@absol-labs/agent 0.7.3 → 0.9.0

package/dist/wallet/secret-service-probe.js

@@ -0,0 +1,407 @@
+import { existsSync } from "node:fs";
+import { connect } from "node:net";
+/**
+ * Detects whether a freedesktop Secret Service provider (gnome-keyring,
+ * KeePassXC, KWallet, ...) is reachable on the D-Bus session bus.
+ *
+ * Why this exists: `@napi-rs/keyring` ships BOTH a `dbus-secret-service`
+ * backend and a `linux-keyutils` backend in the same native module and picks
+ * one at runtime. When no Secret Service provider answers on the session bus
+ * it silently falls through to `linux-keyutils` — the Linux *kernel* keyring,
+ * which lives in RAM and is destroyed on reboot. A credential written there
+ * looks durable (it round-trips across processes and SSH sessions) but is not,
+ * so an agent that provisioned a funded wallet loses its owner key on reboot.
+ *
+ * The keyring module exposes no API to report which backend it resolved, so the
+ * only way to know is to ask the session bus the same question it asks: does
+ * anyone own the well-known name `org.freedesktop.secrets`?
+ *
+ * This talks the D-Bus wire protocol directly over `node:net` (SASL EXTERNAL
+ * handshake, then `org.freedesktop.DBus.Hello` and `NameHasOwner`) so no extra
+ * dependency and no external binary is required. It is deliberately
+ * FAIL-CLOSED: any missing bus, malformed reply, protocol error or timeout
+ * reports "not available", which callers must treat as "not durable".
+ */
+const SECRET_SERVICE_BUS_NAME = "org.freedesktop.secrets";
+const DBUS_PATH = "/org/freedesktop/DBus";
+const DBUS_INTERFACE = "org.freedesktop.DBus";
+const DBUS_DESTINATION = "org.freedesktop.DBus";
+const MESSAGE_TYPE_METHOD_RETURN = 2;
+const MESSAGE_TYPE_ERROR = 3;
+const HEADER_FIELD_ERROR_NAME = 4;
+const HEADER_FIELD_REPLY_SERIAL = 5;
+const HEADER_FIELD_SIGNATURE = 8;
+const HELLO_SERIAL = 1;
+const NAME_HAS_OWNER_SERIAL = 2;
+function alignTo(value, alignment) {
+    const remainder = value % alignment;
+    return remainder === 0 ? value : value + (alignment - remainder);
+}
+/** Minimal little-endian D-Bus marshaller. Messages here are a few dozen bytes. */
+class ByteWriter {
+    bytes = [];
+    get length() {
+        return this.bytes.length;
+    }
+    byte(value) {
+        this.bytes.push(value & 0xff);
+    }
+    align(alignment) {
+        while (this.bytes.length % alignment !== 0)
+            this.bytes.push(0);
+    }
+    uint32(value) {
+        this.align(4);
+        this.bytes.push(value & 0xff, (value >>> 8) & 0xff, (value >>> 16) & 0xff, (value >>> 24) & 0xff);
+    }
+    raw(buffer) {
+        for (const byte of buffer)
+            this.bytes.push(byte);
+    }
+    /** DBus STRING / OBJECT_PATH: uint32 length, utf8 bytes, NUL. */
+    string(value) {
+        const encoded = Buffer.from(value, "utf8");
+        this.uint32(encoded.length);
+        this.raw(encoded);
+        this.byte(0);
+    }
+    /** DBus SIGNATURE: single length byte, ascii bytes, NUL. */
+    signature(value) {
+        const encoded = Buffer.from(value, "ascii");
+        this.byte(encoded.length);
+        this.raw(encoded);
+        this.byte(0);
+    }
+    toBuffer() {
+        return Buffer.from(this.bytes);
+    }
+}
+function encodeHeaderFields(fields) {
+    const writer = new ByteWriter();
+    for (const [code, field] of fields) {
+        // Each ARRAY-of-STRUCT element is 8-byte aligned. The field array always
+        // starts at message offset 16, which is itself 8-aligned, so writing this
+        // buffer standalone produces identical padding.
