codai-sdk 0.6.0 → 0.8.0

package/README.md

@@ -65,7 +65,7 @@ surface.
 | `receipt`          | `get`                                                                                                                                                                                                | `GET /v1/receipt`                                        |
 | `feedback`         | `submit`                                                                                                                                                                                             | `POST /v1/feedback`                                      |
 | `phoneModels`      | `list`                                                                                                                                                                                               | `GET /v1/phone/models`                                   |
-| `resolve`          | `submit`, `get`, `accept`, `attestation`, `health`, `waitFor`                                                                                                                                        | `https://resolve.codai.ro/v1/resolve/*` (own host)       |
+| `resolve`          | `submit`, `get`, `accept`, `balance`, `attestation`, `keys`, `verifyAttestation`, `health`, `waitFor`                                                                                                | `https://resolve.codai.ro/v1/resolve/*` (own host)       |
 
 Every method takes an optional last argument `{ ext, signal }` where `ext` is a
 typed bag of `X-Codai-*` extension headers (see below).
@@ -180,7 +180,8 @@ if (q.status === 'quoted') {
   try {
     await codai.resolve.accept(q.id); // free-tier jobs are auto-accepted
   } catch (err) {
-    if (err instanceof ResolveInsufficientFundsError) console.log('top up:', err.topupUrl);
+    if (err instanceof ResolveInsufficientFundsError)
+      console.log('top up:', err.topupUrl, err.bundleUrl ?? ''); // bundleUrl: t7 only
     throw err;
   }
 }
@@ -198,6 +199,15 @@ with `balance`, `required`, `currency: 'micro_eur'` and `topupUrl`. `submit` and
 `accept` are never retried. `waitFor` stops at `resolved | failed | declined | error`
 (or `until`), and throws `ResolveError` with `status: 0` on timeout.
 
+**Pricing.** Your first paid accept holds **€1** instead of the list price (the quote then
+carries `intro_price_micro_eur` / `list_price_micro_eur`); it is used up only by a verified
+fix — a failed intro job is refunded and the intro is offered again. A **fix bundle** (€49 = 10
+credits, <https://pay.codai.ro/checkout?bundle=resolve10>) pays for `t7` jobs only: a credit is
+taken at accept instead of a wallet hold and returned on failure. Precedence:
+free > intro > credit (t7) > wallet; `accept()` reports it in `paid_with`, and a t7 `402`
+carries `bundleUrl`. `codai.resolve.balance()` returns `fix_credits`, `intro_available` and
+`wallet_micro_eur`.
+
 ### Webhooks instead of polling
 
 Pass `callback_url` (https, public host) on `submit`; the response carries
@@ -226,6 +236,24 @@ if (!verifyResolveWebhook(secret, raw, req.headers.get('x-codai-signature'))) {
 const evt = JSON.parse(raw) as ResolveWebhookEvent; // evt.event, evt.job.attestation_url
 ```
 
+### Verifying a signed attestation
+
+Attestations created from 2026-09-27 carry `signature`: a DSSE envelope
+(ECDSA P-256/SHA-256) over a canonical statement of sha256 hashes of the patch,
+repro test and test outputs, plus the commands, base commit, runner digest and
+timestamps. `verifyAttestation` checks the signature against
+`GET /v1/resolve/keys` **and** that the statement matches the fields you were
+served. Older attestations have `signature: null` → `{ ok: false, reason: 'UNSIGNED' }`.
+
+```ts
+const proof = await codai.resolve.attestation(job.attestation_url!);
+const r = await codai.resolve.verifyAttestation(proof); // or { keys: pinnedKeys }
+if (!r.ok) throw new Error(`attestation not verified: ${r.reason}`);
+// r.keyid — the signing key; reasons: UNSIGNED | BAD_SIGNATURE | STATEMENT_MISMATCH | BAD_PAYLOAD_TYPE
+```
+
+Offline (no network): `verifyAttestationWithKeys(proof, keys)`. Server-side only (`node:crypto`).
+
 ## Shared sessions, devices and hosts
 
 Shared-sessions and hosts calls need a device UUID (`x-codai-device`). Set it once

package/dist/index.d.ts

@@ -10940,6 +10940,28 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly '/v1/resolve/balance': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * Fix credits, intro availability and wallet balance
+         * @description Returns what you can pay with right now: the fix-credit balance (usable only on `t7`
+         *     jobs), whether the €1 intro price is still available (no verified paid job yet and no
+         *     other intro job in flight) and the wallet balance in EUR micros.
+         */
+        readonly get: operations['getResolveBalance'];
+        readonly put?: never;
+        readonly post?: never;
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
     readonly '/v1/resolve/jobs': {
         readonly parameters: {
             readonly query?: never;
@@ -11016,6 +11038,11 @@ type paths = {
          *     price). The hold is kept on a verified fix and refunded in full otherwise. If the
          *     balance is short, the answer is `402 insufficient_funds` with the shortfall and a
          *     top-up link, and the job stays `quoted` — top up, then call `/accept` again.
