@calimero-network/mero-js 21.3.0 → 21.4.0

package/dist/namespace-op/namespace-op.d.ts

@@ -15,7 +15,7 @@
  */
 import type { SignedGroupOpenInvitation } from '../admin-api/admin-types.js';
 /** Core's `SIGNED_NAMESPACE_OP_SCHEMA_VERSION`. A node refuses any other value. */
-export declare const SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 9;
+export declare const SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 10;
 /**
  * Borsh-encode a `SignedGroupOpenInvitation`.
  *

package/dist/namespace-op/namespace-op.js

@@ -1,6 +1,6 @@
 import { concat, derivePublicKey, fromHex, hex, importSigningKey, u32le, u64le, } from '../crypto/internal.js';
 /** Core's `SIGNED_NAMESPACE_OP_SCHEMA_VERSION`. A node refuses any other value. */
-export const SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 9;
+export const SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 10;
 /** Domain prefixed to the signable bytes; core's `NAMESPACE_GOVERNANCE_SIGN_DOMAIN`. */
 const NAMESPACE_SIGN_DOMAIN = new TextEncoder().encode('calimero.namespace.v1');
 /** `NamespaceOp::Root` is the first variant. */
@@ -20,7 +20,7 @@ const ROOT_OP = {
     KeyDelivery: 6,
     MemberJoinedOpen: 7,
     MemberJoinedAt: 8,
-    NamespaceCreated: 9,
+    NamespaceCreatedV2: 9,
     MemberJoinedViaTeeAttestation: 10,
 };
 /** A required `[u8; 32]`, as JSON carries it: 32 byte values. */

package/dist/sealed/index.d.ts

@@ -2,3 +2,6 @@ export { HANDSHAKE_PATH, SEALED_CONTENT_TYPE, SEALED_PATH, SealedTransportError,
 export type { AttestedSealedFetchOptions, SealedFetchOptions, VerifyTransportQuote } from './sealed.js';
 export { createQuoteVerifier, trustedMeasurementsFromReleases } from './verify.js';
 export type { DcapCollateral, DcapVerifiedReport, DcapVerify, PublishedMrtds, QuoteVerifier, QuoteVerifierOptions, TrustedMeasurements, } from './verify.js';
+export { DEFAULT_RELEASE_MIRROR, NODE_RELEASE_SIGNER, cloudNodeReleaseUrl, createSignedReleaseSealedFetch, createSignedReleaseVerifier, fetchNodeRelease, fetchNodeReleaseVersion, nodeReleaseVersionFromImage, trustSignedRelease, verifySignedNodeRelease, } from './release.js';
+export type { SignedNodeRelease, SignedReleaseSealedFetchOptions, SignedReleaseVerifierOptions, TrustSignedReleaseOptions, VerifySignedNodeReleaseOptions, } from './release.js';
+export type { SignerIdentity } from './sigstore.js';

package/dist/sealed/index.js

@@ -1,2 +1,3 @@
 export { HANDSHAKE_PATH, SEALED_CONTENT_TYPE, SEALED_PATH, SealedTransportError, StaleTransportKeyError, createAttestedSealedFetch, createSealedFetch, fetchAttestedTransportKey, transportKeyBinding, } from './sealed.js';
 export { createQuoteVerifier, trustedMeasurementsFromReleases } from './verify.js';
+export { DEFAULT_RELEASE_MIRROR, NODE_RELEASE_SIGNER, cloudNodeReleaseUrl, createSignedReleaseSealedFetch, createSignedReleaseVerifier, fetchNodeRelease, fetchNodeReleaseVersion, nodeReleaseVersionFromImage, trustSignedRelease, verifySignedNodeRelease, } from './release.js';

package/dist/sealed/release.d.ts

@@ -0,0 +1,213 @@
+/**
+ * Trusting a TEE node's image by its signed release, fetched at run time from
+ * anywhere, instead of shipping the release's `published-mrtds.json` with the
+ * app.
