@reclaimprotocol/attestor-core 5.0.3 → 5.0.5

package/lib/index.js

@@ -154,6 +154,7 @@ var AttestorVersion = {
   ATTESTOR_VERSION_2_0_0: 3,
   ATTESTOR_VERSION_2_0_1: 4,
   ATTESTOR_VERSION_3_0_0: 5,
+  ATTESTOR_VERSION_3_1_0: 6,
   UNRECOGNIZED: -1
 };
 function attestorVersionFromJSON(object) {
@@ -176,6 +177,9 @@ function attestorVersionFromJSON(object) {
     case 5:
     case "ATTESTOR_VERSION_3_0_0":
       return AttestorVersion.ATTESTOR_VERSION_3_0_0;
+    case 6:
+    case "ATTESTOR_VERSION_3_1_0":
+      return AttestorVersion.ATTESTOR_VERSION_3_1_0;
     case -1:
     case "UNRECOGNIZED":
     default:
@@ -196,6 +200,8 @@ function attestorVersionToJSON(object) {
       return "ATTESTOR_VERSION_2_0_1";
     case AttestorVersion.ATTESTOR_VERSION_3_0_0:
       return "ATTESTOR_VERSION_3_0_0";
+    case AttestorVersion.ATTESTOR_VERSION_3_1_0:
+      return "ATTESTOR_VERSION_3_1_0";
     case AttestorVersion.UNRECOGNIZED:
     default:
       return "UNRECOGNIZED";
@@ -358,7 +364,7 @@ function createBaseClaimContext() {
 }
 var ClaimContext = {
   encode(message, writer = new BinaryWriter()) {
-    Object.entries(message.extractedParameters).forEach(([key, value]) => {
+    globalThis.Object.entries(message.extractedParameters).forEach(([key, value]) => {
       ClaimContext_ExtractedParametersEntry.encode({ key, value }, writer.uint32(10).fork()).join();
     });
     if (message.providerHash !== "") {
@@ -368,7 +374,7 @@ var ClaimContext = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimContext();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -400,17 +406,20 @@ var ClaimContext = {
   },
   fromJSON(object) {
     return {
-      extractedParameters: isObject(object.extractedParameters) ? Object.entries(object.extractedParameters).reduce((acc, [key, value]) => {
-        acc[key] = String(value);
-        return acc;
-      }, {}) : {},
+      extractedParameters: isObject(object.extractedParameters) ? globalThis.Object.entries(object.extractedParameters).reduce(
+        (acc, [key, value]) => {
+          acc[key] = globalThis.String(value);
+          return acc;
+        },
+        {}
+      ) : {},
       providerHash: isSet(object.providerHash) ? globalThis.String(object.providerHash) : ""
     };
   },
   toJSON(message) {
     const obj = {};
     if (message.extractedParameters) {
-      const entries = Object.entries(message.extractedParameters);
+      const entries = globalThis.Object.entries(message.extractedParameters);
       if (entries.length > 0) {
         obj.extractedParameters = {};
         entries.forEach(([k, v]) => {
@@ -428,15 +437,12 @@ var ClaimContext = {
   },
   fromPartial(object) {
     const message = createBaseClaimContext();
-    message.extractedParameters = Object.entries(object.extractedParameters ?? {}).reduce(
-      (acc, [key, value]) => {
-        if (value !== void 0) {
-          acc[key] = globalThis.String(value);
-        }
-        return acc;
-      },
-      {}
-    );
+    message.extractedParameters = globalThis.Object.entries(object.extractedParameters ?? {}).reduce((acc, [key, value]) => {
+      if (value !== void 0) {
+        acc[key] = globalThis.String(value);
+      }
+      return acc;
+    }, {});
     message.providerHash = object.providerHash ?? "";
     return message;
   }
@@ -456,7 +462,7 @@ var ClaimContext_ExtractedParametersEntry = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimContext_ExtractedParametersEntry();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -539,7 +545,7 @@ var ProviderClaimData = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseProviderClaimData();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -670,7 +676,7 @@ var ProviderClaimInfo = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseProviderClaimInfo();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -753,7 +759,7 @@ var ErrorData = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseErrorData();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -842,7 +848,7 @@ var CreateTunnelRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseCreateTunnelRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -943,7 +949,7 @@ var FetchCertificateBytesRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseFetchCertificateBytesRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -994,7 +1000,7 @@ var FetchCertificateBytesResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseFetchCertificateBytesResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1045,7 +1051,7 @@ var DisconnectTunnelRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseDisconnectTunnelRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1093,7 +1099,7 @@ var Empty = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseEmpty();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1136,7 +1142,7 @@ var TunnelMessage = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseTunnelMessage();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1204,7 +1210,7 @@ var TunnelDisconnectEvent = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseTunnelDisconnectEvent();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1272,7 +1278,7 @@ var MessageReveal = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseMessageReveal();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1343,7 +1349,7 @@ var MessageReveal_MessageRevealDirect = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseMessageReveal_MessageRevealDirect();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1429,7 +1435,7 @@ var MessageReveal_MessageRevealZk = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseMessageReveal_MessageRevealZk();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1518,7 +1524,7 @@ var MessageReveal_OPRFRawMarker = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseMessageReveal_OPRFRawMarker();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1583,7 +1589,7 @@ var MessageReveal_ZKProof = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseMessageReveal_ZKProof();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1678,7 +1684,7 @@ var MessageReveal_TOPRFProof = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseMessageReveal_TOPRFProof();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1761,7 +1767,7 @@ var TOPRFPayload = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseTOPRFPayload();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1841,7 +1847,7 @@ var DataSlice = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseDataSlice();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -1918,7 +1924,7 @@ var ClaimRequestData = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimRequestData();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2025,7 +2031,7 @@ var ClaimTeeBundleRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTeeBundleRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2102,7 +2108,7 @@ var ClaimTeeBundleRequest_Signatures = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTeeBundleRequest_Signatures();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2164,7 +2170,7 @@ var ClaimTeeBundleResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTeeBundleResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2259,7 +2265,7 @@ var ClaimTeeBundleResponse_Signatures = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTeeBundleResponse_Signatures();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2362,7 +2368,7 @@ var ClaimTunnelRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTunnelRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2487,7 +2493,7 @@ var ClaimTunnelRequest_Signatures = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTunnelRequest_Signatures();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2546,7 +2552,7 @@ var ClaimTunnelRequest_TranscriptMessage = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTunnelRequest_TranscriptMessage();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2632,7 +2638,7 @@ var ClaimTunnelResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTunnelResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2727,7 +2733,7 @@ var ClaimTunnelResponse_Signatures = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseClaimTunnelResponse_Signatures();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2810,7 +2816,7 @@ var RequestClaimOnAvsRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseRequestClaimOnAvsRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2893,7 +2899,7 @@ var RequestClaimOnAvsResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseRequestClaimOnAvsResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -2976,7 +2982,7 @@ var CompleteClaimOnAvsRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseCompleteClaimOnAvsRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3056,7 +3062,7 @@ var CompleteClaimOnAvsResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseCompleteClaimOnAvsResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3121,7 +3127,7 @@ var CreateTaskOnMechainRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseCreateTaskOnMechainRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3178,7 +3184,7 @@ var CreateTaskOnMechainResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseCreateTaskOnMechainResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3264,7 +3270,7 @@ var AuthenticatedUserData = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseAuthenticatedUserData();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3356,7 +3362,7 @@ var AuthenticationRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseAuthenticationRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3427,7 +3433,7 @@ var InitRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseInitRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3507,7 +3513,7 @@ var InitResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseInitResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3575,7 +3581,7 @@ var TOPRFRequest = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseTOPRFRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3654,7 +3660,7 @@ var TOPRFResponse = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseTOPRFResponse();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -3841,7 +3847,7 @@ var RPCMessage = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseRPCMessage();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -4182,7 +4188,7 @@ var RPCMessages = {
   },
   decode(input, length) {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
-    let end = length === void 0 ? reader.len : reader.pos + length;
+    const end = length === void 0 ? reader.len : reader.pos + length;
     const message = createBaseRPCMessages();
     while (reader.pos < end) {
       const tag = reader.uint32();
@@ -4278,7 +4284,7 @@ var DNS_SERVERS = [
   "8.8.4.4"
 ];
 var MAX_CLAIM_TIMESTAMP_DIFF_S = 10 * 60;
-var CURRENT_ATTESTOR_VERSION = AttestorVersion.ATTESTOR_VERSION_3_0_0;
+var CURRENT_ATTESTOR_VERSION = AttestorVersion.ATTESTOR_VERSION_3_1_0;
 var DEFAULT_METADATA = {
   signatureType: ServiceSignatureType.SERVICE_SIGNATURE_TYPE_ETH,
   clientVersion: CURRENT_ATTESTOR_VERSION,
@@ -4908,18 +4914,20 @@ function makeHttpResponseParser() {
     return line;
   }
 }
-function getHttpRequestDataFromTranscript(receipt) {
+function extractRequestBufferFromTranscript(receipt) {
   const clientMsgs = receipt.filter((s) => s.sender === "client");
   if (clientMsgs[0].message[0] === REDACTION_CHAR_CODE2) {
     throw new Error("First client message request is redacted. Cannot parse");
   }
+  return concatenateUint8Arrays2(clientMsgs.map((m) => m.message));
+}
+function getHttpRequestDataFromTranscript(requestBuffer) {
   const request = {
     method: "",
     url: "",
     protocol: "",
     headers: {}
   };
-  let requestBuffer = concatenateUint8Arrays2(clientMsgs.map((m) => m.message));
   for (let line = getLine(); typeof line !== "undefined"; line = getLine()) {
     if (line === "") {
       break;
@@ -5730,9 +5738,19 @@ function hashProviderParams(params) {
   const filteredParams = {
     url: params.url,
     method: params.method,
-    body: params.body,
-    responseMatches: params.responseMatches,
-    responseRedactions: params.responseRedactions
+    body: params.body ?? "",
+    responseMatches: params.responseMatches.map((it) => ({
+      value: it.value,
+      type: it.type,
+      // default undefined, even if false
+      invert: it.invert || void 0
+    })),
+    responseRedactions: params.responseRedactions?.map((it) => ({
+      xPath: it.xPath ?? "",
+      jsonPath: it.jsonPath ?? "",
+      regex: it.regex ?? "",
+      hash: it.hash || void 0
+    })) ?? []
   };
   const serializedParams = canonicalStringify(filteredParams);
   return keccak256(
@@ -6927,6 +6945,7 @@ function isValidProxySessionId(sessionId) {
 
