@antseed/cli 0.1.157 → 0.1.159

package/dist/proxy/buyer-proxy.js

@@ -3,11 +3,11 @@ import { randomUUID } from 'node:crypto';
 import { watchFile, unwatchFile } from 'node:fs';
 import { readFile, writeFile, rename, mkdir, readdir, stat, unlink } from 'node:fs/promises';
 import { join } from 'node:path';
-import { ANTSEED_BUYER_FAULT_ERROR_CODE, ANTSEED_FAULT_ATTRIBUTION_HEADER, ANTSEED_ATTEST_PATH, adaptPeerFaultErrorResponse, computeOnChainReputationScore, decodeSweepRequest, faultAttributionOf, faultCodeOf, isModelRouteEligible, modelRouteTotalPrice, peerSupportsCooperativeClose, rankModelRoutes, } from '@antseed/node';
+import { ANTSEED_BUYER_FAULT_ERROR_CODE, ANTSEED_FAULT_ATTRIBUTION_HEADER, ANTSEED_ATTEST_PATH, adaptPeerFaultErrorResponse, computeTrustScore, decodeSweepRequest, faultAttributionOf, faultCodeOf, isModelRouteEligible, modelRouteTotalPrice, normalizedModelReputationScore, peerSupportsCooperativeClose, rankModelRoutes, sanitizePeerDisplayName, } from '@antseed/node';
 import { canonicalModelKey } from '@antseed/node/model-identity';
 import { createStreamingAdapter, detectRequestServiceApiProtocol, transformRequest, transformResponse, } from './service-api-adapter.js';
 import { DEBUG, log, extractRequestedService, summarizeRequestShape, summarizeErrorResponse, requestWantsStreaming, parsePeerPinnedService, rewritePeerPinnedServiceInBody, substituteRoutedModelAlias, overrideRoutedModelInBody, ROUTED_MODEL_ALIAS, SYSTEM_PROXY_SOURCE_HEADER, SYSTEM_ROUTED_MODEL_HEADER, normalizePeerId, } from './request-utils.js';
-import { buildNetworkModels, effectiveModelReputationScore, normalizedModelReputationScore, parseModelTypeFilter, } from './network-models.js';
+import { buildNetworkModels, effectiveModelReputationScore, parseModelTypeFilter, } from './network-models.js';
 import { findMissingRequiredParameters, findUnannouncedRequestParameters, findAdvertisedServiceOffer, getExplicitProviderOverride, getExplicitPeerIdOverride, parseRequiredParametersHeader, REQUIRED_PARAMETERS_HEADER, resolvePeerRoutePlan, selectCandidatePeersForRouting, } from './routing.js';
 import { computeResponseTelemetry, attachAntseedTelemetryHeaders, attachStreamingAntseedHeaders, } from './telemetry.js';
 import { DEFAULT_BUYER_PEER_REFRESH_INTERVAL_MS } from '../config/defaults.js';
@@ -16,7 +16,11 @@ import { ConversationStore } from './conversation-store.js';
 import { recordPeerFailureEntry, clearPeerHealthEntry, isCoolingDown, parsePersistedPeerHealth, prunePeerHealth, serializePeerHealth, reasonEscalates, } from './peer-health.js';
 import { PeerAttributionTracker, HEARTBEAT_MS } from './peer-attribution.js';
 import { estimateAnthropicPromptTokens, isCountTokensPath } from './count-tokens.js';
-import { getCachedVerdict, runVerifier, verifierSupportFingerprint } from '../plugins/verifier.js';
+import { runVerifier, verifierSupportFingerprint } from '../plugins/verifier.js';
+import { TEE_VERIFIER_ID } from '@antseed/node/tee-status';
+import { parseVerifierCapabilities } from '@antseed/node/verifier-capabilities';
+import { TeeVerification } from './tee-verification.js';
+import { TeeControl } from './tee-control.js';
 import { loadConfig } from '../config/loader.js';
 // Re-export for backward compatibility (used by tests and other consumers)
 export { selectCandidatePeersForRouting } from './routing.js';
