@akashnetwork/chain-sdk 1.0.0-alpha.34 → 1.0.0-alpha.36

package/dist/types/generated/createProviderSDK.d.ts

@@ -74,6 +74,14 @@ export declare const serviceLoader: import("../sdk/client/createServiceLoader.ts
             readonly output: import("../encoding/typeEncodingHelpers.ts").MessageFns<akash_provider_lease_v1_service.ServiceLogsResponse, "akash.provider.lease.v1.ServiceLogsResponse">;
             readonly parent: /*elided*/ any;
         };
+        readonly attestationQuote: {
+            readonly name: "AttestationQuote";
+            readonly httpMethod: "post";
+            readonly httpPath: "/v1/lease/attestation/quote";
+            readonly input: import("../encoding/typeEncodingHelpers.ts").MessageFns<akash_provider_lease_v1_service.AttestationQuoteRequest, "akash.provider.lease.v1.AttestationQuoteRequest">;
+            readonly output: import("../encoding/typeEncodingHelpers.ts").MessageFns<akash_provider_lease_v1_service.AttestationQuoteResponse, "akash.provider.lease.v1.AttestationQuoteResponse">;
+            readonly parent: /*elided*/ any;
+        };
     };
 }>, () => Promise<{
     readonly typeName: "akash.provider.v1.ProviderRPC";
@@ -147,6 +155,12 @@ export declare function createSDK(transport: Transport): {
                      * streamServiceLogs
                      */
                     streamServiceLogs: (input: DeepPartial<akash_provider_lease_v1_service.ServiceLogsRequest>, options?: CallOptions) => Promise<AsyncIterable<akash_provider_lease_v1_service.ServiceLogsResponse>>;
+                    /**
+                     * attestationQuote requests hardware-signed attestation evidence from the
+                     * confidential compute sidecar. The provider forwards the tenant's nonce
+                     * to the sidecar and returns the hardware-signed quote verbatim.
+                     */
+                    attestationQuote: (input: DeepPartial<akash_provider_lease_v1_service.AttestationQuoteRequest>, options?: CallOptions) => Promise<akash_provider_lease_v1_service.AttestationQuoteResponse>;
                 };
             };
             v1: {

package/dist/types/generated/protos/akash/manifest/v2beta3/service.d.ts

@@ -15,11 +15,29 @@ export interface StorageParams {
 export interface ServicePermissions {
     read: string[];
 }
+/**
+ * TEEParams configures Trusted Execution Environment for the service.
+ * The type field selects the TEE capability and the provider resolves the
+ * runtime class based on its detected platform (TDX or SNP).
+ * The attestation field controls whether the provider injects an attestation sidecar.
+ */
+export interface TEEParams {
+    /** type is the TEE capability: cpu, cpu-gpu */
+    type: string;
+    /**
+     * attestation controls whether the provider injects an attestation sidecar.
+     * IMPORTANT: proto3 bool defaults to false, but the intended default is true.
+     * All producers MUST set this field explicitly. The Go SDL builder enforces
+     * this; non-Go clients must set attestation=true when sidecar injection is desired.
+     */
+    attestation: boolean;
+}
 /** ServiceParams */
 export interface ServiceParams {
     storage: StorageParams[];
     credentials: ImageCredentials | undefined;
     permissions: ServicePermissions | undefined;
+    tee: TEEParams | undefined;
 }
 /** Credentials to fetch image from registry */
 export interface ImageCredentials {
@@ -43,6 +61,7 @@ export interface Service {
 }
 export declare const StorageParams: MessageFns<StorageParams, "akash.manifest.v2beta3.StorageParams">;
 export declare const ServicePermissions: MessageFns<ServicePermissions, "akash.manifest.v2beta3.ServicePermissions">;
+export declare const TEEParams: MessageFns<TEEParams, "akash.manifest.v2beta3.TEEParams">;
 export declare const ServiceParams: MessageFns<ServiceParams, "akash.manifest.v2beta3.ServiceParams">;
 export declare const ImageCredentials: MessageFns<ImageCredentials, "akash.manifest.v2beta3.ImageCredentials">;
 export declare const Service: MessageFns<Service, "akash.manifest.v2beta3.Service">;

