@nekzus/liop 2.4.0-alpha.24 → 2.4.0-alpha.26

package/dist/chunk-K3DGJLUY.js

@@ -1,106 +0,0 @@
-// src/utils/logger.ts
-var LiopLogger = class _LiopLogger {
-  static instance;
-  level = "info";
-  interceptor;
-  _isIntercepting = false;
-  constructor() {
-    this.setLevelFromEnv();
-  }
-  static getInstance() {
-    if (!_LiopLogger.instance) {
-      _LiopLogger.instance = new _LiopLogger();
-    }
-    return _LiopLogger.instance;
-  }
-  setLevelFromEnv() {
-    const envLevel = process.env.LIOP_LOG_LEVEL?.toLowerCase();
-    if (envLevel === "silent" || envLevel === "error" || envLevel === "warn" || envLevel === "info" || envLevel === "debug") {
-      this.level = envLevel;
-    } else {
-      this.level = "info";
-    }
-  }
-  setLevel(level) {
-    this.level = level;
-  }
-  /**
-   * Registers a technology-agnostic log interceptor.
-   * Pass `undefined` to disable interception (zero overhead).
-   */
-  setInterceptor(interceptor) {
-    this.interceptor = interceptor;
-  }
-  shouldLog(targetLevel) {
-    const levels = {
-      silent: 0,
-      error: 1,
-      warn: 2,
-      info: 3,
-      debug: 4
-    };
-    return levels[this.level] >= levels[targetLevel];
-  }
-  formatMessage(level, message) {
-    const ts = (/* @__PURE__ */ new Date()).toISOString();
-    return `[${ts}] [${level}] ${message}`;
-  }
-  /**
-   * Fire-and-forget async dispatch to the registered interceptor.
-   * Recursion guard prevents infinite loops when the interceptor
-   * itself triggers logging (directly or transitively).
-   */
-  emitToInterceptor(level, formattedMessage, args) {
-    if (!this.interceptor || this._isIntercepting) return;
-    this._isIntercepting = true;
-    const event = Object.freeze({
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      level,
-      message: formattedMessage,
-      args: Object.freeze([...args])
-    });
-    try {
-      const result = this.interceptor(event);
-      if (result && typeof result === "object" && "catch" in result) {
-        result.catch(() => {
-        });
-      }
-    } catch {
-    } finally {
-      this._isIntercepting = false;
-    }
-  }
-  error(message, ...args) {
-    if (this.shouldLog("error")) {
-      const formatted = this.formatMessage("ERROR", message);
-      console.error(formatted, ...args);
-      this.emitToInterceptor("error", formatted, args);
-    }
-  }
-  warn(message, ...args) {
-    if (this.shouldLog("warn")) {
-      const formatted = this.formatMessage("WARN", message);
-      console.error(formatted, ...args);
-      this.emitToInterceptor("warn", formatted, args);
-    }
-  }
-  info(message, ...args) {
-    if (this.shouldLog("info")) {
-      const formatted = this.formatMessage("INFO", message);
-      console.error(formatted, ...args);
-      this.emitToInterceptor("info", formatted, args);
-    }
-  }
-  debug(message, ...args) {
-    if (this.shouldLog("debug")) {
-      const formatted = this.formatMessage("DEBUG", message);
-      console.error(formatted, ...args);
-      this.emitToInterceptor("debug", formatted, args);
-    }
-  }
-};
-var log = LiopLogger.getInstance();
-
-export { LiopLogger, log };
-//# sourceMappingURL=chunk-K3DGJLUY.js.map
-//# sourceMappingURL=chunk-K3DGJLUY.js.map

package/dist/chunk-K3DGJLUY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/logger.ts"],"names":[],"mappings":";AAYO,IAAM,UAAA,GAAN,MAAM,WAAA,CAAW;AAAA,EACvB,OAAe,QAAA;AAAA,EACP,KAAA,GAAkB,MAAA;AAAA,EAClB,WAAA;AAAA,EACA,eAAA,GAAkB,KAAA;AAAA,EAElB,WAAA,GAAc;AACrB,IAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,EACtB;AAAA,EAEA,OAAc,WAAA,GAA0B;AACvC,IAAA,IAAI,CAAC,YAAW,QAAA,EAAU;AACzB,MAAA,WAAA,CAAW,QAAA,GAAW,IAAI,WAAA,EAAW;AAAA,IACtC;AACA,IAAA,OAAO,WAAA,CAAW,QAAA;AAAA,EACnB;AAAA,EAEQ,eAAA,GAAkB;AACzB,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,EAAgB,WAAA,EAAY;AACzD,IAAA,IACC,QAAA,KAAa,YACb,QAAA,KAAa,OAAA,IACb,aAAa,MAAA,IACb,QAAA,KAAa,MAAA,IACb,QAAA,KAAa,OAAA,EACZ;AACD,MAAA,IAAA,CAAK,KAAA,GAAQ,QAAA;AAAA,IACd,CAAA,MAAO;AAEN,MAAA,IAAA,CAAK,KAAA,GAAQ,MAAA;AAAA,IACd;AAAA,EACD;AAAA,EAEO,SAAS,KAAA,EAAiB;AAChC,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,eAAe,WAAA,EAAyC;AAC9D,IAAA,IAAA,CAAK,WAAA,GAAc,WAAA;AAAA,EACpB;AAAA,EAEQ,UAAU,WAAA,EAAgC;AACjD,IAAA,MAAM,MAAA,GAAmC;AAAA,MACxC,MAAA,EAAQ,CAAA;AAAA,MACR,KAAA,EAAO,CAAA;AAAA,MACP,IAAA,EAAM,CAAA;AAAA,MACN,IAAA,EAAM,CAAA;AAAA,MACN,KAAA,EAAO;AAAA,KACR;AACA,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,IAAK,OAAO,WAAW,CAAA;AAAA,EAChD;AAAA,EAEQ,aAAA,CAAc,OAAe,OAAA,EAAyB;AAC7D,IAAA,MAAM,EAAA,GAAA,iBAAK,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAClC,IAAA,OAAO,CAAA,CAAA,EAAI,EAAE,CAAA,GAAA,EAAM,KAAK,KAAK,OAAO,CAAA,CAAA;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iBAAA,CACP,KAAA,EACA,gBAAA,EACA,IAAA,EACO;AACP,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,IAAe,IAAA,CAAK,eAAA,EAAiB;AAC/C,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AACvB,IAAA,MAAM,KAAA,GAKD,OAAO,MAAA,CAAO;AAAA,MAClB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,KAAA;AAAA,MACA,OAAA,EAAS,gBAAA;AAAA,MACT,MAAM,MAAA,CAAO,MAAA,CAAO,CAAC,GAAG,IAAI,CAAC;AAAA,KAC7B,CAAA;AACD,IAAA,IAAI;AACH,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AACrC,MAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,WAAW,MAAA,EAAQ;AAC9D,QAAC,MAAA,CAAyB,MAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MACzC;AAAA,IACD,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACD,MAAA,IAAA,CAAK,eAAA,GAAkB,KAAA;AAAA,IACxB;AAAA,EACD;AAAA,EAEO,KAAA,CAAM,YAAoB,IAAA,EAAiB;AACjD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA;AACrD,MAAA,OAAA,CAAQ,KAAA,CAAM,SAAA,EAAW,GAAG,IAAI,CAAA;AAChC,MAAA,IAAA,CAAK,iBAAA,CAAkB,OAAA,EAAS,SAAA,EAAW,IAAI,CAAA;AAAA,IAChD;AAAA,EACD;AAAA,EAEO,IAAA,CAAK,YAAoB,IAAA,EAAiB;AAChD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,EAAG;AAC3B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,OAAO,CAAA;AACpD,MAAA,OAAA,CAAQ,KAAA,CAAM,SAAA,EAAW,GAAG,IAAI,CAAA;AAChC,MAAA,IAAA,CAAK,iBAAA,CAAkB,MAAA,EAAQ,SAAA,EAAW,IAAI,CAAA;AAAA,IAC/C;AAAA,EACD;AAAA,EAEO,IAAA,CAAK,YAAoB,IAAA,EAAiB;AAChD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,EAAG;AAC3B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,OAAO,CAAA;AACpD,MAAA,OAAA,CAAQ,KAAA,CAAM,SAAA,EAAW,GAAG,IAAI,CAAA;AAChC,MAAA,IAAA,CAAK,iBAAA,CAAkB,MAAA,EAAQ,SAAA,EAAW,IAAI,CAAA;AAAA,IAC/C;AAAA,EACD;AAAA,EAEO,KAAA,CAAM,YAAoB,IAAA,EAAiB;AACjD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA;AACrD,MAAA,OAAA,CAAQ,KAAA,CAAM,SAAA,EAAW,GAAG,IAAI,CAAA;AAChC,MAAA,IAAA,CAAK,iBAAA,CAAkB,OAAA,EAAS,SAAA,EAAW,IAAI,CAAA;AAAA,IAChD;AAAA,EACD;AACD;AAEO,IAAM,GAAA,GAAM,WAAW,WAAA","file":"chunk-K3DGJLUY.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { LogInterceptor } from \"../interceptors/log-interceptor.js\";\n\nexport type LogLevel = \"silent\" | \"error\" | \"warn\" | \"info\" | \"debug\";\n\n/**\n * LiopLogger - Structured Logging Abstraction\n * Configurable via `process.env.LIOP_LOG_LEVEL`.