@reclaimprotocol/attestor-core 5.0.5 → 5.0.7

package/lib/avs/client/create-claim-on-avs.d.ts

@@ -1,7 +1,7 @@
-import type { TaskCompletedEvent } from '#src/avs/contracts/ReclaimServiceManager.ts';
-import type { CreateClaimOnAvsOpts } from '#src/avs/types/index.ts';
-import type { ProviderClaimData } from '#src/proto/api.ts';
-import type { ProviderName } from '#src/types/index.ts';
+import type { TaskCompletedEvent } from '../../avs/contracts/ReclaimServiceManager.ts';
+import type { CreateClaimOnAvsOpts } from '../../avs/types/index.ts';
+import type { ProviderClaimData } from '../../proto/api.ts';
+import type { ProviderName } from '../../types/index.ts';
 /**
  * Creates a Reclaim claim on the AVS chain.
  */

package/lib/avs/config.d.ts

@@ -1,4 +1,4 @@
-import type { ChainConfig } from '#src/avs/types/index.ts';
+import type { ChainConfig } from '../avs/types/index.ts';
 export declare const CHAIN_CONFIGS: {
     [key: string]: ChainConfig;
 };

package/lib/avs/types/index.d.ts

@@ -1,7 +1,7 @@
-import type { NewTaskCreatedEvent } from '#src/avs/contracts/ReclaimServiceManager.ts';
-import type { createClaimOnAttestor } from '#src/client/index.ts';
-import type { ClaimTunnelResponse } from '#src/proto/api.ts';
-import type { CreateClaimOnAttestorOpts, ProofGenerationStep, ProviderName } from '#src/types/index.ts';
+import type { NewTaskCreatedEvent } from '../../avs/contracts/ReclaimServiceManager.ts';
+import type { createClaimOnAttestor } from '../../client/index.ts';
+import type { ClaimTunnelResponse } from '../../proto/api.ts';
+import type { CreateClaimOnAttestorOpts, ProofGenerationStep, ProviderName } from '../../types/index.ts';
 export type ChainConfig = {
     rpcUrl: string;
     /**

package/lib/avs/utils/contracts.d.ts

@@ -1,5 +1,5 @@
 import { Contract, JsonRpcProvider, Wallet } from 'ethers';
-import type { ChainConfig } from '#src/avs/types/index.ts';
+import type { ChainConfig } from '../../avs/types/index.ts';
 /**
  * get the contracts for the given chain ID
  */
@@ -7,7 +7,7 @@ export declare function getContracts(chainId?: string): {
     provider: JsonRpcProvider;
     wallet: Wallet | undefined;
     delegationManager: Contract;
-    contract: import("#src/avs/contracts/index.ts").ReclaimServiceManager;
+    contract: import("../../avs/contracts/index.ts").ReclaimServiceManager;
     registryContract: Contract;
     avsDirectory: Contract;
 };
@@ -15,7 +15,7 @@ export declare function initialiseContracts({ rpcUrl, stakeRegistryAddress, avsD
     provider: JsonRpcProvider;
     wallet: Wallet | undefined;
     delegationManager: Contract;
-    contract: import("#src/avs/contracts/index.ts").ReclaimServiceManager;
+    contract: import("../../avs/contracts/index.ts").ReclaimServiceManager;
     registryContract: Contract;
     avsDirectory: Contract;
 };

package/lib/avs/utils/register.d.ts

@@ -1,5 +1,5 @@
 import type { Wallet } from 'ethers';
-import { logger as LOGGER } from '#src/utils/index.ts';
+import { logger as LOGGER } from '../../utils/index.ts';
 type RegisterOpts = {
     logger?: typeof LOGGER;
     /**

package/lib/avs/utils/tasks.d.ts

@@ -1,5 +1,5 @@
 import { type Wallet } from 'ethers';
-import type { IReclaimServiceManager, NewTaskCreatedEvent } from '#src/avs/contracts/ReclaimServiceManager.ts';
+import type { IReclaimServiceManager, NewTaskCreatedEvent } from '../../avs/contracts/ReclaimServiceManager.ts';
 type CreateClaimWithoutOwner = Omit<IReclaimServiceManager.ClaimRequestStruct, 'owner'>;
 type CreateNewClaimRequestOnChainOpts = {
     request: CreateClaimWithoutOwner;

