@hesohq/verify-wasm 0.5.1-dev.145 → 0.5.1-dev.147

package/heso_wasm.d.ts

@@ -185,6 +185,41 @@ export class CommitmentVerdict {
     verdict: string;
 }
 
+/**
+ * The attested-rail tri-state verdict (schema §6/§7). `tri_state` is the coarse
+ * `"Valid" | "Fail" | "Withheld"`; `verdict_tag` is the single §7 wire string
+ * (the one owner per outcome, identical across Rust/WASM/CLI/napi/Python);
+ * `annotations` are the non-verdict leg tags (`"EnclaveWitnessedGreen"`,
+ * `"EnclaveRegistryResolved"`, …) that ride alongside a Valid verdict.
+ *
+ * HONEST by construction: a receipt that carries NO signed `content.enclave_egress`
+ * core is not an attested-rail receipt at all — it returns `attested = false`
+ * with an EMPTY `tri_state`/`verdict_tag` (PG-1 skip), NEVER a green.
+ */
+export class EnclaveRailVerdict {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The non-verdict annotation tags (only ever non-empty on a `"Valid"` verdict).
+     */
+    annotations: string[];
+    /**
+     * `true` iff the receipt carried a signed `content.enclave_egress` core. When
+     * `false`, `tri_state`/`verdict_tag` are empty and `annotations` is empty.
+     */
+    attested: boolean;
+    /**
+     * The coarse tri-state: `"Valid"`, `"Fail"`, or `"Withheld"`; `""` when
+     * `attested == false`.
+     */
+    tri_state: string;
+    /**
+     * The single §7 `verdict_tag` wire string; `""` when `attested == false`.
+     */
+    verdict_tag: string;
+}
+
 /**
  * The base verdict + the rendered signed metrics + the offline-recomputed cost.
  *
@@ -707,6 +742,33 @@ export function verifyActionReceiptWithTransparency(receipt_bytes: Uint8Array, l
  */
 export function verifyApprovalToken(token: Uint8Array, action_canonical: Uint8Array, now_unix_secs: bigint, seen_nonces: Array<any>, required_scope: string, required_decision: string, registered_keys_b64: Array<any>): ApprovalTokenClaims;
 