package/dist/types/generated/protos/akash/provider/lease/v1/service.d.ts

@@ -70,6 +70,46 @@ export interface ServiceStatusRequest {
 export interface ServiceStatusResponse {
     services: ServiceStatus[];
 }
+/**
+ * AttestationQuoteRequest is the request body for the AttestationQuote RPC method.
+ * The tenant generates a nonce and sends it; the provider forwards it verbatim
+ * to the attestation sidecar inside the confidential compute pod.
+ */
+export interface AttestationQuoteRequest {
+    leaseId: LeaseID | undefined;
+    /** Base64-encoded 64-byte nonce generated by the tenant. */
+    nonce: string;
+    /**
+     * When true, report_data is computed as SHA-512(tls_pubkey || nonce)[:64]
+     * to bind the attestation to the TLS channel.
+     */
+    bindTls: boolean;
+}
+/** AttestationGPUReport holds attestation evidence for a single GPU device. */
+export interface AttestationGPUReport {
+    deviceIndex: number;
+    /** Base64-encoded hardware-signed GPU attestation report. */
+    report: string;
+}
+/**
+ * AttestationQuoteResponse is the response from the AttestationQuote RPC method.
+ * Contains raw hardware-signed attestation evidence from the TEE sidecar.
+ * The provider never inspects or modifies any field.
+ */
+export interface AttestationQuoteResponse {
+    /** Base64-encoded CPU attestation report (SNP ~1184 bytes, TDX ~5243 bytes). */
+    report: string;
+    /** Base64-encoded certificate chain (may be empty). */
+    certChain: string;
+    /** TEE platform identifier: "snp", "tdx", "snp-gpu", "tdx-gpu". */
+    teePlatform: string;
+    /** Base64-encoded auxiliary blob (typically empty). */
+    auxblob: string;
+    /** Per-device GPU attestation reports for all CC-capable GPUs. */
+    gpuReports: AttestationGPUReport[];
+    /** Whether report_data was computed with TLS channel binding. */
+    tlsBound: boolean;
+}
 export declare const LeaseServiceStatus: MessageFns<LeaseServiceStatus, "akash.provider.lease.v1.LeaseServiceStatus">;
 export declare const LeaseIPStatus: MessageFns<LeaseIPStatus, "akash.provider.lease.v1.LeaseIPStatus">;
 export declare const ForwarderPortStatus: MessageFns<ForwarderPortStatus, "akash.provider.lease.v1.ForwarderPortStatus">;
@@ -82,3 +122,6 @@ export declare const ServiceLogsResponse: MessageFns<ServiceLogsResponse, "akash
 export declare const ShellRequest: MessageFns<ShellRequest, "akash.provider.lease.v1.ShellRequest">;
 export declare const ServiceStatusRequest: MessageFns<ServiceStatusRequest, "akash.provider.lease.v1.ServiceStatusRequest">;
 export declare const ServiceStatusResponse: MessageFns<ServiceStatusResponse, "akash.provider.lease.v1.ServiceStatusResponse">;
+export declare const AttestationQuoteRequest: MessageFns<AttestationQuoteRequest, "akash.provider.lease.v1.AttestationQuoteRequest">;
+export declare const AttestationGPUReport: MessageFns<AttestationGPUReport, "akash.provider.lease.v1.AttestationGPUReport">;
+export declare const AttestationQuoteResponse: MessageFns<AttestationQuoteResponse, "akash.provider.lease.v1.AttestationQuoteResponse">;

package/dist/types/generated/protos/akash/provider/lease/v1/service_akash.d.ts

@@ -1,4 +1,4 @@
-import { SendManifestRequest, SendManifestResponse, ServiceLogsRequest, ServiceLogsResponse, ServiceStatusRequest, ServiceStatusResponse } from "./service.ts";
+import { AttestationQuoteRequest, AttestationQuoteResponse, SendManifestRequest, SendManifestResponse, ServiceLogsRequest, ServiceLogsResponse, ServiceStatusRequest, ServiceStatusResponse } from "./service.ts";
 export declare const LeaseRPC: {
     readonly typeName: "akash.provider.lease.v1.LeaseRPC";
     readonly methods: {
@@ -34,5 +34,13 @@ export declare const LeaseRPC: {
             readonly output: import("../../../../../../encoding/typeEncodingHelpers.ts").MessageFns<ServiceLogsResponse, "akash.provider.lease.v1.ServiceLogsResponse">;
             readonly parent: /*elided*/ any;
         };
+        readonly attestationQuote: {
+            readonly name: "AttestationQuote";
+            readonly httpMethod: "post";
+            readonly httpPath: "/v1/lease/attestation/quote";
+            readonly input: import("../../../../../../encoding/typeEncodingHelpers.ts").MessageFns<AttestationQuoteRequest, "akash.provider.lease.v1.AttestationQuoteRequest">;
+            readonly output: import("../../../../../../encoding/typeEncodingHelpers.ts").MessageFns<AttestationQuoteResponse, "akash.provider.lease.v1.AttestationQuoteResponse">;
+            readonly parent: /*elided*/ any;
+        };
     };
 };

package/dist/types/generated/protos/akash/provider/v1/status.d.ts

@@ -1,4 +1,5 @@
 import type { MessageFns } from "../../../../../encoding/typeEncodingHelpers.ts";
+import { Duration } from "../../../google/protobuf/duration.ts";
 import { Quantity } from "../../../k8s.io/apimachinery/pkg/api/resource/generated.ts";
 import { Cluster } from "../../inventory/v1/cluster.ts";
 import { ResourcePair } from "../../inventory/v1/resourcepair.ts";
@@ -57,6 +58,7 @@ export interface Status {
     manifest: ManifestStatus | undefined;
     publicHostnames: string[];
     timestamp: Date | undefined;
+    reclamationWindow: Duration | undefined;
 }
 export declare const ResourcesMetric: MessageFns<ResourcesMetric, "akash.provider.v1.ResourcesMetric">;
 export declare const ResourcesMetric_StorageEntry: MessageFns<ResourcesMetric_StorageEntry, "akash.provider.v1.ResourcesMetric.StorageEntry">;

