codai-sdk 0.6.0 → 0.7.0

package/README.md

@@ -226,6 +226,24 @@ if (!verifyResolveWebhook(secret, raw, req.headers.get('x-codai-signature'))) {
 const evt = JSON.parse(raw) as ResolveWebhookEvent; // evt.event, evt.job.attestation_url
 ```
 
+### Verifying a signed attestation
+
+Attestations created from 2026-09-27 carry `signature`: a DSSE envelope
+(ECDSA P-256/SHA-256) over a canonical statement of sha256 hashes of the patch,
+repro test and test outputs, plus the commands, base commit, runner digest and
+timestamps. `verifyAttestation` checks the signature against
+`GET /v1/resolve/keys` **and** that the statement matches the fields you were
+served. Older attestations have `signature: null` → `{ ok: false, reason: 'UNSIGNED' }`.
+
+```ts
+const proof = await codai.resolve.attestation(job.attestation_url!);
+const r = await codai.resolve.verifyAttestation(proof); // or { keys: pinnedKeys }
+if (!r.ok) throw new Error(`attestation not verified: ${r.reason}`);
+// r.keyid — the signing key; reasons: UNSIGNED | BAD_SIGNATURE | STATEMENT_MISMATCH | BAD_PAYLOAD_TYPE
+```
+
+Offline (no network): `verifyAttestationWithKeys(proof, keys)`. Server-side only (`node:crypto`).
+
 ## Shared sessions, devices and hosts
 
 Shared-sessions and hosts calls need a device UUID (`x-codai-device`). Set it once

package/dist/index.d.ts

@@ -11024,6 +11024,30 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly '/v1/resolve/keys': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * Public keys that sign attestations
+         * @description Returns the public key(s) used to sign attestation envelopes (`signature` on
+         *     `GET /v1/resolve/attestations/{id}`). ECDSA P-256 / SHA-256 over the DSSE v1 PAE of the
+         *     payload; the signature is DER, base64. **Unauthenticated**, CORS-open and cacheable for
+         *     1 hour. Verify with `codaid resolve verify`, `resolve.verifyAttestation` (TypeScript) or
+         *     `resolve.verify_attestation` (Python). `503` when signing is not configured.
+         */
+        readonly get: operations['getResolveKeys'];
+        readonly put?: never;
+        readonly post?: never;
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
 };
 type components = {
     schemas: {
@@ -11059,6 +11083,13 @@ type components = {
             readonly repro_test: components['schemas']['ResolveReproTest'] | null;
             /** @description Container image digest of the verification runner (`unknown` when not recorded). */
             readonly runner_image_digest: string;
+            /**
+             * @description DSSE envelope signing the canonical statement of this attestation (sha256 of the patch,
+             *     repro test, test outputs; commands, commit, runner digest, timestamps). `null` for
+             *     attestations created before signing was enabled (2026-09-27). Verify against
+             *     `GET /v1/resolve/keys`.
+             */
+            readonly signature: components['schemas']['ResolveAttestationEnvelope'] | null;
             /** Format: date-time */
             readonly started_at: string;
             /** @description FAIL_TO_PASS command that was executed. */
@@ -11070,6 +11101,28 @@ type components = {
             /** Format: date-time */
             readonly verified_at: string;
         };
+        /**
+         * Attestation envelope
+         * @description DSSE v1 envelope. `payload` is base64 of the RFC 8785 (JCS) canonical statement JSON
+         *     `{kind: "codai.resolve.attestation.v1", attestation_id, repo_url, base_commit, patch_sha256,
+         *     repro_test: {path, sha256} | null, test_command, regression_command,
+         *     test_output_before_sha256, test_output_after_sha256, regression_output_sha256,
+         *     runner_image_digest, started_at, verified_at}`. Each `sig` is an ECDSA P-256/SHA-256 DER
+         *     signature (base64) over `PAE(payloadType, payload bytes)` =
+         *     `"DSSEv1 " + len(type) + " " + type + " " + len(body) + " " + body`.
