Feat/1285 es ucan formatting (#1302)

* feat: Add Enclave Usage Examples

* feat(es/ucan): Add comprehensive integration tests

- Create integration.test.ts with full UCAN token lifecycle testing
- Cover end-to-end token creation, parsing, and validation
- Test capability attenuation and delegation chains
- Validate multi-algorithm support and timestamp scenarios
- Implement error recovery and performance test scenarios

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>

* No commit suggestions generated

* No commit suggestions generated

* chore: Remove migrated components and add migration documentation

Removed all code and references for components that have been moved to separate repositories:

**Moved to sonr-io/hway:**
- bridge/ - HTTP service with OAuth2/OIDC/WebAuthn handlers
- cmd/hway/ - Highway service binary
- internal/migrations/ - PostgreSQL schema migrations

**Moved to sonr-io/motr:**
- cmd/motr/ - Motor worker service (WASM vault operations)
- cmd/vault/ - Vault CLI tool
- crypto/ - Comprehensive cryptographic library
- packages/ - TypeScript SDK packages (es, sdk, ui, com, pkl)
- web/auth/ - Authentication web application
- web/dash/ - Dashboard web application

**Updated Configuration:**
- Makefile: Removed build/test/release targets for moved components
- CLAUDE.md: Simplified to focus on core blockchain components
- devbox.json: Removed scripts for moved services
- docker-compose.yml: Removed hway, postgres, redis, auth, dash services
- .github/scopes.yml: Removed CI scopes for migrated components
- .goreleaser.yml: Updated release configuration

**Added Migration Documentation:**
- MIGRATE_HWAY.md: Comprehensive Highway service architecture and migration guide
- MIGRATE_MOTR.md: Comprehensive Motor/Worker/Vault architecture and migration guide

These migration documents provide complete context for setting up the new repositories including architecture diagrams, component breakdowns, API documentation, and migration checklists.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* No commit suggestions generated

* chore: Remove contracts references and documentation

Removed all references to the contracts directory that was migrated to a separate repository.

**Changes:**
- .gitignore: Removed contract-specific ignore patterns for DAO and wSNR contracts
- .gitignore: Removed hway and motr binary references (already migrated)
- .rgignore: Removed contracts, chains, and crypto directory references
- docs/reference/contracts/: Removed DAO.mdx and wSNR.mdx documentation files

This completes the cleanup of migrated components from the repository.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* docs: add crypto library migration documentation

Added comprehensive migration documentation for the crypto library that was
moved to sonr-io/crypto repository. This documentation provides complete context
for understanding the cryptographic primitives and protocols used throughout
the Sonr ecosystem.

## Key Documentation Added

### MIGRATE_CRYPTO.md
Complete documentation of the crypto library covering:

**Core Cryptographic Primitives**
- Elliptic curve implementations (Ed25519, Secp256k1, P-256, BLS12-381, Pallas/Vesta)
- Native curve arithmetic with optimized field operations
- Pairing-friendly curves for BLS signatures

**Multi-Party Computation (MPC)**
- MPC enclave for vault key generation and management
- Threshold cryptography (TECDSA, TED25519 with FROST protocol)
- Distributed Key Generation (DKG) via Gennaro and FROST protocols
- Secret sharing schemes (Shamir, Feldman VSS, Pedersen VSS)

**Digital Signature Schemes**
- BLS signatures with aggregation support
- BBS+ signatures for selective disclosure
- Schnorr signatures (standard and Mina/NEM variants)
- ECDSA with deterministic nonce generation

**Zero-Knowledge Proofs**
- Bulletproofs for range proofs
- Inner Product Arguments (IPA)
- Batch verification support

**Advanced Cryptographic Protocols**
- Cryptographic accumulators for set membership proofs
- Paillier homomorphic encryption
- Oblivious Transfer (OT) protocols
- Verifiable Random Functions (VRF)

**Key Management & Identity**
- DID key management with multi-chain support
- Multi-algorithm public key handling
- Wallet address derivation (Bitcoin, Ethereum, Cosmos, Solana, etc.)