package/lib/client/create-claim.d.ts

@@ -1,5 +1,5 @@
-import type { CreateClaimOnAttestorOpts, ProviderName } from '#src/types/index.ts';
+import type { CreateClaimOnAttestorOpts, ProviderName } from '../types/index.ts';
 /**
  * Create a claim on the attestor
  */
-export declare function createClaimOnAttestor<N extends ProviderName>({ logger: _logger, maxRetries, ...opts }: CreateClaimOnAttestorOpts<N>): Promise<import("#src/proto/api.ts").ClaimTunnelResponse>;
+export declare function createClaimOnAttestor<N extends ProviderName>({ logger: _logger, maxRetries, ...opts }: CreateClaimOnAttestorOpts<N>): Promise<import("../proto/api.ts").ClaimTunnelResponse>;

package/lib/client/tunnels/make-rpc-tcp-tunnel.d.ts

@@ -1,5 +1,5 @@
-import type { CreateTunnelRequest } from '#src/proto/api.ts';
-import type { IAttestorClient, MakeTunnelFn } from '#src/types/index.ts';
+import type { CreateTunnelRequest } from '../../proto/api.ts';
+import type { IAttestorClient, MakeTunnelFn } from '../../types/index.ts';
 export type TCPTunnelCreateOpts = {
     /**
      * The tunnel ID to communicate with.

package/lib/client/tunnels/make-rpc-tls-tunnel.d.ts

@@ -1,7 +1,7 @@
 import type { TLSConnectionOptions } from '@reclaimprotocol/tls';
 import { makeTLSClient } from '@reclaimprotocol/tls';
-import type { CreateTunnelRequest, RPCMessage } from '#src/proto/api.ts';
-import type { CompleteTLSPacket, IAttestorClient, Logger, MakeTunnelFn, Transcript } from '#src/types/index.ts';
+import type { CreateTunnelRequest, RPCMessage } from '../../proto/api.ts';
+import type { CompleteTLSPacket, IAttestorClient, Logger, MakeTunnelFn, Transcript } from '../../types/index.ts';
 type ExtraTLSOptions = {
     request: Partial<CreateTunnelRequest>;
     logger: Logger;

package/lib/client/utils/attestor-pool.d.ts

@@ -1,4 +1,4 @@
-import type { IAttestorClient, IAttestorClientCreateOpts } from '#src/types/index.ts';
+import type { IAttestorClient, IAttestorClientCreateOpts } from '../../types/index.ts';
 /**
  * Get a attestor client from the pool,
  * if it doesn't exist, create one.

package/lib/client/utils/client-socket.d.ts

@@ -1,11 +1,11 @@
-import type { InitResponse } from '#src/proto/api.ts';
-import type { IAttestorClient, IAttestorClientCreateOpts, RPCRequestData, RPCResponseData, RPCType } from '#src/types/index.ts';
-import { AttestorSocket } from '#src/utils/socket-base.ts';
+import type { InitResponse } from '../../proto/api.ts';
+import type { IAttestorClient, IAttestorClientCreateOpts, RPCRequestData, RPCResponseData, RPCType } from '../../types/index.ts';
+import { AttestorSocket } from '../../utils/socket-base.ts';
 export declare class AttestorClient extends AttestorSocket implements IAttestorClient {
     private waitForInitPromise;
     initResponse?: InitResponse;
     constructor({ url, initMessages, signatureType, logger, authRequest, makeWebSocket }: IAttestorClientCreateOpts);
-    rpc<T extends RPCType>(type: T, request: Partial<RPCRequestData<T>>, timeoutMs?: number): Promise<Exclude<import("#src/proto/api.ts").RPCMessage[`${T}Response`], undefined>>;
+    rpc<T extends RPCType>(type: T, request: Partial<RPCRequestData<T>>, timeoutMs?: number): Promise<Exclude<import("../../proto/api.ts").RPCMessage[`${T}Response`], undefined>>;
     waitForResponse<T extends RPCType>(id: number, timeoutMs?: number): Promise<RPCResponseData<T>>;
     waitForInit: () => Promise<void>;
 }

package/lib/client/utils/message-handler.d.ts

@@ -1,4 +1,4 @@
-import type { RPCMessage } from '#src/proto/api.ts';
-import type { IAttestorSocket } from '#src/types/index.ts';
+import type { RPCMessage } from '../../proto/api.ts';
+import type { IAttestorSocket } from '../../types/index.ts';
 export declare function wsMessageHandler(this: IAttestorSocket, data: unknown): Promise<void>;
 export declare function handleMessage(this: IAttestorSocket, msg: RPCMessage): Promise<void> | undefined;

