@elizaos/plugin-tee 0.1.7-alpha.1

package/README.md

@@ -0,0 +1,89 @@
+# Plugin TEE
+
+A plugin for handling Trusted Execution Environment (TEE) operations.
+
+## Providers
+
+This plugin includes several providers for handling different TEE-related operations.
+
+### DeriveKeyProvider
+
+The `DeriveKeyProvider` allows for secure key derivation within a TEE environment. It supports deriving keys for both Solana (Ed25519) and Ethereum (ECDSA) chains.
+
+#### Usage
+
+```typescript
+import { DeriveKeyProvider } from "@elizaos/plugin-tee";
+
+// Initialize the provider
+const provider = new DeriveKeyProvider();
+
+// Derive a raw key
+try {
+    const rawKey = await provider.rawDeriveKey(
+        "/path/to/derive",
+        "subject-identifier"
+    );
+    // rawKey is a DeriveKeyResponse that can be used for further processing
+    // to get the uint8Array do the following
+    const rawKeyArray = rawKey.asUint8Array();
+} catch (error) {
+    console.error("Raw key derivation failed:", error);
+}
+
+// Derive a Solana keypair (Ed25519)
+try {
+    const solanaKeypair = await provider.deriveEd25519Keypair(
+        "/path/to/derive",
+        "subject-identifier"
+    );
+    // solanaKeypair can now be used for Solana operations
+} catch (error) {
+    console.error("Solana key derivation failed:", error);
+}
+
+// Derive an Ethereum keypair (ECDSA)
+try {
+    const evmKeypair = await provider.deriveEcdsaKeypair(
+        "/path/to/derive",
+        "subject-identifier"
+    );
+    // evmKeypair can now be used for Ethereum operations
+} catch (error) {
+    console.error("EVM key derivation failed:", error);
+}
+```
+
+### RemoteAttestationProvider
+
+The `RemoteAttestationProvider` allows for generating a remote attestation within a TEE environment.
+
+#### Usage
+
+```typescript
+const provider = new RemoteAttestationProvider();
+
+try {
+    const attestation = await provider.generateAttestation("your-report-data");
+    console.log("Attestation:", attestation);
+} catch (error) {
+    console.error("Failed to generate attestation:", error);
+}
+```
+
+### Configuration
+
+To get a TEE simulator for local testing, use the following commands:
+
+```bash
+docker pull phalanetwork/tappd-simulator:latest
+# by default the simulator is available in localhost:8090
+docker run --rm -p 8090:8090 phalanetwork/tappd-simulator:latest
+```
+
+When using the provider through the runtime environment, ensure the following settings are configured:
+
+```env
+DSTACK_SIMULATOR_ENDPOINT="your-endpoint-url" # Optional, for simulator purposes if testing on mac or windows
+WALLET_SECRET_SALT=your-secret-salt // Required to single agent deployments
+```

package/dist/index.d.ts

@@ -0,0 +1,41 @@
+import { Plugin } from '@elizaos/core';
+import { Keypair } from '@solana/web3.js';
+import { DeriveKeyResponse } from '@phala/dstack-sdk';
+import { PrivateKeyAccount } from 'viem';
+
+declare enum TEEMode {
+    OFF = "OFF",
+    LOCAL = "LOCAL",// For local development with simulator
+    DOCKER = "DOCKER",// For docker development with simulator
+    PRODUCTION = "PRODUCTION"
+}
+interface RemoteAttestationQuote {
+    quote: string;
+    timestamp: number;
+}
+
+declare class DeriveKeyProvider {
+    private client;
+    private raProvider;
+    constructor(teeMode?: string);
+    private generateDeriveKeyAttestation;
+    rawDeriveKey(path: string, subject: string): Promise<DeriveKeyResponse>;
+    deriveEd25519Keypair(path: string, subject: string, agentId: string): Promise<{
+        keypair: Keypair;
+        attestation: RemoteAttestationQuote;
+    }>;
+    deriveEcdsaKeypair(path: string, subject: string, agentId: string): Promise<{
+        keypair: PrivateKeyAccount;