**UCAN Integration**
- User-Controlled Authorization Networks
- Capability delegation and attenuation
- JWT-based capability tokens
- MPC-enabled UCAN signing

**Security Utilities**
- AEAD encryption (AES-GCM, AES-SIV)
- Argon2 key derivation
- ECIES encryption
- Secure memory handling

### MIGRATE_MOTR.md Updates
Updated Motor migration documentation to clarify that the crypto library
is now a separate external dependency at github.com/sonr-io/crypto v1.0.1

## Repository Context

The crypto library has been successfully migrated to its own repository
and is published as a Go module. It serves as the foundational cryptographic
layer for:
- Sonr blockchain (snrd) - DID signatures, vault operations
- Highway service (hway) - UCAN token signing, WebAuthn
- Motor/Worker (motr) - MPC vault operations, threshold signatures

## Integration Impact

All Sonr ecosystem components now depend on the external crypto library:
```go
require github.com/sonr-io/crypto v1.0.1
```

The migration enables independent versioning and maintenance of cryptographic
primitives while maintaining security and compatibility across the ecosystem.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* No commit suggestions generated

* No commit suggestions generated

* No commit suggestions generated

---------

Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Prad Nukala
2025-10-10 11:47:18 -04:00
committed by GitHub
co-authored by Claude
parent 7570d67787
commit 40eadc995e
1306 changed files with 2854 additions and 316038 deletions
-152
View File
@@ -1,47 +1,6 @@
name: sonr-core
services:
# Redis service for Highway task queue
redis:
container_name: redis
image: redis:7-alpine
restart: unless-stopped
ports:
- "127.0.0.1:6379:6379"
volumes:
- redis-data:/data
command: redis-server --appendonly yes --appendfsync everysec
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 5s
timeout: 3s
retries: 5
start_period: 10s
networks:
- sonr-network
postgres:
image: ghcr.io/sonr-io/postgres:latest
restart: unless-stopped
environment:
POSTGRES_HOST_AUTH_METHOD: trust
POSTGRES_USER: postgres
POSTGRES_PASSWORD: password
POSTGRES_DB: hway
POSTGRES_INITDB_ARGS: "--encoding=UTF8 --locale=C"
volumes:
- postgres-data:/var/lib/postgresql/data
ports:
- "127.0.0.1:5432:5432"
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postgres -d hway"]
interval: 10s
timeout: 5s
retries: 5
start_period: 10s
networks:
- sonr-network
ipfs:
container_name: ipfs
image: ipfs/kubo:release
@@ -93,34 +52,6 @@ services:
networks:
- sonr-network
hway:
container_name: hway
image: onsonr/hway:latest
build:
context: .
dockerfile: cmd/hway/Dockerfile
restart: unless-stopped
depends_on:
redis:
condition: service_healthy
ipfs:
condition: service_started
environment:
REDIS_URL: redis://redis:6379
IPFS_API_URL: http://ipfs:5001
LOG_LEVEL: ${LOG_LEVEL:-debug}
