@pinionengineering/prover-client 0.1.0

package/dist/challenge.js

@@ -0,0 +1,126 @@
+/**
+ * Challenge construction and deterministic derivation.
+ *
+ * Ports two Go functions exactly:
+ *
+ *   DeriveChallenge()   storage-proofs/line/chalderive.go
+ *   blockHashG1()       storage-proofs/por/sw/pub.go
+ *
+ * Any deviation from these implementations will produce challenges or
+ * verification paths that disagree with the server.
+ */
+import { hmac } from '@noble/hashes/hmac';
+import { sha256 } from '@noble/hashes/sha256';
+import { bytesToBigInt, hashToG1 } from './bn254.js';
+/**
+ * BN254 (alt_bn128 / Ethereum) subgroup order q.
+ * = 21888242871839275222246405745257275088548364400416034343698204186575808495617
+ */
+export const BN254_ORDER = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+// ---------------------------------------------------------------------------
+// Base64 helpers (browser + Node ≥ 18)
+// ---------------------------------------------------------------------------
+/** Encode bytes to base64. */
+export function uint8ToBase64(bytes) {
+    let s = '';
+    for (let i = 0; i < bytes.length; i++)
+        s += String.fromCharCode(bytes[i] ?? 0);
+    return btoa(s);
+}
+/** Decode a base64 string to bytes. */
+export function base64ToBytes(b64) {
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+// ---------------------------------------------------------------------------
+// Challenge construction
+// ---------------------------------------------------------------------------
+/**
+ * Build a SW-Pub challenge for POST /prove.
+ *
+ * Returns a base64-encoded JSON string matching wireChal in
+ * storage-proofs/line/swpub/adapter.go:
+ *   { suite_id, seed, c, n }
+ *
+ * @param challengeSize  Number of blocks to sample (≤ totalBlocks).
+ * @param totalBlocks    Total blocks in the challenged store.
+ */
+export function buildChallenge(challengeSize, totalBlocks) {
+    const seed = crypto.getRandomValues(new Uint8Array(32));
+    const wireChal = {
+        suite_id: 1, // SuiteV1 = HMAC-SHA256
+        seed: uint8ToBase64(seed),
+        c: Math.min(challengeSize, totalBlocks),
+        n: totalBlocks,
+    };
+    return uint8ToBase64(new TextEncoder().encode(JSON.stringify(wireChal)));
+}
+// ---------------------------------------------------------------------------
+// Deterministic index + coefficient derivation
+// ---------------------------------------------------------------------------
+/**
+ * Re-derive the challenge indices and blinding coefficients from a seed.
+ *
+ * Exact port of DeriveChallenge() in storage-proofs/line/chalderive.go (SuiteV1):
+ *
+ *   idxKey   = HMAC-SHA256(seed, "indices")
+ *   coeffKey = HMAC-SHA256(seed, "coeffs")
+ *   rank[i]  = HMAC-SHA256(idxKey, ids[i])   → sort asc → first c positions
+ *   coeff[t] = HMAC-SHA256(coeffKey, BE64(t)) mod BN254_ORDER
+ *
+ * Both challenger (browser) and prover (server) independently call this with
+ * the same (seed, ids) to agree on which blocks to challenge without any
+ * extra round-trip.
+ */
+export function deriveIndicesAndCoeffs(seed, ids, c) {
+    const idxKey = hmac(sha256, seed, textBytes('indices'));
+    const coeffKey = hmac(sha256, seed, textBytes('coeffs'));
+    // Rank each block by HMAC(idxKey, id); sort ascending; take first c.
+    const ranked = ids.map((id, pos) => ({ pos, rank: hmac(sha256, idxKey, id) }));
+    ranked.sort((a, b) => compareBytes(a.rank, b.rank));
+    const indices = ranked.slice(0, c).map((r) => r.pos);
+    // Derive coefficients: HMAC(coeffKey, BigEndian(t)) mod order.
+    // Go encodes t as a uint64 big-endian — 8 bytes.