package/lib/config/index.d.ts

@@ -1,4 +1,4 @@
-import type { InitRequest } from '#src/proto/api.ts';
+import type { InitRequest } from '../proto/api.ts';
 export declare const DEFAULT_ZK_CONCURRENCY = 10;
 export declare const RECLAIM_USER_AGENT = "reclaim/0.0.1";
 export declare const DEFAULT_HTTPS_PORT = 443;

package/lib/external-rpc/handle-incoming-msg.d.ts

@@ -1,2 +1,2 @@
-import type { ExternalRPCIncomingMsg } from '#src/external-rpc/types.ts';
+import type { ExternalRPCIncomingMsg } from '../external-rpc/types.ts';
 export declare function handleIncomingMessage(data: string | ExternalRPCIncomingMsg): Promise<void>;

package/lib/external-rpc/index.js

@@ -7369,10 +7369,11 @@ function getZkResourcesBaseUrl() {
 
 // src/utils/claims.ts
 import canonicalize from "canonicalize";
-import { keccak256 } from "ethers";
+import { keccak256 as keccak2562 } from "ethers";
 
 // src/utils/signatures/eth.ts
-import { computeAddress, getBytes as getBytes2, hexlify, SigningKey, verifyMessage, Wallet as Wallet2 } from "ethers";
+import { computeAddress, getBytes as getBytes2, hexlify, keccak256, recoverAddress, SigningKey, toUtf8Bytes, Wallet as Wallet2 } from "ethers";
+var EIP191_PREFIX = toUtf8Bytes("Ethereum Signed Message:\n");
 var ETH_SIGNATURE_PROVIDER = {
   getPublicKey(privateKey) {
     const pub = SigningKey.computePublicKey(privateKey, true);
@@ -7384,13 +7385,13 @@ var ETH_SIGNATURE_PROVIDER = {
   },
   async sign(data, privateKey) {
     const wallet = getEthWallet(privateKey);
-    const signature = await wallet.signMessage(data);
-    return getBytes2(signature);
+    const sig = wallet.signingKey.sign(eip191Digest(data));
+    return getBytes2(sig.serialized);
   },
   async verify(data, signature, addressBytes) {
     const address = typeof addressBytes === "string" ? addressBytes : hexlify(addressBytes);
     const signatureHex = typeof signature === "string" ? signature : hexlify(signature);
-    const signerAddress = verifyMessage(data, signatureHex);
+    const signerAddress = recoverAddress(eip191Digest(data), signatureHex);
     return signerAddress.toLowerCase() === address.toLowerCase();
   }
 };
@@ -7400,6 +7401,17 @@ function getEthWallet(privateKey) {
   }
   return new Wallet2(privateKey);
 }
+function eip191Digest(data) {
+  const bytes = typeof data === "string" ? toUtf8Bytes(data) : data;
+  const lenBytes = toUtf8Bytes(String(bytes.length));
+  const merged = new Uint8Array(
+    EIP191_PREFIX.length + lenBytes.length + bytes.length
+  );
+  merged.set(EIP191_PREFIX, 0);
+  merged.set(lenBytes, EIP191_PREFIX.length);
+  merged.set(bytes, EIP191_PREFIX.length + lenBytes.length);
+  return keccak256(merged);
+}
 
 // src/utils/signatures/index.ts
 var SIGNATURES = {
@@ -7421,7 +7433,7 @@ function getIdentifierFromClaimInfo(info) {
   const str = `${info.provider}
 ${info.parameters}
 ${info.context || ""}`;
-  return keccak256(strToUint8Array(str)).toLowerCase();
+  return keccak2562(strToUint8Array(str)).toLowerCase();
 }
 function canonicalStringify(params) {
   if (!params) {
@@ -8665,7 +8677,8 @@ function isValidProxySessionId(sessionId) {
 