@@ -126,8 +130,6 @@ const CARRY_FORWARD_TTL_MS = 2 * 60 * 60_000;
 const MAX_TRACKED_REQUEST_CONVERSATIONS = 512;
 /** Min gap between background peer refreshes triggered by model_not_found responses. */
 const MODEL_NOT_FOUND_REFRESH_THROTTLE_MS = 30_000;
-/** Verification is expensive; bound how many verdicts we retain (TTL = peer-cache TTL). */
-const VERIFY_CACHE_MAX_ENTRIES = 1024;
 /**
  * Statuses that prove the peer is alive and serving. Any response short of a
  * server error counts: a peer that answers 400 or 404 is reachable, and
@@ -379,8 +381,9 @@ export function parsePersistedPeers(parsed, nowMs = Date.now(), maxAgeMs = CARRY
         }
         if (lastReachedAt > 0)
             peer.lastReachedAt = lastReachedAt;
-        if (typeof entry.displayName === 'string')
-            peer.displayName = entry.displayName;
+        const displayName = sanitizePeerDisplayName(entry.displayName);
+        if (displayName)
+            peer.displayName = displayName;
         if (typeof entry.publicAddress === 'string')
             peer.publicAddress = entry.publicAddress;
         if (entry.providerPricing && typeof entry.providerPricing === 'object') {
@@ -413,15 +416,9 @@ export function parsePersistedPeers(parsed, nowMs = Date.now(), maxAgeMs = CARRY
         if (typeof entry.onChainAgentId === 'number' && Number.isFinite(entry.onChainAgentId)) {
             peer.onChainAgentId = entry.onChainAgentId;
         }
-        if (typeof entry.onChainStakeUsdcMicros === 'number' && Number.isFinite(entry.onChainStakeUsdcMicros)) {
-            peer.onChainStakeUsdcMicros = entry.onChainStakeUsdcMicros;
-        }
         if (typeof entry.onChainReputationScore === 'number' && Number.isFinite(entry.onChainReputationScore)) {
             peer.onChainReputationScore = entry.onChainReputationScore;
         }
-        if (typeof entry.onChainTrustScore === 'number' && Number.isFinite(entry.onChainTrustScore)) {
-            peer.onChainTrustScore = entry.onChainTrustScore;
-        }
         if (typeof entry.onChainSybilRisk === 'number' && Number.isFinite(entry.onChainSybilRisk)) {
             peer.onChainSybilRisk = entry.onChainSybilRisk;
         }
@@ -445,6 +442,27 @@ export function parsePersistedPeers(parsed, nowMs = Date.now(), maxAgeMs = CARRY
         if (typeof entry.onChainStakedAtSec === 'number' && Number.isFinite(entry.onChainStakedAtSec)) {
             peer.onChainStakedAtSec = entry.onChainStakedAtSec;
         }
+        if (typeof entry.onChainUsageEpoch === 'number' && Number.isFinite(entry.onChainUsageEpoch)) {
+            peer.onChainUsageEpoch = entry.onChainUsageEpoch;
+        }
+        if (typeof entry.onChainUsageShareBps === 'number' && Number.isFinite(entry.onChainUsageShareBps)) {
+            peer.onChainUsageShareBps = entry.onChainUsageShareBps;
+        }
+        if (typeof entry.onChainUsageLastEpochUsdcMicros === 'number' && Number.isFinite(entry.onChainUsageLastEpochUsdcMicros)) {
+            peer.onChainUsageLastEpochUsdcMicros = entry.onChainUsageLastEpochUsdcMicros;
+        }
+        if (typeof entry.onChainPoolStakeAnts === 'number' && Number.isFinite(entry.onChainPoolStakeAnts)) {
+            peer.onChainPoolStakeAnts = entry.onChainPoolStakeAnts;
+        }
+        if (typeof entry.onChainPoolPowerShareBps === 'number' && Number.isFinite(entry.onChainPoolPowerShareBps)) {
