@zeke-02/tinfoil 0.0.11 → 0.11.7

package/dist/{tinfoilai.js → tinfoil-ai.browser.js}

@@ -1,13 +1,7 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TinfoilAI = void 0;
-const openai_1 = __importDefault(require("openai"));
-const secure_client_1 = require("./secure-client");
-const config_1 = require("./config");
-const env_1 = require("./env");
+import OpenAI from "openai";
+import { SecureClient } from "./secure-client.browser.js";
+import { TINFOIL_CONFIG } from "./config.js";
+import { isRealBrowser } from "./env.js";
 function createAsyncProxy(promise) {
     return new Proxy({}, {
         get(target, prop) {
@@ -30,27 +24,45 @@ function createAsyncProxy(promise) {
         },
     });
 }
-class TinfoilAI {
+export class TinfoilAI {
+    client;
+    clientPromise;
+    readyPromise;
+    configRepo;
+    secureClient;
+    verificationDocument;
+    useBearerToken;
+    apiKey;
+    bearerToken;
+    baseURL;
+    enclaveURL;
     constructor(options = {}) {
         const openAIOptions = { ...options };
+        // bearerToken is used for browser auth (e.g., JWT from your auth system)
+        // It automatically enables browser usage without dangerouslyAllowBrowser
+        this.useBearerToken = !!options.bearerToken;
         // In browser builds, never read secrets from process.env to avoid
-        // leaking credentials into client bundles. Require explicit apiKey.
-        if (options.apiKey) {
+        // leaking credentials into client bundles. Require explicit apiKey or bearerToken.
+        if (options.bearerToken) {
+            openAIOptions.apiKey = options.bearerToken;
+            this.bearerToken = options.bearerToken;
+        }
+        else if (options.apiKey) {
             openAIOptions.apiKey = options.apiKey;
         }
-        else if (!(0, env_1.isRealBrowser)() && process.env.TINFOIL_API_KEY) {
+        else if (!isRealBrowser() && process.env.TINFOIL_API_KEY) {
             openAIOptions.apiKey = process.env.TINFOIL_API_KEY;
         }
-        this.apiKey = openAIOptions.apiKey;
+        this.apiKey = options.apiKey;
         this.baseURL = options.baseURL;
         this.enclaveURL = options.enclaveURL;
-        this.configRepo = options.configRepo || config_1.TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
-        this.secureClient = new secure_client_1.SecureClient({
+        this.configRepo = options.configRepo || TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
+        this.secureClient = new SecureClient({
             baseURL: this.baseURL,
             enclaveURL: this.enclaveURL,
             configRepo: this.configRepo,
         });
-        this.clientPromise = this.initClient(openAIOptions);
+        this.clientPromise = this.createOpenAIClient(openAIOptions);
     }
     async ready() {
         if (!this.readyPromise) {
@@ -60,9 +72,6 @@ class TinfoilAI {
         }
         return this.readyPromise;
     }
-    async initClient(options) {
-        return this.createOpenAIClient(options);
-    }
     async createOpenAIClient(options = {}) {
         await this.secureClient.ready();
         this.verificationDocument = await this.secureClient.getVerificationDocument();
@@ -76,10 +85,12 @@ class TinfoilAI {
             baseURL: baseURL,
             fetch: this.secureClient.fetch,
         };
-        if ((0, env_1.isRealBrowser)() || options.dangerouslyAllowBrowser === true) {
+        // Automatically allow browser usage when bearerToken is used (e.g., JWT auth)
+        // or when explicitly requested via dangerouslyAllowBrowser
+        if (this.useBearerToken || options.dangerouslyAllowBrowser === true) {
             clientOptions.dangerouslyAllowBrowser = true;
         }
-        return new openai_1.default(clientOptions);
+        return new OpenAI(clientOptions);
     }
     async ensureReady() {
         await this.ready();
@@ -123,21 +134,21 @@ class TinfoilAI {
         return createAsyncProxy(this.ensureReady().then((client) => client.beta));
     }
 }
-exports.TinfoilAI = TinfoilAI;
 // Namespace declaration merge to add OpenAI types to TinfoilAI
 (function (TinfoilAI) {
-    TinfoilAI.Chat = openai_1.default.Chat;
-    TinfoilAI.Audio = openai_1.default.Audio;
-    TinfoilAI.Beta = openai_1.default.Beta;
-    TinfoilAI.Batches = openai_1.default.Batches;
-    TinfoilAI.Completions = openai_1.default.Completions;
-    TinfoilAI.Embeddings = openai_1.default.Embeddings;
-    TinfoilAI.Files = openai_1.default.Files;
-    TinfoilAI.FineTuning = openai_1.default.FineTuning;
-    TinfoilAI.Images = openai_1.default.Images;
-    TinfoilAI.Models = openai_1.default.Models;
-    TinfoilAI.Moderations = openai_1.default.Moderations;
-    TinfoilAI.Responses = openai_1.default.Responses;
-    TinfoilAI.Uploads = openai_1.default.Uploads;
-    TinfoilAI.VectorStores = openai_1.default.VectorStores;
-})(TinfoilAI || (exports.TinfoilAI = TinfoilAI = {}));
+    TinfoilAI.Chat = OpenAI.Chat;
+    TinfoilAI.Audio = OpenAI.Audio;
+    TinfoilAI.Beta = OpenAI.Beta;
+    TinfoilAI.Batches = OpenAI.Batches;
+    TinfoilAI.Completions = OpenAI.Completions;
+    TinfoilAI.Embeddings = OpenAI.Embeddings;
+    TinfoilAI.Files = OpenAI.Files;
+    TinfoilAI.FineTuning = OpenAI.FineTuning;
+    TinfoilAI.Images = OpenAI.Images;
+    TinfoilAI.Models = OpenAI.Models;
+    TinfoilAI.Moderations = OpenAI.Moderations;
+    TinfoilAI.Responses = OpenAI.Responses;
+    TinfoilAI.Uploads = OpenAI.Uploads;
+    TinfoilAI.VectorStores = OpenAI.VectorStores;
+})(TinfoilAI || (TinfoilAI = {}));
+//# sourceMappingURL=tinfoil-ai.browser.js.map

