Sample scripts and updates to Signify client for creating delegated m…

…ultisig AID across kli, sigPy and sigTS along with end role auths for the group multisig.

examples/scripts/client.ts

@@ -1,3 +1,4 @@
+// @ts-ignore
 let signify: any;
 
 // @ts-ignore
@@ -50,6 +51,8 @@ async function connect() {
     let op = await identifiers.create("multisig-ts", {bran: salt})
     let aid = op["response"]
 
+    await identifiers.addEndRole("multisig-ts", "agent", d.agent.i)
+
     console.log("Created AID: ", aid)
 
     console.log("Resolving delegator...")
@@ -66,8 +69,7 @@ async function connect() {
 
     console.log("Resolving multisig-kli...")
     op = await oobis.resolve(
-        "http://127.0.0.1:5642/oobi/EFBmwh8vdPTofoautCiEjjuA17gSlEnE3xc-xy-fGzWZ/witness/BBilc4-L3tFUnfM_wJr4S4OJanAv" +
-        "_VmF_dJNN6vkf2Ha",
+        "http://127.0.0.1:5642/oobi/EFBmwh8vdPTofoautCiEjjuA17gSlEnE3xc-xy-fGzWZ",
         "multisig-kli");
     while (!op["done"]) {
         op = await operations.get(op["name"]);

examples/scripts/create_multisig_aid.py

@@ -9,9 +9,7 @@
 from time import sleep
 
 from keri.app.keeping import Algos
-from keri.core import coring
 from keri.core.coring import Tiers
-
 from signify.app.clienting import SignifyClient
 
 

examples/scripts/create_person_aid.py

@@ -24,8 +24,8 @@ def create_aid():
     operations = client.operations()
     oobis = client.oobis()
 
-    aids = identifiers.list()
-    assert aids == []
+    res = identifiers.list()
+    assert res["aids"] == []
 
     wits = [
         "BBilc4-L3tFUnfM_wJr4S4OJanAv_VmF_dJNN6vkf2Ha",
@@ -57,8 +57,7 @@ def create_aid():
 
     print("multisig-sigpy resolving multisig-kli...")
     op = oobis.resolve(
-        oobi="http://127.0.0.1:5642/oobi/EFBmwh8vdPTofoautCiEjjuA17gSlEnE3xc-xy-fGzWZ/witness/BBilc4"
-             "-L3tFUnfM_wJr4S4OJanAv_VmF_dJNN6vkf2Ha",
+        oobi="http://127.0.0.1:5642/oobi/EFBmwh8vdPTofoautCiEjjuA17gSlEnE3xc-xy-fGzWZ",
         alias="multisig-kli")
     while not op["done"]:
         op = operations.get(op["name"])

