@nexart/codemode-sdk 1.8.4 → 1.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/CHANGELOG.md +58 -0
  2. package/README.md +120 -1
  3. package/dist/cjs/browser.cjs +1 -1
  4. package/dist/cjs/browser.js +1 -1
  5. package/dist/cjs/core.cjs +406 -1
  6. package/dist/cjs/core.js +397 -2
  7. package/dist/cjs/node.cjs +1 -1
  8. package/dist/cjs/node.js +1 -1
  9. package/dist/esm/browser.cjs +1 -1
  10. package/dist/esm/browser.js +1 -1
  11. package/dist/esm/core.cjs +406 -1
  12. package/dist/esm/core.js +397 -2
  13. package/dist/esm/node.cjs +1 -1
  14. package/dist/esm/node.js +1 -1
  15. package/dist/types/sdk/codemode/attestation.d.ts +24 -0
  16. package/dist/types/sdk/codemode/attestation.d.ts.map +1 -0
  17. package/dist/types/sdk/codemode/canonicalJson.d.ts +16 -0
  18. package/dist/types/sdk/codemode/canonicalJson.d.ts.map +1 -0
  19. package/dist/types/sdk/codemode/cerProtocol.d.ts +40 -0
  20. package/dist/types/sdk/codemode/cerProtocol.d.ts.map +1 -0
  21. package/dist/types/sdk/codemode/core-index.d.ts +9 -1
  22. package/dist/types/sdk/codemode/core-index.d.ts.map +1 -1
  23. package/dist/types/sdk/codemode/entry/browser.d.ts +1 -1
  24. package/dist/types/sdk/codemode/entry/browser.d.ts.map +1 -1
  25. package/dist/types/sdk/codemode/nodeReceipt.d.ts +65 -0
  26. package/dist/types/sdk/codemode/nodeReceipt.d.ts.map +1 -0
  27. package/dist/types/sdk/codemode/runtime.d.ts +1 -1
  28. package/dist/types/sdk/codemode/runtime.d.ts.map +1 -1
  29. package/dist/types/sdk/codemode/types.d.ts +96 -0
  30. package/dist/types/sdk/codemode/types.d.ts.map +1 -1
  31. package/dist/types/sdk/codemode/verifyDetailed.d.ts +25 -0
  32. package/dist/types/sdk/codemode/verifyDetailed.d.ts.map +1 -0
  33. package/dist/types/sdk/codemode/version.d.ts +2 -2
  34. package/dist/types/sdk/codemode/version.d.ts.map +1 -1
  35. package/examples/sketch-minimal.js +27 -0
  36. package/examples/sketch-vars.js +59 -0
  37. package/examples/sketch.js +24 -0
  38. package/package.json +8 -2
package/dist/esm/core.js CHANGED
@@ -1,5 +1,8 @@
1
+ import { hashes, verify } from '@noble/ed25519';
2
+ import { sha512 } from '@noble/hashes/sha2.js';
3
+
1
4
  // version.ts
2
- var SDK_VERSION = "1.8.4";
5
+ var SDK_VERSION = "1.10.0";
3
6
  var PROTOCOL_VERSION = "1.2.0";
4
7
  var PROTOCOL_PHASE = 3;
5
8
 
@@ -22,6 +25,20 @@ var DEFAULT_CONFIG = {
22
25
  minDuration: 1,
23
26
  maxDuration: 4
24
27
  };
28
+ var CodeVerifyCode = {
29
+ OK: "OK",
30
+ CERTIFICATE_HASH_MISMATCH: "CERTIFICATE_HASH_MISMATCH",
31
+ SNAPSHOT_HASH_MISMATCH: "SNAPSHOT_HASH_MISMATCH",
32
+ RENDER_HASH_MISMATCH: "RENDER_HASH_MISMATCH",
33
+ INVALID_SHA256_FORMAT: "INVALID_SHA256_FORMAT",
34
+ CANONICALIZATION_ERROR: "CANONICALIZATION_ERROR",
35
+ SCHEMA_ERROR: "SCHEMA_ERROR",
36
+ NODE_RECEIPT_MISSING: "NODE_RECEIPT_MISSING",
37
+ NODE_RECEIPT_KEY_NOT_FOUND: "NODE_RECEIPT_KEY_NOT_FOUND",
38
+ NODE_RECEIPT_INVALID_SIGNATURE: "NODE_RECEIPT_INVALID_SIGNATURE",
39
+ NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED: "NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED",
40
+ UNKNOWN_ERROR: "UNKNOWN_ERROR"
41
+ };
25
42
 
26
43
  // p5-runtime.ts
27
44
  var CODE_MODE_PROTOCOL_VERSION = PROTOCOL_VERSION;
@@ -1629,8 +1646,386 @@ function createEngine(config) {
1629
1646
  };
1630
1647
  }
1631
1648
 
1649
+ // canonicalJson.ts
1650
+ function toCanonicalJson(value) {
1651
+ if (value === null) return "null";
1652
+ if (typeof value === "boolean") return value ? "true" : "false";
1653
+ if (typeof value === "number") {
1654
+ if (!isFinite(value)) throw new Error(`toCanonicalJson: non-finite number ${value}`);
1655
+ return JSON.stringify(value);
1656
+ }
1657
+ if (typeof value === "string") return JSON.stringify(value);
1658
+ if (Array.isArray(value)) {
1659
+ return "[" + value.map(toCanonicalJson).join(",") + "]";
1660
+ }
1661
+ if (typeof value === "object") {
1662
+ const obj = value;
1663
