@opendatalabs/personal-server-ts-core 1.9.0 → 1.10.0

package/dist/test-utils/e2ee-gateway.js

@@ -0,0 +1,248 @@
+/**
+ * A fake Phala-style ACI gateway behind a `fetch` function, for tests of the
+ * E2EE v2 client: serves the attestation report for its keyset and a chat
+ * completions endpoint that behaves like the enclave (validates the five
+ * headers, decrypts the request fields, encrypts the answer to the client
+ * key). It records what the "relay" saw on the wire and what the "enclave"
+ * decrypted, so a test can assert the two differ.
+ */
+import { requestFieldAad, responseFieldAad } from "../derivatives/e2ee/aad.js";
+import { reportDataFor, workloadKeysetDigest, } from "../derivatives/e2ee/attestation.js";
+import { E2EE_ALGO_X25519, bytesToHex, decryptField, encryptField, generateX25519KeyPair, hexToBytes, importX25519PrivateKey, } from "../derivatives/e2ee/suite.js";
+/** The spec test-vector service key: seed 32 x 0x03. */
+export const TEST_VECTOR_SERVICE_SEED = new Uint8Array(32).fill(3);
+export const TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX = "5dfedd3b6bd47f6fa28ee15d969d5bb0ea53774d488bdaf9df1c6e0124b3ef22";
+export async function testVectorServiceKeyPair() {
+    return importX25519PrivateKey(TEST_VECTOR_SERVICE_SEED, hexToBytes(TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX));
+}
+function jsonResponse(status, body, headers = {}) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "Content-Type": "application/json", ...headers },
+    });
+}
+function errorResponse(status, type) {
+    return jsonResponse(status, {
+        error: { type, message: `fake gateway: ${type}` },
+    });
+}
+export async function createFakeE2eeGateway(options = {}) {
+    const baseUrl = (options.baseUrl ?? "https://relay.test/v1").replace(/\/+$/, "");
+    let serviceKey = options.serviceKey ?? (await testVectorServiceKeyPair());
+    const keyId = options.keyId ?? "dstack-kms-e2ee-x25519-v1";
+    const notAfter = options.notAfter ?? Math.floor(Date.now() / 1000) + 30 * 24 * 3600;
+    const responseId = options.responseId ?? "chatcmpl-test";
+    const respond = options.respond ??
+        (() => JSON.stringify({ answer: "fake answer", evidence: "fake evidence" }));
+    const buildKeyset = () => ({
+        subject: null,
+        not_after: notAfter,
+        receipt_signing_keys: [
+            {
+                key_id: "dstack-kms-receipt-ed25519-v1",
+                algo: "ed25519",
+                public_key: "00".repeat(32),
+            },
+        ],
+        e2ee_public_keys: [
+            {
+                key_id: "dstack-kms-e2ee-v1",
+                algo: "secp256k1-aes-256-gcm-hkdf-sha256",
+                public_key: "04" + "11".repeat(64),
+            },
+            {
+                key_id: keyId,
+                algo: E2EE_ALGO_X25519,
+                public_key: bytesToHex(serviceKey.publicKey),
+            },
+        ],
+        tls_public_keys: [{ spki_sha256: "22".repeat(32), domain: "relay.test" }],
+    });
+    const gateway = {
+        fetch: undefined,
+        keyset: buildKeyset(),
+        requests: [],
+        attestationRequests: [],
+        decryptedPrompts: [],
+        async rotateKey() {
+            serviceKey = await generateX25519KeyPair();
+            gateway.keyset = buildKeyset();
+        },
+        failNext(count, status, errorType) {
+            pendingFailures = { count, status, errorType };
+        },
+        plaintextNext() {
+            plaintextOnce = true;
+        },
+        keysetDigest: () => workloadKeysetDigest(gateway.keyset),
+    };
+    let pendingFailures = null;
+    let plaintextOnce = false;
+    const serveAttestation = async (url) => {
+        gateway.attestationRequests.push(url.toString());
+        if (options.attestationRoute === false) {
+            return jsonResponse(404, { error: "not found" });
+        }
+        const nonce = url.searchParams.get("nonce");
+        if (!nonce || !/^[0-9a-f]{64}$/.test(nonce)) {
+            return errorResponse(400, "invalid_request_error");
+        }
+        const digest = await workloadKeysetDigest(gateway.keyset);
+        const reportData = await reportDataFor(digest, nonce);
+        const report = {
+            api_version: "aci/1",
+            workload_keyset_digest: digest,
+            attestation: {
+                tee_type: "tdx",
+                workload_keyset: gateway.keyset,
+                report_data: reportData,
+                source_provenance: {
+                    repo_url: "https://github.com/Dstack-TEE/private-ai-gateway.git",
+                    repo_commit: "d567f6b4c4d93e33037ea202db04db86a8ad881c",
+                    image_digest: null,
+                    image_provenance: null,
+                },
+                evidence: {
+                    quote: "0400",
+                    quote_report_data: reportData + "0".repeat(64),
+                },
+            },
+            service_capabilities: {
+                supported_e2ee_versions: options.supportedE2eeVersions ?? ["2"],
+                serving: "aggregator",
+            },
+        };
+        return jsonResponse(200, report);
+    };