examples/scripts/create_rpys.py

@@ -0,0 +1,61 @@
+# -*- encoding: utf-8 -*-
+"""
+SIGNIFY
+signify.app.clienting module
+
+Testing clienting with integration tests that require a running KERIA Cloud Agent
+"""
+import json
+from time import sleep
+
+from keri.app.keeping import Algos
+from keri.core.coring import Tiers
+from signify.app.clienting import SignifyClient
+
+
+def create_multisig_aid():
+    url = "http://localhost:3901"
+    bran = b'9876543210abcdefghijk'
+    tier = Tiers.low
+
+    client = SignifyClient(passcode=bran, tier=tier, url=url)
+
+    identifiers = client.identifiers()
+    operations = client.operations()
+    states = client.keyStates()
+
+    aid = identifiers.get("multisig-sigpy")
+    sigPy = aid["state"]
+
+    kli = states.get("EFBmwh8vdPTofoautCiEjjuA17gSlEnE3xc-xy-fGzWZ")
+    sigTs = states.get("ELViLL4JCh-oktYca-pmPLwkmUaeYjyPmCLxELAKZW8V")
+
+    assert len(kli) == 1
+    assert len(sigTs) == 1
+
+    states = rstates = [sigPy, kli[0], sigTs[0]]
+    for state in states:
+        print(json.dumps(state, indent=2))
+
+    op = identifiers.create("multisig", algo=Algos.group, mhab=aid,
+                            delpre="EHpD0-CDWOdu5RJ8jHBSUkOqBZ3cXeDVHWNb_Ul89VI7",
+                            toad=2,
+                            wits=[
+                                "BBilc4-L3tFUnfM_wJr4S4OJanAv_VmF_dJNN6vkf2Ha",
+                                "BLskRTInXnMxWaGqcpSyMgo0nYbalW99cGZESrz3zapM",
+                                "BIKKuvBwpmDVA4Ds-EpL5bt9OqPzWPja2LigFYZN2YfX"
+                            ],
+                            isith=["1/3", "1/3", "1/3"], nsith=["1/3", "1/3", "1/3"],
+                            states=states,
+                            rstates=rstates)
+    print("waiting on multisig creation...")
+    while not op["done"]:
+        op = operations.get(op["name"])
+        sleep(1)
+    gAid = op["response"]
+    print(f"group multisig created:")
+    print(json.dumps(gAid, indent=2))
+
+
+if __name__ == "__main__":
+    create_multisig_aid()

examples/scripts/delegator.sh

@@ -3,5 +3,5 @@
 kli init --name delegator --nopasscode --config-dir ${KERI_SCRIPT_DIR} --config-file demo-witness-oobis-schema --salt 0ACDEyMzQ1Njc4OWdoaWpsaw
 kli incept --name delegator --alias delegator --file ${KERI_DEMO_SCRIPT_DIR}/data/delegator.json
 
-
-# kli delegate confirm --name delegator --alias delegator -Y &
+echo "Waiting for delegation request..."
+kli delegate confirm --name delegator --alias delegator

examples/scripts/list_aids.py

@@ -0,0 +1,27 @@
+# -*- encoding: utf-8 -*-
+"""
+SIGNIFY
+signify.app.clienting module
+
+Testing clienting with integration tests that require a running KERIA Cloud Agent
+"""
+
+from keri.core.coring import Tiers
+
+from signify.app.clienting import SignifyClient
+
+
+def list_aids():
+    url = "http://localhost:3901"
+    bran = b'9876543210abcdefghijk'
+    tier = Tiers.low
+    client = SignifyClient(passcode=bran, tier=tier, url=url)
+
+    identifiers = client.identifiers()
+    res = identifiers.list()
+    for aid in res["aids"]:
+        print(f"{aid['name']}: {aid['prefix']}")
+
+
+if __name__ == "__main__":
+    list_aids()

examples/scripts/make_endroles.ts

@@ -0,0 +1,67 @@
+
+// @ts-ignore
+let signify: any;
+
+// @ts-ignore
+import('signify-ts').then(
+    (module) => {
+        signify = module
+        signify.ready().then(() => {
+            console.log("Signify client ready!");
+            makeends().then(() => {
+                console.log("Done")
+            });
+        });
+    }
+)
+
+async function makeends() {
+    let url = "http://127.0.0.1:3901"
+    let bran = '0123456789abcdefghijk'
+
+    const client = new signify.SignifyClient(url, bran);
+    await client.connect()
+    let d = await client.state()
+    console.log("Connected: ")
+    console.log(" Agent: ", d.agent.i, "   Controller: ", d.controller.state.i)
+
+    let identifiers = client.identifiers()
+    let escrows = client.escrows()
+
+    let members = await identifiers.members("multisig")
+    let hab = await identifiers.get("multisig")
+    let aid = hab["prefix"]
+    let signing = members['signing']
+
+    let auths = new Map<string, Date>()
+    let stamp = new Date()
+
+    signing.forEach((end: any) => {
+        let ends = end["ends"]
+        let roles = ["agent", "mailbox"]
+        roles.forEach((role) => {
+            if (role in ends) {
+                Object.keys(ends[role]).forEach((k:any) => {
+                    let key = [aid, role, k].join(".")
+                    auths.set(key, stamp)
+                })
+            }
+        })
+    })
+
+    let rpys = await escrows.listReply("/end/role")
+
+    rpys.forEach((rpy:object) => {
+        let serder = new signify.Serder(rpy)
+        let payload = serder.ked['a']
+
+        let key = Object.values(payload).join(".")
+        let then = new Date(Date.parse(serder.ked["dt"]))
+        if (auths.has(key) && then < stamp) {
+            identifiers.addEndRole("multisig", payload["role"], payload["eid"], serder.ked["dt"])
+            auths.set(key, then)  // track signed role auths by timestamp signed
+        }
+    })
+
+}
+