+         */
+        readonly ResolveAttestationEnvelope: {
+            /** @description Base64 of the canonical statement JSON. */
+            readonly payload: string;
+            /** @constant */
+            readonly payloadType: 'application/vnd.codai.resolve.attestation+json;v=1';
+            readonly signatures: readonly {
+                /** @description Identifier of the signing key; matches `keyid` in `GET /v1/resolve/keys`. */
+                readonly keyid?: string;
+                /** @description DER-encoded ECDSA signature, base64. */
+                readonly sig: string;
+            }[];
+        };
         /**
          * Declined
          * @description `200` body — triage declined the issue. The job is persisted with `status: declined` and is never billed.
@@ -11213,6 +11266,26 @@ type components = {
          * @enum {string}
          */
         readonly ResolveJobStatus: 'triage' | 'quoted' | 'declined' | 'accepted' | 'running' | 'resolved' | 'failed' | 'error';
+        /** Verification key */
+        readonly ResolveKey: {
+            /** @constant */
+            readonly algorithm: 'ECDSA_P256_SHA256';
+            /**
+             * @description Envelope and signature encoding.
+             * @example DSSE v1; signature DER, base64
+             */
+            readonly encoding: string;
+            /** @description Key identifier (the Cloud KMS key version name). */
+            readonly keyid: string;
+            /** @constant */
+            readonly payload_type: 'application/vnd.codai.resolve.attestation+json;v=1';
+            /** @description SPKI public key, PEM. */
+            readonly public_key_pem: string;
+        };
+        /** Verification keys */
+        readonly ResolveKeys: {
+            readonly keys: readonly components['schemas']['ResolveKey'][];
+        };
         /**
          * Quote
          * @description `201` body — the job was quoted (`quoted`) or auto-accepted on the free tier (`accepted`).
@@ -11541,6 +11614,35 @@ interface operations {
             readonly 409: components['responses']['ResolveConflict'];
         };
     };
+    readonly getResolveKeys: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description Current verification keys. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components['schemas']['ResolveKeys'];
+                };
+            };
+            /** @description Attestation signing is not configured (`attestation signing not configured`). */
+            readonly 503: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components['schemas']['ResolveError'];
+                };
+            };
+        };
+    };
     readonly resolveJobWebhook: {
         readonly parameters: {
             readonly query?: never;
@@ -11592,6 +11694,10 @@ type ResolveJob = ResolveSchemas['ResolveJob'];
 type ResolveJobStatus = ResolveSchemas['ResolveJobStatus'];
 type ResolveTier = ResolveSchemas['ResolveTier'];
 type ResolveAttestation = ResolveSchemas['ResolveAttestation'];
+/** DSSE v1 envelope in `ResolveAttestation.signature` (`null` = unsigned, pre-2026-09-27). */
+type ResolveAttestationEnvelope = ResolveSchemas['ResolveAttestationEnvelope'];
+type ResolveKeys = ResolveSchemas['ResolveKeys'];
+type ResolveKey = ResolveSchemas['ResolveKey'];
 type ResolveReproTest = ResolveSchemas['ResolveReproTest'];
 type ResolveHealth = ResolveSchemas['ResolveHealth'];
 type ResolveValidationDetails = ResolveSchemas['ResolveValidationDetails'];
@@ -11617,6 +11723,25 @@ interface VerifyResolveWebhookOptions {
  * Throws only when `node:crypto` is unavailable in the current runtime.
  */
 declare function verifyResolveWebhook(secret: string, rawBody: string | Uint8Array, signatureHeader: string | null | undefined, opts?: VerifyResolveWebhookOptions): boolean;
+/** `payloadType` of Resolve attestation envelopes. */
+declare const RESOLVE_ATTESTATION_PAYLOAD_TYPE = "application/vnd.codai.resolve.attestation+json;v=1";
+type ResolveAttestationVerifyResult = {
+    ok: true;
+    keyid: string;
+} | {
+    ok: false;
+    reason: 'UNSIGNED' | 'BAD_SIGNATURE' | 'STATEMENT_MISMATCH' | 'BAD_PAYLOAD_TYPE';
+};
+/** The statement the Resolve service signs, recomputed from the attestation JSON. */
+declare function resolveAttestationStatement(att: ResolveAttestation): Record<string, unknown>;
+/**
+ * Verify a Resolve attestation offline against published keys: the DSSE
+ * signature (ECDSA P-256/SHA-256, DER) over `PAE(payloadType, payload)` must
+ * match one key, AND the signed statement must equal the one recomputed from
+ * the attestation's own fields (so a valid signature over other content fails).