+    const tbuf = new Uint8Array(8);
+    const tview = new DataView(tbuf.buffer);
+    const coeffs = [];
+    for (let t = 0; t < c; t++) {
+        tview.setBigUint64(0, BigInt(t), false); // false = big-endian
+        coeffs.push(bytesToBigInt(hmac(sha256, coeffKey, tbuf)) % BN254_ORDER);
+    }
+    return { indices, coeffs };
+}
+// ---------------------------------------------------------------------------
+// Hash-to-G1
+// ---------------------------------------------------------------------------
+/**
+ * H(λ‖id) = HashToG1(λ‖id) using RFC 9380 SVDW.
+ *
+ * Exact port of blockHashG1() in storage-proofs/por/sw/pub.go.
+ * λ is the 16-byte file name from WireClientSetup.name; id is CID.Bytes().
+ * Uses DST "sw-pub-v1-BN254G1_XMD:SHA-256_SVDW_RO_" internally.
+ */
+export function blockHashG1(name, id) {
+    const buf = new Uint8Array(name.length + id.length);
+    buf.set(name);
+    buf.set(id, name.length);
+    return hashToG1(buf);
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function textBytes(s) {
+    return new TextEncoder().encode(s);
+}
+function compareBytes(a, b) {
+    const len = Math.min(a.length, b.length);
+    for (let i = 0; i < len; i++) {
+        if ((a[i] ?? 0) !== (b[i] ?? 0))
+            return (a[i] ?? 0) < (b[i] ?? 0) ? -1 : 1;
+    }
+    return a.length - b.length;
+}
+//# sourceMappingURL=challenge.js.map

package/dist/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../src/challenge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAgB,MAAM,YAAY,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GACtB,8EAA8E,CAAC;AAEjF,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E,8BAA8B;AAC9B,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB,EAAE,WAAmB;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,CAAC,EAAE,wBAAwB;QACrC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;QACzB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC;QACvC,CAAC,EAAE,WAAW;KACf,CAAC;IACF,OAAO,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAgB,EAChB,GAAiB,EACjB,CAAS;IAET,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEzD,qEAAqE;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAErD,+DAA+D;IAC/D,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB;QAC9D,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,EAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACpD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,CAAa,EAAE,CAAa;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,132 @@
+/**
+ * HTTP client for the pinion-prover service.
+ *
+ * Route structure (urlPathPrefix = "/prover"):
+ *   Authenticated (JWT Bearer):  /prover/api/v1/*
+ *   Unauthenticated:             /prover/prove
+ *
+ * Pass the full base URL including the path prefix, e.g.:
+ *   new PinionProverClient("https://hydrogen.pinion.build/prover", { getToken })
+ */
+import type { AuditResult, ChallengeKeyInfo, CreateKeyResult, ParsedSetup, RawSetupResponse, TagResponse } from './types.js';
+export interface PinionProverClientOptions {
+    /**
+     * Returns a JWT Bearer token for authenticated endpoints, or null/undefined
+     * if no token is available.  Called fresh before every authenticated request.
+     */
+    getToken?: () => Promise<string | null | undefined>;
+}
+/**
+ * Options for the audit() convenience wrapper.
+ *
+ * For exact control over block count, use buildChallenge(n, total) +
+ * prove() + verifyProof() directly.
+ */
+export interface AuditOptions {
+    /**
+     * Subset of root CIDs to challenge.  Defaults to all roots in the setup.
+     */
+    roots?: string[];
+    /**
+     * Percentage of blocks to sample per round, 0–100.  Default 1.
+     * Repeated 1% rounds accumulate statistical certainty over time — each round
+     * forces the server to prove possession of an independently random sample.
+     * Use 100 for a one-shot full audit.
+     *
+     * For an exact block count use buildChallenge(n, total) + prove() + verifyProof().
+     */
+    challengePct?: number;
+}
+export declare class PinionProverClient {
+    private readonly baseUrl;
+    private readonly getToken;
+    constructor(baseUrl: string, options?: PinionProverClientOptions);
+    listKeys(): Promise<ChallengeKeyInfo[]>;
+    /**
+     * Create a challenge key and return the key ID along with the public key material.
+     *
+     * The server generates a key pair and keeps the private scalar α.  The returned
+     * `publicKey` is the public half: G1 points U[0..s-1] and G2 point V = α·G₂.