+    const serveChat = async (url, init) => {
+        const headers = new Headers(init?.headers);
+        const headerRecord = {};
+        headers.forEach((value, key) => {
+            headerRecord[key] = value;
+        });
+        const body = JSON.parse(String(init?.body));
+        gateway.requests.push({ url: url.toString(), headers: headerRecord, body });
+        const digest = await workloadKeysetDigest(gateway.keyset);
+        const common = { "X-ACI-Keyset-Digest": digest, "X-Receipt-Id": "rcpt-1" };
+        if (pendingFailures && pendingFailures.count > 0) {
+            pendingFailures.count -= 1;
+            return errorResponse(pendingFailures.status, pendingFailures.errorType);
+        }
+        const required = [
+            "x-e2ee-version",
+            "x-client-pub-key",
+            "x-model-pub-key",
+            "x-e2ee-nonce",
+            "x-e2ee-timestamp",
+        ];
+        const present = required.filter((name) => headers.has(name));
+        if (present.length !== required.length) {
+            return errorResponse(400, "e2ee_header_missing");
+        }
+        if (headers.get("x-e2ee-version") !== "2") {
+            return errorResponse(400, "e2ee_invalid_version");
+        }
+        if (headers.get("x-model-pub-key") !== bytesToHex(serviceKey.publicKey)) {
+            return errorResponse(400, "e2ee_model_key_mismatch");
+        }
+        const nonce = headers.get("x-e2ee-nonce");
+        if (!/^[0-9a-fA-F]{64}$/.test(nonce)) {
+            return errorResponse(400, "e2ee_invalid_nonce");
+        }
+        const ts = Number(headers.get("x-e2ee-timestamp"));
+        if (!Number.isInteger(ts)) {
+            return errorResponse(400, "e2ee_invalid_timestamp");
+        }
+        if (typeof body.model !== "string") {
+            return errorResponse(400, "e2ee_invalid_payload_model");
+        }
+        let clientPublicKey;
+        try {
+            clientPublicKey = hexToBytes(headers.get("x-client-pub-key"));
+            if (clientPublicKey.length !== 32)
+                throw new Error("length");
+        }
+        catch {
+            return errorResponse(400, "e2ee_invalid_public_key");
+        }
+        const context = {
+            algo: E2EE_ALGO_X25519,
+            model: body.model,
+            nonce,
+            ts,
+        };
+        const messages = Array.isArray(body.messages) ? body.messages : [];
+        const decrypted = [];
+        for (let index = 0; index < messages.length; index += 1) {
+            const message = messages[index];
+            if (typeof message.content !== "string") {
+                return errorResponse(400, "e2ee_decryption_failed");
+            }
+            try {
+                decrypted.push({
+                    role: message.role,
+                    content: await decryptField({
+                        wire: message.content,
+                        privateKey: serviceKey.privateKey,
+                        aad: requestFieldAad(context, `messages.${index}.content`),
+                    }),
+                });
+            }
+            catch {
+                return errorResponse(400, "e2ee_decryption_failed");
+            }
+        }
+        if (decrypted.length === 0) {
+            return errorResponse(400, "e2ee_decryption_failed");
+        }
+        gateway.decryptedPrompts.push(decrypted.map((m) => m.content));
+        const answer = await respond({ model: body.model, messages: decrypted });
+        if (plaintextOnce) {
+            plaintextOnce = false;
+            return jsonResponse(200, {
+                id: responseId,
+                choices: [
+                    { index: 0, message: { role: "assistant", content: answer } },
+                ],
+            }, common);
+        }
+        const content = await encryptField({
+            plaintext: answer,
+            recipientPublicKey: clientPublicKey,
+            aad: responseFieldAad(context, "choices.0.message.content", responseId),
+        });
+        return jsonResponse(200, {
+            id: responseId,
+            object: "chat.completion",
+            model: body.model,
+            choices: [
+                {
+                    index: 0,
+                    finish_reason: "stop",
+                    message: { role: "assistant", content },
+                },
+            ],
+            usage: { prompt_tokens: 1, completion_tokens: 1, total_tokens: 2 },
+        }, {
+            ...common,
+            "X-E2EE-Applied": "true",
+            "X-E2EE-Version": "2",
+            "X-E2EE-Algo": E2EE_ALGO_X25519,
+        });
+    };
+    gateway.fetch = (async (input, init) => {
+        const url = new URL(typeof input === "string"
+            ? input
+            : input instanceof URL
+                ? input.toString()
+                : input.url);
+        const path = url.origin + url.pathname;
+        if (path === `${baseUrl}/aci/attestation`)
+            return serveAttestation(url);
+        if (path === `${baseUrl}/chat/completions`)
+            return serveChat(url, init);
+        return jsonResponse(404, { error: "not found" });
+    });
+    return gateway;
+}
+//# sourceMappingURL=e2ee-gateway.js.map

