@opendatalabs/personal-server-ts-core 1.9.0 → 1.10.0

package/dist/derivatives/e2ee/phala.d.ts

@@ -0,0 +1,55 @@
+/**
+ * `InferenceRequestEncryption` for the Phala confidential-inference gateway
+ * (E2EE v2, X25519 suite). Per request:
+ *
+ *   1. get the gateway's attested E2EE key (cached for a short TTL, shared
+ *      across concurrent computes, re-fetched on `e2ee_model_key_mismatch`
+ *      or when the served `X-ACI-Keyset-Digest` no longer matches the pin)
+ *   2. generate a fresh client X25519 key pair, a 32-byte nonce and the
+ *      Unix-seconds timestamp; set the five X-E2EE-* request headers
+ *   3. encrypt every `messages.{m}.content` to the gateway key under the
+ *      request AAD
+ *   4. hand back a decryptor bound to that request context: the response
+ *      field (`choices.{i}.message.content`) is encrypted to the client key
+ *      under the response AAD, which also binds the clear response `id`
+ *
+ * Fail closed: no verified key means no request; a response field that is
+ * not valid ciphertext for this request is an error, never accepted as
+ * plaintext. Error messages carry no prompt or answer text.
+ */
+import { type InferenceRequestEncryption } from "../inference.js";
+import { type AciAttestationReport, type GatewayE2eeKey } from "./attestation.js";
+export declare const E2EE_HEADER_VERSION = "X-E2EE-Version";
+export declare const E2EE_HEADER_CLIENT_PUB_KEY = "X-Client-Pub-Key";
+export declare const E2EE_HEADER_MODEL_PUB_KEY = "X-Model-Pub-Key";
+export declare const E2EE_HEADER_NONCE = "X-E2EE-Nonce";
+export declare const E2EE_HEADER_TIMESTAMP = "X-E2EE-Timestamp";
+export declare const ACI_HEADER_KEYSET_DIGEST = "X-ACI-Keyset-Digest";
+export declare const DEFAULT_E2EE_KEY_TTL_MS: number;
+export interface PhalaE2eeEncryptionOptions {
+    /** Chat completions base; the attestation report is fetched through it. */
+    baseUrl: string;
+    fetch?: typeof fetch;
+    /** Milliseconds since epoch (default Date.now). */
+    clock?: () => number;
+    /** How long a verified key is reused before a fresh report is fetched. */
+    keyTtlMs?: number;
+    /** Require this keyset `key_id` (default: select by algo only). */
+    expectedKeyId?: string;
+    /** Hardware evidence verification hook; see attestation.ts. */
+    verifyEvidence?: (report: AciAttestationReport) => Promise<void>;
+    /** Fallback origin for the attestation route; `null` disables it. */
+    fallbackAttestationBaseUrl?: string | null;
+    logger?: {
+        info?(payload: Record<string, unknown>, message: string): void;
+        warn?(payload: Record<string, unknown>, message: string): void;
+    };
+}
+export interface PhalaE2eeEncryption extends InferenceRequestEncryption {
+    /** Drop the cached key; the next request fetches a fresh report. */
+    invalidateKey(): void;
+    /** The verified key currently in use, if any (diagnostics). */
+    currentKey(): GatewayE2eeKey | null;
+}
+export declare function createPhalaE2eeEncryption(options: PhalaE2eeEncryptionOptions): PhalaE2eeEncryption;
+//# sourceMappingURL=phala.d.ts.map

package/dist/derivatives/e2ee/phala.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phala.d.ts","sourceRoot":"","sources":["../../../src/derivatives/e2ee/phala.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAU1B,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAC7D,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAC3D,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAChD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAE9D,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAElD,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,qEAAqE;IACrE,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/D,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAChE,CAAC;CACH;AAED,MAAM,WAAW,mBAAoB,SAAQ,0BAA0B;IACrE,oEAAoE;IACpE,aAAa,IAAI,IAAI,CAAC;IACtB,+DAA+D;IAC/D,UAAU,IAAI,cAAc,GAAG,IAAI,CAAC;CACrC;AAmBD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAwJrB"}

