@premai/reticle 0.3.1 → 0.4.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@premai/reticle",
   "type": "module",
-  "version": "0.3.1",
+  "version": "0.4.1",
   "files": [
     "reticle_bg.wasm",
     "reticle.js",

package/reticle.d.ts

@@ -17,6 +17,24 @@ export class AttestResult {
     modules(): Modules;
 }
 
+/**
+ * A parsed certificate revocation list
+ */
+export class CRL {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Passes if the certificates are not in the certificate revocation list
+     * Throws `AttestationError` on fail
+     */
+    check_chain(chain: VerifiedChain): void;
+    /**
+     * Parses a certificate revocation list from DER format binary data
+     */
+    static from_der(list: Uint8Array): CRL;
+}
+
 export class Client {
     private constructor();
     free(): void;
@@ -27,23 +45,23 @@ export class Client {
      * - Iterates through each module and performs end-to-end attestation
      * - Returns the list of attested modules
      */
-    attest(query?: QueryParams | null): Promise<AttestResult>;
+    attest(): Promise<AttestResult>;
     /**
      * Completes end-to-end nvidia attestation. Generates nonce and validates claims all in one
      */
-    attest_nvidia(query?: QueryParams | null): Promise<ResponseHeaders>;
+    attest_nvidia(): Promise<ResponseHeaders>;
     /**
      * Performs end-to-end sev-snp attestation. Generates nonce and validates claims all in one
      */
-    attest_sev(query?: QueryParams | null): Promise<void>;
+    attest_sev(): Promise<void>;
     /**
      * Performs end-to-end tdx attestation. Generates nonce and validates claims all in one
      */
-    attest_tdx(query?: QueryParams | null): Promise<void>;
+    attest_tdx(): Promise<void>;
     /**
      * Gather available attestable modules from remote attestation endpoint
      */
-    request_modules(query?: QueryParams | null): Promise<Modules>;
+    request_modules(): Promise<Modules>;
     /**
      * Requests and parses an Nvidia EATToken attestation from the attestation server
      *
@@ -52,7 +70,7 @@ export class Client {
      * or measurement checks on the attestation. If you want to perform end-to-end attestation
      * please refer to [`Self::attest_nvidia`]
      */
-    request_nvidia(nonce: NvidiaNonce, query: QueryParams): Promise<NvidiaAttestResult>;
+    request_nvidia(nonce: NvidiaNonce): Promise<NvidiaAttestResult>;
     /**
      * Requests and parses a SEV-SNP attestation from the attestation server.
      *
@@ -61,7 +79,7 @@ export class Client {
      * or measurement checks on the attestation. If you want to perform end-to-end attestation
      * please refer to [`Self::attest_sev`]
      */
-    request_sev(nonce: SevNonce, query: QueryParams): Promise<ParsedAttestation>;
+    request_sev(nonce: SevNonce): Promise<ParsedAttestation>;
     /**
      * Requests and parses a TDX quote
      *
@@ -70,7 +88,8 @@ export class Client {
      * or measurement checks on the attestation. If you want to perform end-to-end attestation
      * please refer to [`Self::attest_tdx`]
      */
-    request_tdx(nonce: TdxNonce, query: QueryParams): Promise<TdxQuote>;
+    request_tdx(nonce: TdxNonce): Promise<TdxQuote>;
+    set_query(query_params: QueryParams): void;
 }
 
 export class ClientBuilder {
@@ -107,205 +126,174 @@ export enum CpuModule {
     Tdx = 1,
 }
 
-export class GatewayError {
+export class DecodedClaims {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    message: string;
-}
-
-export enum GpuModule {
-    Nvidia = 0,
 }
 
-export class Modules {
+export class EATToken {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    cpu(): CpuModule;
-    gpu(): GpuModule | undefined;
-    has_gpu(): boolean;
+    static parse(from: string): EATToken;
+    verify(keys: KeyChain, nonce: NvidiaNonce): DecodedClaims;
 }
 
