@opendatalabs/personal-server-ts-core 0.0.1-canary.01ca694 → 0.0.1-canary.052d47e

package/dist/derivatives/compute.js

@@ -0,0 +1,414 @@
+/**
+ * The compute job: answer one registered question from local data and
+ * write the answer as a derivative record (owner path, `$lineage` = the
+ * source data points).
+ */
+import { DerivativeCycleError, DerivativeSourceNotGrantedError, ProtocolError, } from "../errors/catalog.js";
+import { resolveReadDeletion } from "../api/index.js";
+import { LOCAL_SCOPE_SCAN_PAGE, readStoredLineage, } from "../lineage/lineage.js";
+import { uncoveredSourceScopes } from "./registration.js";
+import { ingestDataContract } from "../contracts/data.js";
+import { isBinaryEnvelope } from "../contracts/binary.js";
+import { assertDerivedScopeNaming } from "../lineage/lineage.js";
+import { computeDataPointId } from "../sync/data-point-id.js";
+import { verifyDataWritePolicy, } from "../policy/data-write.js";
+import { InferenceRequestError } from "./inference.js";
+import { buildQuestionMessages, parseAnswer, trimSourceData, } from "./prompt.js";
+const DEFAULT_RETRY_DELAYS_MS = [1_000, 4_000];
+/**
+ * Transient: no response, rate limited or a provider-side failure. An
+ * explicit `retryable` hint (E2EE key verification or decryption failures
+ * are permanent) wins over the status rule.
+ */
+function isRetryableInferenceError(err) {
+    if (!(err instanceof InferenceRequestError))
+        return false;
+    if (err.retryable !== undefined)
+        return err.retryable;
+    return err.status === null || err.status === 429 || err.status >= 500;
+}
+/**
+ * Run `attempt` up to `delays.length + 1` times while `retryable(err)`;
+ * anything else (a ProtocolError, a permanent status) surfaces at once.
+ */
+async function withRetries(deps, attempt, retryable) {
+    const delays = deps.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS;
+    const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    for (let index = 0;; index += 1) {
+        try {
+            return await attempt();
+        }
+        catch (err) {
+            if (index >= delays.length || !retryable(err))
+                throw err;
+            await sleep(delays[index]);
+        }
+    }
+}
+/** A failure message safe to persist: never the prompt, never the data. */
+class ComputeFailure extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "ComputeFailure";
+        this.code = code;
+    }
+}
+/**
+ * The machine-readable failure class stored next to the short reason. It is
+ * what the status route serves to readers of the derived scope, so it is a
+ * CLOSED vocabulary: never a scope name, never provider detail. It also
+ * drives the scheduler's automatic retry — `inference_unavailable` is the
+ * one transient class.
+ */
+function classifyComputeError(err) {
+    if (err instanceof ComputeFailure)
+        return err.code ?? "internal";
+    if (err instanceof InferenceRequestError) {
+        return isRetryableInferenceError(err)
+            ? "inference_unavailable"
+            : "internal";
+    }
+    if (err instanceof ProtocolError) {
+        const grantShaped = err.errorCode === "DERIVATIVE_SOURCE_NOT_GRANTED" ||
+            err.errorCode === "SCOPE_MISMATCH" ||
+            err.errorCode === "UNREGISTERED_BUILDER" ||
+            err.errorCode.startsWith("GRANT_");
+        return grantShaped ? "grant_invalid" : "internal";
+    }
+    return "internal";
+}
+function shortError(err) {
+    if (err instanceof ComputeFailure)
+        return err.message;
+    if (err instanceof InferenceRequestError)
+        return err.message;
+    if (err instanceof ProtocolError)
+        return `${err.errorCode}: ${err.message}`;
+    // Unknown errors may quote data (a JSON parse error echoes its input);
+    // keep the class name only.
+    return `compute failed (${err instanceof Error ? err.name : "Error"})`;
+}
+/**
+ * Version stamp for the derived record, second precision like an HTTP
+ * ingest. A recompute inside the same second as the previous one would
+ * collide on the (scope, collectedAt) path, so the stamp advances past any
+ * version the scope already holds (bounded: at most one minute ahead).
