feat: trigger content claims from piece cid

[vasco-santos]

Needs:

• Upgrade dep + Tests
• Set env variables
• feat: trigger aggregator from pieces computed #229

[vasco-santos]

todo once dep available

[vasco-santos]

Needs storacha/content-claims#19

[seed-deploy]

View stack outputs

• pr230-w3infra-CarparkStack

  Name	Value
  BucketName	carpark-pr230-0
  Region	us-east-2

• pr230-w3infra-RoundaboutStack

  Name	Value
  ApiEndpoint	https://pa1kir5us7.execute-api.us-east-2.amazonaws.com
  CustomDomain	https://pr230.roundabout.web3.storage

• pr230-w3infra-SatnavStack

  Name	Value
  BucketName	satnav-pr230-0
  Region	us-east-2

• pr230-w3infra-UploadApiStack

  Name	Value
  ApiEndpoint	https://xz6cpbet41.execute-api.us-east-2.amazonaws.com
  CustomDomain	https://pr230.up.web3.storage

• pr230-w3infra-BusStack

• pr230-w3infra-FilecoinStack

• pr230-w3infra-ReplicatorStack

• pr230-w3infra-UcanInvocationStack

• pr230-w3infra-UploadDbStack

[alanshaw]

Suggested change

	did: aggregatorDid,
	url: aggregatorUrl
	did: contentClaimsDid,
	url: contentClaimsUrl

[alanshaw]

You either need to use the claims service private key or delegate assert/equals to this issuer from the claims service (and include it as a proof).

[vasco-santos]

Added private key as secret as we talked

[alanshaw]

Code changes LGTM 🚀

[alanshaw]

One thing I did when integrating claims with the current web3.storage API was allow a proof to be passed.

You need to sign a UCAN with a private key and provide proof that you have the capability. When the private key is the private key of the content claims service no proof is needed (you are self signing). When it's a different private key you need to have a delagation for assert/equals as proof.

By allowing a proof to be passed you enable both cases. It just means we can switch to the latter case in the future without code changes.

Not blocking...but should be easy to implement:

https://github.com/web3-storage/web3.storage/blob/1cc9707af6a10bccec4dd93888cf1d5fc1a8c0cb/packages/api/src/env.js#L232-L248

[vasco-santos]

Written content claims to staging 🎉

➜  content-claims git:(main) ✗ node packages/cli/bin.js read bagbaiera7xsk333k7wm67rbgcq7lxncqhbil2w725m6clcb7rzg7wqkolxwa --verbose 
WARN: using did:web:staging.claims.web3.storage
�㖲�p\m���}ߵroots��*X%q <6bX�����T!�>�Hx���y�9�]�@gversion�q  �X¾�g6��a�`�;7����asXD��@:Z�-q;Pz(        �k�p�+  L�,��]�i�|U�
�6=gcontent�*X&� ���j����&>��P8P�[��<%�?�M�AN]�ccanmassert/equalsdwithx#did:web:staging.claims.web3.storagecaudX!�web:staging.claims.web3.storagecexpe
��cissX!�web:staging.claims.web3.storagecprf�Yq <6bX�����T!�>�Hx���y�9�]�@�jucan@0.9.1�*X%q  �X¾�g6��a�`�;7���{
  iss: 'did:web:staging.claims.web3.storage',
  aud: 'did:web:staging.claims.web3.storage',
  v: '0.9.1',
  s: {
    '/': {
      bytes: '7aEDQDpaiy1xO1B6KAmxa9xwqysJTN8s0OVd0mkcoXxV8w0d/OOWsqVwXG38gY1937UMLvRJjbMvK5WIBM1UN3pHjwQ'
    }
  },
  exp: 1695203468,
  att: [
    {
      can: 'assert/equals',
      nb: {
        content: {
          '/': 'bagbaiera7xsk333k7wm67rbgcq7lxncqhbil2w725m6clcb7rzg7wqkolxwa'
        },
        equals: {
          '/': 'bafkzcibbandcag7o7h6n5elb4o5felutjoss53wyhi7otjvhz4mpmaqn4a3d2'
        }
      },
      with: 'did:web:staging.claims.web3.storage'
    }
  ],
  prf: [],
  '/': 'bafyreia32c3cbzkyyk7jezzwawoncyo2malkagomxibb2chnhm3qjmmuxe'
}
➜  content-claims git:(main) ✗ 
➜  content-claims git:(main) ✗ 
➜  content-claims git:(main) ✗ node packages/cli/bin.js read bafkzcibbandcag7o7h6n5elb4o5felutjoss53wyhi7otjvhz4mpmaqn4a3d2 --verbose
WARN: using did:web:staging.claims.web3.storage
�㖲�p\m���}ߵroots��*X%q <6bX�����T!�>�Hx���y�9�]�@gversion�q  �X¾�g6��a�`�;7����asXD��@:Z�-q;Pz(        �k�p�+  L�,��]�i�|U�
�6=gcontent�*X&� ���j����&>��P8P�[��<%�?�M�AN]�ccanmassert/equalsdwithx#did:web:staging.claims.web3.storagecaudX!�web:staging.claims.web3.storagecexpe
��cissX!�web:staging.claims.web3.storagecprf�Yq <6bX�����T!�>�Hx���y�9�]�@�jucan@0.9.1�*X%q  �X¾�g6��a�`�;7���{
  iss: 'did:web:staging.claims.web3.storage',
  aud: 'did:web:staging.claims.web3.storage',
  v: '0.9.1',
  s: {
    '/': {
      bytes: '7aEDQDpaiy1xO1B6KAmxa9xwqysJTN8s0OVd0mkcoXxV8w0d/OOWsqVwXG38gY1937UMLvRJjbMvK5WIBM1UN3pHjwQ'
    }
  },
  exp: 1695203468,
  att: [
    {
      can: 'assert/equals',
      nb: {
        content: {
          '/': 'bagbaiera7xsk333k7wm67rbgcq7lxncqhbil2w725m6clcb7rzg7wqkolxwa'
        },
        equals: {
          '/': 'bafkzcibbandcag7o7h6n5elb4o5felutjoss53wyhi7otjvhz4mpmaqn4a3d2'
        }
      },
      with: 'did:web:staging.claims.web3.storage'
    }
  ],
  prf: [],
  '/': 'bafyreia32c3cbzkyyk7jezzwawoncyo2malkagomxibb2chnhm3qjmmuxe'
}