+ const keys = Object.keys(obj).sort();
1664
+ return "{" + keys.filter((k) => obj[k] !== void 0 && typeof obj[k] !== "function").map((k) => `${JSON.stringify(k)}:${toCanonicalJson(obj[k])}`).join(",") + "}";
1665
+ }
1666
+ throw new Error(`toCanonicalJson: unsupported type ${typeof value}`);
1667
+ }
1668
+
1669
+ // nodeReceipt.ts
1670
+ hashes.sha512 = sha512;
1671
+ function base64urlToBytes(s) {
1672
+ const pad = s.length % 4;
1673
+ const base64 = s.replace(/-/g, "+").replace(/_/g, "/") + (pad ? "=".repeat(4 - pad) : "");
1674
+ if (typeof Buffer !== "undefined") {
1675
+ return new Uint8Array(Buffer.from(base64, "base64"));
1676
+ }
1677
+ const binary = atob(base64);
1678
+ return Uint8Array.from(binary, (c) => c.charCodeAt(0));
1679
+ }
1680
+ async function verifyNodeReceiptSignature(params) {
1681
+ try {
1682
+ const { receipt, signatureB64Url, key } = params;
1683
+ let pubKeyBytes;
1684
+ if (key.jwk) {
1685
+ if (key.jwk.kty !== "OKP" || key.jwk.crv !== "Ed25519") {
1686
+ return {
1687
+ ok: false,
1688
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
1689
+ details: [
1690
+ `JWK must have kty=OKP and crv=Ed25519, got kty=${key.jwk.kty} crv=${key.jwk.crv}`
1691
+ ]
1692
+ };
1693
+ }
1694
+ pubKeyBytes = base64urlToBytes(key.jwk.x);
1695
+ } else if (key.rawB64Url) {
1696
+ pubKeyBytes = base64urlToBytes(key.rawB64Url);
1697
+ } else if (key.spkiB64) {
1698
+ const spkiBytes = base64urlToBytes(key.spkiB64);
1699
+ if (spkiBytes.length < 32) {
1700
+ return {
1701
+ ok: false,
1702
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
1703
+ details: ["SPKI key too short to extract Ed25519 public key"]
1704
+ };
1705
+ }
1706
+ pubKeyBytes = spkiBytes.slice(spkiBytes.length - 32);
1707
+ } else {
1708
+ return {
1709
+ ok: false,
1710
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
1711
+ details: ["No usable key provided: supply jwk, rawB64Url, or spkiB64"]
1712
+ };
1713
+ }
1714
+ if (pubKeyBytes.length !== 32) {
1715
+ return {
1716
+ ok: false,
1717
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
1718
+ details: [`Ed25519 public key must be 32 bytes, got ${pubKeyBytes.length}`]
1719
+ };
1720
+ }
1721
+ const sigBytes = base64urlToBytes(signatureB64Url);
1722
+ if (sigBytes.length !== 64) {
1723
+ return {
1724
+ ok: false,
1725
+ code: CodeVerifyCode.NODE_RECEIPT_INVALID_SIGNATURE,
1726
+ details: [`Ed25519 signature must be 64 bytes, got ${sigBytes.length}`]
1727
+ };
1728
+ }
1729
+ const msgBytes = new TextEncoder().encode(toCanonicalJson(receipt));
1730
+ const isValid = await verify(sigBytes, msgBytes, pubKeyBytes);
1731
+ if (!isValid) {
1732
+ return {
1733
+ ok: false,
1734
+ code: CodeVerifyCode.NODE_RECEIPT_INVALID_SIGNATURE,
1735
+ details: ["Ed25519 signature verification failed"]
1736
+ };
1737
+ }
1738
+ return { ok: true, code: CodeVerifyCode.OK };
1739
+ } catch (err) {
1740
+ return {
1741
+ ok: false,
1742
+ code: CodeVerifyCode.NODE_RECEIPT_INVALID_SIGNATURE,
1743
+ details: [err instanceof Error ? err.message : String(err)]
1744
+ };
1745
+ }
1746
+ }
1747
+ async function fetchNodeKeys(nodeUrl) {
1748
+ const url = `${nodeUrl.replace(/\/+$/, "")}/.well-known/nexart-node.json`;
1749
+ const response = await fetch(url);
1750
+ if (!response.ok) {
1751
+ throw new Error(`Failed to fetch node keys from ${url}: HTTP ${response.status}`);
1752
+ }
1753
+ const data = await response.json();
1754
+ if (typeof data !== "object" || data === null) {
1755
+ throw new Error("Node keys response is not an object");
1756
+ }
1757
+ const doc = data;
1758
+ if (typeof doc.nodeId !== "string" || !Array.isArray(doc.keys)) {
1759
+ throw new Error("Node keys document missing required fields (nodeId, keys)");
1760
+ }
1761
+ return data;
1762
+ }
1763
+ function selectNodeKey(doc, kid) {
1764
+ if (kid) {
1765
+ const found = doc.keys.find((k) => k.kid === kid);
1766
+ if (!found) {
1767
+ return {
1768
+ error: {
1769
+ ok: false,
1770
