@antseed/antseed-verifier 0.1.0

package/dist/collect/http.js

@@ -0,0 +1,83 @@
+/**
+ * Generic HTTP collector: it fetches a TDX quote from a seller-configured attestation endpoint.
+ * Everything provider-specific (host, path, JSON location of the quote) comes from the caller
+ * — no hardcoded hosts or schemas — so any HTTP attestation service wires up through config
+ * alone. The {nonce} placeholder in `urlTemplate` is replaced with the hex nonce. `field` is a
+ * dot-path to the base64 quote in the response (e.g. "quote" or "data.quote").
+ */
+/** Resolve a dot-separated path (e.g. "data.quote") against a parsed JSON value. */
+function pluck(obj, path) {
+    return path.split('.').reduce((acc, key) => {
+        if (acc && typeof acc === 'object' && key in acc) {
+            return acc[key];
+        }
+        return undefined;
+    }, obj);
+}
+/** Hard timeout on an outbound evidence fetch — a hung or slow provider cannot stall the round. */
+const FETCH_TIMEOUT_MS = 20_000;
+/** Reject an over-large declared response body so a hostile endpoint cannot force an OOM parse. */
+const MAX_RESPONSE_BYTES = 4 * 1024 * 1024;
+/** Replace {nonce}, fetch with a timeout and size guard, then parse JSON. */
+async function fetchAttestJson(urlTemplate, nonce) {
+    const url = urlTemplate.replace(/\{nonce\}/g, Buffer.from(nonce).toString('hex'));
+    const resp = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+    if (!resp.ok) {
+        throw new Error(`http attestation endpoint returned HTTP ${resp.status}`);
+    }
+    const declared = Number(resp.headers?.get('content-length') ?? '0');
+    if (declared > MAX_RESPONSE_BYTES) {
+        throw new Error(`http attestation response too large (${declared} bytes)`);
+    }
+    return resp.json();
+}
+/**
+ * Fetch the provider evidence route once. It returns the base64-decoded quote and, when a pubkey
+ * field is named, the report_data-binding pubkey string. One fetch keeps the quote and the pubkey
+ * from the same response — a two-fetch split could pair a quote with a different instance's key.
+ */
+export async function collectTdxAndPubkey(urlTemplate, nonce, quoteField, pubkeyField) {
+    const json = await fetchAttestJson(urlTemplate, nonce);
+    const q = pluck(json, quoteField);
+    if (typeof q !== 'string' || q.length === 0) {
+        throw new Error(`http attestation response has no base64 quote at "${quoteField}"`);
+    }
+    const quote = new Uint8Array(Buffer.from(q, 'base64'));
+    if (quote.length === 0) {
+        throw new Error(`http attestation quote at "${quoteField}" is not valid base64`);
+    }
+    if (!pubkeyField)
+        return { quote };
+    const pk = pluck(json, pubkeyField);
+    if (typeof pk !== 'string' || pk.length === 0) {
+        throw new Error(`http attestation response has no string at "${pubkeyField}"`);
+    }
+    return { quote, pubkey: pk };
+}
+export async function collectViaHttp(urlTemplate, nonce, field) {
+    const json = await fetchAttestJson(urlTemplate, nonce);
+    const value = pluck(json, field);
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`http attestation response has no base64 quote at "${field}"`);
+    }
+    const quote = new Uint8Array(Buffer.from(value, 'base64'));
+    if (quote.length === 0) {
+        throw new Error(`http attestation quote at "${field}" is not valid base64`);
+    }
+    return quote;
+}
+/**
+ * Like collectViaHttp, but it returns the extracted field re-encoded as JSON bytes instead of
+ * base64-decoding it. Why separate: the TDX path wants a lone base64 quote decoded to raw bytes;
+ * the GPU path's field holds a structured value (e.g. { arch, evidence_list }) whose shape must
+ * survive intact to the NRAS submit, so the code keeps it as JSON rather than decode it.