+        writer.align(8);
+        writer.byte(code);
+        writer.signature(field.type);
+        if (field.type === "u")
+            writer.uint32(field.value);
+        else if (field.type === "g")
+            writer.signature(field.value);
+        else
+            writer.string(field.value);
+    }
+    return writer.toBuffer();
+}
+/** Exported for unit tests: encodes one METHOD_CALL message. */
+export function encodeMethodCall(input) {
+    const body = input.body ?? Buffer.alloc(0);
+    const fields = [
+        [1, { type: "o", value: input.path }],
+        [2, { type: "s", value: input.interfaceName }],
+        [3, { type: "s", value: input.member }],
+        [6, { type: "s", value: input.destination }],
+    ];
+    if (input.signature !== undefined) {
+        fields.push([
+            HEADER_FIELD_SIGNATURE,
+            { type: "g", value: input.signature },
+        ]);
+    }
+    const encodedFields = encodeHeaderFields(fields);
+    const message = new ByteWriter();
+    message.byte(0x6c); // 'l' — little endian
+    message.byte(1); // METHOD_CALL
+    message.byte(0); // no flags
+    message.byte(1); // protocol version
+    message.uint32(body.length);
+    message.uint32(input.serial);
+    message.uint32(encodedFields.length);
+    message.raw(encodedFields);
+    message.align(8);
+    message.raw(body);
+    return message.toBuffer();
+}
+/** Exported for unit tests: encodes a single-STRING message body. */
+export function encodeStringBody(value) {
+    const writer = new ByteWriter();
+    writer.string(value);
+    return writer.toBuffer();
+}
+/**
+ * Exported for unit tests: decodes as many complete messages as `buffer` holds
+ * and returns the undecoded remainder. Throws on a malformed stream.
+ */
+export function decodeMessages(buffer) {
+    const messages = [];
+    let offset = 0;
+    while (buffer.length - offset >= 16) {
+        const start = offset;
+        const endian = buffer[start];
+        if (endian !== 0x6c && endian !== 0x42) {
+            throw new Error("invalid D-Bus endianness marker");
+        }
+        const littleEndian = endian === 0x6c;
+        const readUint32 = (at) => littleEndian ? buffer.readUInt32LE(at) : buffer.readUInt32BE(at);
+        const type = buffer[start + 1];
+        const bodyLength = readUint32(start + 4);
+        const serial = readUint32(start + 8);
+        const fieldsLength = readUint32(start + 12);
+        const bodyOffset = alignTo(16 + fieldsLength, 8);
+        const total = bodyOffset + bodyLength;
+        if (buffer.length - start < total)
+            break;
+        let replySerial;
+        let signature;
+        let errorName;
+        const fieldsEnd = 16 + fieldsLength;
+        let cursor = 16;
+        while (cursor < fieldsEnd) {
+            cursor = alignTo(cursor, 8);
+            if (cursor >= fieldsEnd)
+                break;
+            const code = buffer[start + cursor];
+            cursor += 1;
+            const typeLength = buffer[start + cursor];
+            cursor += 1;
+            const fieldType = buffer.toString("ascii", start + cursor, start + cursor + typeLength);
+            cursor += typeLength + 1;
+            if (fieldType === "u") {
+                cursor = alignTo(cursor, 4);
+                const value = readUint32(start + cursor);
+                cursor += 4;
+                if (code === HEADER_FIELD_REPLY_SERIAL)
+                    replySerial = value;
+            }
+            else if (fieldType === "s" || fieldType === "o") {
+                cursor = alignTo(cursor, 4);
+                const length = readUint32(start + cursor);
+                cursor += 4;
+                const value = buffer.toString("utf8", start + cursor, start + cursor + length);
+                cursor += length + 1;
+                if (code === HEADER_FIELD_ERROR_NAME)
+                    errorName = value;
+            }
+            else if (fieldType === "g") {
+                const length = buffer[start + cursor];
+                cursor += 1;
+                const value = buffer.toString("ascii", start + cursor, start + cursor + length);
+                cursor += length + 1;
+                if (code === HEADER_FIELD_SIGNATURE)
+                    signature = value;
+            }
+            else {
+                throw new Error(`unsupported D-Bus header field type "${fieldType}"`);
+            }
+            if (cursor > fieldsEnd) {
+                throw new Error("malformed D-Bus header fields");
+            }
+        }
+        messages.push({
+            type,
+            serial,
+            ...(replySerial === undefined ? {} : { replySerial }),
+            ...(signature === undefined ? {} : { signature }),
+            ...(errorName === undefined ? {} : { errorName }),
+            body: buffer.subarray(start + bodyOffset, start + total),
+            littleEndian,
+        });
+        offset = start + total;
+    }
+    return { messages, rest: buffer.subarray(offset) };
+}
+/** Exported for unit tests. */
+export function resolveSessionBusPath(env) {
+    const address = env.DBUS_SESSION_BUS_ADDRESS;
+    if (typeof address === "string" && address.trim() !== "") {
+        for (const entry of address.split(";")) {
+            const trimmed = entry.trim();
+            if (!trimmed.startsWith("unix:"))
+                continue;
+            const parameters = new Map();
+            for (const pair of trimmed.slice("unix:".length).split(",")) {
+                const separator = pair.indexOf("=");
+                if (separator > 0) {
+                    parameters.set(pair.slice(0, separator), pair.slice(separator + 1));
+                }
+            }
+            const path = parameters.get("path");
+            if (path !== undefined && path !== "")
+                return { kind: "path", path };
+            const abstract = parameters.get("abstract");
+            if (abstract !== undefined && abstract !== "") {
+                // Linux abstract namespace sockets are addressed with a leading NUL.