+/**
+ * Verify a receipt's signed `content.enclave_egress` attested-rail core + its
+ * unsigned `enclave_window_proofs` sidecar (schema §6), entirely offline from the
+ * frozen bytes plus the caller's out-of-band pins.
+ *
+ * `receipt_bytes`          — raw `ActionReceipt` JSON (`Uint8Array`). A
+ *                            structurally bad receipt THROWS (there is no
+ *                            `EnclaveVerdict` "Malformed" variant in the frozen §7
+ *                            catalogue — an off-catalogue green is impossible).
+ * `pinned_root_json`       — the PINNED AWS Nitro root (`{sha256_fingerprint_hex,
+ *                            root_der_b64}`), out of band.
+ * `reference_values_json`  — the PINNED reference values (`{pcr0,pcr1,pcr2,pcr8}`,
+ *                            96 lowercase hex each), out of band.
+ * `witness_context_json`   — the witness policy registry + log keys (see
+ *                            [`WitnessContextInput`]).
+ * `trusted_now_millis`     — the relying party's trusted clock, Unix MILLIS
+ *                            (floored to whole seconds for the BREACHED / pending
+ *                            math, so a sub-second remainder never rounds forward).
+ *
+ * Throws a `JsError` only for an UNUSABLE input: a malformed receipt, a malformed
+ * pin JSON, or a log key that is not base64 of exactly 32 bytes. Every
+ * cryptographic / contract / quorum outcome is a non-throwing
+ * [`EnclaveRailVerdict`] tri-state instead (false-green invariant §0.6: an
+ * unknown / newer / unresolvable receipt is WITHHELD or FAIL, never Valid).
+ */
+export function verifyAttestedRail(receipt_bytes: Uint8Array, pinned_root_json: string, reference_values_json: string, witness_context_json: string, trusted_now_millis: number): EnclaveRailVerdict;
+
 /**
  * Verify an ordered array of `ActionReceipt`s as a tamper-evident chain.
  *
@@ -864,6 +926,12 @@ export interface InitOutput {
     readonly __wbg_get_transparencyverdict_witness_count: (a: number) => number;
     readonly __wbg_set_transparencyverdict_witness_count: (a: number, b: number) => void;
     readonly verifyActionReceiptWithTransparency: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+    readonly __wbg_enclaverailverdict_free: (a: number, b: number) => void;
+    readonly __wbg_get_enclaverailverdict_attested: (a: number) => number;
+    readonly __wbg_set_enclaverailverdict_attested: (a: number, b: number) => void;
+    readonly __wbg_get_enclaverailverdict_annotations: (a: number, b: number) => void;
+    readonly __wbg_set_enclaverailverdict_annotations: (a: number, b: number, c: number) => void;
+    readonly verifyAttestedRail: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
     readonly actionCanonicalBytes: (a: number, b: number, c: number) => void;
     readonly l1CosignPayload: (a: number, b: number, c: number, d: number, e: number) => void;
     readonly quorumCosignPayload: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => void;
@@ -956,6 +1024,8 @@ export interface InitOutput {
     readonly __wbg_set_transparencyverdict_verdict: (a: number, b: number, c: number) => void;
     readonly __wbg_set_transparencyverdict_trust_level: (a: number, b: number, c: number) => void;
     readonly __wbg_set_transparencyverdict_witness_status: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_enclaverailverdict_tri_state: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_enclaverailverdict_verdict_tag: (a: number, b: number, c: number) => void;
     readonly __wbg_set_cloudtrailfeedverdict_broken_at: (a: number, b: number) => void;
     readonly __wbg_get_transparencyverdict_witnessed: (a: number) => number;
     readonly __wbg_get_cloudtrailfeedverdict_broken_at: (a: number) => number;
@@ -969,6 +1039,8 @@ export interface InitOutput {
     readonly __wbg_get_transparencyverdict_verdict: (a: number, b: number) => void;
     readonly __wbg_get_transparencyverdict_trust_level: (a: number, b: number) => void;
     readonly __wbg_get_transparencyverdict_witness_status: (a: number, b: number) => void;
+    readonly __wbg_get_enclaverailverdict_tri_state: (a: number, b: number) => void;
+    readonly __wbg_get_enclaverailverdict_verdict_tag: (a: number, b: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;
     readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_add_to_stack_pointer: (a: number) => number;

package/heso_wasm.js

@@ -663,6 +663,140 @@ export class CommitmentVerdict {
 }
 if (Symbol.dispose) CommitmentVerdict.prototype[Symbol.dispose] = CommitmentVerdict.prototype.free;
 
+/**
+ * The attested-rail tri-state verdict (schema §6/§7). `tri_state` is the coarse
+ * `"Valid" | "Fail" | "Withheld"`; `verdict_tag` is the single §7 wire string
+ * (the one owner per outcome, identical across Rust/WASM/CLI/napi/Python);
+ * `annotations` are the non-verdict leg tags (`"EnclaveWitnessedGreen"`,
+ * `"EnclaveRegistryResolved"`, …) that ride alongside a Valid verdict.
+ *
+ * HONEST by construction: a receipt that carries NO signed `content.enclave_egress`
+ * core is not an attested-rail receipt at all — it returns `attested = false`
+ * with an EMPTY `tri_state`/`verdict_tag` (PG-1 skip), NEVER a green.
+ */
+export class EnclaveRailVerdict {
+    static __wrap(ptr) {
+        const obj = Object.create(EnclaveRailVerdict.prototype);
+        obj.__wbg_ptr = ptr;
+        EnclaveRailVerdictFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        EnclaveRailVerdictFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_enclaverailverdict_free(ptr, 0);
+    }
+    /**
+     * The non-verdict annotation tags (only ever non-empty on a `"Valid"` verdict).
+     * @returns {string[]}
+     */
+    get annotations() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.__wbg_get_enclaverailverdict_annotations(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * `true` iff the receipt carried a signed `content.enclave_egress` core. When
+     * `false`, `tri_state`/`verdict_tag` are empty and `annotations` is empty.
+     * @returns {boolean}
+     */
+    get attested() {
+        const ret = wasm.__wbg_get_enclaverailverdict_attested(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * The coarse tri-state: `"Valid"`, `"Fail"`, or `"Withheld"`; `""` when
+     * `attested == false`.
+     * @returns {string}
+     */
+    get tri_state() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.__wbg_get_enclaverailverdict_tri_state(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export3(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * The single §7 `verdict_tag` wire string; `""` when `attested == false`.
+     * @returns {string}
+     */
+    get verdict_tag() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.__wbg_get_enclaverailverdict_verdict_tag(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export3(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * The non-verdict annotation tags (only ever non-empty on a `"Valid"` verdict).
+     * @param {string[]} arg0
+     */
+    set annotations(arg0) {
+        const ptr0 = passArrayJsValueToWasm0(arg0, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_enclaverailverdict_annotations(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * `true` iff the receipt carried a signed `content.enclave_egress` core. When
+     * `false`, `tri_state`/`verdict_tag` are empty and `annotations` is empty.
+     * @param {boolean} arg0
+     */
+    set attested(arg0) {
+        wasm.__wbg_set_enclaverailverdict_attested(this.__wbg_ptr, arg0);
+    }
+    /**
+     * The coarse tri-state: `"Valid"`, `"Fail"`, or `"Withheld"`; `""` when
+     * `attested == false`.
+     * @param {string} arg0
+     */
+    set tri_state(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_enclaverailverdict_tri_state(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * The single §7 `verdict_tag` wire string; `""` when `attested == false`.
+     * @param {string} arg0
+     */
+    set verdict_tag(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_enclaverailverdict_verdict_tag(this.__wbg_ptr, ptr0, len0);
+    }
+}
+if (Symbol.dispose) EnclaveRailVerdict.prototype[Symbol.dispose] = EnclaveRailVerdict.prototype.free;
+
 /**
  * The base verdict + the rendered signed metrics + the offline-recomputed cost.
  *
@@ -2176,6 +2310,61 @@ export function verifyApprovalToken(token, action_canonical, now_unix_secs, seen
     }
 }
 