+ */
+export async function collectJsonFieldViaHttp(urlTemplate, nonce, field) {
+    const json = await fetchAttestJson(urlTemplate, nonce);
+    const value = pluck(json, field);
+    if (value === undefined || value === null) {
+        throw new Error(`http attestation response has no value at "${field}"`);
+    }
+    return new TextEncoder().encode(JSON.stringify(value));
+}
+//# sourceMappingURL=http.js.map

package/dist/collect/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/collect/http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,oFAAoF;AACpF,SAAS,KAAK,CAAC,GAAY,EAAE,IAAY;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAK,GAA+B,EAAE,CAAC;YAC9E,OAAQ,GAA+B,CAAC,GAAG,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,EAAE,GAAG,CAAC,CAAA;AACT,CAAC;AAED,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,mGAAmG;AACnG,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAE1C,6EAA6E;AAC7E,KAAK,UAAU,eAAe,CAAC,WAAmB,EAAE,KAAiB;IACnE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACjF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAChF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;IACnE,IAAI,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,SAAS,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAA;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB,EACnB,KAAiB,EACjB,UAAkB,EAClB,WAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qDAAqD,UAAU,GAAG,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,uBAAuB,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IACnC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,GAAG,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,KAAiB,EACjB,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,GAAG,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,uBAAuB,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,KAAiB,EACjB,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,GAAG,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;AACxD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+import verifierPlugin from './verifier.js';
+/**
+ * One package, two halves — both named `antseed-verifier`. The monorepo
+ * plugin loader imports this module and picks the export matching the requested kind:
+ *   - type:'verifier' -> the default export (buyer half)
+ *   - type:'prover'   -> the `prover` export  (seller half; embedded, not a provider)
+ */
+export default verifierPlugin;
+export declare const prover: import("./antseed-node-types.js").Prover;
+export type { AntseedPluginBase, AntseedVerifierPlugin, Prover, VerifyContext, VerifyResult, ClaimResult, SellerRequest, SellerResponse, } from './antseed-node-types.js';
+export { generateTdxQuote } from './collect/configfs.js';
+export { generateDstackQuote } from './collect/dstack.js';
+export type { Capability, CapabilityVerifyInput, CapabilityCollectInput, } from './capability.js';
+export { registerCapability, getCapability, listCapabilities, capabilityIds, } from './capability.js';
+export { nodeTeeCapability, providerTeeCapability, sellerBoundCapability, measuredImageCapability, gpuNvidiaCapability, providerClaimsCapability, } from './caps/index.js';
+export { PROVIDER_CLAIMS_CAP_ID, PROVIDER_CLAIMS_MENU, PROVIDER_REPORT_DATA_DOMAIN, claimsConfigKey, claimsReportData, } from './caps/provider-claims.js';
+export type { ProviderClaimDefinition } from './caps/provider-claims.js';
+export { readMeasuredImagePolicy, readRequiredCaps } from './verifier.js';
+export { antseedRdV1, noncePubkeySha256V1, aciKeysetV1, getReportDataScheme, verifyReportData, REPORT_DATA_SCHEMES, } from './report-data.js';
+export type { ReportDataScheme, BindingIngredients } from './report-data.js';
+export { loadAdapter, adapterIds } from './adapters/index.js';
+export type { ProviderAdapter, ProviderEvidence } from './adapters/index.js';
+export type { ReportDataBinding } from './caps/tee-tdx.js';
+export { runVerify } from './verifier.js';
+export { makeTdxCap, defaultVerifyQuote, verifyTdxEvidence, isTcbAcceptable, NODE_TEE_CAP_ID, PROVIDER_TEE_CAP_ID, } from './caps/tee-tdx.js';
+export type { VerifyQuoteFn, RawTdxVerification, ParsedTdxQuote, TdMeasurements } from './caps/tee-tdx.js';
+export type { ApprovedMeasurement, MeasuredImagePolicy } from './caps/measured-image.js';
+export { makeGpuNvidiaCap, makeNrasGpuVerify, nrasGpuVerify, localGpuVerify, defaultGpuVerify, } from './caps/gpu-nvidia.js';
+export type { GpuVerifyFn, GpuVerification, NrasOptions } from './caps/gpu-nvidia.js';
