@reclaimprotocol/js-sdk 5.4.0 → 5.4.2-dev.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -51,6 +51,22 @@ interface ExtensionMessage {
51
51
  interface WitnessData {
52
52
  id: string;
53
53
  url: string;
54
+ claimAttestation?: AttestorClaimAttestation;
55
+ }
56
+ /**
57
+ * Attestation produced by an attestor running inside a Trusted Execution
58
+ * Environment. Binds the attestor's signing key (and its signature over
59
+ * the claim) to a hardware-backed enclave identity.
60
+ *
61
+ * Verified by `runAttestorTeeVerification`.
62
+ */
63
+ interface AttestorClaimAttestation {
64
+ /** ETH address of the attestor whose enclave produced the attestation. Matches `WitnessData.id`. */
65
+ attestor_address: string;
66
+ /** Attestor signature over the claim. Must equal the corresponding entry in `Proof.signatures`. */
67
+ claim_signature: string;
68
+ /** Raw attestation report. For GCP Confidential Space, a JWT (header.payload.signature). */
69
+ attestation_report: string;
54
70
  }
55
71
  interface ProviderClaimData {
56
72
  provider: string;
@@ -299,6 +315,59 @@ interface ResponseRedactionSpec {
299
315
  xPath: string;
300
316
  }
301
317
 
318
+ /**
319
+ * Result of verifying an attestor TEE attestation.
320
+ */
321
+ type AttestorTeeVerificationResult = {
322
+ isVerified: boolean;
323
+ error?: string;
324
+ /** sha256 image digest of the attestor container, on success. */
325
+ imageDigest?: string;
326
+ };
327
+ /**
328
+ * Validates a GCP Confidential Space attestation JWT produced by an
329
+ * attestor running in a Confidential Space VM, and asserts that the
330
+ * attestation binds to the given attestor address.
331
+ *
332
+ * The attestor (running inside the TEE) calls the Confidential Space
333
+ * launcher's attestation endpoint with two nonces:
334
+ * - `attestor_public_key:<eth-address>` - binds to the signing key.
335
+ * - `attestor_cert_hash:<sha256-hex>` - binds to the live TLS cert.
336
+ *
337
+ * This function only verifies the public-key nonce. The TLS cert hash
338
+ * binding is informational and not checked here. Callers that need to
339
+ * pin to a specific attestor image should compare the returned
340
+ * `imageDigest` against a known-good value.
341
+ *
342
+ * The JWT signature is verified by walking the x5c certificate chain
343
+ * to a pinned GCP Confidential Space Root CA. No outbound network
344
+ * calls are made.
345
+ *
346
+ * Node-only (uses node:crypto). Mirrors the environment restriction in
347
+ * the existing `verifyTeeAttestation` helper.
348
+ *
349
+ * @param report - the raw JWT string (header.payload.signature).
350
+ * @param expectedAttestorAddress - hex ETH address (0x-prefixed or
351
+ * unprefixed) that the attestation should be bound to.
352
+ */
353
+ declare function verifyAttestorTeeAttestation(report: string, expectedAttestorAddress: string): Promise<AttestorTeeVerificationResult>;
354
+ /**
355
+ * Configuration for verifying the attestor's TEE attestation on each
356
+ * witness of the proof.
357
+ */
358
+ type AttestorTeeAttestationConfig = {
359
+ /**
360
+ * Optional allowlist of expected attestor container image digests
361
+ * (e.g. `"sha256:4906340f..."`). When provided, the attestation's
362
+ * `submods.container.image_digest` must be in this list.
363
+ *
364
+ * Leave undefined to skip image pinning and rely solely on the JWT
365
+ * chain rooting to the GCP Confidential Space Root CA + nonce
366
+ * binding to the attestor address.
367
+ */
368
+ expectedImageDigests?: string[];
369
+ };
370
+
302
371
  /**
303
372
  * Content validation configuration specifying essential required hashes and optional extra proofs.
304
373
  * Used to explicitly validate that a generated proof matches the exact request structure expected.