+ * Server-side only (`node:crypto`, loaded lazily).
+ */
+declare function verifyAttestationWithKeys(att: ResolveAttestation, keys: ResolveKeys): ResolveAttestationVerifyResult;
 /** Statuses after which a job never changes again. */
 declare const RESOLVE_TERMINAL_STATUSES: ReadonlySet<ResolveJobStatus>;
 /** Any non-2xx answer from the Resolve service (flat `{ error }` body). */
@@ -11680,6 +11805,18 @@ declare class Resolve {
     attestation(idOrUrl: string, opts?: CallOpts$4): Promise<ResolveAttestation>;
     /** `GET /health` — liveness of the Resolve service. */
     health(opts?: CallOpts$4): Promise<ResolveHealth>;
+    /** `GET /v1/resolve/keys` — public keys that sign attestations (no auth needed server-side). */
+    keys(opts?: CallOpts$4): Promise<ResolveKeys>;
+    /**
+     * Verify an attestation's signature and that the signed statement matches
+     * its fields. Fetches `keys()` unless `opts.keys` is given (pin them to
+     * avoid trusting the network). `{ ok: false, reason: 'UNSIGNED' }` for
+     * attestations created before signing (2026-09-27). Server-side only.
+     */
+    verifyAttestation(att: ResolveAttestation, opts?: {
+        keys?: ResolveKeys;
+        signal?: AbortSignal;
+    }): Promise<ResolveAttestationVerifyResult>;
     /**
      * Poll `get(id)` until the job reaches a terminal status (`resolved`,
      * `failed`, `declined`, `error`) or one of `opts.until`. A `quoted` job
@@ -12186,4 +12323,4 @@ declare class Codai {
     private legacyExt;
 }
 
-export { Account, type AccountPatchRequest, type AccountPatchResponse, type AccountView, type AgentRun, type AgentRunAccepted, type AgentRunCreateRequest, type AgentRunRequest, type AgentRunResult, type AgentRunStats, type AgentRunStatus, type AgentRunStep, type AgentRunStreamEvent, AgentRuns, type AgentSyncResult, Agents, Audio, Chat, type ChatCallOptions, type ChatCompletionChunk, type ChatCompletionInput, type ChatCompletionRequest, type ChatCompletionResponse, ChatCompletions, type ChatMessage, type ChatOptions, type ChatResult, type ChatStream, type ChatStreamResult, type ChatTool, type ChatToolCall, type ChatUsage, Codai, type CodaiClientOptions, CodaiError, type CodaiRequestExtensions, type Device, type DevicePatch, type DevicePatched, Devices, type DispatchInbox, Embeddings, type EmbeddingsOptions, type EmbeddingsRequest, type EmbeddingsResponse, type EmbeddingsResult, type Environment, type EnvironmentAddMemberBody, type EnvironmentCreateBody, type EnvironmentDetail, type EnvironmentEnrollBody, type EnvironmentEnrollToken, type EnvironmentEnrolled, type EnvironmentMember, type EnvironmentMemberCreated, EnvironmentMembers, type EnvironmentPatchBody, type EnvironmentPort, type EnvironmentPortBody, EnvironmentPorts, type EnvironmentProvider, type EnvironmentRole, type EnvironmentSecret, type EnvironmentSecretSet, EnvironmentSecrets, type EnvironmentSshCa, type EnvironmentSshCert, type EnvironmentSshCertBody, type EnvironmentState, type EnvironmentTaskCreateBody, type EnvironmentTaskCreated, type EnvironmentTaskDetail, type EnvironmentTaskList, EnvironmentTasks, type EnvironmentTransition, Environments, type EphemeralScope, type EphemeralToken, type EphemeralTokenResponse, type ErrorCode, Feedback, type FeedbackRequest, type FeedbackResponse, Health, type HealthReadyResponse, type HealthResponse, type HostExecBody, type HostExecRequest, type HostExecResponse, type HostExecResultBody, type HostOp, type HostPresence, type HostStreamEvent, Hosts, HttpClient, type ListEnvironmentsQuery, type MessageCallOptions, type