 // src/providers/http/index.ts
 var OK_HTTP_HEADER = "HTTP/1.1 200";
+var MAX_REDACTIONS_IN_PATH = 96;
 var dateHeaderRegex = "[dD]ate: ((?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), (?:[0-3][0-9]) (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (?:[0-9]{4}) (?:[01][0-9]|2[0-3])(?::[0-5][0-9]){2} GMT)";
 var dateDiff = 1e3 * 60 * 10;
 var HTTP_PROVIDER = {
@@ -6982,8 +7001,8 @@ var HTTP_PROVIDER = {
     const httpReqHeaderStr = [
       reqLine,
       `Host: ${getHostHeaderString(url)}`,
-      `Content-Length: ${contentLength}`,
       "Connection: close",
+      `Content-Length: ${contentLength}`,
       //no compression
       "Accept-Encoding: identity",
       ...buildHeaders(pubHeaders),
@@ -7096,23 +7115,27 @@ var HTTP_PROVIDER = {
     redactions.sort((a, b) => a.toIndex - b.toIndex);
     return redactions;
   },
-  assertValidProviderReceipt({ receipt, params: paramsAny, logger: logger2, ctx }) {
+  assertValidProviderReceipt({ clientVersion, receipt, params: paramsAny, logger: logger2, ctx }) {
     logTranscript();
     let extractedParams = {};
     const secretParams = "secretParams" in paramsAny ? paramsAny.secretParams : void 0;
     const newParams = substituteParamValues(paramsAny, secretParams, !secretParams);
     const params = newParams.newParams;
     extractedParams = { ...extractedParams, ...newParams.extractedValues };
-    const req = getHttpRequestDataFromTranscript(receipt);
-    if (req.method !== params.method.toLowerCase()) {
-      throw new Error(`Invalid method: ${req.method}`);
-    }
     const url = new URL(params.url);
     const { protocol, pathname } = url;
     if (protocol !== "https:") {
       logger2.error("params URL: %s", params.url);
       throw new Error(`Expected protocol: https, found: ${protocol}`);
     }
+    const reqBuffer = extractRequestBufferFromTranscript(receipt);
+    if (clientVersion >= AttestorVersion.ATTESTOR_VERSION_3_1_0) {
+      assertNoSmuggle(reqBuffer, params);
+    }
+    const req = getHttpRequestDataFromTranscript(reqBuffer);
+    if (req.method !== params.method.toLowerCase()) {
+      throw new Error(`Invalid method: ${req.method}`);
+    }
     const searchParams = params.url.includes("?") ? params.url.split("?")[1] : "";
     const expectedPath = pathname.replaceAll("%7B", "{").replaceAll("%7D", "}") + (searchParams?.length ? "?" + searchParams : "");
     if (!matchRedactedStrings(strToUint8Array(expectedPath), strToUint8Array(req.url))) {
@@ -7227,10 +7250,34 @@ var HTTP_PROVIDER = {
       const serverMsgs = receipt.filter((s) => s.sender === "server").map((m) => m.message);
       const clientTranscript = encodeBase643(concatenateUint8Arrays6(clientMsgs));
       const serverTranscript = encodeBase643(concatenateUint8Arrays6(serverMsgs));
-      logger2.debug({ request: clientTranscript, response: serverTranscript, params: paramsAny });
+      logger2.debug({
+        requestBytes: clientTranscript.length,
+        responseBytes: serverTranscript.length
+      }, "http transcript captured");
     }
   }
 };
+function assertNoSmuggle(reqBuffer, params) {
+  const reqStr = uint8ArrayToBinaryStr2(reqBuffer);
+  const expRegex = makeRegex(
+    `^${params.method} (?<path>[^\\s]+) HTTP\\/1\\.1\\r\\nHost: ${getHostHeaderString(new URL(params.url))}\\r\\nConnection: close\\r\\n`
+  );
+  const rslt = expRegex.exec(reqStr);
+  if (!rslt?.groups?.path) {
+    throw new Error(
+      "Method/Host mismatch, or first 2 headers were not Host and Connection"
+    );
+  }
+  let redInPathCount = 0;
+  for (const char of rslt.groups.path) {
+    if (char === REDACTION_CHAR) {
+      redInPathCount++;
+    }
+  }
+  if (redInPathCount > MAX_REDACTIONS_IN_PATH) {
+    throw new Error(`Too many redactions in URL path: ${redInPathCount}`);
+  }
+}
 function shouldRevealCrlf({ version }) {
   return version >= AttestorVersion.ATTESTOR_VERSION_2_0_1;
 }
@@ -8141,6 +8188,7 @@ async function _createClaimOnAttestor({
       }
     }
     await provider.assertValidProviderReceipt({
+      clientVersion: client.metadata.clientVersion,
       receipt: revealedPackets,
       params: {
         ...params,
@@ -8281,6 +8329,7 @@ export {
   extractApplicationDataFromTranscript,
   extractArrayBufferFromWsData,
   extractHandshakeFromTranscript,
+  extractRequestBufferFromTranscript,
   findIndexInUint8Array,
   generateRpcMessageId,
   generateSessionId,

