Files
40eadc995e Feat/1285 es ucan formatting (#1302)
* feat: Add Enclave Usage Examples

* feat(es/ucan): Add comprehensive integration tests

- Create integration.test.ts with full UCAN token lifecycle testing
- Cover end-to-end token creation, parsing, and validation
- Test capability attenuation and delegation chains
- Validate multi-algorithm support and timestamp scenarios
- Implement error recovery and performance test scenarios

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>

* No commit suggestions generated

* No commit suggestions generated

* chore: Remove migrated components and add migration documentation

Removed all code and references for components that have been moved to separate repositories:

**Moved to sonr-io/hway:**
- bridge/ - HTTP service with OAuth2/OIDC/WebAuthn handlers
- cmd/hway/ - Highway service binary
- internal/migrations/ - PostgreSQL schema migrations

**Moved to sonr-io/motr:**
- cmd/motr/ - Motor worker service (WASM vault operations)
- cmd/vault/ - Vault CLI tool
- crypto/ - Comprehensive cryptographic library
- packages/ - TypeScript SDK packages (es, sdk, ui, com, pkl)
- web/auth/ - Authentication web application
- web/dash/ - Dashboard web application

**Updated Configuration:**
- Makefile: Removed build/test/release targets for moved components
- CLAUDE.md: Simplified to focus on core blockchain components
- devbox.json: Removed scripts for moved services
- docker-compose.yml: Removed hway, postgres, redis, auth, dash services
- .github/scopes.yml: Removed CI scopes for migrated components
- .goreleaser.yml: Updated release configuration

**Added Migration Documentation:**
- MIGRATE_HWAY.md: Comprehensive Highway service architecture and migration guide
- MIGRATE_MOTR.md: Comprehensive Motor/Worker/Vault architecture and migration guide

These migration documents provide complete context for setting up the new repositories including architecture diagrams, component breakdowns, API documentation, and migration checklists.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* No commit suggestions generated

* chore: Remove contracts references and documentation

Removed all references to the contracts directory that was migrated to a separate repository.

**Changes:**
- .gitignore: Removed contract-specific ignore patterns for DAO and wSNR contracts
- .gitignore: Removed hway and motr binary references (already migrated)
- .rgignore: Removed contracts, chains, and crypto directory references
- docs/reference/contracts/: Removed DAO.mdx and wSNR.mdx documentation files

This completes the cleanup of migrated components from the repository.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* docs: add crypto library migration documentation

Added comprehensive migration documentation for the crypto library that was
moved to sonr-io/crypto repository. This documentation provides complete context
for understanding the cryptographic primitives and protocols used throughout
the Sonr ecosystem.

## Key Documentation Added

### MIGRATE_CRYPTO.md
Complete documentation of the crypto library covering:

**Core Cryptographic Primitives**
- Elliptic curve implementations (Ed25519, Secp256k1, P-256, BLS12-381, Pallas/Vesta)
- Native curve arithmetic with optimized field operations
- Pairing-friendly curves for BLS signatures

**Multi-Party Computation (MPC)**
- MPC enclave for vault key generation and management
- Threshold cryptography (TECDSA, TED25519 with FROST protocol)
- Distributed Key Generation (DKG) via Gennaro and FROST protocols
- Secret sharing schemes (Shamir, Feldman VSS, Pedersen VSS)

**Digital Signature Schemes**
- BLS signatures with aggregation support
- BBS+ signatures for selective disclosure
- Schnorr signatures (standard and Mina/NEM variants)
- ECDSA with deterministic nonce generation

**Zero-Knowledge Proofs**
- Bulletproofs for range proofs
- Inner Product Arguments (IPA)
- Batch verification support

**Advanced Cryptographic Protocols**
- Cryptographic accumulators for set membership proofs
- Paillier homomorphic encryption
- Oblivious Transfer (OT) protocols
- Verifiable Random Functions (VRF)

**Key Management & Identity**
- DID key management with multi-chain support
- Multi-algorithm public key handling
- Wallet address derivation (Bitcoin, Ethereum, Cosmos, Solana, etc.)

**UCAN Integration**
- User-Controlled Authorization Networks
- Capability delegation and attenuation
- JWT-based capability tokens
- MPC-enabled UCAN signing

**Security Utilities**
- AEAD encryption (AES-GCM, AES-SIV)
- Argon2 key derivation
- ECIES encryption
- Secure memory handling

### MIGRATE_MOTR.md Updates
Updated Motor migration documentation to clarify that the crypto library
is now a separate external dependency at github.com/sonr-io/crypto v1.0.1

## Repository Context

The crypto library has been successfully migrated to its own repository
and is published as a Go module. It serves as the foundational cryptographic
layer for:
- Sonr blockchain (snrd) - DID signatures, vault operations
- Highway service (hway) - UCAN token signing, WebAuthn
- Motor/Worker (motr) - MPC vault operations, threshold signatures

## Integration Impact

All Sonr ecosystem components now depend on the external crypto library:
```go
require github.com/sonr-io/crypto v1.0.1
```

The migration enables independent versioning and maintenance of cryptographic
primitives while maintaining security and compatibility across the ecosystem.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* No commit suggestions generated