package/dist/derivatives/e2ee/phala.js

@@ -0,0 +1,167 @@
+/**
+ * `InferenceRequestEncryption` for the Phala confidential-inference gateway
+ * (E2EE v2, X25519 suite). Per request:
+ *
+ *   1. get the gateway's attested E2EE key (cached for a short TTL, shared
+ *      across concurrent computes, re-fetched on `e2ee_model_key_mismatch`
+ *      or when the served `X-ACI-Keyset-Digest` no longer matches the pin)
+ *   2. generate a fresh client X25519 key pair, a 32-byte nonce and the
+ *      Unix-seconds timestamp; set the five X-E2EE-* request headers
+ *   3. encrypt every `messages.{m}.content` to the gateway key under the
+ *      request AAD
+ *   4. hand back a decryptor bound to that request context: the response
+ *      field (`choices.{i}.message.content`) is encrypted to the client key
+ *      under the response AAD, which also binds the clear response `id`
+ *
+ * Fail closed: no verified key means no request; a response field that is
+ * not valid ciphertext for this request is an error, never accepted as
+ * plaintext. Error messages carry no prompt or answer text.
+ */
+import { InferenceRequestError, } from "../inference.js";
+import { requestFieldAad, responseFieldAad } from "./aad.js";
+import { E2eeAttestationError, fetchGatewayE2eeKey, } from "./attestation.js";
+import { E2eeCipherError, bytesToHex, decryptField, encryptField, generateX25519KeyPair, randomBytes, } from "./suite.js";
+export const E2EE_HEADER_VERSION = "X-E2EE-Version";
+export const E2EE_HEADER_CLIENT_PUB_KEY = "X-Client-Pub-Key";
+export const E2EE_HEADER_MODEL_PUB_KEY = "X-Model-Pub-Key";
+export const E2EE_HEADER_NONCE = "X-E2EE-Nonce";
+export const E2EE_HEADER_TIMESTAMP = "X-E2EE-Timestamp";
+export const ACI_HEADER_KEYSET_DIGEST = "X-ACI-Keyset-Digest";
+export const DEFAULT_E2EE_KEY_TTL_MS = 5 * 60_000;
+function keyFetchError(err) {
+    if (err instanceof E2eeAttestationError) {
+        return new InferenceRequestError(`e2ee key fetch failed (${err.code}): ${err.message}`, null, {
+            errorType: `e2ee_attestation_${err.code}`,
+            retryable: err.code === "fetch_failed",
+        });
+    }
+    const name = err instanceof Error ? err.name : "Error";
+    return new InferenceRequestError(`e2ee key fetch failed (${name})`, null, {
+        retryable: false,
+    });
+}
+export function createPhalaE2eeEncryption(options) {
+    const clock = options.clock ?? Date.now;
+    const ttlMs = options.keyTtlMs ?? DEFAULT_E2EE_KEY_TTL_MS;
+    let cached = null;
+    let inFlight = null;
+    const fetchKey = async () => {
+        const key = await fetchGatewayE2eeKey({
+            baseUrl: options.baseUrl,
+            fetch: options.fetch,
+            clock,
+            expectedKeyId: options.expectedKeyId,
+            verifyEvidence: options.verifyEvidence,
+            fallbackBaseUrl: options.fallbackAttestationBaseUrl,
+        });
+        options.logger?.info?.({
+            keyId: key.keyId,
+            algo: key.algo,
+            keysetDigest: key.keysetDigest,
+            notAfter: key.notAfter,
+            source: key.source,
+            evidenceVerified: Boolean(options.verifyEvidence),
+        }, "E2EE gateway key verified");
+        return key;
+    };
+    const getKey = async () => {
+        const now = clock();
+        if (cached &&
+            now - cached.fetchedAt < ttlMs &&
+            Math.floor(now / 1000) < cached.key.notAfter) {
+            return cached.key;
+        }
+        if (!inFlight) {
+            inFlight = fetchKey()
+                .then((key) => {
+                cached = { key, fetchedAt: clock() };
+                return key;
+            })
+                .finally(() => {
+                inFlight = null;
+            });
+        }
+        try {
+            return await inFlight;
+        }
+        catch (err) {
+            throw keyFetchError(err);
+        }
+    };
+    const invalidateKey = () => {
+        cached = null;
+    };
+    return {
+        invalidateKey,
+        currentKey: () => cached?.key ?? null,
+        async encryptRequest({ model, messages, headers }) {
+            if (typeof model !== "string" || model === "") {
+                // The AAD binds the model; the gateway rejects a missing one anyway.
+                throw new InferenceRequestError("e2ee requires a non-empty request model", null, { errorType: "e2ee_invalid_payload_model", retryable: false });
+            }
+            const gatewayKey = await getKey();
+            const client = await generateX25519KeyPair();
+            const context = {
+                algo: gatewayKey.algo,
+                model,
+                nonce: bytesToHex(randomBytes(32)),
+                ts: Math.floor(clock() / 1000),
+            };
+            headers.set(E2EE_HEADER_VERSION, "2");
+            headers.set(E2EE_HEADER_CLIENT_PUB_KEY, bytesToHex(client.publicKey));
+            headers.set(E2EE_HEADER_MODEL_PUB_KEY, gatewayKey.publicKeyHex);
+            headers.set(E2EE_HEADER_NONCE, context.nonce);
+            headers.set(E2EE_HEADER_TIMESTAMP, String(context.ts));
+            const encrypted = [];
+            for (let index = 0; index < messages.length; index += 1) {
+                const message = messages[index];
+                let content;
+                try {
+                    content = await encryptField({
+                        plaintext: message.content,
+                        recipientPublicKey: gatewayKey.publicKey,
+                        aad: requestFieldAad(context, `messages.${index}.content`),
+                    });
+                }
+                catch (err) {
+                    const name = err instanceof Error ? err.name : "Error";
+                    throw new InferenceRequestError(`e2ee request encryption failed (${name})`, null, { retryable: false });
+                }
+                encrypted.push({ ...message, content });
+            }
+            const request = {
+                messages: encrypted,
+                async decryptResponse({ content, field, id, headers: response }) {
+                    const served = response.get(ACI_HEADER_KEYSET_DIGEST);
+                    if (served && served !== gatewayKey.keysetDigest) {
+                        // The gateway rotated its keyset: re-verify before the next
+                        // request. This reply was still encrypted for our client key.
+                        options.logger?.warn?.({ pinned: gatewayKey.keysetDigest, served }, "E2EE keyset digest changed; refetching the attestation report");
+                        invalidateKey();
+                    }
+                    try {
+                        return await decryptField({
+                            wire: content,
+                            privateKey: client.privateKey,
+                            aad: responseFieldAad(context, field, id),
+                        });
+                    }
+                    catch (err) {
+                        const detail = err instanceof E2eeCipherError ? err.message : "unexpected error";
+                        throw new InferenceRequestError(`e2ee response decryption failed for ${field} (${detail})`, null, { errorType: "e2ee_decryption_failed", retryable: false });
+                    }
+                },
+            };
+            return request;
+        },
+        async onRejected({ errorType }) {
+            if (errorType === "e2ee_model_key_mismatch") {
+                options.logger?.warn?.({ keyId: cached?.key.keyId ?? null }, "E2EE model key rejected by the gateway; refetching the attestation report");
+                invalidateKey();
+                return true;
+            }
+            return false;
+        },
+    };
+}
+//# sourceMappingURL=phala.js.map