MessageInput, type MessageRequest, type MessageResponse, type MessageResult, type MessageStream, type MessageStreamEvent, type MessageStreamResult, Messages, type Model, type ModelList, Models, type NotificationList, Notifications, type NotificationsDeleted, type NotificationsRead, OPERATION_METHODS, type Org, type OrgAddMemberBody, type OrgMember, OrgMembers, type OrgRole, Orgs, type PhoneModel, PhoneModels, type Project, type ProjectCreateBody, type ProjectDetail, type ProjectIsolation, type ProjectPatchBody, Projects, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, type Receipt, Receipts, type RequestOptions, Resolve, type ResolveAccepted, type ResolveAttestation, type components as ResolveComponents, type ResolveDeclined, ResolveError, type ResolveHealth, type ResolveInsufficientFunds, ResolveInsufficientFundsError, type ResolveIntake, type ResolveJob, type ResolveJobStatus, type operations as ResolveOperations, type paths as ResolvePaths, type ResolveQuote, type ResolveReproTest, type ResolveSubmitResult, type ResolveTier, type ResolveValidationDetails, type ResolveWaitOptions, type ResolveWebhookEvent, type ResolveWebhookEventName, type ResolveWebhookJob, Responses, type ResponsesCallOptions, type ResponsesInput, type ResponsesRequest, type ResponsesResponse, type ResponsesResult, type ResponsesStream, type ResponsesStreamEvent, type ResponsesStreamResult, STREAMING_OPERATIONS, type Session, type SessionControl, type SessionControlAccepted, type SessionControlRequest, SessionControls, type SessionCreateRequest, type SessionDetail, type SessionDispatchRequest, type SessionDispatchResponse, type SessionEvent, SessionEvents, type SessionEventsAppendRequest, type SessionEventsAppendResponse, type SessionEventsPage, type SessionIncomingEvent, SessionLease, type SessionLeaseClaimRequest, type SessionLeaseResponse, type SessionListItem, type SessionPatchRequest, type SessionShare, type SessionShareCreateRequest, type SessionShareCreated, SessionShares, type SessionStreamEvent, Sessions, type SharedSession, type SpeechRequest, type SpeechResult, type SseFrame, type StatusResponse, type Task, type TaskConfirmRequest, type TaskConfirmResponse, type TaskListPage, type TaskListQuery, type TaskOutcome, type TaskStats, Tasks, type TokenUsage, Tokens, type ToolFetchRequest, type ToolFetchResponse, type ToolSearchRequest, type ToolSearchResponse, Tools, type TranscriptionOptions, type TranscriptionResponse, type TranscriptionResult, type TriggerCreateRequest, type TriggerCreated, type TriggerEvents, type TriggerList, type TriggerPatch, type TriggerTestRequest, type TriggerTestResult, type TriggerUpdated, Triggers, type VerifyResolveWebhookOptions, type components$1 as components, Codai as default, extensionHeaders, frameJson, mergeToolCall, type operations$1 as operations, type paths$1 as paths, readSse, verifyResolveWebhook };
+export { Account, type AccountPatchRequest, type AccountPatchResponse, type AccountView, type AgentRun, type AgentRunAccepted, type AgentRunCreateRequest, type AgentRunRequest, type AgentRunResult, type AgentRunStats, type AgentRunStatus, type AgentRunStep, type AgentRunStreamEvent, AgentRuns, type AgentSyncResult, Agents, Audio, Chat, type ChatCallOptions, type ChatCompletionChunk, type ChatCompletionInput, type ChatCompletionRequest, type ChatCompletionResponse, ChatCompletions, type ChatMessage, type ChatOptions, type ChatResult, type ChatStream, type ChatStreamResult, type ChatTool, type ChatToolCall, type ChatUsage, Codai, type CodaiClientOptions, CodaiError, type CodaiRequestExtensions, type