secretvm-verify 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1 @@
1
+ {"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAqB,UAAU,EAAE,MAAM,YAAY,CAAC;AAE3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,YAAY,GAAG;IACnB,0DAA0D;IAC1D,0DAA0D;CAC3D,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,WAAW,KAAK,GAAG,CAAC,EAAE;YACpC,QAAQ;SACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAY,EACZ,IAAY;IAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CACxB,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EACxC,GAAG,EAAE;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,WAAW,GAAG,MAAM;iBACvB,UAAU,CAAC,QAAQ,CAAC;iBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;iBAChB,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CACF,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,QAAQ;QAAE,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAClC,IAAI,GAAG,IAAI;SACR,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;SACpE,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;SAClF,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACxE,OAAO,WAAW,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,KAAa;IAEb,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,QAAQ,CAClC,WAAW,CAAC,eAAe,EAC3B,YAAY,EACZ,QAAQ,CACT,CAAC;IAEF,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,iDAAiD,OAAO,OAAO,WAAW,CAAC,IAAI,EAAE,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,2DAA2D;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAC3C,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAED,MAAM,KAAK,GACR,QAAQ,CAAC,cAAuC;QAChD,QAAQ,CAAC,eAAwC;QAClD,EAAE,CAAC;IAEL,OAAO;QACL,IAAI,EACF,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;YACvD,CAAC,CAAC,QAAQ,CAAC,IAAI;YACf,CAAC,CAAC,SAAS,OAAO,EAAE;QACxB,WAAW,EACT,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC7E,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACjD,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAuB;IAEvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC;IAElC,uBAAuB;IACvB,MAAM,iBAAiB,GAAG,QAAQ,CAAC,cAAc;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC3B,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACtD,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,OAAO,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACpE,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,OAAO,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAE7B,iBAAiB;IACjB,MAAM,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,CAAC;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;QACnC,CAAC,CAAC,GAAG,OAAO,MAAM,CAAC;IAErB,MAAM,eAAe,GAAG,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,eAAe;QACjC,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC;QACpC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC;YAC9C,CAAC,CAAC,GAAG,OAAO,iBAAiB,CAAC;IAElC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAErD,iCAAiC;IACjC,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,MAAM,CAAC,eAAe,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACjC,OAAO,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAClC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACjC,OAAO,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,KAAK,CAAC;IAC/C,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;IAC9B,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC;IAC5C,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAEvD,iBAAiB;IACjB,MAAM,aAAa,GAAW,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IACjE,IAAI,aAAa,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,GAAG,SAAS,KAAK,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CACT,+CAA+C,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;gBAC1E,uBAAuB,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,0BAA0B;IAC1B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;gBACvB,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;IACnC,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,KAAK,CAAC;QAC/C,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAW,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,IAAI,aAAa,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,WAAW,GAAG,UAAU,KAAK,QAAQ,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CACT,gDAAgD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;oBAC5E,iBAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAE/B,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,CAAC,iBAAiB,GAAG,cAAc,CAAC,MAAM,KAAK,iBAAiB,CAAC;QACvE,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;QACjC,IAAI,cAAc,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACtF,CAAC;aAAM,IAAI,cAAc,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,mBAAmB;IACnB,MAAM,cAAc,GAAG;QACrB,MAAM,CAAC,cAAc;QACrB,MAAM,CAAC,iBAAiB;QACxB,MAAM,CAAC,iBAAiB;QACxB,MAAM,CAAC,qBAAqB;QAC5B,MAAM,CAAC,WAAW;QAClB,CAAC,CAAC,MAAM,CAAC,iBAAiB;KAC3B,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE5C,OAAO,UAAU,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,KAAa;IAEb,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,OAAO,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAE3D,OAAO,MAAM,CAAC;AAChB,CAAC"}