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
1771
+ details: [`Key with kid="${kid}" not found in node keys document`]
1772
+ }
1773
+ };
1774
+ }
1775
+ return { key: found };
1776
+ }
1777
+ if (doc.activeKid) {
1778
+ const found = doc.keys.find((k) => k.kid === doc.activeKid);
1779
+ if (!found) {
1780
+ return {
1781
+ error: {
1782
+ ok: false,
1783
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
1784
+ details: [`activeKid="${doc.activeKid}" not found in keys array`]
1785
+ }
1786
+ };
1787
+ }
1788
+ return { key: found };
1789
+ }
1790
+ if (doc.keys.length === 0) {
1791
+ return {
1792
+ error: {
1793
+ ok: false,
1794
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
1795
+ details: ["No keys available in node keys document"]
1796
+ }
1797
+ };
1798
+ }
1799
+ return { key: doc.keys[0] };
1800
+ }
1801
+ function extractReceiptAndSignature(bundle) {
1802
+ if (typeof bundle !== "object" || bundle === null) return null;
1803
+ const b = bundle;
1804
+ if (typeof b.receipt === "object" && b.receipt !== null && typeof b.signature === "string") {
1805
+ return {
1806
+ receipt: b.receipt,
1807
+ signatureB64Url: b.signature,
1808
+ attestorKeyId: typeof b.attestorKeyId === "string" ? b.attestorKeyId : void 0
1809
+ };
1810
+ }
1811
+ if (typeof b.attestation === "object" && b.attestation !== null) {
1812
+ const att = b.attestation;
1813
+ if (typeof att.receipt === "object" && att.receipt !== null && typeof att.signature === "string") {
1814
+ return {
1815
+ receipt: att.receipt,
1816
+ signatureB64Url: att.signature,
1817
+ attestorKeyId: typeof att.attestorKeyId === "string" ? att.attestorKeyId : void 0
1818
+ };
1819
+ }
1820
+ }
1821
+ if (typeof b.meta === "object" && b.meta !== null) {
1822
+ const meta = b.meta;
1823
+ if (typeof meta.attestation === "object" && meta.attestation !== null) {
1824
+ const att = meta.attestation;
1825
+ if (typeof att.receipt === "object" && att.receipt !== null && typeof att.signature === "string") {
1826
+ return {
1827
+ receipt: att.receipt,
1828
+ signatureB64Url: att.signature,
1829
+ attestorKeyId: typeof att.attestorKeyId === "string" ? att.attestorKeyId : void 0
1830
+ };
1831
+ }
1832
+ }
1833
+ }
1834
+ return null;
1835
+ }
1836
+ async function verifyBundleAttestation(bundle, options) {
1837
+ const extracted = extractReceiptAndSignature(bundle);
1838
+ if (!extracted) {
1839
+ return {
1840
+ ok: false,
1841
+ code: CodeVerifyCode.NODE_RECEIPT_MISSING,
1842
+ details: ["No signed receipt found in bundle (expected bundle.receipt + bundle.signature or bundle.attestation envelope)"]
1843
+ };
1844
+ }
1845
+ const nodeId = extracted.receipt.nodeId;
1846
+ const resolvedKid = options.kid ?? extracted.attestorKeyId ?? extracted.receipt.attestorKeyId;
1847
+ function ctx() {
1848
+ const lines = [];
1849
+ if (nodeId) lines.push(`nodeId: ${nodeId}`);
1850
+ if (resolvedKid) lines.push(`kid: ${resolvedKid}`);
1851
+ return lines;
1852
+ }
1853
+ if (typeof bundle.certificateHash === "string") {
1854
+ const bundleCertHash = bundle.certificateHash;
1855
+ if (extracted.receipt.certificateHash !== bundleCertHash) {
1856
+ return {
1857
+ ok: false,
1858
+ code: CodeVerifyCode.CERTIFICATE_HASH_MISMATCH,
1859
+ details: [
1860
+ "Receipt certificateHash does not match bundle certificateHash",
1861
+ `receipt.certificateHash: ${extracted.receipt.certificateHash}`,
1862
+ `bundle.certificateHash: ${bundleCertHash}`,
1863
+ ...ctx()
1864
+ ]
1865
+ };
1866
+ }
1867
+ }
1868
+ let keysDoc;
1869
+ try {
1870
+ keysDoc = await fetchNodeKeys(options.nodeUrl);
1871
+ } catch (err) {
1872
+ return {
1873
+ ok: false,
1874
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
1875
+ details: [...ctx(), err instanceof Error ? err.message : String(err)]
1876
+ };
1877
+ }
1878
+ const selected = selectNodeKey(keysDoc, resolvedKid);
1879
+ if (selected.error) {
1880
+ return {
1881
+ ...selected.error,
1882