package/dist/types/generated/protos/index.provider.akash.v1.d.ts

@@ -6,6 +6,6 @@ export { NodeResources } from "./akash/inventory/v1/resources.ts";
 export { NodeCapabilities, Node } from "./akash/inventory/v1/node.ts";
 export { StorageInfo, Storage } from "./akash/inventory/v1/storage.ts";
 export { Cluster } from "./akash/inventory/v1/cluster.ts";
-export { LeaseServiceStatus, LeaseIPStatus, ForwarderPortStatus, ServiceStatus, SendManifestRequest, SendManifestResponse, ServiceLogsRequest, ServiceLogs, ServiceLogsResponse, ShellRequest, ServiceStatusRequest, ServiceStatusResponse } from "./akash/provider/lease/v1/service.ts";
+export { LeaseServiceStatus, LeaseIPStatus, ForwarderPortStatus, ServiceStatus, SendManifestRequest, SendManifestResponse, ServiceLogsRequest, ServiceLogs, ServiceLogsResponse, ShellRequest, ServiceStatusRequest, ServiceStatusResponse, AttestationQuoteRequest, AttestationGPUReport, AttestationQuoteResponse } from "./akash/provider/lease/v1/service.ts";
 export { ResourcesMetric, Leases, ReservationsMetric, Reservations, Inventory, ClusterStatus, BidEngineStatus, ManifestStatus, Status } from "./akash/provider/v1/status.ts";
 export { BidScreeningRequest, BidScreeningResponse } from "./akash/provider/v1/validation.ts";

package/dist/types/generated/protos/index.provider.akash.v2beta3.d.ts

@@ -1,4 +1,4 @@
 export { ServiceExposeHTTPOptions } from "./akash/manifest/v2beta3/httpoptions.ts";
 export { ServiceExpose } from "./akash/manifest/v2beta3/serviceexpose.ts";
-export { StorageParams, ServicePermissions, ServiceParams, ImageCredentials, Service } from "./akash/manifest/v2beta3/service.ts";
+export { StorageParams, ServicePermissions, TEEParams, ServiceParams, ImageCredentials, Service } from "./akash/manifest/v2beta3/service.ts";
 export { Group } from "./akash/manifest/v2beta3/group.ts";

package/dist/types/sdk/provider/auth/jwt/validateJwtPayload.d.ts

@@ -7,7 +7,7 @@ export type Leases = LeasesFull | LeasesScoped | LeasesGranular;
  *
  * @minItems 1
  */
-export type ActionScope = ("send-manifest" | "get-manifest" | "logs" | "shell" | "events" | "status" | "restart" | "hostname-migrate" | "ip-migrate")[];
+export type ActionScope = ("send-manifest" | "get-manifest" | "logs" | "shell" | "events" | "status" | "restart" | "hostname-migrate" | "ip-migrate" | "attestation")[];
 /**
  * Provider-level access: 'full' for all actions, 'scoped' for specific actions across all provider leases, 'granular' for deployment-specific actions.
  */
@@ -17,13 +17,13 @@ export type LeasePermission = LeasePermissionFull | LeasePermissionScoped | Leas
  *
  * @minItems 1
  */
-export type ActionScope1 = ("send-manifest" | "get-manifest" | "logs" | "shell" | "events" | "status" | "restart" | "hostname-migrate" | "ip-migrate")[];
+export type ActionScope1 = ("send-manifest" | "get-manifest" | "logs" | "shell" | "events" | "status" | "restart" | "hostname-migrate" | "ip-migrate" | "attestation")[];
 /**
  * Deployment-level list of permitted actions (no duplicates).
  *
  * @minItems 1
  */
-export type ActionScope2 = ("send-manifest" | "get-manifest" | "logs" | "shell" | "events" | "status" | "restart" | "hostname-migrate" | "ip-migrate")[];
+export type ActionScope2 = ("send-manifest" | "get-manifest" | "logs" | "shell" | "events" | "status" | "restart" | "hostname-migrate" | "ip-migrate" | "attestation")[];
 /**
  * JSON Schema for JWT used in the Akash Provider API.
  */

package/dist/types/sdl/validateSDL/validateSDLInput.d.ts

@@ -157,6 +157,7 @@ export interface SDLInput {
                 permissions?: {
                     read?: ("deployment" | "logs" | "events")[];
                 };
+                tee?: "cpu" | "cpu-gpu";
             };
         };
     };
@@ -806,6 +807,10 @@ declare var schema: {
                                 };
                                 type: string;
                             };
+                            tee: {
+                                type: string;
+                                enum: string[];
+                            };
                         };
                         type: string;
                     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akashnetwork/chain-sdk",
-  "version": "1.0.0-alpha.34",
+  "version": "1.0.0-alpha.36",
   "type": "module",
   "description": "Akash API TypeScript client",
   "keywords": [],