+            peer.onChainPoolPowerShareBps = entry.onChainPoolPowerShareBps;
+        }
+        if (typeof entry.onChainWashFlagged === 'boolean') {
+            peer.onChainWashFlagged = entry.onChainWashFlagged;
+        }
+        if (typeof entry.onChainWashShareBps === 'number' && Number.isFinite(entry.onChainWashShareBps)) {
+            peer.onChainWashShareBps = entry.onChainWashShareBps;
+        }
         if (typeof entry.onChainStatsFetchedAt === 'number' && Number.isFinite(entry.onChainStatsFetchedAt)) {
             peer.onChainStatsFetchedAt = entry.onChainStatsFetchedAt;
         }
@@ -466,10 +484,13 @@ export function parsePersistedPeers(parsed, nowMs = Date.now(), maxAgeMs = CARRY
         if (entry.verificationResults && typeof entry.verificationResults === 'object') {
             peer.verificationResults = entry.verificationResults;
         }
-        if (peer.onChainReputationScore === undefined) {
-            const derivedScore = computeOnChainReputationScore(peer, nowMs);
-            if (derivedScore !== null)
-                peer.onChainReputationScore = derivedScore;
+        // Re-score from the persisted signals rather than trusting the stored
+        // number: identity evidence expires, so a cached score can go stale. When
+        // nothing scoreable was persisted, keep whatever score the row carried.
+        const trust = computeTrustScore(peer, nowMs);
+        if (trust) {
+            peer.trust = trust;
+            peer.onChainReputationScore = trust.score;
         }
         peers.push(peer);
     }
@@ -602,7 +623,8 @@ export class BuyerProxy {
      */
     _lastModelActivityAt = 0;
     _verifier;
-    _verifyCache = new Map();
+    _teeVerification;
+    _teeControl;
     _stateWatchDebounce = null;
     _configWatchDebounce = null;
     _routingPreferences;
@@ -650,6 +672,8 @@ export class BuyerProxy {
     constructor(config) {
         this._node = config.node;
         this._verifier = config.verifier;
+        this._teeVerification = new TeeVerification(config.verifier);
+        this._teeControl = new TeeControl(this._teeVerification.sessionId);
         this._port = config.port;
         this._bgRefreshIntervalMs = Math.max(1, config.backgroundRefreshIntervalMs ?? DEFAULT_BUYER_PEER_REFRESH_INTERVAL_MS);
         this._peerCacheTtlMs = Math.max(0, config.peerCacheTtlMs ?? Math.max(6 * 60_000, this._bgRefreshIntervalMs + 60_000));
@@ -766,6 +790,14 @@ export class BuyerProxy {
                 resolve();
             });
         });
+        try {
+            const address = this._server.address();
+            await this._teeControl.publish(this._stateDir, typeof address === 'object' && address ? address.port : this._port);
+        }
+        catch (error) {
+            await new Promise((resolve) => this._server.close(() => resolve()));
+            throw error;
+        }
         this._startBackgroundRefresh();
         this._startSuspendHeartbeat();
         // Trigger initial discovery immediately so the desktop can show services
@@ -791,6 +823,7 @@ export class BuyerProxy {
                 return;
             }
             this._cachedPeers = peers;
+            this._teeVerification.observePeers(peers);
             // Preserve the original discovery timestamp so cacheAgeMs reflects how
             // long ago the persisted data was actually written, not startup time.