@@ -370,16 +439,37 @@ type TeeAttestationConfig = {
370
439
  */
371
440
  appSecret: string;
372
441
  };
373
- type VerificationConfig = ValidationConfig & {
442
+ type VerifyAttestationConfig = {
374
443
  /**
375
- * TEE attestation verification configuration.
376
- * When provided, verifies the TEE attestation included in the proof.
377
- * The result will include `isTeeAttestationVerified` and `isVerified` will be false
378
- * if TEE attestation data is missing or verification fails.
379
- */
444
+ * TEE attestation verification configuration.
445
+ * When provided, verifies the TEE attestation included in the proof.
446
+ * The result will include `isTeeAttestationVerified` and `isVerified` will be false
447
+ * if TEE attestation data is missing or verification fails.
448
+ */
380
449
  teeAttestation?: TeeAttestationConfig;
450
+ /**
451
+ * Attestor TEE attestation verification configuration.
452
+ * When provided, verifies that every witness on every proof has a valid
453
+ * `claimAttestation` from an attestor running inside a TEE (GCP
454
+ * Confidential Space).
455
+ *
456
+ * Independent of `teeAttestation`, which verifies the verifier-app's
457
+ * own TEE attestation. Both can be enabled together.
458
+ *
459
+ * The result will include `isAttestorTeeAttestationVerified` and
460
+ * `isVerified` will be false if any witness is missing TEE attestation
461
+ * data or its verification fails.
462
+ */
463
+ attestorTeeAttestation?: AttestorTeeAttestationConfig;
381
464
  };
382
- declare function assertValidProofsByHash(proofs: Proof[], config: ProviderHashRequirementsConfig): void;
465
+ type PiiVerificationConfig = {
466
+ hasNoPii?: true;
467
+ };
468
+ type VerificationConfig = ValidationConfig & VerifyAttestationConfig & PiiVerificationConfig;
469
+ declare const HASH_REQUIRED_DEFAULT = true;
470
+ declare const HASH_MATCH_MULTIPLE_DEFAULT = true;
471
+ declare function getHashFromProof(proof: Proof, piiConfig?: PiiVerificationConfig): string[];
472
+ declare function assertValidProofsByHash(proofs: Proof[], config: ProviderHashRequirementsConfig, piiConfig?: PiiVerificationConfig): void;
383
473
  declare function isHttpProviderClaimParams(claimParams: unknown): claimParams is HttpProviderClaimParams;
384
474
  declare function getHttpProviderClaimParamsFromProof(proof: Proof): HttpProviderClaimParams;
385
475
  /**
@@ -388,7 +478,7 @@ declare function getHttpProviderClaimParamsFromProof(proof: Proof): HttpProvider
388
478
  * @param config - The validation config
389
479
  * @throws {ProofNotValidatedError} When the proof is not validated
390
480
  */
391
- declare function assertValidateProof(proofs: Proof[], config: VerificationConfig): Promise<void>;
481
+ declare function assertValidateProof(proofs: Proof[], config: VerificationConfig, piiConfig?: PiiVerificationConfig): Promise<void>;
392
482
 
393
483
  type ClaimID = ProviderClaimData['identifier'];
394
484
  type ClaimInfo = Pick<ProviderClaimData, 'context' | 'provider' | 'parameters'>;
@@ -703,6 +793,7 @@ type TrustedData = {
703
793
  type VerifyProofResultSuccess = {
704
794
  isVerified: true;
705
795
  isTeeAttestationVerified?: boolean;
796
+ isAttestorTeeAttestationVerified?: boolean;
706
797
  error: undefined;
707
798
  data: TrustedData[];
708
799
  publicData: any[];
@@ -710,6 +801,7 @@ type VerifyProofResultSuccess = {
710
801
  type VerifyProofResultFailure = {
711
802
  isVerified: false;
712
803
  isTeeAttestationVerified?: boolean;
804
+ isAttestorTeeAttestationVerified?: boolean;
713
805
  error: Error;
714
806
  data: [];
715
807
  publicData: [];
@@ -1593,6 +1685,383 @@ declare function verifyTeeAttestation(proof: Proof, appSecret: string): Promise<
1593
1685
  */
1594
1686
  declare function runTeeVerification(proofs: Proof[], config: TeeAttestationConfig): Promise<void>;
1595
1687
 
1688
+ declare const TimeoutError: {
1689
+ new (message?: string, innerError?: unknown | undefined): {
1690
+ innerError?: unknown | undefined;
1691
+ name: string;
1692
+ message: string;
1693
+ stack?: string;