Device, type DevicePatch, type DevicePatched, Devices, type DispatchInbox, Embeddings, type EmbeddingsOptions, type EmbeddingsRequest, type EmbeddingsResponse, type EmbeddingsResult, type Environment, type EnvironmentAddMemberBody, type EnvironmentCreateBody, type EnvironmentDetail, type EnvironmentEnrollBody, type EnvironmentEnrollToken, type EnvironmentEnrolled, type EnvironmentMember, type EnvironmentMemberCreated, EnvironmentMembers, type EnvironmentPatchBody, type EnvironmentPort, type EnvironmentPortBody, EnvironmentPorts, type EnvironmentProvider, type EnvironmentRole, type EnvironmentSecret, type EnvironmentSecretSet, EnvironmentSecrets, type EnvironmentSshCa, type EnvironmentSshCert, type EnvironmentSshCertBody, type EnvironmentState, type EnvironmentTaskCreateBody, type EnvironmentTaskCreated, type EnvironmentTaskDetail, type EnvironmentTaskList, EnvironmentTasks, type EnvironmentTransition, Environments, type EphemeralScope, type EphemeralToken, type EphemeralTokenResponse, type ErrorCode, Feedback, type FeedbackRequest, type FeedbackResponse, Health, type HealthReadyResponse, type HealthResponse, type HostExecBody, type HostExecRequest, type HostExecResponse, type HostExecResultBody, type HostOp, type HostPresence, type HostStreamEvent, Hosts, HttpClient, type ListEnvironmentsQuery, type MessageCallOptions, type MessageInput, type MessageRequest, type MessageResponse, type MessageResult, type MessageStream, type MessageStreamEvent, type MessageStreamResult, Messages, type Model, type ModelList, Models, type NotificationList, Notifications, type NotificationsDeleted, type NotificationsRead, OPERATION_METHODS, type Org, type OrgAddMemberBody, type OrgMember, OrgMembers, type OrgRole, Orgs, type PhoneModel, PhoneModels, type Project, type ProjectCreateBody, type ProjectDetail, type ProjectIsolation, type ProjectPatchBody, Projects, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, type Receipt, Receipts, type RequestOptions, Resolve, type ResolveAccepted, type ResolveAttestation, type ResolveAttestationEnvelope, type ResolveAttestationVerifyResult, type components as ResolveComponents, type ResolveDeclined, ResolveError, type ResolveHealth, type ResolveInsufficientFunds, ResolveInsufficientFundsError, type ResolveIntake, type ResolveJob, type ResolveJobStatus, type ResolveKey, type ResolveKeys, type operations as ResolveOperations, type paths as ResolvePaths, type ResolveQuote, type ResolveReproTest, type ResolveSubmitResult, type ResolveTier, type ResolveValidationDetails, type ResolveWaitOptions, type ResolveWebhookEvent, type ResolveWebhookEventName, type ResolveWebhookJob, Responses, type ResponsesCallOptions, type ResponsesInput, type ResponsesRequest, type ResponsesResponse, type ResponsesResult, type ResponsesStream, type ResponsesStreamEvent, type ResponsesStreamResult, STREAMING_OPERATIONS, type Session, type SessionControl, type SessionControlAccepted, type SessionControlRequest, SessionControls, type SessionCreateRequest, type SessionDetail, type SessionDispatchRequest, type SessionDispatchResponse, type SessionEvent, SessionEvents, type SessionEventsAppendRequest, type SessionEventsAppendResponse, type SessionEventsPage, type SessionIncomingEvent, SessionLease, type SessionLeaseClaimRequest, type SessionLeaseResponse, type SessionListItem, type SessionPatchRequest, type SessionShare, type SessionShareCreateRequest, type SessionShareCreated, SessionShares, type SessionStreamEvent, Sessions, type SharedSession, type SpeechRequest, type SpeechResult, type SseFrame, type