package/dist/amd.d.ts ADDED
@@ -0,0 +1,2 @@
1
+ import { AttestationResult } from "./types.js";
2
+ export declare function checkSevCpuAttestation(data: string, product?: string): Promise<AttestationResult>;
package/dist/amd.js ADDED
@@ -0,0 +1,287 @@
1
+ import crypto from "node:crypto";
2
+ import { execFileSync } from "node:child_process";
3
+ import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
4
+ import { join } from "node:path";
5
+ import { tmpdir } from "node:os";
6
+ import { makeResult } from "./types.js";
7
+ const AMD_KDS_BASE = "https://kdsintf.amd.com";
8
+ const REPORT_SIZE = 0x4a0;
9
+ const SIG_OFFSET = 0x2a0;
10
+ const SIG_COMPONENT_SIZE = 72;
11
+ const SIG_VALUE_SIZE = 48;
12
+ function parseTcb(buf) {
13
+ return {
14
+ bootLoader: buf[0],
15
+ tee: buf[1],
16
+ snp: buf[6],
17
+ microcode: buf[7],
18
+ };
19
+ }
20
+ /** Convert raw little-endian R, S buffers to DER-encoded ECDSA signature. */
21
+ function ecdsaLeRsToDer(rLE, sLE) {
22
+ // Reverse to big-endian
23
+ const r = Buffer.from(rLE);
24
+ r.reverse();
25
+ const s = Buffer.from(sLE);
26
+ s.reverse();
27
+ function encodeInt(v) {
28
+ let i = 0;
29
+ while (i < v.length - 1 && v[i] === 0)
30
+ i++;
31
+ let trimmed = v.subarray(i);
32
+ if (trimmed[0] & 0x80) {
33
+ trimmed = Buffer.concat([Buffer.from([0x00]), trimmed]);
34
+ }
35
+ return Buffer.concat([Buffer.from([0x02, trimmed.length]), trimmed]);
36
+ }
37
+ const ri = encodeInt(r);
38
+ const si = encodeInt(s);
39
+ return Buffer.concat([Buffer.from([0x30, ri.length + si.length]), ri, si]);
40
+ }
41
+ // ---------------------------------------------------------------------------
42
+ // Report parser
43
+ // ---------------------------------------------------------------------------
44
+ function parseReport(raw) {
45
+ if (raw.length < REPORT_SIZE) {
46
+ throw new Error(`Report too short: ${raw.length} bytes (expected ${REPORT_SIZE})`);
47
+ }
48
+ const version = raw.readUInt32LE(0x000);
49
+ if (version < 2) {
50
+ throw new Error(`Unsupported report version: ${version} (expected >= 2)`);
51
+ }
52
+ const sigAlgo = raw.readUInt32LE(0x034);
53
+ if (sigAlgo !== 1) {
54
+ throw new Error(`Unsupported signature algorithm: ${sigAlgo} (expected 1 = ECDSA-P384-SHA384)`);
55
+ }
56
+ const policy = raw.readBigUInt64LE(0x008);
57
+ const platformInfo = raw.readBigUInt64LE(0x040);
58
+ return {
59
+ version,
60
+ guestSvn: raw.readUInt32LE(0x004),
61
+ policy,
62
+ familyId: raw.subarray(0x010, 0x020),
63
+ imageId: raw.subarray(0x020, 0x030),
64
+ vmpl: raw.readUInt32LE(0x030),
65
+ signatureAlgo: sigAlgo,
66
+ currentTcb: parseTcb(raw.subarray(0x038, 0x040)),
67
+ platformInfo,
68
+ authorKeyEn: raw.readUInt32LE(0x048),
69
+ reportData: raw.subarray(0x050, 0x090),
70
+ measurement: raw.subarray(0x090, 0x0c0),
71
+ hostData: raw.subarray(0x0c0, 0x0e0),
72
+ idKeyDigest: raw.subarray(0x0e0, 0x110),
73
+ authorKeyDigest: raw.subarray(0x110, 0x140),
74
+ reportId: raw.subarray(0x140, 0x160),
75
+ reportIdMa: raw.subarray(0x160, 0x180),
76
+ reportedTcb: parseTcb(raw.subarray(0x180, 0x188)),
77
+ chipId: raw.subarray(0x1a0, 0x1e0),
78
+ committedTcb: parseTcb(raw.subarray(0x1e0, 0x1e8)),
79
+ currentBuild: raw[0x1e8],
80
+ currentMinor: raw[0x1e9],
81
+ currentMajor: raw[0x1ea],
82
+ committedBuild: raw[0x1ec],
83
+ committedMinor: raw[0x1ed],
84
+ committedMajor: raw[0x1ee],
85
+ launchTcb: parseTcb(raw.subarray(0x1f0, 0x1f8)),
86
+ signatureR: raw.subarray(SIG_OFFSET, SIG_OFFSET + SIG_VALUE_SIZE),
87
+ signatureS: raw.subarray(SIG_OFFSET + SIG_COMPONENT_SIZE, SIG_OFFSET + SIG_COMPONENT_SIZE + SIG_VALUE_SIZE),
88
+ rawReport: raw.subarray(0, REPORT_SIZE),
89
+ smtAllowed: !!(Number(policy) & (1 << 16)),
90
+ debugAllowed: !!(Number(policy) & (1 << 19)),
91
+ };
92
+ }
93
