developer "localtest@example.com" \ --org "TestOrg" \ --key "$KEY_FILE" \ --out "$CERT_FILE" > /dev/null 2>&1 if [[ -f "$CERT_FILE" ]]; then RIC_ID=$(python3 -c "import json; print(json.load(open('$CERT_FILE'))['id'])") GRADE=$(python3 -c "import json; print(json.load(open('$CERT_FILE'))['grade'])") if [[ "$RIC_ID" == ric_* ]] && [[ "$GRADE" == "unknown" ]]; then pass "CLI 注册成功 (ID: $RIC_ID, 初始评级: $GRADE)" else fail "证书内容异常: id=$RIC_ID grade=$GRADE" fi else fail "CLI 注册未生成证书文件" RIC_ID="" fi # ───────────────────────────────────────────────────────────── section "3. 唯一性 — 重复公钥拦截" # ───────────────────────────────────────────────────────────── RES=$(post /v1/bots/register "{ \"developer\":{\"name\":\"X\",\"email\":\"other@example.com\"}, \"bot\":{\"name\":\"OtherBot\",\"version\":\"1.0.0\",\"purpose\":\"trying to steal a key\",\"capabilities\":[\"read_articles\"],\"user_agent\":\"OtherBot/1.0\"}, \"public_key\":\"$PUB\" }") CODE=$(echo "$RES" | python3 -c "import sys,json; print(json.load(sys.stdin).get('code',''))" 2>/dev/null) if [[ "$CODE" == "DUPLICATE_KEY" ]]; then pass "重复公钥被拦截 (code: DUPLICATE_KEY)" else fail "重复公钥未被拦截: $RES" fi # ───────────────────────────────────────────────────────────── section "4. 唯一性 — 相同 email+名称拦截" # ───────────────────────────────────────────────────────────── NEW_KEY=$(gen_key) RES=$(post /v1/bots/register "{ \"developer\":{\"name\":\"localtest\",\"email\":\"localtest@example.com\"}, \"bot\":{\"name\":\"LocalTestBot\",\"version\":\"2.0.0\",\"purpose\":\"same name different key attempt\",\"capabilities\":[\"read_articles\"],\"user_agent\":\"LocalTestBot/2.0\"}, \"public_key\":\"$NEW_KEY\" }") CODE=$(echo "$RES" | python3 -c "import sys,json; print(json.load(sys.stdin).get('code',''))" 2>/dev/null) if [[ "$CODE" == "DUPLICATE_BOT" ]]; then pass "重复 email+名称被拦截 (code: DUPLICATE_BOT)" else fail "重复 bot 未被拦截: $RES" fi # ───────────────────────────────────────────────────────────── section "5. API GET /v1/bots/:id — 查询证书" # ───────────────────────────────────────────────────────────── if [[ -n "$RIC_ID" ]]; then RES=$(get "/v1/bots/$RIC_ID") BOT_NAME=$(echo "$RES" | python3 -c "import sys,json; print(json.load(sys.stdin)['bot']['name'])" 2>/dev/null) if [[ "$BOT_NAME" == "LocalTestBot" ]]; then pass "GET /v1/bots/:id 返回正确证书" else fail "查询结果异常: $RES" fi fi # ───────────────────────────────────────────────────────────── section "6. CLI status — 查看 bot 状态" # ───────────────────────────────────────────────────────────── if [[ -n "$RIC_ID" ]]; then STATUS_OUT=$(npx tsx packages/cli/src/index.ts status --cert "$CERT_FILE" 2>/dev/null) if echo "$STATUS_OUT" | grep -q "LocalTestBot"; then pass "CLI status 正常显示 bot 信息" else fail "CLI status 输出异常: $STATUS_OUT" fi fi # ───────────────────────────────────────────────────────────── section "7. GET /v1/bots — 列表" # ───────────────────────────────────────────────────────────── RES=$(get /v1/bots) TOTAL=$(echo "$RES" | python3 -c "import sys,json; print(json.load(sys.stdin)['total'])" 2>/dev/null) if [[ "$TOTAL" -ge 1 ]]; then pass "GET /v1/bots 返回列表 (共 $TOTAL 个 bot)" else fail "列表返回异常: $RES" fi # ───────────────────────────────────────────────────────────── section "8. 