+ details: [...ctx(), ...selected.error.details ?? []]
1883
+ };
1884
+ }
1885
+ const keyEntry = selected.key;
1886
+ const keyParam = {};
1887
+ if (keyEntry.publicKeyJwk) keyParam.jwk = keyEntry.publicKeyJwk;
1888
+ else if (keyEntry.publicKey) keyParam.rawB64Url = keyEntry.publicKey;
1889
+ else if (keyEntry.publicKeySpkiB64) keyParam.spkiB64 = keyEntry.publicKeySpkiB64;
1890
+ else {
1891
+ return {
1892
+ ok: false,
1893
+ code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
1894
+ details: [
1895
+ `Key kid="${keyEntry.kid}" has no usable public key field (publicKeyJwk, publicKey, or publicKeySpkiB64)`,
1896
+ ...ctx()
1897
+ ]
1898
+ };
1899
+ }
1900
+ const sigResult = await verifyNodeReceiptSignature({
1901
+ receipt: extracted.receipt,
1902
+ signatureB64Url: extracted.signatureB64Url,
1903
+ key: keyParam
1904
+ });
1905
+ const contextLines = ctx();
1906
+ if (contextLines.length === 0) return sigResult;
1907
+ return sigResult.ok ? { ok: true, code: CodeVerifyCode.OK, details: contextLines } : { ...sigResult, details: [...contextLines, ...sigResult.details ?? []] };
1908
+ }
1909
+
1910
+ // attestation.ts
1911
+ function getAttestationReceipt(bundle) {
1912
+ if (typeof bundle !== "object" || bundle === null) return null;
1913
+ const b = bundle;
1914
+ if (typeof b.receipt === "object" && b.receipt !== null && typeof b.signature === "string") {
1915
+ const r = b.receipt;
1916
+ return {
1917
+ attestationId: r.attestationId,
1918
+ attestedAt: r.attestedAt,
1919
+ nodeId: r.nodeId,
1920
+ attestorKeyId: r.attestorKeyId,
1921
+ nodeRuntimeHash: r.nodeRuntimeHash,
1922
+ certificateHash: r.certificateHash,
1923
+ protocolVersion: r.protocolVersion,
1924
+ receipt: r,
1925
+ signature: b.signature
1926
+ };
1927
+ }
1928
+ if (typeof b.attestation === "object" && b.attestation !== null) {
1929
+ const att = b.attestation;
1930
+ if (typeof att.receipt === "object" && att.receipt !== null && typeof att.signature === "string") {
1931
+ const r = att.receipt;
1932
+ return {
1933
+ attestationId: r.attestationId,
1934
+ attestedAt: r.attestedAt,
1935
+ nodeId: r.nodeId,
1936
+ attestorKeyId: r.attestorKeyId,
1937
+ nodeRuntimeHash: r.nodeRuntimeHash,
1938
+ certificateHash: r.certificateHash,
1939
+ protocolVersion: r.protocolVersion,
1940
+ receipt: r,
1941
+ signature: att.signature
1942
+ };
1943
+ }
1944
+ }
1945
+ if (typeof b.attestationId === "string") {
1946
+ return {
1947
+ attestationId: b.attestationId,
1948
+ attestedAt: typeof b.attestedAt === "string" ? b.attestedAt : "",
1949
+ nodeId: typeof b.nodeId === "string" ? b.nodeId : void 0,
1950
+ attestorKeyId: typeof b.attestorKeyId === "string" ? b.attestorKeyId : void 0,
1951
+ nodeRuntimeHash: typeof b.nodeRuntimeHash === "string" ? b.nodeRuntimeHash : void 0,
1952
+ certificateHash: typeof b.certificateHash === "string" ? b.certificateHash : void 0,
1953
+ protocolVersion: typeof b.protocolVersion === "string" ? b.protocolVersion : void 0
1954
+ };
1955
+ }
1956
+ return null;
1957
+ }
1958
+ function hasAttestation(bundle) {
1959
+ return getAttestationReceipt(bundle) !== null;
1960
+ }
1961
+
1962
+ // cerProtocol.ts
1963
+ var ReasonCode = {
1964
+ BUNDLE_HASH_MISMATCH: "BUNDLE_HASH_MISMATCH",
1965
+ NODE_SIGNATURE_INVALID: "NODE_SIGNATURE_INVALID",
1966
+ NODE_SIGNATURE_MISSING: "NODE_SIGNATURE_MISSING",
1967
+ RECEIPT_HASH_MISMATCH: "RECEIPT_HASH_MISMATCH",
1968
+ SCHEMA_VERSION_UNSUPPORTED: "SCHEMA_VERSION_UNSUPPORTED",
1969
+ RECORD_NOT_FOUND: "RECORD_NOT_FOUND",
1970
+ BUNDLE_CORRUPTED: "BUNDLE_CORRUPTED"
1971
+ };
1972
+
1973
+ // verifyDetailed.ts
1974
+ function validateSnapshotStructure(snapshot) {
1975
+ const codes = [];
1976
+ if (!snapshot || typeof snapshot !== "object") {
1977
+ codes.push(ReasonCode.BUNDLE_CORRUPTED);
1978
+ return codes;
1979
+ }
1980
+ if (snapshot.protocol !== "nexart") {
1981
+ codes.push(ReasonCode.SCHEMA_VERSION_UNSUPPORTED);
1982
+ }
1983