package/dist/test-utils/e2ee-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2ee-gateway.js","sourceRoot":"","sources":["../../src/test-utils/e2ee-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EACL,aAAa,EACb,oBAAoB,GAGrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,UAAU,EACV,sBAAsB,GAEvB,MAAM,8BAA8B,CAAC;AAEtC,wDAAwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAC7C,kEAAkE,CAAC;AAErE,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,OAAO,sBAAsB,CAC3B,wBAAwB,EACxB,UAAU,CAAC,kCAAkC,CAAC,CAC/C,CAAC;AACJ,CAAC;AA+CD,SAAS,YAAY,CACnB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE;IAEpC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,IAAY;IACjD,OAAO,YAAY,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAAE;KAClD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkC,EAAE;IAEpC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAClE,MAAM,EACN,EAAE,CACH,CAAC;IACF,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,wBAAwB,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAAC;IAC3D,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC;IACzD,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;QACf,CAAC,GAAG,EAAE,CACJ,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAE1E,MAAM,WAAW,GAAG,GAAsB,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ;QACnB,oBAAoB,EAAE;YACpB;gBACE,MAAM,EAAE,+BAA+B;gBACvC,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;aAC5B;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,MAAM,EAAE,oBAAoB;gBAC5B,IAAI,EAAE,mCAAmC;gBACzC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;aACnC;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,gBAAgB;gBACtB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;aAC7C;SACF;QACD,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;KAC1E,CAAC,CAAC;IAEH,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,SAAoC;QAC3C,MAAM,EAAE,WAAW,EAAE;QACrB,QAAQ,EAAE,EAAE;QACZ,mBAAmB,EAAE,EAAE;QACvB,gBAAgB,EAAE,EAAE;QACpB,KAAK,CAAC,SAAS;YACb,UAAU,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC3C,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS;YAC/B,eAAe,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjD,CAAC;QACD,aAAa;YACX,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KACzD,CAAC;IACF,IAAI,eAAe,GAIR,IAAI,CAAC;IAChB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAQ,EAAqB,EAAE;QAC7D,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAyB;YACnC,WAAW,EAAE,OAAO;YACpB,sBAAsB,EAAE,MAAM;YAC9B,WAAW,EAAE;gBACX,QAAQ,EAAE,KAAK;gBACf,eAAe,EAAE,OAAO,CAAC,MAAM;gBAC/B,WAAW,EAAE,UAAU;gBACvB,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,sDAAsD;oBAChE,WAAW,EAAE,0CAA0C;oBACvD,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,IAAI;iBACvB;gBACD,QAAQ,EAAE;oBACR,KAAK,EAAE,MAAM;oBACb,iBAAiB,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC/C;aACF;YACD,oBAAoB,EAAE;gBACpB,uBAAuB,EAAE,OAAO,CAAC,qBAAqB,IAAI,CAAC,GAAG,CAAC;gBAC/D,OAAO,EAAE,YAAY;aACtB;SACF,CAAC;QACF,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EACrB,GAAQ,EACR,IAA6B,EACV,EAAE;QACrB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAA4B,CAAC;QACvE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QAE3E,IAAI,eAAe,IAAI,eAAe,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,KAAK,IAAI,CAAC,CAAC;YAC3B,OAAO,aAAa,CAAC,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,gBAAgB;YAChB,kBAAkB;YAClB,iBAAiB;YACjB,cAAc;YACd,kBAAkB;SACnB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1C,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,OAAO,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;QAC3C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,aAAa,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,eAA2B,CAAC;QAChC,IAAI,CAAC;YACH,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAE,CAAC,CAAC;YAC/D,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,EAAE;SACH,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,SAAS,GAA6C,EAAE,CAAC;QAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAuC,CAAC;YACtE,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACxC,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,MAAM,YAAY,CAAC;wBAC1B,IAAI,EAAE,OAAO,CAAC,OAAO;wBACrB,UAAU,EAAE,UAAU,CAAC,UAAU;wBACjC,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,KAAK,UAAU,CAAC;qBAC3D,CAAC;iBACH,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa,GAAG,KAAK,CAAC;YACtB,OAAO,YAAY,CACjB,GAAG,EACH;gBACE,EAAE,EAAE,UAAU;gBACd,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;iBAC9D;aACF,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;YACjC,SAAS,EAAE,MAAM;YACjB,kBAAkB,EAAE,eAAe;YACnC,GAAG,EAAE,gBAAgB,CAAC,OAAO,EAAE,2BAA2B,EAAE,UAAU,CAAC;SACxE,CAAC,CAAC;QACH,OAAO,YAAY,CACjB,GAAG,EACH;YACE,EAAE,EAAE,UAAU;YACd,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,CAAC;oBACR,aAAa,EAAE,MAAM;oBACrB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE;iBACxC;aACF;YACD,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SACnE,EACD;YACE,GAAG,MAAM;YACT,gBAAgB,EAAE,MAAM;YACxB,gBAAgB,EAAE,GAAG;YACrB,aAAa,EAAE,gBAAgB;SAChC,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,EACpB,KAA6B,EAC7B,IAAkB,EAClB,EAAE;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,YAAY,GAAG;gBACpB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAClB,CAAC,CAAC,KAAK,CAAC,GAAG,CAChB,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,IAAI,KAAK,GAAG,OAAO,kBAAkB;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,GAAG,OAAO,mBAAmB;YAAE,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC,CAAiB,CAAC;IAEnB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/test-utils/index.d.ts