+         *
+         *     Payment precedence: `intro` (first paid job, €1 hold) > `credit` (t7 only, one fix credit,
+         *     no wallet hold) > `wallet` (hold of the list price). `paid_with` in the response says which
+         *     was used; `held_micro_eur` is the wallet amount held (`0` for a credit). For a `t7` job the
+         *     `402` also carries `bundle_url` (10 fixes for €49).
          */
         readonly post: operations['acceptResolveJob'];
         readonly delete?: never;
@@ -11024,13 +11051,43 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly '/v1/resolve/keys': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * Public keys that sign attestations
+         * @description Returns the public key(s) used to sign attestation envelopes (`signature` on
+         *     `GET /v1/resolve/attestations/{id}`). ECDSA P-256 / SHA-256 over the DSSE v1 PAE of the
+         *     payload; the signature is DER, base64. **Unauthenticated**, CORS-open and cacheable for
+         *     1 hour. Verify with `codaid resolve verify`, `resolve.verifyAttestation` (TypeScript) or
+         *     `resolve.verify_attestation` (Python). `503` when signing is not configured.
+         */
+        readonly get: operations['getResolveKeys'];
+        readonly put?: never;
+        readonly post?: never;
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
 };
 type components = {
     schemas: {
         /** Accepted */
         readonly ResolveAccepted: {
+            /**
+             * @description Amount held on the wallet in EUR micros — `1000000` for the intro, the quote for `wallet`, `0` for `credit`.
+             * @example 1000000
+             */
+            readonly held_micro_eur: number;
             /** Format: uuid */
             readonly id: string;
+            readonly paid_with: components['schemas']['ResolvePaidWith'];
             /** @constant */
             readonly status: 'accepted';
         };
@@ -11059,6 +11116,13 @@ type components = {
             readonly repro_test: components['schemas']['ResolveReproTest'] | null;
             /** @description Container image digest of the verification runner (`unknown` when not recorded). */
             readonly runner_image_digest: string;
+            /**
+             * @description DSSE envelope signing the canonical statement of this attestation (sha256 of the patch,
+             *     repro test, test outputs; commands, commit, runner digest, timestamps). `null` for
+             *     attestations created before signing was enabled (2026-09-27). Verify against
+             *     `GET /v1/resolve/keys`.
+             */
+            readonly signature: components['schemas']['ResolveAttestationEnvelope'] | null;
             /** Format: date-time */
             readonly started_at: string;
             /** @description FAIL_TO_PASS command that was executed. */
@@ -11070,6 +11134,46 @@ type components = {
             /** Format: date-time */
             readonly verified_at: string;
         };
+        /**
+         * Attestation envelope
+         * @description DSSE v1 envelope. `payload` is base64 of the RFC 8785 (JCS) canonical statement JSON
+         *     `{kind: "codai.resolve.attestation.v1", attestation_id, repo_url, base_commit, patch_sha256,
+         *     repro_test: {path, sha256} | null, test_command, regression_command,
+         *     test_output_before_sha256, test_output_after_sha256, regression_output_sha256,
+         *     runner_image_digest, started_at, verified_at}`. Each `sig` is an ECDSA P-256/SHA-256 DER
+         *     signature (base64) over `PAE(payloadType, payload bytes)` =
+         *     `"DSSEv1 " + len(type) + " " + type + " " + len(body) + " " + body`.
+         */
+        readonly ResolveAttestationEnvelope: {
+            /** @description Base64 of the canonical statement JSON. */
+            readonly payload: string;
+            /** @constant */
+            readonly payloadType: 'application/vnd.codai.resolve.attestation+json;v=1';
+            readonly signatures: readonly {
+                /** @description Identifier of the signing key; matches `keyid` in `GET /v1/resolve/keys`. */
+                readonly keyid?: string;
+                /** @description DER-encoded ECDSA signature, base64. */
+                readonly sig: string;
+            }[];
+        };
+        /**
+         * Balance
+         * @description Body of `GET /v1/resolve/balance`.
+         */
+        readonly ResolveBalance: {
+            /**
+             * @description Fix credits left (usable only on `t7` jobs). Buy 10 for €49 at https://pay.codai.ro/checkout?bundle=resolve10.
+             * @example 10
+             */
+            readonly fix_credits: number;
+            /** @description `true` while your next paid accept would hold the €1 intro price. */
+            readonly intro_available: boolean;
+            /**
+             * @description Wallet balance in EUR micros (`5000000` = €5.00).
+             * @example 5000000
+             */
+            readonly wallet_micro_eur: number;
+        };
         /**
          * Declined
          * @description `200` body — triage declined the issue. The job is persisted with `status: declined` and is never billed.
@@ -11114,6 +11218,12 @@ type components = {
              * @example 5000000
              */
             readonly balance: number;
+            /**
+             * Format: uri
+             * @description Present only for a `t7` job — checkout for the fix bundle (10 t7 fix credits for €49).
+             * @example https://pay.codai.ro/checkout?bundle=resolve10
+             */
+            readonly bundle_url?: string;
             /**
              * @description Unit of `balance` and `required`.