package/dist/derivatives/e2ee/phala.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phala.js","sourceRoot":"","sources":["../../../src/derivatives/e2ee/phala.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAGpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAC7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAC3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AA6BlD,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;QACxC,OAAO,IAAI,qBAAqB,CAC9B,0BAA0B,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,OAAO,EAAE,EACrD,IAAI,EACJ;YACE,SAAS,EAAE,oBAAoB,GAAG,CAAC,IAAI,EAAE;YACzC,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,cAAc;SACvC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACvD,OAAO,IAAI,qBAAqB,CAAC,0BAA0B,IAAI,GAAG,EAAE,IAAI,EAAE;QACxE,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,uBAAuB,CAAC;IAC1D,IAAI,MAAM,GAAsD,IAAI,CAAC;IACrE,IAAI,QAAQ,GAAmC,IAAI,CAAC;IAEpD,MAAM,QAAQ,GAAG,KAAK,IAA6B,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK;YACL,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,eAAe,EAAE,OAAO,CAAC,0BAA0B;SACpD,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CACpB;YACE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;SAClD,EACD,2BAA2B,CAC5B,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,IAA6B,EAAE;QACjD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IACE,MAAM;YACN,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,KAAK;YAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAC5C,CAAC;YACD,OAAO,MAAM,CAAC,GAAG,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,QAAQ,EAAE;iBAClB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACZ,MAAM,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrC,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,aAAa;QACb,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI;QAErC,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBAC9C,qEAAqE;gBACrE,MAAM,IAAI,qBAAqB,CAC7B,yCAAyC,EACzC,IAAI,EACJ,EAAE,SAAS,EAAE,4BAA4B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC9D,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,MAAM,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG;gBACd,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK;gBACL,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC;aAC/B,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAEvD,MAAM,SAAS,GAAuB,EAAE,CAAC;YACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACjC,IAAI,OAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,YAAY,CAAC;wBAC3B,SAAS,EAAE,OAAO,CAAC,OAAO;wBAC1B,kBAAkB,EAAE,UAAU,CAAC,SAAS;wBACxC,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,KAAK,UAAU,CAAC;qBAC3D,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;oBACvD,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,IAAI,GAAG,EAC1C,IAAI,EACJ,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,OAAO,GAA8B;gBACzC,QAAQ,EAAE,SAAS;gBACnB,KAAK,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;oBACtD,IAAI,MAAM,IAAI,MAAM,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;wBACjD,4DAA4D;wBAC5D,8DAA8D;wBAC9D,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CACpB,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,EAC3C,+DAA+D,CAChE,CAAC;wBACF,aAAa,EAAE,CAAC;oBAClB,CAAC;oBACD,IAAI,CAAC;wBACH,OAAO,MAAM,YAAY,CAAC;4BACxB,IAAI,EAAE,OAAO;4BACb,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,GAAG,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;yBAC1C,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,MAAM,GACV,GAAG,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;wBACpE,MAAM,IAAI,qBAAqB,CAC7B,uCAAuC,KAAK,KAAK,MAAM,GAAG,EAC1D,IAAI,EACJ,EAAE,SAAS,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CAC1D,CAAC;oBACJ,CAAC;gBACH,CAAC;aACF,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE;YAC5B,IAAI,SAAS,KAAK,yBAAyB,EAAE,CAAC;gBAC5C,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CACpB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE,EACpC,2EAA2E,CAC5E,CAAC;gBACF,aAAa,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/derivatives/e2ee/suite.d.ts