+export { NRAS_GPU_ATTEST_URL_DEFAULT, NRAS_JWKS_URL_DEFAULT, buildNrasRequest, verifyEar, } from './nras.js';
+export type { NvidiaGpuEvidence, NrasEvidenceItem, NrasRequest, NrasSubmitFn, EarVerification } from './nras.js';
+export { VERIFIER_ID, ATTEST_PATH, claimId, computeReportData, bundleDigest, sellerBoundPreimage, } from './shared.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,eAAe,CAAA;AAG1C;;;;;GAKG;AACH,eAAe,cAAc,CAAA;AAC7B,eAAO,MAAM,MAAM,0CAAe,CAAA;AAGlC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,MAAM,EACN,aAAa,EACb,YAAY,EACZ,WAAW,EACX,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAA;AAIhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAGzD,YAAY,EACV,UAAU,EACV,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,iBAAiB,CAAA;AAKxB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAIxE,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAKzE,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAK5E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC7D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAG1D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAC1G,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAGxF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,GACV,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAGhH,OAAO,EACL,WAAW,EACX,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,GACpB,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,40 @@
+import verifierPlugin from './verifier.js';
+import proverPlugin from './prover.js';
+/**
+ * One package, two halves — both named `antseed-verifier`. The monorepo
+ * plugin loader imports this module and picks the export matching the requested kind:
+ *   - type:'verifier' -> the default export (buyer half)
+ *   - type:'prover'   -> the `prover` export  (seller half; embedded, not a provider)
+ */
+export default verifierPlugin;
+export const prover = proverPlugin;
+// Self-hosted TDX quote minting — for provider tooling that adopts antseed-rd-v1.
+// configfs-tsm (bare-metal or GCP TDX) and the dstack guest agent (Phala CVMs).
+export { generateTdxQuote } from './collect/configfs.js';
+export { generateDstackQuote } from './collect/dstack.js';
+export { registerCapability, getCapability, listCapabilities, capabilityIds, } from './capability.js';
+export { nodeTeeCapability, providerTeeCapability, sellerBoundCapability, measuredImageCapability, gpuNvidiaCapability, providerClaimsCapability, } from './caps/index.js';
+// Provider-claims: the SDK-frozen claims menu (the per-version claim definitions buyers
+// verify against) and the canonical provider report_data scheme (domain tag + the [0:32]
+// commitment provider tooling computes when it binds a claims document into its TDX quote).
+export { PROVIDER_CLAIMS_CAP_ID, PROVIDER_CLAIMS_MENU, PROVIDER_REPORT_DATA_DOMAIN, claimsConfigKey, claimsReportData, } from './caps/provider-claims.js';
+// Buyer policy loaders (read from env): the measured-image allow-list, and the required-cap
+// set that gates the overall verdict (default node-tee + seller-bound; overridable).
+export { readMeasuredImagePolicy, readRequiredCaps } from './verifier.js';
+// Report_data binding schemes — the frozen registry the buyer verifies provider quotes against.
+// antseedRdV1 is the canonical compositional scheme (the node cap is its {peerId} instance);
+// noncePubkeySha256V1 is the foreign Chutes construction, replicated only to verify their quotes.
+export { antseedRdV1, noncePubkeySha256V1, aciKeysetV1, getReportDataScheme, verifyReportData, REPORT_DATA_SCHEMES, } from './report-data.js';
+// In-process provider adapters — bridge a foreign provider's evidence API to the SDK's neutral
+// shape, selected by ANTSEED_VERIFIER_PROVIDER_ADAPTER. The core stays provider-agnostic; each
+// adapter is an isolated, lazily-loaded module (chutes, aci).
+export { loadAdapter, adapterIds } from './adapters/index.js';
+// Buyer-side orchestration and the injectable DCAP seam (useful for tooling and tests).
+export { runVerify } from './verifier.js';
+export { makeTdxCap, defaultVerifyQuote, verifyTdxEvidence, isTcbAcceptable, NODE_TEE_CAP_ID, PROVIDER_TEE_CAP_ID, } from './caps/tee-tdx.js';
+// GPU-CC capability and its injectable buyer-side seam (NRAS or offline local).
+export { makeGpuNvidiaCap, makeNrasGpuVerify, nrasGpuVerify, localGpuVerify, defaultGpuVerify, } from './caps/gpu-nvidia.js';
+export { NRAS_GPU_ATTEST_URL_DEFAULT, NRAS_JWKS_URL_DEFAULT, buildNrasRequest, verifyEar, } from './nras.js';
+// Shared constants and helpers.