+ if (!snapshot.outputHash || !snapshot.outputHash.startsWith("sha256:")) {
1984
+ codes.push(ReasonCode.BUNDLE_CORRUPTED);
1985
+ }
1986
+ if (!snapshot.codeHash || !snapshot.codeHash.startsWith("sha256:")) {
1987
+ codes.push(ReasonCode.BUNDLE_CORRUPTED);
1988
+ }
1989
+ return codes;
1990
+ }
1991
+ function verifyCodeModeSnapshotDetailed(snapshot, options = {}) {
1992
+ const verifiedAt = (/* @__PURE__ */ new Date()).toISOString();
1993
+ const verifier = "@nexart/codemode-sdk";
1994
+ if (!snapshot || typeof snapshot !== "object" || Array.isArray(snapshot)) {
1995
+ return {
1996
+ status: "FAILED",
1997
+ checks: { bundleIntegrity: "FAIL", nodeSignature: "SKIPPED", receiptConsistency: "SKIPPED" },
1998
+ reasonCodes: [ReasonCode.BUNDLE_CORRUPTED],
1999
+ certificateHash: "",
2000
+ bundleType: "codemode.snapshot.v1",
2001
+ verifiedAt,
2002
+ verifier
2003
+ };
2004
+ }
2005
+ const snap = snapshot;
2006
+ const structureReasons = validateSnapshotStructure(snap);
2007
+ const hashReasons = [];
2008
+ if (options.outputHash !== void 0 && options.outputHash !== snap.outputHash) {
2009
+ hashReasons.push(ReasonCode.BUNDLE_HASH_MISMATCH);
2010
+ }
2011
+ if (options.codeHash !== void 0 && options.codeHash !== snap.codeHash) {
2012
+ hashReasons.push(ReasonCode.BUNDLE_HASH_MISMATCH);
2013
+ }
2014
+ const reasonCodes = [.../* @__PURE__ */ new Set([...structureReasons, ...hashReasons])];
2015
+ const bundleIntegrity = reasonCodes.length === 0 ? "PASS" : "FAIL";
2016
+ return {
2017
+ status: bundleIntegrity === "PASS" ? "VERIFIED" : "FAILED",
2018
+ checks: { bundleIntegrity, nodeSignature: "SKIPPED", receiptConsistency: "SKIPPED" },
2019
+ reasonCodes,
2020
+ certificateHash: snap.outputHash ?? "",
2021
+ bundleType: "codemode.snapshot.v1",
2022
+ verifiedAt,
2023
+ verifier
2024
+ };
2025
+ }
2026
+
1632
2027
  // core-index.ts
1633
2028
  var SDK_VERSION2 = SDK_VERSION;
1634
2029
  var SDK_NAME = "@nexart/codemode-sdk";
1635
2030
 
1636
- export { CODE_MODE_ENFORCEMENT, CODE_MODE_PROTOCOL_PHASE, CODE_MODE_PROTOCOL_VERSION, DEFAULT_CONFIG, DEFAULT_VARS, PROTOCOL_IDENTITY, PROTOCOL_PHASE, PROTOCOL_VERSION, SDK_NAME, SDK_VERSION2 as SDK_VERSION, VAR_COUNT, VAR_MAX, VAR_MIN, cancelLoopMode, createEngine, createP5Runtime, createProtocolVAR, executeCodeMode, injectTimeVariables, runLoopMode, runStaticMode, validateCodeModeSource };
2031
+ export { CODE_MODE_ENFORCEMENT, CODE_MODE_PROTOCOL_PHASE, CODE_MODE_PROTOCOL_VERSION, CodeVerifyCode, DEFAULT_CONFIG, DEFAULT_VARS, PROTOCOL_IDENTITY, PROTOCOL_PHASE, PROTOCOL_VERSION, ReasonCode, SDK_NAME, SDK_VERSION2 as SDK_VERSION, VAR_COUNT, VAR_MAX, VAR_MIN, cancelLoopMode, createEngine, createP5Runtime, createProtocolVAR, executeCodeMode, fetchNodeKeys, getAttestationReceipt, hasAttestation, injectTimeVariables, runLoopMode, runStaticMode, selectNodeKey, toCanonicalJson, validateCodeModeSource, verifyBundleAttestation, verifyCodeModeSnapshotDetailed, verifyNodeReceiptSignature };
package/dist/esm/node.cjs CHANGED
@@ -1068,7 +1068,7 @@ var init_soundart_sketches = __esm({
1068
1068
  });
1069
1069
 
1070
1070
  // version.ts
1071
- var SDK_VERSION = "1.8.4";
1071
+ var SDK_VERSION = "1.10.0";
1072
1072
  var PROTOCOL_VERSION = "1.2.0";
1073
1073
  var PROTOCOL_PHASE = 3;
1074
1074
 
package/dist/esm/node.js CHANGED
@@ -1065,7 +1065,7 @@ var init_soundart_sketches = __esm({
1065
1065
  });
1066
1066
 
1067
1067
  // version.ts
1068
- var SDK_VERSION = "1.8.4";
1068
+ var SDK_VERSION = "1.10.0";
1069
1069
  var PROTOCOL_VERSION = "1.2.0";
1070
1070
  var PROTOCOL_PHASE = 3;
1071
1071
 
@@ -0,0 +1,24 @@
1
+ /**
2
+ * @nexart/codemode-sdk — Attestation Receipt Helpers (v1.9.0)
3
+ *
4
+ * Utilities for extracting and inspecting attestation receipts from Code Mode
5
+ * snapshot bundles. These are read-only helpers — they never perform network
6
+ * calls or signature verification. For full offline verification use
7
+ * verifyBundleAttestation() from nodeReceipt.ts.