package/dist/tinfoil-ai.browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tinfoil-ai.browser.js","sourceRoot":"","sources":["../src/tinfoil-ai.browser.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAa5B,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,gBAAgB,CAAmB,OAAmB;IAC7D,OAAO,IAAI,KAAK,CAAC,EAAO,EAAE;QACxB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE;gBACzB,GAAG,CAAC,CAAC,EAAE,UAAU;oBACf,OAAO,CAAC,GAAG,IAAW,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;wBACnB,MAAM,KAAK,GAAI,GAAW,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;wBAC7C,OAAO,OAAO,KAAK,KAAK,UAAU;4BAChC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,GAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;4BACvC,CAAC,CAAC,KAAK,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI;oBACf,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;wBAC1B,MAAM,KAAK,GAAI,GAAW,CAAC,IAAI,CAAC,CAAC;wBACjC,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBACtE,CAAC,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,OAAO,SAAS;IACZ,MAAM,CAAU;IAChB,aAAa,CAAkB;IAC/B,YAAY,CAAiB;IAC7B,UAAU,CAAU;IACpB,YAAY,CAAe;IAC3B,oBAAoB,CAAwB;IAC5C,cAAc,CAAU;IAEzB,MAAM,CAAU;IAChB,WAAW,CAAU;IACrB,OAAO,CAAU;IACjB,UAAU,CAAU;IAE3B,YAAY,UAA4B,EAAE;QACxC,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAErC,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAE5C,kEAAkE;QAClE,mFAAmF;QACnF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1B,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACxC,CAAC;aAAM,IAAI,CAAC,aAAa,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAC3D,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,oBAAoB,CAAC;QAE5E,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC9D,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAEI,EAAE;QAEN,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAEhC,IAAI,CAAC,oBAAoB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,6EAA6E;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAE/D,MAAM,aAAa,GAA4C;YAC7D,GAAG,OAAO;YACV,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;SAC/B,CAAC;QAEF,8EAA8E;QAC9E,2DAA2D;QAC3D,IAAI,IAAI,CAAC,cAAc,IAAK,OAAe,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;YAC7E,aAAa,CAAC,uBAAuB,GAAG,IAAI,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,MAAO,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,uBAAuB;QAClC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,SAAS;QACX,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,WAAW;QACb,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF;AAED,+DAA+D;AAC/D,WAAiB,SAAS;IACV,cAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACnB,eAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACrB,cAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACnB,iBAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,qBAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,oBAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,eAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACrB,oBAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,gBAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,gBAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,qBAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,mBAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC7B,iBAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,sBAAY,GAAG,MAAM,CAAC,YAAY,CAAC;AACnD,CAAC,EAfgB,SAAS,KAAT,SAAS,QAezB"}