+        attestation: RemoteAttestationQuote;
+    }>;
+}
+
+declare class RemoteAttestationProvider {
+    private client;
+    constructor(teeMode?: string);
+    generateAttestation(reportData: string): Promise<RemoteAttestationQuote>;
+}
+
+declare const teePlugin: Plugin;
+
+export { DeriveKeyProvider, RemoteAttestationProvider, type RemoteAttestationQuote, TEEMode, teePlugin };

package/dist/index.js

@@ -0,0 +1,265 @@
+// src/providers/remoteAttestationProvider.ts
+import { TappdClient } from "@phala/dstack-sdk";
+
+// src/types/tee.ts
+var TEEMode = /* @__PURE__ */ ((TEEMode2) => {
+  TEEMode2["OFF"] = "OFF";
+  TEEMode2["LOCAL"] = "LOCAL";
+  TEEMode2["DOCKER"] = "DOCKER";
+  TEEMode2["PRODUCTION"] = "PRODUCTION";
+  return TEEMode2;
+})(TEEMode || {});
+
+// src/providers/remoteAttestationProvider.ts
+var RemoteAttestationProvider = class {
+  client;
+  constructor(teeMode) {
+    let endpoint;
+    switch (teeMode) {
+      case "LOCAL" /* LOCAL */:
+        endpoint = "http://localhost:8090";
+        console.log(
+          "TEE: Connecting to local simulator at localhost:8090"
+        );
+        break;
+      case "DOCKER" /* DOCKER */:
+        endpoint = "http://host.docker.internal:8090";
+        console.log(
+          "TEE: Connecting to simulator via Docker at host.docker.internal:8090"
+        );
+        break;
+      case "PRODUCTION" /* PRODUCTION */:
+        endpoint = void 0;
+        console.log(
+          "TEE: Running in production mode without simulator"
+        );
+        break;
+      default:
+        throw new Error(
+          `Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`
+        );
+    }
+    this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();
+  }
+  async generateAttestation(reportData) {
+    try {
+      console.log("Generating attestation for: ", reportData);
+      const tdxQuote = await this.client.tdxQuote(reportData);
+      const rtmrs = tdxQuote.replayRtmrs();
+      console.log(
+        `rtmr0: ${rtmrs[0]}
+rtmr1: ${rtmrs[1]}
+rtmr2: ${rtmrs[2]}
+rtmr3: ${rtmrs[3]}f`
+      );
+      const quote = {
+        quote: tdxQuote.quote,
+        timestamp: Date.now()
+      };
+      console.log("Remote attestation quote: ", quote);
+      return quote;
+    } catch (error) {
+      console.error("Error generating remote attestation:", error);
+      throw new Error(
+        `Failed to generate TDX Quote: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+    }
+  }
+};
+var remoteAttestationProvider = {
+  get: async (runtime, _message, _state) => {
+    const teeMode = runtime.getSetting("TEE_MODE");
+    const provider = new RemoteAttestationProvider(teeMode);
+    const agentId = runtime.agentId;
+    try {
+      console.log("Generating attestation for: ", agentId);
+      const attestation = await provider.generateAttestation(agentId);
+      return `Your Agent's remote attestation is: ${JSON.stringify(attestation)}`;
+    } catch (error) {
+      console.error("Error in remote attestation provider:", error);
+      throw new Error(
+        `Failed to generate TDX Quote: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+    }
+  }
+};
+
+// src/providers/deriveKeyProvider.ts
+import { Keypair } from "@solana/web3.js";
+import crypto from "crypto";
+import { TappdClient as TappdClient2 } from "@phala/dstack-sdk";
+import { privateKeyToAccount } from "viem/accounts";
+import { keccak256 } from "viem";
+var DeriveKeyProvider = class {
+  client;
+  raProvider;
+  constructor(teeMode) {
+    let endpoint;
+    switch (teeMode) {
+      case "LOCAL" /* LOCAL */:
+        endpoint = "http://localhost:8090";
+        console.log(
+          "TEE: Connecting to local simulator at localhost:8090"