\n * Emits strictly to stderr to comply with MCP stdio protocols.\n */\nexport class LiopLogger {\n\tprivate static instance: LiopLogger;\n\tprivate level: LogLevel = \"info\";\n\tprivate interceptor?: LogInterceptor;\n\tprivate _isIntercepting = false;\n\n\tprivate constructor() {\n\t\tthis.setLevelFromEnv();\n\t}\n\n\tpublic static getInstance(): LiopLogger {\n\t\tif (!LiopLogger.instance) {\n\t\t\tLiopLogger.instance = new LiopLogger();\n\t\t}\n\t\treturn LiopLogger.instance;\n\t}\n\n\tprivate setLevelFromEnv() {\n\t\tconst envLevel = process.env.LIOP_LOG_LEVEL?.toLowerCase();\n\t\tif (\n\t\t\tenvLevel === \"silent\" ||\n\t\t\tenvLevel === \"error\" ||\n\t\t\tenvLevel === \"warn\" ||\n\t\t\tenvLevel === \"info\" ||\n\t\t\tenvLevel === \"debug\"\n\t\t) {\n\t\t\tthis.level = envLevel as LogLevel;\n\t\t} else {\n\t\t\t// Default level: info\n\t\t\tthis.level = \"info\";\n\t\t}\n\t}\n\n\tpublic setLevel(level: LogLevel) {\n\t\tthis.level = level;\n\t}\n\n\t/**\n\t * Registers a technology-agnostic log interceptor.\n\t * Pass `undefined` to disable interception (zero overhead).\n\t */\n\tpublic setInterceptor(interceptor: LogInterceptor | undefined) {\n\t\tthis.interceptor = interceptor;\n\t}\n\n\tprivate shouldLog(targetLevel: LogLevel): boolean {\n\t\tconst levels: Record<LogLevel, number> = {\n\t\t\tsilent: 0,\n\t\t\terror: 1,\n\t\t\twarn: 2,\n\t\t\tinfo: 3,\n\t\t\tdebug: 4,\n\t\t};\n\t\treturn levels[this.level] >= levels[targetLevel];\n\t}\n\n\tprivate formatMessage(level: string, message: string): string {\n\t\tconst ts = new Date().toISOString();\n\t\treturn `[${ts}] [${level}] ${message}`;\n\t}\n\n\t/**\n\t * Fire-and-forget async dispatch to the registered interceptor.\n\t * Recursion guard prevents infinite loops when the interceptor\n\t * itself triggers logging (directly or transitively).\n\t */\n\tprivate emitToInterceptor(\n\t\tlevel: LogLevel,\n\t\tformattedMessage: string,\n\t\targs: unknown[],\n\t): void {\n\t\tif (!this.interceptor || this._isIntercepting) return;\n\t\tthis._isIntercepting = true;\n\t\tconst event: Readonly<{\n\t\t\ttimestamp: string;\n\t\t\tlevel: LogLevel;\n\t\t\tmessage: string;\n\t\t\targs: readonly unknown[];\n\t\t}> = Object.freeze({\n\t\t\ttimestamp: new Date().toISOString(),\n\t\t\tlevel,\n\t\t\tmessage: formattedMessage,\n\t\t\targs: Object.freeze([...args]),\n\t\t});\n\t\ttry {\n\t\t\tconst result = this.interceptor(event);\n\t\t\tif (result && typeof result === \"object\" && \"catch\" in result) {\n\t\t\t\t(result as Promise<void>).catch(() => {});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Interceptor errors are silenced to protect protocol throughput\n\t\t} finally {\n\t\t\tthis._isIntercepting = false;\n\t\t}\n\t}\n\n\tpublic error(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"error\")) {\n\t\t\tconst formatted = this.formatMessage(\"ERROR\", message);\n\t\t\tconsole.error(formatted, ...args);\n\t\t\tthis.emitToInterceptor(\"error\", formatted, args);\n\t\t}\n\t}\n\n\tpublic warn(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"warn\")) {\n\t\t\tconst formatted = this.formatMessage(\"WARN\", message);\n\t\t\tconsole.error(formatted, ...args);\n\t\t\tthis.emitToInterceptor(\"warn\", formatted, args);\n\t\t}\n\t}\n\n\tpublic info(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"info\")) {\n\t\t\tconst formatted = this.formatMessage(\"INFO\", message);\n\t\t\tconsole.error(formatted, ...args);\n\t\t\tthis.emitToInterceptor(\"info\", formatted, args);\n\t\t}\n\t}\n\n\tpublic debug(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"debug\")) {\n\t\t\tconst formatted = this.formatMessage(\"DEBUG\", message);\n\t\t\tconsole.error(formatted, ...args);\n\t\t\tthis.emitToInterceptor(\"debug\", formatted, args);\n\t\t}\n\t}\n}\n\nexport const log = LiopLogger.getInstance();\n"]}

package/dist/chunk-KR5UZUEY.js

@@ -1,98 +0,0 @@
-import { z } from 'zod';
-
-// src/types.ts
-
-// src/gateway/mcp-compat.ts
-var MCP_LEGACY_SUPPORT_ENABLED = true;
-var MCP_PROTOCOL_VERSION_LEGACY = "2025-11-25";
-function buildLegacyInitializeResponse(serverInfo, id) {
-  return {
-    jsonrpc: "2.0",
-    id: id ?? null,
-    result: {
-      protocolVersion: MCP_PROTOCOL_VERSION_LEGACY,
-      capabilities: {
-        tools: { listChanged: true },
-        resources: { listChanged: true },
-        prompts: { listChanged: true }
-      },
-      serverInfo
-    }
-  };
-}
-function isLegacyRequest(request) {
-  if (request.method === "initialize" || request.method === "notifications/initialized") {
-    return true;
-  }
-  const params = request.params;
-  const meta = params?._meta;
-  const version = meta?.["io.modelcontextprotocol/protocolVersion"];
-  if (!version || version === MCP_PROTOCOL_VERSION_LEGACY) {
-    return true;
-  }
-  return false;
-}
-function adaptResponseForLegacyClient(response) {
-  if (!response.result || typeof response.result !== "object") {
-    return response;
-  }
-  const rawResult = { ...response.result };
-  delete rawResult.resultType;
-  delete rawResult.ttlMs;
-  delete rawResult.cacheScope;
-  return {
-    ...response,
-    result: rawResult
-  };
-}
-var TOOL_ALIASES = {
-  bank_tool: "Analyze_Synthetic_Bank_Transactions",
-  bank_tool_XDwd: "Analyze_Synthetic_Bank_Transactions",
-  vault_tool: "Analyze_Synthetic_Medical_Records",
-  vault_tool_E8wP: "Analyze_Synthetic_Medical_Records",
-  oracle_tool: "Analyze_HFT_Market_Data",
-  compute_aggregate: "Analyze_Synthetic_Bank_Transactions"
-};
-function normalizeToolArguments(args) {
-  if (!args) return {};
-  const normalized = { ...args };
-  if (normalized.data !== void 0) {
-    if (normalized.payload === void 0) {
-      normalized.payload = normalized.data;
-    }
-    if (normalized.envelope === void 0) {
-      normalized.envelope = normalized.data;
-    }
-  }
-  return normalized;
-}
-
-// src/types.ts
-var MCP_PROTOCOL_VERSION = "2026-07-28";
-var ToolSchema = z.object({
-  name: z.string(),
-  description: z.string().optional(),
-  inputSchema: z.record(z.string(), z.unknown())
-  // Represents a JSON Schema
-});
-var ResourceSchema = z.object({
-  uri: z.string(),
-  name: z.string(),
-  description: z.string().optional(),
-  mimeType: z.string().optional()
-});
-var PromptSchema = z.object({
-  name: z.string(),
-  description: z.string().optional(),
-  arguments: z.array(
-    z.object({
-      name: z.string(),
-      description: z.string().optional(),
-      required: z.boolean().optional()
-    })
-  ).optional()
-});
-
-export { MCP_LEGACY_SUPPORT_ENABLED, MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSION_LEGACY, PromptSchema, ResourceSchema, TOOL_ALIASES, ToolSchema, adaptResponseForLegacyClient, buildLegacyInitializeResponse, isLegacyRequest, normalizeToolArguments };