              * @constant
@@ -11194,6 +11304,8 @@ type components = {
             readonly fail_reason: string | null;
             /** Format: uuid */
             readonly id: string;
+            /** @description Present once the job was accepted (and recorded how it was paid). */
+            readonly paid_with?: components['schemas']['ResolvePaidWith'];
             /** @description Quoted price in USD micros; `null` until quoted, `0` on the free tier. */
             readonly quote_micro_usd: number | null;
             /**
@@ -11213,6 +11325,34 @@ type components = {
          * @enum {string}
          */
         readonly ResolveJobStatus: 'triage' | 'quoted' | 'declined' | 'accepted' | 'running' | 'resolved' | 'failed' | 'error';
+        /** Verification key */
+        readonly ResolveKey: {
+            /** @constant */
+            readonly algorithm: 'ECDSA_P256_SHA256';
+            /**
+             * @description Envelope and signature encoding.
+             * @example DSSE v1; signature DER, base64
+             */
+            readonly encoding: string;
+            /** @description Key identifier (the Cloud KMS key version name). */
+            readonly keyid: string;
+            /** @constant */
+            readonly payload_type: 'application/vnd.codai.resolve.attestation+json;v=1';
+            /** @description SPKI public key, PEM. */
+            readonly public_key_pem: string;
+        };
+        /** Verification keys */
+        readonly ResolveKeys: {
+            readonly keys: readonly components['schemas']['ResolveKey'][];
+        };
+        /**
+         * Payment method
+         * @description How an accepted job is paid: `free` (free tier), `intro` (first paid job, €1 hold),
+         *     `credit` (one t7 fix credit, no wallet hold) or `wallet` (hold of the list price).
+         *     Precedence: `free` > `intro` > `credit` > `wallet`.
+         * @enum {string}
+         */
+        readonly ResolvePaidWith: 'intro' | 'credit' | 'wallet' | 'free';
         /**
          * Quote
          * @description `201` body — the job was quoted (`quoted`) or auto-accepted on the free tier (`accepted`).
@@ -11228,6 +11368,17 @@ type components = {
             readonly free_tier_remaining: number;
             /** Format: uuid */
             readonly id: string;
+            /**
+             * @description Present only on a `quoted` job while the intro price applies to you: accepting holds
+             *     this amount (EUR micros, `1000000` = €1) instead of the list price.
+             * @example 1000000
+             */
+            readonly intro_price_micro_eur?: number;
+            /**
+             * @description Present together with `intro_price_micro_eur`; the regular hold in EUR micros (the quote 1:1).
+             * @example 7000000
+             */
+            readonly list_price_micro_eur?: number;
             /**
              * @description Quoted price in USD micros (`7000000` = $7). `0` on the free tier.
              * @example 7000000
@@ -11348,7 +11499,8 @@ type components = {
         /**
          * @description The wallet balance does not cover the quote. Nothing was debited and the job is still
          *     `quoted`. Open `topup_url` (pay.codai.ro checkout, shortfall rounded up to whole euros,
-         *     minimum €10, maximum €1000), then retry `/accept`.
+         *     minimum €10, maximum €1000) — or, for a `t7` job, `bundle_url` (10 fix credits for €49) —
+         *     then retry `/accept`.
          */
         readonly ResolveInsufficientFunds: {
             headers: {
@@ -11452,6 +11604,27 @@ interface operations {
             readonly 404: components['responses']['ResolveNotFound'];
         };
     };
+    readonly getResolveBalance: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description Current balance. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components['schemas']['ResolveBalance'];
+                };
+            };
+            readonly 401: components['responses']['ResolveUnauthorized'];
+        };
+    };
     readonly createResolveJob: {
         readonly parameters: {
             readonly query?: never;
@@ -11541,6 +11714,35 @@ interface operations {
             readonly 409: components['responses']['ResolveConflict'];
         };
     };
+    readonly getResolveKeys: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description Current verification keys. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components['schemas']['ResolveKeys'];
+                };
+            };
+            /** @description Attestation signing is not configured (`attestation signing not configured`). */
+            readonly 503: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components['schemas']['ResolveError'];
+                };
+            };
+        };
+    };
     readonly resolveJobWebhook: {
         readonly parameters: {
             readonly query?: never;
@@ -11588,10 +11790,18 @@ type ResolveDeclined = ResolveSchemas['ResolveDeclined'];
 /** `submit()` result: `201` quote / free-tier auto-accept, or `200` decline. */
 type ResolveSubmitResult = ResolveQuote | ResolveDeclined;
 type ResolveAccepted = ResolveSchemas['ResolveAccepted'];
+/** How an accepted job is paid: `free` > `intro` (€1) > `credit` (t7 fix credit) > `wallet`. */
+type ResolvePaidWith = ResolveSchemas['ResolvePaidWith'];
+/** `GET /v1/resolve/balance` — fix credits, intro availability, wallet (EUR micros). */
+type ResolveBalance = ResolveSchemas['ResolveBalance'];
 type ResolveJob = ResolveSchemas['ResolveJob'];
 type ResolveJobStatus = ResolveSchemas['ResolveJobStatus'];
 type ResolveTier = ResolveSchemas['ResolveTier'];
 type ResolveAttestation = ResolveSchemas['ResolveAttestation'];
+/** DSSE v1 envelope in `ResolveAttestation.signature` (`null` = unsigned, pre-2026-09-27). */
+type ResolveAttestationEnvelope = ResolveSchemas['ResolveAttestationEnvelope'];
+type ResolveKeys = ResolveSchemas['ResolveKeys'];
+type ResolveKey = ResolveSchemas['ResolveKey'];
 type ResolveReproTest = ResolveSchemas['ResolveReproTest'];
 type ResolveHealth = ResolveSchemas['ResolveHealth'];
 type ResolveValidationDetails = ResolveSchemas['ResolveValidationDetails'];
@@ -11617,6 +11827,25 @@ interface VerifyResolveWebhookOptions {
  * Throws only when `node:crypto` is unavailable in the current runtime.