@@ -1,3 +1,5 @@
 export { createTestWallet, buildWeb3SignedHeader, type TestWallet, } from "./wallet.js";
 export { createMemoryDataStorage, type MemoryDataStorage, } from "./memory-storage.js";
+export { TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX, TEST_VECTOR_SERVICE_SEED, createFakeE2eeGateway, testVectorServiceKeyPair, type FakeE2eeGateway, type FakeE2eeGatewayOptions, type FakeE2eeGatewayRequest, } from "./e2ee-gateway.js";
+export { LIVE_ACI_ATTESTATION_CLOCK_S, LIVE_ACI_ATTESTATION_NONCE, LIVE_ACI_ATTESTATION_REPORT, LIVE_ACI_X25519_PUBLIC_KEY_HEX, } from "./e2ee-fixtures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/test-utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC"}

package/dist/test-utils/index.js

@@ -1,3 +1,5 @@
 export { createTestWallet, buildWeb3SignedHeader, } from "./wallet.js";
 export { createMemoryDataStorage, } from "./memory-storage.js";
+export { TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX, TEST_VECTOR_SERVICE_SEED, createFakeE2eeGateway, testVectorServiceKeyPair, } from "./e2ee-gateway.js";
+export { LIVE_ACI_ATTESTATION_CLOCK_S, LIVE_ACI_ATTESTATION_NONCE, LIVE_ACI_ATTESTATION_REPORT, LIVE_ACI_X25519_PUBLIC_KEY_HEX, } from "./e2ee-fixtures.js";
 //# sourceMappingURL=index.js.map

package/dist/test-utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-core",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Protocol logic for the Vana Personal Server — auth, grants, scopes, storage, keys",
   "license": "MIT",
   "repository": {