-//# sourceMappingURL=chunk-KR5UZUEY.js.map
-//# sourceMappingURL=chunk-KR5UZUEY.js.map

package/dist/chunk-KR5UZUEY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/gateway/mcp-compat.ts","../src/types.ts"],"names":[],"mappings":";;;;;AAiBO,IAAM,0BAAA,GAA6B;AAKnC,IAAM,2BAAA,GAA8B;AAKpC,SAAS,6BAAA,CACf,YACA,EAAA,EACc;AACd,EAAA,OAAO;AAAA,IACN,OAAA,EAAS,KAAA;AAAA,IACT,IAAI,EAAA,IAAM,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,MACP,eAAA,EAAiB,2BAAA;AAAA,MACjB,YAAA,EAAc;AAAA,QACb,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,QAC3B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,QAC/B,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA;AAAK,OAC9B;AAAA,MACA;AAAA;AACD,GACD;AACD;AAOO,SAAS,gBAAgB,OAAA,EAA8B;AAC7D,EAAA,IACC,OAAA,CAAQ,MAAA,KAAW,YAAA,IACnB,OAAA,CAAQ,WAAW,2BAAA,EAClB;AACD,IAAA,OAAO,IAAA;AAAA,EACR;AAEA,EAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,EAAA,MAAM,OAAO,MAAA,EAAQ,KAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,yCAAyC,CAAA;AAEhE,EAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,2BAAA,EAA6B;AACxD,IAAA,OAAO,IAAA;AAAA,EACR;AAEA,EAAA,OAAO,KAAA;AACR;AAMO,SAAS,6BACf,QAAA,EACc;AACd,EAAA,IAAI,CAAC,QAAA,CAAS,MAAA,IAAU,OAAO,QAAA,CAAS,WAAW,QAAA,EAAU;AAC5D,IAAA,OAAO,QAAA;AAAA,EACR;AAEA,EAAA,MAAM,SAAA,GAAY,EAAE,GAAI,QAAA,CAAS,MAAA,EAAmC;AAGpE,EAAA,OAAO,SAAA,CAAU,UAAA;AACjB,EAAA,OAAO,SAAA,CAAU,KAAA;AACjB,EAAA,OAAO,SAAA,CAAU,UAAA;AAEjB,EAAA,OAAO;AAAA,IACN,GAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT;AACD;AAMO,IAAM,YAAA,GAAuC;AAAA,EACnD,SAAA,EAAW,qCAAA;AAAA,EACX,cAAA,EAAgB,qCAAA;AAAA,EAChB,UAAA,EAAY,mCAAA;AAAA,EACZ,eAAA,EAAiB,mCAAA;AAAA,EACjB,WAAA,EAAa,yBAAA;AAAA,EACb,iBAAA,EAAmB;AACpB;AAMO,SAAS,uBACf,IAAA,EAC0B;AAC1B,EAAA,IAAI,CAAC,IAAA,EAAM,OAAO,EAAC;AACnB,EAAA,MAAM,UAAA,GAAa,EAAE,GAAG,IAAA,EAAK;AAC7B,EAAA,IAAI,UAAA,CAAW,SAAS,MAAA,EAAW;AAClC,IAAA,IAAI,UAAA,CAAW,YAAY,MAAA,EAAW;AACrC,MAAA,UAAA,CAAW,UAAU,UAAA,CAAW,IAAA;AAAA,IACjC;AACA,IAAA,IAAI,UAAA,CAAW,aAAa,MAAA,EAAW;AACtC,MAAA,UAAA,CAAW,WAAW,UAAA,CAAW,IAAA;AAAA,IAClC;AAAA,EACD;AACA,EAAA,OAAO,UAAA;AACR;;;ACrHO,IAAM,oBAAA,GAAuB;AAyD7B,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EAClC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAA,EAAa,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,SAAS;AAAA;AAC9C,CAAC;AAIM,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EACtC,GAAA,EAAK,EAAE,MAAA,EAAO;AAAA,EACd,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACtB,CAAC;AAIM,IAAM,YAAA,GAAe,EAAE,MAAA,CAAO;AAAA,EACpC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAW,CAAA,CACT,KAAA;AAAA,IACA,EAAE,MAAA,CAAO;AAAA,MACR,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,MACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,KAC/B;AAAA,IAED,QAAA;AACH,CAAC","file":"chunk-KR5UZUEY.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { McpRequest, McpResponse, ServerInfo } from \"../types.js\";\n\n/**\n * @mcp-legacy ENTIRE FILE — MCP 2025-era backward compatibility layer.\n * Remove this file when MCP v1 (2025-11-25) reaches EOL.\n *\n * SUNSET INSTRUCTION: Delete this file, then grep for \"@mcp-legacy\" in the\n * codebase to find and remove all remaining legacy seams.\n */\n\n/**\n * @mcp-legacy Master kill switch for MCP 2025-era backward compatibility.\n * Set to `false` when MCP v1 reaches End-of-Life (EOL) to disable all legacy seams.\n */\nexport const MCP_LEGACY_SUPPORT_ENABLED = true;\n\n/**\n * @mcp-legacy Legacy protocol version constant.\n */\nexport const MCP_PROTOCOL_VERSION_LEGACY = \"2025-11-25\" as const;\n\n/**\n * @mcp-legacy Build the legacy initialize handshake response.\n */\nexport function buildLegacyInitializeResponse(\n\tserverInfo: ServerInfo,\n\tid?: string | number | null,\n): McpResponse {\n\treturn {\n\t\tjsonrpc: \"2.0\",\n\t\tid: id ?? null,\n\t\tresult: {\n\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION_LEGACY,\n\t\t\tcapabilities: {\n\t\t\t\ttools: { listChanged: true },\n\t\t\t\tresources: { listChanged: true },\n\t\t\t\tprompts: { listChanged: true },\n\t\t\t},\n\t\t\tserverInfo,\n\t\t},\n\t};\n}\n\n/**\n * @mcp-legacy Detect if a request is strictly from a 2025-era legacy client.\n * Legacy requests either invoke 'initialize', 'notifications/initialized',\n * or lack modern '_meta' protocol envelopes.\n */\nexport function isLegacyRequest(request: McpRequest): boolean {\n\tif (\n\t\trequest.method === \"initialize\" ||\n\t\trequest.method === \"notifications/initialized\"\n\t) {\n\t\treturn true;\n\t}\n\n\tconst params = request.params as Record<string, unknown> | undefined;\n\tconst meta = params?._meta as Record<string, unknown> | undefined;\n\tconst version = meta?.[\"io.modelcontextprotocol/protocolVersion\"];\n\n\tif (!version || version === MCP_PROTOCOL_VERSION_LEGACY) {\n\t\treturn true;\n\t}\n\n\treturn false;\n}\n\n/**\n * @mcp-legacy Wrap and strip modern-era fields (resultType, ttlMs, cacheScope, etc.)\n * from a response to ensure 100% wire-compatibility with strict 2025 MCP clients.\n */\nexport function adaptResponseForLegacyClient(\n\tresponse: McpResponse,\n): McpResponse {\n\tif (!response.result || typeof response.result !== \"object\") {\n\t\treturn response;\n\t}\n\n\tconst rawResult = { ...(response.result as Record<string, unknown>) };\n\n\t// Strip modern-only envelope tags\n\tdelete rawResult.resultType;\n\tdelete rawResult.ttlMs;\n\tdelete rawResult.cacheScope;\n\n\treturn {\n\t\t...response,\n\t\tresult: rawResult,\n\t};\n}\n\n/**\n * Canonical tool aliases mapping legacy or shorthand tool names\n * to production enclave capabilities.\n */\nexport const TOOL_ALIASES: Record<string, string> = {\n\tbank_tool: \"Analyze_Synthetic_Bank_Transactions\",\n\tbank_tool_XDwd: \"Analyze_Synthetic_Bank_Transactions\",\n\tvault_tool: \"Analyze_Synthetic_Medical_Records\",\n\tvault_tool_E8wP: \"Analyze_Synthetic_Medical_Records\",\n\toracle_tool: \"Analyze_HFT_Market_Data\",\n\tcompute_aggregate: \"Analyze_Synthetic_Bank_Transactions\",\n};\n\n/**\n * Normalizes tool invocation parameters to satisfy dual parameter conventions.\n * If data is passed instead of payload or envelope, maps data to both fields.\n */\nexport function normalizeToolArguments(\n\targs?: Record<string, unknown>,\n): Record<string, unknown> {\n\tif (!args) return {};\n\tconst normalized = { ...args };\n\tif (normalized.data !