@reclaimprotocol/attestor-core 5.0.1-beta.2 → 5.0.1-beta.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/browser/resources/attestor-browser.min.mjs +4512 -0
- package/lib/avs/abis/avsDirectoryABI.js +338 -341
- package/lib/avs/abis/delegationABI.js +1 -4
- package/lib/avs/abis/registryABI.js +719 -722
- package/lib/avs/client/create-claim-on-avs.js +129 -157
- package/lib/avs/config.js +18 -24
- package/lib/avs/contracts/ReclaimServiceManager.js +1 -0
- package/lib/avs/contracts/common.js +1 -0
- package/lib/avs/contracts/factories/ReclaimServiceManager__factory.js +1139 -1156
- package/lib/avs/contracts/factories/index.js +4 -4
- package/lib/avs/contracts/index.js +2 -6
- package/lib/avs/types/index.js +1 -0
- package/lib/avs/utils/contracts.js +30 -50
- package/lib/avs/utils/register.js +75 -70
- package/lib/avs/utils/tasks.js +38 -45
- package/lib/client/create-claim.js +402 -431
- package/lib/client/tunnels/make-rpc-tcp-tunnel.js +46 -48
- package/lib/client/tunnels/make-rpc-tls-tunnel.js +125 -121
- package/lib/client/utils/attestor-pool.js +23 -22
- package/lib/client/utils/client-socket.js +86 -109
- package/lib/client/utils/message-handler.js +79 -89
- package/lib/config/index.js +40 -58
- package/lib/external-rpc/benchmark.js +61 -74
- package/lib/external-rpc/event-bus.js +12 -15
- package/lib/external-rpc/handle-incoming-msg.js +216 -225
- package/lib/external-rpc/jsc-polyfills/1.js +70 -68
- package/lib/external-rpc/jsc-polyfills/2.js +17 -12
- package/lib/external-rpc/jsc-polyfills/event.js +10 -15
- package/lib/external-rpc/jsc-polyfills/index.js +2 -2
- package/lib/external-rpc/jsc-polyfills/ws.js +77 -79
- package/lib/external-rpc/setup-browser.js +28 -28
- package/lib/external-rpc/setup-jsc.js +17 -17
- package/lib/external-rpc/types.js +1 -0
- package/lib/external-rpc/utils.js +89 -89
- package/lib/external-rpc/zk.js +55 -50
- package/lib/index.js +2 -6
- package/lib/mechain/abis/governanceABI.js +457 -460
- package/lib/mechain/abis/taskABI.js +502 -505
- package/lib/mechain/client/create-claim-on-mechain.js +24 -29
- package/lib/mechain/constants/index.js +3 -8
- package/lib/mechain/types/index.js +1 -0
- package/lib/proto/api.js +4200 -4087
- package/lib/proto/tee-bundle.js +1261 -1241
- package/lib/providers/http/index.js +616 -603
- package/lib/providers/http/patch-parse5-tree.js +27 -29
- package/lib/providers/http/utils.js +289 -248
- package/lib/providers/index.js +3 -6
- package/lib/server/create-server.js +89 -91
- package/lib/server/handlers/claimTeeBundle.js +231 -211
- package/lib/server/handlers/claimTunnel.js +66 -73
- package/lib/server/handlers/completeClaimOnChain.js +20 -25
- package/lib/server/handlers/createClaimOnChain.js +21 -27
- package/lib/server/handlers/createTaskOnMechain.js +40 -50
- package/lib/server/handlers/createTunnel.js +85 -90
- package/lib/server/handlers/disconnectTunnel.js +4 -7
- package/lib/server/handlers/fetchCertificateBytes.js +37 -53