+export { VERIFIER_ID, ATTEST_PATH, claimId, computeReportData, bundleDigest, sellerBoundPreimage, } from './shared.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,eAAe,CAAA;AAC1C,OAAO,YAAY,MAAM,aAAa,CAAA;AAEtC;;;;;GAKG;AACH,eAAe,cAAc,CAAA;AAC7B,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAA;AAclC,kFAAkF;AAClF,gFAAgF;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAQzD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,iBAAiB,CAAA;AAExB,wFAAwF;AACxF,yFAAyF;AACzF,4FAA4F;AAC5F,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAA;AAGlC,4FAA4F;AAC5F,qFAAqF;AACrF,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAEzE,gGAAgG;AAChG,6FAA6F;AAC7F,kGAAkG;AAClG,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kBAAkB,CAAA;AAGzB,+FAA+F;AAC/F,+FAA+F;AAC/F,8DAA8D;AAC9D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAI7D,wFAAwF;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,mBAAmB,CAAA;AAI1B,gFAAgF;AAChF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,GACV,MAAM,WAAW,CAAA;AAGlB,gCAAgC;AAChC,OAAO,EACL,WAAW,EACX,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,GACpB,MAAM,aAAa,CAAA"}

package/dist/nras.d.ts

@@ -0,0 +1,81 @@
+import type { JWTVerifyGetKey } from 'jose';
+/**
+ * NRAS wire module — the single place the NVIDIA Remote Attestation Service request/response
+ * mapping lives, so a shift in NVIDIA's schema changes only this file. Everything the rest of
+ * the SDK needs (build a request, submit it, verify the returned EAR) is behind these exports.
+ *
+ * Sources for this mapping (July 2026):
+ *   - NRAS API reference: https://docs.attestation.nvidia.com/api-docs/nras.html
+ *   - Hopper single-GPU example: https://docs.nvidia.com/attestation/quick-start-guide/latest/attestation-examples/hopper_single_gpu.html
+ *   - NRAS releases (v3 evidence_list rename + detached-EAR token): https://docs.nvidia.com/attestation/technical-docs-nras/latest/nras_releases.html
+ *   - NVIDIA EAT claims (Intel Trust Authority mirror): https://docs.trustauthority.intel.com/main/articles/articles/ita/concept-gpu-attestation.html
+ *
+ * Why generic: NRAS is NVIDIA's own attestation service, not an AntSeed inference provider,
+ * so the NVIDIA host is a sensible default here (overridable by env). Nothing about any
+ * particular provider (hostnames, evidence field names) appears in this module.
+ */
+/** NRAS v3 GPU attest endpoint. Overridable via ANTSEED_VERIFIER_NRAS_URL. */
+export declare const NRAS_GPU_ATTEST_URL_DEFAULT = "https://nras.attestation.nvidia.com/v3/attest/gpu";
+/** NRAS JWKS — the public keys a relying party verifies the EAR JWT against. Overridable via env. */
+export declare const NRAS_JWKS_URL_DEFAULT = "https://nras.attestation.nvidia.com/.well-known/jwks.json";
+/** One GPU's confidential-compute evidence: base64 SPDM attestation report + its cert chain. */
+export interface NrasEvidenceItem {
+    evidence: string;
+    certificate: string;
+}
+/**
+ * The provider-produced GPU evidence blob (rides the provider's evidence route). Generic:
+ * `arch` (e.g. "HOPPER" or "BLACKWELL") and the per-GPU evidence come from the provider, never
+ * hardcoded here. This is the NRAS request body minus the buyer-supplied nonce.
+ */
+export interface NvidiaGpuEvidence {
+    arch: string;
+    evidence_list: NrasEvidenceItem[];
+}
+/** The JSON body POSTed to NRAS (v3 uses the "evidence_list" field). */
+export interface NrasRequest {
+    nonce: string;
+    arch: string;
+    evidence_list: NrasEvidenceItem[];
+}
+/** Injectable HTTP submit so tests never touch the network. Returns the parsed NRAS response. */
+export type NrasSubmitFn = (url: string, body: NrasRequest) => Promise<unknown>;
+/** Structured EAR verdict — the caller renders a human detail and maps it to a ClaimResult. */
+export interface EarVerification {
+    ok: boolean;
+    /** Reason string (why it failed, or a success summary). */
+    reason: string;
+    /** Number of GPUs the EAR reported on (device token count). */
+    gpuCount: number;
+    /** CC-mode determination — see ccModeOf() for how it is derived and why it is fuzzy. */
+    ccMode: 'enabled' | 'disabled' | 'implied';
+}
+/**
+ * Build the NRAS request from provider evidence and the buyer's nonce. Fail-closed: it throws on
+ * anything malformed, so a missing or garbage evidence blob can never reach NRAS as a valid ask.