1694
+ cause?: unknown;
1695
+ };
1696
+ isError(error: unknown): error is Error;
1697
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1698
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1699
+ stackTraceLimit: number;
1700
+ };
1701
+ declare const ProofNotVerifiedError: {
1702
+ new (message?: string, innerError?: unknown | undefined): {
1703
+ innerError?: unknown | undefined;
1704
+ name: string;
1705
+ message: string;
1706
+ stack?: string;
1707
+ cause?: unknown;
1708
+ };
1709
+ isError(error: unknown): error is Error;
1710
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1711
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1712
+ stackTraceLimit: number;
1713
+ };
1714
+ declare const ProofNotValidatedError: {
1715
+ new (message?: string, innerError?: unknown | undefined): {
1716
+ innerError?: unknown | undefined;
1717
+ name: string;
1718
+ message: string;
1719
+ stack?: string;
1720
+ cause?: unknown;
1721
+ };
1722
+ isError(error: unknown): error is Error;
1723
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1724
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1725
+ stackTraceLimit: number;
1726
+ };
1727
+ declare const InvalidRequestSpecError: {
1728
+ new (message?: string, innerError?: unknown | undefined): {
1729
+ innerError?: unknown | undefined;
1730
+ name: string;
1731
+ message: string;
1732
+ stack?: string;
1733
+ cause?: unknown;
1734
+ };
1735
+ isError(error: unknown): error is Error;
1736
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1737
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1738
+ stackTraceLimit: number;
1739
+ };
1740
+ declare const UnknownProofsNotValidatedError: {
1741
+ new (message?: string, innerError?: unknown | undefined): {
1742
+ innerError?: unknown | undefined;
1743
+ name: string;
1744
+ message: string;
1745
+ stack?: string;
1746
+ cause?: unknown;
1747
+ };
1748
+ isError(error: unknown): error is Error;
1749
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1750
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1751
+ stackTraceLimit: number;
1752
+ };
1753
+ declare const SessionNotStartedError: {
1754
+ new (message?: string, innerError?: unknown | undefined): {
1755
+ innerError?: unknown | undefined;
1756
+ name: string;
1757
+ message: string;
1758
+ stack?: string;
1759
+ cause?: unknown;
1760
+ };
1761
+ isError(error: unknown): error is Error;
1762
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1763
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1764
+ stackTraceLimit: number;
1765
+ };
1766
+ declare const ProviderNotFoundError: {
1767
+ new (message?: string, innerError?: unknown | undefined): {
1768
+ innerError?: unknown | undefined;
1769
+ name: string;
1770
+ message: string;
1771
+ stack?: string;
1772
+ cause?: unknown;
1773
+ };
1774
+ isError(error: unknown): error is Error;
1775
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1776
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1777
+ stackTraceLimit: number;
1778
+ };
1779
+ declare const SignatureGeneratingError: {
1780
+ new (message?: string, innerError?: unknown | undefined): {
1781
+ innerError?: unknown | undefined;
1782
+ name: string;
1783
+ message: string;
1784
+ stack?: string;
1785
+ cause?: unknown;
1786
+ };
1787
+ isError(error: unknown): error is Error;
1788
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1789
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1790
+ stackTraceLimit: number;
1791
+ };
1792
+ declare const SignatureNotFoundError: {
1793
+ new (message?: string, innerError?: unknown | undefined): {
1794
+ innerError?: unknown | undefined;
1795
+ name: string;
1796
+ message: string;
1797
+ stack?: string;
1798
+ cause?: unknown;
1799
+ };
1800
+ isError(error: unknown): error is Error;
1801
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1802
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1803
+ stackTraceLimit: number;
1804
+ };
1805
+ declare const InvalidSignatureError: {
1806
+ new (message?: string, innerError?: unknown | undefined): {