8
+ *
9
+ * Recognised bundle layouts:
10
+ * A. Top-level envelope — bundle.receipt + bundle.signature
11
+ * B. Nested attestation — bundle.attestation.receipt + bundle.attestation.signature
12
+ * C. Legacy flat fields — bundle.attestationId (pre-receipt format)
13
+ */
14
+ import type { CodeAttestationReceipt } from './types.js';
15
+ /**
16
+ * Extract a normalised CodeAttestationReceipt from any Code Mode bundle.
17
+ * Returns null when no attestation is present.
18
+ */
19
+ export declare function getAttestationReceipt(bundle: unknown): CodeAttestationReceipt | null;
20
+ /**
21
+ * Return true if the bundle carries any form of attestation data.
22
+ */
23
+ export declare function hasAttestation(bundle: unknown): boolean;
24
+ //# sourceMappingURL=attestation.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"attestation.d.ts","sourceRoot":"","sources":["../../../../attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAA4B,MAAM,YAAY,CAAC;AAEnF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,sBAAsB,GAAG,IAAI,CAqDpF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAEvD"}
@@ -0,0 +1,16 @@
1
+ /**
2
+ * @nexart/codemode-sdk — Canonical JSON
3
+ *
4
+ * Deterministic, sorted-key JSON serialization used for signing and
5
+ * verifying attestation receipts. The output is byte-for-byte identical
6
+ * whether produced in Node.js or a browser.
7
+ *
8
+ * Rules:
9
+ * - Object keys are sorted lexicographically (Unicode code point order)
10
+ * - No trailing commas, no whitespace
11
+ * - Arrays preserve insertion order
12
+ * - null, boolean, number, string are encoded as standard JSON literals
13
+ * - Undefined values and function-valued properties are omitted (same as JSON.stringify)
14
+ */
15
+ export declare function toCanonicalJson(value: unknown): string;
16
+ //# sourceMappingURL=canonicalJson.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"canonicalJson.d.ts","sourceRoot":"","sources":["../../../../canonicalJson.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAwBtD"}
@@ -0,0 +1,40 @@
1
+ /**
2
+ * CER Protocol verification types — @nexart/codemode-sdk v1.10.0
3
+ *
4
+ * Mirrors the types in @nexart/ai-execution/cerProtocol so both SDKs
5
+ * produce interoperable CerVerificationResult objects without a cross-package
6
+ * dependency at runtime.
7
+ */
8
+ export type VerificationStatus = 'VERIFIED' | 'FAILED' | 'NOT_FOUND';
9
+ export type CheckStatus = 'PASS' | 'FAIL' | 'SKIPPED';
10
+ export declare const ReasonCode: {
11
+ readonly BUNDLE_HASH_MISMATCH: "BUNDLE_HASH_MISMATCH";
12
+ readonly NODE_SIGNATURE_INVALID: "NODE_SIGNATURE_INVALID";
13
+ readonly NODE_SIGNATURE_MISSING: "NODE_SIGNATURE_MISSING";
14
+ readonly RECEIPT_HASH_MISMATCH: "RECEIPT_HASH_MISMATCH";
15
+ readonly SCHEMA_VERSION_UNSUPPORTED: "SCHEMA_VERSION_UNSUPPORTED";
16
+ readonly RECORD_NOT_FOUND: "RECORD_NOT_FOUND";
17
+ readonly BUNDLE_CORRUPTED: "BUNDLE_CORRUPTED";
18
+ };
19
+ export type ReasonCode = typeof ReasonCode[keyof typeof ReasonCode];
20
+ /**
21
+ * Canonical protocol verification result.
22
+ *
23
+ * Produced by verifyAiCerBundleDetailed() and verifyCodeModeSnapshotDetailed().
24
+ * Code Mode snapshots do not carry node signatures, so nodeSignature and
25
+ * receiptConsistency are always SKIPPED for Code Mode.