+     * Store these alongside `keyId` — they are all you need to verify proofs locally,
+     * independent of the server returning the same material later.
+     */
+    createKey(): Promise<CreateKeyResult>;
+    deleteKey(keyId: string): Promise<void>;
+    /**
+     * Fetch the setup document for a key: public key material and the block ID
+     * lists for all registered roots.
+     *
+     * Call this once after tagging to obtain the ParsedSetup needed for auditing.
+     * Re-call whenever you add or remove roots.
+     */
+    getSetup(keyId: string): Promise<ParsedSetup>;
+    /**
+     * Ask the server to walk the IPFS DAG for root, compute per-block
+     * authentication tags, and store them under keyId.
+     *
+     * The root must already be in the "pinned" lifecycle state for the
+     * authenticated account.  Call getSetup() after tagging to get the updated
+     * block ID lists for the next audit cycle.
+     */
+    tag(root: string, keyId: string): Promise<TagResponse>;
+    deregister(keyId: string, root: string): Promise<void>;
+    /**
+     * POST /prove — unauthenticated, the server resolves the account from key_id.
+     *
+     * Returns the raw proof bytes. Most callers should use audit() instead,
+     * which also cryptographically verifies the response.
+     *
+     * @param keyId     Challenge key ID.
+     * @param roots     CID strings to prove, in the same order as the challenge.
+     * @param challenge base64(JSON(WireChallenge)) from buildChallenge().
+     */
+    prove(keyId: string, roots: string[], challenge: string): Promise<Uint8Array>;
+    /**
+     * Run one audit round against a pre-fetched setup.
+     *
+     * Builds a random challenge for the requested percentage of blocks, posts it
+     * to POST /prove, and cryptographically verifies the response.  Pass the
+     * ParsedSetup obtained from getSetup() — audit() does not fetch it for you,
+     * keeping the setup and audit phases explicit.
+     *
+     * ```ts
+     * // Setup phase — done once (or after adding/removing roots):
+     * const { keyId } = await client.createKey();
+     * await client.tag(cid, keyId);
+     * const setup = await client.getSetup(keyId);
+     *
+     * // Audit phase — repeat on a schedule:
+     * const result = await client.audit(keyId, setup);
+     * const result = await client.audit(keyId, setup, { challengePct: 100 });
+     * ```
+     *
+     * Throws `PinNotActiveError` if any challenged root is no longer pinned.
+     */
+    audit(keyId: string, setup: ParsedSetup, options?: AuditOptions): Promise<AuditResult>;
+    private get;
+    private post;
+    private authDelete;
+    private authHeaders;
+    private httpError;
+}
+export declare class ProverError extends Error {
+    readonly status: number;
+    readonly body: string;
+    constructor(status: number, body: string);
+}
+/**
+ * Thrown by prove() when the server returns 409 because a pin is no longer
+ * in the "pinned" lifecycle state.  The caller should refresh the key's setup
+ * and deregister or re-tag the stale root.
+ */
+export declare class PinNotActiveError extends Error {
+    readonly cid: string;
+    constructor(cid: string);
+}
+/**
+ * Decode a raw /setup response into a ParsedSetup.
+ * The client_setup field is base64(JSON(WireClientSetup)); roots[].block_ids
+ * are base64 CID bytes that get decoded to Uint8Arrays.
+ */
+export declare function parseSetupResponse(raw: RawSetupResponse): ParsedSetup;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAEhB,eAAe,EACf,WAAW,EAEX,gBAAgB,EAChB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACrD;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2C;gBAExD,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B;IAS9D,QAAQ,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAI7C;;;;;;;OAOG;IACG,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAUrC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C;;;;;;OAMG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAOnD;;;;;;;OAOG;IACG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAItD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5D;;;;;;;;;OASG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAgBnF;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;YAkClF,GAAG;YAQH,IAAI;YAWJ,UAAU;YAQV,WAAW;YAKX,SAAS;CAIxB;AAMD,qBAAa,WAAY,SAAQ,KAAK;aAElB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;gBADZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM;CAK/B;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aACd,GAAG,EAAE,MAAM;gBAAX,GAAG,EAAE,MAAM;CAIxC;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,WAAW,CAWrE"}

package/dist/client.js

@@ -0,0 +1,231 @@
+/**
+ * HTTP client for the pinion-prover service.