+ *
+ * Each mero-tee node release publishes `published-mrtds.json` (the
+ * measurements of its image) with a cosign keyless bundle, signed by the
+ * mero-tee release workflow on GitHub Actions. {@link verifySignedNodeRelease}
+ * checks that signature here, against the Sigstore trust root embedded in this
+ * package, so the file can come from any source: the cloud's mirror
+ * (`GET https://cloud.calimero.network/api/tee/node-releases/{version}`), a
+ * mirror of your own, or a file bundled with the app. None of them is
+ * trusted; a file whose signature does not verify is refused.
+ *
+ * What is trusted:
+ *
+ * - the signer: the node release workflow of `calimero-network/mero-tee` on
+ *   `master` ({@link NODE_RELEASE_SIGNER}), the identity core pins as
+ *   `NODE_RELEASE_IDENTITY`;
+ * - the Sigstore public-good trust root: Fulcio's CAs and Rekor's key;
+ * - the minimum release you pass, below which no release is accepted.
+ *
+ * What is not: the transport, the server that serves the release, and the
+ * relay's choice of release. A relay can present any genuinely signed release
+ * at or above the minimum, and no other; its quote must then match that
+ * release's measurements exactly, so it cannot claim one release and run
+ * another.
+ */
+import { type SignerIdentity } from './sigstore.js';
+import { type DcapVerify, type PublishedMrtds, type QuoteVerifier, type QuoteVerifierOptions } from './verify.js';
+/** The workflow that signs every mero-tee node release, and the issuer of its identity. */
+export declare const NODE_RELEASE_SIGNER: Readonly<SignerIdentity>;
+/**
+ * The public mirror of signed node releases, used when no other source is
+ * given. Only a transport: what it serves is verified, so it can fail to
+ * answer but cannot make a release trusted.
+ */
+export declare const DEFAULT_RELEASE_MIRROR = "https://cloud.calimero.network";
+/**
+ * A node release as the servers hand it out, wrapped as `{"data": ...}`: the
+ * release's `published-mrtds.json`, byte for byte, and its cosign bundle.
+ * Unverified until {@link verifySignedNodeRelease} says otherwise.
+ */
+export interface SignedNodeRelease {
+    /** The release, e.g. `2.3.87`. It must be the signed file's `tag`. */
+    version: string;
+    /** `published-mrtds.json`, exactly as signed. */
+    publishedMrtds: string;
+    /** `published-mrtds.json.bundle.json`, as JSON text. */
+    bundle: string;
+}
+export interface VerifySignedNodeReleaseOptions {
+    /** Require the file's `tag` to be this release. */
+    expectedVersion?: string;
+    /** The certificate identity required. Defaults to {@link NODE_RELEASE_SIGNER}'s. */
+    identity?: string;
+    /** The OIDC issuer required. Defaults to {@link NODE_RELEASE_SIGNER}'s. */
+    issuer?: string;
+    /** The release's detached `published-mrtds.json.sig`, when you have it; it must be the bundle's. */
+    signature?: string;
+}
+/**
+ * Verify a node release's `published-mrtds.json` against its cosign bundle,
+ * as `cosign verify-blob` would, and return the file parsed. Rejects, with the
+ * reason, unless:
+ *
+ * - the signature over the exact bytes verifies with the bundle's certificate;
+ * - that certificate chains to a Fulcio CA in the Sigstore trust root, and it
+ *   and the CA were valid when Rekor logged the signature;
+ * - it names the node release workflow and GitHub Actions as its issuer;
+ * - Rekor's signed entry timestamp verifies, for an entry that is this
+ *   signature over this file by this certificate;
+ * - the file is a node release (`role: "node"`), and `expectedVersion`, when
+ *   given, is its `tag`.
+ *
+ * Nothing is read from the clock: the certificate is checked at the time Rekor
+ * logged the signature, so a release that verifies once always does.