26
+ */
27
+ export interface CerVerificationResult {
28
+ status: VerificationStatus;
29
+ checks: {
30
+ bundleIntegrity: CheckStatus;
31
+ nodeSignature: CheckStatus;
32
+ receiptConsistency: CheckStatus;
33
+ };
34
+ reasonCodes: ReasonCode[];
35
+ certificateHash: string;
36
+ bundleType: string;
37
+ verifiedAt: string;
38
+ verifier: string;
39
+ }
40
+ //# sourceMappingURL=cerProtocol.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cerProtocol.d.ts","sourceRoot":"","sources":["../../../../cerProtocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AACrE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtD,eAAO,MAAM,UAAU;;;;;;;;CAQb,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE;QACN,eAAe,EAAE,WAAW,CAAC;QAC7B,aAAa,EAAE,WAAW,CAAC;QAC3B,kBAAkB,EAAE,WAAW,CAAC;KACjC,CAAC;IACF,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB"}
@@ -14,10 +14,18 @@ export { createP5Runtime, injectTimeVariables, createProtocolVAR, VAR_COUNT, VAR
14
14
  export { runStaticMode, } from './static-engine';
15
15
  export { runLoopMode, cancelLoopMode, } from './loop-engine';
16
16
  export { createEngine, } from './engine';
17
+ export { CodeVerifyCode, type CodeVerifyCode as CodeVerifyCodeType, type CodeVerificationResult, type NodeReceiptVerifyResult, type NodeKeysDocument, type SignedAttestationReceipt, type CodeAttestationReceipt, } from './types.js';
18
+ export { verifyNodeReceiptSignature, fetchNodeKeys, selectNodeKey, verifyBundleAttestation, } from './nodeReceipt.js';
19
+ export { getAttestationReceipt, hasAttestation, } from './attestation.js';
20
+ export { toCanonicalJson } from './canonicalJson.js';
17
21
  /**
18
22
  * SDK Identity — imported from version.ts (single source of truth)
19
23
  */
20
- export declare const SDK_VERSION = "1.8.4";
24
+ export declare const SDK_VERSION = "1.10.0";
21
25
  export declare const SDK_NAME = "@nexart/codemode-sdk";
22
26
  export { PROTOCOL_VERSION, PROTOCOL_PHASE };
27
+ export { ReasonCode } from './cerProtocol';
28
+ export type { VerificationStatus, CheckStatus, ReasonCode as ReasonCodeType, CerVerificationResult, } from './cerProtocol';
29
+ export { verifyCodeModeSnapshotDetailed } from './verifyDetailed';
30
+ export type { VerifyCodeModeOptions } from './verifyDetailed';
23
31
  //# sourceMappingURL=core-index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"core-index.d.ts","sourceRoot":"","sources":["../../../../core-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA+B,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1F,OAAO,EACL,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,SAAS,EACT,OAAO,EACP,OAAO,EACP,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,YAAY,GACb,MAAM,UAAU,CAAC;AAElB;;GAEG;AACH,eAAO,MAAM,WAAW,UAAe,CAAC;AACxC,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC"}
1
+ {"version":3,"file":"core-index.d.ts","sourceRoot":"","sources":["../../../../core-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA+B,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1F,OAAO,EACL,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,SAAS,EACT,OAAO,EACP,OAAO,EACP,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,YAAY,GACb,MAAM,UAAU,CAAC;AAKlB,OAAO,EACL,cAAc,EACd,KAAK,cAAc,IAAI,kBAAkB,EACzC,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EACb,aAAa,EACb,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,WAAW,WAAe,CAAC;AACxC,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC;AAK5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,UAAU,IAAI,cAAc,EAC5B,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAKvB,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC"}
@@ -28,7 +28,7 @@ export { createRuntime, NexArtRuntime, RUNTIME_VERSION, } from '../runtime';
28
28
  export type { RuntimeOptions, RuntimeState, NexArtRuntime as NexArtRuntimeType, } from '../runtime';
29
29
  export { renderSoundArtViaCodeMode, canRenderViaCodeMode, getCodeModeAvailableStyles, } from '../soundart-engine';
30
30
  export type { TweakParams, SoundArtEngineConfig, SoundArtRenderOptions, SoundArtRenderResult, SoundArtMetadata, SoundSnapshot, SoundFeatures, SoundArtSketchName, } from '../soundart-engine';
31
- export declare const SDK_VERSION = "1.8.4";
31
+ export declare const SDK_VERSION = "1.10.0";
32
32
  export declare const SDK_NAME = "@nexart/codemode-sdk";
33
33
  export declare const SDK_ENTRY = "browser";
34
34
  /**
@@ -1 +1 @@
1
- {"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../../../../entry/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,YAAY,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,UAAU,CAAC;AAKlB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,SAAS,EACT,OAAO,EACP,OAAO,EACP,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,SAAS,EACT,eAAe,GAChB,MAAM,eAAe,CAAC;AAKvB,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,YAAY,GACb,MAAM,WAAW,CAAC;AAKnB,OAAO,EACL,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,cAAc,EACd,YAAY,EACZ,aAAa,IAAI,iBAAiB,GACnC,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAK5B,eAAO,MAAM,WAAW,UAAe,CAAC;AACxC,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,eAAO,MAAM,SAAS,YAAY,CAAC;AAEnC;;;;;;;;;;;GAWG"}
1
+ {"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../../../../entry/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,YAAY,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,UAAU,CAAC;AAKlB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,SAAS,EACT,OAAO,EACP,OAAO,EACP,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,SAAS,EACT,eAAe,GAChB,MAAM,eAAe,CAAC;AAKvB,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,YAAY,GACb,MAAM,WAAW,CAAC;AAKnB,OAAO,EACL,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,cAAc,EACd,YAAY,EACZ,aAAa,IAAI,iBAAiB,GACnC,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAK5B,eAAO,MAAM,WAAW,WAAe,CAAC;AACxC,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,eAAO,MAAM,SAAS,YAAY,CAAC;AAEnC;;;;;;;;;;;GAWG"}
@@ -0,0 +1,65 @@
1
+ /**
2
+ * @nexart/codemode-sdk — Node Receipt Verification (v1.9.0)
3
+ *
4
+ * Offline Ed25519 signature verification for Code Mode attestation receipts.