package/dist/{esm/tinfoilai.d.ts → tinfoil-ai.d.ts}

@@ -1,8 +1,9 @@
 import OpenAI from "openai";
 import type { Audio, Beta, Chat, Embeddings, Files, FineTuning, Images, Models, Moderations, Responses } from "openai/resources";
-import type { VerificationDocument } from "./verifier";
+import type { VerificationDocument } from "./verifier.js";
 interface TinfoilAIOptions {
     apiKey?: string;
+    bearerToken?: string;
     baseURL?: string;
     enclaveURL?: string;
     configRepo?: string;
@@ -15,12 +16,13 @@ export declare class TinfoilAI {
     private configRepo?;
     private secureClient;
     private verificationDocument?;
+    private useBearerToken;
     apiKey?: string;
+    bearerToken?: string;
     baseURL?: string;
     enclaveURL?: string;
     constructor(options?: TinfoilAIOptions);
     ready(): Promise<void>;
-    private initClient;
     private createOpenAIClient;
     private ensureReady;
     getVerificationDocument(): Promise<VerificationDocument>;
@@ -52,3 +54,4 @@ export declare namespace TinfoilAI {
     export import VectorStores = OpenAI.VectorStores;
 }
 export {};
+//# sourceMappingURL=tinfoil-ai.d.ts.map

package/dist/tinfoil-ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tinfoil-ai.d.ts","sourceRoot":"","sources":["../src/tinfoil-ai.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EACV,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,KAAK,EACL,UAAU,EACV,MAAM,EACN,MAAM,EACN,WAAW,EACX,SAAS,EACV,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA4B1D,UAAU,gBAAgB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,aAAa,CAAkB;IACvC,OAAO,CAAC,YAAY,CAAC,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,cAAc,CAAU;IAEzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEf,OAAO,GAAE,gBAAqB;IAgC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YASrB,kBAAkB;YA8BlB,WAAW;IAKZ,uBAAuB,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAQrE,IAAI,IAAI,IAAI,IAAI,CAEf;IAED,IAAI,KAAK,IAAI,KAAK,CAEjB;IAED,IAAI,UAAU,IAAI,UAAU,CAI3B;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,KAAK,IAAI,KAAK,CAEjB;IAED,IAAI,SAAS,IAAI,SAAS,CAIzB;IAED,IAAI,UAAU,IAAI,UAAU,CAI3B;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,WAAW,IAAI,WAAW,CAI7B;IAED,IAAI,IAAI,IAAI,IAAI,CAEf;CACF;AAGD,yBAAiB,SAAS,CAAC;IACzB,MAAM,QAAQ,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,MAAM,QAAQ,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,QAAQ,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,MAAM,QAAQ,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,MAAM,QAAQ,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/C,MAAM,QAAQ,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7C,MAAM,QAAQ,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,QAAQ,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7C,MAAM,QAAQ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,QAAQ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,QAAQ,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/C,MAAM,QAAQ,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3C,MAAM,QAAQ,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,MAAM,QAAQ,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;CAClD"}