1807
+ innerError?: unknown | undefined;
1808
+ name: string;
1809
+ message: string;
1810
+ stack?: string;
1811
+ cause?: unknown;
1812
+ };
1813
+ isError(error: unknown): error is Error;
1814
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1815
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1816
+ stackTraceLimit: number;
1817
+ };
1818
+ declare const UpdateSessionError: {
1819
+ new (message?: string, innerError?: unknown | undefined): {
1820
+ innerError?: unknown | undefined;
1821
+ name: string;
1822
+ message: string;
1823
+ stack?: string;
1824
+ cause?: unknown;
1825
+ };
1826
+ isError(error: unknown): error is Error;
1827
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1828
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1829
+ stackTraceLimit: number;
1830
+ };
1831
+ declare const InitSessionError: {
1832
+ new (message?: string, innerError?: unknown | undefined): {
1833
+ innerError?: unknown | undefined;
1834
+ name: string;
1835
+ message: string;
1836
+ stack?: string;
1837
+ cause?: unknown;
1838
+ };
1839
+ isError(error: unknown): error is Error;
1840
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1841
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1842
+ stackTraceLimit: number;
1843
+ };
1844
+ declare const ProviderFailedError: {
1845
+ new (message?: string, innerError?: unknown | undefined): {
1846
+ innerError?: unknown | undefined;
1847
+ name: string;
1848
+ message: string;
1849
+ stack?: string;
1850
+ cause?: unknown;
1851
+ };
1852
+ isError(error: unknown): error is Error;
1853
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1854
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1855
+ stackTraceLimit: number;
1856
+ };
1857
+ declare const InvalidParamError: {
1858
+ new (message?: string, innerError?: unknown | undefined): {
1859
+ innerError?: unknown | undefined;
1860
+ name: string;
1861
+ message: string;
1862
+ stack?: string;
1863
+ cause?: unknown;
1864
+ };
1865
+ isError(error: unknown): error is Error;
1866
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1867
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1868
+ stackTraceLimit: number;
1869
+ };
1870
+ declare const ApplicationError: {
1871
+ new (message?: string, innerError?: unknown | undefined): {
1872
+ innerError?: unknown | undefined;
1873
+ name: string;
1874
+ message: string;
1875
+ stack?: string;
1876
+ cause?: unknown;
1877
+ };
1878
+ isError(error: unknown): error is Error;
1879
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1880
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1881
+ stackTraceLimit: number;
1882
+ };
1883
+ declare const InitError: {
1884
+ new (message?: string, innerError?: unknown | undefined): {
1885
+ innerError?: unknown | undefined;
1886
+ name: string;
1887
+ message: string;
1888
+ stack?: string;
1889
+ cause?: unknown;
1890
+ };
1891
+ isError(error: unknown): error is Error;
1892
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1893
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1894
+ stackTraceLimit: number;
1895
+ };
1896
+ declare const BackendServerError: {
1897
+ new (message?: string, innerError?: unknown | undefined): {
1898
+ innerError?: unknown | undefined;
1899
+ name: string;
1900
+ message: string;
1901
+ stack?: string;
1902
+ cause?: unknown;
1903
+ };
1904
+ isError(error: unknown): error is Error;
1905
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1906
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1907
+ stackTraceLimit: number;
1908
+ };
1909
+ declare const GetStatusUrlError: {
1910
+ new (message?: string, innerError?: unknown | undefined): {
1911
+ innerError?: unknown | undefined;
1912
+ name: string;
1913
+ message: string;
1914
+ stack?: string;
1915
+ cause?: unknown;
1916
+ };
1917
+ isError(error: unknown): error is Error;
1918
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1919
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1920
+ stackTraceLimit: number;
1921
+ };
1922
+ declare const NoProviderParamsError: {