+ */
+export function collectedAtStamp(now, isTaken) {
+    const base = now();
+    base.setUTCMilliseconds(0);
+    for (let bump = 0; bump < 60; bump += 1) {
+        const candidate = new Date(base.getTime() + bump * 1000)
+            .toISOString()
+            .replace(/\.\d{3}Z$/, "Z");
+        if (!isTaken(candidate))
+            return candidate;
+    }
+    throw new ComputeFailure("could not allocate a version stamp");
+}
+async function tombstoneMarker(scopeDeletions, scope) {
+    if (!scopeDeletions)
+        return null;
+    const verdict = await scopeDeletions.resolve(scope);
+    if (!verdict.deleted || verdict.version === null)
+        return null;
+    const version = Number(verdict.version);
+    return Number.isSafeInteger(version) ? version : null;
+}
+/**
+ * `dataPointId -> scope` for every scope in the local index, used to walk
+ * stored lineage locally. Paged like the lineage resolver.
+ */
+function localScopesById(storage, serverOwner) {
+    const byId = new Map();
+    for (let offset = 0;; offset += LOCAL_SCOPE_SCAN_PAGE) {
+        const { scopes, total } = storage.listScopes({
+            limit: LOCAL_SCOPE_SCAN_PAGE,
+            offset,
+        });
+        for (const summary of scopes) {
+            byId.set(computeDataPointId(serverOwner, summary.scope), summary.scope);
+        }
+        if (scopes.length === 0 || offset + scopes.length >= total)
+            break;
+    }
+    return byId;
+}
+/**
+ * Cycle guard on ACTUAL lineage, for cycles the per-store registration
+ * check cannot see (two replicas each holding one half: B <- A here, A <- B
+ * there, ping-ponging through sync). Walks `$lineage` from every source's
+ * latest local version through the local index; reaching the derived data
+ * point id means this question would consume its own output. Bounded by
+ * the visited set.
+ */
+async function assertNoLineageCycle(deps, registration, serverOwner, sourceLineage) {
+    const derivedId = computeDataPointId(serverOwner, registration.derivedScope);
+    let byId = null;
+    const visited = new Set();
+    const stack = [];
+    for (const [scope, sources] of sourceLineage) {
+        for (const id of sources)
+            stack.push({ id, path: [scope] });
+    }
+    while (stack.length > 0) {
+        const { id, path } = stack.pop();
+        if (id === derivedId) {
+            throw new DerivativeCycleError({
+                derivedScope: registration.derivedScope,
+                path: [registration.derivedScope, ...path, registration.derivedScope],
+            });
+        }
+        if (visited.has(id))
+            continue;
+        visited.add(id);
+        byId ??= localScopesById(deps.storage, serverOwner);
+        const scope = byId.get(id);
+        if (!scope)
+            continue;
+        const entry = deps.storage.findEntry({ scope });
+        if (!entry)
+            continue;
+        let sources = [];
+        try {
+            const envelope = await deps.storage.readEnvelope(scope, entry.collectedAt);
+            sources = readStoredLineage(envelope.data)?.sources ?? [];
+        }
+        catch {
+            // Unreadable or malformed lineage: nothing further to walk here.
+        }
+        for (const next of sources)
+            stack.push({ id: next, path: [...path, scope] });
+    }
+}
+async function loadSource(deps, scope) {
+    const entry = deps.storage.findEntry({ scope });
+    // The same deletion gate a read applies: a tombstoned scope is refused
+    // (410 on the read path) whether or not a stale local copy remains.
+    const deletion = await resolveReadDeletion({ scopeDeletions: deps.scopeDeletions, serverOwner: deps.serverOwner }, scope, entry);
+    if (deletion) {
+        throw new ComputeFailure(`source scope ${scope} is deleted`, "source_missing");
+    }
+    if (!entry) {
+        throw new ComputeFailure(`source scope ${scope} has no local data`, "source_missing");
+    }
+    let envelope;
+    try {
+        envelope = await deps.storage.readEnvelope(scope, entry.collectedAt);
+    }
+    catch {
+        throw new ComputeFailure(`source scope ${scope} could not be read`);
+    }
+    let lineageSources = [];
+    try {
+        lineageSources = readStoredLineage(envelope.data)?.sources ?? [];
+    }
+    catch {
+        // Malformed stored lineage: treated as a root for the cycle walk.