+ */
+export declare function verifySignedNodeRelease(publishedMrtds: string | Uint8Array, bundle: string | object, options?: VerifySignedNodeReleaseOptions): Promise<PublishedMrtds>;
+/**
+ * Fetch a {@link SignedNodeRelease} from a server that wraps it as
+ * `{"data": ...}`, such as the cloud's {@link cloudNodeReleaseUrl}. It is
+ * only fetched: pass it to
+ * {@link trustSignedRelease}, or {@link verifySignedNodeRelease}, before using it.
+ */
+export declare function fetchNodeRelease(url: string, options?: {
+    fetch?: typeof fetch;
+}): Promise<SignedNodeRelease>;
+/**
+ * The release a mero-tee node image was built from, read from its name, e.g.
+ * `merotee-ubuntu-questing-25-10-locked-read-only-2-3-87` is `2.3.87`. Throws
+ * for any other name, including the suffixed images of unreleased builds.
+ */
+export declare function nodeReleaseVersionFromImage(osImage: string): string;
+/**
+ * The release the TEE node at `baseUrl` says it runs, from the image name its
+ * `GET /admin-api/tee/info` reports. The node's own claim, and not trusted:
+ * it only picks which signed release to fetch, and the quote must then match
+ * that release's measurements.
+ */
+export declare function fetchNodeReleaseVersion(baseUrl: string, options?: {
+    fetch?: typeof fetch;
+}): Promise<string>;
+/** Where the cloud at `cloudUrl` (e.g. `https://cloud.calimero.network`) mirrors node release `version`. */
+export declare function cloudNodeReleaseUrl(cloudUrl: string, version: string): string;
+export interface TrustSignedReleaseOptions {
+    /** The release, from any source; it is verified here. */
+    release: SignedNodeRelease;
+    /** The image profile to trust, e.g. `locked-read-only`. */
+    profile: string;
+    /**
+     * The oldest release accepted, e.g. `2.3.87`. Required: every release ever
+     * signed stays validly signed, so without a floor a relay could present an
+     * old release, with a flaw since fixed, and a quote from that old image
+     * would pass. Raise it when a release must no longer be trusted.
+     */
+    minReleaseVersion: string;
+    /** Override the signer; defaults to {@link NODE_RELEASE_SIGNER}. */
+    identity?: string;
+    issuer?: string;
+}
+/**
+ * The {@link QuoteVerifierOptions} that trust one profile of a signed node
+ * release, from an untrusted source: its signature is verified, its signed
+ * `tag` must be `release.version` and no older than `minReleaseVersion`, and
+ * then it is read as {@link trustedMeasurementsFromReleases} reads a bundled
+ * file.
+ *
+ * ```ts
+ * const version = await fetchNodeReleaseVersion(relayUrl);
+ * const release = await fetchNodeRelease(cloudNodeReleaseUrl(DEFAULT_RELEASE_MIRROR, version));
+ * const verifier = createQuoteVerifier({
+ *   dcapVerify,
+ *   ...(await trustSignedRelease({ release, profile: 'locked-read-only', minReleaseVersion: '2.3.87' })),
+ * });
+ * ```
+ */
+export declare function trustSignedRelease(options: TrustSignedReleaseOptions): Promise<Required<Pick<QuoteVerifierOptions, 'allowedMeasurements' | 'allowedTcbStatuses'>>>;
+export interface SignedReleaseVerifierOptions extends Omit<TrustSignedReleaseOptions, 'release'> {
+    /** DCAP verification: `verify` from `@phala/dcap-qvl`. */
+    dcapVerify: DcapVerify;
+    /**
+     * Where to get the node's release, asked again each time the node is
+     * attested (a restarted node may run a newer one). Untrusted: it is
+     * verified, and the quote must match it.
+     */
+    release: () => Promise<SignedNodeRelease>;
+    /** As {@link QuoteVerifierOptions.fetchCollateral}. */
+    fetchCollateral?: QuoteVerifierOptions['fetchCollateral'];
+    /** The current time in milliseconds, for the quote's collateral; defaults to `Date.now`. For tests. */
+    now?: () => number;
+}
+/**
+ * A {@link createQuoteVerifier} whose trusted image is the signed release the
+ * node says it runs. On each attestation it gets the release, checks it with
+ * {@link trustSignedRelease}, and verifies the quote against that release's
+ * measurements only.