 // src/providers/http/index.ts
 var OK_HTTP_HEADER = "HTTP/1.1 200";
-var MAX_REDACTIONS_IN_PATH = 96;
+var MIN_INJECTION_STR = " HTTP/1.1\r\n\r\n";
+var MAX_REDACTIONS_IN_PATH = +(getEnvVariable("HTTP_MAX_REDACTIONS_IN_PATH") ?? MIN_INJECTION_STR.length - 1);
 var dateHeaderRegex = "[dD]ate: ((?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), (?:[0-3][0-9]) (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (?:[0-9]{4}) (?:[01][0-9]|2[0-3])(?::[0-5][0-9]){2} GMT)";
 var dateDiff = 1e3 * 60 * 10;
 var HTTP_PROVIDER = {
@@ -8849,7 +8862,11 @@ var HTTP_PROVIDER = {
       throw new Error(`Expected protocol: https, found: ${protocol}`);
     }
     const reqBuffer = extractRequestBufferFromTranscript(receipt);
-    if (clientVersion >= AttestorVersion.ATTESTOR_VERSION_3_1_0) {
+    if (
+      // 3.1.0 introduced a breaking change for request creation
+      // to prevent smuggling attacks
+      clientVersion >= AttestorVersion.ATTESTOR_VERSION_3_1_0 || getEnvVariable("ALLOW_OLDER_INSECURE_PROOFS") !== "1"
+    ) {
       assertNoSmuggle(reqBuffer, params);
     }
     const req = getHttpRequestDataFromTranscript(reqBuffer);

package/lib/external-rpc/jsc-polyfills/1.d.ts

@@ -1,4 +1,4 @@
-import type { ExternalRPCIncomingMsg, ExternalRPCOutgoingMsg } from '#src/external-rpc/types.ts';
+import type { ExternalRPCIncomingMsg, ExternalRPCOutgoingMsg } from '../../external-rpc/types.ts';
 declare global {
     function readline(): string;
     function print(...args: any[]): void;

package/lib/external-rpc/jsc-polyfills/index.d.ts

@@ -1,2 +1,2 @@
-import '#src/external-rpc/jsc-polyfills/1.ts';
-import '#src/external-rpc/jsc-polyfills/2.ts';
+import '../../external-rpc/jsc-polyfills/1.ts';
+import '../../external-rpc/jsc-polyfills/2.ts';

package/lib/external-rpc/setup-browser.d.ts

@@ -3,4 +3,4 @@
  * from React Native or other windows
  */
 export declare function setupWindowRpc(baseUrl?: string, channel?: string): void;
-export * from '#src/index.ts';
+export * from '../index.ts';

package/lib/external-rpc/setup-jsc.d.ts

@@ -1,5 +1,5 @@
-import '#src/external-rpc/jsc-polyfills/index.ts';
-import * as AttestorRPCImport from '#src/external-rpc/index.ts';
+import '../external-rpc/jsc-polyfills/index.ts';
+import * as AttestorRPCImport from '../external-rpc/index.ts';
 declare global {
     /**
      * `sendMessage` function should be provided by the host of the JS environment for sending messages to host

package/lib/external-rpc/types.d.ts

@@ -1,12 +1,12 @@
 import '#src/external-rpc/global.d.ts';
 import type { OPRFOperator, ZKEngine, ZKOperator } from '@reclaimprotocol/zk-symmetric-crypto';
-import type { TaskCompletedEvent } from '#src/avs/contracts/ReclaimServiceManager.ts';
-import type { CreateClaimOnAvsOpts, CreateClaimOnAvsStep } from '#src/avs/types/index.ts';
-import type { CreateClaimOnMechainStep } from '#src/mechain/types/index.ts';
-import type { AuthenticationRequest } from '#src/proto/api.ts';
-import type { extractHTMLElement, extractJSONValueIndex } from '#src/providers/http/utils.ts';
-import type { AttestorData, CompleteClaimData, CreateClaimOnAttestorOpts, LogLevel, ProofGenerationStep, ProviderName, ProviderParams, ProviderSecretParams } from '#src/types/index.ts';
-import type { HttpRequest, HttpResponse } from '#src/utils/index.ts';
+import type { TaskCompletedEvent } from '../avs/contracts/ReclaimServiceManager.ts';
+import type { CreateClaimOnAvsOpts, CreateClaimOnAvsStep } from '../avs/types/index.ts';
+import type { CreateClaimOnMechainStep } from '../mechain/types/index.ts';
+import type { AuthenticationRequest } from '../proto/api.ts';
+import type { extractHTMLElement, extractJSONValueIndex } from '../providers/http/utils.ts';
+import type { AttestorData, CompleteClaimData, CreateClaimOnAttestorOpts, LogLevel, ProofGenerationStep, ProviderName, ProviderParams, ProviderSecretParams } from '../types/index.ts';
+import type { HttpRequest, HttpResponse } from '../utils/index.ts';
 type IdentifiedMessage = {
     id: string;
 };