== undefined) {\n\t\tif (normalized.payload === undefined) {\n\t\t\tnormalized.payload = normalized.data;\n\t\t}\n\t\tif (normalized.envelope === undefined) {\n\t\t\tnormalized.envelope = normalized.data;\n\t\t}\n\t}\n\treturn normalized;\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { z } from \"zod\";\n\n/**\n * Protocol Version Identifiers\n */\nexport const MCP_PROTOCOL_VERSION = \"2026-07-28\" as const;\n\nexport {\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"./gateway/mcp-compat.js\";\n\n/**\n * Protocol Era Classification\n */\nexport type McpEra = \"legacy\" | \"modern\";\n\n/**\n * Caching Hints for MCP 2026-07-28 Spec\n */\nexport interface CacheableResult {\n\tttlMs?: number;\n\tcacheScope?: \"public\" | \"private\";\n}\n\n/**\n * Multi-Round-Trip Requests (MRTR) Specification Types\n */\nexport interface InputRequest {\n\tid: string;\n\tmessage: string;\n\tschema?: Record<string, unknown>;\n}\n\nexport interface InputResponse {\n\tid: string;\n\tvalue: unknown;\n}\n\nexport interface InputRequiredResult {\n\tresultType: \"input_required\";\n\tinputRequests: InputRequest[];\n\trequestState?: string;\n}\n\n/**\n * Modern Envelope Metadata (_meta)\n */\nexport interface McpRequestMeta {\n\t\"io.modelcontextprotocol/protocolVersion\"?: string;\n\t\"io.modelcontextprotocol/clientInfo\"?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\t\"io.modelcontextprotocol/clientCapabilities\"?: Record<string, unknown>;\n\t[key: string]: unknown;\n}\n\n/**\n * Base Protocol Types representing parity with Model Context Protocol\n */\n\nexport const ToolSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tinputSchema: z.record(z.string(), z.unknown()), // Represents a JSON Schema\n});\n\nexport type Tool = z.infer<typeof ToolSchema>;\n\nexport const ResourceSchema = z.object({\n\turi: z.string(),\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tmimeType: z.string().optional(),\n});\n\nexport type Resource = z.infer<typeof ResourceSchema>;\n\nexport const PromptSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\targuments: z\n\t\t.array(\n\t\t\tz.object({\n\t\t\t\tname: z.string(),\n\t\t\t\tdescription: z.string().optional(),\n\t\t\t\trequired: z.boolean().optional(),\n\t\t\t}),\n\t\t)\n\t\t.optional(),\n});\n\nexport type Prompt = z.infer<typeof PromptSchema>;\n\nexport interface CallToolRequest {\n\tname: string;\n\targuments?: Record<string, unknown>;\n}\n\nexport interface CallToolResult {\n\tcontent: Array<{\n\t\ttype: \"text\" | \"image\" | \"resource\";\n\t\ttext?: string;\n\t\tdata?: string;\n\t\tmimeType?: string;\n\t\tresource?: {\n\t\t\turi: string;\n\t\t\ttext?: string;\n\t\t\tblob?: string;\n\t\t};\n\t}>;\n\tisError?: boolean;\n\tzkVerified?: boolean;\n\tzkProofType?: import(\"./security/zk.js\").ProofType;\n}\n\nexport interface GetPromptRequest {\n\tname: string;\n\targuments?: Record<string, string>;\n}\n\nexport interface GetPromptResult {\n\tdescription?: string;\n\tmessages: Array<{\n\t\trole: \"user\" | \"assistant\";\n\t\tcontent:\n\t\t\t| { type: \"text\"; text: string }\n\t\t\t| { type: \"image\"; data: string; mimeType: string }\n\t\t\t| {\n\t\t\t\t\ttype: \"resource\";\n\t\t\t\t\tresource: { uri: string; text?: string; blob?: string };\n\t\t\t  };\n\t}>;\n}\n\nexport interface ServerInfo {\n\tname: string;\n\tversion: string;\n\tcapabilities?: {\n\t\tprompts?: { listChanged?: boolean };\n\t\tresources?: { subscribe?: boolean; listChanged?: boolean };\n\t\ttools?: { listChanged?: boolean };\n\t\t/** @mcp-legacy @deprecated Deprecated in MCP 2026-07-28 spec */\n\t\tlogging?: Record<string, unknown>;\n\t};\n}\n\nexport interface DiscoverResult {\n\tresultType: \"complete\";\n\tsupportedVersions: string[];\n\tcapabilities: ServerInfo[\"capabilities\"];\n\tserverInfo: ServerInfo;\n\tinstructions?: string;\n}\n\nexport interface McpRequest {\n\tmethod: string;\n\tparams?: unknown;\n\tid?: string | number | null;\n\tjsonrpc?: \"2.0\";\n}\n\nexport interface McpResponse {\n\tjsonrpc: \"2.0\";\n\tid?: string | number | null;\n\tresult?: unknown;\n\terror?: {\n\t\tcode: number;\n\t\tmessage: string;\n\t\tdata?: unknown;\n\t};\n}\n\n/**\n * Re-export Gateway Interceptor types for consumer convenience.\n */\nexport type {\n\tGatewayAdmissionResult,\n\tGatewayInterceptor,\n\tGatewayInterceptorContext,\n\tGatewayInterceptorOptions,\n} from \"./gateway/interceptor.js\";\nexport type { AuditInterceptor } from \"./interceptors/audit-interceptor.js\";\n/**\n * Re-export Log & Audit Interceptor types for consumer convenience.\n */\nexport type {\n\tLogEvent,\n\tLogInterceptor,\n} from \"./interceptors/log-interceptor.js\";\n/**\n * Re-export AuthInfo from the security module for convenience.\n * Compatible with MCP TypeScript SDK AuthInfo interface shape.\n */\nexport type { AuthInfo } from \"./security/jwt-validator.js\";\nexport type {\n\tZkJournalV2,\n\tZkPolicy,\n\tZkReceipt,\n} from \"./security/zk.js\";\n/**\n * Re-export Zero-Knowledge Proof & Verification types for consumer convenience.\n */\nexport {\n\tProofType,\n\tRECEIPT_VERSION_V1,\n\tRECEIPT_VERSION_V2,\n\tZK_JOURNAL_V2_SIZE,\n} from \"./security/zk.js\";\n"]}

package/dist/chunk-OHMZZMMC.js

@@ -1,58 +0,0 @@
-import { ZkVerificationError } from './chunk-P34HDRN5.js';
-import { bn254, stringBigints } from 'micro-zk-proofs';
-
-var VERIFICATION_LATENCY_BUDGET_MS = 250;
-function verifyGroth16Proof(vkey, proofWithSignals) {
-  if (!vkey || !proofWithSignals?.proof) {
-    return false;
-  }
-  try {
-    return bn254.groth.verifyProof(vkey, proofWithSignals);
-  } catch (_error) {
-    return false;
-  }
-}
-function serializeVKey(vkey) {
-  try {
-    const encoded = stringBigints.encode(vkey);
-    return Buffer.from(JSON.stringify(encoded), "utf-8");
-  } catch (error) {
-    throw new ZkVerificationError(
-      `Failed to serialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-}
-function deserializeVKey(buf) {
-  try {
-    const parsed = JSON.parse(buf.toString("utf-8"));
-    return stringBigints.decode(parsed);
-  } catch (error) {
-    throw new ZkVerificationError(
-      `Failed to deserialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-}
-function serializeGrothProof(proofWithSignals) {
-  try {
-    const encoded = stringBigints.encode(proofWithSignals);
-    return Buffer.from(JSON.stringify(encoded), "utf-8");
-  } catch (error) {
-    throw new ZkVerificationError(
-      `Failed to serialize GrothProof: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-}
-function deserializeGrothProof(buf) {
-  try {
-    const parsed = JSON.parse(buf.toString("utf-8"));
-    return stringBigints.decode(parsed);
-  } catch (error) {
-    throw new ZkVerificationError(
-      `Failed to deserialize GrothProof: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-}
-
-export { VERIFICATION_LATENCY_BUDGET_MS, deserializeGrothProof, deserializeVKey, serializeGrothProof, serializeVKey, verifyGroth16Proof };
-//# sourceMappingURL=chunk-OHMZZMMC.js.map
-//# sourceMappingURL=chunk-OHMZZMMC.js.map