+        );
+        break;
+      case "DOCKER" /* DOCKER */:
+        endpoint = "http://host.docker.internal:8090";
+        console.log(
+          "TEE: Connecting to simulator via Docker at host.docker.internal:8090"
+        );
+        break;
+      case "PRODUCTION" /* PRODUCTION */:
+        endpoint = void 0;
+        console.log(
+          "TEE: Running in production mode without simulator"
+        );
+        break;
+      default:
+        throw new Error(
+          `Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`
+        );
+    }
+    this.client = endpoint ? new TappdClient2(endpoint) : new TappdClient2();
+    this.raProvider = new RemoteAttestationProvider(teeMode);
+  }
+  async generateDeriveKeyAttestation(agentId, publicKey) {
+    const deriveKeyData = {
+      agentId,
+      publicKey
+    };
+    const reportdata = JSON.stringify(deriveKeyData);
+    console.log("Generating Remote Attestation Quote for Derive Key...");
+    const quote = await this.raProvider.generateAttestation(reportdata);
+    console.log("Remote Attestation Quote generated successfully!");
+    return quote;
+  }
+  async rawDeriveKey(path, subject) {
+    try {
+      if (!path || !subject) {
+        console.error(
+          "Path and Subject are required for key derivation"
+        );
+      }
+      console.log("Deriving Raw Key in TEE...");
+      const derivedKey = await this.client.deriveKey(path, subject);
+      console.log("Raw Key Derived Successfully!");
+      return derivedKey;
+    } catch (error) {
+      console.error("Error deriving raw key:", error);
+      throw error;
+    }
+  }
+  async deriveEd25519Keypair(path, subject, agentId) {
+    try {
+      if (!path || !subject) {
+        console.error(
+          "Path and Subject are required for key derivation"
+        );
+      }
+      console.log("Deriving Key in TEE...");
+      const derivedKey = await this.client.deriveKey(path, subject);
+      const uint8ArrayDerivedKey = derivedKey.asUint8Array();
+      const hash = crypto.createHash("sha256");
+      hash.update(uint8ArrayDerivedKey);
+      const seed = hash.digest();
+      const seedArray = new Uint8Array(seed);
+      const keypair = Keypair.fromSeed(seedArray.slice(0, 32));
+      const attestation = await this.generateDeriveKeyAttestation(
+        agentId,
+        keypair.publicKey.toBase58()
+      );
+      console.log("Key Derived Successfully!");
+      return { keypair, attestation };
+    } catch (error) {
+      console.error("Error deriving key:", error);
+      throw error;
+    }
+  }
+  async deriveEcdsaKeypair(path, subject, agentId) {
+    try {
+      if (!path || !subject) {
+        console.error(
+          "Path and Subject are required for key derivation"
+        );
+      }
+      console.log("Deriving ECDSA Key in TEE...");
+      const deriveKeyResponse = await this.client.deriveKey(path, subject);
+      const hex = keccak256(deriveKeyResponse.asUint8Array());
+      const keypair = privateKeyToAccount(hex);
+      const attestation = await this.generateDeriveKeyAttestation(
+        agentId,
+        keypair.address
+      );
+      console.log("ECDSA Key Derived Successfully!");
+      return { keypair, attestation };
+    } catch (error) {
+      console.error("Error deriving ecdsa key:", error);
+      throw error;
+    }
+  }
+};
+var deriveKeyProvider = {
+  get: async (runtime, _message, _state) => {
+    const teeMode = runtime.getSetting("TEE_MODE");
+    const provider = new DeriveKeyProvider(teeMode);
+    const agentId = runtime.agentId;
+    try {
+      if (!runtime.getSetting("WALLET_SECRET_SALT")) {
+        console.error(
+          "Wallet secret salt is not configured in settings"