  */
 declare function verifyResolveWebhook(secret: string, rawBody: string | Uint8Array, signatureHeader: string | null | undefined, opts?: VerifyResolveWebhookOptions): boolean;
+/** `payloadType` of Resolve attestation envelopes. */
+declare const RESOLVE_ATTESTATION_PAYLOAD_TYPE = "application/vnd.codai.resolve.attestation+json;v=1";
+type ResolveAttestationVerifyResult = {
+    ok: true;
+    keyid: string;
+} | {
+    ok: false;
+    reason: 'UNSIGNED' | 'BAD_SIGNATURE' | 'STATEMENT_MISMATCH' | 'BAD_PAYLOAD_TYPE';
+};
+/** The statement the Resolve service signs, recomputed from the attestation JSON. */
+declare function resolveAttestationStatement(att: ResolveAttestation): Record<string, unknown>;
+/**
+ * Verify a Resolve attestation offline against published keys: the DSSE
+ * signature (ECDSA P-256/SHA-256, DER) over `PAE(payloadType, payload)` must
+ * match one key, AND the signed statement must equal the one recomputed from
+ * the attestation's own fields (so a valid signature over other content fails).
+ * Server-side only (`node:crypto`, loaded lazily).
+ */
+declare function verifyAttestationWithKeys(att: ResolveAttestation, keys: ResolveKeys): ResolveAttestationVerifyResult;
 /** Statuses after which a job never changes again. */
 declare const RESOLVE_TERMINAL_STATUSES: ReadonlySet<ResolveJobStatus>;
 /** Any non-2xx answer from the Resolve service (flat `{ error }` body). */
@@ -11637,6 +11866,8 @@ declare class ResolveInsufficientFundsError extends ResolveError {
     readonly currency: 'micro_eur';
     /** pay.codai.ro checkout link for the shortfall — open it, then retry `accept()`. */
     readonly topupUrl: string;
+    /** Present only for a `t7` job: fix-bundle checkout (10 t7 fix credits for €49). */
+    readonly bundleUrl?: string;
     constructor(message: string, body: ResolveInsufficientFunds, meta?: {
         requestId?: string | null;
     });
@@ -11669,8 +11900,10 @@ declare class Resolve {
     get(id: string, opts?: CallOpts$4): Promise<ResolveJob>;
     /**
      * `POST /v1/resolve/jobs/{id}/accept` — accept a paid quote and start the job.
-     * Throws `ResolveInsufficientFundsError` (402, carries `topupUrl`) when the
-     * wallet is short, `ResolveError` 409 when the job is not `quoted`.
+     * The result's `paid_with` says how it was paid (`intro` €1 hold, `credit`
+     * t7 fix credit, or `wallet`). Throws `ResolveInsufficientFundsError` (402,
+     * carries `topupUrl`, plus `bundleUrl` for t7) when the wallet is short,
+     * `ResolveError` 409 when the job is not `quoted`.
      */
     accept(id: string, opts?: CallOpts$4): Promise<ResolveAccepted>;
     /**
@@ -11680,6 +11913,20 @@ declare class Resolve {
     attestation(idOrUrl: string, opts?: CallOpts$4): Promise<ResolveAttestation>;
     /** `GET /health` — liveness of the Resolve service. */
     health(opts?: CallOpts$4): Promise<ResolveHealth>;
+    /** `GET /v1/resolve/balance` — fix credits (t7 only), intro availability and wallet balance. */
+    balance(opts?: CallOpts$4): Promise<ResolveBalance>;
+    /** `GET /v1/resolve/keys` — public keys that sign attestations (no auth needed server-side). */
+    keys(opts?: CallOpts$4): Promise<ResolveKeys>;
+    /**
+     * Verify an attestation's signature and that the signed statement matches
+     * its fields. Fetches `keys()` unless `opts.keys` is given (pin them to
+     * avoid trusting the network). `{ ok: false, reason: 'UNSIGNED' }` for
+     * attestations created before signing (2026-09-27). Server-side only.