StatusResponse, type Task, type TaskConfirmRequest, type TaskConfirmResponse, type TaskListPage, type TaskListQuery, type TaskOutcome, type TaskStats, Tasks, type TokenUsage, Tokens, type ToolFetchRequest, type ToolFetchResponse, type ToolSearchRequest, type ToolSearchResponse, Tools, type TranscriptionOptions, type TranscriptionResponse, type TranscriptionResult, type TriggerCreateRequest, type TriggerCreated, type TriggerEvents, type TriggerList, type TriggerPatch, type TriggerTestRequest, type TriggerTestResult, type TriggerUpdated, Triggers, type VerifyResolveWebhookOptions, type components$1 as components, Codai as default, extensionHeaders, frameJson, mergeToolCall, type operations$1 as operations, type paths$1 as paths, readSse, resolveAttestationStatement, verifyAttestationWithKeys, verifyResolveWebhook };

package/dist/index.js

@@ -1260,6 +1260,105 @@ function hexToBytes(hex) {
   for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
   return out;
 }
+var RESOLVE_ATTESTATION_PAYLOAD_TYPE = "application/vnd.codai.resolve.attestation+json;v=1";
+function verifyCrypto() {
+  const proc = globalThis.process;
+  const mod = proc?.getBuiltinModule?.("node:crypto");
+  if (!mod) {
+    throw new Error(
+      "verifyAttestation needs node:crypto (Node 20.16+/22.3+, Bun or Deno); run it server-side"
+    );
+  }
+  return mod;
+}
+function canonicalJson(v) {
+  if (v === null || typeof v !== "object") return JSON.stringify(v);
+  if (Array.isArray(v)) return `[${v.map(canonicalJson).join(",")}]`;
+  const o = v;
+  return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(",")}}`;
+}
+function base64ToBytes(b64) {
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function pae(payloadType, body) {
+  const enc2 = new TextEncoder();
+  const typeBytes = enc2.encode(payloadType);
+  const head = enc2.encode(`DSSEv1 ${typeBytes.length} ${payloadType} ${body.length} `);
+  const out = new Uint8Array(head.length + body.length);
+  out.set(head, 0);
+  out.set(body, head.length);
+  return out;
+}
+function resolveAttestationStatement(att) {
+  const { createHash } = verifyCrypto();
+  const enc2 = new TextEncoder();
+  const sha = (s) => s == null ? null : createHash("sha256").update(enc2.encode(s)).digest("hex");
+  return {
+    kind: "codai.resolve.attestation.v1",
+    attestation_id: att.id,
+    repo_url: att.repo_url,
+    base_commit: att.base_commit,
+    patch_sha256: sha(att.patch),
+    repro_test: att.repro_test?.path ? { path: att.repro_test.path, sha256: sha(att.repro_test.content) } : null,
+    test_command: att.test_command,
+    regression_command: att.regression_command,
+    test_output_before_sha256: sha(att.test_output_before),
+    test_output_after_sha256: sha(att.test_output_after),
+    regression_output_sha256: sha(att.regression_output),
+    runner_image_digest: att.runner_image_digest,
+    started_at: att.started_at,
+    verified_at: att.verified_at
+  };
+}
+function verifyAttestationWithKeys(att, keys) {
+  const env = att.signature;
+  if (!env || !Array.isArray(env.signatures) || env.signatures.length === 0)
+    return { ok: false, reason: "UNSIGNED" };
+  if (env.payloadType !== RESOLVE_ATTESTATION_PAYLOAD_TYPE)
+    return { ok: false, reason: "BAD_PAYLOAD_TYPE" };
+  const { createVerify } = verifyCrypto();
+  let body;
+  try {
+    body = base64ToBytes(env.payload);
+  } catch {
+    return { ok: false, reason: "BAD_SIGNATURE" };
+  }
+  const msg = pae(env.payloadType, body);
+  let keyid = null;
+  outer: for (const s of env.signatures) {
+    let sig;
+    try {