+    }
+    const raw = isBinaryEnvelope(envelope)
+        ? {
+            binary: true,
+            note: "binary record; its content is not included in the prompt",
+        }
+        : envelope.data;
+    const trimmed = trimSourceData(raw, {
+        maxItems: deps.maxSourceItems,
+        maxChars: deps.maxSourceChars,
+    });
+    return {
+        source: {
+            scope,
+            collectedAt: entry.collectedAt,
+            version: entry.version,
+            data: trimmed.data,
+            kept: trimmed.kept,
+            total: trimmed.total,
+            truncated: trimmed.truncated,
+        },
+        lineageSources,
+    };
+}
+/**
+ * A builder question re-checks its grant before every compute: the write
+ * permission on the derived scope (revocation, expiry, coverage) AND read
+ * coverage of every source scope, since the answer exposes the sources to
+ * the builder. Gateway transport failures are retried; policy failures
+ * (ProtocolErrors) fail closed at once.
+ */
+async function assertGrantStillValid(deps, registration) {
+    if (registration.registeredBy.kind !== "builder")
+        return;
+    if (!deps.writePolicyPorts) {
+        throw new ComputeFailure("builder grant verification is not configured");
+    }
+    if (!deps.serverOwner) {
+        throw new ComputeFailure("server owner is not configured");
+    }
+    const { builder, grantId } = registration.registeredBy;
+    const ports = deps.writePolicyPorts;
+    const serverOwner = deps.serverOwner;
+    const grant = await withRetries(deps, () => verifyDataWritePolicy({
+        signer: builder,
+        grantId,
+        requestedScope: registration.derivedScope,
+        serverOwner,
+    }, ports), (err) => !(err instanceof ProtocolError));
+    const uncovered = uncoveredSourceScopes(registration.sourceScopes, grant.scopes ?? []);
+    if (uncovered.length > 0) {
+        throw new DerivativeSourceNotGrantedError({ scopes: uncovered });
+    }
+}
+/**
+ * Compute one question end to end. Never throws for a compute failure: the
+ * registration is marked `failed` with a short reason and the outcome says
+ * so. Throws only when the store itself fails.
+ */
+export async function computeQuestion(questionId, deps) {
+    const now = deps.now ?? (() => new Date());
+    if ((await deps.runtimeAvailability?.isAvailable()) === false) {
+        return { status: "skipped", reason: "runtime-unavailable" };
+    }
+    const registration = await deps.store.get(questionId);
+    if (!registration)
+        return { status: "skipped", reason: "unknown-question" };
+    try {
+        if (!deps.serverOwner) {
+            throw new ComputeFailure("server owner is not configured");
+        }
+        const serverOwner = deps.serverOwner;
+        await assertGrantStillValid(deps, registration);
+        // Defense in depth: the rule was checked at registration; a registration
+        // row edited by hand must still not produce a leaking derivative.