package/lib/external-rpc/utils.d.ts

@@ -1,5 +1,5 @@
-import { EventBus } from '#src/external-rpc/event-bus.ts';
-import type { ExternalRPCAppClient, ExternalRPCIncomingMsg, ExternalRPCOutgoingMsg, ExternalRPCRequest, ExternalRPCResponse } from '#src/external-rpc/types.ts';
+import { EventBus } from '../external-rpc/event-bus.ts';
+import type { ExternalRPCAppClient, ExternalRPCIncomingMsg, ExternalRPCOutgoingMsg, ExternalRPCRequest, ExternalRPCResponse } from '../external-rpc/types.ts';
 export declare const RPC_MSG_BRIDGE: EventBus<ExternalRPCIncomingMsg>;
 export declare function getCurrentMemoryUsage(): Promise<{
     available: boolean;

package/lib/index.js

@@ -5630,10 +5630,11 @@ function getZkResourcesBaseUrl() {
 
 // src/utils/claims.ts
 import canonicalize from "canonicalize";
-import { keccak256 } from "ethers";
+import { keccak256 as keccak2562 } from "ethers";
 
 // src/utils/signatures/eth.ts
-import { computeAddress, getBytes, hexlify, SigningKey, verifyMessage, Wallet } from "ethers";
+import { computeAddress, getBytes, hexlify, keccak256, recoverAddress, SigningKey, toUtf8Bytes, Wallet } from "ethers";
+var EIP191_PREFIX = toUtf8Bytes("Ethereum Signed Message:\n");
 var ETH_SIGNATURE_PROVIDER = {
   getPublicKey(privateKey) {
     const pub = SigningKey.computePublicKey(privateKey, true);
@@ -5645,13 +5646,13 @@ var ETH_SIGNATURE_PROVIDER = {
   },
   async sign(data, privateKey) {
     const wallet = getEthWallet(privateKey);
-    const signature = await wallet.signMessage(data);
-    return getBytes(signature);
+    const sig = wallet.signingKey.sign(eip191Digest(data));
+    return getBytes(sig.serialized);
   },
   async verify(data, signature, addressBytes) {
     const address = typeof addressBytes === "string" ? addressBytes : hexlify(addressBytes);
     const signatureHex = typeof signature === "string" ? signature : hexlify(signature);
-    const signerAddress = verifyMessage(data, signatureHex);
+    const signerAddress = recoverAddress(eip191Digest(data), signatureHex);
     return signerAddress.toLowerCase() === address.toLowerCase();
   }
 };
@@ -5661,6 +5662,17 @@ function getEthWallet(privateKey) {
   }
   return new Wallet(privateKey);
 }
+function eip191Digest(data) {
+  const bytes = typeof data === "string" ? toUtf8Bytes(data) : data;
+  const lenBytes = toUtf8Bytes(String(bytes.length));
+  const merged = new Uint8Array(
+    EIP191_PREFIX.length + lenBytes.length + bytes.length
+  );
+  merged.set(EIP191_PREFIX, 0);
+  merged.set(lenBytes, EIP191_PREFIX.length);
+  merged.set(bytes, EIP191_PREFIX.length + lenBytes.length);
+  return keccak256(merged);
+}
 
 // src/utils/signatures/index.ts
 var SIGNATURES = {
@@ -5726,7 +5738,7 @@ function getIdentifierFromClaimInfo(info) {
   const str = `${info.provider}
 ${info.parameters}
 ${info.context || ""}`;
-  return keccak256(strToUint8Array(str)).toLowerCase();
+  return keccak2562(strToUint8Array(str)).toLowerCase();
 }
 function canonicalStringify(params) {
   if (!params) {
@@ -5753,7 +5765,7 @@ function hashProviderParams(params) {
     })) ?? []
   };
   const serializedParams = canonicalStringify(filteredParams);
-  return keccak256(
+  return keccak2562(
     strToUint8Array(serializedParams)
   ).toLowerCase();
 }
@@ -6945,7 +6957,8 @@ function isValidProxySessionId(sessionId) {
 