+ * The nonce is the buyer's 32 raw bytes rendered as 64 lowercase hex chars (NRAS "32-byte Hex").
+ */
+export declare function buildNrasRequest(evidence: NvidiaGpuEvidence, nonce: Uint8Array): NrasRequest;
+/** Default submit: POST JSON to NRAS with a hard timeout. Network or non-2xx errors bubble up (the caller marks them transient). */
+export declare const defaultNrasSubmit: NrasSubmitFn;
+/**
+ * Extract the JWT strings from an NRAS response. Handles a bare JWT string, and the v3 detached
+ * EAR array [ overall, { "GPU-0": jwt, ... } ] where each token may be wrapped as a
+ * ["JWT", token] content-type pair. Returns the overall token (if any) plus per-device tokens.
+ */
+export declare function extractEarTokens(resp: unknown): {
+    overall?: string;
+    devices: Record<string, string>;
+};
+/**
+ * Verify the NRAS EAR against the buyer's nonce. It verifies every JWT's signature against the
+ * injected key resolver (NVIDIA JWKS in production, a test key in tests), then enforces:
+ *   - the overall attestation result is success (x-nvidia-overall-att-result === true; when only
+ *     per-device tokens are present, every device's measres === "success")
+ *   - eat_nonce binds this exact buyer nonce (checked on the overall token, else on every device)
+ *   - CC mode is not explicitly disabled on any device
+ * A bad signature or failed check is an attestation failure (not transient). It never verifies
+ * with a symmetric or "none" alg — jose derives the allowed alg from the resolved key.
+ */
+export declare function verifyEar(resp: unknown, nonce: Uint8Array, getKey: JWTVerifyGetKey): Promise<EarVerification>;
+//# sourceMappingURL=nras.d.ts.map

package/dist/nras.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nras.d.ts","sourceRoot":"","sources":["../src/nras.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,MAAM,CAAA;AAEvD;;;;;;;;;;;;;;GAcG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,sDAAsD,CAAA;AAC9F,qGAAqG;AACrG,eAAO,MAAM,qBAAqB,8DAA8D,CAAA;AAEhG,gGAAgG;AAChG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,gBAAgB,EAAE,CAAA;CAClC;AAED,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,gBAAgB,EAAE,CAAA;CAClC;AAED,iGAAiG;AACjG,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE/E,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAA;IACX,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAA;IAChB,wFAAwF;IACxF,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;CAC3C;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,CAc5F;AAED,oIAAoI;AACpI,eAAO,MAAM,iBAAiB,EAAE,YAW/B,CAAA;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAmBrG;AAyCD;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,eAAe,CAAC,CA0C1B"}

package/dist/nras.js

@@ -0,0 +1,190 @@
+/**
+ * NRAS wire module — the single place the NVIDIA Remote Attestation Service request/response
+ * mapping lives, so a shift in NVIDIA's schema changes only this file. Everything the rest of
+ * the SDK needs (build a request, submit it, verify the returned EAR) is behind these exports.
+ *
+ * Sources for this mapping (July 2026):
+ *   - NRAS API reference: https://docs.attestation.nvidia.com/api-docs/nras.html
+ *   - Hopper single-GPU example: https://docs.nvidia.com/attestation/quick-start-guide/latest/attestation-examples/hopper_single_gpu.html
+ *   - NRAS releases (v3 evidence_list rename + detached-EAR token): https://docs.nvidia.com/attestation/technical-docs-nras/latest/nras_releases.html
+ *   - NVIDIA EAT claims (Intel Trust Authority mirror): https://docs.trustauthority.intel.com/main/articles/articles/ita/concept-gpu-attestation.html
+ *
+ * Why generic: NRAS is NVIDIA's own attestation service, not an AntSeed inference provider,
+ * so the NVIDIA host is a sensible default here (overridable by env). Nothing about any
+ * particular provider (hostnames, evidence field names) appears in this module.