+        assertDerivedScopeNaming(registration.derivedScope, registration.sourceScopes);
+        const sources = [];
+        const sourceLineage = new Map();
+        for (const scope of registration.sourceScopes) {
+            const loaded = await loadSource(deps, scope);
+            sources.push(loaded.source);
+            sourceLineage.set(scope, loaded.lineageSources);
+        }
+        await assertNoLineageCycle(deps, registration, serverOwner, sourceLineage);
+        const messages = buildQuestionMessages({
+            question: registration.question,
+            sources,
+        });
+        const model = registration.model ?? deps.provider.defaultModel;
+        const reply = await withRetries(deps, () => deps.provider.chat({ model, messages, maxTokens: deps.maxTokens }), isRetryableInferenceError);
+        const parsed = parseAnswer(reply.content);
+        const computedAt = now().toISOString();
+        const lineageIds = registration.sourceScopes.map((scope) => computeDataPointId(serverOwner, scope));
+        const record = {
+            questionId: registration.questionId,
+            question: registration.question,
+            answer: parsed.answer,
+            evidence: parsed.evidence,
+            model,
+            computedAt,
+            sources: sources.map((source) => ({
+                scope: source.scope,
+                version: source.version,
+                collectedAt: source.collectedAt,
+            })),
+            lineage: lineageIds,
+            ...(reply.receiptId || reply.aciIdentity
+                ? {
+                    inference: {
+                        ...(reply.receiptId ? { receiptId: reply.receiptId } : {}),
+                        ...(reply.aciIdentity ? { aciIdentity: reply.aciIdentity } : {}),
+                    },
+                }
+                : {}),
+        };
+        const lineage = {
+            sources: lineageIds,
+            writtenAt: computedAt,
+        };
+        // `findEntry({ at })` may answer the closest version, so compare exactly.
+        const collectedAt = collectedAtStamp(now, (candidate) => deps.storage.findEntry({
+            scope: registration.derivedScope,
+            at: candidate,
+        })?.collectedAt === candidate);
+        const written = await ingestDataContract({
+            storage: deps.storage,
+            scopeParam: registration.derivedScope,
+            body: record,
+            collectedAt,
+            status: deps.syncManager ? "syncing" : "stored",
+            lineage,
+            afterTombstoneVersion: await tombstoneMarker(deps.scopeDeletions, registration.derivedScope),
+        });
+        if (!written.ok) {
+            throw new ComputeFailure(`derived record rejected: ${written.body.error}`);
+        }
+        const entry = deps.storage.findEntry({
+            scope: registration.derivedScope,
+            at: collectedAt,
+        });
+        const updated = await deps.store.update(questionId, {
+            status: "ready",
+            error: null,
+            errorCode: null,
+            updatedAt: computedAt,
+            lastComputedAt: computedAt,
+            derivedVersion: entry?.version ?? null,
+            derivedCollectedAt: collectedAt,
+        });
+        if (deps.syncManager?.notifyNewData) {
+            deps.syncManager.notifyNewData();
+        }
+        else if (deps.syncManager?.trigger) {
+            void deps.syncManager.trigger().catch(() => undefined);
+        }
+        try {
+            deps.onDerivedWritten?.({
+                scope: registration.derivedScope,
+                collectedAt,
+                lineageSources: lineageIds,
+            });
+        }
+        catch (err) {
+            deps.logger?.warn?.({
+                questionId,
+                derivedScope: registration.derivedScope,
+                error: err instanceof Error ? err.name : String(err),
+            }, "onDerivedWritten hook failed; derivative already written");
+        }
+        deps.logger?.info?.({
+            questionId,
+            derivedScope: registration.derivedScope,
+            sourceScopes: registration.sourceScopes,
+            model,
+            version: entry?.version ?? null,
+            receiptId: reply.receiptId ?? null,
+        }, "Derivative question computed");
+        return {
+            status: "ready",
+            registration: updated ?? { ...registration, status: "ready" },
+        };
+    }
+    catch (err) {
+        const error = shortError(err);
+        const errorCode = classifyComputeError(err);
+        const at = now().toISOString();
+        const updated = await deps.store.update(questionId, {
+            status: "failed",
+            error,
+            errorCode,
+            updatedAt: at,
+        });
+        deps.logger?.warn?.({ questionId, derivedScope: registration.derivedScope, error }, "Derivative question compute failed");
+        return {
+            status: "failed",
+            registration: updated ?? {
+                ...registration,
+                status: "failed",
+                error,
+                errorCode,
+            },
+            error,
+        };
+    }
+}
+//# sourceMappingURL=compute.js.map