             const peersUpdatedAt = parsed.peersUpdatedAt;
@@ -806,6 +839,8 @@ export class BuyerProxy {
         }
     }
     async stop() {
+        this._teeVerification.close();
+        await this._teeControl.close();
         if (this._stateWatchDebounce) {
             clearTimeout(this._stateWatchDebounce);
             this._stateWatchDebounce = null;
@@ -997,6 +1032,7 @@ export class BuyerProxy {
             }
         }
         this._cachedPeers = merged;
+        this._teeVerification.observePeers(merged);
         this._cacheLastUpdatedAtMs = Date.now();
         this._cacheMutationEpoch += 1;
         this._persistPeersToState();
@@ -1031,19 +1067,27 @@ export class BuyerProxy {
                 defaultCachedInputUsdPerMillion: p.defaultCachedInputUsdPerMillion ?? null,
                 maxConcurrency: p.maxConcurrency ?? 0,
                 currentLoad: p.currentLoad ?? null,
-                // On-chain stats read authoritatively by the buyer from AntseedChannels/Staking.
+                // On-chain stats read authoritatively by the buyer from AntseedChannels,
+                // the seller pools, usage accounting and the wash-trading registry.
                 // Persisted so CLI/desktop surfaces can render richer UI without their
-                // own duplicate staking/channel RPC and reputation-score implementations.
+                // own duplicate RPC and trust-score implementations. The node already
+                // scored the peer; `onChainReputationScore` is the trust score and
+                // `trust` its breakdown.
                 onChainAgentId: p.onChainAgentId ?? null,
-                onChainStakeUsdcMicros: p.onChainStakeUsdcMicros ?? null,
                 onChainChannelCount: p.onChainChannelCount ?? null,
                 onChainGhostCount: p.onChainGhostCount ?? null,
                 onChainTotalVolumeUsdcMicros: p.onChainTotalVolumeUsdcMicros ?? null,
                 onChainLastSettledAtSec: p.onChainLastSettledAtSec ?? null,
                 onChainStakedAtSec: p.onChainStakedAtSec ?? null,
-                // Fallback keeps pre-upgrade cache rows usable.
-                onChainReputationScore: p.onChainReputationScore ?? computeOnChainReputationScore(p) ?? null,
-                onChainTrustScore: p.onChainTrustScore ?? null,
+                onChainUsageEpoch: p.onChainUsageEpoch ?? null,
+                onChainUsageShareBps: p.onChainUsageShareBps ?? null,
+                onChainUsageLastEpochUsdcMicros: p.onChainUsageLastEpochUsdcMicros ?? null,
+                onChainPoolStakeAnts: p.onChainPoolStakeAnts ?? null,
+                onChainPoolPowerShareBps: p.onChainPoolPowerShareBps ?? null,
+                onChainWashFlagged: p.onChainWashFlagged ?? null,
+                onChainWashShareBps: p.onChainWashShareBps ?? null,
+                onChainReputationScore: p.onChainReputationScore ?? null,
+                trust: p.trust ?? null,
                 onChainSybilRisk: p.onChainSybilRisk ?? null,
                 onChainSybilFlags: p.onChainSybilFlags ?? null,
                 onChainStatsFetchedAt: p.onChainStatsFetchedAt ?? null,
@@ -1321,6 +1365,21 @@ export class BuyerProxy {
         return `Discovered ${peers.length} peer(s): ${samples}${suffix}`;
     }
     async _handleControlPlane(req, res, method, path) {
+        if (path.startsWith('/_antseed/verification')) {
+            await this._teeControl.handle(req, res, method, path, () => this._teeVerification.snapshot(this._cachedPeers), async (peerId) => {
+                const peer = this._cachedPeers.find((candidate) => candidate.peerId === peerId);
+                if (!peer || !parseVerifierCapabilities(peer.capabilities).supported.includes(TEE_VERIFIER_ID)) {
+                    throw new Error('Seller is unknown or does not advertise TEE support');
+                }
+                if (!this._verifier)
+                    throw new Error('Verification is disabled by the buyer CLI');
+                const signal = AbortSignal.timeout(31_000);