HIGHWAY_PORT: 8090
ports:
- "127.0.0.1:8090:8090"
healthcheck:
test: ["CMD", "wget", "--spider", "-q", "http://localhost:8090/health"]
interval: 10s
timeout: 5s
retries: 5
start_period: 30s
networks:
- sonr-network
snrd:
container_name: snrd
image: onsonr/snrd:latest
@@ -165,87 +96,6 @@ services:
networks:
- sonr-network
# Auth web application
auth:
container_name: auth
image: onsonr/auth:latest
build:
context: .
dockerfile: web/auth/Dockerfile
restart: unless-stopped
depends_on:
snrd:
condition: service_healthy
hway:
condition: service_healthy
environment:
NODE_ENV: ${NODE_ENV:-development}
PORT: 3100
NEXT_PUBLIC_API_URL: ${AUTH_NEXT_PUBLIC_API_URL:-http://localhost:8080}
OIDC_ISSUER: ${AUTH_OIDC_ISSUER:-http://localhost:3000}
OIDC_PUBLIC_URL: ${AUTH_OIDC_PUBLIC_URL:-http://localhost:3000}
WEBAUTHN_RP_ID: ${AUTH_WEBAUTHN_RP_ID:-localhost}
WEBAUTHN_RP_NAME: ${AUTH_WEBAUTHN_RP_NAME:-Sonr Identity Platform}
WEBAUTHN_TIMEOUT: ${AUTH_WEBAUTHN_TIMEOUT:-60000}
JWT_SECRET: ${AUTH_JWT_SECRET:-highway-ucan-secret-key}
REDIS_ADDR: redis:6379
OIDC_CLIENT_ID: ${AUTH_OIDC_CLIENT_ID:-sonr-auth}
LOG_LEVEL: ${AUTH_LOG_LEVEL:-info}
CORS_ENABLED: ${AUTH_CORS_ENABLED:-true}
ports:
- "127.0.0.1:3100:3100"
healthcheck:
test: ["CMD", "wget", "--spider", "-q", "http://localhost:3100/"]
interval: 10s
timeout: 5s
retries: 5
start_period: 30s
networks:
- sonr-network
# Dashboard web application
dash:
container_name: dash
image: onsonr/dash:latest
build:
context: .
dockerfile: web/dash/Dockerfile
restart: unless-stopped
depends_on:
snrd:
condition: service_healthy
hway:
condition: service_healthy
auth:
condition: service_healthy
environment:
NODE_ENV: ${NODE_ENV:-development}
PORT: 3200
NEXT_PUBLIC_CHAIN_ID: ${DASH_NEXT_PUBLIC_CHAIN_ID:-sonrtest_1-1}
NEXT_PUBLIC_CHAIN_ENDPOINT: http://snrd:26657
NEXT_PUBLIC_RPC_ENDPOINT: http://snrd:1317
NEXT_PUBLIC_GRPC_ENDPOINT: http://snrd:9090
NEXT_PUBLIC_WS_ENDPOINT: ws://snrd:26657/websocket
NEXT_PUBLIC_AUTH_URL: http://auth:3100
NEXT_PUBLIC_AUTH_DOMAIN: ${DASH_NEXT_PUBLIC_AUTH_DOMAIN:-localhost}
NEXT_PUBLIC_API_URL: ${DASH_NEXT_PUBLIC_API_URL:-http://localhost:3000}
NEXT_PUBLIC_SERVICE_NAME: ${DASH_NEXT_PUBLIC_SERVICE_NAME:-Sonr Dashboard}
NEXT_PUBLIC_IPFS_GATEWAY: ${DASH_NEXT_PUBLIC_IPFS_GATEWAY:-https://ipfs.io/ipfs/}
NEXT_PUBLIC_IPFS_API: http://ipfs:5001
NEXT_PUBLIC_WEBAUTHN_RP_NAME: ${DASH_NEXT_PUBLIC_WEBAUTHN_RP_NAME:-Sonr Dashboard}
NEXT_PUBLIC_WEBAUTHN_RP_ID: ${DASH_NEXT_PUBLIC_WEBAUTHN_RP_ID:-localhost}
NEXT_PUBLIC_LOG_LEVEL: ${DASH_NEXT_PUBLIC_LOG_LEVEL:-info}
ports:
- "127.0.0.1:3200:3200"
healthcheck:
test: ["CMD", "wget", "--spider", "-q", "http://localhost:3200/"]
interval: 10s
timeout: 5s
retries: 5
start_period: 30s
networks:
- sonr-network
networks:
sonr-network:
driver: bridge
@@ -253,6 +103,4 @@ networks:
volumes:
caddy-config:
redis-data:
caddy-data:
postgres-data: