@mikeargento/bitgraph 1.1.0

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,6CAA6C;QAC7C,oDAAoD;QACpD,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,SAAS,CACjB,4BAA4B,OAAO,KAAK,gDAAgD,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,iFAAiF;gBAC/E,mDAAmD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,yCAAyC;QACzC,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IAED,6DAA6D;IAC7D,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvE,MAAM,KAAK,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;QACtD,gEAAgE;QAChE,kEAAkE;QAClE,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAa,EAAE,CAAa;IAC5D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,kEAAkE;QAClE,IAAI,IAAK,CAAC,CAAC,CAAC,CAAY,GAAI,CAAC,CAAC,CAAC,CAAY,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/constructor.d.ts

@@ -0,0 +1,66 @@
+import type { HostCapabilities } from "./host.js";
+import type { BitGraphPolicy, BitGraphProof, AgencyEnvelope, Attribution, PolicyBinding } from "@mikeargento/bitgraph-verify";
+export declare class Constructor {
+    #private;
+    private constructor();
+    /**
+     * Initialize a Constructor bound to a host adapter.
+     *
+     * Performs a preflight check to confirm the host can produce a measurement
+     * and a public key. If either fails the returned promise rejects and no
+     * Constructor is created.
+     *
+     * @param opts.host     - Host capabilities implementation (TEE adapter)
+     * @param opts.policy   - Optional policy constraints
+     * @param opts.epochId  - Optional epoch identifier (generated at enclave boot).
+     *                        When provided, included in every proof's commit.epochId field
+     *                        (signed, tamper-evident). Verifiers use epochId to detect
+     *                        enclave lifecycle boundaries.
+     */
+    static initialize(opts: {
+        host: HostCapabilities;
+        policy?: BitGraphPolicy;
+        epochId?: string;
+    }): Promise<Constructor>;
+    /**
+     * Produce a tamper-evident, signed commit proof for a pre-computed digest.
+     *
+     * Same atomic guarantees as `commit()`, but accepts a Base64-encoded
+     * SHA-256 digest instead of raw bytes. This enables digest-only mode
+     * where the raw data never leaves the caller (e.g. an iPhone sending
+     * only the SHA-256 of a photo to the enclave).
+     *
+     * @param input.digestB64        - Base64-standard SHA-256 digest of the data
+     * @param input.metadata         - Advisory metadata (NOT signed)
+     * @param input.prevProofHashB64 - Optional base64 hash of a prior proof for chaining
+     * @param input.agency           - Optional agency envelope (actor + authorization)
+     */
+    commitDigest(input: {
+        digestB64: string;
+        metadata?: Record<string, unknown>;
+        prevProofHashB64?: string;
+        agency?: AgencyEnvelope;
+        attribution?: Attribution;
+        policy?: PolicyBinding;
+    }): Promise<BitGraphProof>;
+    /**
+     * Produce a tamper-evident, signed commit proof for `input.bytes`.
+     *
+     * The call is atomic: it either returns a complete BitGraphProof or throws.
+     * No partial proof is ever returned.
+     *
+     * @param input.bytes            - The raw bytes to commit
+     * @param input.metadata         - Advisory metadata (NOT signed)
+     * @param input.prevProofHashB64 - Optional base64 hash of a prior proof for chaining
+     * @param input.agency           - Optional agency envelope (actor + authorization)
+     */
+    commit(input: {
+        bytes: Uint8Array;
+        metadata?: Record<string, unknown>;
+        prevProofHashB64?: string;
+        agency?: AgencyEnvelope;
+        attribution?: Attribution;
+        policy?: PolicyBinding;
+    }): Promise<BitGraphProof>;
+}
+//# sourceMappingURL=constructor.d.ts.map

package/dist/constructor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constructor.d.ts","sourceRoot":"","sources":["../src/constructor.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAc,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAM1I,qBAAa,WAAW;;IAKtB,OAAO;IAUP;;;;;;;;;;;;;OAaG;WACU,UAAU,CAAC,IAAI,EAAE;QAC5B,IAAI,EAAE,gBAAgB,CAAC;QACvB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,WAAW,CAAC;IAkCxB;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,GAAG,OAAO,CAAC,aAAa,CAAC;IAe1B;;;;;;;;;;OAUG;IACG,MAAM,CAAC,KAAK,EAAE;QAClB,KAAK,EAAE,UAAU,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,GAAG,OAAO,CAAC,aAAa,CAAC;CAwN3B"}

package/dist/constructor.js

@@ -0,0 +1,339 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+/**
+ * bitgraph-core Constructor
+ *
+ * The Constructor is the sole write path in bitgraph-core. It enforces a strict
+ * atomic commit invariant:
+ *
+ *   authorize → bind → sign → (authorization consumed)
+ *
+ * No partial outputs are produced. If any step fails the entire commit
+ * is aborted and an error is thrown without returning any proof fragment.
+ *
+ * Commit steps (in order):
+ *   1. Obtain monotonic counter (if host supports it)
+ *   2. Obtain fresh boundary nonce from host
+ *   3. Obtain secure time (if host supports it)
+ *   4. Compute SHA-256 of input bytes
+ *   5. Retrieve enclave measurement and public key
+ *   6. Build canonical signed body (includes enforcement + measurement +
+ *      attestationFormat when present)
+ *   7. Canonicalize signed body to UTF-8 bytes
+ *   8. Sign canonical bytes via host
+ *   9. Optionally obtain attestation report bound to this commit
+ *  10. Assemble and return the complete BitGraphProof
+ *
+ * Steps 1-9 are performed inside a single async critical section; any
+ * rejection causes the function to throw with no returned value.
+ */
+import { sha256 } from "@noble/hashes/sha256";
+import { canonicalize } from "@mikeargento/bitgraph-verify";
+// ---------------------------------------------------------------------------
+// Constructor class
+// ---------------------------------------------------------------------------
+export class Constructor {
+    #host;
+    #policy;
+    #epochId;
+    constructor(host, policy, epochId) {
+        this.#host = host;
+        this.#policy = policy;
+        this.#epochId = epochId;
+    }
+    /**
+     * Initialize a Constructor bound to a host adapter.
+     *
+     * Performs a preflight check to confirm the host can produce a measurement
+     * and a public key. If either fails the returned promise rejects and no
+     * Constructor is created.
+     *
+     * @param opts.host     - Host capabilities implementation (TEE adapter)
+     * @param opts.policy   - Optional policy constraints
+     * @param opts.epochId  - Optional epoch identifier (generated at enclave boot).
+     *                        When provided, included in every proof's commit.epochId field
+     *                        (signed, tamper-evident). Verifiers use epochId to detect
+     *                        enclave lifecycle boundaries.
+     */
+    static async initialize(opts) {
+        const { host, policy = {}, epochId } = opts;
+        const resolvedPolicy = {
+            requireCounter: policy.requireCounter ?? false,
+            requireTime: policy.requireTime ?? false,
+        };
+        // Preflight: confirm the host can serve a measurement and a public key.
+        await Promise.all([host.getMeasurement(), host.getPublicKey()]).catch((cause) => {
+            throw new Error("bitgraph-core: host preflight failed — getMeasurement() or getPublicKey() rejected", { cause });
+        });
+        // Policy validation: if counter is required, confirm the host has it.
+        if (resolvedPolicy.requireCounter && typeof host.nextCounter !== "function") {
+            throw new Error("bitgraph-core: policy requires a monotonic counter but host does not implement nextCounter()");
+        }
+        if (resolvedPolicy.requireTime && typeof host.secureTime !== "function") {
+            throw new Error("bitgraph-core: policy requires secure time but host does not implement secureTime()");
+        }
+        return new Constructor(host, resolvedPolicy, epochId);
+    }
+    /**
+     * Produce a tamper-evident, signed commit proof for a pre-computed digest.
+     *
+     * Same atomic guarantees as `commit()`, but accepts a Base64-encoded
+     * SHA-256 digest instead of raw bytes. This enables digest-only mode
+     * where the raw data never leaves the caller (e.g. an iPhone sending
+     * only the SHA-256 of a photo to the enclave).
+     *
+     * @param input.digestB64        - Base64-standard SHA-256 digest of the data
+     * @param input.metadata         - Advisory metadata (NOT signed)
+     * @param input.prevProofHashB64 - Optional base64 hash of a prior proof for chaining
+     * @param input.agency           - Optional agency envelope (actor + authorization)
+     */
+    async commitDigest(input) {
+        const { digestB64, metadata, prevProofHashB64 } = input;
+        // Validate the provided digest
+        const digestBytes = fromBase64Digest(digestB64);
+        if (digestBytes.length !== 32) {
+            throw new RangeError(`bitgraph-core: digestB64 decodes to ${digestBytes.length} bytes; expected 32 (SHA-256)`);
+        }
+        // Delegate to the internal commit flow, skipping step 4 (hashing)
+        return this.#commitInternal({ digestB64, metadata, prevProofHashB64, agency: input.agency, attribution: input.attribution, policy: input.policy });
+    }
+    /**
+     * Produce a tamper-evident, signed commit proof for `input.bytes`.
+     *
+     * The call is atomic: it either returns a complete BitGraphProof or throws.
+     * No partial proof is ever returned.
+     *
+     * @param input.bytes            - The raw bytes to commit
+     * @param input.metadata         - Advisory metadata (NOT signed)
+     * @param input.prevProofHashB64 - Optional base64 hash of a prior proof for chaining
+     * @param input.agency           - Optional agency envelope (actor + authorization)
+     */
+    async commit(input) {
+        const { bytes, metadata, prevProofHashB64 } = input;
+        // Step 4: SHA-256 digest of input bytes
+        const digest = sha256(bytes);
+        const digestB64 = toBase64(digest);
+        // Delegate to shared internal flow (steps 1-3, 5-10)
+        return this.#commitInternal({ digestB64, metadata, prevProofHashB64, agency: input.agency, attribution: input.attribution, policy: input.policy });
+    }
+    // ------------------------------------------------------------------
+    // Internal shared commit flow (steps 1-3, 5-10)
+    // ------------------------------------------------------------------
+    async #commitInternal(input) {
+        const { digestB64, metadata, prevProofHashB64, agency, attribution, policy } = input;
+        // ------------------------------------------------------------------
+        // Step 1: Monotonic counter (optional, policy-gated)
+        // ------------------------------------------------------------------
+        let counter;
+        if (typeof this.#host.nextCounter === "function") {
+            counter = await this.#host.nextCounter().catch((cause) => {
+                throw new Error("bitgraph-core: host.nextCounter() rejected", { cause });
+            });
+            assertNonEmptyString(counter, "counter");
+        }
+        // ------------------------------------------------------------------
+        // Step 2: Fresh boundary nonce
+        // ------------------------------------------------------------------
+        const nonceBytes = await this.#host.getFreshNonce().catch((cause) => {
+            throw new Error("bitgraph-core: host.getFreshNonce() rejected", { cause });
+        });
+        assertUint8Array(nonceBytes, "nonce", 16); // minimum 128-bit entropy
+        // ------------------------------------------------------------------
+        // Step 3: Secure time (optional, policy-gated)
+        // ------------------------------------------------------------------
+        let time;
+        if (typeof this.#host.secureTime === "function") {
+            time = await this.#host.secureTime().catch((cause) => {
+                throw new Error("bitgraph-core: host.secureTime() rejected", { cause });
+            });
+            if (typeof time !== "number" || !Number.isFinite(time) || time < 0) {
+                throw new TypeError("bitgraph-core: host.secureTime() returned an invalid value; expected a non-negative finite number");
+            }
+        }
+        // ------------------------------------------------------------------
+        // Step 5: Enclave identity (measurement + public key)
+        // ------------------------------------------------------------------
+        const [measurement, publicKeyBytes] = await Promise.all([
+            this.#host.getMeasurement().catch((cause) => {
+                throw new Error("bitgraph-core: host.getMeasurement() rejected", { cause });
+            }),
+            this.#host.getPublicKey().catch((cause) => {
+                throw new Error("bitgraph-core: host.getPublicKey() rejected", { cause });
+            }),
+        ]);
+        assertNonEmptyString(measurement, "measurement");
+        assertUint8Array(publicKeyBytes, "publicKey", 32); // Ed25519 public key
+        // ------------------------------------------------------------------
+        // Step 6: Build canonical signed body
+        // ------------------------------------------------------------------
+        const commitFields = {
+            nonceB64: toBase64(nonceBytes),
+        };
+        if (counter !== undefined)
+            commitFields.counter = counter;
+        if (time !== undefined)
+            commitFields.time = time;
+        if (prevProofHashB64 !== undefined)
+            commitFields.prevB64 = prevProofHashB64;
+        if (this.#epochId !== undefined)
+            commitFields.epochId = this.#epochId;
+        const signedBody = {
+            version: "bitgraph/1",
+            artifact: {
+                hashAlg: "sha256",
+                digestB64,
+            },
+            commit: commitFields,
+            publicKeyB64: toBase64(publicKeyBytes),
+            enforcement: this.#host.enforcementTier,
+            measurement,
+        };
+        // Include actor identity in signed body when agency is present
+        if (agency !== undefined) {
+            signedBody.actor = agency.actor;
+        }
+        // Include policy binding in signed body when present (cryptographically sealed)
+        if (policy !== undefined) {
+            signedBody.policy = policy;
+        }
+        // Include attribution in signed body when present (cryptographically sealed)
+        if (attribution !== undefined) {
+            signedBody.attribution = attribution;
+        }
+        // ------------------------------------------------------------------
+        // Step 7: Canonicalize
+        // ------------------------------------------------------------------
+        const canonicalBytes = canonicalize(signedBody);
+        // ------------------------------------------------------------------
+        // Step 8: Sign
+        // ------------------------------------------------------------------
+        const signatureBytes = await this.#host.sign(canonicalBytes).catch((cause) => {
+            throw new Error("bitgraph-core: host.sign() rejected", { cause });
+        });
+        assertUint8Array(signatureBytes, "signature", 64); // Ed25519 signature
+        // ------------------------------------------------------------------
+        // Step 9: Optional attestation report bound to this commit
+        // ------------------------------------------------------------------
+        let attestation;
+        if (typeof this.#host.getAttestation === "function") {
+            // Bind the attestation to the canonical body hash so that a verifier
+            // can confirm the report covers this specific commit.
+            const bodyHash = sha256(canonicalBytes);
+            const result = await this.#host.getAttestation(bodyHash).catch((cause) => {
+                throw new Error("bitgraph-core: host.getAttestation() rejected", { cause });
+            });
+            if (typeof result !== "object" ||
+                result === null ||
+                typeof result.format !== "string" ||
+                result.format.length === 0 ||
+                !(result.report instanceof Uint8Array) ||
+                result.report.length === 0) {
+                throw new TypeError("bitgraph-core: host.getAttestation() must return { format: string, report: Uint8Array }");
+            }
+            attestation = {
+                format: result.format,
+                reportB64: toBase64(result.report),
+            };
+            // Also add attestationFormat to the signed body (already canonicalized
+            // above without it — we must add it BEFORE signing. Re-do steps 6-8
+            // with attestationFormat included so the format is covered by the sig.
