@jinn-network/client 0.1.2 → 0.1.3-canary.262e5cda

package/dist/types/envelope.d.ts

@@ -0,0 +1,1473 @@
+/**
+ * jinn.execution.v1 — generic signed envelope.
+ *
+ * Scope: docs/superpowers/specs/2026-04-23-jinn-execution-envelope-tee-scope.md
+ * §3.1 (D5 + K1 knowledge tree), §3.2 (K3 executor provenance), §3.4 migration.
+ *
+ * One envelope shape covers restoration manifests (role='restoration') and
+ * verdict manifests (role='verdict'). Payload is typed per (kind, role) via
+ * the registry in `./payloads/`.
+ */
+import { z } from 'zod';
+export declare const EvidenceTierSchema: z.ZodEnum<["self-signed", "committed", "attested"]>;
+export type EvidenceTier = z.infer<typeof EvidenceTierSchema>;
+export declare const RoleSchema: z.ZodEnum<["restoration", "verdict"]>;
+export type Role = z.infer<typeof RoleSchema>;
+declare const ArtifactSchema: z.ZodObject<{
+    artifactType: z.ZodString;
+    sha256: z.ZodString;
+    metadata: z.ZodOptional<z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        producedBy: z.ZodOptional<z.ZodObject<{
+            spanId: z.ZodString;
+            trajectoryCid: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            spanId: string;
+            trajectoryCid: string;
+        }, {
+            spanId: string;
+            trajectoryCid: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        producedBy?: {
+            spanId: string;
+            trajectoryCid: string;
+        } | undefined;
+    }, {
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        producedBy?: {
+            spanId: string;
+            trajectoryCid: string;
+        } | undefined;
+    }>>;
+    access: z.ZodObject<{
+        endpoint: z.ZodString;
+        priceUsdc: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        endpoint: string;
+        priceUsdc: string;
+    }, {
+        endpoint: string;
+        priceUsdc: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    artifactType: string;
+    sha256: string;
+    access: {
+        endpoint: string;
+        priceUsdc: string;
+    };
+    metadata?: {
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        producedBy?: {
+            spanId: string;
+            trajectoryCid: string;
+        } | undefined;
+    } | undefined;
+}, {
+    artifactType: string;
+    sha256: string;
+    access: {
+        endpoint: string;
+        priceUsdc: string;
+    };
+    metadata?: {
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        producedBy?: {
+            spanId: string;
+            trajectoryCid: string;
+        } | undefined;
+    } | undefined;
+}>;
+export type Artifact = z.infer<typeof ArtifactSchema>;
+export declare const UnsignedEnvelopeSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"jinn.execution.v1">;
+    kind: z.ZodString;
+    role: z.ZodEnum<["restoration", "verdict"]>;
+    generatedAt: z.ZodNumber;
+    intent: z.ZodObject<{
+        cid: z.ZodString;
+        onchainCreationTx: z.ZodString;
+        onchainCreationBlock: z.ZodNumber;
+        requestId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    }, {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    }>;
+    participant: z.ZodObject<{
+        safeAddress: z.ZodString;
+        agentEoa: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        safeAddress: string;
+        agentEoa: string;
+    }, {
+        safeAddress: string;
+        agentEoa: string;
+    }>;
+    window: z.ZodObject<{
+        startTs: z.ZodNumber;
+        endTs: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        startTs: number;
+        endTs: number;
+    }, {
+        startTs: number;
+        endTs: number;
+    }>;
+    executor: z.ZodObject<{
+        implName: z.ZodString;
+        implVersion: z.ZodString;
+        clientGitSha: z.ZodString;
+        codeDigest: z.ZodString;
+        signingKey: z.ZodObject<{
+            kind: z.ZodEnum<["agent-eoa", "enclave-bound"]>;
+            pubkey: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        }, {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        }>;
+        source: z.ZodOptional<z.ZodObject<{
+            bundleCid: z.ZodString;
+            sha256: z.ZodString;
+            humanUrl: z.ZodOptional<z.ZodString>;
+            buildRecipe: z.ZodObject<{
+                kind: z.ZodEnum<["dockerfile", "nix", "bazel"]>;
+                path: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            }, {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            }>;
+            measurement: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        }, {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    }, {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    }>;
+    evidenceTier: z.ZodEnum<["self-signed", "committed", "attested"]>;
+    attestation: z.ZodNullable<z.ZodObject<{
+        profile: z.ZodString;
+        quote: z.ZodString;
+        reportData: z.ZodString;
+        measurement: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    }, {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    }>>;
+    trajectory: z.ZodNullable<z.ZodObject<{
+        sha256: z.ZodString;
+        access: z.ZodObject<{
+            endpoint: z.ZodString;
+            priceUsdc: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            endpoint: string;
+            priceUsdc: string;
+        }, {
+            endpoint: string;
+            priceUsdc: string;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    }, {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    }>>;
+    artifacts: z.ZodArray<z.ZodObject<{
+        artifactType: z.ZodString;
+        sha256: z.ZodString;
+        metadata: z.ZodOptional<z.ZodObject<{
+            description: z.ZodOptional<z.ZodString>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            producedBy: z.ZodOptional<z.ZodObject<{
+                spanId: z.ZodString;
+                trajectoryCid: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                spanId: string;
+                trajectoryCid: string;
+            }, {
+                spanId: string;
+                trajectoryCid: string;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        }, {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        }>>;
+        access: z.ZodObject<{
+            endpoint: z.ZodString;
+            priceUsdc: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            endpoint: string;
+            priceUsdc: string;
+        }, {
+            endpoint: string;
+            priceUsdc: string;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }, {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }>, "many">;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, "strip", z.ZodTypeAny, {
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}, {
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}>, {
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}, {
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}>, {
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}, {
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}>;