package/dist/{esm/tinfoilai.mjs → tinfoil-ai.js}

@@ -1,7 +1,7 @@
 import OpenAI from "openai";
-import { SecureClient } from "./secure-client.mjs";
-import { TINFOIL_CONFIG } from "./config.mjs";
-import { isRealBrowser } from "./env.mjs";
+import { SecureClient } from "./secure-client.js";
+import { TINFOIL_CONFIG } from "./config.js";
+import { isRealBrowser } from "./env.js";
 function createAsyncProxy(promise) {
     return new Proxy({}, {
         get(target, prop) {
@@ -25,17 +25,35 @@ function createAsyncProxy(promise) {
     });
 }
 export class TinfoilAI {
+    client;
+    clientPromise;
+    readyPromise;
+    configRepo;
+    secureClient;
+    verificationDocument;
+    useBearerToken;
+    apiKey;
+    bearerToken;
+    baseURL;
+    enclaveURL;
     constructor(options = {}) {
         const openAIOptions = { ...options };
+        // bearerToken is used for browser auth (e.g., JWT from your auth system)
+        // It automatically enables browser usage without dangerouslyAllowBrowser
+        this.useBearerToken = !!options.bearerToken;
         // In browser builds, never read secrets from process.env to avoid
-        // leaking credentials into client bundles. Require explicit apiKey.
-        if (options.apiKey) {
+        // leaking credentials into client bundles. Require explicit apiKey or bearerToken.
+        if (options.bearerToken) {
+            openAIOptions.apiKey = options.bearerToken;
+            this.bearerToken = options.bearerToken;
+        }
+        else if (options.apiKey) {
             openAIOptions.apiKey = options.apiKey;
         }
         else if (!isRealBrowser() && process.env.TINFOIL_API_KEY) {
             openAIOptions.apiKey = process.env.TINFOIL_API_KEY;
         }
-        this.apiKey = openAIOptions.apiKey;
+        this.apiKey = options.apiKey;
         this.baseURL = options.baseURL;
         this.enclaveURL = options.enclaveURL;
         this.configRepo = options.configRepo || TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
@@ -44,7 +62,7 @@ export class TinfoilAI {
             enclaveURL: this.enclaveURL,
             configRepo: this.configRepo,
         });
-        this.clientPromise = this.initClient(openAIOptions);
+        this.clientPromise = this.createOpenAIClient(openAIOptions);
     }
     async ready() {
         if (!this.readyPromise) {
@@ -54,9 +72,6 @@ export class TinfoilAI {
         }
         return this.readyPromise;
     }
-    async initClient(options) {
-        return this.createOpenAIClient(options);
-    }
     async createOpenAIClient(options = {}) {
         await this.secureClient.ready();
         this.verificationDocument = await this.secureClient.getVerificationDocument();
@@ -70,7 +85,9 @@ export class TinfoilAI {
             baseURL: baseURL,
             fetch: this.secureClient.fetch,
         };
-        if (isRealBrowser() || options.dangerouslyAllowBrowser === true) {
+        // Automatically allow browser usage when bearerToken is used (e.g., JWT auth)
+        // or when explicitly requested via dangerouslyAllowBrowser
+        if (this.useBearerToken || options.dangerouslyAllowBrowser === true) {
             clientOptions.dangerouslyAllowBrowser = true;
         }
         return new OpenAI(clientOptions);
@@ -134,3 +151,4 @@ export class TinfoilAI {
     TinfoilAI.Uploads = OpenAI.Uploads;
     TinfoilAI.VectorStores = OpenAI.VectorStores;
 })(TinfoilAI || (TinfoilAI = {}));
+//# sourceMappingURL=tinfoil-ai.js.map