+/**
+ * Verify a receipt's signed `content.enclave_egress` attested-rail core + its
+ * unsigned `enclave_window_proofs` sidecar (schema §6), entirely offline from the
+ * frozen bytes plus the caller's out-of-band pins.
+ *
+ * `receipt_bytes`          — raw `ActionReceipt` JSON (`Uint8Array`). A
+ *                            structurally bad receipt THROWS (there is no
+ *                            `EnclaveVerdict` "Malformed" variant in the frozen §7
+ *                            catalogue — an off-catalogue green is impossible).
+ * `pinned_root_json`       — the PINNED AWS Nitro root (`{sha256_fingerprint_hex,
+ *                            root_der_b64}`), out of band.
+ * `reference_values_json`  — the PINNED reference values (`{pcr0,pcr1,pcr2,pcr8}`,
+ *                            96 lowercase hex each), out of band.
+ * `witness_context_json`   — the witness policy registry + log keys (see
+ *                            [`WitnessContextInput`]).
+ * `trusted_now_millis`     — the relying party's trusted clock, Unix MILLIS
+ *                            (floored to whole seconds for the BREACHED / pending
+ *                            math, so a sub-second remainder never rounds forward).
+ *
+ * Throws a `JsError` only for an UNUSABLE input: a malformed receipt, a malformed
+ * pin JSON, or a log key that is not base64 of exactly 32 bytes. Every
+ * cryptographic / contract / quorum outcome is a non-throwing
+ * [`EnclaveRailVerdict`] tri-state instead (false-green invariant §0.6: an
+ * unknown / newer / unresolvable receipt is WITHHELD or FAIL, never Valid).
+ * @param {Uint8Array} receipt_bytes
+ * @param {string} pinned_root_json
+ * @param {string} reference_values_json
+ * @param {string} witness_context_json
+ * @param {number} trusted_now_millis
+ * @returns {EnclaveRailVerdict}
+ */
+export function verifyAttestedRail(receipt_bytes, pinned_root_json, reference_values_json, witness_context_json, trusted_now_millis) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(receipt_bytes, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(pinned_root_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(reference_values_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len2 = WASM_VECTOR_LEN;
+        const ptr3 = passStringToWasm0(witness_context_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len3 = WASM_VECTOR_LEN;
+        wasm.verifyAttestedRail(retptr, ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, trusted_now_millis);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return EnclaveRailVerdict.__wrap(r0);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
 /**
  * Verify an ordered array of `ActionReceipt`s as a tamper-evident chain.
  *
@@ -2569,7 +2758,12 @@ function __wbg_get_imports() {
         __wbg_set_29c99a8aac1c01e5: function(arg0, arg1, arg2) {
             getObject(arg0).set(getArrayU8FromWasm0(arg1, arg2));
         },
-        __wbindgen_cast_0000000000000001: function(arg0) {
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return addHeapObject(ret);
+        },
+        __wbindgen_cast_0000000000000002: function(arg0) {
             // Cast intrinsic for `U64 -> Externref`.
             const ret = BigInt.asUintN(64, arg0);
             return addHeapObject(ret);
@@ -2603,6 +2797,9 @@ const CloudTrailFeedVerdictFinalization = (typeof FinalizationRegistry === 'unde
 const CommitmentVerdictFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_commitmentverdict_free(ptr, 1));
+const EnclaveRailVerdictFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_enclaverailverdict_free(ptr, 1));
 const MetricsVerdictFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_metricsverdict_free(ptr, 1));
@@ -2628,6 +2825,16 @@ function dropObject(idx) {
     heap_next = idx;
 }
 