举报 + 自动降级 (3次→DANGEROUS)" # ───────────────────────────────────────────────────────────── if [[ -n "$RIC_ID" ]]; then # 用新 bot 来测试举报（不污染 LocalTestBot） REPORT_KEY=$(gen_key) REPORT_RES=$(post /v1/bots/register "{ \"developer\":{\"name\":\"report-dev\",\"email\":\"report-test@example.com\"}, \"bot\":{\"name\":\"ReportTestBot\",\"version\":\"1.0.0\",\"purpose\":\"Bot used for auto-flag test\",\"capabilities\":[\"read_articles\"],\"user_agent\":\"ReportTestBot/1.0\"}, \"public_key\":\"$REPORT_KEY\" }") REPORT_BOT_ID=$(echo "$REPORT_RES" | python3 -c "import sys,json; print(json.load(sys.stdin)['certificate']['id'])" 2>/dev/null) if [[ -n "$REPORT_BOT_ID" ]]; then for i in 1 2 3; do post /v1/audit/report "{\"ric_id\":\"$REPORT_BOT_ID\",\"reporter_domain\":\"site$i.com\",\"reason\":\"spam\",\"description\":\"Test report $i\"}" > /dev/null done GRADE_AFTER=$(get "/v1/bots/$REPORT_BOT_ID" | python3 -c "import sys,json; print(json.load(sys.stdin)['grade'])" 2>/dev/null) if [[ "$GRADE_AFTER" == "dangerous" ]]; then pass "3次举报后自动降级为 DANGEROUS" else fail "自动降级未触发，当前评级: $GRADE_AFTER" fi fi fi # ───────────────────────────────────────────────────────────── section "9. 审计日志" # ───────────────────────────────────────────────────────────── if [[ -n "$REPORT_BOT_ID" ]]; then RES=$(get "/v1/audit/$REPORT_BOT_ID") EVENTS=$(echo "$RES" | python3 -c "import sys,json; print(json.load(sys.stdin)['total'])" 2>/dev/null) if [[ "$EVENTS" -ge 4 ]]; then pass "审计日志完整 ($EVENTS 条事件: registered + 3×report + grade_changed)" else fail "审计日志事件数不够: $EVENTS" fi fi # ───────────────────────────────────────────────────────────── section "10. Admin grade 更新 (需要 admin_key)" # ───────────────────────────────────────────────────────────── if [[ -n "$RIC_ID" ]]; then # 无 admin_key → 应被拒绝 RES=$(post /v1/audit/grade "{\"ric_id\":\"$RIC_ID\",\"grade\":\"healthy\",\"reason\":\"Test\",\"admin_key\":\"wrong-key\"}") HTTP_CODE=$(echo "$RES" | python3 -c "import sys,json; print(json.load(sys.stdin).get('error',''))" 2>/dev/null) if [[ "$HTTP_CODE" == "Forbidden" ]]; then pass "错误 admin_key 被拒绝 (403 Forbidden)" else fail "admin_key 验证未生效: $RES" fi # 正确 admin_key → 应成功 RES=$(post /v1/audit/grade "{\"ric_id\":\"$RIC_ID\",\"grade\":\"healthy\",\"reason\":\"Passed local testing\",\"admin_key\":\"dev-admin-key-change-me\"}") NEW_GRADE=$(echo "$RES" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('message',''))" 2>/dev/null) if echo "$NEW_GRADE" | grep -q "healthy"; then pass "管理员评级更新成功 → HEALTHY" else fail "评级更新失败: $RES" fi fi # ───────────────────────────────────────────────────────────── section "11. 重启持久化验证" # ───────────────────────────────────────────────────────────── if [[ -n "$RIC_ID" ]]; then GRADE_NOW=$(get "/v1/bots/$RIC_ID" | python3 -c "import sys,json; print(json.load(sys.stdin)['grade'])" 2>/dev/null) if [[ "$GRADE_NOW" == "healthy" ]]; then pass "SQLite 持久化正常 (评级 HEALTHY 已存入数据库)" else fail "持久化可能有问题: grade=$GRADE_NOW" fi fi # ───────────────────────────────────────────────────────────── section "12. 无效公钥格式校验" # ───────────────────────────────────────────────────────────── RES=$(post /v1/bots/register "{ \"developer\":{\"name\":\"X\",\"email\":\"bad@x.com\"}, \"bot\":{\"name\":\"BadKeyBot\",\"version\":\"1.0.0\",\"purpose\":\"testing invalid key format\",\"capabilities\":[\"read_articles\"],\"user_agent\":\"BadKeyBot/1.0\"}, \"public_key\":\"notakey\" }") ERR=$(echo "$RES" | python3 -c "import sys,json; print('error' in json.load(sys.stdin))" 2>/dev/null) if [[ "$ERR" == "True" ]]; then pass "无效公钥格式被拒绝" else fail "无效公钥未被拦截" fi # ───────────────────────────────────────────────────────────── echo -e "\n${BOLD}══════════════════════════════════════${RESET}" echo -e "${BOLD} 测试结果: ${GREEN}${PASS} 通过${RESET}${BOLD} / ${RED}${FAIL} 失败${RESET}" echo -e "${BOLD}══════════════════════════════════════${RESET}\n" [[ "$FAIL" -eq 0 ]] && exit 0 || exit 1

Robot Id Card

Comments (0)