@terminal3/t3n-sdk 3.3.0 → 3.4.0

package/dist/src/wasm/quote-verifier-loader.d.ts

@@ -1,58 +0,0 @@
-/**
- * TDX quote verifier backed by the Rust `signature` crate compiled to
- * WASM. Full cryptographic verification: ECDSA P-256 attestation-key
- * signature, PCK certificate chain walk to Intel's root CA, and
- * report_data + RTMR comparison.
- *
- * The WASM bytes are inlined as base64 (see quote_verifier_bytes.ts)
- * so the SDK works without bundler WASM plugins and without runtime
- * asset URL resolution.
- */
-export interface QuoteVerifyResult {
-    valid: boolean;
-    error?: string;
-    rtmr3?: string;
-    report_data?: string;
-}
-export interface PeerQuoteResult {
-    peer_id: string;
-    valid: boolean;
-    error?: string;
-    rtmr3?: string;
-}
-export interface DkgVerifyResult {
-    valid: boolean;
-    results: PeerQuoteResult[];
-    valid_count: number;
-    expected_count: number;
-    error?: string;
-}
-/**
- * Verify a single TDX attestation quote with full cryptographic verification.
- *
- * @param quoteB64 - Base64-encoded raw TDX v4 quote
- * @param attestationMsgB64 - Base64-encoded attestation message
- *   (for DKG: encaps_key || sorted_peer_id_bytes)
- * @param expectedRtmr3B64 - Optional base64-encoded 48-byte RTMR3
- * @returns Verification result with extracted measurements
- */
-export declare function verifyTdxQuote(quoteB64: string, attestationMsgB64: string, expectedRtmr3B64?: string): Promise<QuoteVerifyResult>;
-/**
- * Verify a full DKG attestation bundle: multiple TDX quotes from all
- * participating nodes, plus the binding between the quotes and the
- * ML-KEM encapsulation key. Checks:
- *   1. attestationMsg starts with encapsKey (server can't swap the key)
- *   2. Every quote's ECDSA signature chains to Intel's SGX root CA
- *   3. Every quote's report_data == keccak512(attestationMsg)
- *   4. Optional RTMR3 pinning per quote
- *
- * @param encapsKeyB64 - Base64-encoded ML-KEM encapsulation key
- *   (from `/status.encaps_key`)
- * @param attestationMsgB64 - Base64-encoded raw attestation message
- *   (from `/status.dkg_attestation.attestation_msg`)
- * @param peerIds - Sorted array of base58 peer IDs
- * @param quotes - Map of peer_id → base64-encoded TDX quote
- * @param expectedRtmr3B64 - Optional base64-encoded 48-byte RTMR3
- * @returns Per-peer verification results and overall validity
- */
-export declare function verifyDkgAttestation(encapsKeyB64: string, attestationMsgB64: string, peerIds: string[], quotes: Record<string, string>, expectedRtmr3B64?: string): Promise<DkgVerifyResult>;