- package/lib/server/handlers/index.js +21 -24
- package/lib/server/handlers/init.js +27 -28
- package/lib/server/handlers/toprf.js +13 -16
- package/lib/server/socket.js +97 -100
- package/lib/server/tunnels/make-tcp-tunnel.js +161 -186
- package/lib/server/utils/apm.js +32 -25
- package/lib/server/utils/assert-valid-claim-request.js +305 -334
- package/lib/server/utils/config-env.js +2 -2
- package/lib/server/utils/dns.js +12 -18
- package/lib/server/utils/gcp-attestation.js +233 -181
- package/lib/server/utils/generics.d.ts +1 -1
- package/lib/server/utils/generics.js +43 -37
- package/lib/server/utils/iso.js +253 -256
- package/lib/server/utils/keep-alive.js +36 -36
- package/lib/server/utils/nitro-attestation.js +295 -220
- package/lib/server/utils/oprf-raw.js +48 -55
- package/lib/server/utils/process-handshake.js +200 -218
- package/lib/server/utils/proxy-session.js +5 -5
- package/lib/server/utils/tee-oprf-mpc-verification.js +82 -78
- package/lib/server/utils/tee-oprf-verification.js +165 -142
- package/lib/server/utils/tee-transcript-reconstruction.js +176 -129
- package/lib/server/utils/tee-verification.js +397 -334
- package/lib/server/utils/validation.js +30 -37
- package/lib/types/bgp.js +1 -0
- package/lib/types/claims.js +1 -0
- package/lib/types/client.js +1 -0
- package/lib/types/general.js +1 -0
- package/lib/types/handlers.js +1 -0
- package/lib/types/providers.d.ts +3 -2
- package/lib/types/providers.gen.js +9 -15
- package/lib/types/providers.js +1 -0
- package/lib/types/rpc.js +1 -0
- package/lib/types/signatures.d.ts +1 -2
- package/lib/types/signatures.js +1 -0
- package/lib/types/tunnel.js +1 -0
- package/lib/types/zk.js +1 -0
- package/lib/utils/auth.js +54 -66
- package/lib/utils/b64-json.js +15 -15
- package/lib/utils/bgp-listener.js +107 -111
- package/lib/utils/claims.js +89 -80
- package/lib/utils/env.js +13 -17
- package/lib/utils/error.js +43 -47
- package/lib/utils/generics.js +284 -235
- package/lib/utils/http-parser.js +232 -187
- package/lib/utils/logger.js +80 -71
- package/lib/utils/prepare-packets.js +69 -67
- package/lib/utils/redactions.js +163 -121
- package/lib/utils/retries.js +22 -24
- package/lib/utils/signatures/eth.js +29 -28
- package/lib/utils/signatures/index.js +5 -10
- package/lib/utils/socket-base.js +84 -88
- package/lib/utils/tls.js +28 -28
- package/lib/utils/ws.js +19 -19
- package/lib/utils/zk.js +542 -582
- package/package.json +12 -5
- package/lib/external-rpc/global.d.js +0 -0
- package/lib/scripts/build-browser.d.ts +0 -1
- package/lib/scripts/build-jsc.d.ts +0 -1
- package/lib/scripts/build-lib.d.ts +0 -1
- package/lib/scripts/check-avs-registration.d.ts +0 -1
- package/lib/scripts/check-avs-registration.js +0 -28
- package/lib/scripts/fallbacks/crypto.d.ts +0 -1
- package/lib/scripts/fallbacks/crypto.js +0 -4
- package/lib/scripts/fallbacks/empty.d.ts +0 -3
- package/lib/scripts/fallbacks/empty.js +0 -4
- package/lib/scripts/fallbacks/re2.d.ts +0 -1