-export class NvidiaAttestResult {
+export class ExportPem {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
+    ark: Uint8Array;
+    ask: Uint8Array;
+    vek: Uint8Array;
 }
 
-export class Pcs {
+export class GatewayError {
+    private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    fetch_collateral(quote: TdxQuote): Promise<Collateral>;
-    constructor(base_url: string);
+    message: string;
 }
 
-/**
- * Generic per-request query parameters.
- *
- * The `nonce` key is reserved and will be rejected.
- */
-export class QueryParams {
+export enum GpuModule {
+    Nvidia = 0,
+}
+
+export class Kds {
     free(): void;
     [Symbol.dispose](): void;
-    constructor();
+    fetch_certificates(attestation: ParsedAttestation): Promise<VerifiedChain>;
     /**
-     * Appends a query parameter.
-     *
-     * Reserved keywords for specific queries will get overwritten
+     * Fetches the certificate revocation list from AMD's KDS
      */
-    with(key: string, value: string): QueryParams;
+    fetch_crl(attestation: ParsedAttestation): Promise<CRL>;
+    constructor(cache_url: string);
 }
 
-export class QuoteVerifier {
+export class KeyChain {
+    private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    constructor(collateral: Collateral, quote: TdxQuote);
-    verify(nonce: TdxNonce): void;
 }
 
-export class ResponseHeaders {
+export class Modules {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    get(name: string): string | undefined;
-    keys(): string[];
+    cpu(): CpuModule;
+    gpu(): GpuModule | undefined;
+    has_gpu(): boolean;
 }
 
-export class TcbLevels {
+export class NvidiaAttestResult {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
 }
 
-export class TdxNonce {
+export class NvidiaNonce {
+    private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    constructor();
+    static generate(): NvidiaNonce;
     to_hex(): string;
 }
 
-export class TdxQuote {
+/**
+ * Represents a parsed attestation report with some already
+ * parsed commonly accessed fields
+ */
+export class ParsedAttestation {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
+    cpu_fam_id(): number;
+    cpu_mod_id(): number;
     /**
-     * Attempts to parse a quote from DCAP bytes.
+     * Parses and constructs a new attestation report from a stream of binary data
      */
-    static from_bytes(quote: Uint8Array): TdxQuote;
+    static new(bytes: Uint8Array): ParsedAttestation;
+    /**
+     * Verifies the attestation report against a certificate chain
+     */
+    verify(chain: VerifiedChain, nonce: SevNonce): void;
 }
 
-declare class DecodedClaims {
-    private constructor();
+export class Pcs {
     free(): void;
     [Symbol.dispose](): void;
+    fetch_collateral(quote: TdxQuote): Promise<Collateral>;
+    constructor(base_url: string);
 }
 
-declare class EATToken {
-    private constructor();
+/**
+ * Generic per-request query parameters.
+ *
+ * The `nonce` key is reserved and will be rejected.
+ */
+export class QueryParams {
     free(): void;
     [Symbol.dispose](): void;
-    static parse(from: string): EATToken;
-    verify(keys: KeyChain, nonce: NvidiaNonce): DecodedClaims;
+    constructor();
+    /**
+     * Appends a query parameter.
+     *
+     * Reserved keywords for specific queries will get overwritten
+     */
+    with(key: string, value: string): QueryParams;
 }
 
-declare class KeyChain {
-    private constructor();
+export class QuoteVerifier {
     free(): void;
     [Symbol.dispose](): void;
+    constructor(collateral: Collateral, quote: TdxQuote);
+    verify(nonce: TdxNonce): void;
 }
 
-declare class NvidiaNonce {
+export class ResponseHeaders {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    static generate(): NvidiaNonce;
-    to_hex(): string;
+    get(name: string): string | undefined;
+    keys(): string[];
 }
 