+ */
+/** NRAS v3 GPU attest endpoint. Overridable via ANTSEED_VERIFIER_NRAS_URL. */
+export const NRAS_GPU_ATTEST_URL_DEFAULT = 'https://nras.attestation.nvidia.com/v3/attest/gpu';
+/** NRAS JWKS — the public keys a relying party verifies the EAR JWT against. Overridable via env. */
+export const NRAS_JWKS_URL_DEFAULT = 'https://nras.attestation.nvidia.com/.well-known/jwks.json';
+function isNonEmptyString(v) {
+    return typeof v === 'string' && v.length > 0;
+}
+/**
+ * Build the NRAS request from provider evidence and the buyer's nonce. Fail-closed: it throws on
+ * anything malformed, so a missing or garbage evidence blob can never reach NRAS as a valid ask.
+ * The nonce is the buyer's 32 raw bytes rendered as 64 lowercase hex chars (NRAS "32-byte Hex").
+ */
+export function buildNrasRequest(evidence, nonce) {
+    if (!isNonEmptyString(evidence?.arch))
+        throw new Error('gpu evidence missing "arch"');
+    if (!Array.isArray(evidence.evidence_list) || evidence.evidence_list.length === 0) {
+        throw new Error('gpu evidence missing non-empty "evidence_list"');
+    }
+    for (const [i, item] of evidence.evidence_list.entries()) {
+        if (!isNonEmptyString(item?.evidence))
+            throw new Error(`gpu evidence_list[${i}] missing "evidence"`);
+        if (!isNonEmptyString(item?.certificate))
+            throw new Error(`gpu evidence_list[${i}] missing "certificate"`);
+    }
+    return {
+        nonce: Buffer.from(nonce).toString('hex'),
+        arch: evidence.arch,
+        evidence_list: evidence.evidence_list.map((e) => ({ evidence: e.evidence, certificate: e.certificate })),
+    };
+}
+/** Default submit: POST JSON to NRAS with a hard timeout. Network or non-2xx errors bubble up (the caller marks them transient). */
+export const defaultNrasSubmit = async (url, body) => {
+    const resp = await fetch(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(20_000),
+    });
+    if (!resp.ok)
+        throw new Error(`NRAS returned HTTP ${resp.status}`);
+    const declared = Number(resp.headers?.get('content-length') ?? '0');
+    if (declared > 4 * 1024 * 1024)
+        throw new Error(`NRAS response too large (${declared} bytes)`);
+    return resp.json();
+};
+/** Unwrap NRAS v3's ["JWT", token] content-type pair to the token; pass a bare string through. */
+function jwtOf(v) {
+    if (isNonEmptyString(v))
+        return v;
+    if (Array.isArray(v) && v[0] === 'JWT' && isNonEmptyString(v[1]))
+        return v[1];
+    return undefined;
+}
+/**
+ * Extract the JWT strings from an NRAS response. Handles a bare JWT string, and the v3 detached
+ * EAR array [ overall, { "GPU-0": jwt, ... } ] where each token may be wrapped as a
+ * ["JWT", token] content-type pair. Returns the overall token (if any) plus per-device tokens.
+ */
+export function extractEarTokens(resp) {
+    const bare = jwtOf(resp);
+    if (bare)
+        return { overall: bare, devices: {} };
+    if (Array.isArray(resp)) {
+        let overall;
+        const devices = {};
+        for (const el of resp) {
+            const tok = jwtOf(el);
+            if (tok) {
+                overall = tok;
+                continue;
+            }
+            if (el && typeof el === 'object') {
+                for (const [k, v] of Object.entries(el)) {
+                    const dt = jwtOf(v);
+                    if (dt)
+                        devices[k] = dt;
+                }
+            }
+        }
+        return { overall, devices };
+    }
+    throw new Error('unrecognized NRAS response shape (expected a JWT string or a detached-EAR array)');
+}
+/**
+ * Candidate per-device claim names that carry a confidential-compute signal. NVIDIA's EAT does
+ * not document a single stable "cc-mode" boolean, so this checks a documented candidate set
+ * instead of inventing one. The authoritative CC signal is that `x-nvidia-overall-att-result`
+ * is true for evidence submitted to the /attest/gpu (CC) endpoint. Extend this list here if
+ * NVIDIA names the claim explicitly. It lives here so the policy in gpu-nvidia.ts stays clean.