@@ -0,0 +1,56 @@
+/**
+ * E2EE v2 cipher suite `x25519-aes-256-gcm-hkdf-sha256` on WebCrypto only
+ * (X25519 deriveBits, HKDF-SHA256, AES-256-GCM, getRandomValues), so the
+ * same code runs in Node 22+ and in the browser (PS-Lite). No Node-only
+ * import lives in this directory.
+ *
+ * Wire format of one encrypted field value (spec section 4), lowercase hex:
+ *
+ *   ephemeral_public_key (32) || aes_gcm_nonce (12) || ciphertext || tag (16)
+ *
+ *   key = HKDF-SHA256(salt = none, ikm = X25519(ephemeral, recipient),
+ *                     info = "aci.e2ee.v2.x25519", len = 32)
+ *
+ * A fresh ephemeral key and AES-GCM nonce per field; the AAD is the JCS
+ * bytes built in aad.ts.
+ */
+export declare const E2EE_ALGO_X25519 = "x25519-aes-256-gcm-hkdf-sha256";
+export declare const E2EE_HKDF_INFO_X25519 = "aci.e2ee.v2.x25519";
+export interface E2eeKeyPair {
+    privateKey: CryptoKey;
+    /** Raw 32-byte X25519 public key. */
+    publicKey: Uint8Array;
+}
+export declare class E2eeCipherError extends Error {
+    constructor(message: string);
+}
+export declare function randomBytes(length: number): Uint8Array;
+export declare function bytesToHex(bytes: Uint8Array): string;
+export declare function hexToBytes(hex: string): Uint8Array;
+/** Spec section 4: hex with an optional `0x` prefix, 32 bytes for X25519. */
+export declare function parseX25519PublicKey(hex: string): Uint8Array;
+export declare function generateX25519KeyPair(): Promise<E2eeKeyPair>;
+/**
+ * Import a private key from its 32-byte seed. Only for tests and tooling
+ * that need a deterministic key; production keys come from generate.
+ */
+export declare function importX25519PrivateKey(seed: Uint8Array, publicKey: Uint8Array): Promise<E2eeKeyPair>;
+export interface EncryptFieldInput {
+    plaintext: string;
+    recipientPublicKey: Uint8Array;
+    aad: Uint8Array;
+    /** Test hooks: a fixed ephemeral key / nonce make the output reproducible. */
+    ephemeral?: E2eeKeyPair;
+    nonce?: Uint8Array;
+}
+/** One field value -> lowercase hex wire value. */
+export declare function encryptField(input: EncryptFieldInput): Promise<string>;
+export interface DecryptFieldInput {
+    /** Hex wire value (either case, optional 0x). */
+    wire: string;
+    privateKey: CryptoKey;
+    aad: Uint8Array;
+}
+/** Hex wire value -> plaintext; throws E2eeCipherError on any failure. */
+export declare function decryptField(input: DecryptFieldInput): Promise<string>;
+//# sourceMappingURL=suite.d.ts.map

package/dist/derivatives/e2ee/suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.d.ts","sourceRoot":"","sources":["../../../src/derivatives/e2ee/suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,gBAAgB,mCAAmC,CAAC;AACjE,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAM1D,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,SAAS,CAAC;IACtB,qCAAqC;IACrC,SAAS,EAAE,UAAU,CAAC;CACvB;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAQD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAItD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAWlD;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAM5D;AAoBD,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,WAAW,CAAC,CAMlE;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,WAAW,CAAC,CActB;AAmCD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,UAAU,CAAC;IAC/B,GAAG,EAAE,UAAU,CAAC;IAChB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,mDAAmD;AACnD,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB5E;AAED,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,SAAS,CAAC;IACtB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwC5E"}