+ *
+ * The node's choice of release is the one thing taken from it, and it is
+ * bounded: only a genuinely signed release at or above `minReleaseVersion`
+ * passes, and the quote must then be of exactly that release's image. Use it
+ * as `connectCloud`'s `seal`, or with `createAttestedSealedFetch`;
+ * {@link createSignedReleaseSealedFetch} does the latter for you.
+ */
+export declare function createSignedReleaseVerifier(options: SignedReleaseVerifierOptions): QuoteVerifier;
+export interface SignedReleaseSealedFetchOptions extends Omit<SignedReleaseVerifierOptions, 'release'> {
+    /** The TEE node's (the relay's) base URL. */
+    baseUrl: string;
+    /**
+     * Where to get the release the node says it runs, the version read from its
+     * `GET /admin-api/tee/info` each time it is attested. A string is the base
+     * URL of a mirror serving {@link cloudNodeReleaseUrl}'s path, defaulting to
+     * {@link DEFAULT_RELEASE_MIRROR}; a function gets the version and returns
+     * the release, e.g. from a file bundled with the app. Whichever it is, it is
+     * not trusted: the release is verified. `/tee/info` is read in the clear,
+     * which a node with `[server.sealed] required` refuses: for one, pass a
+     * function that ignores `version` and returns the release you expect.
+     */
+    releaseSource?: string | ((context: {
+        baseUrl: string;
+        version: string;
+        fetch: typeof fetch;
+    }) => Promise<SignedNodeRelease>);
+    /** Also require the node to run this application with this bytecode hash. */
+    applicationId?: string;
+    applicationHash?: string;
+    /** Fetch for the release, the attestation and the envelopes. Defaults to global `fetch`. */
+    fetch?: typeof fetch;
+}
+/**
+ * {@link createAttestedSealedFetch} for a TEE node known only by URL, trusting
+ * whatever signed release at or above `minReleaseVersion` it runs: it reads
+ * the release the node names from its `/tee/info`, gets that release from
+ * `releaseSource` (the public mirror unless you say otherwise), verifies its
+ * signature, builds the quote verifier from its measurements, attests the node
+ * and seals everything to it.
+ *
+ * ```ts
+ * import { verify as dcapVerify } from '@phala/dcap-qvl';
+ *
+ * const relay = new RelayClient({
+ *   relayUrl,
+ *   fetch: createSignedReleaseSealedFetch({
+ *     baseUrl: relayUrl,
+ *     dcapVerify,
+ *     profile: 'locked-read-only',
+ *     minReleaseVersion: '2.3.87',
+ *   }),
+ *   ...
+ * });
+ * ```
+ */
+export declare function createSignedReleaseSealedFetch(options: SignedReleaseSealedFetchOptions): typeof fetch;

package/dist/sealed/release.js

@@ -0,0 +1,291 @@
+/**
+ * Trusting a TEE node's image by its signed release, fetched at run time from
+ * anywhere, instead of shipping the release's `published-mrtds.json` with the
+ * app.
+ *
+ * Each mero-tee node release publishes `published-mrtds.json` (the
+ * measurements of its image) with a cosign keyless bundle, signed by the
+ * mero-tee release workflow on GitHub Actions. {@link verifySignedNodeRelease}
+ * checks that signature here, against the Sigstore trust root embedded in this
+ * package, so the file can come from any source: the cloud's mirror
+ * (`GET https://cloud.calimero.network/api/tee/node-releases/{version}`), a
+ * mirror of your own, or a file bundled with the app. None of them is
+ * trusted; a file whose signature does not verify is refused.
+ *
+ * What is trusted:
+ *
+ * - the signer: the node release workflow of `calimero-network/mero-tee` on
+ *   `master` ({@link NODE_RELEASE_SIGNER}), the identity core pins as
+ *   `NODE_RELEASE_IDENTITY`;
+ * - the Sigstore public-good trust root: Fulcio's CAs and Rekor's key;
+ * - the minimum release you pass, below which no release is accepted.