+        );
+        return "";
+      }
+      try {
+        const secretSalt = runtime.getSetting("WALLET_SECRET_SALT") || "secret_salt";
+        const solanaKeypair = await provider.deriveEd25519Keypair(
+          "/",
+          secretSalt,
+          agentId
+        );
+        const evmKeypair = await provider.deriveEcdsaKeypair(
+          "/",
+          secretSalt,
+          agentId
+        );
+        return JSON.stringify({
+          solana: solanaKeypair.keypair.publicKey,
+          evm: evmKeypair.keypair.address
+        });
+      } catch (error) {
+        console.error("Error creating PublicKey:", error);
+        return "";
+      }
+    } catch (error) {
+      console.error("Error in derive key provider:", error.message);
+      return `Failed to fetch derive key information: ${error instanceof Error ? error.message : "Unknown error"}`;
+    }
+  }
+};
+
+// src/index.ts
+var teePlugin = {
+  name: "tee",
+  description: "TEE plugin with actions to generate remote attestations and derive keys",
+  actions: [
+    /* custom actions */
+  ],
+  evaluators: [
+    /* custom evaluators */
+  ],
+  providers: [
+    /* custom providers */
+    remoteAttestationProvider,
+    deriveKeyProvider
+  ],
+  services: [
+    /* custom services */
+  ]
+};
+export {
+  DeriveKeyProvider,
+  RemoteAttestationProvider,
+  TEEMode,
+  teePlugin
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/providers/remoteAttestationProvider.ts","../src/types/tee.ts","../src/providers/deriveKeyProvider.ts","../src/index.ts"],"sourcesContent":["import { IAgentRuntime, Memory, Provider, State } from \"@elizaos/core\";\nimport { TdxQuoteResponse, TappdClient } from \"@phala/dstack-sdk\";\nimport { RemoteAttestationQuote, TEEMode } from \"../types/tee\";\n\nclass RemoteAttestationProvider {\n    private client: TappdClient;\n\n    constructor(teeMode?: string) {\n        let endpoint: string | undefined;\n\n        // Both LOCAL and DOCKER modes use the simulator, just with different endpoints\n        switch (teeMode) {\n            case TEEMode.LOCAL:\n                endpoint = \"http://localhost:8090\";\n                console.log(\n                    \"TEE: Connecting to local simulator at localhost:8090\"\n                );\n                break;\n            case TEEMode.DOCKER:\n                endpoint = \"http://host.docker.internal:8090\";\n                console.log(\n                    \"TEE: Connecting to simulator via Docker at host.docker.internal:8090\"\n                );\n                break;\n            case TEEMode.PRODUCTION:\n                endpoint = undefined;\n                console.log(\n                    \"TEE: Running in production mode without simulator\"\n                );\n                break;\n            default:\n                throw new Error(\n                    `Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`\n                );\n        }\n\n        this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();\n    }\n\n    async generateAttestation(\n        reportData: string\n    ): Promise<RemoteAttestationQuote> {\n        try {\n            console.log(\"Generating attestation for: \", reportData);\n            const tdxQuote: TdxQuoteResponse =\n                await this.client.tdxQuote(reportData);\n            const rtmrs = tdxQuote.replayRtmrs();\n            console.log(\n                `rtmr0: ${rtmrs[0]}\\nrtmr1: ${rtmrs[1]}\\nrtmr2: ${rtmrs[2]}\\nrtmr3: ${rtmrs[3]}f`\n            );\n            const quote: RemoteAttestationQuote = {\n                quote: tdxQuote.quote,\n                timestamp: Date.now(),\n            };\n            console.log(\"Remote attestation quote: \", quote);\n            return quote;\n        } catch (error) {\n            console.error(\"Error generating remote attestation:\", error);\n            throw new Error(\n                `Failed to generate TDX Quote: ${\n                    error instanceof Error ? error.message : \"Unknown error\"\n                }`\n            );\n        }\n    }\n}\n\n// Keep the original provider for backwards compatibility\nconst remoteAttestationProvider: Provider = {\n    get: async (runtime: IAgentRuntime, _message: Memory, _state?: State) => {\n        const teeMode = runtime.getSetting(\"TEE_MODE\");\n        const provider = new RemoteAttestationProvider(teeMode);\n        const agentId = runtime.agentId;\n\n        try {\n            console.log(\"Generating attestation for: \", agentId);\n            const attestation = await provider.generateAttestation(agentId);\n            return `Your Agent's remote attestation is: ${JSON.stringify(attestation)}`;\n        } catch (error) {\n            console.error(\"Error in remote attestation provider:\", error);\n            throw new Error(\n                `Failed to generate TDX Quote: ${\n                    error instanceof Error ? error.message : \"Unknown error\"\n                }`\n            );\n        }\n    },\n};\n\nexport { remoteAttestationProvider, RemoteAttestationProvider };\n","export enum TEEMode {\n    OFF = \"OFF\",\n    LOCAL = \"LOCAL\",           // For local development with simulator\n    DOCKER = \"DOCKER\",         // For docker development with simulator\n    PRODUCTION = \"PRODUCTION\"  // For production without simulator\n}\n\nexport interface RemoteAttestationQuote {\n    quote: string;\n    timestamp: number;\n}","import { IAgentRuntime, Memory, Provider, State } from \"@elizaos/core\";\nimport { Keypair } from \"@solana/web3.js\";\nimport crypto from \"crypto\";\nimport { DeriveKeyResponse, TappdClient } from \"@phala/dstack-sdk\";\nimport { privateKeyToAccount } from \"viem/accounts\";\nimport { PrivateKeyAccount, keccak256 } from \"viem\";\nimport { RemoteAttestationProvider } from \"./remoteAttestationProvider\";\nimport { TEEMode, RemoteAttestationQuote } from \"../types/tee\";\n\ninterface DeriveKeyAttestationData {\n    agentId: string;\n    publicKey: string;\n}\n\nclass DeriveKeyProvider {\n    private client: TappdClient;\n    private raProvider: RemoteAttestationProvider;\n\n    constructor(teeMode?: string) {\n        let endpoint: string | undefined;\n\n        // Both LOCAL and DOCKER modes use the simulator, just with different endpoints\n        switch (teeMode) {\n            case TEEMode.LOCAL:\n                endpoint = \"http://localhost:8090\";\n                console.log(\n                    \"TEE: Connecting to local simulator at localhost:8090\"\n                );\n                break;\n            case TEEMode.DOCKER:\n                endpoint = \"http://host.docker.internal:8090\";\n                console.log(\n                    \"TEE: Connecting to simulator via Docker at host.docker.internal:8090\"\n                );\n                break;\n            case TEEMode.PRODUCTION:\n                endpoint = undefined;\n                console.log(\n                    \"TEE: Running in production mode without simulator\"\n                );\n                break;\n            default:\n                throw new Error(\n                    `Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`\n                );\n        }\n\n        this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();\n        this.raProvider = new RemoteAttestationProvider(teeMode);\n    }\n\n    private async generateDeriveKeyAttestation(\n        agentId: string,\n        publicKey: string\n    ): Promise<RemoteAttestationQuote> {\n        const deriveKeyData: DeriveKeyAttestationData = {\n            agentId,\n            publicKey,\n        };\n        const reportdata = JSON.stringify(deriveKeyData);\n        console.log(\"Generating Remote Attestation Quote for Derive Key...