+ *
+ * Route structure (urlPathPrefix = "/prover"):
+ *   Authenticated (JWT Bearer):  /prover/api/v1/*
+ *   Unauthenticated:             /prover/prove
+ *
+ * Pass the full base URL including the path prefix, e.g.:
+ *   new PinionProverClient("https://hydrogen.pinion.build/prover", { getToken })
+ */
+import { buildChallenge, base64ToBytes } from './challenge.js';
+import { verifyProof, parseClientSetup } from './verify.js';
+export class PinionProverClient {
+    baseUrl;
+    getToken;
+    constructor(baseUrl, options = {}) {
+        this.baseUrl = baseUrl.replace(/\/$/, '');
+        this.getToken = options.getToken ?? (() => Promise.resolve(null));
+    }
+    // ---------------------------------------------------------------------------
+    // Challenge key lifecycle
+    // ---------------------------------------------------------------------------
+    async listKeys() {
+        return this.get('/api/v1/challenge-keys');
+    }
+    /**
+     * Create a challenge key and return the key ID along with the public key material.
+     *
+     * The server generates a key pair and keeps the private scalar α.  The returned
+     * `publicKey` is the public half: G1 points U[0..s-1] and G2 point V = α·G₂.
+     * Store these alongside `keyId` — they are all you need to verify proofs locally,
+     * independent of the server returning the same material later.
+     */
+    async createKey() {
+        const raw = await this.post('/api/v1/challenge-key', {
+            protocol: 'sw-pub',
+        });
+        return {
+            keyId: raw.key_id,
+            publicKey: parseClientSetup(raw.client_setup),
+        };
+    }
+    async deleteKey(keyId) {
+        await this.authDelete(`/api/v1/challenge-key/${encodeURIComponent(keyId)}`);
+    }
+    // ---------------------------------------------------------------------------
+    // Setup phase
+    // ---------------------------------------------------------------------------
+    /**
+     * Fetch the setup document for a key: public key material and the block ID
+     * lists for all registered roots.
+     *
+     * Call this once after tagging to obtain the ParsedSetup needed for auditing.
+     * Re-call whenever you add or remove roots.
+     */
+    async getSetup(keyId) {
+        const raw = await this.get(`/api/v1/setup?key_id=${encodeURIComponent(keyId)}`);
+        return parseSetupResponse(raw);
+    }
+    /**
+     * Ask the server to walk the IPFS DAG for root, compute per-block
+     * authentication tags, and store them under keyId.
+     *
+     * The root must already be in the "pinned" lifecycle state for the
+     * authenticated account.  Call getSetup() after tagging to get the updated
+     * block ID lists for the next audit cycle.
+     */
+    async tag(root, keyId) {
+        return this.post('/api/v1/tag', { root, key_id: keyId });
+    }
+    async deregister(keyId, root) {
+        await this.authDelete(`/api/v1/register/${encodeURIComponent(keyId)}/${encodeURIComponent(root)}`);
+    }
+    // ---------------------------------------------------------------------------
+    // Audit phase
+    // ---------------------------------------------------------------------------
+    /**
+     * POST /prove — unauthenticated, the server resolves the account from key_id.
+     *
+     * Returns the raw proof bytes. Most callers should use audit() instead,
+     * which also cryptographically verifies the response.
+     *
+     * @param keyId     Challenge key ID.
+     * @param roots     CID strings to prove, in the same order as the challenge.
+     * @param challenge base64(JSON(WireChallenge)) from buildChallenge().
+     */
+    async prove(keyId, roots, challenge) {
+        const resp = await fetch(`${this.baseUrl}/prove`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ key_id: keyId, roots, challenge }),
+        });
+        if (resp.status === 409) {
+            const body = await resp.json().catch(() => ({}));
+            throw new PinNotActiveError(String(body['cid'] ?? 'unknown'));
+        }
+        if (!resp.ok) {
+            throw new ProverError(resp.status, await resp.text().catch(() => ''));
+        }
+        return new Uint8Array(await resp.arrayBuffer());
+    }
+    /**
+     * Run one audit round against a pre-fetched setup.