+function getArrayJsValueFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    const mem = getDataViewMemory0();
+    const result = [];
+    for (let i = ptr; i < ptr + 4 * len; i += 4) {
+        result.push(takeObject(mem.getUint32(i, true)));
+    }
+    return result;
+}
+
 function getArrayU8FromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);

package/heso_wasm_bg.wasm.d.ts

@@ -36,6 +36,12 @@ export const __wbg_transparencyverdict_free: (a: number, b: number) => void;
 export const __wbg_get_transparencyverdict_witness_count: (a: number) => number;
 export const __wbg_set_transparencyverdict_witness_count: (a: number, b: number) => void;
 export const verifyActionReceiptWithTransparency: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+export const __wbg_enclaverailverdict_free: (a: number, b: number) => void;
+export const __wbg_get_enclaverailverdict_attested: (a: number) => number;
+export const __wbg_set_enclaverailverdict_attested: (a: number, b: number) => void;
+export const __wbg_get_enclaverailverdict_annotations: (a: number, b: number) => void;
+export const __wbg_set_enclaverailverdict_annotations: (a: number, b: number, c: number) => void;
+export const verifyAttestedRail: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
 export const actionCanonicalBytes: (a: number, b: number, c: number) => void;
 export const l1CosignPayload: (a: number, b: number, c: number, d: number, e: number) => void;
 export const quorumCosignPayload: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => void;
@@ -128,6 +134,8 @@ export const __wbg_set_commitmentverdict_signer_fpr: (a: number, b: number, c: n
 export const __wbg_set_transparencyverdict_verdict: (a: number, b: number, c: number) => void;
 export const __wbg_set_transparencyverdict_trust_level: (a: number, b: number, c: number) => void;
 export const __wbg_set_transparencyverdict_witness_status: (a: number, b: number, c: number) => void;
+export const __wbg_set_enclaverailverdict_tri_state: (a: number, b: number, c: number) => void;
+export const __wbg_set_enclaverailverdict_verdict_tag: (a: number, b: number, c: number) => void;
 export const __wbg_set_cloudtrailfeedverdict_broken_at: (a: number, b: number) => void;
 export const __wbg_get_transparencyverdict_witnessed: (a: number) => number;
 export const __wbg_get_cloudtrailfeedverdict_broken_at: (a: number) => number;
@@ -141,6 +149,8 @@ export const __wbg_get_commitmentverdict_signer_fpr: (a: number, b: number) => v
 export const __wbg_get_transparencyverdict_verdict: (a: number, b: number) => void;
 export const __wbg_get_transparencyverdict_trust_level: (a: number, b: number) => void;
 export const __wbg_get_transparencyverdict_witness_status: (a: number, b: number) => void;
+export const __wbg_get_enclaverailverdict_tri_state: (a: number, b: number) => void;
+export const __wbg_get_enclaverailverdict_verdict_tag: (a: number, b: number) => void;
 export const __wbindgen_export: (a: number, b: number) => number;
 export const __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_add_to_stack_pointer: (a: number) => number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hesohq/verify-wasm",
-  "version": "0.5.1-dev.145",
+  "version": "0.5.1-dev.147",
   "description": "HESO Enterprise trust layer — browser WASM verify-only surface (ESM)",
   "type": "module",
   "scripts": {