examples/scripts/multisig-kli.sh

@@ -9,11 +9,16 @@
 # EFBmwh8vdPTofoautCiEjjuA17gSlEnE3xc-xy-fGzWZ
 kli init --name multisig-kli --salt 0ACDEyMzQ1Njc4OWxtbm9GhI --nopasscode --config-dir "${KERI_SCRIPT_DIR}" --config-file demo-witness-oobis-schema
 kli incept --name multisig-kli --alias multisig-kli --file "${KERI_DEMO_SCRIPT_DIR}"/data/gleif-sample.json
+kli ends add --name multisig-kli --alias multisig-kli --role mailbox --eid BIKKuvBwpmDVA4Ds-EpL5bt9OqPzWPja2LigFYZN2YfX
 
 read  -n 1 -r -p "Press any key after multisig-sigpy and multisig-sigts have been created:"
 
 kli oobi resolve --name multisig-kli --oobi-alias delegator --oobi http://127.0.0.1:5642/oobi/EHpD0-CDWOdu5RJ8jHBSUkOqBZ3cXeDVHWNb_Ul89VI7/witness/BBilc4-L3tFUnfM_wJr4S4OJanAv_VmF_dJNN6vkf2Ha
 kli oobi resolve --name multisig-kli --oobi-alias multisig-sigpy --oobi http://127.0.0.1:3902/oobi/EBcIURLpxmVwahksgrsGW6_dUw0zBhyEHYFk17eWrZfk/agent/EERMVxqeHfFo_eIvyzBXaKdT1EyobZdSs1QXuFyYLjmz
 kli oobi resolve --name multisig-kli --oobi-alias multisig-sigts --oobi http://127.0.0.1:3902/oobi/ELViLL4JCh-oktYca-pmPLwkmUaeYjyPmCLxELAKZW8V/agent/EEXekkGu9IAzav6pZVJhkLnjtjM5v3AcyA-pdKUcaGei
 
-kli multisig incept --name multisig-kli --alias multisig-kli --group multisig --file ${KERI_DEMO_SCRIPT_DIR}/data/multisig-triple.json
+kli multisig incept --name multisig-kli --alias multisig-kli --group multisig --file ${KERI_DEMO_SCRIPT_DIR}/data/multisig-triple.json
+
+read -n 1 -r -p "Press any key to create endpoints for multisig AID..."
+
+kli multisig ends add --name multisig-kli --alias multisig --role agent --role mailbox

examples/scripts/multisig-sigpy.sh

@@ -3,3 +3,8 @@
 
 python "${KERI_SCRIPT_DIR}"/create_agent.py
 python "${KERI_SCRIPT_DIR}"/create_person_aid.py
+python "${KERI_SCRIPT_DIR}"/create_multisig_aid.py
+
+read -n 1 -r -p "Press any key to create endpoints for multisig AID..."
+
+python "${KERI_SCRIPT_DIR}"/multisig_endrole.py

examples/scripts/multisig-sigty.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+
+npx --package=signify-ts ts-node client.ts
+
+read -n 1 -r -p "Press any key to create endpoints for multisig AID..."
+
+npx --package=signify-ts ts-node make_endroles.ts