+ */
+const CC_MODE_CLAIM_CANDIDATES = [
+    'x-nvidia-gpu-attestation-report-cc-mode',
+    'x-nvidia-cc-mode',
+    'x-nvidia-ccmode',
+];
+/** Truthy for the common on/off encodings NVIDIA uses (booleans and "enabled"/"on" strings). */
+function claimTruthy(v) {
+    if (typeof v === 'boolean')
+        return v;
+    if (typeof v === 'string')
+        return ['true', 'enabled', 'on', 'active'].includes(v.toLowerCase());
+    return false;
+}
+/** Tri-state CC-mode read: explicit true → 'enabled', explicit false → 'disabled', absent → undefined. */
+function ccModeOf(payload) {
+    for (const key of CC_MODE_CLAIM_CANDIDATES) {
+        if (key in payload)
+            return claimTruthy(payload[key]) ? 'enabled' : 'disabled';
+    }
+    return undefined;
+}
+/** Per-device "this GPU passed its own measurement compare" — NVIDIA uses measres === "success". */
+function deviceMeasuredOk(payload) {
+    return payload['measres'] === 'success';
+}
+/** Read the eat_nonce claim (NVIDIA emits it as lowercase hex), if present. */
+function eatNonce(payload) {
+    const n = payload['eat_nonce'];
+    return typeof n === 'string' ? n.toLowerCase() : undefined;
+}
+/**
+ * Verify the NRAS EAR against the buyer's nonce. It verifies every JWT's signature against the
+ * injected key resolver (NVIDIA JWKS in production, a test key in tests), then enforces:
+ *   - the overall attestation result is success (x-nvidia-overall-att-result === true; when only
+ *     per-device tokens are present, every device's measres === "success")
+ *   - eat_nonce binds this exact buyer nonce (checked on the overall token, else on every device)
+ *   - CC mode is not explicitly disabled on any device
+ * A bad signature or failed check is an attestation failure (not transient). It never verifies
+ * with a symmetric or "none" alg — jose derives the allowed alg from the resolved key.
+ */
+export async function verifyEar(resp, nonce, getKey) {
+    const fail = (reason) => ({ ok: false, reason, gpuCount: 0, ccMode: 'implied' });
+    const { overall, devices } = extractEarTokens(resp);
+    const deviceIds = Object.keys(devices);
+    if (!overall && deviceIds.length === 0)
+        return fail('NRAS response contained no EAR token');
+    const jose = await import('jose');
+    const expectedNonce = Buffer.from(nonce).toString('hex');
+    // Verify signatures and collect payloads. jose throws on a bad signature or an unexpected alg.
+    let overallPayload;
+    const devicePayloads = [];
+    try {
+        if (overall)
+            overallPayload = (await jose.jwtVerify(overall, getKey)).payload;
+        for (const id of deviceIds)
+            devicePayloads.push((await jose.jwtVerify(devices[id], getKey)).payload);
+    }
+    catch (err) {
+        return fail(`EAR signature verification failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    // Overall attestation result: prefer the overall claim; else require every device measured-ok.
+    const overallResult = overallPayload
+        ? overallPayload['x-nvidia-overall-att-result'] === true
+        : devicePayloads.length > 0 && devicePayloads.every(deviceMeasuredOk);
+    if (!overallResult)
+        return fail('NRAS overall attestation result was not success');
+    // Nonce binding: the overall token carries eat_nonce in v3; fall back to every device token.
+    const nonceMatches = overallPayload && eatNonce(overallPayload) !== undefined
+        ? eatNonce(overallPayload) === expectedNonce
+        : devicePayloads.length > 0 && devicePayloads.every((p) => eatNonce(p) === expectedNonce);
+    if (!nonceMatches)
+        return fail('NRAS EAR nonce does not match this attestation round');
+    // CC mode: reject only an explicit disable; otherwise trust the overall CC-endpoint result.