package/dist/derivatives/compute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute.js","sourceRoot":"","sources":["../../src/derivatives/compute.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAM9D,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAA0B,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,cAAc,GAEf,MAAM,aAAa,CAAC;AAiErB,MAAM,uBAAuB,GAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAElE;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,GAAY;IAC7C,IAAI,CAAC,CAAC,GAAG,YAAY,qBAAqB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IACtD,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,IAA0D,EAC1D,OAAyB,EACzB,SAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC7D,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACzD,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAgC;IAC7C,YAAY,OAAe,EAAE,IAAwB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC;IACjE,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;QACzC,OAAO,yBAAyB,CAAC,GAAG,CAAC;YACnC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;QACjC,MAAM,WAAW,GACf,GAAG,CAAC,SAAS,KAAK,+BAA+B;YACjD,GAAG,CAAC,SAAS,KAAK,gBAAgB;YAClC,GAAG,CAAC,SAAS,KAAK,sBAAsB;YACxC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IACpD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACtD,IAAI,GAAG,YAAY,qBAAqB;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7D,IAAI,GAAG,YAAY,aAAa;QAAE,OAAO,GAAG,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5E,uEAAuE;IACvE,4BAA4B;IAC5B,OAAO,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAe,EACf,OAAyC;IAEzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;aACrD,WAAW,EAAE;aACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,cAAgD,EAChD,KAAa;IAEb,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,OAA4C,EAC5C,WAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,qBAAqB;YAC5B,MAAM;SACP,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CACjC,IAAyB,EACzB,YAAkC,EAClC,WAA0B,EAC1B,aAAqD;IAErD,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,IAAI,GAA+B,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;QAC7C,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAClC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,IAAI,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAC9C,KAAK,EACL,KAAK,CAAC,WAAW,CAClB,CAAC;YACF,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAyB,EACzB,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACtE,KAAK,EACL,KAAK,CACN,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,gBAAgB,KAAK,aAAa,EAClC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,cAAc,CACtB,gBAAgB,KAAK,oBAAoB,EACzC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC;QACpC,CAAC,CAAC;YACE,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,0DAA0D;SACjE;QACH,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE;QAClC,QAAQ,EAAE,IAAI,CAAC,cAAc;QAC7B,QAAQ,EAAE,IAAI,CAAC,cAAc;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE;YACN,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;QACD,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAyB,EACzB,YAAkC;IAElC,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IACzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,IAAI,EACJ,GAAG,EAAE,CACH,qBAAqB,CACnB;QACE,MAAM,EAAE,OAAO;QACf,OAAO;QACP,cAAc,EAAE,YAAY,CAAC,YAAY;QACzC,WAAW;KACZ,EACD,KAAK,CACN,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC,CACzC,CAAC;IACF,MAAM,SAAS,GAAG,qBAAqB,CACrC,YAAY,CAAC,YAAY,EACzB,KAAK,CAAC,MAAM,IAAI,EAAE,CACnB,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,+BAA+B,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,IAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAE5E,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,yEAAyE;QACzE,kEAAkE;QAClE,wBAAwB,CACtB,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,YAAY,CAC1B,CAAC;QAEF,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,OAAO;SACR,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EACxE,yBAAyB,CAC1B,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzD,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CACvC,CAAC;QACF,MAAM,MAAM,GAA2B;YACrC,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK;YACL,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,OAAO,EAAE,UAAU;YACnB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;gBACtC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACjE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,OAAO,GAAkB;YAC7B,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,UAAU;SACtB,CAAC;QACF,0EAA0E;QAC1E,MAAM,WAAW,GAAG,gBAAgB,CAClC,GAAG,EACH,CAAC,SAAS,EAAE,EAAE,CACZ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACrB,KAAK,EAAE,YAAY,CAAC,YAAY;YAChC,EAAE,EAAE,SAAS;SACd,CAAC,EAAE,WAAW,KAAK,SAAS,CAChC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,YAAY,CAAC,YAAY;YACrC,IAAI,EAAE,MAAM;YACZ,WAAW;YACX,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAC/C,OAAO;YACP,qBAAqB,EAAE,MAAM,eAAe,CAC1C,IAAI,CAAC,cAAc,EACnB,YAAY,CAAC,YAAY,CAC1B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CACtB,4BAA4B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACnC,KAAK,EAAE,YAAY,CAAC,YAAY;YAChC,EAAE,EAAE,WAAW;SAChB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,UAAU;YACrB,cAAc,EAAE,UAAU;YAC1B,cAAc,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;YACtC,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,KAAK,EAAE,YAAY,CAAC,YAAY;gBAChC,WAAW;gBACX,cAAc,EAAE,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;gBACE,UAAU;gBACV,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACrD,EACD,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;YACE,UAAU;YACV,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,KAAK;YACL,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;SACnC,EACD,8BAA8B,CAC/B,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,OAAO,IAAI,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,SAAS;YACT,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,EAC9D,oCAAoC,CACrC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,OAAO,IAAI;gBACvB,GAAG,YAAY;gBACf,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,SAAS;aACV;YACD,KAAK;SACN,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/derivatives/e2ee/aad.d.ts

@@ -0,0 +1,22 @@
+/**
+ * E2EE v2 associated data (spec section 6): RFC 8785 JCS bytes binding every
+ * ciphertext to its field path and request context. Byte-exact examples are
+ * pinned by the spec test vectors in aad.test.ts.