+                const outcome = await this._teeVerification.verifyForDisplay(peer, () => runVerifier({ require: false, prefer: [TEE_VERIFIER_ID] }, peer.peerId, peer.capabilities, (chosen) => makeVerifierReach(this._node, peer, chosen, signal), signal));
+                if (outcome.code === 'busy')
+                    throw new Error(outcome.reason);
+            });
+            return;
+        }
         const origin = req.headers.origin ?? '';
         const isLocal = origin.startsWith('http://127.0.0.1') || origin.startsWith('http://localhost') || origin === 'file://';
         if (isLocal)
@@ -1374,6 +1433,16 @@ export class BuyerProxy {
                 providerServiceUnitBillingModels: p.providerServiceUnitBillingModels,
                 providerServiceCapabilities: p.providerServiceCapabilities,
                 reputationScore: p.reputationScore,
+                onChainReputationScore: p.onChainReputationScore ?? null,
+                trust: p.trust ?? null,
+                onChainPoolStakeAnts: p.onChainPoolStakeAnts ?? null,
+                onChainPoolPowerShareBps: p.onChainPoolPowerShareBps ?? null,
+                onChainUsageEpoch: p.onChainUsageEpoch ?? null,
+                onChainUsageShareBps: p.onChainUsageShareBps ?? null,
+                onChainUsageLastEpochUsdcMicros: p.onChainUsageLastEpochUsdcMicros ?? null,
+                onChainWashFlagged: p.onChainWashFlagged ?? null,
+                onChainWashShareBps: p.onChainWashShareBps ?? null,
+                verificationResults: p.verificationResults,
                 lastSeen: p.lastSeen,
             }));
             res.writeHead(200, { 'content-type': 'application/json' });
@@ -1982,7 +2051,7 @@ export class BuyerProxy {
                 error: {
                     type: 'no_default_route',
                     code: 'no_default_route',
-                    message: `Model "${ROUTED_MODEL_ALIAS}" routes to the model selected in VPR, but no route is set. `
+                    message: `Model "${ROUTED_MODEL_ALIAS}" routes to the model selected in the AI VPN, but no route is set. `
                         + 'Pick a model in the desktop app, or request "<peerId>@<model>" explicitly.',
                     param: 'model',
                 },
@@ -2150,7 +2219,7 @@ export class BuyerProxy {
                     peerId: peer.peerId,
                     serviceId: plan.serviceId,
                     request: requestForPolicy,
-                    reputation: normalizedModelReputationScore(peer, this._now()) ?? -1,
+                    reputation: normalizedModelReputationScore(peer) ?? -1,
                     hasCachedInputPricing: offer.cachedInputUsdPerMillion !== undefined,
                     inputUsdPerMillion: offer.inputUsdPerMillion ?? null,
                     outputUsdPerMillion: offer.outputUsdPerMillion ?? null,
@@ -2422,8 +2491,15 @@ export class BuyerProxy {
         const policy = this._verifier;
         if (!policy)
             return { ok: true, verified: false };
-        const key = `${peer.peerId}|${verifierSupportFingerprint(peer.capabilities)}`;
-        return getCachedVerdict(this._verifyCache, key, Date.now(), this._peerCacheTtlMs, VERIFY_CACHE_MAX_ENTRIES, () => runVerifier(policy, peer.peerId, peer.capabilities, makeReach, signal));
+        const fingerprint = verifierSupportFingerprint(peer.capabilities);
+        const outcome = await this._teeVerification.verify(peer, policy, () => runVerifier(policy, peer.peerId, peer.capabilities, makeReach, signal));
+        const current = this._cachedPeers.find((candidate) => candidate.peerId === peer.peerId);
+        if (current && verifierSupportFingerprint(current.capabilities) !== fingerprint) {
+            return { ok: !policy.require, verified: false, transient: true, reason: 'Seller capabilities changed; retry verification' };
+        }
+        if (signal.aborted)
+            return { ok: false, verified: false, transient: true, reason: 'Request aborted' };
+        return outcome;
     }
     _parseMaxUploadBodyBytes(headers) {
         const raw = headers['x-antseed-max-upload-body-bytes'];