\");\n        const quote = await this.raProvider.generateAttestation(reportdata);\n        console.log(\"Remote Attestation Quote generated successfully!\");\n        return quote;\n    }\n\n    async rawDeriveKey(\n        path: string,\n        subject: string\n    ): Promise<DeriveKeyResponse> {\n        try {\n            if (!path || !subject) {\n                console.error(\n                    \"Path and Subject are required for key derivation\"\n                );\n            }\n\n            console.log(\"Deriving Raw Key in TEE...\");\n            const derivedKey = await this.client.deriveKey(path, subject);\n\n            console.log(\"Raw Key Derived Successfully!\");\n            return derivedKey;\n        } catch (error) {\n            console.error(\"Error deriving raw key:\", error);\n            throw error;\n        }\n    }\n\n    async deriveEd25519Keypair(\n        path: string,\n        subject: string,\n        agentId: string\n    ): Promise<{ keypair: Keypair; attestation: RemoteAttestationQuote }> {\n        try {\n            if (!path || !subject) {\n                console.error(\n                    \"Path and Subject are required for key derivation\"\n                );\n            }\n\n            console.log(\"Deriving Key in TEE...\");\n            const derivedKey = await this.client.deriveKey(path, subject);\n            const uint8ArrayDerivedKey = derivedKey.asUint8Array();\n\n            const hash = crypto.createHash(\"sha256\");\n            hash.update(uint8ArrayDerivedKey);\n            const seed = hash.digest();\n            const seedArray = new Uint8Array(seed);\n            const keypair = Keypair.fromSeed(seedArray.slice(0, 32));\n\n            // Generate an attestation for the derived key data for public to verify\n            const attestation = await this.generateDeriveKeyAttestation(\n                agentId,\n                keypair.publicKey.toBase58()\n            );\n            console.log(\"Key Derived Successfully!\");\n\n            return { keypair, attestation };\n        } catch (error) {\n            console.error(\"Error deriving key:\", error);\n            throw error;\n        }\n    }\n\n    async deriveEcdsaKeypair(\n        path: string,\n        subject: string,\n        agentId: string\n    ): Promise<{\n        keypair: PrivateKeyAccount;\n        attestation: RemoteAttestationQuote;\n    }> {\n        try {\n            if (!path || !subject) {\n                console.error(\n                    \"Path and Subject are required for key derivation\"\n                );\n            }\n\n            console.log(\"Deriving ECDSA Key in TEE...\");\n            const deriveKeyResponse: DeriveKeyResponse =\n                await this.client.deriveKey(path, subject);\n            const hex = keccak256(deriveKeyResponse.asUint8Array());\n            const keypair: PrivateKeyAccount = privateKeyToAccount(hex);\n\n            // Generate an attestation for the derived key data for public to verify\n            const attestation = await this.generateDeriveKeyAttestation(\n                agentId,\n                keypair.address\n            );\n            console.log(\"ECDSA Key Derived Successfully!