+ */
+export declare const E2EE_REQUEST_AAD_PURPOSE = "aci.e2ee.request.v2";
+export declare const E2EE_RESPONSE_AAD_PURPOSE = "aci.e2ee.response.v2";
+export interface E2eeRequestContext {
+    /** The selected service key's `algo`. */
+    algo: string;
+    /** The request's top-level `model`, byte-exact. */
+    model: string;
+    /** `X-E2EE-Nonce`, 64 hex characters. */
+    nonce: string;
+    /** `X-E2EE-Timestamp`, Unix seconds. */
+    ts: number;
+}
+export declare function requestFieldAad(context: E2eeRequestContext, field: string): Uint8Array;
+export declare function responseFieldAad(context: E2eeRequestContext, field: string, 
+/** The clear response `id`, or "" when the response has none. */
+id: string): Uint8Array;
+//# sourceMappingURL=aad.d.ts.map

package/dist/derivatives/e2ee/aad.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.d.ts","sourceRoot":"","sources":["../../../src/derivatives/e2ee/aad.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,MAAM,GACZ,UAAU,CASZ;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,MAAM;AACb,iEAAiE;AACjE,EAAE,EAAE,MAAM,GACT,UAAU,CAUZ"}

package/dist/derivatives/e2ee/aad.js

@@ -0,0 +1,32 @@
+/**
+ * E2EE v2 associated data (spec section 6): RFC 8785 JCS bytes binding every
+ * ciphertext to its field path and request context. Byte-exact examples are
+ * pinned by the spec test vectors in aad.test.ts.
+ */
+import { canonicalJsonBytes } from "./jcs.js";
+export const E2EE_REQUEST_AAD_PURPOSE = "aci.e2ee.request.v2";
+export const E2EE_RESPONSE_AAD_PURPOSE = "aci.e2ee.response.v2";
+export function requestFieldAad(context, field) {
+    return canonicalJsonBytes({
+        purpose: E2EE_REQUEST_AAD_PURPOSE,
+        algo: context.algo,
+        model: context.model,
+        field,
+        nonce: context.nonce,
+        ts: context.ts,
+    });
+}
+export function responseFieldAad(context, field, 
+/** The clear response `id`, or "" when the response has none. */
+id) {
+    return canonicalJsonBytes({
+        purpose: E2EE_RESPONSE_AAD_PURPOSE,
+        algo: context.algo,
+        model: context.model,
+        id,
+        field,
+        nonce: context.nonce,
+        ts: context.ts,
+    });
+}
+//# sourceMappingURL=aad.js.map

package/dist/derivatives/e2ee/aad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.js","sourceRoot":"","sources":["../../../src/derivatives/e2ee/aad.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAahE,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,KAAa;IAEb,OAAO,kBAAkB,CAAC;QACxB,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,KAAa;AACb,iEAAiE;AACjE,EAAU;IAEV,OAAO,kBAAkB,CAAC;QACxB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE;QACF,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;KACf,CAAC,CAAC;AACL,CAAC"}

package/dist/derivatives/e2ee/attestation.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Attested key fetch for E2EE v2: GET `/aci/attestation?nonce=<64 hex>` on
+ * the inference base URL (the Vana relay in production, which must pass the
+ * route through unchanged), verify the ACI binding chain structurally, and
+ * select the X25519 E2EE key from the quote-bound keyset.