+ *
+ * What is not: the transport, the server that serves the release, and the
+ * relay's choice of release. A relay can present any genuinely signed release
+ * at or above the minimum, and no other; its quote must then match that
+ * release's measurements exactly, so it cannot claim one release and run
+ * another.
+ */
+import { createAttestedSealedFetch } from './sealed.js';
+import { verifyCosignBundle } from './sigstore.js';
+import { createQuoteVerifier, trustedMeasurementsFromReleases, } from './verify.js';
+/** The workflow that signs every mero-tee node release, and the issuer of its identity. */
+export const NODE_RELEASE_SIGNER = Object.freeze({
+    identity: 'https://github.com/calimero-network/mero-tee/.github/workflows/release-node-image-gcp.yaml@refs/heads/master',
+    issuer: 'https://token.actions.githubusercontent.com',
+});
+const MEASUREMENTS = ['mrtd', 'rtmr0', 'rtmr1', 'rtmr2', 'rtmr3'];
+/**
+ * The public mirror of signed node releases, used when no other source is
+ * given. Only a transport: what it serves is verified, so it can fail to
+ * answer but cannot make a release trusted.
+ */
+export const DEFAULT_RELEASE_MIRROR = 'https://cloud.calimero.network';
+/**
+ * Verify a node release's `published-mrtds.json` against its cosign bundle,
+ * as `cosign verify-blob` would, and return the file parsed. Rejects, with the
+ * reason, unless:
+ *
+ * - the signature over the exact bytes verifies with the bundle's certificate;
+ * - that certificate chains to a Fulcio CA in the Sigstore trust root, and it
+ *   and the CA were valid when Rekor logged the signature;
+ * - it names the node release workflow and GitHub Actions as its issuer;
+ * - Rekor's signed entry timestamp verifies, for an entry that is this
+ *   signature over this file by this certificate;
+ * - the file is a node release (`role: "node"`), and `expectedVersion`, when
+ *   given, is its `tag`.
+ *
+ * Nothing is read from the clock: the certificate is checked at the time Rekor
+ * logged the signature, so a release that verifies once always does.
+ */
+export async function verifySignedNodeRelease(publishedMrtds, bundle, options = {}) {
+    const body = typeof publishedMrtds === 'string' ? new TextEncoder().encode(publishedMrtds) : publishedMrtds;
+    await verifyCosignBundle(body, bundle, {
+        identity: options.identity ?? NODE_RELEASE_SIGNER.identity,
+        issuer: options.issuer ?? NODE_RELEASE_SIGNER.issuer,
+    }, options.signature);
+    let release;
+    try {
+        release = JSON.parse(new TextDecoder().decode(body));
+    }
+    catch {
+        throw new Error('The signed release is not JSON');
+    }
+    if (release?.role !== 'node') {
+        throw new Error(`The signed release is a ${JSON.stringify(release?.role)} release, not a node one`);
+    }
+    // The workflow signs other files too, some with a `role` and `profiles` of
+    // their own (`release-provenance.json`): the signature covers bytes, not a
+    // file name, so check this is the measurements file.
+    const profiles = Object.values(release.profiles ?? {});
+    const measured = (image) => MEASUREMENTS.every((register) => /^[0-9a-f]{96}$/i.test(String(image?.[register])));
+    if (typeof release.tag !== 'string' || profiles.length === 0 || !profiles.every(measured)) {
+        throw new Error("The signed file is not a release's published-mrtds.json: it lists no measured profiles");
+    }
+    if (options.expectedVersion !== undefined && release.tag !== options.expectedVersion) {
+        throw new Error(`The signed release is ${release.tag}, not ${options.expectedVersion}`);
+    }
+    return release;
+}
+/**
+ * Fetch a {@link SignedNodeRelease} from a server that wraps it as
+ * `{"data": ...}`, such as the cloud's {@link cloudNodeReleaseUrl}. It is
+ * only fetched: pass it to
+ * {@link trustSignedRelease}, or {@link verifySignedNodeRelease}, before using it.