package/dist/derivatives/e2ee/suite.js

@@ -0,0 +1,164 @@
+/**
+ * E2EE v2 cipher suite `x25519-aes-256-gcm-hkdf-sha256` on WebCrypto only
+ * (X25519 deriveBits, HKDF-SHA256, AES-256-GCM, getRandomValues), so the
+ * same code runs in Node 22+ and in the browser (PS-Lite). No Node-only
+ * import lives in this directory.
+ *
+ * Wire format of one encrypted field value (spec section 4), lowercase hex:
+ *
+ *   ephemeral_public_key (32) || aes_gcm_nonce (12) || ciphertext || tag (16)
+ *
+ *   key = HKDF-SHA256(salt = none, ikm = X25519(ephemeral, recipient),
+ *                     info = "aci.e2ee.v2.x25519", len = 32)
+ *
+ * A fresh ephemeral key and AES-GCM nonce per field; the AAD is the JCS
+ * bytes built in aad.ts.
+ */
+export const E2EE_ALGO_X25519 = "x25519-aes-256-gcm-hkdf-sha256";
+export const E2EE_HKDF_INFO_X25519 = "aci.e2ee.v2.x25519";
+const X25519_PUBLIC_KEY_BYTES = 32;
+const AES_GCM_NONCE_BYTES = 12;
+const AES_GCM_TAG_BYTES = 16;
+export class E2eeCipherError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "E2eeCipherError";
+    }
+}
+function subtle() {
+    const api = globalThis.crypto?.subtle;
+    if (!api)
+        throw new E2eeCipherError("WebCrypto is not available");
+    return api;
+}
+export function randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    globalThis.crypto.getRandomValues(bytes);
+    return bytes;
+}
+export function bytesToHex(bytes) {
+    let out = "";
+    for (const byte of bytes)
+        out += byte.toString(16).padStart(2, "0");
+    return out;
+}
+export function hexToBytes(hex) {
+    const clean = hex.startsWith("0x") || hex.startsWith("0X") ? hex.slice(2) : hex;
+    if (clean.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(clean)) {
+        throw new E2eeCipherError("malformed hex");
+    }
+    const out = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < out.length; i += 1) {
+        out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+/** Spec section 4: hex with an optional `0x` prefix, 32 bytes for X25519. */
+export function parseX25519PublicKey(hex) {
+    const bytes = hexToBytes(hex);
+    if (bytes.length !== X25519_PUBLIC_KEY_BYTES) {
+        throw new E2eeCipherError("X25519 public key must be 32 bytes");
+    }
+    return bytes;
+}
+function concat(...parts) {
+    const total = parts.reduce((sum, part) => sum + part.length, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const part of parts) {
+        out.set(part, offset);
+        offset += part.length;
+    }
+    return out;
+}
+/** Copy into a plain ArrayBuffer (WebCrypto rejects some typed-array views). */
+function toBuffer(bytes) {
+    const out = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(out).set(bytes);
+    return out;
+}
+export async function generateX25519KeyPair() {
+    const pair = (await subtle().generateKey({ name: "X25519" }, false, [
+        "deriveBits",
+    ]));
+    const raw = await subtle().exportKey("raw", pair.publicKey);
+    return { privateKey: pair.privateKey, publicKey: new Uint8Array(raw) };
+}
+/**
+ * Import a private key from its 32-byte seed. Only for tests and tooling
+ * that need a deterministic key; production keys come from generate.
+ */
+export async function importX25519PrivateKey(seed, publicKey) {
+    const b64u = (bytes) => btoa(String.fromCharCode(...bytes))
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/, "");
+    const privateKey = await subtle().importKey("jwk", { kty: "OKP", crv: "X25519", d: b64u(seed), x: b64u(publicKey) }, { name: "X25519" }, false, ["deriveBits"]);
+    return { privateKey, publicKey };
+}
+async function deriveFieldKey(privateKey, peerPublicKey, usage) {
+    const api = subtle();
+    const peer = await api.importKey("raw", toBuffer(peerPublicKey), { name: "X25519" }, false, []);
+    const shared = await api.deriveBits({ name: "X25519", public: peer }, privateKey, X25519_PUBLIC_KEY_BYTES * 8);
+    const ikm = await api.importKey("raw", shared, "HKDF", false, ["deriveKey"]);
+    return api.deriveKey({
+        name: "HKDF",
+        hash: "SHA-256",
+        salt: new Uint8Array(0),
+        info: new TextEncoder().encode(E2EE_HKDF_INFO_X25519),
+    }, ikm, { name: "AES-GCM", length: 256 }, false, [usage]);
+}
+/** One field value -> lowercase hex wire value. */
+export async function encryptField(input) {
+    const ephemeral = input.ephemeral ?? (await generateX25519KeyPair());
+    const nonce = input.nonce ?? randomBytes(AES_GCM_NONCE_BYTES);
+    if (nonce.length !== AES_GCM_NONCE_BYTES) {
+        throw new E2eeCipherError("AES-GCM nonce must be 12 bytes");
+    }
+    const key = await deriveFieldKey(ephemeral.privateKey, input.recipientPublicKey, "encrypt");
+    const sealed = await subtle().encrypt({
+        name: "AES-GCM",
+        iv: toBuffer(nonce),
+        additionalData: toBuffer(input.aad),
+        tagLength: AES_GCM_TAG_BYTES * 8,
+    }, key, new TextEncoder().encode(input.plaintext));
+    return bytesToHex(concat(ephemeral.publicKey, nonce, new Uint8Array(sealed)));
+}
+/** Hex wire value -> plaintext; throws E2eeCipherError on any failure. */
+export async function decryptField(input) {
+    let bytes;
+    try {
+        bytes = hexToBytes(input.wire);
+    }
+    catch {
+        throw new E2eeCipherError("ciphertext is not hex");
+    }
+    const minimum = X25519_PUBLIC_KEY_BYTES + AES_GCM_NONCE_BYTES + AES_GCM_TAG_BYTES;
+    if (bytes.length < minimum) {
+        throw new E2eeCipherError("ciphertext is too short");
+    }
+    const ephemeralPublicKey = bytes.subarray(0, X25519_PUBLIC_KEY_BYTES);
+    const nonce = bytes.subarray(X25519_PUBLIC_KEY_BYTES, X25519_PUBLIC_KEY_BYTES + AES_GCM_NONCE_BYTES);
+    const sealed = bytes.subarray(X25519_PUBLIC_KEY_BYTES + AES_GCM_NONCE_BYTES);
+    let key;
+    try {
+        key = await deriveFieldKey(input.privateKey, ephemeralPublicKey, "decrypt");
+    }
+    catch {
+        throw new E2eeCipherError("key agreement failed");
+    }
+    let opened;
+    try {
+        opened = await subtle().decrypt({
+            name: "AES-GCM",
+            iv: toBuffer(nonce),
+            additionalData: toBuffer(input.aad),
+            tagLength: AES_GCM_TAG_BYTES * 8,
+        }, key, toBuffer(sealed));
+    }
+    catch {
+        throw new E2eeCipherError("authentication failed");
+    }
+    return new TextDecoder().decode(opened);
+}
+//# sourceMappingURL=suite.js.map