+ // ---------------------------------------------------------------------------
94
+ // AMD KDS
95
+ // ---------------------------------------------------------------------------
96
+ function vcekUrl(product, chipId, tcb) {
97
+ return (`${AMD_KDS_BASE}/vcek/v1/${product}/${chipId.toString("hex")}` +
98
+ `?blSPL=${tcb.bootLoader}&teeSPL=${tcb.tee}` +
99
+ `&snpSPL=${tcb.snp}&ucodeSPL=${tcb.microcode}`);
100
+ }
101
+ async function fetchVcek(product, chipId, reportedTcb) {
102
+ const candidates = product ? [product] : ["Genoa", "Milan", "Turin"];
103
+ for (const name of candidates) {
104
+ const url = vcekUrl(name, chipId, reportedTcb);
105
+ const resp = await fetch(url);
106
+ if (resp.ok) {
107
+ const der = Buffer.from(await resp.arrayBuffer());
108
+ return { der, product: name };
109
+ }
110
+ if (resp.status === 429) {
111
+ throw new Error("AMD KDS rate-limited (429). Retry later or specify product.");
112
+ }
113
+ if (product) {
114
+ throw new Error(`AMD KDS returned ${resp.status}`);
115
+ }
116
+ }
117
+ throw new Error("Could not fetch VCEK for any known product (Genoa/Milan/Turin)");
118
+ }
119
+ async function fetchChainPem(product) {
120
+ const url = `${AMD_KDS_BASE}/vcek/v1/${product}/cert_chain`;
121
+ const resp = await fetch(url);
122
+ if (!resp.ok) {
123
+ throw new Error(`AMD KDS cert_chain returned ${resp.status}`);
124
+ }
125
+ return await resp.text();
126
+ }
127
+ function splitPem(pem) {
128
+ const blocks = [];
129
+ const re = /-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/g;
130
+ let m;
131
+ while ((m = re.exec(pem)) !== null) {
132
+ blocks.push(m[0]);
133
+ }
134
+ return blocks;
135
+ }
136
+ /** Verify VCEK → ASK → ARK chain using openssl CLI. */
137
+ function verifyCertChainOpenssl(vcekDer, chainPem) {
138
+ const td = mkdtempSync(join(tmpdir(), "amd-"));
139
+ try {
140
+ // Convert VCEK DER to PEM
141
+ const vcekPem = execFileSync("openssl", [
142
+ "x509",
143
+ "-inform",
144
+ "DER",
145
+ "-outform",
146
+ "PEM",
147
+ ], { input: vcekDer }).toString();
148
+ const vcekPath = join(td, "vcek.pem");
149
+ writeFileSync(vcekPath, vcekPem);
150
+ const blocks = splitPem(chainPem);
151
+ if (blocks.length < 2) {
152
+ throw new Error(`Expected at least 2 certs in chain, got ${blocks.length}`);
153
+ }
154
+ const askPath = join(td, "ask.pem");
155
+ const arkPath = join(td, "ark.pem");
156
+ writeFileSync(askPath, blocks[0]);
157
+ writeFileSync(arkPath, blocks[1]);
158
+ try {
159
+ execFileSync("openssl", [
160
+ "verify",
161
+ "-CAfile",
162
+ arkPath,
163
+ "-untrusted",
164
+ askPath,
165
+ vcekPath,
166
+ ]);
167
+ return true;
168
+ }
169
+ catch {
170
+ return false;
171
+ }
172
+ }
173
+ finally {
174
+ rmSync(td, { recursive: true, force: true });
175
+ }
176
+ }
177
+ function verifyReportSignature(rpt, vcekDer) {
178
+ const signedData = rpt.rawReport.subarray(0, SIG_OFFSET);
179
+ const r = BigInt("0x" + Buffer.from(rpt.signatureR).reverse().toString("hex"));
180
+ const s = BigInt("0x" + Buffer.from(rpt.signatureS).reverse().toString("hex"));
181
+ if (r === 0n && s === 0n)
182
+ return false;
183
+ const derSig = ecdsaLeRsToDer(rpt.signatureR, rpt.signatureS);
184
+ // Import VCEK public key from DER certificate
185
+ const cert = new crypto.X509Certificate(vcekDer);
186
+ const pubKey = cert.publicKey;
187
+ const verifier = crypto.createVerify("SHA384");
188
+ verifier.update(signedData);
189
+ try {
190
+ return verifier.verify({ key: pubKey, dsaEncoding: "der" }, derSig);
191
+ }
192
+ catch {
193
+ return false;
194
+ }
195
+ }
196
+ // ---------------------------------------------------------------------------
197
+ // Public
198
+ // ---------------------------------------------------------------------------
199
+ export async function checkSevCpuAttestation(data, product = "") {
200
+ const errors = [];
201
+ const checks = {};
202
+ // Decode input (try hex, then base64)
203
+ let raw;
204
+ let rpt;
205
+ try {
206
+ const text = data.trim();
207
+ try {
208
+ raw = Buffer.from(text, "hex");
209
+ // Verify it's plausible hex (hex decode doesn't throw on bad input in Node)
210
+ if (raw.length < REPORT_SIZE && text.length > raw.length * 2) {
211
+ throw new Error("not hex");
212
+ }
213
+ }
214
+ catch {
215
+ raw = Buffer.from(text, "base64");
216
+ }
217
+ rpt = parseReport(raw);
218
+ checks.report_parsed = true;
219
+ }
220
+ catch (e) {
221
+ return makeResult("SEV-SNP", {
222