+     */
+    verifyAttestation(att: ResolveAttestation, opts?: {
+        keys?: ResolveKeys;
+        signal?: AbortSignal;
+    }): Promise<ResolveAttestationVerifyResult>;
     /**
      * Poll `get(id)` until the job reaches a terminal status (`resolved`,
      * `failed`, `declined`, `error`) or one of `opts.until`. A `quoted` job
@@ -12186,4 +12433,4 @@ declare class Codai {
     private legacyExt;
 }
 
-export { Account, type AccountPatchRequest, type AccountPatchResponse, type AccountView, type AgentRun, type AgentRunAccepted, type AgentRunCreateRequest, type AgentRunRequest, type AgentRunResult, type AgentRunStats, type AgentRunStatus, type AgentRunStep, type AgentRunStreamEvent, AgentRuns, type AgentSyncResult, Agents, Audio, Chat, type ChatCallOptions, type ChatCompletionChunk, type ChatCompletionInput, type ChatCompletionRequest, type ChatCompletionResponse, ChatCompletions, type ChatMessage, type ChatOptions, type ChatResult, type ChatStream, type ChatStreamResult, type ChatTool, type ChatToolCall, type ChatUsage, Codai, type CodaiClientOptions, CodaiError, type CodaiRequestExtensions, type Device, type DevicePatch, type DevicePatched, Devices, type DispatchInbox, Embeddings, type EmbeddingsOptions, type EmbeddingsRequest, type EmbeddingsResponse, type EmbeddingsResult, type Environment, type EnvironmentAddMemberBody, type EnvironmentCreateBody, type EnvironmentDetail, type EnvironmentEnrollBody, type EnvironmentEnrollToken, type EnvironmentEnrolled, type EnvironmentMember, type EnvironmentMemberCreated, EnvironmentMembers, type EnvironmentPatchBody, type EnvironmentPort, type EnvironmentPortBody, EnvironmentPorts, type EnvironmentProvider, type EnvironmentRole, type EnvironmentSecret, type EnvironmentSecretSet, EnvironmentSecrets, type EnvironmentSshCa, type EnvironmentSshCert, type EnvironmentSshCertBody, type EnvironmentState, type EnvironmentTaskCreateBody, type EnvironmentTaskCreated, type EnvironmentTaskDetail, type EnvironmentTaskList, EnvironmentTasks, type EnvironmentTransition, Environments, type EphemeralScope, type EphemeralToken, type EphemeralTokenResponse, type ErrorCode, Feedback, type FeedbackRequest, type FeedbackResponse, Health, type HealthReadyResponse, type HealthResponse, type HostExecBody, type HostExecRequest, type HostExecResponse, type HostExecResultBody, type HostOp, type HostPresence, type HostStreamEvent, Hosts, HttpClient, type ListEnvironmentsQuery, type MessageCallOptions, type MessageInput, type MessageRequest, type MessageResponse, type MessageResult, type MessageStream, type MessageStreamEvent, type MessageStreamResult, Messages, type Model, type ModelList, Models, type NotificationList, Notifications, type NotificationsDeleted, type NotificationsRead, OPERATION_METHODS, type Org, type OrgAddMemberBody, type OrgMember, OrgMembers, type OrgRole, Orgs, type PhoneModel, PhoneModels, type Project, type ProjectCreateBody, type ProjectDetail, type ProjectIsolation, type ProjectPatchBody, Projects, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, type Receipt, Receipts, type RequestOptions, Resolve, type ResolveAccepted, type ResolveAttestation, type components as ResolveComponents, type ResolveDeclined, ResolveError, type ResolveHealth, type ResolveInsufficientFunds, ResolveInsufficientFundsError, type ResolveIntake, type ResolveJob, type ResolveJobStatus, type operations as ResolveOperations, type paths as ResolvePaths, type ResolveQuote, type ResolveReproTest, type ResolveSubmitResult, type ResolveTier, type ResolveValidationDetails, type ResolveWaitOptions, type ResolveWebhookEvent, type ResolveWebhookEventName, type ResolveWebhookJob, Responses, type ResponsesCallOptions, type ResponsesInput, type ResponsesRequest, type ResponsesResponse, type ResponsesResult, type ResponsesStream, type ResponsesStreamEvent, type ResponsesStreamResult, STREAMING_OPERATIONS, type Session, type SessionControl, type SessionControlAccepted, type SessionControlRequest, SessionControls, type SessionCreateRequest, type SessionDetail, type SessionDispatchRequest, type SessionDispatchResponse, type SessionEvent, SessionEvents, type SessionEventsAppendRequest, type SessionEventsAppendResponse, type SessionEventsPage, type SessionIncomingEvent, SessionLease, type SessionLeaseClaimRequest, type SessionLeaseResponse, type SessionListItem, type SessionPatchRequest, type SessionShare, type SessionShareCreateRequest, type SessionShareCreated, SessionShares, type SessionStreamEvent, Sessions, type SharedSession, type SpeechRequest, type SpeechResult, type SseFrame, type StatusResponse, type Task, type TaskConfirmRequest, type TaskConfirmResponse, type TaskListPage, type TaskListQuery, type TaskOutcome, type TaskStats, Tasks, type TokenUsage, Tokens, type ToolFetchRequest, type ToolFetchResponse, type ToolSearchRequest, type ToolSearchResponse, Tools, type TranscriptionOptions, type TranscriptionResponse, type TranscriptionResult, type TriggerCreateRequest, type TriggerCreated, type TriggerEvents, type TriggerList, type TriggerPatch, type TriggerTestRequest, type TriggerTestResult, type TriggerUpdated, Triggers, type VerifyResolveWebhookOptions, type components$1 as components, Codai as default, extensionHeaders, frameJson, mergeToolCall, type operations$1 as operations, type paths$1 as paths, readSse, verifyResolveWebhook };