examples/scripts/multisig_endrole.py

@@ -0,0 +1,93 @@
+# -*- encoding: utf-8 -*-
+"""
+SIGNIFY
+signify.app.clienting module
+
+Testing clienting with integration tests that require a running KERIA Cloud Agent
+"""
+
+import json
+from time import sleep
+
+from keri.app.keeping import Algos
+from keri.core import coring
+from keri.core.coring import Tiers
+from keri.help import helping
+from signify.app.clienting import SignifyClient
+
+url = "http://localhost:3901"
+bran = b'9876543210abcdefghijk'
+tier = Tiers.low
+
+def authorize_endroles():
+    client = SignifyClient(passcode=bran, tier=tier, url=url)
+    identifiers = client.identifiers()
+    escrows = client.escrows()
+    endroles = client.endroles()
+
+    members = identifiers.members("multisig")
+    hab = identifiers.get("multisig")
+    aid = hab["prefix"]
+
+    auths = {}
+    stamp = helping.nowUTC()
+
+    for member in members['signing']:
+        ends = member["ends"]
+        if not ends:
+            print("\tNone")
+
+        for role in ("agent", "mailbox"):
+            if role in ends:
+                for k, v in ends[role].items():
+                    auths[(aid, role, k)] = stamp
+
+    rpys = escrows.getEscrowReply(route="/end/role")
+    for rpy in rpys:
+        serder = coring.Serder(ked=rpy)
+        payload = serder.ked['a']
+        keys = tuple(payload.values())
+        then = helping.fromIso8601(serder.ked["dt"])
+        if keys in auths and then < stamp:
+            identifiers.addEndRole("multisig", role=payload["role"], eid=payload['eid'], stamp=helping.toIso8601(then))
+            auths[keys] = then  # track signed role auths by timestamp signed
+
+    print("Waiting for approvals from other members...")
+    authKeys = set(auths.keys())
+    while authKeys - endrole_set(endroles, "multisig"):
+        rpys = escrows.getEscrowReply(route="/end/role")
+        for rpy in rpys:
+            serder = coring.Serder(ked=rpy)
+            payload = serder.ked['a']
+            keys = tuple(payload.values())
+            if keys in auths:
+                then = helping.fromIso8601(serder.ked["dt"])
+                stamp = auths[keys]
+
+                if stamp == then:
+                    continue
+
+                if then < stamp:
+                    print(f"authing {payload} - {then}")
+                    identifiers.addEndRole("multisig", role=payload["role"], eid=payload['eid'],
+                                           stamp=serder.ked["dt"])
+                    auths[keys] = then  # track signed role auths by timestamp signed
+
+    print("All endpoint role authorizations approved")
+
+
+def endrole_set(er, name):
+    ends = er.list(name=name)
+    return {(end['cid'], end['role'], end['eid']) for end in ends}
+
+
+def list_endroles():
+    client = SignifyClient(passcode=bran, tier=tier, url=url)
+
+    endroles = client.endroles()
+    print(endrole_set(endroles, "multisig"))
+
+
+if __name__ == "__main__":
+    authorize_endroles()
+    # list_endroles()

examples/scripts/stream_escrows.py

@@ -0,0 +1,35 @@
+# -*- encoding: utf-8 -*-
+"""
+SIGNIFY
+signify.app.clienting module
+
+Testing clienting with integration tests that require a running KERIA Cloud Agent
+"""
+import json
+from time import sleep
+
+from keri.app.keeping import Algos
+from keri.core.coring import Tiers
+from signify.app.clienting import SignifyClient
+
+
+def stream_escrows():
+    url = "http://localhost:3901"
+    bran = b'9876543210abcdefghijk'
+    tier = Tiers.low
+
+    client = SignifyClient(passcode=bran, tier=tier, url=url)
+
+    endroles = client.endroles()
+
+
+
+
+    escrows = client.escrows()
+
+    for rpy in escrows.getEscrowReplyIter(route="/end/role"):
+        print(rpy)
+
+
+if __name__ == "__main__":
+    stream_escrows()