- package/lib/scripts/fallbacks/re2.js +0 -7
- package/lib/scripts/fallbacks/snarkjs.d.ts +0 -1
- package/lib/scripts/fallbacks/snarkjs.js +0 -10
- package/lib/scripts/fallbacks/stwo.d.ts +0 -6
- package/lib/scripts/fallbacks/stwo.js +0 -159
- package/lib/scripts/generate-provider-types.d.ts +0 -5
- package/lib/scripts/generate-provider-types.js +0 -101
- package/lib/scripts/generate-receipt.d.ts +0 -9
- package/lib/scripts/generate-receipt.js +0 -101
- package/lib/scripts/generate-toprf-keys.d.ts +0 -1
- package/lib/scripts/generate-toprf-keys.js +0 -24
- package/lib/scripts/jsc-cli-rpc.d.ts +0 -1
- package/lib/scripts/jsc-cli-rpc.js +0 -35
- package/lib/scripts/register-avs-operator.d.ts +0 -1
- package/lib/scripts/register-avs-operator.js +0 -3
- package/lib/scripts/start-server.d.ts +0 -1
- package/lib/scripts/start-server.js +0 -11
- package/lib/scripts/update-avs-metadata.d.ts +0 -1
- package/lib/scripts/update-avs-metadata.js +0 -20
- package/lib/scripts/utils.d.ts +0 -1
- package/lib/scripts/utils.js +0 -10
- package/lib/scripts/whitelist-operator.d.ts +0 -1
- package/lib/scripts/whitelist-operator.js +0 -16
|
@@ -1,105 +1,103 @@
|
|
|
1
|
-
import { createServer as createHttpServer } from
|
|
2
|
-
import serveStatic from
|
|
3
|
-
import { WebSocketServer } from
|
|
1
|
+
import { createServer as createHttpServer } from 'http';
|
|
2
|
+
import serveStatic from 'serve-static';
|
|
3
|
+
import { WebSocketServer } from 'ws';
|
|
4
4
|
import { API_SERVER_PORT, ATTESTOR_ADDRESS_PATHNAME, BROWSER_RPC_PATHNAME, WS_PATHNAME } from "../config/index.js";
|
|
5
|
-
import { AttestorServerSocket } from "
|
|
6
|
-
import { getAttestorAddress } from "
|
|
7
|
-
import { addKeepAlive } from "
|
|
5
|
+
import { AttestorServerSocket } from "./socket.js";
|
|
6
|
+
import { getAttestorAddress } from "./utils/generics.js";
|
|
7
|
+
import { addKeepAlive } from "./utils/keep-alive.js";
|
|
8
8
|
import { createBgpListener } from "../utils/bgp-listener.js";
|
|
9
9
|
import { getEnvVariable } from "../utils/env.js";
|
|
10
10
|
import { logger as LOGGER } from "../utils/index.js";
|
|
11
11
|
import { SelectedServiceSignatureType } from "../utils/signatures/index.js";
|
|
12
12
|
import { promisifySend } from "../utils/ws.js";
|
|
13
|
-
const PORT = +(getEnvVariable(
|
|
14
|
-
const DISABLE_BGP_CHECKS = getEnvVariable(
|
|
13
|
+
const PORT = +(getEnvVariable('PORT') || API_SERVER_PORT);
|
|
14
|
+
const DISABLE_BGP_CHECKS = getEnvVariable('DISABLE_BGP_CHECKS') === '1';
|
|
15
15
|
const ATTESTOR_ADDRESS_JSON_RES = JSON.stringify({
|
|
16
|
-
|
|
17
|
-
|
|
16
|
+
address: getAttestorAddress(SelectedServiceSignatureType),
|
|
17
|
+
signatureType: SelectedServiceSignatureType
|
|
18
18
|
});
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
19
|
+
/**
|
|
20
|
+
* Creates the WebSocket API server,
|
|
21
|
+
* creates a fileserver to serve the browser RPC client,
|
|
22
|
+
* and listens on the given port.