+export { Account, type AccountPatchRequest, type AccountPatchResponse, type AccountView, type AgentRun, type AgentRunAccepted, type AgentRunCreateRequest, type AgentRunRequest, type AgentRunResult, type AgentRunStats, type AgentRunStatus, type AgentRunStep, type AgentRunStreamEvent, AgentRuns, type AgentSyncResult, Agents, Audio, Chat, type ChatCallOptions, type ChatCompletionChunk, type ChatCompletionInput, type ChatCompletionRequest, type ChatCompletionResponse, ChatCompletions, type ChatMessage, type ChatOptions, type ChatResult, type ChatStream, type ChatStreamResult, type ChatTool, type ChatToolCall, type ChatUsage, Codai, type CodaiClientOptions, CodaiError, type CodaiRequestExtensions, type Device, type DevicePatch, type DevicePatched, Devices, type DispatchInbox, Embeddings, type EmbeddingsOptions, type EmbeddingsRequest, type EmbeddingsResponse, type EmbeddingsResult, type Environment, type EnvironmentAddMemberBody, type EnvironmentCreateBody, type EnvironmentDetail, type EnvironmentEnrollBody, type EnvironmentEnrollToken, type EnvironmentEnrolled, type EnvironmentMember, type EnvironmentMemberCreated, EnvironmentMembers, type EnvironmentPatchBody, type EnvironmentPort, type EnvironmentPortBody, EnvironmentPorts, type EnvironmentProvider, type EnvironmentRole, type EnvironmentSecret, type EnvironmentSecretSet, EnvironmentSecrets, type EnvironmentSshCa, type EnvironmentSshCert, type EnvironmentSshCertBody, type EnvironmentState, type EnvironmentTaskCreateBody, type EnvironmentTaskCreated, type EnvironmentTaskDetail, type EnvironmentTaskList, EnvironmentTasks, type EnvironmentTransition, Environments, type EphemeralScope, type EphemeralToken, type EphemeralTokenResponse, type ErrorCode, Feedback, type FeedbackRequest, type FeedbackResponse, Health, type HealthReadyResponse, type HealthResponse, type HostExecBody, type HostExecRequest, type HostExecResponse, type HostExecResultBody, type HostOp, type HostPresence, type HostStreamEvent, Hosts, HttpClient, type ListEnvironmentsQuery, type MessageCallOptions, type MessageInput, type MessageRequest, type MessageResponse, type MessageResult, type MessageStream, type MessageStreamEvent, type MessageStreamResult, Messages, type Model, type ModelList, Models, type NotificationList, Notifications, type NotificationsDeleted, type NotificationsRead, OPERATION_METHODS, type Org, type OrgAddMemberBody, type OrgMember, OrgMembers, type OrgRole, Orgs, type PhoneModel, PhoneModels, type Project, type ProjectCreateBody, type ProjectDetail, type ProjectIsolation, type ProjectPatchBody, Projects, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, type Receipt, Receipts, type RequestOptions, Resolve, type ResolveAccepted, type ResolveAttestation, type ResolveAttestationEnvelope, type ResolveAttestationVerifyResult, type ResolveBalance, type components as ResolveComponents, type ResolveDeclined, ResolveError, type ResolveHealth, type ResolveInsufficientFunds, ResolveInsufficientFundsError, type ResolveIntake, type ResolveJob, type ResolveJobStatus, type ResolveKey, type ResolveKeys, type operations as ResolveOperations, type ResolvePaidWith, type paths as ResolvePaths, type ResolveQuote, type ResolveReproTest, type ResolveSubmitResult, type ResolveTier, type ResolveValidationDetails, type ResolveWaitOptions, type ResolveWebhookEvent, type ResolveWebhookEventName, type ResolveWebhookJob, Responses, type ResponsesCallOptions, type ResponsesInput, type ResponsesRequest, type ResponsesResponse, type ResponsesResult, type ResponsesStream, type ResponsesStreamEvent, type ResponsesStreamResult, STREAMING_OPERATIONS, type Session, type SessionControl, type SessionControlAccepted, type SessionControlRequest, SessionControls, type SessionCreateRequest, type SessionDetail, type SessionDispatchRequest, type SessionDispatchResponse, type SessionEvent, SessionEvents, type SessionEventsAppendRequest, type SessionEventsAppendResponse, type SessionEventsPage, type SessionIncomingEvent, SessionLease, type SessionLeaseClaimRequest, type SessionLeaseResponse, type SessionListItem, type SessionPatchRequest, type SessionShare, type SessionShareCreateRequest, type SessionShareCreated, SessionShares, type SessionStreamEvent, Sessions, type SharedSession, type SpeechRequest, type SpeechResult, type SseFrame, type StatusResponse, type Task, type TaskConfirmRequest, type TaskConfirmResponse, type TaskListPage, type TaskListQuery, type TaskOutcome, type TaskStats, Tasks, type TokenUsage, Tokens, type ToolFetchRequest, type ToolFetchResponse, type ToolSearchRequest, type ToolSearchResponse, Tools, type TranscriptionOptions, type TranscriptionResponse, type TranscriptionResult, type TriggerCreateRequest, type TriggerCreated, type TriggerEvents, type TriggerList, type TriggerPatch, type TriggerTestRequest, type TriggerTestResult, type TriggerUpdated, Triggers, type VerifyResolveWebhookOptions, type components$1 as components, Codai as default, extensionHeaders, frameJson, mergeToolCall, type operations$1 as operations, type paths$1 as paths, readSse, resolveAttestationStatement, verifyAttestationWithKeys, verifyResolveWebhook };