+ *
+ * The fetch through the relay carries the same `Authorization: Web3Signed`
+ * header the chat completion does (GET, no body) when a `requestSigner` is
+ * configured, since the relay gates its passthrough routes on the caller
+ * being the owner or an active registered server. The direct Phala fallback
+ * is a different origin with no such gate and stays unsigned.
+ *
+ * What is verified here (ACI spec sections 3.1, 3.2, 4, 9.1):
+ *   - api_version aci/1, tee_type tdx, service advertises E2EE version 2
+ *   - sha256(JCS(workload_keyset)) equals workload_keyset_digest
+ *   - sha256 of the section 3.2 statement built from that digest and OUR
+ *     nonce equals attestation.report_data (freshness + keyset binding)
+ *   - the TDX evidence's quote_report_data carries report_data zero-padded
+ *   - now < not_after, and not_after is not implausibly far away
+ *   - the selected key has the X25519 suite algo and a 32-byte public key
+ *
+ * What is NOT verified here: the hardware quote itself (DCAP/TDX signature
+ * chain to the Intel root, RTMR replay, compose-hash provenance). That is
+ * the `verifyEvidence` hook: the Node server can plug in a DCAP verifier
+ * (e.g. @phala/aci-verifier); without it the key is trusted on the TLS
+ * origin of the report plus the structural chain above.
+ * TODO(e2ee-quote-verification): wire a DCAP quote verifier in the server.
+ */
+import type { RequestSigner } from "../../signing/request-signer.js";
+export declare const ACI_API_VERSION = "aci/1";
+export declare const ACI_REPORT_DATA_PURPOSE = "aci.report_data.v1";
+export declare const E2EE_VERSION = "2";
+/** The relay-independent origin of the Phala gateway, used as a fallback. */
+export declare const PHALA_GATEWAY_BASE_URL = "https://inference.phala.com/v1";
+export interface AciKeysetEntry {
+    key_id: string;
+    algo: string;
+    public_key: string;
+}
+export interface AciWorkloadKeyset {
+    subject: string | null;
+    not_after: number;
+    receipt_signing_keys: AciKeysetEntry[];
+    e2ee_public_keys: AciKeysetEntry[];
+    tls_public_keys: Array<{
+        spki_sha256: string;
+        domain?: string;
+    }>;
+    [key: string]: unknown;
+}
+export interface AciAttestationReport {
+    api_version: string;
+    workload_keyset_digest: string;
+    attestation: {
+        tee_type: string;
+        workload_keyset: AciWorkloadKeyset;
+        report_data: string;
+        source_provenance?: Record<string, unknown> | null;
+        evidence?: Record<string, unknown>;
+        [key: string]: unknown;
+    };
+    service_capabilities?: {
+        supported_e2ee_versions?: string[];
+        serving?: string;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+export interface GatewayE2eeKey {
+    algo: string;
+    keyId: string;
+    /** Raw 32-byte X25519 key the request fields are encrypted to. */
+    publicKey: Uint8Array;
+    /** The keyset entry's `public_key` verbatim: the `X-Model-Pub-Key` value. */
+    publicKeyHex: string;
+    /** `workload_keyset_digest` of the verified report (the pin). */
+    keysetDigest: string;
+    notAfter: number;
+    /** Where the report was fetched from. */
+    source: string;
+    report: AciAttestationReport;
+}
+export type E2eeAttestationErrorCode = "fetch_failed" | "malformed_report" | "keyset_digest_mismatch" | "report_data_mismatch" | "keyset_expired" | "e2ee_unsupported" | "no_e2ee_key" | "evidence_rejected" | "request_signing_failed";
+/** Carries no request data; safe to log and to surface as a compute error. */
+export declare class E2eeAttestationError extends Error {
+    readonly code: E2eeAttestationErrorCode;
+    constructor(code: E2eeAttestationErrorCode, message: string);
+}
+export interface FetchGatewayE2eeKeyOptions {
+    /** Chat completions base, e.g. `https://relay.example/v1`. */
+    baseUrl: string;
+    /**
+     * Signs the report fetch from `baseUrl` as this personal server (the relay
+     * gates the passthrough route). Never used for the fallback origin.