* No commit suggestions generated

* No commit suggestions generated

---------

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-10 11:47:18 -04:00

182 lines
4.9 KiB
Go

package keeper
import (
"fmt"
"github.com/sonr-io/crypto/ucan"
"github.com/sonr-io/sonr/x/dex/types"
"cosmossdk.io/collections"
"cosmossdk.io/core/store"
"cosmossdk.io/log"
"github.com/cosmos/cosmos-sdk/codec"
sdk "github.com/cosmos/cosmos-sdk/types"
capabilitykeeper "github.com/cosmos/ibc-go/modules/capability/keeper"
portkeeper "github.com/cosmos/ibc-go/v8/modules/core/05-port/keeper"
porttypes "github.com/cosmos/ibc-go/v8/modules/core/05-port/types"
ibcexported "github.com/cosmos/ibc-go/v8/modules/core/exported"
)
// Keeper defines the DEX module keeper
type Keeper struct {
storeService store.KVStoreService
cdc codec.Codec
schema collections.Schema
authority string
// IBC dependencies
ics4Wrapper porttypes.ICS4Wrapper
PortKeeper *portkeeper.Keeper
ScopedKeeper capabilitykeeper.ScopedKeeper
// External module dependencies
accountKeeper types.AccountKeeper
bankKeeper types.BankKeeper
icaControllerKeeper types.ICAControllerKeeper
connectionKeeper types.ConnectionKeeper
channelKeeper types.ChannelKeeper
didKeeper types.DIDKeeper
dwnKeeper types.DWNKeeper
// UCAN functionality
ucanVerifier *ucan.Verifier
permissionValidator *PermissionValidator
// Collections for state management
Params collections.Item[types.Params]
Accounts collections.Map[string, types.InterchainDEXAccount]
AccountSequence collections.Sequence
DIDToAccounts collections.Map[string, types.DIDAccounts] // DID -> account mappings
DIDActivities collections.Map[string, types.DEXActivity] // DID activity records
}
// SetDIDKeeper sets the DID keeper (called after initialization)
func (k *Keeper) SetDIDKeeper(didKeeper types.DIDKeeper) {
k.didKeeper = didKeeper
}
// SetDWNKeeper sets the DWN keeper (called after initialization)
func (k *Keeper) SetDWNKeeper(dwnKeeper types.DWNKeeper) {
k.dwnKeeper = dwnKeeper
}
// NewKeeper creates a new DEX Keeper instance
func NewKeeper(
appCodec codec.Codec,
storeService store.KVStoreService,
ics4Wrapper porttypes.ICS4Wrapper,
portKeeper *portkeeper.Keeper,
scopedKeeper capabilitykeeper.ScopedKeeper,
accountKeeper types.AccountKeeper,
bankKeeper types.BankKeeper,
icaControllerKeeper types.ICAControllerKeeper,
connectionKeeper types.ConnectionKeeper,
channelKeeper types.ChannelKeeper,
didKeeper types.DIDKeeper,
dwnKeeper types.DWNKeeper,
authority string,
) Keeper {
sb := collections.NewSchemaBuilder(storeService)
k := Keeper{
cdc: appCodec,
storeService: storeService,
authority: authority,
// IBC dependencies
ics4Wrapper: ics4Wrapper,
PortKeeper: portKeeper,
ScopedKeeper: scopedKeeper,
// External dependencies
accountKeeper: accountKeeper,
bankKeeper: bankKeeper,
icaControllerKeeper: icaControllerKeeper,
connectionKeeper: connectionKeeper,
channelKeeper: channelKeeper,
didKeeper: didKeeper,
dwnKeeper: dwnKeeper,
// State collections
Params: collections.NewItem(
sb,
collections.NewPrefix(0),
"params",
codec.CollValue[types.Params](appCodec),
),
Accounts: collections.NewMap(
sb,
collections.NewPrefix(1),
"accounts",
collections.StringKey,
codec.CollValue[types.InterchainDEXAccount](appCodec),
),
AccountSequence: collections.NewSequence(
sb,
collections.NewPrefix(2),
"account_sequence",
),
DIDToAccounts: collections.NewMap(
sb,
collections.NewPrefix(3),
"did_accounts",
collections.StringKey,
codec.CollValue[types.DIDAccounts](appCodec),
),
DIDActivities: collections.NewMap(
sb,
collections.NewPrefix(4),
"did_activities",
collections.StringKey,
codec.CollValue[types.DEXActivity](appCodec),
),
}
schema, err := sb.Build()
if err != nil {
panic(err)
}
k.schema = schema
// Initialize UCAN verifier and permission validator
if didKeeper != nil {
didResolver := &DEXDIDResolver{keeper: k}
k.ucanVerifier = ucan.NewVerifier(didResolver)
k.permissionValidator = NewPermissionValidator(k)
}
return k
}
// WithICS4Wrapper sets the ICS4Wrapper
func (k *Keeper) WithICS4Wrapper(wrapper porttypes.ICS4Wrapper) {
k.ics4Wrapper = wrapper
}
// Logger returns a module-specific logger
func (k Keeper) Logger(ctx sdk.Context) log.Logger {
return ctx.Logger().With("module", "x/"+ibcexported.ModuleName+"-"+types.ModuleName)
}
// GetAuthority returns the module authority
func (k Keeper) GetAuthority() string {
return k.authority
}
// GetPermissionValidator returns the UCAN permission validator
func (k Keeper) GetPermissionValidator() *PermissionValidator {
return k.permissionValidator
}
// GetAccountKey generates a unique key for DEX accounts
func GetAccountKey(did, connectionID string) string {
return fmt.Sprintf("%s:%s", did, connectionID)
}
// GetPortID generates a unique port ID for a DEX account
func GetPortID(did, connectionID string) string {
return fmt.Sprintf("dex-%s-%s", did, connectionID)
}