1923
+ new (message?: string, innerError?: unknown | undefined): {
1924
+ innerError?: unknown | undefined;
1925
+ name: string;
1926
+ message: string;
1927
+ stack?: string;
1928
+ cause?: unknown;
1929
+ };
1930
+ isError(error: unknown): error is Error;
1931
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1932
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1933
+ stackTraceLimit: number;
1934
+ };
1935
+ declare const SetParamsError: {
1936
+ new (message?: string, innerError?: unknown | undefined): {
1937
+ innerError?: unknown | undefined;
1938
+ name: string;
1939
+ message: string;
1940
+ stack?: string;
1941
+ cause?: unknown;
1942
+ };
1943
+ isError(error: unknown): error is Error;
1944
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1945
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1946
+ stackTraceLimit: number;
1947
+ };
1948
+ declare const SetContextError: {
1949
+ new (message?: string, innerError?: unknown | undefined): {
1950
+ innerError?: unknown | undefined;
1951
+ name: string;
1952
+ message: string;
1953
+ stack?: string;
1954
+ cause?: unknown;
1955
+ };
1956
+ isError(error: unknown): error is Error;
1957
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1958
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1959
+ stackTraceLimit: number;
1960
+ };
1961
+ declare const SetSignatureError: {
1962
+ new (message?: string, innerError?: unknown | undefined): {
1963
+ innerError?: unknown | undefined;
1964
+ name: string;
1965
+ message: string;
1966
+ stack?: string;
1967
+ cause?: unknown;
1968
+ };
1969
+ isError(error: unknown): error is Error;
1970
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1971
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1972
+ stackTraceLimit: number;
1973
+ };
1974
+ declare const GetAppCallbackUrlError: {
1975
+ new (message?: string, innerError?: unknown | undefined): {
1976
+ innerError?: unknown | undefined;
1977
+ name: string;
1978
+ message: string;
1979
+ stack?: string;
1980
+ cause?: unknown;
1981
+ };
1982
+ isError(error: unknown): error is Error;
1983
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1984
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1985
+ stackTraceLimit: number;
1986
+ };
1987
+ declare const StatusUrlError: {
1988
+ new (message?: string, innerError?: unknown | undefined): {
1989
+ innerError?: unknown | undefined;
1990
+ name: string;
1991
+ message: string;
1992
+ stack?: string;
1993
+ cause?: unknown;
1994
+ };
1995
+ isError(error: unknown): error is Error;
1996
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
1997
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1998
+ stackTraceLimit: number;
1999
+ };
2000
+ declare const ProviderConfigFetchError: {
2001
+ new (message?: string, innerError?: unknown | undefined): {
2002
+ innerError?: unknown | undefined;
2003
+ name: string;
2004
+ message: string;
2005
+ stack?: string;
2006
+ cause?: unknown;
2007
+ };
2008
+ isError(error: unknown): error is Error;
2009
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
2010
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
2011
+ stackTraceLimit: number;
2012
+ };
2013
+ declare const InavlidParametersError: {
2014
+ new (message?: string, innerError?: unknown | undefined): {
2015
+ innerError?: unknown | undefined;
2016
+ name: string;
2017
+ message: string;
2018
+ stack?: string;
2019
+ cause?: unknown;
2020
+ };
2021
+ isError(error: unknown): error is Error;
2022
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
2023
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
2024
+ stackTraceLimit: number;
2025
+ };
2026
+ declare const ProofSubmissionFailedError: {
2027
+ new (message?: string, innerError?: unknown | undefined): {
2028
+ innerError?: unknown | undefined;
2029
+ name: string;
2030
+ message: string;
2031
+ stack?: string;
2032
+ cause?: unknown;
2033
+ };
2034
+ isError(error: unknown): error is Error;
2035
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
2036
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