+ */
+export async function fetchNodeRelease(url, options = {}) {
+    const response = await (options.fetch ?? fetch)(url, { headers: { accept: 'application/json' } });
+    if (!response.ok)
+        throw new Error(`Fetching the node release from ${url} failed: HTTP ${response.status}`);
+    let release;
+    try {
+        release = (await response.json())?.data;
+    }
+    catch {
+        throw new Error(`${url} did not answer with JSON`);
+    }
+    if (typeof release?.version !== 'string' ||
+        typeof release.publishedMrtds !== 'string' ||
+        typeof release.bundle !== 'string') {
+        throw new Error(`${url} did not answer with a signed node release`);
+    }
+    return { version: release.version, publishedMrtds: release.publishedMrtds, bundle: release.bundle };
+}
+/**
+ * The release a mero-tee node image was built from, read from its name, e.g.
+ * `merotee-ubuntu-questing-25-10-locked-read-only-2-3-87` is `2.3.87`. Throws
+ * for any other name, including the suffixed images of unreleased builds.
+ */
+export function nodeReleaseVersionFromImage(osImage) {
+    const match = /^merotee-.+-(\d+)-(\d+)-(\d+)$/.exec(osImage);
+    if (!match)
+        throw new Error(`${JSON.stringify(osImage)} is not the image of a mero-tee node release`);
+    return `${Number(match[1])}.${Number(match[2])}.${Number(match[3])}`;
+}
+/**
+ * The release the TEE node at `baseUrl` says it runs, from the image name its
+ * `GET /admin-api/tee/info` reports. The node's own claim, and not trusted:
+ * it only picks which signed release to fetch, and the quote must then match
+ * that release's measurements.
+ */
+export async function fetchNodeReleaseVersion(baseUrl, options = {}) {
+    const url = `${baseUrl.replace(/\/+$/, '')}/admin-api/tee/info`;
+    const response = await (options.fetch ?? fetch)(url, { headers: { accept: 'application/json' } });
+    if (!response.ok)
+        throw new Error(`Fetching ${url} failed: HTTP ${response.status}`);
+    let osImage;
+    try {
+        osImage = (await response.json())?.data?.osImage;
+    }
+    catch {
+        throw new Error(`${url} did not answer with JSON`);
+    }
+    if (typeof osImage !== 'string')
+        throw new Error(`${url} did not name the node's image`);
+    return nodeReleaseVersionFromImage(osImage);
+}
+/** Where the cloud at `cloudUrl` (e.g. `https://cloud.calimero.network`) mirrors node release `version`. */
+export function cloudNodeReleaseUrl(cloudUrl, version) {
+    return `${cloudUrl.replace(/\/+$/, '')}/api/tee/node-releases/${releaseVersion(version, 'version')}`;
+}
+/**
+ * The {@link QuoteVerifierOptions} that trust one profile of a signed node
+ * release, from an untrusted source: its signature is verified, its signed
+ * `tag` must be `release.version` and no older than `minReleaseVersion`, and
+ * then it is read as {@link trustedMeasurementsFromReleases} reads a bundled
+ * file.
+ *
+ * ```ts
+ * const version = await fetchNodeReleaseVersion(relayUrl);
+ * const release = await fetchNodeRelease(cloudNodeReleaseUrl(DEFAULT_RELEASE_MIRROR, version));
+ * const verifier = createQuoteVerifier({
+ *   dcapVerify,
+ *   ...(await trustSignedRelease({ release, profile: 'locked-read-only', minReleaseVersion: '2.3.87' })),
+ * });
+ * ```
+ */
+export async function trustSignedRelease(options) {
+    const minimum = releaseVersion(options.minReleaseVersion, 'minReleaseVersion');
+    const version = releaseVersion(options.release?.version, 'The release version');
+    const published = await verifySignedNodeRelease(options.release.publishedMrtds, options.release.bundle, {
+        expectedVersion: version,
+        identity: options.identity,
+        issuer: options.issuer,
+    });
+    if (compareReleaseVersions(version, minimum) < 0) {
+        throw new Error(`Release ${version} is older than the minimum trusted, ${minimum}`);
+    }
+    return trustedMeasurementsFromReleases([published], { profile: options.profile });
+}
+/**
+ * A {@link createQuoteVerifier} whose trusted image is the signed release the
+ * node says it runs. On each attestation it gets the release, checks it with
+ * {@link trustSignedRelease}, and verifies the quote against that release's
+ * measurements only.