 // src/providers/http/index.ts
 var OK_HTTP_HEADER = "HTTP/1.1 200";
-var MAX_REDACTIONS_IN_PATH = 96;
+var MIN_INJECTION_STR = " HTTP/1.1\r\n\r\n";
+var MAX_REDACTIONS_IN_PATH = +(getEnvVariable("HTTP_MAX_REDACTIONS_IN_PATH") ?? MIN_INJECTION_STR.length - 1);
 var dateHeaderRegex = "[dD]ate: ((?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), (?:[0-3][0-9]) (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (?:[0-9]{4}) (?:[01][0-9]|2[0-3])(?::[0-5][0-9]){2} GMT)";
 var dateDiff = 1e3 * 60 * 10;
 var HTTP_PROVIDER = {
@@ -7129,7 +7142,11 @@ var HTTP_PROVIDER = {
       throw new Error(`Expected protocol: https, found: ${protocol}`);
     }
     const reqBuffer = extractRequestBufferFromTranscript(receipt);
-    if (clientVersion >= AttestorVersion.ATTESTOR_VERSION_3_1_0) {
+    if (
+      // 3.1.0 introduced a breaking change for request creation
+      // to prevent smuggling attacks
+      clientVersion >= AttestorVersion.ATTESTOR_VERSION_3_1_0 || getEnvVariable("ALLOW_OLDER_INSECURE_PROOFS") !== "1"
+    ) {
       assertNoSmuggle(reqBuffer, params);
     }
     const req = getHttpRequestDataFromTranscript(reqBuffer);

package/lib/mechain/client/create-claim-on-mechain.d.ts

@@ -1,6 +1,6 @@
-import type { CreateClaimOnMechainOpts } from '#src/mechain/types/index.ts';
-import type { ClaimTunnelResponse } from '#src/proto/api.ts';
-import type { ProviderName } from '#src/types/index.ts';
+import type { CreateClaimOnMechainOpts } from '../../mechain/types/index.ts';
+import type { ClaimTunnelResponse } from '../../proto/api.ts';
+import type { ProviderName } from '../../types/index.ts';
 /**
  * Creates a Reclaim claim on the AVS chain.
  */

package/lib/mechain/types/index.d.ts

@@ -1,5 +1,5 @@
-import type { createClaimOnAttestor } from '#src/client/index.ts';
-import type { CreateClaimOnAttestorOpts, ProviderName } from '#src/types/index.ts';
+import type { createClaimOnAttestor } from '../../client/index.ts';
+import type { CreateClaimOnAttestorOpts, ProviderName } from '../../types/index.ts';
 export type CreateClaimOnMechainStep = {
     type: 'taskRequested';
     timestamp: number;

package/lib/providers/http/index.d.ts

@@ -1,4 +1,4 @@
-import type { Provider, ProviderParams, ProviderSecretParams } from '#src/types/index.ts';
+import type { Provider, ProviderParams, ProviderSecretParams } from '../../types/index.ts';
 type HTTPProviderParams = ProviderParams<'http'>;
 declare const HTTP_PROVIDER: Provider<'http'>;
 export declare function substituteParamValues(currentParams: HTTPProviderParams, secretParams?: ProviderSecretParams<'http'>, ignoreMissingParams?: boolean): {

package/lib/providers/http/utils.d.ts

@@ -1,7 +1,7 @@
-import '#src/providers/http/patch-parse5-tree.ts';
+import '../../providers/http/patch-parse5-tree.ts';
 import RE2 from 're2';
-import type { ArraySlice, CompleteTLSPacket, ProviderParams, Transcript } from '#src/types/index.ts';
-import type { HttpRequest, HttpResponse } from '#src/utils/index.ts';
+import type { ArraySlice, CompleteTLSPacket, ProviderParams, Transcript } from '../../types/index.ts';
+import type { HttpRequest, HttpResponse } from '../../utils/index.ts';
 export type JSONIndex = {
     start: number;
     end: number;

package/lib/providers/index.d.ts

@@ -1,4 +1,4 @@
-import type { Provider, ProviderName } from '#src/types/index.ts';
+import type { Provider, ProviderName } from '../types/index.ts';
 export declare const providers: {
     [T in ProviderName]: Provider<T>;
 };