+ checks: { report_parsed: false },
223
+ errors: [e.message],
224
+ });
225
+ }
226
+ // Fetch VCEK
227
+ let vcekDer;
228
+ let detectedProduct;
229
+ try {
230
+ const result = await fetchVcek(product, rpt.chipId, rpt.reportedTcb);
231
+ vcekDer = result.der;
232
+ detectedProduct = result.product;
233
+ checks.vcek_fetched = true;
234
+ }
235
+ catch (e) {
236
+ errors.push(`Failed to fetch VCEK: ${e.message}`);
237
+ checks.vcek_fetched = false;
238
+ return makeResult("SEV-SNP", { checks, errors });
239
+ }
240
+ // Verify cert chain
241
+ try {
242
+ const chainPem = await fetchChainPem(detectedProduct);
243
+ checks.cert_chain_valid = verifyCertChainOpenssl(vcekDer, chainPem);
244
+ if (!checks.cert_chain_valid) {
245
+ errors.push("Certificate chain verification failed (VCEK → ASK → ARK)");
246
+ }
247
+ }
248
+ catch (e) {
249
+ checks.cert_chain_valid = false;
250
+ errors.push(`Failed to verify cert chain: ${e.message}`);
251
+ }
252
+ // Verify report signature
253
+ checks.report_signature_valid = verifyReportSignature(rpt, vcekDer);
254
+ if (!checks.report_signature_valid) {
255
+ errors.push("Report signature verification failed");
256
+ }
257
+ const valid = !!checks.report_parsed &&
258
+ !!checks.vcek_fetched &&
259
+ !!checks.cert_chain_valid &&
260
+ !!checks.report_signature_valid;
261
+ const report = {
262
+ version: rpt.version,
263
+ guest_svn: rpt.guestSvn,
264
+ vmpl: rpt.vmpl,
265
+ policy: `0x${rpt.policy.toString(16).padStart(16, "0")}`,
266
+ smt_allowed: rpt.smtAllowed,
267
+ debug_allowed: rpt.debugAllowed,
268
+ family_id: rpt.familyId.toString("hex"),
269
+ image_id: rpt.imageId.toString("hex"),
270
+ measurement: rpt.measurement.toString("hex"),
271
+ report_data: rpt.reportData.toString("hex"),
272
+ host_data: rpt.hostData.toString("hex"),
273
+ id_key_digest: rpt.idKeyDigest.toString("hex"),
274
+ author_key_digest: rpt.authorKeyDigest.toString("hex"),
275
+ report_id: rpt.reportId.toString("hex"),
276
+ chip_id: rpt.chipId.toString("hex"),
277
+ current_tcb: rpt.currentTcb,
278
+ reported_tcb: rpt.reportedTcb,
279
+ committed_tcb: rpt.committedTcb,
280
+ launch_tcb: rpt.launchTcb,
281
+ current_firmware: `${rpt.currentMajor}.${rpt.currentMinor} (build ${rpt.currentBuild})`,
282
+ platform_info: `0x${rpt.platformInfo.toString(16).padStart(16, "0")}`,
283
+ product: detectedProduct,
284
+ };
285
+ return makeResult("SEV-SNP", { valid, checks, report, errors });
286
+ }
287
+ //# sourceMappingURL=amd.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"amd.js","sourceRoot":"","sources":["../src/amd.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAqB,UAAU,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAC/C,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,UAAU,GAAG,KAAK,CAAC;AACzB,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,EAAE,CAAC;AAa1B,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,CAAC,CAAE;QACnB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAE;QACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAE;QACZ,SAAS,EAAE,GAAG,CAAC,CAAC,CAAE;KACnB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,GAAW,EAAE,GAAW;IAC9C,wBAAwB;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,OAAO,EAAE,CAAC;IACZ,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,OAAO,EAAE,CAAC;IAEZ,SAAS,SAAS,CAAC,CAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,CAAC,CAAE,GAAG,IAAI,EAAE,CAAC;YACvB,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,CAAC,MAAM,oBAAoB,WAAW,GAAG,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,mCAAmC,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;QACjC,MAAM;QACN,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACpC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;QAC7B,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,YAAY;QACZ,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;QACpC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACtC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACpC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACvC,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACpC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACtC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAClC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClD,YAAY,EAAE,GAAG,CAAC,KAAK,CAAE;QACzB,YAAY,EAAE,GAAG,CAAC,KAAK,CAAE;QACzB,YAAY,EAAE,GAAG,CAAC,KAAK,CAAE;QACzB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAE;QAC3B,cAAc,EAAE,GAAG,CAAC,KAAK,CAAE;QAC3B,cAAc,EAAE,GAAG,CAAC,KAAK,CAAE;QAC3B,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,cAAc,CAAC;QACjE,UAAU,EAAE,GAAG,CAAC,QAAQ,CACtB,UAAU,GAAG,kBAAkB,EAC/B,UAAU,GAAG,kBAAkB,GAAG,cAAc,CACjD;QACD,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC;QACvC,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,OAAO,CAAC,OAAe,EAAE,MAAc,EAAE,GAAe;IAC/D,OAAO,CACL,GAAG,YAAY,YAAY,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC9D,UAAU,GAAG,CAAC,UAAU,WAAW,GAAG,CAAC,GAAG,EAAE;QAC5C,WAAW,GAAG,CAAC,GAAG,aAAa,GAAG,CAAC,SAAS,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAAe,EACf,MAAc,EACd,WAAuB;IAEvB,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAG,GAAG,YAAY,YAAY,OAAO,aAAa,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,+DAA+D,CAAC;IAC3E,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uDAAuD;AACvD,SAAS,sBAAsB,CAAC,OAAe,EAAE,QAAgB;IAC/D,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE;YACtC,MAAM;YACN,SAAS;YACT,KAAK;YACL,UAAU;YACV,KAAK;SACN,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACtC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,MAAM,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACnC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,YAAY,CAAC,SAAS,EAAE;gBACtB,QAAQ;gBACR,SAAS;gBACT,OAAO;gBACP,YAAY;gBACZ,OAAO;gBACP,QAAQ;aACT,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAmC,EACnC,OAAe;IAEf,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAE9D,8CAA8C;IAC9C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,OAAO,GAAG,EAAE;IAEZ,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,sCAAsC;IACtC,IAAI,GAAW,CAAC;IAChB,IAAI,GAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,4EAA4E;YAC5E,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC,SAAS,EAAE;YAC3B,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;YAChC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,aAAa;IACb,IAAI,OAAe,CAAC;IACpB,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACrE,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;QACrB,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC;QACjC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,CAAC;QACtD,MAAM,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CACT,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,0BAA0B;IAC1B,MAAM,CAAC,sBAAsB,GAAG,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GACT,CAAC,CAAC,MAAM,CAAC,aAAa;QACtB,CAAC,CAAC,MAAM,CAAC,YAAY;QACrB,CAAC,CAAC,MAAM,CAAC,gBAAgB;QACzB,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAElC,MAAM,MAAM,GAAwB;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACxD,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,aAAa,EAAE,GAAG,CAAC,YAAY;QAC/B,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5C,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9C,iBAAiB,EAAE,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtD,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnC,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,YAAY,EAAE,GAAG,CAAC,WAAW;QAC7B,aAAa,EAAE,GAAG,CAAC,YAAY;QAC/B,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,gBAAgB,EAAE,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,WAAW,GAAG,CAAC,YAAY,GAAG;QACvF,aAAa,EAAE,KAAK,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACrE,OAAO,EAAE,eAAe;KACzB,CAAC;IAEF,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC"}
@@ -0,0 +1,35 @@
1
+ export interface TdxArtifactEntry {
2
+ template_name: string;
3
+ vm_type: string;
4
+ artifacts_ver: string;
5
+ mrtd: string;
6
+ rtmr0: string;
7
+ rtmr1: string;
8
+ rtmr2: string;
9
+ rootfs_data: string;
10
+ host_id: string;
11
+ }
12
+ export declare function loadTdxRegistry(): TdxArtifactEntry[];
13
+ export declare function findMatchingArtifacts(mrtd: string, rtmr0: string, rtmr1: string, rtmr2: string): TdxArtifactEntry[];
14
+ export declare function pickNewestVersion(entries: TdxArtifactEntry[]): TdxArtifactEntry | null;
15
+ export declare function resolveVersion(mrtd: string, rtmr0: string, rtmr1: string, rtmr2: string): {
16
+ template_name: string;
17
+ artifacts_ver: string;
18
+ } | null;
19
+ export interface SevArtifactEntry {
20
+ vm_type: string;
21
+ artifacts_ver: string;
22
+ kernel_hash: string;
23
+ initrd_hash: string;
24
+ vcpu_type: string;
25
+ rootfs_hash: string;
26
+ ovmf_hash: string;
27
+ sev_hashes_table_gpa: number;
28
+ sev_es_reset_eip: number;
29
+ ovmf_sections: Array<{
30
+ gpa: number;
31
+ size: number;
32
+ section_type: number;