package/dist/tinfoil-ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tinfoil-ai.js","sourceRoot":"","sources":["../src/tinfoil-ai.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAa5B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,gBAAgB,CAAmB,OAAmB;IAC7D,OAAO,IAAI,KAAK,CAAC,EAAO,EAAE;QACxB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE;gBACzB,GAAG,CAAC,CAAC,EAAE,UAAU;oBACf,OAAO,CAAC,GAAG,IAAW,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;wBACnB,MAAM,KAAK,GAAI,GAAW,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;wBAC7C,OAAO,OAAO,KAAK,KAAK,UAAU;4BAChC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,GAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;4BACvC,CAAC,CAAC,KAAK,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI;oBACf,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;wBAC1B,MAAM,KAAK,GAAI,GAAW,CAAC,IAAI,CAAC,CAAC;wBACjC,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBACtE,CAAC,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,OAAO,SAAS;IACZ,MAAM,CAAU;IAChB,aAAa,CAAkB;IAC/B,YAAY,CAAiB;IAC7B,UAAU,CAAU;IACpB,YAAY,CAAe;IAC3B,oBAAoB,CAAwB;IAC5C,cAAc,CAAU;IAEzB,MAAM,CAAU;IAChB,WAAW,CAAU;IACrB,OAAO,CAAU;IACjB,UAAU,CAAU;IAE3B,YAAY,UAA4B,EAAE;QACxC,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAErC,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAE5C,kEAAkE;QAClE,mFAAmF;QACnF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1B,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACxC,CAAC;aAAM,IAAI,CAAC,aAAa,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAC3D,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,oBAAoB,CAAC;QAE5E,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC9D,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAEI,EAAE;QAEN,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAEhC,IAAI,CAAC,oBAAoB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,6EAA6E;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAE/D,MAAM,aAAa,GAA4C;YAC7D,GAAG,OAAO;YACV,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;SAC/B,CAAC;QAEF,8EAA8E;QAC9E,2DAA2D;QAC3D,IAAI,IAAI,CAAC,cAAc,IAAK,OAAe,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;YAC7E,aAAa,CAAC,uBAAuB,GAAG,IAAI,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,MAAO,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,uBAAuB;QAClC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,SAAS;QACX,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,WAAW;QACb,OAAO,gBAAgB,CACrB,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF;AAED,+DAA+D;AAC/D,WAAiB,SAAS;IACV,cAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACnB,eAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACrB,cAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACnB,iBAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,qBAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,oBAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,eAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACrB,oBAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,gBAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,gBAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,qBAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,mBAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC7B,iBAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,sBAAY,GAAG,MAAM,CAAC,YAAY,CAAC;AACnD,CAAC,EAfgB,SAAS,KAAT,SAAS,QAezB"}

package/dist/unverified-client.d.ts

@@ -1,14 +1,12 @@
 interface UnverifiedClientOptions {
     baseURL?: string;
     enclaveURL?: string;
-    configRepo?: string;
 }
 export declare class UnverifiedClient {
     private initPromise;
     private _fetch;
     private baseURL?;
     private enclaveURL?;
-    private readonly configRepo;
     constructor(options?: UnverifiedClientOptions);
     ready(): Promise<void>;
     private initUnverifiedClient;
@@ -16,3 +14,4 @@ export declare class UnverifiedClient {
     get fetch(): typeof fetch;
 }
 export {};
+//# sourceMappingURL=unverified-client.d.ts.map

package/dist/unverified-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unverified-client.d.ts","sourceRoot":"","sources":["../src/unverified-client.ts"],"names":[],"mappings":"AAGA,UAAU,uBAAuB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAA6B;IAE3C,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,OAAO,GAAE,uBAA4B;IAKpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAOrB,oBAAoB;IAgCrB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IAUrD,IAAI,KAAK,IAAI,OAAO,KAAK,CAKxB;CACF"}