\");\n\n            return { keypair, attestation };\n        } catch (error) {\n            console.error(\"Error deriving ecdsa key:\", error);\n            throw error;\n        }\n    }\n}\n\nconst deriveKeyProvider: Provider = {\n    get: async (runtime: IAgentRuntime, _message?: Memory, _state?: State) => {\n        const teeMode = runtime.getSetting(\"TEE_MODE\");\n        const provider = new DeriveKeyProvider(teeMode);\n        const agentId = runtime.agentId;\n        try {\n            // Validate wallet configuration\n            if (!runtime.getSetting(\"WALLET_SECRET_SALT\")) {\n                console.error(\n                    \"Wallet secret salt is not configured in settings\"\n                );\n                return \"\";\n            }\n\n            try {\n                const secretSalt =\n                    runtime.getSetting(\"WALLET_SECRET_SALT\") || \"secret_salt\";\n                const solanaKeypair = await provider.deriveEd25519Keypair(\n                    \"/\",\n                    secretSalt,\n                    agentId\n                );\n                const evmKeypair = await provider.deriveEcdsaKeypair(\n                    \"/\",\n                    secretSalt,\n                    agentId\n                );\n                return JSON.stringify({\n                    solana: solanaKeypair.keypair.publicKey,\n                    evm: evmKeypair.keypair.address,\n                });\n            } catch (error) {\n                console.error(\"Error creating PublicKey:\", error);\n                return \"\";\n            }\n        } catch (error) {\n            console.error(\"Error in derive key provider:\", error.message);\n            return `Failed to fetch derive key information: ${error instanceof Error ? error.message : \"Unknown error\"}`;\n        }\n    },\n};\n\nexport { deriveKeyProvider, DeriveKeyProvider };\n","import { Plugin } from \"@elizaos/core\";\nimport { remoteAttestationProvider } from \"./providers/remoteAttestationProvider\";\nimport { deriveKeyProvider } from \"./providers/deriveKeyProvider\";\n\nexport { DeriveKeyProvider } from \"./providers/deriveKeyProvider\";\nexport { RemoteAttestationProvider } from \"./providers/remoteAttestationProvider\";\nexport { RemoteAttestationQuote, TEEMode } from \"./types/tee\";\n\nexport const teePlugin: Plugin = {\n    name: \"tee\",\n    description:\n        \"TEE plugin with actions to generate remote attestations and derive keys\",\n    actions: [\n        /* custom actions */\n    ],\n    evaluators: [\n        /* custom evaluators */\n    ],\n    providers: [\n        /* custom providers */\n        remoteAttestationProvider,\n        deriveKeyProvider,\n    ],\n    services: [\n        /* custom services */\n    ],\n};\n"],"mappings":";AACA,SAA2B,mBAAmB;;;ACDvC,IAAK,UAAL,kBAAKA,aAAL;AACH,EAAAA,SAAA,SAAM;AACN,EAAAA,SAAA,WAAQ;AACR,EAAAA,SAAA,YAAS;AACT,EAAAA,SAAA,gBAAa;AAJL,SAAAA;AAAA,GAAA;;;ADIZ,IAAM,4BAAN,MAAgC;AAAA,EACpB;AAAA,EAER,YAAY,SAAkB;AAC1B,QAAI;AAGJ,YAAQ,SAAS;AAAA,MACb;AACI,mBAAW;AACX,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA;AAAA,MACJ;AACI,mBAAW;AACX,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA;AAAA,MACJ;AACI,mBAAW;AACX,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA;AAAA,MACJ;AACI,cAAM,IAAI;AAAA,UACN,qBAAqB,OAAO;AAAA,QAChC;AAAA,IACR;AAEA,SAAK,SAAS,WAAW,IAAI,YAAY,QAAQ,IAAI,IAAI,YAAY;AAAA,EACzE;AAAA,EAEA,MAAM,oBACF,YAC+B;AAC/B,QAAI;AACA,cAAQ,IAAI,gCAAgC,UAAU;AACtD,YAAM,WACF,MAAM,KAAK,OAAO,SAAS,UAAU;AACzC,YAAM,QAAQ,SAAS,YAAY;AACnC,cAAQ;AAAA,QACJ,UAAU,MAAM,CAAC,CAAC;AAAA,SAAY,MAAM,CAAC,CAAC;AAAA,SAAY,MAAM,CAAC,CAAC;AAAA,SAAY,MAAM,CAAC,CAAC;AAAA,MAClF;AACA,YAAM,QAAgC;AAAA,QAClC,OAAO,SAAS;AAAA,QAChB,WAAW,KAAK,IAAI;AAAA,MACxB;AACA,cAAQ,IAAI,8BAA8B,KAAK;AAC/C,aAAO;AAAA,IACX,SAAS,OAAO;AACZ,cAAQ,MAAM,wCAAwC,KAAK;AAC3D,YAAM,IAAI;AAAA,QACN,iCACI,iBAAiB,QAAQ,MAAM,UAAU,eAC7C;