33
+ }>;
34
+ }
35
+ export declare function loadSevRegistry(): SevArtifactEntry[];
@@ -0,0 +1,105 @@
1
+ import { readFileSync } from "node:fs";
2
+ import { fileURLToPath } from "node:url";
3
+ import { join, dirname } from "node:path";
4
+ function csvPath() {
5
+ const __filename = fileURLToPath(import.meta.url);
6
+ const __dirname = dirname(__filename);
7
+ return join(__dirname, "..", "..", "artifacts_registry", "tdx.csv");
8
+ }
9
+ function parseCsv(content) {
10
+ const lines = content.split("\n").map((l) => l.trim()).filter(Boolean);
11
+ if (lines.length < 2)
12
+ return [];
13
+ // skip header (lines[0])
14
+ return lines.slice(1).map((line) => {
15
+ const cols = line.split(",");
16
+ return {
17
+ template_name: cols[0].trim(),
18
+ vm_type: cols[1].trim(),
19
+ artifacts_ver: cols[2].trim(),
20
+ mrtd: cols[3].trim().toLowerCase(),
21
+ rtmr0: cols[4].trim().toLowerCase(),
22
+ rtmr1: cols[5].trim().toLowerCase(),
23
+ rtmr2: cols[6].trim().toLowerCase(),
24
+ rootfs_data: cols[7].trim().toLowerCase(),
25
+ host_id: cols[8].trim().toLowerCase(),
26
+ };
27
+ });
28
+ }
29
+ let _registry = null;
30
+ export function loadTdxRegistry() {
31
+ if (_registry)
32
+ return _registry;
33
+ const content = readFileSync(csvPath(), "utf8");
34
+ _registry = parseCsv(content);
35
+ return _registry;
36
+ }
37
+ export function findMatchingArtifacts(mrtd, rtmr0, rtmr1, rtmr2) {
38
+ const m = mrtd.toLowerCase().replace(/^0x/, "");
39
+ const r0 = rtmr0.toLowerCase().replace(/^0x/, "");
40
+ const r1 = rtmr1.toLowerCase().replace(/^0x/, "");
41
+ const r2 = rtmr2.toLowerCase().replace(/^0x/, "");
42
+ return loadTdxRegistry().filter((e) => e.mrtd === m &&
43
+ e.rtmr0 === r0 &&
44
+ e.rtmr1 === r1 &&
45
+ e.rtmr2 === r2);
46
+ }
47
+ // ---------------------------------------------------------------------------
48
+ // Semver-based version sorting (newest first)
49
+ // Pre-release (e.g. v0.0.25-beta.2) sorts BEFORE the release (v0.0.25)
50
+ // so release wins when we pick the "newest".
51
+ // ---------------------------------------------------------------------------
52
+ function parseSemver(ver) {
53
+ const clean = ver.replace(/^v/, "");
54
+ const [corePart, pre = ""] = clean.split("-", 2);
55
+ const parts = (corePart ?? "").split(".").map(Number);
56
+ const major = parts[0] ?? 0;
57
+ const minor = parts[1] ?? 0;
58
+ const patch = parts[2] ?? 0;
59
+ return [major, minor, patch, pre];
60
+ }
61
+ function compareVersions(a, b) {
62
+ const [aMaj, aMin, aPat, aPre] = parseSemver(a);
63
+ const [bMaj, bMin, bPat, bPre] = parseSemver(b);
64
+ if (aMaj !== bMaj)
65
+ return bMaj - aMaj;
66
+ if (aMin !== bMin)
67
+ return bMin - aMin;
68
+ if (aPat !== bPat)
69
+ return bPat - aPat;
70
+ // release ("") > pre-release (any non-empty string)
71
+ if (aPre === "" && bPre !== "")
72
+ return -1; // a is newer
73
+ if (aPre !== "" && bPre === "")
74
+ return 1; // b is newer
75
+ return bPre.localeCompare(aPre); // fallback: lexicographic
76
+ }
77
+ export function pickNewestVersion(entries) {
78
+ if (!entries.length)
79
+ return null;
80
+ return entries.slice().sort((a, b) => compareVersions(a.artifacts_ver, b.artifacts_ver))[0];
81
+ }
82
+ export function resolveVersion(mrtd, rtmr0, rtmr1, rtmr2) {
83
+ const matches = findMatchingArtifacts(mrtd, rtmr0, rtmr1, rtmr2);
84
+ const newest = pickNewestVersion(matches);
85
+ if (!newest)
86
+ return null;
87
+ return {
88
+ template_name: newest.template_name,
89
+ artifacts_ver: newest.artifacts_ver,
90
+ };
91
+ }
92
+ function sevJsonPath() {
93
+ const __filename = fileURLToPath(import.meta.url);
94
+ const __dirname = dirname(__filename);
95
+ return join(__dirname, "..", "..", "artifacts_registry", "sev.json");
96
+ }
97
+ let _sevRegistry = null;
98
+ export function loadSevRegistry() {
99
+ if (_sevRegistry)
100
+ return _sevRegistry;
101
+ const content = readFileSync(sevJsonPath(), "utf8");
102
+ _sevRegistry = JSON.parse(content);
103
+ return _sevRegistry;
104
+ }
105