+ *
+ * The node's choice of release is the one thing taken from it, and it is
+ * bounded: only a genuinely signed release at or above `minReleaseVersion`
+ * passes, and the quote must then be of exactly that release's image. Use it
+ * as `connectCloud`'s `seal`, or with `createAttestedSealedFetch`;
+ * {@link createSignedReleaseSealedFetch} does the latter for you.
+ */
+export function createSignedReleaseVerifier(options) {
+    releaseVersion(options.minReleaseVersion, 'minReleaseVersion');
+    const verifier = async (args) => {
+        const trusted = await trustSignedRelease({
+            release: await options.release(),
+            profile: options.profile,
+            minReleaseVersion: options.minReleaseVersion,
+            identity: options.identity,
+            issuer: options.issuer,
+        });
+        return createQuoteVerifier({
+            dcapVerify: options.dcapVerify,
+            fetchCollateral: options.fetchCollateral,
+            now: options.now,
+            ...trusted,
+        })(args);
+    };
+    return Object.assign(verifier, { includeCollateral: true });
+}
+/**
+ * {@link createAttestedSealedFetch} for a TEE node known only by URL, trusting
+ * whatever signed release at or above `minReleaseVersion` it runs: it reads
+ * the release the node names from its `/tee/info`, gets that release from
+ * `releaseSource` (the public mirror unless you say otherwise), verifies its
+ * signature, builds the quote verifier from its measurements, attests the node
+ * and seals everything to it.
+ *
+ * ```ts
+ * import { verify as dcapVerify } from '@phala/dcap-qvl';
+ *
+ * const relay = new RelayClient({
+ *   relayUrl,
+ *   fetch: createSignedReleaseSealedFetch({
+ *     baseUrl: relayUrl,
+ *     dcapVerify,
+ *     profile: 'locked-read-only',
+ *     minReleaseVersion: '2.3.87',
+ *   }),
+ *   ...
+ * });
+ * ```
+ */
+export function createSignedReleaseSealedFetch(options) {
+    const { baseUrl, releaseSource, applicationId, applicationHash, fetch: givenFetch, ...verifierOptions } = options;
+    const baseFetch = givenFetch ?? ((input, init) => fetch(input, init));
+    const release = async () => {
+        const version = await fetchNodeReleaseVersion(baseUrl, { fetch: baseFetch });
+        return typeof releaseSource === 'function'
+            ? releaseSource({ baseUrl, version, fetch: baseFetch })
+            : fetchNodeRelease(cloudNodeReleaseUrl(releaseSource ?? DEFAULT_RELEASE_MIRROR, version), { fetch: baseFetch });
+    };
+    return createAttestedSealedFetch({
+        baseUrl,
+        verify: createSignedReleaseVerifier({ ...verifierOptions, release }),
+        applicationId,
+        applicationHash,
+        fetch: baseFetch,
+    });
+}
+const RELEASE_VERSION = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;
+/** `value` if it is a release version (`2.3.87`, `2.3.88-rc.1`); throws otherwise. */
+function releaseVersion(value, what) {
+    const match = typeof value === 'string' ? RELEASE_VERSION.exec(value) : null;
+    const pre = match?.[4];
+    if (!match || (pre !== undefined && pre.split('.').some((id) => id === ''))) {
+        throw new Error(`${what} is ${JSON.stringify(value)}, not a release version like 2.3.87`);
+    }
+    return value;
+}
+/**
+ * Order two release versions as semver does, and as core's
+ * `compare_release_versions`: numerically by `X.Y.Z`, a pre-release before its
+ * release, build metadata ignored.