+     */
+    requestSigner?: RequestSigner;
+    fetch?: typeof fetch;
+    /** Milliseconds since epoch (default Date.now). */
+    clock?: () => number;
+    /** Nonce source; tests pin it. */
+    random?: (length: number) => Uint8Array;
+    /** Require this `key_id` in addition to the algo (default: algo only). */
+    expectedKeyId?: string;
+    /** Hardware evidence verification hook (see the module comment). */
+    verifyEvidence?: (report: AciAttestationReport) => Promise<void>;
+    /**
+     * When the base URL answers 404/405 for the attestation route (a relay
+     * without the passthrough yet) the report is fetched from here instead;
+     * `null` disables the fallback. Default: the Phala gateway origin.
+     */
+    fallbackBaseUrl?: string | null;
+    timeoutMs?: number;
+}
+/** ACI section 3.1: `"sha256:" || hex(sha256(JCS(workload_keyset)))`. */
+export declare function workloadKeysetDigest(keyset: AciWorkloadKeyset): Promise<string>;
+/** ACI section 3.2: the statement bytes are fixed; no JSON escaping needed. */
+export declare function reportDataFor(keysetDigest: string, nonce: string | null): Promise<string>;
+/**
+ * Structural verification of a report against the nonce it was requested
+ * with (ACI section 9.1 steps 2 and 3, plus the E2EE v2 capability). Throws
+ * E2eeAttestationError; returns the verified keyset digest.
+ */
+export declare function verifyAciReportBinding(report: AciAttestationReport, nonce: string, nowSeconds: number): Promise<string>;
+/** The X25519 suite entry (spec section 7: clients select keys by algo). */
+export declare function selectX25519Key(keyset: AciWorkloadKeyset, expectedKeyId?: string): {
+    entry: AciKeysetEntry;
+    publicKey: Uint8Array;
+};
+/**
+ * Fetch, verify and select the gateway's E2EE key. Fail closed: any
+ * verification failure throws and no key is returned.
+ */
+export declare function fetchGatewayE2eeKey(options: FetchGatewayE2eeKeyOptions): Promise<GatewayE2eeKey>;
+//# sourceMappingURL=attestation.d.ts.map

package/dist/derivatives/e2ee/attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.d.ts","sourceRoot":"","sources":["../../../src/derivatives/e2ee/attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AASrE,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAC5D,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,mCAAmC,CAAC;AAKvE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,cAAc,EAAE,CAAC;IACvC,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,eAAe,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,iBAAiB,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,oBAAoB,CAAC,EAAE;QACrB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,SAAS,EAAE,UAAU,CAAC;IACtB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED,MAAM,MAAM,wBAAwB,GAChC,cAAc,GACd,kBAAkB,GAClB,wBAAwB,GACxB,sBAAsB,GACtB,gBAAgB,GAChB,kBAAkB,GAClB,aAAa,GACb,mBAAmB,GACnB,wBAAwB,CAAC;AAE7B,8EAA8E;AAC9E,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,IAAI,EAAE,wBAAwB;gBAA9B,IAAI,EAAE,wBAAwB,EAC9C,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,0BAA0B;IACzC,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,kCAAkC;IAClC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;IACxC,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,yEAAyE;AACzE,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,+EAA+E;AAC/E,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC,MAAM,CAAC,CAIjB;AA8BD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CA+DjB;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC7B,MAAM,EAAE,iBAAiB,EACzB,aAAa,CAAC,EAAE,MAAM,GACrB;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAwBlD;AAoED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAkEzB"}