+     *
+     * Builds a random challenge for the requested percentage of blocks, posts it
+     * to POST /prove, and cryptographically verifies the response.  Pass the
+     * ParsedSetup obtained from getSetup() — audit() does not fetch it for you,
+     * keeping the setup and audit phases explicit.
+     *
+     * ```ts
+     * // Setup phase — done once (or after adding/removing roots):
+     * const { keyId } = await client.createKey();
+     * await client.tag(cid, keyId);
+     * const setup = await client.getSetup(keyId);
+     *
+     * // Audit phase — repeat on a schedule:
+     * const result = await client.audit(keyId, setup);
+     * const result = await client.audit(keyId, setup, { challengePct: 100 });
+     * ```
+     *
+     * Throws `PinNotActiveError` if any challenged root is no longer pinned.
+     */
+    async audit(keyId, setup, options = {}) {
+        const targetRoots = options.roots ?? setup.roots.map((r) => r.root);
+        const challengePct = options.challengePct ?? 1;
+        const rootEntries = targetRoots.map((root) => {
+            const entry = setup.roots.find((r) => r.root === root);
+            if (!entry)
+                throw new Error(`root ${root} not found in setup`);
+            return entry;
+        });
+        // Concatenate block IDs across roots in the same order the server does
+        // in ipfs-storage-proofs/ipfsproof.go:NewChallengedList.
+        const allBlockIds = rootEntries.flatMap((r) => r.blockIds);
+        if (allBlockIds.length === 0)
+            throw new Error('no blocks to audit');
+        const challengeSize = Math.max(1, Math.round((challengePct / 100) * allBlockIds.length));
+        const challenge = buildChallenge(challengeSize, allBlockIds.length);
+        const proofBytes = await this.prove(keyId, targetRoots, challenge);
+        const pass = verifyProof({
+            clientSetup: setup.clientSetup,
+            blockIds: allBlockIds,
+            challenge,
+            proofBytes,
+        });
+        return { pass, blocksChecked: challengeSize, keyId, roots: targetRoots };
+    }
+    // ---------------------------------------------------------------------------
+    // HTTP helpers
+    // ---------------------------------------------------------------------------
+    async get(path) {
+        const resp = await fetch(`${this.baseUrl}${path}`, {
+            headers: await this.authHeaders(),
+        });
+        if (!resp.ok)
+            throw await this.httpError(resp);
+        return resp.json();
+    }
+    async post(path, body) {
+        const resp = await fetch(`${this.baseUrl}${path}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', ...(await this.authHeaders()) },
+            body: JSON.stringify(body),
+        });
+        if (!resp.ok)
+            throw await this.httpError(resp);
+        if (resp.status === 204)
+            return undefined;
+        return resp.json();
+    }
+    async authDelete(path) {
+        const resp = await fetch(`${this.baseUrl}${path}`, {
+            method: 'DELETE',
+            headers: await this.authHeaders(),
+        });
+        if (!resp.ok)
+            throw await this.httpError(resp);
+    }
+    async authHeaders() {
+        const token = await this.getToken();
+        return token ? { Authorization: `Bearer ${token}` } : {};
+    }
+    async httpError(resp) {
+        const text = await resp.text().catch(() => '');
+        return new ProverError(resp.status, text);
+    }
+}
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+export class ProverError extends Error {
+    status;
+    body;
+    constructor(status, body) {
+        super(`pinion-prover: HTTP ${status}: ${body}`);
+        this.status = status;
+        this.body = body;
+        this.name = 'ProverError';
+    }
+}
+/**
+ * Thrown by prove() when the server returns 409 because a pin is no longer
+ * in the "pinned" lifecycle state.  The caller should refresh the key's setup
+ * and deregister or re-tag the stale root.
+ */
+export class PinNotActiveError extends Error {
+    cid;
+    constructor(cid) {
+        super(`pin ${cid} is not in pinned state`);
+        this.cid = cid;
+        this.name = 'PinNotActiveError';
+    }
+}
+// ---------------------------------------------------------------------------
+// Setup parsing (exported for use without the full client)
+// ---------------------------------------------------------------------------
+/**
+ * Decode a raw /setup response into a ParsedSetup.