+                return { kind: "path", path: `\0${abstract}` };
+            }
+        }
+        return {
+            kind: "error",
+            detail: `DBUS_SESSION_BUS_ADDRESS has no usable unix transport (${address})`,
+        };
+    }
+    const runtimeDirectory = env.XDG_RUNTIME_DIR;
+    if (typeof runtimeDirectory === "string" && runtimeDirectory !== "") {
+        const candidate = `${runtimeDirectory.replace(/\/$/, "")}/bus`;
+        if (existsSync(candidate))
+            return { kind: "path", path: candidate };
+        return {
+            kind: "error",
+            detail: `no D-Bus session socket at ${candidate}`,
+        };
+    }
+    return {
+        kind: "error",
+        detail: "no D-Bus session bus (DBUS_SESSION_BUS_ADDRESS and XDG_RUNTIME_DIR are unset)",
+    };
+}
+/**
+ * Asks the D-Bus session bus whether `org.freedesktop.secrets` has an owner.
+ * Never throws; every failure path resolves to `available: false`.
+ */
+export async function probeSecretServiceAvailable(options = {}) {
+    const env = options.env ?? process.env;
+    const timeoutMs = options.timeoutMs ?? 2_000;
+    const address = resolveSessionBusPath(env);
+    if (address.kind === "error") {
+        return { available: false, detail: address.detail };
+    }
+    const uid = options.uid ??
+        (typeof process.getuid === "function" ? process.getuid() : 0);
+    return new Promise((resolve) => {
+        let socket;
+        try {
+            socket = connect({ path: address.path });
+        }
+        catch (error) {
+            resolve({
+                available: false,
+                detail: `could not connect to the D-Bus session bus: ${describe(error)}`,
+            });
+            return;
+        }
+        let settled = false;
+        let authenticated = false;
+        let buffer = Buffer.alloc(0);
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            socket.removeAllListeners();
+            socket.destroy();
+            resolve(result);
+        };
+        const timer = setTimeout(() => {
+            finish({
+                available: false,
+                detail: `D-Bus session bus did not answer within ${timeoutMs}ms`,
+            });
+        }, timeoutMs);
+        if (typeof timer.unref === "function")
+            timer.unref();
+        socket.on("error", (error) => {
+            finish({
+                available: false,
+                detail: `D-Bus session bus connection failed: ${describe(error)}`,
+            });
+        });
+        socket.on("close", () => {
+            finish({
+                available: false,
+                detail: "D-Bus session bus closed the connection before replying",
+            });
+        });
+        socket.on("connect", () => {
+            // SASL EXTERNAL: the NUL byte, then the uid as ASCII hex.