|
|
23
|
+
*/
|
|
24
|
+
export async function createServer(port = PORT) {
|
|
25
|
+
const http = createHttpServer();
|
|
26
|
+
const serveBrowserRpc = serveStatic('browser', {
|
|
27
|
+
index: ['index.html'],
|
|
28
|
+
setHeaders(res) {
|
|
29
|
+
res.setHeader('Access-Control-Allow-Origin', '*');
|
|
30
|
+
},
|
|
31
|
+
});
|
|
32
|
+
const bgpListener = !DISABLE_BGP_CHECKS
|
|
33
|
+
? createBgpListener(LOGGER.child({ service: 'bgp-listener' }))
|
|
34
|
+
: undefined;
|
|
35
|
+
const wss = new WebSocketServer({ noServer: true });
|
|
36
|
+
http.on('upgrade', handleUpgrade.bind(wss));
|
|
37
|
+
http.on('request', (req, res) => {
|
|
38
|
+
const url = URL.parse(req.url || '', 'http://localhost');
|
|
39
|
+
if (!url) {
|
|
40
|
+
res.statusCode = 422;
|
|
41
|
+
res.end('Invalid URL');
|
|
42
|
+
return;
|
|
43
|
+
}
|
|
44
|
+
if (url.pathname === ATTESTOR_ADDRESS_PATHNAME) {
|
|
45
|
+
res.writeHead(200, { 'Content-Type': 'application/json' });
|
|
46
|
+
res.end(ATTESTOR_ADDRESS_JSON_RES);
|
|
47
|
+
return;
|
|
48
|
+
}
|
|
49
|
+
// simple way to serve files at the browser RPC path
|
|
50
|
+
if (!url.pathname?.startsWith(BROWSER_RPC_PATHNAME)) {
|
|
51
|
+
res.statusCode = 404;
|
|
52
|
+
res.end('Not found');
|
|
53
|
+
return;
|
|
54
|
+
}
|
|
55
|
+
req.url = req.url.slice(BROWSER_RPC_PATHNAME.length) || '/';
|
|
56
|
+
serveBrowserRpc(req, res, (err) => {
|
|
57
|
+
if (err) {
|
|
58
|
+
LOGGER.error({ err, url: req.url }, 'Failed to serve file');
|
|
59
|
+
}
|
|
60
|
+
res.statusCode = err?.statusCode ?? 404;
|
|
61
|
+
res.end(err?.message ?? 'Not found');
|
|
62
|
+
});
|
|
57
63
|
});
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
bgpListener?.close();
|
|
78
|
-
};
|
|
79
|
-
return wss;
|
|
64
|
+
// wait for us to start listening
|
|
65
|
+
http.listen(port);
|
|
66
|
+
await new Promise((resolve, reject) => {
|
|
67
|
+
http.once('listening', () => resolve());
|
|
68
|
+
http.once('error', reject);
|
|
69
|
+
});
|
|
70
|
+
wss.on('connection', (ws, req) => handleNewClient(ws, req, bgpListener));
|
|
71
|
+
LOGGER.info({
|
|
72
|
+
port,
|
|
73
|
+
apiPath: WS_PATHNAME,
|
|
74
|
+
browserRpcPath: BROWSER_RPC_PATHNAME,
|
|
75
|
+
signerAddress: getAttestorAddress(SelectedServiceSignatureType)
|
|
76
|
+
}, 'WS server listening');
|
|
77
|
+
const wssClose = wss.close.bind(wss);
|
|
78
|
+
wss.close = (cb) => {
|
|
79
|
+
wssClose(() => http.close(cb));
|
|
80
|
+
bgpListener?.close();
|
|
81
|
+
};
|
|
82
|
+
return wss;
|
|
80
83
|
}
|
|
81
84
|
async function handleNewClient(ws, req, bgpListener) {
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
ws.serverSocket = client;
|
|
91
|
-
addKeepAlive(ws, LOGGER.child({ sessionId: client.sessionId }));
|
|
85
|
+
promisifySend(ws);
|
|
86
|
+
const client = await AttestorServerSocket.acceptConnection(ws, { req, bgpListener, logger: LOGGER });
|
|
87
|
+
// if initialisation fails, don't store the client
|
|
88
|
+
if (!client) {
|
|
89
|
+
return;
|
|
90
|
+
}
|
|
91
|
+
ws.serverSocket = client;
|
|
92
|
+
addKeepAlive(ws, LOGGER.child({ sessionId: client.sessionId }));
|
|
92
93
|
}
|
|
93
94
|
function handleUpgrade(request, socket, head) {
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
95
|
+
const { pathname } = new URL(request.url, 'wss://base.url');
|
|
96
|
+
if (pathname === WS_PATHNAME) {
|
|
97
|
+
this.handleUpgrade(request, socket, head, (ws) => {
|
|
98
|
+
this.emit('connection', ws, request);
|
|
99
|
+
});
|
|
100
|
+
return;
|
|
101
|
+
}
|
|
102
|
+
socket.destroy();
|
|
102
103
|
}
|
|
103
|
-
export {
|
|
104
|
-
createServer
|
|
105
|
-
};
|