package/dist/chunk-OHMZZMMC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/crypto/groth16-verifier.ts"],"names":[],"mappings":";;;AAWO,IAAM,8BAAA,GAAiC;AAQvC,SAAS,kBAAA,CACf,MACA,gBAAA,EACU;AACV,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,gBAAA,EAAkB,KAAA,EAAO;AACtC,IAAA,OAAO,KAAA;AAAA,EACR;AAEA,EAAA,IAAI;AACH,IAAA,OAAO,KAAA,CAAM,KAAA,CAAM,WAAA,CAAY,IAAA,EAAM,gBAAgB,CAAA;AAAA,EACtD,SAAS,MAAA,EAAQ;AAEhB,IAAA,OAAO,KAAA;AAAA,EACR;AACD;AAKO,SAAS,cAAc,IAAA,EAA+B;AAC5D,EAAA,IAAI;AACH,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AACzC,IAAA,OAAO,OAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,EACpD,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,wCAAwC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KAC/F;AAAA,EACD;AACD;AAKO,SAAS,gBAAgB,GAAA,EAA8B;AAC7D,EAAA,IAAI;AACH,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAA,CAAS,OAAO,CAAC,CAAA;AAC/C,IAAA,OAAO,aAAA,CAAc,OAAO,MAAM,CAAA;AAAA,EACnC,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,0CAA0C,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KACjG;AAAA,EACD;AACD;AAKO,SAAS,oBACf,gBAAA,EACS;AACT,EAAA,IAAI;AACH,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,CAAO,gBAAgB,CAAA;AACrD,IAAA,OAAO,OAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,EACpD,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,mCAAmC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KAC1F;AAAA,EACD;AACD;AAKO,SAAS,sBAAsB,GAAA,EAA+B;AACpE,EAAA,IAAI;AACH,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAA,CAAS,OAAO,CAAC,CAAA;AAC/C,IAAA,OAAO,aAAA,CAAc,OAAO,MAAM,CAAA;AAAA,EACnC,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,qCAAqC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KAC5F;AAAA,EACD;AACD","file":"chunk-OHMZZMMC.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n\tbn254,\n\ttype ProofWithSignals,\n\tstringBigints,\n\ttype VerificationKey,\n} from \"micro-zk-proofs\";\nimport { ZkVerificationError } from \"../security/zk.js\";\n\nexport const VERIFICATION_LATENCY_BUDGET_MS = 250;\n\nexport type { ProofWithSignals, VerificationKey };\n\n/**\n * Verifies a Groth16 Zero-Knowledge proof against a verification key.\n * Traps curve validation errors gracefully to ensure safe verification.\n */\nexport function verifyGroth16Proof(\n\tvkey: VerificationKey,\n\tproofWithSignals: ProofWithSignals,\n): boolean {\n\tif (!vkey || !proofWithSignals?.proof) {\n\t\treturn false;\n\t}\n\n\ttry {\n\t\treturn bn254.groth.verifyProof(vkey, proofWithSignals);\n\t} catch (_error) {\n\t\t// Curve point validation or pairing failure (e.g. invalid curve point, subgroup violation)\n\t\treturn false;\n\t}\n}\n\n/**\n * Serializes a VerificationKey into a Buffer.\n */\nexport function serializeVKey(vkey: VerificationKey): Buffer {\n\ttry {\n\t\tconst encoded = stringBigints.encode(vkey);\n\t\treturn Buffer.from(JSON.stringify(encoded), \"utf-8\");\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to serialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n\n/**\n * Deserializes a Buffer into a typed VerificationKey.\n */\nexport function deserializeVKey(buf: Buffer): VerificationKey {\n\ttry {\n\t\tconst parsed = JSON.parse(buf.toString(\"utf-8\"));\n\t\treturn stringBigints.decode(parsed) as VerificationKey;\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to deserialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n\n/**\n * Serializes a ProofWithSignals into a Buffer.\n */\nexport function serializeGrothProof(\n\tproofWithSignals: ProofWithSignals,\n): Buffer {\n\ttry {\n\t\tconst encoded = stringBigints.encode(proofWithSignals);\n\t\treturn Buffer.from(JSON.stringify(encoded), \"utf-8\");\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to serialize GrothProof: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n\n/**\n * Deserializes a Buffer into a typed ProofWithSignals.\n */\nexport function deserializeGrothProof(buf: Buffer): ProofWithSignals {\n\ttry {\n\t\tconst parsed = JSON.parse(buf.toString(\"utf-8\"));\n\t\treturn stringBigints.decode(parsed) as ProofWithSignals;\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to deserialize GrothProof: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n"]}

package/dist/chunk-P34HDRN5.js

@@ -1,213 +0,0 @@
-import crypto from 'crypto';
-
-// src/security/zk.ts
-var ProofType = /* @__PURE__ */ ((ProofType2) => {
-  ProofType2[ProofType2["HMAC_LEGACY"] = 0] = "HMAC_LEGACY";
-  ProofType2[ProofType2["GROTH16"] = 2] = "GROTH16";
-  return ProofType2;
-})(ProofType || {});
-var RECEIPT_VERSION_V1 = 1;
-var RECEIPT_VERSION_V2 = 2;
-var ZK_JOURNAL_V2_SIZE = 144;
-var ZkVerificationError = class extends Error {
-  constructor(message) {
-    super(`ZK Verification Failed: ${message}`);
-    this.name = "ZkVerificationError";
-  }
-};
-function encodeJournalV2(fields) {
-  if (fields.guestImageId.length !== 32) {
-    throw new ZkVerificationError(
-      `Invalid guestImageId size: expected 32 bytes, got ${fields.guestImageId.length}`
-    );
-  }
-  if (fields.logicDigest.length !== 32) {
-    throw new ZkVerificationError(
-      `Invalid logicDigest size: expected 32 bytes, got ${fields.logicDigest.length}`
-    );
-  }
-  if (fields.datasetDigest.length !== 32) {
-    throw new ZkVerificationError(
-      `Invalid datasetDigest size: expected 32 bytes, got ${fields.datasetDigest.length}`
-    );
-  }
-  if (fields.outputDigest.length !== 32) {
-    throw new ZkVerificationError(
-      `Invalid outputDigest size: expected 32 bytes, got ${fields.outputDigest.length}`
-    );
-  }
-  const buf = Buffer.alloc(ZK_JOURNAL_V2_SIZE);
-  fields.guestImageId.copy(buf, 0);
-  fields.logicDigest.copy(buf, 32);
-  fields.datasetDigest.copy(buf, 64);
-  fields.outputDigest.copy(buf, 96);
-  buf.writeBigUInt64BE(BigInt(fields.fuelConsumed), 128);
-  buf.writeBigUInt64BE(BigInt(fields.executionTimestamp), 136);
-  return buf;
-}
-function decodeJournalV2(buf) {
-  if (buf.length !== ZK_JOURNAL_V2_SIZE) {
-    throw new ZkVerificationError(
-      `Invalid ZkJournalV2 size: expected ${ZK_JOURNAL_V2_SIZE} bytes, got ${buf.length}`
-    );
-  }
-  return {
-    guestImageId: Buffer.from(buf.subarray(0, 32)),
-    logicDigest: Buffer.from(buf.subarray(32, 64)),
-    datasetDigest: Buffer.from(buf.subarray(64, 96)),
-    outputDigest: Buffer.from(buf.subarray(96, 128)),
-    fuelConsumed: buf.readBigUInt64BE(128),
-    executionTimestamp: buf.readBigUInt64BE(136)
-  };
-}
-var receiptCodec = {
-  /**
-   * Encodes a version 2 Binary Receipt with trailing SHA-256 checksum.
-   * Layout: [0x02][proofType: 1B][journalLen: 4B UInt32BE][journal][proof][checksum: 32B]
-   */
-  encodeV2(proofType, journal, proof) {
-    const header = Buffer.alloc(6);
-    header.writeUInt8(RECEIPT_VERSION_V2, 0);
-    header.writeUInt8(proofType, 1);
-    header.writeUInt32BE(journal.length, 2);
-    const payload = Buffer.concat([header, journal, proof]);
-    const checksum = crypto.createHash("sha256").update(payload).digest();
-    return Buffer.concat([payload, checksum]);
-  },
-  /**
-   * Decodes any LIOP Binary Receipt (v1 HMAC or v2 ZK).
-   */
-  decode(raw) {
-    if (!raw || raw.length === 0) {
-      throw new ZkVerificationError(
-        "Empty or malformed zero-knowledge proof array."