+ //# sourceMappingURL=artifacts.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAc1C,SAAS,OAAO;IACZ,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,yBAAyB;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO;YACH,aAAa,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE;YAC9B,OAAO,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE;YACxB,aAAa,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE;YAC9B,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1C,OAAO,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACzC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC;AAED,IAAI,SAAS,GAA8B,IAAI,CAAC;AAEhD,MAAM,UAAU,eAAe;IAC3B,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAChD,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACjC,IAAY,EACZ,KAAa,EACb,KAAa,EACb,KAAa;IAEb,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,eAAe,EAAE,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CACF,CAAC,CAAC,IAAI,KAAK,CAAC;QACZ,CAAC,CAAC,KAAK,KAAK,EAAE;QACd,CAAC,CAAC,KAAK,KAAK,EAAE;QACd,CAAC,CAAC,KAAK,KAAK,EAAE,CACrB,CAAC;AACN,CAAC;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,uEAAuE;AACvE,6CAA6C;AAC7C,8EAA8E;AAE9E,SAAS,WAAW,CAAC,GAAW;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACtC,oDAAoD;IACpD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa;IACxD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC,CAAE,aAAa;IACxD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC7B,OAA2B;IAE3B,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjC,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,CACpD,CAAC,CAAC,CAAE,CAAC;AACV,CAAC;AAED,MAAM,UAAU,cAAc,CAC1B,IAAY,EACZ,KAAa,EACb,KAAa,EACb,KAAa;IAEb,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACH,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,aAAa,EAAE,MAAM,CAAC,aAAa;KACtC,CAAC;AACN,CAAC;AAmBD,SAAS,WAAW;IAChB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,CAAC,CAAC;AACzE,CAAC;AAED,IAAI,YAAY,GAA8B,IAAI,CAAC;AAEnD,MAAM,UAAU,eAAe;IAC3B,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACpD,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;IACzD,OAAO,YAAY,CAAC;AACxB,CAAC"}
@@ -0,0 +1,15 @@
1
+ export interface ChainConfig {
2
+ chainId: number;
3
+ name: string;
4
+ registryAddress: string;
5
+ }
6
+ export declare function getChainConfig(chain: string): ChainConfig;
7
+ /**
8
+ * Resolve the RPC URL for a chain. Priority:
9
+ * 1. SECRETVM_RPC_<CHAIN> (e.g. SECRETVM_RPC_BASE)
10
+ * 2. SECRETVM_RPC_URL (generic fallback)
11
+ *
12
+ * Throws if no RPC URL is configured.
13
+ */
14
+ export declare function getRpcUrl(chain: string): string;
15
+ export declare function listChains(): string[];
package/dist/chains.js ADDED
@@ -0,0 +1,50 @@
1
+ const DEFAULT_REGISTRY = "0x8004A169FB4a3325136EB29fA0ceB6D2e539a432";
2
+ const SEPOLIA_REGISTRY = "0x8004A818BFB912233c491871b3d84c89A494BD9e";
3
+ const CHAINS = {
4
+ ethereum: { chainId: 1, name: "Ethereum", registryAddress: DEFAULT_REGISTRY },
5
+ base: { chainId: 8453, name: "Base", registryAddress: DEFAULT_REGISTRY },
6
+ arbitrum: { chainId: 42161, name: "Arbitrum", registryAddress: DEFAULT_REGISTRY },
7
+ sepolia: { chainId: 11155111, name: "Sepolia", registryAddress: SEPOLIA_REGISTRY },
8
+ polygon: { chainId: 137, name: "Polygon", registryAddress: DEFAULT_REGISTRY },
9
+ bnb: { chainId: 56, name: "BNB Smart Chain", registryAddress: DEFAULT_REGISTRY },
10
+ gnosis: { chainId: 100, name: "Gnosis", registryAddress: DEFAULT_REGISTRY },
11
+ linea: { chainId: 59144, name: "Linea", registryAddress: DEFAULT_REGISTRY },
12
+ taiko: { chainId: 167000, name: "Taiko", registryAddress: DEFAULT_REGISTRY },
13
+ celo: { chainId: 42220, name: "Celo", registryAddress: DEFAULT_REGISTRY },
14
+ avalanche: { chainId: 43114, name: "Avalanche", registryAddress: DEFAULT_REGISTRY },
15
+ optimism: { chainId: 10, name: "Optimism", registryAddress: DEFAULT_REGISTRY },
16
+ abstract: { chainId: 2741, name: "Abstract", registryAddress: DEFAULT_REGISTRY },
17
+ megaeth: { chainId: 1000001, name: "MegaETH", registryAddress: DEFAULT_REGISTRY },
18
+ mantle: { chainId: 5000, name: "Mantle", registryAddress: DEFAULT_REGISTRY },
19
+ soneium: { chainId: 1946, name: "Soneium", registryAddress: DEFAULT_REGISTRY },
20
+ xlayer: { chainId: 196, name: "X Layer", registryAddress: DEFAULT_REGISTRY },
21
+ metis: { chainId: 1088, name: "Metis", registryAddress: DEFAULT_REGISTRY },
22
+ };
23
+ export function getChainConfig(chain) {
24
+ const config = CHAINS[chain.toLowerCase()];
25
+ if (!config) {
26
+ const valid = Object.keys(CHAINS).join(", ");
27
+ throw new Error(`Unknown chain "${chain}". Supported: ${valid}`);
28
+ }
29
+ return config;
30
+ }
31
+ /**
32
+ * Resolve the RPC URL for a chain. Priority:
33
+ * 1. SECRETVM_RPC_<CHAIN> (e.g. SECRETVM_RPC_BASE)
34
+ * 2. SECRETVM_RPC_URL (generic fallback)
35
+ *
36
+ * Throws if no RPC URL is configured.
