mirror of
https://github.com/sonr-io/sonr.git
synced 2026-08-02 17:31:39 +00:00
* feat: Add Enclave Usage Examples * feat(es/ucan): Add comprehensive integration tests - Create integration.test.ts with full UCAN token lifecycle testing - Cover end-to-end token creation, parsing, and validation - Test capability attenuation and delegation chains - Validate multi-algorithm support and timestamp scenarios - Implement error recovery and performance test scenarios 🤖 Generated with Claude Code Co-Authored-By: Claude <noreply@anthropic.com> * No commit suggestions generated * No commit suggestions generated * chore: Remove migrated components and add migration documentation Removed all code and references for components that have been moved to separate repositories: **Moved to sonr-io/hway:** - bridge/ - HTTP service with OAuth2/OIDC/WebAuthn handlers - cmd/hway/ - Highway service binary - internal/migrations/ - PostgreSQL schema migrations **Moved to sonr-io/motr:** - cmd/motr/ - Motor worker service (WASM vault operations) - cmd/vault/ - Vault CLI tool - crypto/ - Comprehensive cryptographic library - packages/ - TypeScript SDK packages (es, sdk, ui, com, pkl) - web/auth/ - Authentication web application - web/dash/ - Dashboard web application **Updated Configuration:** - Makefile: Removed build/test/release targets for moved components - CLAUDE.md: Simplified to focus on core blockchain components - devbox.json: Removed scripts for moved services - docker-compose.yml: Removed hway, postgres, redis, auth, dash services - .github/scopes.yml: Removed CI scopes for migrated components - .goreleaser.yml: Updated release configuration **Added Migration Documentation:** - MIGRATE_HWAY.md: Comprehensive Highway service architecture and migration guide - MIGRATE_MOTR.md: Comprehensive Motor/Worker/Vault architecture and migration guide These migration documents provide complete context for setting up the new repositories including architecture diagrams, component breakdowns, API documentation, and migration checklists. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * No commit suggestions generated * chore: Remove contracts references and documentation Removed all references to the contracts directory that was migrated to a separate repository. **Changes:** - .gitignore: Removed contract-specific ignore patterns for DAO and wSNR contracts - .gitignore: Removed hway and motr binary references (already migrated) - .rgignore: Removed contracts, chains, and crypto directory references - docs/reference/contracts/: Removed DAO.mdx and wSNR.mdx documentation files This completes the cleanup of migrated components from the repository. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * docs: add crypto library migration documentation Added comprehensive migration documentation for the crypto library that was moved to sonr-io/crypto repository. This documentation provides complete context for understanding the cryptographic primitives and protocols used throughout the Sonr ecosystem. ## Key Documentation Added ### MIGRATE_CRYPTO.md Complete documentation of the crypto library covering: **Core Cryptographic Primitives** - Elliptic curve implementations (Ed25519, Secp256k1, P-256, BLS12-381, Pallas/Vesta) - Native curve arithmetic with optimized field operations - Pairing-friendly curves for BLS signatures **Multi-Party Computation (MPC)** - MPC enclave for vault key generation and management - Threshold cryptography (TECDSA, TED25519 with FROST protocol) - Distributed Key Generation (DKG) via Gennaro and FROST protocols - Secret sharing schemes (Shamir, Feldman VSS, Pedersen VSS) **Digital Signature Schemes** - BLS signatures with aggregation support - BBS+ signatures for selective disclosure - Schnorr signatures (standard and Mina/NEM variants) - ECDSA with deterministic nonce generation **Zero-Knowledge Proofs** - Bulletproofs for range proofs - Inner Product Arguments (IPA) - Batch verification support **Advanced Cryptographic Protocols** - Cryptographic accumulators for set membership proofs - Paillier homomorphic encryption - Oblivious Transfer (OT) protocols - Verifiable Random Functions (VRF) **Key Management & Identity** - DID key management with multi-chain support - Multi-algorithm public key handling - Wallet address derivation (Bitcoin, Ethereum, Cosmos, Solana, etc.) **UCAN Integration** - User-Controlled Authorization Networks - Capability delegation and attenuation - JWT-based capability tokens - MPC-enabled UCAN signing **Security Utilities** - AEAD encryption (AES-GCM, AES-SIV) - Argon2 key derivation - ECIES encryption - Secure memory handling ### MIGRATE_MOTR.md Updates Updated Motor migration documentation to clarify that the crypto library is now a separate external dependency at github.com/sonr-io/crypto v1.0.1 ## Repository Context The crypto library has been successfully migrated to its own repository and is published as a Go module. It serves as the foundational cryptographic layer for: - Sonr blockchain (snrd) - DID signatures, vault operations - Highway service (hway) - UCAN token signing, WebAuthn - Motor/Worker (motr) - MPC vault operations, threshold signatures ## Integration Impact All Sonr ecosystem components now depend on the external crypto library: ```go require github.com/sonr-io/crypto v1.0.1 ``` The migration enables independent versioning and maintenance of cryptographic primitives while maintaining security and compatibility across the ecosystem. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * No commit suggestions generated * No commit suggestions generated * No commit suggestions generated --------- Co-authored-by: Claude <noreply@anthropic.com>
306 lines
8.9 KiB
Go
306 lines
8.9 KiB
Go
package cli
|
|
|
|
import (
|
|
"context"
|
|
"encoding/hex"
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"github.com/cosmos/cosmos-sdk/client"
|
|
"github.com/cosmos/cosmos-sdk/client/flags"
|
|
|
|
"github.com/sonr-io/crypto/mpc"
|
|
"github.com/sonr-io/sonr/x/dwn/client/plugin"
|
|
)
|
|
|
|
const (
|
|
// DefaultTestChainID is the default chain ID used for local testing
|
|
DefaultTestChainID = "sonrtest_1-1"
|
|
)
|
|
|
|
// GetWalletQueryCommands returns wallet-specific query commands
|
|
func GetWalletQueryCommands() *cobra.Command {
|
|
walletQueryCmd := &cobra.Command{
|
|
Use: "wallet",
|
|
Short: "Wallet query commands",
|
|
DisableFlagParsing: true,
|
|
SuggestionsMinimumDistance: 2,
|
|
RunE: client.ValidateCmd,
|
|
}
|
|
|
|
walletQueryCmd.AddCommand(
|
|
GetCmdWalletDerive(),
|
|
GetCmdWalletStatus(),
|
|
GetCmdWalletConfig(),
|
|
)
|
|
|
|
return walletQueryCmd
|
|
}
|
|
|
|
// GetCmdWalletDerive creates a command to derive wallet addresses from enclave data
|
|
func GetCmdWalletDerive() *cobra.Command {
|
|
cmd := &cobra.Command{
|
|
Use: "derive [enclave-data]",
|
|
Short: "Derive wallet address and DID from enclave data",
|
|
Long: `Derive wallet address and DID from MPC enclave data.
|
|
The enclave-data should be provided as hex-encoded JSON or a file path.
|
|
|
|
Example:
|
|
snrd query dwn wallet derive '{"pub_hex":"...","pub_bytes":[...],...}'
|
|
snrd query dwn wallet derive @enclave.json`,
|
|
Args: cobra.ExactArgs(1),
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
clientCtx, err := client.GetClientQueryContext(cmd)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Parse enclave data
|
|
enclaveData, err := parseEnclaveData(args[0])
|
|
if err != nil {
|
|
return fmt.Errorf("failed to parse enclave data: %w", err)
|
|
}
|
|
|
|
// Get chain ID from client context
|
|
chainID := clientCtx.ChainID
|
|
if chainID == "" {
|
|
chainID = DefaultTestChainID // Default for local testing
|
|
}
|
|
|
|
// Create enclave configuration
|
|
config := plugin.CreateEnclaveConfig(chainID, enclaveData)
|
|
|
|
// Load plugin and derive wallet address
|
|
ctx := context.Background()
|
|
motorPlugin, err := plugin.LoadPluginWithManager(ctx, config)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to load Motor plugin: %w", err)
|
|
}
|
|
|
|
// Get issuer DID and address
|
|
response, err := motorPlugin.GetIssuerDID()
|
|
if err != nil {
|
|
return fmt.Errorf("failed to derive wallet address: %w", err)
|
|
}
|
|
|
|
if response.Error != "" {
|
|
return fmt.Errorf("plugin error: %s", response.Error)
|
|
}
|
|
|
|
// Display results
|
|
result := map[string]any{
|
|
"issuer_did": response.IssuerDID,
|
|
"address": response.Address,
|
|
"chain_code": response.ChainCode,
|
|
"chain_id": chainID,
|
|
}
|
|
|
|
return clientCtx.PrintObjectLegacy(result)
|
|
},
|
|
}
|
|
|
|
flags.AddQueryFlagsToCmd(cmd)
|
|
return cmd
|
|
}
|
|
|
|
// GetCmdWalletStatus creates a command to check wallet plugin status
|
|
func GetCmdWalletStatus() *cobra.Command {
|
|
cmd := &cobra.Command{
|
|
Use: "status [wallet-address]",
|
|
Short: "Check wallet plugin health and status",
|
|
Long: `Check the health status of wallet plugins managed by the plugin manager.