package/dist/unverified-client.js

@@ -1,16 +1,13 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.UnverifiedClient = void 0;
-const config_1 = require("./config");
-const encrypted_body_fetch_1 = require("./encrypted-body-fetch");
-const router_1 = require("./router");
-class UnverifiedClient {
+import { createEncryptedBodyFetch } from "./encrypted-body-fetch.js";
+import { fetchRouter } from "./router.js";
+export class UnverifiedClient {
+    initPromise = null;
+    _fetch = null;
+    baseURL;
+    enclaveURL;
     constructor(options = {}) {
-        this.initPromise = null;
-        this._fetch = null;
         this.baseURL = options.baseURL;
         this.enclaveURL = options.enclaveURL;
-        this.configRepo = options.configRepo || config_1.TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
     }
     async ready() {
         if (!this.initPromise) {
@@ -21,7 +18,7 @@ class UnverifiedClient {
     async initUnverifiedClient() {
         // Only fetch router if neither baseURL nor enclaveURL is provided
         if (!this.baseURL && !this.enclaveURL) {
-            const routerAddress = await (0, router_1.fetchRouter)();
+            const routerAddress = await fetchRouter();
             this.enclaveURL = `https://${routerAddress}`;
             this.baseURL = `https://${routerAddress}/v1/`;
         }
@@ -46,7 +43,7 @@ class UnverifiedClient {
                 throw new Error("Unable to determine enclaveURL: neither baseURL nor enclaveURL provided");
             }
         }
-        this._fetch = (0, encrypted_body_fetch_1.createEncryptedBodyFetch)(this.baseURL, undefined, this.enclaveURL);
+        this._fetch = createEncryptedBodyFetch(this.baseURL, undefined, this.enclaveURL);
     }
     async getVerificationDocument() {
         if (!this.initPromise) {
@@ -62,4 +59,4 @@ class UnverifiedClient {
         };
     }
 }
-exports.UnverifiedClient = UnverifiedClient;
+//# sourceMappingURL=unverified-client.js.map

package/dist/unverified-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unverified-client.js","sourceRoot":"","sources":["../src/unverified-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,OAAO,gBAAgB;IACnB,WAAW,GAAyB,IAAI,CAAC;IACzC,MAAM,GAAwB,IAAI,CAAC;IAEnC,OAAO,CAAU;IACjB,UAAU,CAAU;IAE5B,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,MAAM,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,WAAW,aAAa,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,GAAG,WAAW,aAAa,MAAM,CAAC;QAChD,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,+EAA+E;gBAC/E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,+EAA+E;gBAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnF,CAAC;IAEM,KAAK,CAAC,uBAAuB;QAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,CAAC;QAEvB,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,KAAK;QACP,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;YAC5D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/verifier.d.ts