+      sig = base64ToBytes(s.sig);
+    } catch {
+      continue;
+    }
+    for (const k of keys.keys) {
+      if (k.payload_type && k.payload_type !== env.payloadType) continue;
+      try {
+        const v = createVerify("SHA256");
+        v.update(msg);
+        if (v.verify({ key: k.public_key_pem, dsaEncoding: "der" }, sig)) {
+          keyid = k.keyid;
+          break outer;
+        }
+      } catch {
+      }
+    }
+  }
+  if (keyid === null) return { ok: false, reason: "BAD_SIGNATURE" };
+  let signed;
+  try {
+    signed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(body));
+  } catch {
+    return { ok: false, reason: "STATEMENT_MISMATCH" };
+  }
+  if (canonicalJson(signed) !== canonicalJson(resolveAttestationStatement(att)))
+    return { ok: false, reason: "STATEMENT_MISMATCH" };
+  return { ok: true, keyid };
+}
 var RESOLVE_TERMINAL_STATUSES = /* @__PURE__ */ new Set([
   "resolved",
   "failed",
@@ -1347,6 +1446,21 @@ var Resolve = class {
   health(opts = {}) {
     return this.call("/health", { signal: opts.signal });
   }
+  /** `GET /v1/resolve/keys` — public keys that sign attestations (no auth needed server-side). */
+  keys(opts = {}) {
+    return this.call("/v1/resolve/keys", { signal: opts.signal });
+  }
+  /**
+   * Verify an attestation's signature and that the signed statement matches
+   * its fields. Fetches `keys()` unless `opts.keys` is given (pin them to
+   * avoid trusting the network). `{ ok: false, reason: 'UNSIGNED' }` for
+   * attestations created before signing (2026-09-27). Server-side only.
+   */
+  async verifyAttestation(att, opts = {}) {
+    if (!att.signature) return { ok: false, reason: "UNSIGNED" };
+    const keys = opts.keys ?? await this.keys({ signal: opts.signal });
+    return verifyAttestationWithKeys(att, keys);
+  }
   /**
    * Poll `get(id)` until the job reaches a terminal status (`resolved`,
    * `failed`, `declined`, `error`) or one of `opts.until`. A `quoted` job
@@ -2059,7 +2173,8 @@ var RESOLVE_OPERATION_METHODS = {
   createResolveJob: "resolve.submit",
   getResolveJob: "resolve.get",
   acceptResolveJob: "resolve.accept",
-  getResolveAttestation: "resolve.attestation"
+  getResolveAttestation: "resolve.attestation",
+  getResolveKeys: "resolve.keys"
 };
 
 // src/index.ts
@@ -2227,6 +2342,6 @@ function allKeys(obj) {
 }
 var index_default = Codai;
 
-export { Account, AgentRuns, Agents, Audio, Chat, ChatCompletions, Codai, CodaiError, Devices, Embeddings, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Feedback, Health, Hosts, HttpClient, Messages, Models, Notifications, OPERATION_METHODS, OrgMembers, Orgs, PhoneModels, Projects, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Receipts, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Tasks, Tokens, Tools, Triggers, index_default as default, extensionHeaders, frameJson, mergeToolCall, readSse, verifyResolveWebhook };
+export { Account, AgentRuns, Agents, Audio, Chat, ChatCompletions, Codai, CodaiError, Devices, Embeddings, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Feedback, Health, Hosts, HttpClient, Messages, Models, Notifications, OPERATION_METHODS, OrgMembers, Orgs, PhoneModels, Projects, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Receipts, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Tasks, Tokens, Tools, Triggers, index_default as default, extensionHeaders, frameJson, mergeToolCall, readSse, resolveAttestationStatement, verifyAttestationWithKeys, verifyResolveWebhook };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map