交付物

const DELIVERABLE_TYPES = [
  'text', 'data', 'document', 'code', 'model',
  'binary', 'stream', 'interactive', 'composite',
] as const;
type DeliverableType = (typeof DELIVERABLE_TYPES)[number];

function resolveDeliverableType(value: string): DeliverableType {
  if (isDeliverableType(value)) return value;
  const alias = LEGACY_TYPE_ALIASES[value];
  if (alias) return alias;
  throw new Error(`Unknown deliverable type: ${value}`);
}

const CONTENT_FORMATS = [
  // Text
  'text/plain', 'text/markdown', 'text/html', 'text/csv',
  // Structured
  'application/json', 'application/jsonl', 'application/xml',
  'application/parquet', 'application/yaml',
  // Code
  'application/javascript', 'application/typescript', 'application/python',
  'application/wasm', 'application/notebook+json',
  // Binary
  'application/octet-stream', 'application/zip', 'application/gzip',
  'application/tar+gzip',
  // Image
  'image/png', 'image/jpeg', 'image/svg+xml', 'image/webp',
  // Audio / Video
  'audio/wav', 'audio/mp3', 'video/mp4',
  // Model
  'application/x-onnx', 'application/x-safetensors', 'application/x-gguf',
  // Stream
  'text/event-stream', 'application/x-ndjson',
  // Interactive
  'application/vnd.clawnet.endpoint+json',
] as const;

type ContentFormat = (typeof CONTENT_FORMATS)[number] | string;

interface DeliverableEnvelope {
  /** Deterministic ID: SHA-256(contextId + producer + nonce + createdAt), hex */
  id: string;

  /** Cryptographic nonce (hex, 32 bytes) for replay prevention */
  nonce: string;

  /**
   * Business context — the order/contract/lease this delivery belongs to.
   * Maps to: orderId (info/task), contractId:milestoneIndex (service contract),
   * leaseId (capability market).
   */
  contextId: string;

  /** Deliverable type from unified taxonomy */
  type: DeliverableType;

  /** MIME type of the content */
  format: ContentFormat;

  /** Human-readable name */
  name: string;

  /** Optional description */
  description?: string;

  // ── Content addressing ──────────────────────────────────

  /** BLAKE3 hash of the plaintext content (hex, 64 chars) */
  contentHash: string;

  /** Content size in bytes (plaintext, before encryption) */
  size: number;

  // ── Provenance ──────────────────────────────────────────

  /** DID of the producer */
  producer: string;

  /** Ed25519 signature over canonical(envelope-without-signature) */
  signature: string;

  /** ISO 8601 timestamp of creation */
  createdAt: string;

  // ── Encryption (absent = plaintext) ─────────────────────

  encryption?: DeliverableEncryption;

  // ── Transport ───────────────────────────────────────────

  transport: InlineTransport | ExternalTransport | StreamTransport | EndpointTransport;

  // ── Schema (v2) ─────────────────────────────────────────

  schema?: DeliverableSchema;

  // ── Composite ───────────────────────────────────────────

  /** Child deliverable IDs (only for type = 'composite') */
  parts?: string[];

  // ── Legacy markers ──────────────────────────────────────

  /** True if this envelope was auto-generated from legacy format */
  legacy?: boolean;
  /** 'producer' for client-signed, 'node' for server-wrapped legacy */
  signedBy?: 'producer' | 'node';
}

DOMAIN_PREFIX  = "clawnet:deliverable:v1:"
signingBytes   = utf8(DOMAIN_PREFIX) + JCS(envelope \ {signature})
signature      = base58btc(Ed25519.sign(signingBytes, privateKey))

contentHash = hex(BLAKE3(plaintext_bytes))

interface DeliverableEncryption {
  algorithm: 'x25519-aes-256-gcm';
  keyEnvelopes: Record<string, DeliverableKeyEnvelope>;
  nonce: string;     // Content encryption nonce (hex)
  tag: string;       // Content encryption auth tag (hex)
}

interface DeliverableKeyEnvelope {
  senderPublicKeyHex: string;     // Producer's ephemeral X25519 public key
  nonceHex: string;               // Key-wrapping nonce
  ciphertextHex: string;          // Wrapped content key
  tagHex: string;                 // Key-wrapping auth tag
}

interface InlineTransport {
  method: 'inline';
  data: string;     // Base64-encoded content
}

interface ExternalTransport {
  method: 'external';
  uri: string;               // IPFS CID, HTTPS URL, or P2P stream URI
  encryptedHash?: string;    // BLAKE3 hash of the encrypted blob (for pre-decrypt verification)
}

interface StreamTransport {
  method: 'stream';
  endpoint: string;                // SSE/WebSocket/gRPC endpoint
  protocol: 'sse' | 'websocket' | 'grpc-stream';
  tokenHash: string;               // BLAKE3(sessionToken) — binding verification
  finalHash?: string;              // Populated after stream completion
}

interface EndpointTransport {
  method: 'endpoint';
  baseUrl: string;          // https://agent.example.com/api/v1
  specRef?: string;         // OpenAPI spec hash or URL
  tokenHash: string;        // BLAKE3(accessToken) — binding verification
  expiresAt: string;        // ISO 8601 lease expiry
}

envelopeDigest = hex(BLAKE3(JCS(envelope)))
on-chain deliverableHash = bytes32(envelopeDigest)

// Correct: no double-hashing
async submitMilestone(contractId: string, index: number, envelopeDigest: string) {
  const id = this.hash(contractId);     // contractId → keccak256 (contract's internal key)
  const digest = envelopeDigest.startsWith('0x') ? envelopeDigest : `0x${envelopeDigest}`;
  await this.contracts.serviceContracts.submitMilestone(id, index, digest);
}

evidenceHash = bytes32(BLAKE3(JCS(evidenceEnvelope)))

interface AcceptanceTest {
  id: string;
  name: string;
  type: 'script' | 'assertion' | 'manual';
  scriptHash?: string;              // Content hash of test script (for 'script')
  assertions?: Array<{
    field: string;                  // JSONPath expression
    operator: 'eq' | 'gt' | 'lt' | 'contains' | 'matches';
    value: unknown;
  }>;
  required: boolean;                // Does this test block acceptance?
}