+            const identity = Buffer.from(String(uid), "ascii").toString("hex");
+            socket.write(`\0AUTH EXTERNAL ${identity}\r\n`);
+        });
+        socket.on("data", (chunk) => {
+            buffer = Buffer.concat([buffer, chunk]);
+            if (!authenticated) {
+                const terminator = buffer.indexOf("\r\n");
+                if (terminator < 0)
+                    return;
+                const line = buffer.toString("ascii", 0, terminator);
+                buffer = buffer.subarray(terminator + 2);
+                if (!line.startsWith("OK")) {
+                    finish({
+                        available: false,
+                        detail: `D-Bus session bus rejected authentication (${line})`,
+                    });
+                    return;
+                }
+                authenticated = true;
+                socket.write("BEGIN\r\n");
+                socket.write(encodeMethodCall({
+                    serial: HELLO_SERIAL,
+                    path: DBUS_PATH,
+                    interfaceName: DBUS_INTERFACE,
+                    member: "Hello",
+                    destination: DBUS_DESTINATION,
+                }));
+                socket.write(encodeMethodCall({
+                    serial: NAME_HAS_OWNER_SERIAL,
+                    path: DBUS_PATH,
+                    interfaceName: DBUS_INTERFACE,
+                    member: "NameHasOwner",
+                    destination: DBUS_DESTINATION,
+                    signature: "s",
+                    body: encodeStringBody(SECRET_SERVICE_BUS_NAME),
+                }));
+                if (buffer.length === 0)
+                    return;
+            }
+            let decoded;
+            try {
+                decoded = decodeMessages(buffer);
+            }
+            catch (error) {
+                finish({
+                    available: false,
+                    detail: `could not decode the D-Bus reply: ${describe(error)}`,
+                });
+                return;
+            }
+            buffer = decoded.rest;
+            for (const message of decoded.messages) {
+                if (message.replySerial !== NAME_HAS_OWNER_SERIAL)
+                    continue;
+                if (message.type === MESSAGE_TYPE_ERROR) {
+                    finish({
+                        available: false,
+                        detail: `D-Bus NameHasOwner failed (${message.errorName ?? "unknown error"})`,
+                    });
+                    return;
+                }
+                if (message.type !== MESSAGE_TYPE_METHOD_RETURN ||
+                    message.signature !== "b" ||
+                    message.body.length < 4) {
+                    finish({
+                        available: false,
+                        detail: "D-Bus returned an unexpected NameHasOwner reply",
+                    });
+                    return;
+                }
+                const owned = (message.littleEndian
+                    ? message.body.readUInt32LE(0)
+                    : message.body.readUInt32BE(0)) !== 0;
+                finish(owned
+                    ? {
+                        available: true,
+                        detail: `${SECRET_SERVICE_BUS_NAME} is owned on the D-Bus session bus`,
+                    }
+                    : {
+                        available: false,
+                        detail: `no process owns ${SECRET_SERVICE_BUS_NAME} on the D-Bus session bus`,
+                    });
+                return;
+            }
+        });
+    });
+}
+function describe(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=secret-service-probe.js.map

package/dist/wallet/secret-service-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-service-probe.js","sourceRoot":"","sources":["../../src/wallet/secret-service-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEhD,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAchC,SAAS,OAAO,CAAC,KAAa,EAAE,SAAiB;IAC/C,MAAM,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;IACpC,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU;IACG,KAAK,GAAa,EAAE,CAAC;IAEtC,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,IAAI,CACb,KAAK,GAAG,IAAI,EACZ,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI,EACpB,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,EACrB,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CACtB,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,iEAAiE;IACjE,MAAM,CAAC,KAAa;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IAED,4DAA4D;IAC5D,SAAS,CAAC,KAAa;QACrB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IAED,QAAQ;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;CACF;AAMD,SAAS,kBAAkB,CACzB,MAA0D;IAE1D,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,yEAAyE;QACzE,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;YAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;YACtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAYD,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAA+C;QACzD,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QAC9C,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACvC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;KAC7C,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,sBAAsB;YACtB,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;IACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAI3C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,KAAK,IAAI,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,EAAU,EAAU,EAAE,CACxC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;QAChC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,GAAG,UAAU,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,GAAG,KAAK;YAAE,MAAM;QAEzC,IAAI,WAA+B,CAAC;QACpC,IAAI,SAA6B,CAAC;QAClC,IAAI,SAA6B,CAAC;QAClC,MAAM,SAAS,GAAG,EAAE,GAAG,YAAY,CAAC;QACpC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,OAAO,MAAM,GAAG,SAAS,EAAE,CAAC;YAC1B,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5B,IAAI,MAAM,IAAI,SAAS;gBAAE,MAAM;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAE,CAAC;YACrC,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAC/B,OAAO,EACP,KAAK,GAAG,MAAM,EACd,KAAK,GAAG,MAAM,GAAG,UAAU,CAC5B,CAAC;YACF,MAAM,IAAI,UAAU,GAAG,CAAC,CAAC;YACzB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,CAAC;gBACZ,IAAI,IAAI,KAAK,yBAAyB;oBAAE,WAAW,GAAG,KAAK,CAAC;YAC9D,CAAC;iBAAM,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBAClD,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;gBAC1C,MAAM,IAAI,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAC3B,MAAM,EACN,KAAK,GAAG,MAAM,EACd,KAAK,GAAG,MAAM,GAAG,MAAM,CACxB,CAAC;gBACF,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;gBACrB,IAAI,IAAI,KAAK,uBAAuB;oBAAE,SAAS,GAAG,KAAK,CAAC;YAC1D,CAAC;iBAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAE,CAAC;gBACvC,MAAM,IAAI,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAC3B,OAAO,EACP,KAAK,GAAG,MAAM,EACd,KAAK,GAAG,MAAM,GAAG,MAAM,CACxB,CAAC;gBACF,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;gBACrB,IAAI,IAAI,KAAK,sBAAsB;oBAAE,SAAS,GAAG,KAAK,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,MAAM;YACN,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,UAAU,EAAE,KAAK,GAAG,KAAK,CAAC;YACxD,YAAY;SACb,CAAC,CAAC;QACH,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAMD,+BAA+B;AAC/B,MAAM,UAAU,qBAAqB,CAAC,GAAsB;IAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC;IAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;oBAClB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAC9C,qEAAqE;gBACrE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAE,EAAE,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,0DAA0D,OAAO,GAAG;SAC7E,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,GAAG,CAAC,eAAe,CAAC;IAC7C,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC;QAC/D,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,8BAA8B,SAAS,EAAE;SAClD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EACJ,+EAA+E;KAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,UAAqC,EAAE;IAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,GAAG,GACP,OAAO,CAAC,GAAG;QACX,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,OAAO,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,EAAE;QACvD,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,+CAA+C,QAAQ,CAAC,KAAK,CAAC,EAAE;aACzE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,MAAM,GAA4B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,CAAC,MAAgC,EAAQ,EAAE;YACxD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,2CAA2C,SAAS,IAAI;aACjE,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAErD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,CAAC;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,wCAAwC,QAAQ,CAAC,KAAK,CAAC,EAAE;aAClE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,yDAAyD;aAClE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,MAAM,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,UAAU,GAAG,CAAC;oBAAE,OAAO;gBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;gBACrD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;gBACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC;wBACL,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,8CAA8C,IAAI,GAAG;qBAC9D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1B,MAAM,CAAC,KAAK,CACV,gBAAgB,CAAC;oBACf,MAAM,EAAE,YAAY;oBACpB,IAAI,EAAE,SAAS;oBACf,aAAa,EAAE,cAAc;oBAC7B,MAAM,EAAE,OAAO;oBACf,WAAW,EAAE,gBAAgB;iBAC9B,CAAC,CACH,CAAC;gBACF,MAAM,CAAC,KAAK,CACV,gBAAgB,CAAC;oBACf,MAAM,EAAE,qBAAqB;oBAC7B,IAAI,EAAE,SAAS;oBACf,aAAa,EAAE,cAAc;oBAC7B,MAAM,EAAE,cAAc;oBACtB,WAAW,EAAE,gBAAgB;oBAC7B,SAAS,EAAE,GAAG;oBACd,IAAI,EAAE,gBAAgB,CAAC,uBAAuB,CAAC;iBAChD,CAAC,CACH,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;YAClC,CAAC;YACD,IAAI,OAA0C,CAAC;YAC/C,IAAI,CAAC;gBACH,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC;oBACL,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,qCAAqC,QAAQ,CAAC,KAAK,CAAC,EAAE;iBAC/D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YACtB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,OAAO,CAAC,WAAW,KAAK,qBAAqB;oBAAE,SAAS;gBAC5D,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBACxC,MAAM,CAAC;wBACL,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,8BAA8B,OAAO,CAAC,SAAS,IAAI,eAAe,GAAG;qBAC9E,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IACE,OAAO,CAAC,IAAI,KAAK,0BAA0B;oBAC3C,OAAO,CAAC,SAAS,KAAK,GAAG;oBACzB,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACvB,CAAC;oBACD,MAAM,CAAC;wBACL,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,iDAAiD;qBAC1D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GACT,CAAC,OAAO,CAAC,YAAY;oBACnB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;oBAC9B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CACJ,KAAK;oBACH,CAAC,CAAC;wBACE,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,GAAG,uBAAuB,oCAAoC;qBACvE;oBACH,CAAC,CAAC;wBACE,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,mBAAmB,uBAAuB,2BAA2B;qBAC9E,CACN,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/zktls/reclaim-js-sdk.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `@reclaimprotocol/js-sdk` is an OPTIONAL peer dependency: only consumers that
+ * actually generate/verify zkTLS delivery proofs (T2, issue #24) need it, and it
+ * carries a large transitive graph. The top-level "@absol-labs/agent" barrel
+ * DOES re-export the zkTLS modules, so those modules must import the SDK's
+ * TYPES only (`import type`, erased at compile time) and load the runtime module
+ * lazily through this loader at the point of first use.