|
|
Optionally filter by wallet address if enclave data is provided.
|
|
|
|
Example:
|
|
snrd query dwn wallet status
|
|
snrd query dwn wallet status sonr1abc123...`,
|
|
Args: cobra.MaximumNArgs(1),
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
clientCtx, err := client.GetClientQueryContext(cmd)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Get all plugin IDs from the default manager
|
|
pluginIDs := plugin.DefaultManager.ListPlugins()
|
|
|
|
if len(pluginIDs) == 0 {
|
|
fmt.Println("No wallet plugins currently loaded")
|
|
return nil
|
|
}
|
|
|
|
var statusResults []map[string]any
|
|
|
|
// Check status for each plugin
|
|
for _, id := range pluginIDs {
|
|
stats, err := plugin.DefaultManager.GetPluginStats(id)
|
|
if err != nil {
|
|
fmt.Printf("Error getting stats for plugin %s: %v\n", id, err)
|
|
continue
|
|
}
|
|
|
|
status := map[string]any{
|
|
"plugin_id": stats.ID,
|
|
"chain_id": stats.ChainID,
|
|
"is_healthy": stats.IsHealthy,
|
|
"error_count": stats.ErrorCount,
|
|
"created_at": stats.CreatedAt.Format("2006-01-02 15:04:05"),
|
|
"last_used": stats.LastUsed.Format("2006-01-02 15:04:05"),
|
|
"uptime_duration": stats.UptimeDuration.String(),
|
|
"idle_duration": stats.IdleDuration.String(),
|
|
}
|
|
|
|
// If wallet address is provided, try to match
|
|
if len(args) > 0 {
|
|
walletAddress := args[0]
|
|
// For now, we include all plugins since we can't easily derive address from plugin ID
|
|
// In a production implementation, you might want to store address mappings
|
|
_ = walletAddress
|
|
}
|
|
|
|
statusResults = append(statusResults, status)
|
|
}
|
|
|
|
if len(statusResults) == 0 {
|
|
fmt.Println("No matching wallet plugins found")
|
|
return nil
|
|
}
|
|
|
|
// Print summary
|
|
healthyCount := 0
|
|
for _, status := range statusResults {
|
|
if status["is_healthy"].(bool) {
|
|
healthyCount++
|
|
}
|
|
}
|
|
|
|
fmt.Printf(
|
|
"Wallet Plugin Status Summary: %d/%d healthy\n\n",
|
|
healthyCount,
|
|
len(statusResults),
|
|
)
|
|
|
|
return clientCtx.PrintObjectLegacy(map[string]any{
|
|
"summary": map[string]any{
|
|
"total_plugins": len(statusResults),
|
|
"healthy_plugins": healthyCount,
|
|
"unhealthy_plugins": len(statusResults) - healthyCount,
|
|
},
|
|
"plugins": statusResults,
|
|
})
|
|
},
|
|
}
|
|
|
|
flags.AddQueryFlagsToCmd(cmd)
|
|
return cmd
|
|
}
|
|
|
|
// GetCmdWalletConfig creates a command to query wallet configuration
|
|
func GetCmdWalletConfig() *cobra.Command {
|
|
cmd := &cobra.Command{
|
|
Use: "config",
|
|
Short: "Display wallet plugin configuration and capabilities",
|
|
Long: `Display the default configuration used for wallet plugins including:
|
|
- Security settings and timeouts
|
|
- Vault configuration parameters
|
|
- Plugin loader settings
|
|
- Supported cryptographic capabilities`,
|
|
Args: cobra.NoArgs,
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
clientCtx, err := client.GetClientQueryContext(cmd)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Get default configurations
|
|
defaultEnclaveConfig := plugin.DefaultEnclaveConfig()