package/dist/derivatives/e2ee/suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.js","sourceRoot":"","sources":["../../../src/derivatives/e2ee/suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAE1D,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAQ7B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,SAAS,MAAM;IACb,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GACT,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,GAAG,KAAmB;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,KAAiB;IACjC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE;QAClE,YAAY;KACb,CAAC,CAAkB,CAAC;IACrB,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAgB,EAChB,SAAqB;IAErB,MAAM,IAAI,GAAG,CAAC,KAAiB,EAAE,EAAE,CACjC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;SAChC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CACzC,KAAK,EACL,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAChE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAAqB,EACrB,aAAyB,EACzB,KAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAC9B,KAAK,EACL,QAAQ,CAAC,aAAa,CAAC,EACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,EAAE,CACH,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAChC,UAAU,EACV,uBAAuB,GAAG,CAAC,CAC5B,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC,SAAS,CAClB;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC;KACtD,EACD,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,KAAK,CAAC,CACR,CAAC;AACJ,CAAC;AAWD,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,cAAc,CAC9B,SAAS,CAAC,UAAU,EACpB,KAAK,CAAC,kBAAkB,EACxB,SAAS,CACV,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CACnC;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QACnC,SAAS,EAAE,iBAAiB,GAAG,CAAC;KACjC,EACD,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAC1C,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AASD,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GACX,uBAAuB,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAC1B,uBAAuB,EACvB,uBAAuB,GAAG,mBAAmB,CAC9C,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,uBAAuB,GAAG,mBAAmB,CAAC,CAAC;IAC7E,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CAC7B;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;YACnB,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;YACnC,SAAS,EAAE,iBAAiB,GAAG,CAAC;SACjC,EACD,GAAG,EACH,QAAQ,CAAC,MAAM,CAAC,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/derivatives/index.d.ts