+ * The client_setup field is base64(JSON(WireClientSetup)); roots[].block_ids
+ * are base64 CID bytes that get decoded to Uint8Arrays.
+ */
+export function parseSetupResponse(raw) {
+    const clientSetup = parseClientSetup(raw.client_setup);
+    const roots = raw.roots.map((r) => ({
+        root: r.root,
+        blockIds: r.block_ids.map((id) => base64ToBytes(id)),
+    }));
+    const totalBlocks = roots.reduce((s, r) => s + r.blockIds.length, 0);
+    return { clientSetup, roots, totalBlocks, challengeSize: clientSetup.l };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgC5D,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAAS;IAChB,QAAQ,CAA2C;IAEpE,YAAY,OAAe,EAAE,UAAqC,EAAE;QAClE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAE9E,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,GAAG,CAAqB,wBAAwB,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAoB,uBAAuB,EAAE;YACtE,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,wBAAwB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACpD,CAAC;QACF,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAAa;QACnC,OAAO,IAAI,CAAC,IAAI,CAAc,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,IAAY;QAC1C,MAAM,IAAI,CAAC,UAAU,CACnB,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E;;;;;;;;;OASG;IACH,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAe,EAAE,SAAiB;QAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,QAAQ,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA4B,CAAC;YAC5E,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAkB,EAAE,UAAwB,EAAE;QACvE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;QAE/C,MAAM,WAAW,GAAiB,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,qBAAqB,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEpE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,cAAc,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAEpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,WAAW,CAAC;YACvB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,WAAW;YACrB,SAAS;YACT,UAAU;SACX,CAAC,CAAC;QAEH,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAEtE,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACjD,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,EAAgB,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE;YAC9E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,EAAgB,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACjD,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAc;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAElB;IACA;IAFlB,YACkB,MAAc,EACd,IAAY;QAE5B,KAAK,CAAC,uBAAuB,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAHhC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACd;IAA5B,YAA4B,GAAW;QACrC,KAAK,CAAC,OAAO,GAAG,yBAAyB,CAAC,CAAC;QADjB,QAAG,GAAH,GAAG,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAqB;IACtD,MAAM,WAAW,GAAoB,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAExE,MAAM,KAAK,GAAiB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;KACrD,CAAC,CAAC,CAAC;IAEJ,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAErE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { PinionProverClient, ProverError, PinNotActiveError, parseSetupResponse, } from './client.js';
+export type { PinionProverClientOptions, AuditOptions } from './client.js';
+export { verifyProof, parseClientSetup } from './verify.js';
+export type { VerifyParams } from './verify.js';
+export { buildChallenge, deriveIndicesAndCoeffs, blockHashG1, base64ToBytes, uint8ToBase64, BN254_ORDER, } from './challenge.js';
+export { g1FromBytes, g2FromBytes, g1ScalarMult, g1Add, atePairing, fp12Equal, bytesToBigInt, G1_BASE, G2_BASE, } from './bn254.js';
+export type { G1Point, G2Point, Fp12Elem } from './bn254.js';
+export type { WireClientSetup, WireChallenge, WireProof, RawTaggedRoot, RawSetupResponse, ParsedRoot, ParsedSetup, ChallengeKeyInfo, CreateKeyResponse, CreateKeyResult, TagResponse, AuditResult, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,aAAa,EACb,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,KAAK,EACL,UAAU,EACV,SAAS,EACT,aAAa,EACb,OAAO,EACP,OAAO,GACR,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG7D,YAAY,EACV,eAAe,EACf,aAAa,EACb,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// High-level client
+export { PinionProverClient, ProverError, PinNotActiveError, parseSetupResponse, } from './client.js';
+// Verification
+export { verifyProof, parseClientSetup } from './verify.js';
+// Challenge construction
+export { buildChallenge, deriveIndicesAndCoeffs, blockHashG1, base64ToBytes, uint8ToBase64, BN254_ORDER, } from './challenge.js';
+// BN254 primitives (for advanced use / other protocols)
+export { g1FromBytes, g2FromBytes, g1ScalarMult, g1Add, atePairing, fp12Equal, bytesToBigInt, G1_BASE, G2_BASE, } from './bn254.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,eAAe;AACf,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG5D,yBAAyB;AACzB,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,aAAa,EACb,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,wDAAwD;AACxD,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,KAAK,EACL,UAAU,EACV,SAAS,EACT,aAAa,EACb,OAAO,EACP,OAAO,GACR,MAAM,YAAY,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Wire format types for the pinion-prover service.