+            signedBody.attestationFormat = result.format;
+            const canonicalBytesWithAttestation = canonicalize(signedBody);
+            const signatureBytesWithAttestation = await this.#host.sign(canonicalBytesWithAttestation).catch((cause) => {
+                throw new Error("bitgraph-core: host.sign() rejected (attestation body)", { cause });
+            });
+            assertUint8Array(signatureBytesWithAttestation, "signature", 64);
+            // ------------------------------------------------------------------
+            // Step 10: Assemble proof (with attestation)
+            // ------------------------------------------------------------------
+            const proof = {
+                version: "bitgraph/1",
+                artifact: signedBody.artifact,
+                commit: signedBody.commit,
+                signer: {
+                    publicKeyB64: signedBody.publicKeyB64,
+                    signatureB64: toBase64(signatureBytesWithAttestation),
+                },
+                environment: {
+                    enforcement: this.#host.enforcementTier,
+                    measurement: signedBody.measurement,
+                    attestation,
+                },
+            };
+            if (agency !== undefined)
+                proof.agency = agency;
+            if (policy !== undefined)
+                proof.policy = policy;
+            if (attribution !== undefined)
+                proof.attribution = attribution;
+            if (metadata !== undefined)
+                proof.metadata = metadata;
+            return proof;
+        }
+        // ------------------------------------------------------------------
+        // Step 10: Assemble proof (without attestation)
+        // ------------------------------------------------------------------
+        const proof = {
+            version: "bitgraph/1",
+            artifact: signedBody.artifact,
+            commit: signedBody.commit,
+            signer: {
+                publicKeyB64: signedBody.publicKeyB64,
+                signatureB64: toBase64(signatureBytes),
+            },
+            environment: {
+                enforcement: this.#host.enforcementTier,
+                measurement: signedBody.measurement,
+            },
+        };
+        if (agency !== undefined)
+            proof.agency = agency;
+        if (policy !== undefined)
+            proof.policy = policy;
+        if (attribution !== undefined)
+            proof.attribution = attribution;
+        if (metadata !== undefined)
+            proof.metadata = metadata;
+        return proof;
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal guards
+// ---------------------------------------------------------------------------
+function assertUint8Array(value, name, minLength) {
+    if (!(value instanceof Uint8Array)) {
+        throw new TypeError(`bitgraph-core: host returned non-Uint8Array for ${name}`);
+    }
+    if (value.length < minLength) {
+        throw new RangeError(`bitgraph-core: host returned ${name} with insufficient length ` +
+            `(got ${value.length}, expected >= ${minLength})`);
+    }
+}
+function assertNonEmptyString(value, name) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError(`bitgraph-core: host returned invalid ${name}: expected a non-empty string`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Encoding utility
+// ---------------------------------------------------------------------------
+/**
+ * Encode a Uint8Array as standard Base64 (RFC 4648 §4, with padding).
+ */
+function toBase64(bytes) {
+    return Buffer.from(bytes).toString("base64");
+}
+/**
+ * Decode a Base64 string to Uint8Array, validating round-trip fidelity.
+ * Used by commitDigest() to validate the caller-provided digest.
+ */
+function fromBase64Digest(b64) {
+    if (typeof b64 !== "string" || b64.length === 0) {
+        throw new TypeError("bitgraph-core: digestB64 must be a non-empty string");
+    }
+    const buf = Buffer.from(b64, "base64");
+    if (buf.toString("base64") !== b64) {
+        throw new TypeError(`bitgraph-core: digestB64 is not valid base64: "${b64}"`);
+    }
+    return new Uint8Array(buf);
+}
+//# sourceMappingURL=constructor.js.map

package/dist/constructor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constructor.js","sourceRoot":"","sources":["../src/constructor.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAI5D,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,OAAO,WAAW;IACb,KAAK,CAAmB;IACxB,OAAO,CAA2B;IAClC,QAAQ,CAAqB;IAEtC,YACE,IAAsB,EACtB,MAAgC,EAChC,OAA2B;QAE3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAIvB;QACC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAE5C,MAAM,cAAc,GAA6B;YAC/C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;YAC9C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;SACzC,CAAC;QAEF,wEAAwE;QACxE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,KAAK,CACnE,CAAC,KAAc,EAAE,EAAE;YACjB,MAAM,IAAI,KAAK,CACb,oFAAoF,EACpF,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,sEAAsE;QACtE,IAAI,cAAc,CAAC,cAAc,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,YAAY,CAAC,KAOlB;QACC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;QAExD,+BAA+B;QAC/B,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAClB,uCAAuC,WAAW,CAAC,MAAM,+BAA+B,CACzF,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CAAC,KAOZ;QACC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;QAEpD,wCAAwC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEnC,qDAAqD;QACrD,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrJ,CAAC;IAED,qEAAqE;IACrE,gDAAgD;IAChD,qEAAqE;IAErE,KAAK,CAAC,eAAe,CAAC,KAOrB;QACC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAErF,qEAAqE;QACrE,qDAAqD;QACrD,qEAAqE;QACrE,IAAI,OAA2B,CAAC;QAChC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACjD,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;YACH,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,qEAAqE;QACrE,+BAA+B;QAC/B,qEAAqE;QACrE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC3E,MAAM,IAAI,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B;QAErE,qEAAqE;QACrE,+CAA+C;QAC/C,qEAAqE;QACrE,IAAI,IAAwB,CAAC;QAC7B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YAChD,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,SAAS,CACjB,mGAAmG,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,sDAAsD;QACtD,qEAAqE;QACrE,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,+CAA+C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,CAAC,CAAC;SACH,CAAC,CAAC;QAEH,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,gBAAgB,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAExE,qEAAqE;QACrE,sCAAsC;QACtC,qEAAqE;QACrE,MAAM,YAAY,GAA4B;YAC5C,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;SAC/B,CAAC;QACF,IAAI,OAAO,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC;QACjD,IAAI,gBAAgB,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,GAAG,gBAAgB,CAAC;QAC5E,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEtE,MAAM,UAAU,GAAe;YAC7B,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE;gBACR,OAAO,EAAE,QAAQ;gBACjB,SAAS;aACV;YACD,MAAM,EAAE,YAAY;YACpB,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC;YACtC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;YACvC,WAAW;SACZ,CAAC;QAEF,+DAA+D;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAClC,CAAC;QAED,gFAAgF;QAChF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAC7B,CAAC;QAED,6EAA6E;QAC7E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,UAAU,CAAC,WAAW,GAAG,WAAW,CAAC;QACvC,CAAC;QAED,qEAAqE;QACrE,uBAAuB;QACvB,qEAAqE;QACrE,MAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAEhD,qEAAqE;QACrE,eAAe;QACf,qEAAqE;QACrE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAChE,CAAC,KAAc,EAAE,EAAE;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC,CACF,CAAC;QACF,gBAAgB,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB;QAEvE,qEAAqE;QACrE,2DAA2D;QAC3D,qEAAqE;QACrE,IAAI,WAAwD,CAAC;QAC7D,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YACpD,qEAAqE;YACrE,sDAAsD;YACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,KAAK,CAC5D,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,IAAI,KAAK,CAAC,+CAA+C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,CAAC,CACF,CAAC;YACF,IACE,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,KAAK,IAAI;gBACf,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;gBACjC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,YAAY,UAAU,CAAC;gBACtC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;gBACD,MAAM,IAAI,SAAS,CACjB,yFAAyF,CAC1F,CAAC;YACJ,CAAC;YACD,WAAW,GAAG;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;aACnC,CAAC;YACF,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,UAAU,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7C,MAAM,6BAA6B,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAC/D,MAAM,6BAA6B,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,KAAK,CAC9F,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,IAAI,KAAK,CAAC,wDAAwD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,CAAC,CACF,CAAC;YACF,gBAAgB,CAAC,6BAA6B,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAEjE,qEAAqE;YACrE,6CAA6C;YAC7C,qEAAqE;YACrE,MAAM,KAAK,GAAkB;gBAC3B,OAAO,EAAE,YAAY;gBACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,MAAM,EAAE;oBACN,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,YAAY,EAAE,QAAQ,CAAC,6BAA6B,CAAC;iBACtD;gBACD,WAAW,EAAE;oBACX,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;oBACvC,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,WAAW;iBACZ;aACF,CAAC;YAEF,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YAChD,IAAI,WAAW,KAAK,SAAS;gBAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/D,IAAI,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qEAAqE;QACrE,gDAAgD;QAChD,qEAAqE;QACrE,MAAM,KAAK,GAAkB;YAC3B,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE;gBACN,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC;aACvC;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;gBACvC,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC;SACF,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QAChD,IAAI,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/D,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,gBAAgB,CACvB,KAAc,EACd,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CACjB,mDAAmD,IAAI,EAAE,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAClB,gCAAgC,IAAI,4BAA4B;YAC9D,QAAQ,KAAK,CAAC,MAAM,iBAAiB,SAAS,GAAG,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,IAAY;IAEZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CACjB,wCAAwC,IAAI,+BAA+B,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;GAEG;AACH,SAAS,QAAQ,CAAC,KAAiB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,kDAAkD,GAAG,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/host.d.ts

@@ -0,0 +1,138 @@
+/**
+ * bitgraph-core host abstraction
+ *
+ * `HostCapabilities` is the sole interface between this library and any
+ * Trusted Execution Environment. All TEE-specific behavior (attestation,
+ * key management, monotonic counters, secure clocks) is supplied by a
+ * caller-provided implementation of this interface.