-      );
-    }
-    const version = raw[0];
-    if (version === RECEIPT_VERSION_V1) {
-      if (raw.length < 35) {
-        throw new ZkVerificationError(
-          "Malformed receipt: invalid header or length."
-        );
-      }
-      const journalLen = raw.readUInt16BE(1);
-      if (raw.length < 3 + journalLen + 32) {
-        throw new ZkVerificationError(
-          "Malformed receipt: truncated journal or seal."
-        );
-      }
-      const journal = Buffer.from(raw.subarray(3, 3 + journalLen));
-      const seal = Buffer.from(
-        raw.subarray(3 + journalLen, 3 + journalLen + 32)
-      );
-      return {
-        version: RECEIPT_VERSION_V1,
-        proofType: 0 /* HMAC_LEGACY */,
-        journal,
-        proof: seal,
-        raw
-      };
-    }
-    if (version === RECEIPT_VERSION_V2) {
-      if (raw.length < 38) {
-        throw new ZkVerificationError(
-          "Malformed receipt v2: buffer too short (< 38 bytes)."
-        );
-      }
-      const proofType = raw[1];
-      const journalLen = raw.readUInt32BE(2);
-      if (raw.length < 6 + journalLen + 32) {
-        throw new ZkVerificationError(
-          "Malformed receipt v2: truncated payload."
-        );
-      }
-      const payload = raw.subarray(0, raw.length - 32);
-      const expectedChecksum = raw.subarray(raw.length - 32);
-      const actualChecksum = crypto.createHash("sha256").update(payload).digest();
-      if (!crypto.timingSafeEqual(expectedChecksum, actualChecksum)) {
-        throw new ZkVerificationError("Receipt checksum verification failed.");
-      }
-      const journal = Buffer.from(raw.subarray(6, 6 + journalLen));
-      const proof = Buffer.from(raw.subarray(6 + journalLen, raw.length - 32));
-      return {
-        version: RECEIPT_VERSION_V2,
-        proofType,
-        journal,
-        proof,
-        raw
-      };
-    }
-    throw new ZkVerificationError(
-      `Unsupported receipt version: 0x${version.toString(16)}`
-    );
-  }
-};
-var ZkVerifier = {
-  /**
-   * Validates a ZK receipt using structural Binary Receipt verification.
-   * Parses the HMAC-SHA256 commitment format (v1) and verifies journal integrity.
-   *
-   * @param receipt - Complete ZkReceipt to verify
-   * @param expectedImageId - Hash or ImageID of the WASM file dispatched to the host
-   * @throws ZkVerificationError if the proof is invalid or image IDs mismatch
-   * @returns true if the proof mathematically verifies the execution
-   */
-  verify(receipt, expectedImageId, sessionSecret) {
-    if (!receipt.imageId.equals(expectedImageId)) {
-      throw new ZkVerificationError(
-        "ImageID mismatch. The remote origin executed a different WASM payload."
-      );
-    }
-    if (receipt.proof.length === 0) {
-      throw new ZkVerificationError(
-        "Empty or malformed zero-knowledge proof array."
-      );
-    }
-    const proofBuf = Buffer.from(receipt.proof);
-    if (proofBuf.length < 35 || proofBuf[0] !== 1) {
-      throw new ZkVerificationError(
-        "Malformed receipt: invalid header or length."
-      );
-    }
-    const journalLen = proofBuf.readUInt16BE(1);
-    const journal = proofBuf.subarray(3, 3 + journalLen);
-    const seal = proofBuf.subarray(3 + journalLen);
-    if (seal.length !== 32) {
-      throw new ZkVerificationError(
-        "Invalid seal: expected 32-byte HMAC-SHA256."
-      );
-    }
-    try {
-      const journalData = JSON.parse(journal.toString());
-      if (journalData.image_id !== receipt.imageId.toString("hex")) {
-        throw new ZkVerificationError(
-          "Journal imageId does not match receipt header."
-        );
-      }
-    } catch (_e) {
-      throw new ZkVerificationError("Failed to parse journal data.");
-    }
-    if (sessionSecret && sessionSecret.length > 0) {
-      const expectedSeal = crypto.createHmac("sha256", sessionSecret).update(journal).digest();
-      if (!crypto.timingSafeEqual(seal, expectedSeal)) {
-        throw new ZkVerificationError(
-          "Invalid seal: HMAC verification failed."
-        );
-      }
-    }
-    return true;
-  },
-  /**
-   * Derives a predictable ImageID (usually a Hash) from a raw WASM binary.
-   *
-   * @param wasmBytes - The raw bytes of the WASM logic file
-   * @returns The SHA-256 ImageID of the logic
-   */
-  deriveImageId(wasmBytes) {
-    return crypto.createHash("sha256").update(wasmBytes).digest();
-  }
-};
-
-export { ProofType, RECEIPT_VERSION_V1, RECEIPT_VERSION_V2, ZK_JOURNAL_V2_SIZE, ZkVerificationError, ZkVerifier, decodeJournalV2, encodeJournalV2, receiptCodec };
-//# sourceMappingURL=chunk-P34HDRN5.js.map
-//# sourceMappingURL=chunk-P34HDRN5.js.map

package/dist/chunk-P34HDRN5.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/security/zk.ts"],"names":["ProofType"],"mappings":";;;AAKO,IAAK,SAAA,qBAAAA,UAAAA,KAAL;AACN,EAAAA,UAAAA,CAAAA,UAAAA,CAAA,iBAAc,CAAA,CAAA,GAAd,aAAA;AACA,EAAAA,UAAAA,CAAAA,UAAAA,CAAA,aAAU,CAAA,CAAA,GAAV,SAAA;AAFW,EAAA,OAAAA,UAAAA;AAAA,CAAA,EAAA,SAAA,IAAA,EAAA;AAKL,IAAM,kBAAA,GAAqB;AAC3B,IAAM,kBAAA,GAAqB;AAC3B,IAAM,kBAAA,GAAqB;AAgC3B,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC9C,YAAY,OAAA,EAAiB;AAC5B,IAAA,KAAA,CAAM,CAAA,wBAAA,EAA2B,OAAO,CAAA,CAAE,CAAA;AAC1C,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACb;AACD;AAKO,SAAS,gBAAgB,MAAA,EAA6B;AAC5D,EAAA,IAAI,MAAA,CAAO,YAAA,CAAa,MAAA,KAAW,EAAA,EAAI;AACtC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,kDAAA,EAAqD,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA;AAAA,KAChF;AAAA,EACD;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,CAAY,MAAA,KAAW,EAAA,EAAI;AACrC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,iDAAA,EAAoD,MAAA,CAAO,WAAA,CAAY,MAAM,CAAA;AAAA,KAC9E;AAAA,EACD;AACA,EAAA,IAAI,MAAA,CAAO,aAAA,CAAc,MAAA,KAAW,EAAA,EAAI;AACvC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,mDAAA,EAAsD,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,KAClF;AAAA,EACD;AACA,EAAA,IAAI,MAAA,CAAO,YAAA,CAAa,MAAA,KAAW,EAAA,EAAI;AACtC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,kDAAA,EAAqD,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA;AAAA,KAChF;AAAA,EACD;AAEA,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,kBAAkB,CAAA;AAC3C,EAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA;AAC/B,EAAA,MAAA,CAAO,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,EAAE,CAAA;AACjC,EAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,GAAA,EAAK,EAAE,CAAA;AAChC,EAAA,GAAA,CAAI,gBAAA,CAAiB,MAAA,CAAO,MAAA,CAAO,YAAY,GAAG,GAAG,CAAA;AACrD,EAAA,GAAA,CAAI,gBAAA,CAAiB,MAAA,CAAO,MAAA,CAAO,kBAAkB,GAAG,GAAG,CAAA;AAE3D,EAAA,OAAO,GAAA;AACR;AAKO,SAAS,gBAAgB,GAAA,EAA0B;AACzD,EAAA,IAAI,GAAA,CAAI,WAAW,kBAAA,EAAoB;AACtC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,mCAAA,EAAsC,kBAAkB,CAAA,YAAA,EAAe,GAAA,CAAI,MAAM,CAAA;AAAA,KAClF;AAAA,EACD;AAEA,EAAA,OAAO;AAAA,IACN,cAAc,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,IAC7C,aAAa,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,IAC7C,eAAe,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,IAC/C,cAAc,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA;AAAA,IAC/C,YAAA,EAAc,GAAA,CAAI,eAAA,CAAgB,GAAG,CAAA;AAAA,IACrC,kBAAA,EAAoB,GAAA,CAAI,eAAA,CAAgB,GAAG;AAAA,GAC5C;AACD;AAUO,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,QAAA,CAAS,SAAA,EAAsB,OAAA,EAAiB,KAAA,EAAuB;AACtE,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAC7B,IAAA,MAAA,CAAO,UAAA,CAAW,oBAAoB,CAAC,CAAA;AACvC,IAAA,MAAA,CAAO,UAAA,CAAW,WAAW,CAAC,CAAA;AAC9B,IAAA,MAAA,CAAO,aAAA,CAAc,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAEtC,IAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,EAAQ,OAAA,EAAS,KAAK,CAAC,CAAA;AACtD,IAAA,MAAM,QAAA,GAAW,OAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAO,OAAO,EAAE,MAAA,EAAO;AAEpE,IAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,OAAA,EAAS,QAAQ,CAAC,CAAA;AAAA,EACzC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAA6B;AACnC,IAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,MAAA,KAAW,CAAA,EAAG;AAC7B,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,CAAC,CAAA;AAErB,IAAA,IAAI,YAAY,kBAAA,EAAoB;AACnC,MAAA,IAAI,GAAA,CAAI,SAAS,EAAA,EAAI;AACpB,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AACA,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,YAAA,CAAa,CAAC,CAAA;AACrC,MAAA,IAAI,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,EAAA,EAAI;AACrC,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AACA,MAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,EAAG,CAAA,GAAI,UAAU,CAAC,CAAA;AAC3D,MAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAAA,QACnB,IAAI,QAAA,CAAS,CAAA,GAAI,UAAA,EAAY,CAAA,GAAI,aAAa,EAAE;AAAA,OACjD;AAEA,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,kBAAA;AAAA,QACT,SAAA,EAAW,CAAA;AAAA,QACX,OAAA;AAAA,QACA,KAAA,EAAO,IAAA;AAAA,QACP;AAAA,OACD;AAAA,IACD;AAEA,IAAA,IAAI,YAAY,kBAAA,EAAoB;AAEnC,MAAA,IAAI,GAAA,CAAI,SAAS,EAAA,EAAI;AACpB,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,SAAA,GAAY,IAAI,CAAC,CAAA;AACvB,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,YAAA,CAAa,CAAC,CAAA;AAErC,MAAA,IAAI,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,EAAA,EAAI;AACrC,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,UAAU,GAAA,CAAI,QAAA,CAAS,CAAA,EAAG,GAAA,CAAI,SAAS,EAAE,CAAA;AAC/C,MAAA,MAAM,gBAAA,GAAmB,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,SAAS,EAAE,CAAA;AACrD,MAAA,MAAM,cAAA,GAAiB,OACrB,UAAA,CAAW,QAAQ,EACnB,MAAA,CAAO,OAAO,EACd,MAAA,EAAO;AAET,MAAA,IAAI,CAAC,MAAA,CAAO,eAAA,CAAgB,gBAAA,EAAkB,cAAc,CAAA,EAAG;AAC9D,QAAA,MAAM,IAAI,oBAAoB,uCAAuC,CAAA;AAAA,MACtE;AAEA,MAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,EAAG,CAAA,GAAI,UAAU,CAAC,CAAA;AAC3D,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,IAAI,UAAA,EAAY,GAAA,CAAI,MAAA,GAAS,EAAE,CAAC,CAAA;AAEvE,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,kBAAA;AAAA,QACT,SAAA;AAAA,QACA,OAAA;AAAA,QACA,KAAA;AAAA,QACA;AAAA,OACD;AAAA,IACD;AAEA,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,+BAAA,EAAkC,OAAA,CAAQ,QAAA,CAAS,EAAE,CAAC,CAAA;AAAA,KACvD;AAAA,EACD;AACD;AASO,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUzB,MAAA,CACC,OAAA,EACA,eAAA,EACA,aAAA,EACU;AAEV,IAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA,EAAG;AAC7C,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,IAAI,OAAA,CAAQ,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG;AAC/B,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAC1C,IAAA,IAAI,SAAS,MAAA,GAAS,EAAA,IAAM,QAAA,CAAS,CAAC,MAAM,CAAA,EAAM;AACjD,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AACA,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,YAAA,CAAa,CAAC,CAAA;AAC1C,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,QAAA,CAAS,CAAA,EAAG,IAAI,UAAU,CAAA;AACnD,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,QAAA,CAAS,CAAA,GAAI,UAAU,CAAA;AAE7C,IAAA,IAAI,IAAA,CAAK,WAAW,EAAA,EAAI;AACvB,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,IAAI;AACH,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA;AACjD,MAAA,IAAI,YAAY,QAAA,KAAa,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,KAAK,CAAA,EAAG;AAC7D,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAAA,IACD,SAAS,EAAA,EAAI;AACZ,MAAA,MAAM,IAAI,oBAAoB,+BAA+B,CAAA;AAAA,IAC9D;AAGA,IAAA,IAAI,aAAA,IAAiB,aAAA,CAAc,MAAA,GAAS,CAAA,EAAG;AAC9C,MAAA,MAAM,YAAA,GAAe,OACnB,UAAA,CAAW,QAAA,EAAU,aAAa,CAAA,CAClC,MAAA,CAAO,OAAO,CAAA,CACd,MAAA,EAAO;AACT,MAAA,IAAI,CAAC,MAAA,CAAO,eAAA,CAAgB,IAAA,EAAM,YAAY,CAAA,EAAG;AAChD,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,IAAA;AAAA,EACR,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,cAAc,SAAA,EAA2B;AACxC,IAAA,OAAO,OAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAO,SAAS,EAAE,MAAA,EAAO;AAAA,EAC7D;AACD","file":"chunk-P34HDRN5.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport crypto from \"node:crypto\";\n\nexport enum ProofType {\n\tHMAC_LEGACY = 0x00,\n\tGROTH16 = 0x02,\n}\n\nexport const RECEIPT_VERSION_V1 = 0x01;\nexport const RECEIPT_VERSION_V2 = 0x02;\nexport const ZK_JOURNAL_V2_SIZE = 144;\n\nexport interface ZkJournalV2 {\n\t/** Image ID (SHA-256) of the guest interpreter */\n\tguestImageId: Buffer;\n\t/** SHA-256 digest of injected logic */\n\tlogicDigest: Buffer;\n\t/** SHA-256 digest of dataset records */\n\tdatasetDigest: Buffer;\n\t/** SHA-256 digest of sanitized output */\n\toutputDigest: Buffer;\n\t/** Micro-instruction fuel consumed */\n\tfuelConsumed: bigint;\n\t/** Timestamp in milliseconds since unix epoch */\n\texecutionTimestamp: bigint;\n}\n\nexport type ZkPolicy = \"none\" | \"optimistic\" | \"required\";\n\nexport interface ZkReceipt {\n\t/** Cryptographic proof generated by a zero-knowledge VM (e.g., RISC Zero, SP1) or Groth16 */\n\tproof: Buffer;\n\t/** The public inputs/outputs of the execution (the \"Journal\" in RISC Zero terminology) */\n\tjournal: Buffer;\n\t/** The expected image ID / verification key of the WASM binary that was executed */\n\timageId: Buffer;\n\t/** Type of cryptographic proof (HMAC legacy or Groth16) */\n\tproofType?: ProofType;\n\t/** Binary receipt version (0x01 or 0x02) */\n\tversion?: number;\n}\n\nexport class ZkVerificationError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(`ZK Verification Failed: ${message}`);\n\t\tthis.name = \"ZkVerificationError\";\n\t}\n}\n\n/**\n * Serializes a structured ZkJournalV2 into a strictly validated 144-byte binary layout.\n */\nexport function encodeJournalV2(fields: ZkJournalV2): Buffer {\n\tif (fields.guestImageId.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid guestImageId size: expected 32 bytes, got ${fields.guestImageId.length}`,\n\t\t);\n\t}\n\tif (fields.logicDigest.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid logicDigest size: expected 32 bytes, got ${fields.logicDigest.length}`,\n\t\t);\n\t}\n\tif (fields.datasetDigest.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid datasetDigest size: expected 32 bytes, got ${fields.datasetDigest.length}`,\n\t\t);\n\t}\n\tif (fields.outputDigest.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid outputDigest size: expected 32 bytes, got ${fields.outputDigest.length}`,\n\t\t);\n\t}\n\n\tconst buf = Buffer.alloc(ZK_JOURNAL_V2_SIZE);\n\tfields.guestImageId.copy(buf, 0);\n\tfields.logicDigest.copy(buf, 32);\n\tfields.datasetDigest.copy(buf, 64);\n\tfields.outputDigest.copy(buf, 96);\n\tbuf.writeBigUInt64BE(BigInt(fields.fuelConsumed), 128);\n\tbuf.writeBigUInt64BE(BigInt(fields.executionTimestamp), 136);\n\n\treturn buf;\n}\n\n/**\n * Deserializes and validates a 144-byte binary buffer into a typed ZkJournalV2.