37
+ */
38
+ export function getRpcUrl(chain) {
39
+ const envKey = `SECRETVM_RPC_${chain.toUpperCase()}`;
40
+ if (process.env[envKey])
41
+ return process.env[envKey];
42
+ if (process.env.SECRETVM_RPC_URL)
43
+ return process.env.SECRETVM_RPC_URL;
44
+ throw new Error(`No RPC URL configured for ${chain}. ` +
45
+ `Set the ${envKey} or SECRETVM_RPC_URL environment variable.`);
46
+ }
47
+ export function listChains() {
48
+ return Object.keys(CHAINS);
49
+ }
50
+ //# sourceMappingURL=chains.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"chains.js","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAMA,MAAM,gBAAgB,GAAG,4CAA4C,CAAC;AACtE,MAAM,gBAAgB,GAAG,4CAA4C,CAAC;AAEtE,MAAM,MAAM,GAAgC;IAC1C,QAAQ,EAAG,EAAE,OAAO,EAAE,CAAC,EAAS,IAAI,EAAE,UAAU,EAAS,eAAe,EAAE,gBAAgB,EAAE;IAC5F,IAAI,EAAO,EAAE,OAAO,EAAE,IAAI,EAAM,IAAI,EAAE,MAAM,EAAa,eAAe,EAAE,gBAAgB,EAAE;IAC5F,QAAQ,EAAG,EAAE,OAAO,EAAE,KAAK,EAAK,IAAI,EAAE,UAAU,EAAS,eAAe,EAAE,gBAAgB,EAAE;IAC5F,OAAO,EAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAU,eAAe,EAAE,gBAAgB,EAAE;IAC5F,OAAO,EAAI,EAAE,OAAO,EAAE,GAAG,EAAO,IAAI,EAAE,SAAS,EAAU,eAAe,EAAE,gBAAgB,EAAE;IAC5F,GAAG,EAAQ,EAAE,OAAO,EAAE,EAAE,EAAQ,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE;IAC5F,MAAM,EAAK,EAAE,OAAO,EAAE,GAAG,EAAO,IAAI,EAAE,QAAQ,EAAW,eAAe,EAAE,gBAAgB,EAAE;IAC5F,KAAK,EAAM,EAAE,OAAO,EAAE,KAAK,EAAK,IAAI,EAAE,OAAO,EAAY,eAAe,EAAE,gBAAgB,EAAE;IAC5F,KAAK,EAAM,EAAE,OAAO,EAAE,MAAM,EAAI,IAAI,EAAE,OAAO,EAAY,eAAe,EAAE,gBAAgB,EAAE;IAC5F,IAAI,EAAO,EAAE,OAAO,EAAE,KAAK,EAAK,IAAI,EAAE,MAAM,EAAa,eAAe,EAAE,gBAAgB,EAAE;IAC5F,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAK,IAAI,EAAE,WAAW,EAAQ,eAAe,EAAE,gBAAgB,EAAE;IAC5F,QAAQ,EAAG,EAAE,OAAO,EAAE,EAAE,EAAQ,IAAI,EAAE,UAAU,EAAS,eAAe,EAAE,gBAAgB,EAAE;IAC5F,QAAQ,EAAG,EAAE,OAAO,EAAE,IAAI,EAAM,IAAI,EAAE,UAAU,EAAS,eAAe,EAAE,gBAAgB,EAAE;IAC5F,OAAO,EAAI,EAAE,OAAO,EAAE,OAAO,EAAG,IAAI,EAAE,SAAS,EAAU,eAAe,EAAE,gBAAgB,EAAE;IAC5F,MAAM,EAAK,EAAE,OAAO,EAAE,IAAI,EAAM,IAAI,EAAE,QAAQ,EAAW,eAAe,EAAE,gBAAgB,EAAE;IAC5F,OAAO,EAAI,EAAE,OAAO,EAAE,IAAI,EAAM,IAAI,EAAE,SAAS,EAAU,eAAe,EAAE,gBAAgB,EAAE;IAC5F,MAAM,EAAK,EAAE,OAAO,EAAE,GAAG,EAAO,IAAI,EAAE,SAAS,EAAU,eAAe,EAAE,gBAAgB,EAAE;IAC5F,KAAK,EAAM,EAAE,OAAO,EAAE,IAAI,EAAM,IAAI,EAAE,OAAO,EAAY,eAAe,EAAE,gBAAgB,EAAE;CAC7F,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,iBAAiB,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,MAAM,GAAG,gBAAgB,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;IACrD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtE,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,IAAI;QACtC,WAAW,MAAM,4CAA4C,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC"}
package/dist/cli.d.ts ADDED
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ export {};