+ *
+ * Deliberately NOT a top-level `await import(...)` (the pattern used by
+ * `../frameworks/langchain.ts`): that module is not barrel-reachable, this one
+ * is, and a top-level await would re-introduce the hard dependency at
+ * barrel-import time.
+ */
+type ReclaimJsSdkModule = typeof import("@reclaimprotocol/js-sdk");
+/** Memoized lazy load with an actionable missing-peer error. */
+export declare function loadReclaimJsSdk(): Promise<ReclaimJsSdkModule>;
+/**
+ * `@reclaimprotocol/zk-fetch` is the companion optional peer used to PRODUCE
+ * proofs (the SDK above verifies them). Same contract, same actionable error.
+ */
+type ReclaimZkFetchModule = typeof import("@reclaimprotocol/zk-fetch");
+export declare function loadReclaimZkFetch(): Promise<ReclaimZkFetchModule>;
+export {};
+//# sourceMappingURL=reclaim-js-sdk.d.ts.map

package/dist/zktls/reclaim-js-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reclaim-js-sdk.d.ts","sourceRoot":"","sources":["../../src/zktls/reclaim-js-sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,KAAK,kBAAkB,GAAG,cAAc,yBAAyB,CAAC,CAAC;AAInE,gEAAgE;AAChE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAUpE;AAED;;;GAGG;AACH,KAAK,oBAAoB,GAAG,cAAc,2BAA2B,CAAC,CAAC;AAIvE,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAUxE"}

package/dist/zktls/reclaim-js-sdk.js

@@ -0,0 +1,29 @@
+/**
+ * `@reclaimprotocol/js-sdk` is an OPTIONAL peer dependency: only consumers that
+ * actually generate/verify zkTLS delivery proofs (T2, issue #24) need it, and it
+ * carries a large transitive graph. The top-level "@absol-labs/agent" barrel
+ * DOES re-export the zkTLS modules, so those modules must import the SDK's
+ * TYPES only (`import type`, erased at compile time) and load the runtime module
+ * lazily through this loader at the point of first use.
+ *
+ * Deliberately NOT a top-level `await import(...)` (the pattern used by
+ * `../frameworks/langchain.ts`): that module is not barrel-reachable, this one
+ * is, and a top-level await would re-introduce the hard dependency at
+ * barrel-import time.
+ */
+let modulePromise;
+/** Memoized lazy load with an actionable missing-peer error. */
+export async function loadReclaimJsSdk() {
+    modulePromise ??= import("@reclaimprotocol/js-sdk").catch((error) => {
+        throw new Error("@absol-labs/agent zkTLS delivery-proof support requires the optional peer dependency '@reclaimprotocol/js-sdk'. Install it with `npm install @reclaimprotocol/js-sdk`.", { cause: error });
+    });
+    return await modulePromise;
+}
+let zkFetchModulePromise;
+export async function loadReclaimZkFetch() {
+    zkFetchModulePromise ??= import("@reclaimprotocol/zk-fetch").catch((error) => {
+        throw new Error("@absol-labs/agent zkTLS delivery-proof support requires the optional peer dependency '@reclaimprotocol/zk-fetch'. Install it with `npm install @reclaimprotocol/zk-fetch`.", { cause: error });
+    });
+    return await zkFetchModulePromise;
+}
+//# sourceMappingURL=reclaim-js-sdk.js.map

package/dist/zktls/reclaim-js-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reclaim-js-sdk.js","sourceRoot":"","sources":["../../src/zktls/reclaim-js-sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,IAAI,aAAsD,CAAC;AAE3D,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,aAAa,KAAK,MAAM,CAAC,yBAAyB,CAAC,CAAC,KAAK,CACvD,CAAC,KAAc,EAAE,EAAE;QACjB,MAAM,IAAI,KAAK,CACb,wKAAwK,EACxK,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC,CACF,CAAC;IACF,OAAO,MAAM,aAAa,CAAC;AAC7B,CAAC;AAQD,IAAI,oBAA+D,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,oBAAoB,KAAK,MAAM,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAChE,CAAC,KAAc,EAAE,EAAE;QACjB,MAAM,IAAI,KAAK,CACb,4KAA4K,EAC5K,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC,CACF,CAAC;IACF,OAAO,MAAM,oBAAoB,CAAC;AACpC,CAAC"}

package/dist/zktls/reclaim.d.ts

@@ -1,4 +1,4 @@
-import { verifyProof, type Proof as ReclaimProtocolProof, type RequestSpec, type VerifyProofResult } from "@reclaimprotocol/js-sdk";
+import type { verifyProof, Proof as ReclaimProtocolProof, RequestSpec, VerifyProofResult } from "@reclaimprotocol/js-sdk";
 import { z } from "zod";
 declare const responseMatchSchema: z.ZodObject<{
     type: z.ZodEnum<["regex", "contains"]>;
@@ -133,11 +133,23 @@ export declare class ResponseProofVerificationError extends Error {
 export declare class ReclaimConsumerProofService implements ConsumerDeliveryProofService {
     private readonly client;
     private readonly config;
-    private readonly verifyProofImpl;
+    /**
+     * Caller-supplied verifier, if any. NOT defaulted in the constructor: the real