package/dist/index.js

@@ -1260,6 +1260,105 @@ function hexToBytes(hex) {
   for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
   return out;
 }
+var RESOLVE_ATTESTATION_PAYLOAD_TYPE = "application/vnd.codai.resolve.attestation+json;v=1";
+function verifyCrypto() {
+  const proc = globalThis.process;
+  const mod = proc?.getBuiltinModule?.("node:crypto");
+  if (!mod) {
+    throw new Error(
+      "verifyAttestation needs node:crypto (Node 20.16+/22.3+, Bun or Deno); run it server-side"
+    );
+  }
+  return mod;
+}
+function canonicalJson(v) {
+  if (v === null || typeof v !== "object") return JSON.stringify(v);
+  if (Array.isArray(v)) return `[${v.map(canonicalJson).join(",")}]`;
+  const o = v;
+  return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(",")}}`;
+}
+function base64ToBytes(b64) {
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function pae(payloadType, body) {
+  const enc2 = new TextEncoder();
+  const typeBytes = enc2.encode(payloadType);
+  const head = enc2.encode(`DSSEv1 ${typeBytes.length} ${payloadType} ${body.length} `);
+  const out = new Uint8Array(head.length + body.length);
+  out.set(head, 0);
+  out.set(body, head.length);
+  return out;
+}
+function resolveAttestationStatement(att) {
+  const { createHash } = verifyCrypto();
+  const enc2 = new TextEncoder();
+  const sha = (s) => s == null ? null : createHash("sha256").update(enc2.encode(s)).digest("hex");
+  return {
+    kind: "codai.resolve.attestation.v1",
+    attestation_id: att.id,
+    repo_url: att.repo_url,
+    base_commit: att.base_commit,
+    patch_sha256: sha(att.patch),
+    repro_test: att.repro_test?.path ? { path: att.repro_test.path, sha256: sha(att.repro_test.content) } : null,
+    test_command: att.test_command,
+    regression_command: att.regression_command,
+    test_output_before_sha256: sha(att.test_output_before),
+    test_output_after_sha256: sha(att.test_output_after),
+    regression_output_sha256: sha(att.regression_output),
+    runner_image_digest: att.runner_image_digest,
+    started_at: att.started_at,
+    verified_at: att.verified_at
+  };
+}
+function verifyAttestationWithKeys(att, keys) {
+  const env = att.signature;
+  if (!env || !Array.isArray(env.signatures) || env.signatures.length === 0)
+    return { ok: false, reason: "UNSIGNED" };
+  if (env.payloadType !== RESOLVE_ATTESTATION_PAYLOAD_TYPE)
+    return { ok: false, reason: "BAD_PAYLOAD_TYPE" };
+  const { createVerify } = verifyCrypto();
+  let body;
+  try {
+    body = base64ToBytes(env.payload);
+  } catch {
+    return { ok: false, reason: "BAD_SIGNATURE" };
+  }
+  const msg = pae(env.payloadType, body);
+  let keyid = null;
+  outer: for (const s of env.signatures) {
+    let sig;
+    try {
+      sig = base64ToBytes(s.sig);
+    } catch {
+      continue;
+    }
+    for (const k of keys.keys) {
+      if (k.payload_type && k.payload_type !== env.payloadType) continue;
+      try {
+        const v = createVerify("SHA256");
+        v.update(msg);
+        if (v.verify({ key: k.public_key_pem, dsaEncoding: "der" }, sig)) {
+          keyid = k.keyid;
+          break outer;
+        }
+      } catch {
+      }
+    }
+  }
+  if (keyid === null) return { ok: false, reason: "BAD_SIGNATURE" };
+  let signed;
+  try {
+    signed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(body));
+  } catch {
+    return { ok: false, reason: "STATEMENT_MISMATCH" };
+  }
+  if (canonicalJson(signed) !== canonicalJson(resolveAttestationStatement(att)))
+    return { ok: false, reason: "STATEMENT_MISMATCH" };
+  return { ok: true, keyid };
+}
 var RESOLVE_TERMINAL_STATUSES = /* @__PURE__ */ new Set([
   "resolved",
   "failed",
@@ -1283,6 +1382,8 @@ var ResolveInsufficientFundsError = class extends ResolveError {
   currency;
   /** pay.codai.ro checkout link for the shortfall — open it, then retry `accept()`. */
   topupUrl;
+  /** Present only for a `t7` job: fix-bundle checkout (10 t7 fix credits for €49). */
+  bundleUrl;
   constructor(message, body, meta = {}) {
     super(message, 402, body, meta);
     this.name = "ResolveInsufficientFundsError";
@@ -1290,6 +1391,7 @@ var ResolveInsufficientFundsError = class extends ResolveError {
     this.required = body.required;
     this.currency = body.currency;
     this.topupUrl = body.topup_url;
+    if (typeof body.bundle_url === "string") this.bundleUrl = body.bundle_url;
   }
 };
 var Resolve = class {
@@ -1321,8 +1423,10 @@ var Resolve = class {
   }
   /**
    * `POST /v1/resolve/jobs/{id}/accept` — accept a paid quote and start the job.