+    let ccMode = 'implied';
+    for (const p of devicePayloads) {
+        const m = ccModeOf(p);
+        if (m === 'disabled')
+            return fail('a GPU reported confidential-compute mode disabled');
+        if (m === 'enabled')
+            ccMode = 'enabled';
+    }
+    const gpuCount = deviceIds.length || 1;
+    return { ok: true, reason: `${gpuCount} NVIDIA GPU${gpuCount === 1 ? '' : 's'}, CC mode ${ccMode}, NRAS-verified`, gpuCount, ccMode };
+}
+//# sourceMappingURL=nras.js.map

package/dist/nras.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nras.js","sourceRoot":"","sources":["../src/nras.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,mDAAmD,CAAA;AAC9F,qGAAqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAAG,2DAA2D,CAAA;AAuChG,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA2B,EAAE,KAAiB;IAC7E,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAA;QACpG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,CAAA;IAC5G,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KACzG,CAAA;AACH,CAAC;AAED,oIAAoI;AACpI,MAAM,CAAC,MAAM,iBAAiB,GAAiB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;IACnE,IAAI,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,SAAS,CAAC,CAAA;IAC9F,OAAO,IAAI,CAAC,IAAI,EAAE,CAAA;AACpB,CAAC,CAAA;AAED,kGAAkG;AAClG,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,gBAAgB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7E,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,IAAI,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,OAA2B,CAAA;QAC/B,MAAM,OAAO,GAA2B,EAAE,CAAA;QAC1C,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;YACrB,IAAI,GAAG,EAAE,CAAC;gBAAC,OAAO,GAAG,GAAG,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACpC,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAA6B,CAAC,EAAE,CAAC;oBACnE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;oBACnB,IAAI,EAAE;wBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAC7B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;AACrG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAG;IAC/B,yCAAyC;IACzC,kBAAkB;IAClB,iBAAiB;CAClB,CAAA;AAED,gGAAgG;AAChG,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAA;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0GAA0G;AAC1G,SAAS,QAAQ,CAAC,OAAmB;IACnC,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,IAAI,GAAG,IAAI,OAAO;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC/E,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,oGAAoG;AACpG,SAAS,gBAAgB,CAAC,OAAmB;IAC3C,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,CAAA;AACzC,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,OAAmB;IACnC,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAa,EACb,KAAiB,EACjB,MAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IAEzG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAA;IAE3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IACjC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAExD,+FAA+F;IAC/F,IAAI,cAAsC,CAAA;IAC1C,MAAM,cAAc,GAAiB,EAAE,CAAA;IACvC,IAAI,CAAC;QACH,IAAI,OAAO;YAAE,cAAc,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QAC7E,KAAK,MAAM,EAAE,IAAI,SAAS;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvG,CAAC;IAED,+FAA+F;IAC/F,MAAM,aAAa,GAAG,cAAc;QAClC,CAAC,CAAC,cAAc,CAAC,6BAA6B,CAAC,KAAK,IAAI;QACxD,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACvE,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAA;IAElF,6FAA6F;IAC7F,MAAM,YAAY,GAAG,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,SAAS;QAC3E,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,aAAa;QAC5C,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAA;IAC3F,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC,sDAAsD,CAAC,CAAA;IAEtF,4FAA4F;IAC5F,IAAI,MAAM,GAA8B,SAAS,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,mDAAmD,CAAC,CAAA;QACtF,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,GAAG,SAAS,CAAA;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,CAAA;IACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,cAAc,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,MAAM,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AACvI,CAAC"}

package/dist/prover.d.ts

@@ -0,0 +1,5 @@
+import type { Prover } from './antseed-node-types.js';
+import './caps/index.js';
+declare const prover: Prover;
+export default prover;
+//# sourceMappingURL=prover.d.ts.map

package/dist/prover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prover.d.ts","sourceRoot":"","sources":["../src/prover.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAiC,MAAM,yBAAyB,CAAA;AACpF,OAAO,iBAAiB,CAAA;AA4JxB,QAAA,MAAM,MAAM,EAAE,MA4Db,CAAA;AAED,eAAe,MAAM,CAAA"}