+export type UnsignedEnvelope = z.infer<typeof UnsignedEnvelopeSchema>;
+export declare const SignedEnvelopeSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    signature: z.ZodObject<{
+        algo: z.ZodLiteral<"secp256k1">;
+        signer: z.ZodString;
+        hash: z.ZodString;
+        sig: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    }, {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    }>;
+    schemaVersion: z.ZodLiteral<"jinn.execution.v1">;
+    kind: z.ZodString;
+    role: z.ZodEnum<["restoration", "verdict"]>;
+    generatedAt: z.ZodNumber;
+    intent: z.ZodObject<{
+        cid: z.ZodString;
+        onchainCreationTx: z.ZodString;
+        onchainCreationBlock: z.ZodNumber;
+        requestId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    }, {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    }>;
+    participant: z.ZodObject<{
+        safeAddress: z.ZodString;
+        agentEoa: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        safeAddress: string;
+        agentEoa: string;
+    }, {
+        safeAddress: string;
+        agentEoa: string;
+    }>;
+    window: z.ZodObject<{
+        startTs: z.ZodNumber;
+        endTs: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        startTs: number;
+        endTs: number;
+    }, {
+        startTs: number;
+        endTs: number;
+    }>;
+    executor: z.ZodObject<{
+        implName: z.ZodString;
+        implVersion: z.ZodString;
+        clientGitSha: z.ZodString;
+        codeDigest: z.ZodString;
+        signingKey: z.ZodObject<{
+            kind: z.ZodEnum<["agent-eoa", "enclave-bound"]>;
+            pubkey: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        }, {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        }>;
+        source: z.ZodOptional<z.ZodObject<{
+            bundleCid: z.ZodString;
+            sha256: z.ZodString;
+            humanUrl: z.ZodOptional<z.ZodString>;
+            buildRecipe: z.ZodObject<{
+                kind: z.ZodEnum<["dockerfile", "nix", "bazel"]>;
+                path: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            }, {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            }>;
+            measurement: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        }, {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    }, {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    }>;
+    evidenceTier: z.ZodEnum<["self-signed", "committed", "attested"]>;
+    attestation: z.ZodNullable<z.ZodObject<{
+        profile: z.ZodString;
+        quote: z.ZodString;
+        reportData: z.ZodString;
+        measurement: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    }, {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    }>>;
+    trajectory: z.ZodNullable<z.ZodObject<{
+        sha256: z.ZodString;
+        access: z.ZodObject<{
+            endpoint: z.ZodString;
+            priceUsdc: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            endpoint: string;
+            priceUsdc: string;
+        }, {
+            endpoint: string;
+            priceUsdc: string;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    }, {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    }>>;
+    artifacts: z.ZodArray<z.ZodObject<{
+        artifactType: z.ZodString;
+        sha256: z.ZodString;
+        metadata: z.ZodOptional<z.ZodObject<{
+            description: z.ZodOptional<z.ZodString>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            producedBy: z.ZodOptional<z.ZodObject<{
+                spanId: z.ZodString;
+                trajectoryCid: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                spanId: string;
+                trajectoryCid: string;
+            }, {
+                spanId: string;
+                trajectoryCid: string;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        }, {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        }>>;
+        access: z.ZodObject<{
+            endpoint: z.ZodString;
+            priceUsdc: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            endpoint: string;
+            priceUsdc: string;
+        }, {
+            endpoint: string;
+            priceUsdc: string;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }, {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }>, "many">;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, "strip", z.ZodTypeAny, {
+    signature: {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    };
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}, {
+    signature: {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    };
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}>, {
+    signature: {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    };
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}, {
+    signature: {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    };
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}>, {
+    signature: {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    };
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}, {
+    signature: {
+        hash: string;
+        algo: "secp256k1";
+        signer: string;
+        sig: string;
+    };
+    schemaVersion: "jinn.execution.v1";
+    kind: string;
+    window: {
+        startTs: number;
+        endTs: number;
+    };
+    intent: {
+        cid: string;
+        requestId: string;
+        onchainCreationTx: string;
+        onchainCreationBlock: number;
+    };
+    payload: Record<string, unknown>;
+    role: "restoration" | "verdict";
+    generatedAt: number;
+    participant: {
+        safeAddress: string;
+        agentEoa: string;
+    };
+    executor: {
+        clientGitSha: string;
+        codeDigest: string;
+        implVersion: string;
+        implName: string;
+        signingKey: {
+            kind: "agent-eoa" | "enclave-bound";
+            pubkey: string;
+        };
+        source?: {
+            sha256: string;
+            bundleCid: string;
+            buildRecipe: {
+                path: string;
+                kind: "dockerfile" | "nix" | "bazel";
+            };
+            measurement: string;
+            humanUrl?: string | undefined;
+        } | undefined;
+    };
+    evidenceTier: "self-signed" | "committed" | "attested";
+    attestation: {
+        measurement: string;
+        profile: string;
+        quote: string;
+        reportData: string;
+    } | null;
+    trajectory: {
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+    } | null;
+    artifacts: {
+        artifactType: string;
+        sha256: string;
+        access: {
+            endpoint: string;
+            priceUsdc: string;
+        };
+        metadata?: {
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            producedBy?: {
+                spanId: string;
+                trajectoryCid: string;
+            } | undefined;
+        } | undefined;
+    }[];
+}>;
+export type SignedEnvelope = z.infer<typeof SignedEnvelopeSchema>;
+export {};