@@ -2,8 +2,9 @@ export { questionRegistrationView, type QuestionRegisteredBy, type QuestionRegis
 export { createInMemoryQuestionStore, matchesQuestionFilter, sortQuestions, } from "./store.js";
 export { MAX_ECHOED_SCOPE_CHARS, MAX_MODEL_CHARS, MAX_QUESTION_CHARS, MAX_QUESTION_SOURCE_SCOPES, createQuestionRegistration, findDerivationCycle, parseQuestionInput, uncoveredSourceScopes, type CreateQuestionRegistrationInput, type ParsedQuestionInput, } from "./registration.js";
 export { DEFAULT_MAX_SOURCE_CHARS, DEFAULT_MAX_SOURCE_ITEMS, SYSTEM_PROMPT, buildQuestionMessages, parseAnswer, sortNewestFirst, trimSourceData, type ParsedAnswer, type PromptSource, type TrimResult, } from "./prompt.js";
-export { DEFAULT_INFERENCE_BASE_URL, DEFAULT_INFERENCE_MAX_TOKENS, DEFAULT_INFERENCE_MODEL, DEFAULT_INFERENCE_REQUEST_FIELDS, DEFAULT_INFERENCE_TIMEOUT_MS, InferenceRequestError, createFakeInferenceProvider, createOpenAiCompatibleInferenceProvider, type FakeInferenceProvider, type FakeInferenceProviderOptions, type InferenceChatInput, type InferenceChatResult, type InferenceMessage, type InferenceProvider, type InferenceRequestEncryption, type InferenceRole, type InferenceUsage, type OpenAiCompatibleInferenceOptions, } from "./inference.js";
+export { DEFAULT_INFERENCE_BASE_URL, DEFAULT_INFERENCE_MAX_TOKENS, DEFAULT_INFERENCE_MODEL, DEFAULT_INFERENCE_REQUEST_FIELDS, DEFAULT_INFERENCE_TIMEOUT_MS, InferenceRequestError, createFakeInferenceProvider, createOpenAiCompatibleInferenceProvider, type EncryptedInferenceRequest, type FakeInferenceProvider, type FakeInferenceProviderOptions, type InferenceChatInput, type InferenceChatResult, type InferenceMessage, type InferenceProvider, type InferenceRequestEncryption, type InferenceRole, type InferenceUsage, type OpenAiCompatibleInferenceOptions, } from "./inference.js";
 export { computeQuestion, type ComputeLogger, type ComputeOutcome, type ComputeSyncNotifier, type DerivativeAnswerRecord, type QuestionComputeDeps, } from "./compute.js";
 export { createRecomputeScheduler, type RecomputeScheduler, type RecomputeSchedulerOptions, type SchedulerTimers, } from "./scheduler.js";
 export { MAX_QUESTION_BODY_BYTES, handlePersonalServerDerivativesRequest, type PersonalServerDerivativesApiDeps, } from "./api.js";
+export { DEFAULT_E2EE_KEY_TTL_MS, E2EE_ALGO_X25519, E2eeAttestationError, E2eeCipherError, PHALA_GATEWAY_BASE_URL, createPhalaE2eeEncryption, fetchGatewayE2eeKey, verifyAciReportBinding, type AciAttestationReport, type E2eeAttestationErrorCode, type FetchGatewayE2eeKeyOptions, type GatewayE2eeKey, type PhalaE2eeEncryption, type PhalaE2eeEncryptionOptions, } from "./e2ee/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/derivatives/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/derivatives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,uBAAuB,GAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,EAC3B,uCAAuC,EACvC,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gCAAgC,GACtC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,sCAAsC,EACtC,KAAK,gCAAgC,GACtC,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/derivatives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,uBAAuB,GAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,EAC3B,uCAAuC,EACvC,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gCAAgC,GACtC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,sCAAsC,EACtC,KAAK,gCAAgC,GACtC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,GAChC,MAAM,iBAAiB,CAAC"}

package/dist/derivatives/index.js

@@ -6,4 +6,5 @@ export { DEFAULT_INFERENCE_BASE_URL, DEFAULT_INFERENCE_MAX_TOKENS, DEFAULT_INFER
 export { computeQuestion, } from "./compute.js";
 export { createRecomputeScheduler, } from "./scheduler.js";
 export { MAX_QUESTION_BODY_BYTES, handlePersonalServerDerivativesRequest, } from "./api.js";
+export { DEFAULT_E2EE_KEY_TTL_MS, E2EE_ALGO_X25519, E2eeAttestationError, E2eeCipherError, PHALA_GATEWAY_BASE_URL, createPhalaE2eeEncryption, fetchGatewayE2eeKey, verifyAciReportBinding, } from "./e2ee/index.js";
 //# sourceMappingURL=index.js.map

package/dist/derivatives/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/derivatives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GAQzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GAGtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,cAAc,GAIf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,EAC3B,uCAAuC,GAWxC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,GAMhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,GAIzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,sCAAsC,GAEvC,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/derivatives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GAQzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GAGtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,cAAc,GAIf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,EAC3B,uCAAuC,GAYxC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,GAMhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,GAIzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,sCAAsC,GAEvC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,GAOvB,MAAM,iBAAiB,CAAC"}