-/**
- * Same as [`KeyChain:fetch_keychain`], put in for better wasm compatibility
- */
-declare function fetch_keychain(): Promise<KeyChain>;
-
-export let nvidia: {
-    DecodedClaims: typeof DecodedClaims,
-    EATToken: typeof EATToken,
-    KeyChain: typeof KeyChain,
-    NvidiaNonce: typeof NvidiaNonce,
-    fetch_keychain: typeof fetch_keychain,
-};
-
-/**
- * A parsed certificate revocation list
- */
-declare class CRL {
+export class SevNonce {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    /**
-     * Passes if the certificates are not in the certificate revocation list
-     * Throws `AttestationError` on fail
-     */
-    check_chain(chain: VerifiedChain): void;
-    /**
-     * Parses a certificate revocation list from DER format binary data
-     */
-    static from_der(list: Uint8Array): CRL;
+    static generate(): SevNonce;
+    to_hex(): string;
 }
 
-declare class ExportPem {
+export class TcbLevels {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    ark: Uint8Array;
-    ask: Uint8Array;
-    vek: Uint8Array;
 }
 
-declare class Kds {
+export class TdxNonce {
     free(): void;
     [Symbol.dispose](): void;
-    fetch_certificates(attestation: ParsedAttestation): Promise<VerifiedChain>;
-    /**
-     * Fetches the certificate revocation list from AMD's KDS
-     */
-    fetch_crl(attestation: ParsedAttestation): Promise<CRL>;
-    constructor(cache_url: string);
+    constructor();
+    to_hex(): string;
 }
 
-/**
- * Represents a parsed attestation report with some already
- * parsed commonly accessed fields
- */
-declare class ParsedAttestation {
+export class TdxQuote {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
-    cpu_fam_id(): number;
-    cpu_mod_id(): number;
     /**
-     * Parses and constructs a new attestation report from a stream of binary data
-     */
-    static new(bytes: Uint8Array): ParsedAttestation;
-    /**
-     * Verifies the attestation report against a certificate chain
+     * Attempts to parse a quote from DCAP bytes.
      */
-    verify(chain: VerifiedChain, nonce: SevNonce): void;
-}
-
-declare class SevNonce {
-    private constructor();
-    free(): void;
-    [Symbol.dispose](): void;
-    static generate(): SevNonce;
-    to_hex(): string;
+    static from_bytes(quote: Uint8Array): TdxQuote;
 }
 
 /**
  * A chain which has been cryptographically verified
  */
-declare class VerifiedChain {
+export class VerifiedChain {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
@@ -317,11 +305,7 @@ declare class VerifiedChain {
     to_pem(): ExportPem;
 }
 
-export let sev: {
-    CRL: typeof CRL,
-    ExportPem: typeof ExportPem,
-    Kds: typeof Kds,
-    ParsedAttestation: typeof ParsedAttestation,
-    SevNonce: typeof SevNonce,
-    VerifiedChain: typeof VerifiedChain,
-};
+/**
+ * Same as [`KeyChain:fetch_keychain`], put in for better wasm compatibility
+ */
+export function fetch_keychain(): Promise<KeyChain>;

package/reticle.js

@@ -5,5 +5,5 @@ import { __wbg_set_wasm } from "./reticle_bg.js";
 __wbg_set_wasm(wasm);
 wasm.__wbindgen_start();
 export {
-    AttestHeaders, AttestResult, Client, ClientBuilder, Collateral, CpuModule, GatewayError, GpuModule, Modules, NvidiaAttestResult, Pcs, QueryParams, QuoteVerifier, ResponseHeaders, TcbLevels, TdxNonce, TdxQuote
+    AttestHeaders, AttestResult, CRL, Client, ClientBuilder, Collateral, CpuModule, DecodedClaims, EATToken, ExportPem, GatewayError, GpuModule, Kds, KeyChain, Modules, NvidiaAttestResult, NvidiaNonce, ParsedAttestation, Pcs, QueryParams, QuoteVerifier, ResponseHeaders, SevNonce, TcbLevels, TdxNonce, TdxQuote, VerifiedChain, fetch_keychain
 } from "./reticle_bg.js";