+     * `verifyProof` lives in the optional peer `@reclaimprotocol/js-sdk`, which is
+     * loaded lazily at first use so that merely constructing this service — or
+     * importing the package barrel — never requires the peer to be installed.
+     * Resolved in {@link resolveVerifyProof}.
+     */
+    private readonly verifyProofOverride;
     constructor(config: ReclaimProofServiceConfig, options?: {
         readonly createClient?: (applicationId: string, applicationSecret: string, logs: boolean) => ReclaimClientLike;
         readonly verifyProof?: VerifyProofFn;
     });
+    /**
+     * The verifier to use: a caller-supplied override, else the optional peer's
+     * `verifyProof`, loaded on first use with an actionable missing-peer error.
+     */
+    private resolveVerifyProof;
     proveConsumedHttpsResponse(input: ProveConsumedHttpsResponseInput): Promise<VerifiedConsumedHttpsResponseProof>;
 }
 export declare function parseReclaimProofEnv(env?: NodeJS.ProcessEnv): ParsedReclaimProofEnv | null;

package/dist/zktls/reclaim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../src/zktls/reclaim.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,WAAW,EACX,KAAK,KAAK,IAAI,oBAAoB,EAClC,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;EAKvB,CAAC;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;EAa1B,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC7E,MAAM,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACzC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;QACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;QACxD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,sBAAsB,EAAE,CAAC;KAChE,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAC7B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;QAC3C,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;KACpD,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;CAAG;AAE3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CACL,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;;;;;;;;;WAWG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;KAC/B,EACD,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,eAAe,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;QAChD,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;QACvD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACtC,GACA,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,KACtC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEhC,MAAM,WAAW,4BAA4B;IAC3C,0BAA0B,CACxB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AA0BD,qBAAa,2BAA4B,YAAW,4BAA4B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgB;gBAG9C,MAAM,EAAE,yBAAyB,EACjC,OAAO,GAAE;QACP,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,EAAE,OAAO,KACV,iBAAiB,CAAC;QACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;KACjC;IAcF,0BAA0B,CAC9B,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,kCAAkC,CAAC;CAuG/C;AAED,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,GAAG,IAAI,CAoB9B;AAED,wBAAgB,wCAAwC,CACtD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,GAAG,IAAI,CAMpC;AAED,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,EAAE,OAAO,GACZ,iBAAiB,CAEnB;AAoBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjC,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,8BAA8B,GACpC,yBAAyB,CAW3B;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;CAC7E;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAC7B,WAAW,CAwBb;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAErD"}
+{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../src/zktls/reclaim.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,WAAW,EACX,KAAK,IAAI,oBAAoB,EAC7B,WAAW,EACX,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;EAKvB,CAAC;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;EAa1B,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC7E,MAAM,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACzC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;QACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;QACxD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,sBAAsB,EAAE,CAAC;KAChE,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAC7B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;QAC3C,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;KACpD,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;CAAG;AAE3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CACL,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;;;;;;;;;WAWG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;KAC/B,EACD,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,eAAe,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;QAChD,