\n */\nexport function decodeJournalV2(buf: Buffer): ZkJournalV2 {\n\tif (buf.length !== ZK_JOURNAL_V2_SIZE) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid ZkJournalV2 size: expected ${ZK_JOURNAL_V2_SIZE} bytes, got ${buf.length}`,\n\t\t);\n\t}\n\n\treturn {\n\t\tguestImageId: Buffer.from(buf.subarray(0, 32)),\n\t\tlogicDigest: Buffer.from(buf.subarray(32, 64)),\n\t\tdatasetDigest: Buffer.from(buf.subarray(64, 96)),\n\t\toutputDigest: Buffer.from(buf.subarray(96, 128)),\n\t\tfuelConsumed: buf.readBigUInt64BE(128),\n\t\texecutionTimestamp: buf.readBigUInt64BE(136),\n\t};\n}\n\nexport interface DecodedReceipt {\n\tversion: number;\n\tproofType: ProofType;\n\tjournal: Buffer;\n\tproof: Buffer;\n\traw: Buffer;\n}\n\nexport const receiptCodec = {\n\t/**\n\t * Encodes a version 2 Binary Receipt with trailing SHA-256 checksum.\n\t * Layout: [0x02][proofType: 1B][journalLen: 4B UInt32BE][journal][proof][checksum: 32B]\n\t */\n\tencodeV2(proofType: ProofType, journal: Buffer, proof: Buffer): Buffer {\n\t\tconst header = Buffer.alloc(6);\n\t\theader.writeUInt8(RECEIPT_VERSION_V2, 0);\n\t\theader.writeUInt8(proofType, 1);\n\t\theader.writeUInt32BE(journal.length, 2);\n\n\t\tconst payload = Buffer.concat([header, journal, proof]);\n\t\tconst checksum = crypto.createHash(\"sha256\").update(payload).digest();\n\n\t\treturn Buffer.concat([payload, checksum]);\n\t},\n\n\t/**\n\t * Decodes any LIOP Binary Receipt (v1 HMAC or v2 ZK).\n\t */\n\tdecode(raw: Buffer): DecodedReceipt {\n\t\tif (!raw || raw.length === 0) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Empty or malformed zero-knowledge proof array.\",\n\t\t\t);\n\t\t}\n\n\t\tconst version = raw[0];\n\n\t\tif (version === RECEIPT_VERSION_V1) {\n\t\t\tif (raw.length < 35) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt: invalid header or length.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst journalLen = raw.readUInt16BE(1);\n\t\t\tif (raw.length < 3 + journalLen + 32) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt: truncated journal or seal.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst journal = Buffer.from(raw.subarray(3, 3 + journalLen));\n\t\t\tconst seal = Buffer.from(\n\t\t\t\traw.subarray(3 + journalLen, 3 + journalLen + 32),\n\t\t\t);\n\n\t\t\treturn {\n\t\t\t\tversion: RECEIPT_VERSION_V1,\n\t\t\t\tproofType: ProofType.HMAC_LEGACY,\n\t\t\t\tjournal,\n\t\t\t\tproof: seal,\n\t\t\t\traw,\n\t\t\t};\n\t\t}\n\n\t\tif (version === RECEIPT_VERSION_V2) {\n\t\t\t// Minimum size: 1 (version) + 1 (proofType) + 4 (journalLen) + 0 (journal) + 0 (proof) + 32 (checksum) = 38\n\t\t\tif (raw.length < 38) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt v2: buffer too short (< 38 bytes).\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst proofType = raw[1] as ProofType;\n\t\t\tconst journalLen = raw.readUInt32BE(2);\n\n\t\t\tif (raw.length < 6 + journalLen + 32) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt v2: truncated payload.\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst payload = raw.subarray(0, raw.length - 32);\n\t\t\tconst expectedChecksum = raw.subarray(raw.length - 32);\n\t\t\tconst actualChecksum = crypto\n\t\t\t\t.createHash(\"sha256\")\n\t\t\t\t.update(payload)\n\t\t\t\t.digest();\n\n\t\t\tif (!crypto.timingSafeEqual(expectedChecksum, actualChecksum)) {\n\t\t\t\tthrow new ZkVerificationError(\"Receipt checksum verification failed.\");\n\t\t\t}\n\n\t\t\tconst journal = Buffer.from(raw.subarray(6, 6 + journalLen));\n\t\t\tconst proof = Buffer.from(raw.subarray(6 + journalLen, raw.length - 32));\n\n\t\t\treturn {\n\t\t\t\tversion: RECEIPT_VERSION_V2,\n\t\t\t\tproofType,\n\t\t\t\tjournal,\n\t\t\t\tproof,\n\t\t\t\traw,\n\t\t\t};\n\t\t}\n\n\t\tthrow new ZkVerificationError(\n\t\t\t`Unsupported receipt version: 0x${version.toString(16)}`,\n\t\t);\n\t},\n};\n\n/**\n * ZK-Proofs Verifier for Logic-Injection-on-Origin Protocol (LIOP)\n *\n * Validates that an executed Logic (WASM) actually produced the reported output,\n * verifying the Zero-Knowledge receipt generated by the remote host's Trusted Execution\n * Environment (TEE) or zkVM (Zero-Knowledge Virtual Machine).\n */\nexport const ZkVerifier = {\n\t/**\n\t * Validates a ZK receipt using structural Binary Receipt verification.\n\t * Parses the HMAC-SHA256 commitment format (v1) and verifies journal integrity.\n\t *\n\t * @param receipt - Complete ZkReceipt to verify\n\t * @param expectedImageId - Hash or ImageID of the WASM file dispatched to the host\n\t * @throws ZkVerificationError if the proof is invalid or image IDs mismatch\n\t * @returns true if the proof mathematically verifies the execution\n\t */\n\tverify(\n\t\treceipt: ZkReceipt,\n\t\texpectedImageId: Buffer,\n\t\tsessionSecret?: Buffer,\n\t): boolean {\n\t\t// 1. Verify Image ID (Ensures the host executed the exact logic we sent, not a malicious one)\n\t\tif (!receipt.imageId.equals(expectedImageId)) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"ImageID mismatch. The remote origin executed a different WASM payload.\",\n\t\t\t);\n\t\t}\n\n\t\t// 2. Validate Proof Structure\n\t\tif (receipt.proof.length === 0) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Empty or malformed zero-knowledge proof array.\",\n\t\t\t);\n\t\t}\n\n\t\t// 3. Cryptographic Validation (Binary Receipt)\n\t\tconst proofBuf = Buffer.from(receipt.proof);\n\t\tif (proofBuf.length < 35 || proofBuf[0] !== 0x01) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Malformed receipt: invalid header or length.\",\n\t\t\t);\n\t\t}\n\t\tconst journalLen = proofBuf.readUInt16BE(1);\n\t\tconst journal = proofBuf.subarray(3, 3 + journalLen);\n\t\tconst seal = proofBuf.subarray(3 + journalLen);\n\n\t\tif (seal.length !== 32) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Invalid seal: expected 32-byte HMAC-SHA256.\",\n\t\t\t);\n\t\t}\n\n\t\t// Verify journal contains matching imageId\n\t\ttry {\n\t\t\tconst journalData = JSON.parse(journal.toString());\n\t\t\tif (journalData.image_id !== receipt.imageId.toString(\"hex\")) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Journal imageId does not match receipt header.\",\n\t\t\t\t);\n\t\t\t}\n\t\t} catch (_e) {\n\t\t\tthrow new ZkVerificationError(\"Failed to parse journal data.\");\n\t\t}\n\n\t\t// 4. Mathematical Verification (HMAC-SHA256)\n\t\tif (sessionSecret && sessionSecret.length > 0) {\n\t\t\tconst expectedSeal = crypto\n\t\t\t\t.createHmac(\"sha256\", sessionSecret)\n\t\t\t\t.update(journal)\n\t\t\t\t.digest();\n\t\t\tif (!crypto.timingSafeEqual(seal, expectedSeal)) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Invalid seal: HMAC verification failed.\",\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t},\n\n\t/**\n\t * Derives a predictable ImageID (usually a Hash) from a raw WASM binary.\n\t *\n\t * @param wasmBytes - The raw bytes of the WASM logic file\n\t * @returns The SHA-256 ImageID of the logic\n\t */\n\tderiveImageId(wasmBytes: Buffer): Buffer {\n\t\treturn crypto.createHash(\"sha256\").update(wasmBytes).digest();\n\t},\n};\n"]}