@@ -1,141 +1,2 @@
-/**
- * Attestation measurement containing platform type and register values
- */
-export interface AttestationMeasurement {
-    type: string;
-    registers: string[];
-}
-/**
- * Hardware measurement from TDX platform verification
- */
-export interface HardwareMeasurement {
-    ID: string;
-    MRTD: string;
-    RTMR0: string;
-}
-/**
- * Attestation response containing cryptographic keys and measurements
- * At least one of tlsPublicKeyFingerprint or hpkePublicKey must be present
- */
-export interface AttestationResponse {
-    tlsPublicKeyFingerprint?: string;
-    hpkePublicKey?: string;
-    measurement: AttestationMeasurement;
-}
-/**
- * State of an intermediate verification step
- */
-export interface VerificationStepState {
-    status: "pending" | "success" | "failed";
-    error?: string;
-}
-/**
- * Full verification document produced by a verify() call
- * Includes state tracking for all intermediate steps
- */
-export interface VerificationDocument {
-    configRepo: string;
-    enclaveHost: string;
-    releaseDigest: string;
-    codeMeasurement: AttestationMeasurement;
-    enclaveMeasurement: AttestationResponse;
-    tlsPublicKey: string;
-    hpkePublicKey: string;
-    hardwareMeasurement?: HardwareMeasurement;
-    codeFingerprint: string;
-    enclaveFingerprint: string;
-    selectedRouterEndpoint: string;
-    securityVerified: boolean;
-    steps: {
-        fetchDigest: VerificationStepState;
-        verifyCode: VerificationStepState;
-        verifyEnclave: VerificationStepState;
-        compareMeasurements: VerificationStepState;
-        createTransport?: VerificationStepState;
-        verifyHPKEKey?: VerificationStepState;
-        otherError?: VerificationStepState;
-    };
-}
-/**
- * Verifier performs attestation verification for Tinfoil enclaves
- *
- * The verifier loads a WebAssembly module (compiled from Go) that performs
- * end-to-end attestation verification:
- * 1. Fetches the latest code release digest from GitHub
- * 2. Verifies code provenance using Sigstore/Rekor
- * 3. Performs runtime attestation against the enclave
- * 4. Verifies hardware measurements (for TDX platforms)
- * 5. Compares code and runtime measurements using platform-specific logic
- *
- * Primary method: verify() - Returns AttestationResponse with cryptographic keys
- * Verification details: getVerificationDocument() - Returns step-by-step results
- */
-export declare class Verifier {
-    private static goInstance;
-    private static initializationPromise;
-    private static readonly defaultWasmUrl;
-    static originalFsWriteSync: ((fd: number, buf: Uint8Array) => number) | null;
-    static wasmLogsSuppressed: boolean;
-    static globalsInitialized: boolean;
-    private lastVerificationDocument?;
-    protected readonly serverURL: string;
-    protected readonly configRepo: string;
-    constructor(options?: {
-        serverURL?: string;
-        configRepo?: string;
-    });
-    /**
-     * Execute a function with a fresh WASM instance that auto-cleans up
-     * This ensures Go runtime doesn't keep the process alive
-     */
-    private static executeWithWasm;
-    /**
-     * Perform end-to-end attestation verification
-     *
-     * This method performs all verification steps atomically via the Go WASM verify() function:
-     * 1. Fetches the latest code digest from GitHub releases
-     * 2. Verifies code provenance using Sigstore/Rekor
-     * 3. Performs runtime attestation against the enclave
-     * 4. Verifies hardware measurements (for TDX platforms)
-     * 5. Compares code and runtime measurements using platform-specific logic
-     *
-     * The WASM runtime is automatically initialized and cleaned up within this method.
-     * A detailed verification document is saved and can be accessed via getVerificationDocument().
-     *
-     * @returns AttestationResponse containing cryptographic keys (TLS/HPKE) and enclave measurement
-     * @throws Error if measurements don't match or verification fails at any step
-     */
-    verify(): Promise<AttestationResponse>;
-    /**
-     * Save a failed verification document
-     */
-    private saveFailedVerificationDocument;
-    /**
-     * Internal verification logic that runs within WASM context
-     */
-    private verifyInternal;
-    /**
-     * Returns the verification document from the last verify() call
-     *
-     * The document contains detailed step-by-step verification results including:
-     * - Step status (pending/success/failed) for each verification phase
-     * - Measurements, fingerprints, and cryptographic keys
-     * - Error messages for any failed steps
-     *
-     * Available even if verification failed, allowing inspection of which step failed.
-     *
-     * @returns VerificationDocument with complete verification details, or undefined if verify() hasn't been called
-     */
-    getVerificationDocument(): VerificationDocument | undefined;
-}
-/**
- * Control WASM log output
- *
- * The Go WASM runtime outputs logs (stdout/stderr) through a polyfilled fs.writeSync.
- * This function allows suppressing those logs without affecting other console output.
- * By default, WASM logs are suppressed to reduce noise.
- *
- * @param suppress - Whether to suppress WASM logs (default: true)
- * @returns void
- */
-export declare function suppressWasmLogs(suppress?: boolean): void;
+export * from '@tinfoilsh/verifier';
+//# sourceMappingURL=verifier.d.ts.map

package/dist/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}