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;QACvD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACtC,GACA,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,KACtC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEhC,MAAM,WAAW,4BAA4B;IAC3C,0BAA0B,CACxB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AA0BD,qBAAa,2BAA4B,YAAW,4BAA4B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA4B;gBAG9D,MAAM,EAAE,yBAAyB,EACjC,OAAO,GAAE;QACP,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,EAAE,OAAO,KACV,iBAAiB,CAAC;QACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;KACjC;IAcR;;;OAGG;YACW,kBAAkB;IAK1B,0BAA0B,CAC9B,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,kCAAkC,CAAC;CAsH/C;AAED,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,GAAG,IAAI,CAoB9B;AAED,wBAAgB,wCAAwC,CACtD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,GAAG,IAAI,CAMpC;AAED,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,EAAE,OAAO,GACZ,iBAAiB,CAEnB;AAoBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjC,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,8BAA8B,GACpC,yBAAyB,CAW3B;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;CAC7E;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAC7B,WAAW,CAwBb;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAErD"}

package/dist/zktls/reclaim.js

@@ -1,5 +1,5 @@
-import { getHttpProviderClaimParamsFromProof, getProviderHashRequirementsFromSpec, verifyProof, } from "@reclaimprotocol/js-sdk";
 import { z } from "zod";
+import { loadReclaimJsSdk } from "./reclaim-js-sdk.js";
 const addressSchema = z.string().regex(/^0x[0-9a-fA-F]{40}$/);
 const bytes32Schema = z.string().regex(/^0x[0-9a-fA-F]{64}$/);
 const httpMethodSchema = z.enum(["GET", "POST", "PUT"]);
@@ -57,14 +57,30 @@ const reclaimProofInputSchema = z.object({
 export class ReclaimConsumerProofService {
     client;
     config;
-    verifyProofImpl;
+    /**
+     * Caller-supplied verifier, if any. NOT defaulted in the constructor: the real
+     * `verifyProof` lives in the optional peer `@reclaimprotocol/js-sdk`, which is
+     * loaded lazily at first use so that merely constructing this service — or
+     * importing the package barrel — never requires the peer to be installed.
+     * Resolved in {@link resolveVerifyProof}.
+     */
+    verifyProofOverride;
     constructor(config, options = {}) {
         this.config = {
             ...config,
             logs: config.logs ?? false,
         };
         this.client = (options.createClient ?? defaultReclaimClientFactory)(this.config.applicationId, this.config.applicationSecret, this.config.logs ?? false);
-        this.verifyProofImpl = options.verifyProof ?? verifyProof;
+        this.verifyProofOverride = options.verifyProof;
+    }
+    /**
+     * The verifier to use: a caller-supplied override, else the optional peer's
+     * `verifyProof`, loaded on first use with an actionable missing-peer error.
+     */
+    async resolveVerifyProof() {
+        if (this.verifyProofOverride !== undefined)
+            return this.verifyProofOverride;
+        return (await loadReclaimJsSdk()).verifyProof;
     }
     async proveConsumedHttpsResponse(input) {
         const parsed = reclaimProofInputSchema.parse(input);
@@ -101,8 +117,14 @@ export class ReclaimConsumerProofService {
         if (proof === undefined) {
             throw new ResponseProofUnavailableError("reclaim returned no zkTLS response proof");
         }
-        const verification = await this.verifyProofImpl(proof, {
-            ...getProviderHashRequirementsFromSpec({
+        // Both the verifier and the provider-hash helper live in the optional peer;
+        // load it once here rather than importing it at module scope.
+        const [verifyProofFn, reclaimSdk] = await Promise.all([
+            this.resolveVerifyProof(),
+            loadReclaimJsSdk(),
+        ]);
+        const verification = await verifyProofFn(proof, {
+            ...reclaimSdk.getProviderHashRequirementsFromSpec({
                 requests: [toRequestSpec(parsed, method)],
             }),
             ...(parsed.useTee === true
@@ -120,7 +142,8 @@ export class ReclaimConsumerProofService {
         if (trusted === undefined) {
             throw new ResponseProofVerificationError("zkTLS response proof verification returned no trusted data");
         }
-        const request = getHttpProviderClaimParamsFromProof(proof);
+        // Same optional peer, already memoized by the loader above.
+        const request = reclaimSdk.getHttpProviderClaimParamsFromProof(proof);
         return {
             proof,
             request: {