package/lib/scripts/generate-receipt.d.ts

@@ -1,5 +1,5 @@
-import '#src/server/utils/config-env.ts';
-import type { ProviderName, ProviderParams, ProviderSecretParams } from '#src/index.ts';
+import '../server/utils/config-env.ts';
+import type { ProviderName, ProviderParams, ProviderSecretParams } from '../index.ts';
 type ProviderReceiptGenerationParams<P extends ProviderName> = {
     name: P;
     params: ProviderParams<P>;

package/lib/scripts/jsc-cli-rpc.d.ts

@@ -1 +1 @@
-import '#src/external-rpc/jsc-polyfills/index.ts';
+import '../external-rpc/jsc-polyfills/index.ts';

package/lib/scripts/start-server.d.ts

@@ -1 +1 @@
-import '#src/server/utils/config-env.ts';
+import '../server/utils/config-env.ts';

package/lib/server/handlers/claimTeeBundle.d.ts

@@ -2,5 +2,5 @@
  * TEE Bundle Claim Handler
  * Handles ClaimTeeBundleRequest by verifying TEE attestations and reconstructing TLS transcript
  */
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const claimTeeBundle: RPCHandler<'claimTeeBundle'>;

package/lib/server/handlers/claimTunnel.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const claimTunnel: RPCHandler<'claimTunnel'>;

package/lib/server/handlers/completeClaimOnChain.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const completeClaimOnChain: RPCHandler<'completeClaimOnChain'>;

package/lib/server/handlers/createClaimOnChain.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const createClaimOnChain: RPCHandler<'createClaimOnChain'>;

package/lib/server/handlers/createTaskOnMechain.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const createTaskOnMechain: RPCHandler<'createTaskOnMechain'>;

package/lib/server/handlers/createTunnel.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const createTunnel: RPCHandler<'createTunnel'>;

package/lib/server/handlers/disconnectTunnel.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const disconnectTunnel: RPCHandler<'disconnectTunnel'>;

package/lib/server/handlers/fetchCertificateBytes.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/handlers.ts';
+import type { RPCHandler } from '../../types/handlers.ts';
 export declare const fetchCertificateBytes: RPCHandler<'fetchCertificateBytes'>;

package/lib/server/handlers/index.d.ts

@@ -1,4 +1,4 @@
-import type { RPCHandler, RPCType } from '#src/types/index.ts';
+import type { RPCHandler, RPCType } from '../../types/index.ts';
 export declare const HANDLERS: {
     [T in RPCType]: RPCHandler<T>;
 };

package/lib/server/handlers/init.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const init: RPCHandler<'init'>;

package/lib/server/handlers/toprf.d.ts

@@ -1,2 +1,2 @@
-import type { RPCHandler } from '#src/types/index.ts';
+import type { RPCHandler } from '../../types/index.ts';
 export declare const toprf: RPCHandler<'toprf'>;

package/lib/server/socket.d.ts

@@ -1,13 +1,13 @@
 import type { WebSocket as WS } from 'ws';
-import type { TunnelMessage } from '#src/proto/api.ts';
-import type { AcceptNewConnectionOpts, BGPListener, IAttestorServerSocket } from '#src/types/index.ts';
-import { AttestorSocket } from '#src/utils/socket-base.ts';
+import type { TunnelMessage } from '../proto/api.ts';
+import type { AcceptNewConnectionOpts, BGPListener, IAttestorServerSocket } from '../types/index.ts';
+import { AttestorSocket } from '../utils/socket-base.ts';
 export declare class AttestorServerSocket extends AttestorSocket implements IAttestorServerSocket {
     tunnels: IAttestorServerSocket['tunnels'];
     readonly sessionId: number;
     readonly bgpListener: BGPListener | undefined;
     private constructor();
-    getTunnel(tunnelId: number): import("#src/types/index.ts").Tunnel<import("#src/types/index.ts").TCPSocketProperties>;
+    getTunnel(tunnelId: number): import("../types/index.ts").Tunnel<import("../types/index.ts").TCPSocketProperties>;
     removeTunnel(tunnelId: TunnelMessage['tunnelId']): void;
     static acceptConnection(socket: WS, { req, logger, bgpListener }: AcceptNewConnectionOpts): Promise<AttestorServerSocket | undefined>;
 }