|
|
defaultLoaderConfig := plugin.DefaultLoaderConfig()
|
|
|
|
result := map[string]any{
|
|
"enclave_config": map[string]any{
|
|
"default_chain_id": defaultEnclaveConfig.ChainID,
|
|
"vault_config": map[string]any{
|
|
"ipfs_endpoint": defaultEnclaveConfig.VaultConfig.IPFSEndpoint,
|
|
"max_vault_size": defaultEnclaveConfig.VaultConfig.MaxVaultSize,
|
|
"enable_compression": defaultEnclaveConfig.VaultConfig.EnableCompression,
|
|
"backup_enabled": defaultEnclaveConfig.VaultConfig.BackupEnabled,
|
|
},
|
|
"security_config": map[string]any{
|
|
"max_token_lifetime": defaultEnclaveConfig.Security.MaxTokenLifetime.String(),
|
|
"require_audience": defaultEnclaveConfig.Security.RequireAudience,
|
|
"allowed_origins": defaultEnclaveConfig.Security.AllowedOrigins,
|
|
},
|
|
"timeouts": map[string]any{
|
|
"token_creation": defaultEnclaveConfig.Timeouts.TokenCreation.String(),
|
|
"signature": defaultEnclaveConfig.Timeouts.Signature.String(),
|
|
"verification": defaultEnclaveConfig.Timeouts.Verification.String(),
|
|
"plugin_init": defaultEnclaveConfig.Timeouts.PluginInit.String(),
|
|
},
|
|
},
|
|
"loader_config": map[string]any{
|
|
"enable_wasi": defaultLoaderConfig.EnableWASI,
|
|
"memory_limit": defaultLoaderConfig.MemoryLimit,
|
|
"allow_http_requests": defaultLoaderConfig.AllowHttpRequests,
|
|
"log_level": defaultLoaderConfig.LogLevel,
|
|
"max_concurrent_plugins": defaultLoaderConfig.MaxConcurrentPlugins,
|
|
},
|
|
"capabilities": map[string]any{
|
|
"supported_operations": []string{
|
|
"UCAN token creation (origin)",
|
|
"UCAN token delegation (attenuated)",
|
|
"Data signing (MPC-based)",
|
|
"Signature verification",
|
|
"DID derivation",
|
|
"Address generation",
|
|
},
|
|
"supported_curves": []string{"secp256k1"},
|
|
"plugin_format": "WebAssembly (WASM)",
|
|
"mpc_support": true,
|
|
},
|
|
}
|
|
|
|
return clientCtx.PrintObjectLegacy(result)
|
|
},
|
|
}
|
|
|
|
flags.AddQueryFlagsToCmd(cmd)
|
|
return cmd
|
|
}
|
|
|
|
// parseEnclaveData parses enclave data from a string (JSON or file path)
|
|
func parseEnclaveData(input string) (*mpc.EnclaveData, error) {
|
|
var data []byte
|
|
|
|
// Check if input is a file path (starts with @)
|
|
if len(input) > 0 && input[0] == '@' {
|
|
// File path - not implemented for security reasons in this example
|
|
return nil, fmt.Errorf("file input not supported in this implementation")
|
|
} else {
|
|
// Direct JSON string
|
|
data = []byte(input)
|
|
}
|
|
|
|
// Try to parse as hex-encoded data first
|
|
if len(input) > 2 && (input[:2] == "0x" || input[:2] == "0X") {
|
|
hexData, err := hex.DecodeString(input[2:])
|
|
if err == nil {
|
|
data = hexData
|
|
}
|
|
}
|
|
|
|
// Parse JSON
|
|
var enclaveData mpc.EnclaveData
|
|
if err := json.Unmarshal(data, &enclaveData); err != nil {
|
|
return nil, fmt.Errorf("failed to parse JSON: %w", err)
|
|
}
|
|
|
|
// Validate enclave data
|
|
if !enclaveData.IsValid() {
|
|
return nil, fmt.Errorf("invalid enclave data: missing required fields")
|
|
}
|
|
|
|
return &enclaveData, nil
|
|
}
|