package/dist/derivatives/inference.d.ts

@@ -7,13 +7,13 @@
  * optional API key header exists for local development against a provider
  * directly.
  *
- * E2EE SEAM (not implemented): the Phala confidential-inference E2EE v2
- * protocol encrypts each `messages[i].content` to the model's public key
- * and adds the headers X-E2EE-Version, X-Client-Pub-Key, X-Model-Pub-Key,
- * X-E2EE-Nonce and X-E2EE-Timestamp; the response content comes back
- * encrypted to the client key. `InferenceRequestEncryption` below is the
- * hook where that lands: it sees the outgoing messages + headers and the
- * incoming content + headers, and nothing else in this module has to change.
+ * E2EE SEAM: the Phala confidential-inference E2EE v2 protocol encrypts each
+ * `messages[i].content` to the gateway's attested public key and adds the
+ * headers X-E2EE-Version, X-Client-Pub-Key, X-Model-Pub-Key, X-E2EE-Nonce
+ * and X-E2EE-Timestamp; the response content comes back encrypted to the
+ * client key. `InferenceRequestEncryption` below is the hook, implemented
+ * by `createPhalaE2eeEncryption` in ./e2ee. This module only knows the
+ * shape: encrypt the outgoing messages, decrypt the one response field.
  */
 export type InferenceRole = "system" | "user" | "assistant";
 export interface InferenceMessage {
@@ -43,24 +43,46 @@ export interface InferenceProvider {
     readonly defaultModel: string;
     chat(input: InferenceChatInput): Promise<InferenceChatResult>;
 }
+/**
+ * One encrypted request: the messages to send and the decryptor bound to
+ * that request's context (nonce, timestamp, client key), since the response
+ * AAD is built from them.
+ */
+export interface EncryptedInferenceRequest {
+    messages: InferenceMessage[];
+    /**
+     * Decrypt one response field. `field` is the spec field path
+     * (`choices.{i}.message.content`), `id` the clear response `id` or "".
+     */
+    decryptResponse(input: {
+        content: string;
+        field: string;
+        id: string;
+        headers: Headers;
+    }): Promise<string>;
+}
 /**
  * E2EE seam. Implement to encrypt message contents end to end (Phala E2EE
- * v2); absent = plaintext over TLS to the relay. Both hooks run inside
+ * v2); absent = plaintext over TLS to the relay. Runs inside
  * `createOpenAiCompatibleInferenceProvider`, around the single fetch.
  */
 export interface InferenceRequestEncryption {
     /** Encrypt `messages[i].content` and add the X-E2EE-* request headers. */
     encryptRequest(input: {
+        model: string;
         messages: InferenceMessage[];
         headers: Headers;
-    }): Promise<{
-        messages: InferenceMessage[];
-    }>;
-    /** Decrypt the assistant content using the response headers. */
-    decryptResponse(input: {
-        content: string;
+    }): Promise<EncryptedInferenceRequest>;
+    /**
+     * Called once when the provider rejects the request (non-2xx) with the
+     * OpenAI-style `error.type` when the body carries one. Return true to
+     * re-encrypt and resend once (e.g. after `e2ee_model_key_mismatch`).
+     */
+    onRejected?(input: {
+        status: number;
+        errorType: string | null;
         headers: Headers;
-    }): Promise<string>;
+    }): Promise<boolean>;
 }
 export declare const DEFAULT_INFERENCE_BASE_URL = "https://inference.phala.com/v1";
 export declare const DEFAULT_INFERENCE_MODEL = "z-ai/glm-5.2";
@@ -86,7 +108,17 @@ export declare const DEFAULT_INFERENCE_REQUEST_FIELDS: Record<string, unknown>;
 /** Thrown for a non-2xx or malformed provider reply. Carries no prompt text. */
 export declare class InferenceRequestError extends Error {
     readonly status: number | null;
-    constructor(message: string, status: number | null);
+    /** OpenAI-style `error.type` of the rejection, when the body had one. */
+    readonly errorType: string | null;
+    /**
+     * Explicit retry hint. When undefined the compute layer falls back to the
+     * status: no response, 429 or 5xx are retried.
+     */
+    readonly retryable: boolean | undefined;
+    constructor(message: string, status: number | null, options?: {
+        errorType?: string | null;
+        retryable?: boolean;
+    });
 }
 export declare function createOpenAiCompatibleInferenceProvider(options?: OpenAiCompatibleInferenceOptions): InferenceProvider;
 export interface FakeInferenceProviderOptions {

package/dist/derivatives/inference.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inference.d.ts","sourceRoot":"","sources":["../../src/derivatives/inference.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC,CAAC;IAC9C,gEAAgE;IAChE,eAAe,CAAC,KAAK,EAAE;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrB;AAED,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAC3E,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AACtD,eAAO,MAAM,4BAA4B,SAAU,CAAC;AACpD,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAElD,MAAM,WAAW,gCAAgC;IAC/C,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,yCAAyC;IACzC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,eAAO,MAAM,gCAAgC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAEpE,CAAC;AAEF,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,MAAM,EAAE,MAAM,GAAG,IAAI;gBADrC,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,GAAG,IAAI;CAKxC;AAmCD,wBAAgB,uCAAuC,CACrD,OAAO,GAAE,gCAAqC,GAC7C,iBAAiB,CAuFnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,KACd,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,+EAA+E;AAC/E,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,4BAAiC,GACzC,qBAAqB,CAiBvB"}
+{"version":3,"file":"inference.d.ts","sourceRoot":"","sources":["../../src/derivatives/inference.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,cAAc,CAAC,KAAK,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC;;;;OAIG;IACH,UAAU,CAAC,CAAC,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAC3E,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AACtD,eAAO,MAAM,4BAA4B,SAAU,CAAC;AACpD,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAElD,MAAM,WAAW,gCAAgC;IAC/C,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,yCAAyC;IACzC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,eAAO,MAAM,gCAAgC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAEpE,CAAC;AAEF,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;aAW5B,MAAM,EAAE,MAAM,GAAG,IAAI;IAVvC,yEAAyE;IACzE,SAAgB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC;;;OAGG;IACH,SAAgB,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrC,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO;CAOnE;AA8DD,wBAAgB,uCAAuC,CACrD,OAAO,GAAE,gCAAqC,GAC7C,iBAAiB,CAyInB;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,KACd,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,+EAA+E;AAC/E,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,4BAAiC,GACzC,qBAAqB,CAiBvB"}