+ */
+function compareReleaseVersions(a, b) {
+    const [aCore, aPre] = splitVersion(a);
+    const [bCore, bPre] = splitVersion(b);
+    for (let i = 0; i < 3; i += 1) {
+        if (aCore[i] !== bCore[i])
+            return aCore[i] < bCore[i] ? -1 : 1;
+    }
+    if (aPre === undefined || bPre === undefined)
+        return aPre === bPre ? 0 : aPre === undefined ? 1 : -1;
+    const aIds = aPre.split('.');
+    const bIds = bPre.split('.');
+    for (let i = 0; i < Math.max(aIds.length, bIds.length); i += 1) {
+        const [x, y] = [aIds[i], bIds[i]];
+        if (x === undefined || y === undefined)
+            return x === undefined ? -1 : 1;
+        const [xNum, yNum] = [/^\d+$/.test(x), /^\d+$/.test(y)];
+        const order = xNum && yNum ? Math.sign(Number(x) - Number(y)) : xNum !== yNum ? (xNum ? -1 : 1) : x < y ? -1 : x > y ? 1 : 0;
+        if (order !== 0)
+            return order;
+    }
+    return 0;
+}
+function splitVersion(version) {
+    const match = RELEASE_VERSION.exec(version);
+    return [[Number(match[1]), Number(match[2]), Number(match[3])], match[4]];
+}

package/dist/sealed/sigstore-trust-root.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The parts of the Sigstore public-good trust root that verifying a mero-tee
+ * release's cosign bundle needs: the Fulcio certificate authorities that issue
+ * the release workflow's short-lived signing certificates, and the Rekor log
+ * key that signs the bundle's signed entry timestamp. Each with the window in
+ * which the trust root says it was in use.
+ *
+ * Copied from the `trusted_root.json` that Sigstore publishes through its TUF
+ * repository (https://tuf-repo-cdn.sigstore.dev, target `trusted_root.json`),
+ * as shipped by the `sigstore` Python client 4.5.0 in
+ * `sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/trusted_root.json`.
+ * Embedded rather than fetched: fetching it at run time would trust whoever
+ * serves it, the very thing this check exists to avoid.
+ *
+ * Left out, because a legacy cosign bundle never uses them: the CT logs (the
+ * certificate's SCT is not checked here, as core does not either), the
+ * timestamp authority, and the Rekor v2 log `log2025-1.rekor.sigstore.dev`,
+ * whose Ed25519 key signs checkpoints rather than signed entry timestamps. A
+ * bundle that names any log but those below is refused.
+ *
+ * To refresh it when Sigstore rotates a key or adds a CA: take the current
+ * `trusted_root.json` from a TUF client (`python -m sigstore` or `cosign
+ * initialize` both keep one, verified against the TUF root), and copy each
+ * `certificateAuthorities[].certChain.certificates[].rawBytes` with its
+ * `validFor`, and each ECDSA `tlogs[]` entry's `publicKey.rawBytes`,
+ * `publicKey.validFor` and `logId.keyId` (as hex). The tests check each log id
+ * is the SHA-256 of its key and each chain verifies.
+ */
+/** A Fulcio CA: its chain from the certificate that issues leaves up to the root, DER as base64. */
+export interface FulcioAuthority {
+    uri: string;
+    /** When the trust root says this CA issued certificates. No `end`: it still does. */
+    validFor: {
+        start: string;
+        end?: string;
+    };
+    certChain: string[];
+}
+/** A Rekor log whose signed entry timestamps are accepted. */
+export interface RekorLog {
+    baseUrl: string;
+    /** The log id a bundle names it by: the SHA-256 of its public key, hex. */
+    logId: string;
+    /** Its public key: DER SubjectPublicKeyInfo, base64. ECDSA P-256 with SHA-256. */
+    publicKey: string;
+    validFor: {
+        start: string;
+        end?: string;
+    };
+}
+export declare const FULCIO_AUTHORITIES: readonly FulcioAuthority[];
+export declare const REKOR_LOGS: readonly RekorLog[];