-   * Throws `ResolveInsufficientFundsError` (402, carries `topupUrl`) when the
-   * wallet is short, `ResolveError` 409 when the job is not `quoted`.
+   * The result's `paid_with` says how it was paid (`intro` €1 hold, `credit`
+   * t7 fix credit, or `wallet`). Throws `ResolveInsufficientFundsError` (402,
+   * carries `topupUrl`, plus `bundleUrl` for t7) when the wallet is short,
+   * `ResolveError` 409 when the job is not `quoted`.
    */
   accept(id, opts = {}) {
     return this.call(`/v1/resolve/jobs/${encodeURIComponent(id)}/accept`, {
@@ -1347,6 +1451,25 @@ var Resolve = class {
   health(opts = {}) {
     return this.call("/health", { signal: opts.signal });
   }
+  /** `GET /v1/resolve/balance` — fix credits (t7 only), intro availability and wallet balance. */
+  balance(opts = {}) {
+    return this.call("/v1/resolve/balance", { signal: opts.signal });
+  }
+  /** `GET /v1/resolve/keys` — public keys that sign attestations (no auth needed server-side). */
+  keys(opts = {}) {
+    return this.call("/v1/resolve/keys", { signal: opts.signal });
+  }
+  /**
+   * Verify an attestation's signature and that the signed statement matches
+   * its fields. Fetches `keys()` unless `opts.keys` is given (pin them to
+   * avoid trusting the network). `{ ok: false, reason: 'UNSIGNED' }` for
+   * attestations created before signing (2026-09-27). Server-side only.
+   */
+  async verifyAttestation(att, opts = {}) {
+    if (!att.signature) return { ok: false, reason: "UNSIGNED" };
+    const keys = opts.keys ?? await this.keys({ signal: opts.signal });
+    return verifyAttestationWithKeys(att, keys);
+  }
   /**
    * Poll `get(id)` until the job reaches a terminal status (`resolved`,
    * `failed`, `declined`, `error`) or one of `opts.until`. A `quoted` job
@@ -1397,7 +1520,7 @@ function toResolveError(path, err) {
   if (err.status === 402 && isInsufficientFunds(err.body)) {
     const b = err.body;
     return new ResolveInsufficientFundsError(
-      `codai-resolve ${path} \u2192 402: insufficient funds (balance ${b.balance}, required ${b.required} ${b.currency}); top up at ${b.topup_url}`,
+      `codai-resolve ${path} \u2192 402: insufficient funds (balance ${b.balance}, required ${b.required} ${b.currency}); top up at ${b.topup_url}${b.bundle_url ? ` or buy 10 t7 fixes for \u20AC49 at ${b.bundle_url}` : ""}`,
       b,
       meta
     );
@@ -2059,7 +2182,9 @@ var RESOLVE_OPERATION_METHODS = {
   createResolveJob: "resolve.submit",
   getResolveJob: "resolve.get",
   acceptResolveJob: "resolve.accept",
-  getResolveAttestation: "resolve.attestation"
+  getResolveAttestation: "resolve.attestation",
+  getResolveKeys: "resolve.keys",
+  getResolveBalance: "resolve.balance"
 };
 
 // src/index.ts
@@ -2227,6 +2352,6 @@ function allKeys(obj) {
 }
 var index_default = Codai;
 
-export { Account, AgentRuns, Agents, Audio, Chat, ChatCompletions, Codai, CodaiError, Devices, Embeddings, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Feedback, Health, Hosts, HttpClient, Messages, Models, Notifications, OPERATION_METHODS, OrgMembers, Orgs, PhoneModels, Projects, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Receipts, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Tasks, Tokens, Tools, Triggers, index_default as default, extensionHeaders, frameJson, mergeToolCall, readSse, verifyResolveWebhook };
+export { Account, AgentRuns, Agents, Audio, Chat, ChatCompletions, Codai, CodaiError, Devices, Embeddings, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Feedback, Health, Hosts, HttpClient, Messages, Models, Notifications, OPERATION_METHODS, OrgMembers, Orgs, PhoneModels, Projects, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Receipts, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Tasks, Tokens, Tools, Triggers, index_default as default, extensionHeaders, frameJson, mergeToolCall, readSse, resolveAttestationStatement, verifyAttestationWithKeys, verifyResolveWebhook };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map