+ *
+ * Design goals:
+ *   - TEE-agnostic: no vendor types leak into this file
+ *   - Fail-closed: every capability is async and may reject
+ *   - Extensible: optional capabilities use the ? modifier so that
+ *     adapters can be progressively enhanced without breaking the core
+ *   - Self-describing: enforcementTier declares the adapter's trust class
+ *
+ * Adapters (e.g. aws-nitro, sgx-dcap, sev-snp) live in separate packages
+ * and implement this interface. A minimal in-process stub for testing is
+ * provided in @bitgraph/stub.
+ *
+ * IMPORTANT — adapter authors:
+ *   enforcementTier is self-reported and signed into every proof.
+ *   Claiming "measured-tee" requires that ALL of the following execute
+ *   inside the attested enclave boundary:
+ *     - key generation and sealing
+ *     - nonce generation (getFreshNonce)
+ *     - monotonic counter (nextCounter)
+ *     - commit gate logic
+ *     - signing (sign)
+ *   If any of these run outside the boundary, the correct tier is "hw-key"
+ *   or "stub". Misrepresenting the tier is an architectural violation of
+ *   BitGraph's atomic causality invariant.
+ */
+import type { EnforcementTier } from "@mikeargento/bitgraph-verify";
+export interface HostCapabilities {
+    /**
+     * Declares the enforcement tier of this adapter.
+     *
+     * This value is written into every proof's environment.enforcement field
+     * and is included in the signed body — making it tamper-evident in transit.
+     *
+     * Must be one of: "stub" | "hw-key" | "measured-tee"
+     * See EnforcementTier in types.ts for full semantics.
+     *
+     * This is a plain property (not async) because it is a static adapter
+     * declaration, not a runtime capability.
+     */
+    readonly enforcementTier: EnforcementTier;
+    /**
+     * Return the current enclave measurement as an opaque string.
+     *
+     * The format is adapter-defined (e.g. hex-encoded PCR0 for Nitro,
+     * MRENCLAVE for SGX). The verifier stores and compares this value
+     * verbatim; it does not parse or interpret it.
+     *
+     * Must not return a cached value from outside the TEE boundary.
+     *
+     * Tier expectations:
+     *   stub:         MAY return a synthetic sentinel
+     *   hw-key:       SHOULD return a string identifying the key environment
+     *   measured-tee: MUST return the attested enclave image identifier
+     */
+    getMeasurement(): Promise<string>;
+    /**
+     * Generate a fresh, boundary-local nonce.
+     *
+     * The nonce MUST be:
+     *   - generated inside the TEE boundary (not passed in from the host OS)
+     *   - at least 128 bits of entropy
+     *   - never reused across calls
+     *
+     * Returns raw bytes; the library base64-encodes them for the proof.
+     */
+    getFreshNonce(): Promise<Uint8Array>;
+    /**
+     * Sign `data` with the enclave's private signing key.
+     *
+     * The key MUST be:
+     *   - generated or provisioned inside the TEE boundary
+     *   - an Ed25519 key pair
+     *   - not exportable from the TEE
+     *
+     * Adapter note: when using @noble/ed25519, prefer signAsync() over sign()
+     * to avoid requiring a synchronous SHA-512 shim in Node.js environments.
+     *
+     * Returns the raw 64-byte Ed25519 signature.
+     */
+    sign(data: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Return the Ed25519 public key corresponding to the signing key.
+     *
+     * Returns raw 32-byte compressed public key bytes.
+     * Must be stable across calls within a single enclave lifecycle.
+     */
+    getPublicKey(): Promise<Uint8Array>;
+    /**
+     * Atomically advance and return a monotonic counter.
+     *
+     * The counter MUST be:
+     *   - monotonically increasing across restarts (hardware-backed preferred)
+     *   - returned as a decimal string (no leading zeros unless "0", ASCII digits only)
+     *   - never the same value twice (even after a crash/restart)
+     *
+     * Compared as BigInt by the verifier to avoid IEEE-754 precision loss.