2037
+ stackTraceLimit: number;
2038
+ };
2039
+ declare const ErrorDuringVerificationError: {
2040
+ new (message?: string, innerError?: unknown | undefined): {
2041
+ innerError?: unknown | undefined;
2042
+ name: string;
2043
+ message: string;
2044
+ stack?: string;
2045
+ cause?: unknown;
2046
+ };
2047
+ isError(error: unknown): error is Error;
2048
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
2049
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
2050
+ stackTraceLimit: number;
2051
+ };
2052
+ declare const CallbackUrlRequiredError: {
2053
+ new (message?: string, innerError?: unknown | undefined): {
2054
+ innerError?: unknown | undefined;
2055
+ name: string;
2056
+ message: string;
2057
+ stack?: string;
2058
+ cause?: unknown;
2059
+ };
2060
+ isError(error: unknown): error is Error;
2061
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
2062
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
2063
+ stackTraceLimit: number;
2064
+ };
1596
2065
  declare const TeeVerificationError: {
1597
2066
  new (message?: string, innerError?: unknown | undefined): {
1598
2067
  innerError?: unknown | undefined;
@@ -1606,6 +2075,19 @@ declare const TeeVerificationError: {
1606
2075
  prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
1607
2076
  stackTraceLimit: number;
1608
2077
  };
2078
+ declare const AttestorTeeVerificationError: {
2079
+ new (message?: string, innerError?: unknown | undefined): {
2080
+ innerError?: unknown | undefined;
2081
+ name: string;
2082
+ message: string;
2083
+ stack?: string;
2084
+ cause?: unknown;
2085
+ };
2086
+ isError(error: unknown): error is Error;
2087
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
2088
+ prepareStackTrace?: ((err: Error, stackTraces: NodeJS.CallSite[]) => any) | undefined;
2089
+ stackTraceLimit: number;
2090
+ };
1609
2091
 
1610
2092
  /**
1611
2093
  * Highly accurate device type detection - returns only 'desktop' or 'mobile'
@@ -1634,4 +2116,4 @@ declare function isDesktopDevice(): boolean;
1634
2116
  */
1635
2117
  declare function clearDeviceCache(): void;
1636
2118
 
1637
- export { type Beacon, type BeaconState, type BodySniff, ClaimCreationType, type ClaimID, type ClaimInfo, type CompleteClaimData, type Context, type CreateVerificationRequest, DeviceType, type EmbeddedFlowHandle, type ExtensionMessage, type FlowHandle, type HashRequirement, type HashableHttpProviderClaimParams, type HttpFormEntry, type HttpProviderClaimParams, type HttpRedirectionMethod, type HttpRedirectionOptions, type InitSessionResponse, type InjectedRequestSpec, type InterceptorRequestSpec, type ModalOptions, type OnError, type OnSuccess, type Proof, type ProofPropertiesJSON, type ProofRequestOptions, type ProviderClaimData, type ProviderConfigResponse, type ProviderHashRequirementSpec, type ProviderHashRequirementsConfig, type ProviderHashRequirementsResponse, type ProviderVersionConfig, type ProviderVersionInfo, RECLAIM_EXTENSION_ACTIONS, type ReclaimFlowInitOptions, type ReclaimFlowLaunchOptions, ReclaimProofRequest, type ReclaimProviderConfig, type ReclaimProviderConfigWithRequestSpec, type RequestSpec, type ResponseMatchSpec, type ResponseRedactionSpec, SUPPORTED_TEE_ATTESTATION_VERSIONS, type SerializableModalOptions, SessionStatus, type SignedClaim, type StartSessionParams, type StatusUrlResponse, type TeeAttestation, type TeeAttestationConfig, type TeeAttestationVersion, TeeVerificationError, type TeeVerificationResult, type TemplateData, type TrustedData, type UpdateSessionResponse, type ValidationConfig, type ValidationConfigWithDisabledValidation, type ValidationConfigWithHash, type ValidationConfigWithProviderInformation, type VerificationConfig, type VerifyProofResult, type VerifyProofResultFailure, type VerifyProofResultSuccess, type WitnessData, assertValidProofsByHash, assertValidateProof, assertVerifiedProof, clearDeviceCache, createLinkWithTemplateData, createSignDataForClaim, fetchProviderConfigs, fetchProviderHashRequirementsBy, fetchStatusUrl, generateAttestationNonce, generateInitSignature, generateSpecsFromRequestSpecTemplate, getAttestors, getDeviceType, getHttpProviderClaimParamsFromProof, getIdentifierFromClaimInfo, getMobileDeviceType, getProviderHashRequirementSpecFromProviderConfig, getProviderHashRequirementsFromSpec, getProviderParamsAsCanonicalizedString, getShortenedUrl, hashProofClaimParams, hashRequestSpec, initSession, isDesktopDevice, isHttpProviderClaimParams, isMobileDevice, recoverSignersOfSignedClaim, runTeeVerification, takePairsWhereValueIsArray, takeTemplateParametersFromProofs, transformForOnchain, updateSession, verifyProof, verifyTeeAttestation };