package/lib/proto/api.d.ts

@@ -40,6 +40,7 @@ export declare const AttestorVersion: {
     readonly ATTESTOR_VERSION_2_0_0: 3;
     readonly ATTESTOR_VERSION_2_0_1: 4;
     readonly ATTESTOR_VERSION_3_0_0: 5;
+    readonly ATTESTOR_VERSION_3_1_0: 6;
     readonly UNRECOGNIZED: -1;
 };
 export type AttestorVersion = typeof AttestorVersion[keyof typeof AttestorVersion];
@@ -50,6 +51,7 @@ export declare namespace AttestorVersion {
     type ATTESTOR_VERSION_2_0_0 = typeof AttestorVersion.ATTESTOR_VERSION_2_0_0;
     type ATTESTOR_VERSION_2_0_1 = typeof AttestorVersion.ATTESTOR_VERSION_2_0_1;
     type ATTESTOR_VERSION_3_0_0 = typeof AttestorVersion.ATTESTOR_VERSION_3_0_0;
+    type ATTESTOR_VERSION_3_1_0 = typeof AttestorVersion.ATTESTOR_VERSION_3_1_0;
     type UNRECOGNIZED = typeof AttestorVersion.UNRECOGNIZED;
 }
 export declare function attestorVersionFromJSON(object: any): AttestorVersion;

package/lib/server/tee/acme-http-server.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Ephemeral HTTP server that answers ACME HTTP-01 challenges. Started right
+ * before an order is placed and stopped as soon as the order is finalized,
+ * so the attestor does not keep port 80 bound during normal operation.
+ */
+export declare class AcmeChallengeServer {
+    private readonly tokens;
+    private server?;
+    add(token: string, keyAuthorization: string): void;
+    remove(token: string): void;
+    start(port: number): Promise<void>;
+    stop(): Promise<void>;
+}

package/lib/server/tee/attestation-generate.d.ts

@@ -0,0 +1,29 @@
+import type { AttestationReport } from '#src/proto/tee-bundle.ts';
+/**
+ * Requests a custom attestation token from the Confidential Space launcher
+ * over the unix domain socket. Mirrors reclaim-tee's shared/gcp_attestation.go.
+ */
+export declare function generateAttestationJwt(nonces: string[]): Promise<Uint8Array>;
+export interface AttestationContext {
+    attestorAddress: string;
+    tlsCertSha256Hex: () => string | undefined;
+}
+/**
+ * Starts the background attestation refresh loop. The first attestation is
+ * generated synchronously so getCachedAttestationJwt() is ready by the time
+ * the server begins handling claims.
+ */
+export declare function startAttestationRefresh(ctx: AttestationContext): Promise<void>;
+export declare function stopAttestationRefresh(): void;
+/**
+ * Returns the currently-cached attestation JWT bytes, or undefined if no
+ * attestation has been generated yet or the cache has expired without a
+ * successful refresh.
+ */
+export declare function getCachedAttestationJwt(): Uint8Array | undefined;
+/**
+ * Returns an AttestationReport ready to embed in a claim response, or
+ * undefined when no attestation is available (i.e. attestor is not running
+ * inside a TEE, or the refresh loop has not produced one yet).
+ */
+export declare function makeClaimAttestation(): AttestationReport | undefined;