package/lib/server/tunnels/make-tcp-tunnel.d.ts

@@ -1,6 +1,6 @@
-import type { CreateTunnelRequest } from '#src/proto/api.ts';
-import type { Logger } from '#src/types/index.ts';
-import type { MakeTunnelFn, TCPSocketProperties } from '#src/types/index.ts';
+import type { CreateTunnelRequest } from '../../proto/api.ts';
+import type { Logger } from '../../types/index.ts';
+import type { MakeTunnelFn, TCPSocketProperties } from '../../types/index.ts';
 type ExtraOpts = Omit<CreateTunnelRequest, 'id' | 'initialMessage'> & {
     logger: Logger;
 };

package/lib/server/utils/assert-valid-claim-request.d.ts

@@ -1,7 +1,7 @@
 import type { ZKEngine } from '@reclaimprotocol/zk-symmetric-crypto';
-import type { InitRequest, ProviderClaimInfo } from '#src/proto/api.ts';
-import { ClaimTunnelRequest } from '#src/proto/api.ts';
-import type { IDecryptedTranscript, Logger, OPRFRawReplacement, ProviderCtx, TCPSocketProperties, Transcript } from '#src/types/index.ts';
+import type { InitRequest, ProviderClaimInfo } from '../../proto/api.ts';
+import { ClaimTunnelRequest } from '../../proto/api.ts';
+import type { IDecryptedTranscript, Logger, OPRFRawReplacement, ProviderCtx, TCPSocketProperties, Transcript } from '../../types/index.ts';
 /**
  * Asserts that the claim request is valid.
  *
@@ -15,7 +15,7 @@ import type { IDecryptedTranscript, Logger, OPRFRawReplacement, ProviderCtx, TCP
  *
  * If any of these steps fail, we throw an error.
  */
-export declare function assertValidClaimRequest(request: ClaimTunnelRequest, metadata: InitRequest, logger: Logger): Promise<import("#src/proto/api.ts").ClaimRequestData>;
+export declare function assertValidClaimRequest(request: ClaimTunnelRequest, metadata: InitRequest, logger: Logger): Promise<import("../../proto/api.ts").ClaimRequestData>;
 /**
  * Verify that the transcript contains a valid claim
  * for the provider.

package/lib/server/utils/gcp-attestation.d.ts

@@ -2,7 +2,7 @@
  * GCP attestation validation utilities
  * Validates JWT tokens from Google Confidential Computing
  */
-import type { Logger } from '#src/types/general.ts';
+import type { Logger } from '../../types/general.ts';
 export interface GcpValidationResult {
     isValid: boolean;
     errors: string[];

package/lib/server/utils/generics.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage } from 'http';
-import type { ServiceSignatureType } from '#src/proto/api.ts';
+import type { ServiceSignatureType } from '../../proto/api.ts';
 /**
  * Sign message using the PRIVATE_KEY env var.
  */
@@ -19,5 +19,11 @@ export declare function niceParseJsonObject(data: string, key: string): any;
  * Extract any initial messages sent via the query string,
  * in the `messages` parameter.
  */
-export declare function getInitialMessagesFromQuery(req: IncomingMessage): import("#src/proto/api.ts").RPCMessage[];
+export declare function getInitialMessagesFromQuery(req: IncomingMessage): import("../../proto/api.ts").RPCMessage[];
 export declare function getPublicAddresses(host: string): Promise<string[]>;
+/**
+ * Match a host against a whitelist pattern. Patterns may be an exact
+ * hostname or a leading-wildcard form like `*.example.com`, which matches
+ * the apex and any subdomain depth. Comparison is case-insensitive.
+ */
+export declare function matchesHostPattern(pattern: string, host: string): boolean;

package/lib/server/utils/oprf-raw.d.ts

@@ -1,5 +1,5 @@
-import type { MessageReveal_OPRFRawMarker as OPRFRawMarker } from '#src/proto/api.ts';
-import type { Logger } from '#src/types/index.ts';
+import type { MessageReveal_OPRFRawMarker as OPRFRawMarker } from '../../proto/api.ts';
+import type { Logger } from '../../types/index.ts';
 export type OPRFRawResult = {
     /** Location of the data that was OPRF'd */
     dataLocation: {

package/lib/server/utils/process-handshake.d.ts

@@ -1,5 +1,5 @@
-import type { ClaimTunnelRequest } from '#src/proto/api.ts';
-import type { Logger } from '#src/types/index.ts';
+import type { ClaimTunnelRequest } from '../../proto/api.ts';
+import type { Logger } from '../../types/index.ts';
 /**
  * Verifies server cert chain and removes handshake messages from transcript
  * @param receipt