2119
+ export { ApplicationError, type AttestorClaimAttestation, type AttestorTeeAttestationConfig, AttestorTeeVerificationError, type AttestorTeeVerificationResult, BackendServerError, type Beacon, type BeaconState, type BodySniff, CallbackUrlRequiredError, ClaimCreationType, type ClaimID, type ClaimInfo, type CompleteClaimData, type Context, type CreateVerificationRequest, DeviceType, type EmbeddedFlowHandle, ErrorDuringVerificationError, type ExtensionMessage, type FlowHandle, GetAppCallbackUrlError, GetStatusUrlError, HASH_MATCH_MULTIPLE_DEFAULT, HASH_REQUIRED_DEFAULT, type HashRequirement, type HashableHttpProviderClaimParams, type HttpFormEntry, type HttpProviderClaimParams, type HttpRedirectionMethod, type HttpRedirectionOptions, InavlidParametersError, InitError, InitSessionError, type InitSessionResponse, type InjectedRequestSpec, type InterceptorRequestSpec, InvalidParamError, InvalidRequestSpecError, InvalidSignatureError, type ModalOptions, NoProviderParamsError, type OnError, type OnSuccess, type PiiVerificationConfig, type Proof, ProofNotValidatedError, ProofNotVerifiedError, type ProofPropertiesJSON, type ProofRequestOptions, ProofSubmissionFailedError, type ProviderClaimData, ProviderConfigFetchError, type ProviderConfigResponse, ProviderFailedError, type ProviderHashRequirementSpec, type ProviderHashRequirementsConfig, type ProviderHashRequirementsResponse, ProviderNotFoundError, type ProviderVersionConfig, type ProviderVersionInfo, RECLAIM_EXTENSION_ACTIONS, type ReclaimFlowInitOptions, type ReclaimFlowLaunchOptions, ReclaimProofRequest, type ReclaimProviderConfig, type ReclaimProviderConfigWithRequestSpec, type RequestSpec, type ResponseMatchSpec, type ResponseRedactionSpec, SUPPORTED_TEE_ATTESTATION_VERSIONS, type SerializableModalOptions, SessionNotStartedError, SessionStatus, SetContextError, SetParamsError, SetSignatureError, SignatureGeneratingError, SignatureNotFoundError, type SignedClaim, type StartSessionParams, StatusUrlError, type StatusUrlResponse, type TeeAttestation, type TeeAttestationConfig, type TeeAttestationVersion, TeeVerificationError, type TeeVerificationResult, type TemplateData, TimeoutError, type TrustedData, UnknownProofsNotValidatedError, UpdateSessionError, type UpdateSessionResponse, type ValidationConfig, type ValidationConfigWithDisabledValidation, type ValidationConfigWithHash, type ValidationConfigWithProviderInformation, type VerificationConfig, type VerifyAttestationConfig, type VerifyProofResult, type VerifyProofResultFailure, type VerifyProofResultSuccess, type WitnessData, assertValidProofsByHash, assertValidateProof, assertVerifiedProof, clearDeviceCache, createLinkWithTemplateData, createSignDataForClaim, fetchProviderConfigs, fetchProviderHashRequirementsBy, fetchStatusUrl, generateAttestationNonce, generateInitSignature, generateSpecsFromRequestSpecTemplate, getAttestors, getDeviceType, getHashFromProof, getHttpProviderClaimParamsFromProof, getIdentifierFromClaimInfo, getMobileDeviceType, getProviderHashRequirementSpecFromProviderConfig, getProviderHashRequirementsFromSpec, getProviderParamsAsCanonicalizedString, getShortenedUrl, hashProofClaimParams, hashRequestSpec, initSession, isDesktopDevice, isHttpProviderClaimParams, isMobileDevice, recoverSignersOfSignedClaim, runTeeVerification, takePairsWhereValueIsArray, takeTemplateParametersFromProofs, transformForOnchain, updateSession, verifyAttestorTeeAttestation, verifyProof, verifyTeeAttestation };