+     * Absence of this capability degrades ordering guarantees to nonce-only.
+     */
+    nextCounter?(): Promise<string>;
+    /**
+     * Return a TEE-local attestation report that binds the current enclave
+     * state to an optional nonce or arbitrary user data.
+     *
+     * `userData` is adapter-defined; typically a hash of the canonical proof
+     * body so the report is bound to this specific commit.
+     *
+     * The returned object includes:
+     *   - format  — adapter-defined format identifier (e.g. "aws-nitro", "sgx-dcap")
+     *   - report  — raw attestation report bytes; the library does not parse them
+     *
+     * format is stored in environment.attestation.format and IS signed.
+     * report is stored in environment.attestation.reportB64 and is NOT signed
+     * (it is vendor-signed and self-authenticating).
+     */
+    getAttestation?(userData?: Uint8Array): Promise<{
+        format: string;
+        report: Uint8Array;
+    }>;
+    /**
+     * Return the current time as Unix epoch milliseconds from a TEE-trusted
+     * source.
+     *
+     * Software clocks inside TEEs can be skewed or forged by a malicious host.
+     * This capability is marked optional because not all TEE platforms provide
+     * a trusted clock. When absent, commit.time is omitted from the proof.
+     *
+     * Callers must not use time as the sole ordering mechanism.
+     */
+    secureTime?(): Promise<number>;
+}
+//# sourceMappingURL=host.d.ts.map

package/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAMpE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAE1C;;;;;;;;;;;;;OAaG;IACH,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAElC;;;;;;;;;OASG;IACH,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAErC;;;;;;;;;;;;OAYG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE5C;;;;;OAKG;IACH,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAMpC;;;;;;;;;;OAUG;IACH,WAAW,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAExF;;;;;;;;;OASG;IACH,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAChC"}

package/dist/host.js

@@ -0,0 +1,3 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+export {};
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA,gEAAgE"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * bitgraph-core — BitGraph
+ *
+ * Portable cryptographic proof at finalization.
+ * Hardware TEE enforcement via AWS Nitro Enclaves.
+ *
+ * The verification side (verify, proof schema, canonicalization, proofHash)
+ * lives in @mikeargento/bitgraph-verify (MIT) and is re-exported here for
+ * compatibility. Verification of BitGraph proofs is permissionless.
+ */
+export type { BitGraphProof, BitGraphPolicy, VerificationPolicy, SignedBody, EnforcementTier, Attribution, PolicyBinding, SlotAllocation, ActorIdentity, AuthorizationPayload, WebAuthnAuthorization, AgencyEnvelope, } from "@mikeargento/bitgraph-verify";
+export { verify, resetEpochLinkState } from "@mikeargento/bitgraph-verify";
+export type { VerifyResult } from "@mikeargento/bitgraph-verify";
+export { computeProofHash } from "@mikeargento/bitgraph-verify";
+export { canonicalize, canonicalizeToString, constantTimeEqual } from "@mikeargento/bitgraph-verify";
+export type { HostCapabilities } from "./host.js";
+export { Constructor } from "./constructor.js";
+export { parsePolicy, hashPolicy, createPolicyBinding, validateAction, } from "./policy.js";
+export type { PolicyDocument, PolicyRules, ActionValidationResult, } from "./policy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAGH,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,YAAY,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAGrG,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EACL,WAAW,EACX,UAAU,EACV,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,cAAc,EACd,WAAW,EACX,sBAAsB,GACvB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+export { verify, resetEpochLinkState } from "@mikeargento/bitgraph-verify";
+export { computeProofHash } from "@mikeargento/bitgraph-verify";
+export { canonicalize, canonicalizeToString, constantTimeEqual } from "@mikeargento/bitgraph-verify";
+// Constructor (write path)
+export { Constructor } from "./constructor.js";
+// Policy parsing, hashing, and validation
+export { parsePolicy, hashPolicy, createPolicyBinding, validateAction, } from "./policy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gEAAgE;AA4BhE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKrG,2BAA2B;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,0CAA0C;AAC1C,OAAO,EACL,WAAW,EACX,UAAU,EACV,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC"}