+ *
+ * All byte fields (G1/G2 curve points, scalars, seeds) are transmitted as
+ * standard base64 strings inside JSON objects.  The Go service uses encoding/json
+ * which encodes []byte as base64 automatically.
+ */
+/**
+ * The client_setup blob embedded in SetupResponse.
+ * Matches wireClientSetup in storage-proofs/line/swpub/adapter.go.
+ */
+export interface WireClientSetup {
+    protocol: string;
+    suite_id: number;
+    s: number;
+    l: number;
+    name: string;
+    v: string;
+    u: string[];
+}
+/**
+ * The challenge sent to POST /prove.
+ * Matches wireChal in storage-proofs/line/swpub/adapter.go.
+ * Transmitted as base64(JSON(wireChal)).
+ */
+export interface WireChallenge {
+    suite_id: number;
+    seed: string;
+    c: number;
+    n: number;
+}
+/**
+ * The proof returned by POST /prove as application/octet-stream.
+ * Despite the content-type, the body is JSON.
+ * Matches wireProof in storage-proofs/line/swpub/adapter.go.
+ */
+export interface WireProof {
+    sigma: string;
+    mu: string[];
+}
+/** One root entry in the setup response. */
+export interface RawTaggedRoot {
+    root: string;
+    block_ids: string[];
+}
+/** Raw JSON from GET /api/v1/setup?key_id=<id>. */
+export interface RawSetupResponse {
+    client_setup: string;
+    roots: RawTaggedRoot[];
+}
+/** A root entry with block IDs already decoded to Uint8Arrays. */
+export interface ParsedRoot {
+    root: string;
+    blockIds: Uint8Array[];
+}
+/** Fully decoded result of getSetup(). Ready to pass to audit(). */
+export interface ParsedSetup {
+    clientSetup: WireClientSetup;
+    roots: ParsedRoot[];
+    /** Sum of block counts across all roots. */
+    totalBlocks: number;
+    /** The l field from clientSetup: recommended blocks per challenge round. */
+    challengeSize: number;
+}
+export interface ChallengeKeyInfo {
+    key_id: string;
+    protocol: string;
+    created_at: string;
+    audit_count: number;
+    blocks_audited: number;
+}
+/** Raw wire response from POST /api/v1/challenge-key. */
+export interface CreateKeyResponse {
+    key_id: string;
+    client_setup: string;
+}
+/**
+ * Result of createKey() — the key ID plus the decoded public key material.
+ *
+ * `publicKey` contains the G1/G2 points needed to verify proofs locally.
+ * Unlike a symmetric secret, this is the *public* half of the key pair — the
+ * private half (α) never leaves the server.  You can safely store publicKey
+ * alongside keyId so that future audits can verify proofs without trusting the
+ * server to return the same key material each time.
+ */
+export interface CreateKeyResult {
+    keyId: string;
+    publicKey: WireClientSetup;
+}
+/**
+ * Raw tag response from POST /api/v1/tag.
+ *
+ * `block_ids` is the ordered list of CID bytes for every block in the DAG.
+ * This same list is returned by getSetup() per root and is what the client
+ * uses to select which blocks to challenge — the server never picks them.
+ */
+export interface TagResponse {
+    block_ids: string[];
+}
+/** Result of a complete audit round (challenge → prove → cryptographic verify). */
+export interface AuditResult {
+    /** true only if the pairing check e(σ,G₂) == e(A,v) passed. */
+    pass: boolean;
+    /** Number of blocks sampled in this challenge round. */
+    blocksChecked: number;
+    keyId: string;
+    roots: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,EAAE,CAAC;CACb;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,EAAE,CAAC;CACd;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,mDAAmD;AACnD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,eAAe,CAAC;IAC7B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,IAAI,EAAE,OAAO,CAAC;IACd,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB"}