5
+ * Browser and Node.js compatible — uses @noble/ed25519 with @noble/hashes/sha2.
6
+ *
7
+ * Usage:
8
+ * const res = await verifyBundleAttestation(bundle, { nodeUrl });
9
+ * console.log(res.ok, res.code);
10
+ */
11
+ import type { NodeKeysDocument, SignedAttestationReceipt, NodeReceiptVerifyResult } from './types.js';
12
+ /**
13
+ * Verify an Ed25519 signature over the canonical JSON bytes of a receipt.
14
+ *
15
+ * @param params.receipt - The receipt object that was signed.
16
+ * @param params.signatureB64Url - Base64url-encoded 64-byte Ed25519 signature.
17
+ * @param params.key - Public key in one of: JWK, raw base64url, or SPKI.
18
+ */
19
+ export declare function verifyNodeReceiptSignature(params: {
20
+ receipt: SignedAttestationReceipt;
21
+ signatureB64Url: string;
22
+ key: {
23
+ jwk?: NodeKeysDocument['keys'][number]['publicKeyJwk'];
24
+ spkiB64?: string;
25
+ rawB64Url?: string;
26
+ };
27
+ }): Promise<NodeReceiptVerifyResult>;
28
+ /**
29
+ * Fetch node keys from /.well-known/nexart-node.json on the attestation node.
30
+ */
31
+ export declare function fetchNodeKeys(nodeUrl: string): Promise<NodeKeysDocument>;
32
+ type SelectKeySuccess = {
33
+ key: NodeKeysDocument['keys'][number];
34
+ error?: never;
35
+ };
36
+ type SelectKeyFailure = {
37
+ error: NodeReceiptVerifyResult;
38
+ key?: never;
39
+ };
40
+ type SelectKeyResult = SelectKeySuccess | SelectKeyFailure;
41
+ /**
42
+ * Select the appropriate key from a NodeKeysDocument.
43
+ *
44
+ * Priority: explicit kid → activeKid → first key in array.
45
+ */
46
+ export declare function selectNodeKey(doc: NodeKeysDocument, kid?: string): SelectKeyResult;
47
+ /**
48
+ * Fully verify a Code Mode bundle's node attestation (offline).
49
+ *
50
+ * Steps:
51
+ * 1. Extract signed receipt + signature from the bundle.
52
+ * 2. Cross-check receipt.certificateHash === bundle.certificateHash.
53
+ * 3. Fetch node keys from nodeUrl.
54
+ * 4. Select the key (by kid, activeKid, or first).
55
+ * 5. Verify the Ed25519 signature over canonical JSON of the receipt.
56
+ *
57
+ * @param bundle - A Code Mode snapshot bundle (any recognised layout).
58
+ * @param options - nodeUrl to fetch keys from; optional kid to select.
59
+ */
60
+ export declare function verifyBundleAttestation(bundle: unknown, options: {
61
+ nodeUrl: string;
62
+ kid?: string;
63
+ }): Promise<NodeReceiptVerifyResult>;
64
+ export {};
65
+ //# sourceMappingURL=nodeReceipt.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"nodeReceipt.d.ts","sourceRoot":"","sources":["../../../../nodeReceipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAsBtG;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,wBAAwB,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE;QACH,GAAG,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACvD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA0EnC;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAe9E;AAED,KAAK,gBAAgB,GAAG;IAAE,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AACjF,KAAK,gBAAgB,GAAG;IAAE,KAAK,EAAE,uBAAuB,CAAC;IAAC,GAAG,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AACxE,KAAK,eAAe,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,eAAe,CAwClF;AAiDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,OAAO,EACf,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAAC,uBAAuB,CAAC,CAqFlC"}
@@ -18,7 +18,7 @@
18
18
  * ║ BROWSER-SAFE: No Node.js dependencies. Works in Vite/Next/React. ║
19
19
  * ╚══════════════════════════════════════════════════════════════════════════╝
20
20
  */
21
- export declare const RUNTIME_VERSION = "1.8.4";
21
+ export declare const RUNTIME_VERSION = "1.10.0";
22
22
  export interface RuntimeOptions {
23
23
  seed: string | number;
24
24
  vars?: number[];
@@ -1 +1 @@
1
- {"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,eAAO,MAAM,eAAe,UAAc,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,IAAI,MAAM,CAAC;IACjB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5C,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,IAAI,MAAM,CAAC;IACjB,QAAQ,IAAI,YAAY,CAAC;IACzB,OAAO,IAAI,MAAM,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAqGD,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,CAuHpE;AAED,eAAO,MAAM,aAAa;;;CAGzB,CAAC"}
1
+ {"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,eAAO,MAAM,eAAe,WAAc,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,IAAI,MAAM,CAAC;IACjB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5C,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,IAAI,MAAM,CAAC;IACjB,QAAQ,IAAI,YAAY,CAAC;IACzB,OAAO,IAAI,MAAM,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAqGD,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,CAuHpE;AAED,eAAO,MAAM,aAAa;;;CAGzB,CAAC"}