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AACJ;AAGA,IAAM,4BAAsC;AAAA,EACxC,KAAK,OAAO,SAAwB,UAAkB,WAAmB;AACrE,UAAM,UAAU,QAAQ,WAAW,UAAU;AAC7C,UAAM,WAAW,IAAI,0BAA0B,OAAO;AACtD,UAAM,UAAU,QAAQ;AAExB,QAAI;AACA,cAAQ,IAAI,gCAAgC,OAAO;AACnD,YAAM,cAAc,MAAM,SAAS,oBAAoB,OAAO;AAC9D,aAAO,uCAAuC,KAAK,UAAU,WAAW,CAAC;AAAA,IAC7E,SAAS,OAAO;AACZ,cAAQ,MAAM,yCAAyC,KAAK;AAC5D,YAAM,IAAI;AAAA,QACN,iCACI,iBAAiB,QAAQ,MAAM,UAAU,eAC7C;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AACJ;;;AEtFA,SAAS,eAAe;AACxB,OAAO,YAAY;AACnB,SAA4B,eAAAC,oBAAmB;AAC/C,SAAS,2BAA2B;AACpC,SAA4B,iBAAiB;AAS7C,IAAM,oBAAN,MAAwB;AAAA,EACZ;AAAA,EACA;AAAA,EAER,YAAY,SAAkB;AAC1B,QAAI;AAGJ,YAAQ,SAAS;AAAA,MACb;AACI,mBAAW;AACX,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA;AAAA,MACJ;AACI,mBAAW;AACX,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA;AAAA,MACJ;AACI,mBAAW;AACX,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA;AAAA,MACJ;AACI,cAAM,IAAI;AAAA,UACN,qBAAqB,OAAO;AAAA,QAChC;AAAA,IACR;AAEA,SAAK,SAAS,WAAW,IAAIC,aAAY,QAAQ,IAAI,IAAIA,aAAY;AACrE,SAAK,aAAa,IAAI,0BAA0B,OAAO;AAAA,EAC3D;AAAA,EAEA,MAAc,6BACV,SACA,WAC+B;AAC/B,UAAM,gBAA0C;AAAA,MAC5C;AAAA,MACA;AAAA,IACJ;AACA,UAAM,aAAa,KAAK,UAAU,aAAa;AAC/C,YAAQ,IAAI,uDAAuD;AACnE,UAAM,QAAQ,MAAM,KAAK,WAAW,oBAAoB,UAAU;AAClE,YAAQ,IAAI,kDAAkD;AAC9D,WAAO;AAAA,EACX;AAAA,EAEA,MAAM,aACF,MACA,SAC0B;AAC1B,QAAI;AACA,UAAI,CAAC,QAAQ,CAAC,SAAS;AACnB,gBAAQ;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AAEA,cAAQ,IAAI,4BAA4B;AACxC,YAAM,aAAa,MAAM,KAAK,OAAO,UAAU,MAAM,OAAO;AAE5D,cAAQ,IAAI,+BAA+B;AAC3C,aAAO;AAAA,IACX,SAAS,OAAO;AACZ,cAAQ,MAAM,2BAA2B,KAAK;AAC9C,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAM,qBACF,MACA,SACA,SACkE;AAClE,QAAI;AACA,UAAI,CAAC,QAAQ,CAAC,SAAS;AACnB,gBAAQ;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AAEA,cAAQ,IAAI,wBAAwB;AACpC,YAAM,aAAa,MAAM,KAAK,OAAO,UAAU,MAAM,OAAO;AAC5D,YAAM,uBAAuB,WAAW,aAAa;AAErD,YAAM,OAAO,OAAO,WAAW,QAAQ;AACvC,WAAK,OAAO,oBAAoB;AAChC,YAAM,OAAO,KAAK,OAAO;AACzB,YAAM,YAAY,IAAI,WAAW,IAAI;AACrC,YAAM,UAAU,QAAQ,SAAS,UAAU,MAAM,GAAG,EAAE,CAAC;AAGvD,YAAM,cAAc,MAAM,KAAK;AAAA,QAC3B;AAAA,QACA,QAAQ,UAAU,SAAS;AAAA,MAC/B;AACA,cAAQ,IAAI,2BAA2B;AAEvC,aAAO,EAAE,SAAS,YAAY;AAAA,IAClC,SAAS,OAAO;AACZ,cAAQ,MAAM,uBAAuB,KAAK;AAC1C,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAM,mBACF,MACA,SACA,SAID;AACC,QAAI;AACA,UAAI,CAAC,QAAQ,CAAC,SAAS;AACnB,gBAAQ;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AAEA,cAAQ,IAAI,8BAA8B;AAC1C,YAAM,oBACF,MAAM,KAAK,OAAO,UAAU,MAAM,OAAO;AAC7C,YAAM,MAAM,UAAU,kBAAkB,aAAa,CAAC;AACtD,YAAM,UAA6B,oBAAoB,GAAG;AAG1D,YAAM,cAAc,MAAM,KAAK;AAAA,QAC3B;AAAA,QACA,QAAQ;AAAA,MACZ;AACA,cAAQ,IAAI,iCAAiC;AAE7C,aAAO,EAAE,SAAS,YAAY;AAAA,IAClC,SAAS,OAAO;AACZ,cAAQ,MAAM,6BAA6B,KAAK;AAChD,YAAM;AAAA,IACV;AAAA,EACJ;AACJ;AAEA,IAAM,oBAA8B;AAAA,EAChC,KAAK,OAAO,SAAwB,UAAmB,WAAmB;AACtE,UAAM,UAAU,QAAQ,WAAW,UAAU;AAC7C,UAAM,WAAW,IAAI,kBAAkB,OAAO;AAC9C,UAAM,UAAU,QAAQ;AACxB,QAAI;AAEA,UAAI,CAAC,QAAQ,WAAW,oBAAoB,GAAG;AAC3C,gBAAQ;AAAA,UACJ;AAAA,QACJ;AACA,eAAO;AAAA,MACX;AAEA,UAAI;AACA,cAAM,aACF,QAAQ,WAAW,oBAAoB,KAAK;AAChD,cAAM,gBAAgB,MAAM,SAAS;AAAA,UACjC;AAAA,UACA;AAAA,UACA;AAAA,QACJ;AACA,cAAM,aAAa,MAAM,SAAS;AAAA,UAC9B;AAAA,UACA;AAAA,UACA;AAAA,QACJ;AACA,eAAO,KAAK,UAAU;AAAA,UAClB,QAAQ,cAAc,QAAQ;AAAA,UAC9B,KAAK,WAAW,QAAQ;AAAA,QAC5B,CAAC;AAAA,MACL,SAAS,OAAO;AACZ,gBAAQ,MAAM,6BAA6B,KAAK;AAChD,eAAO;AAAA,MACX;AAAA,IACJ,SAAS,OAAO;AACZ,cAAQ,MAAM,iCAAiC,MAAM,OAAO;AAC5D,aAAO,2CAA2C,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IAC9G;AAAA,EACJ;AACJ;;;AChMO,IAAM,YAAoB;AAAA,EAC7B,MAAM;AAAA,EACN,aACI;AAAA,EACJ,SAAS;AAAA;AAAA,EAET;AAAA,EACA,YAAY;AAAA;AAAA,EAEZ;AAAA,EACA,WAAW;AAAA;AAAA,IAEP;AAAA,IACA;AAAA,EACJ;AAAA,EACA,UAAU;AAAA;AAAA,EAEV;AACJ;","names":["TEEMode","TappdClient","TappdClient"]}

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@elizaos/plugin-tee",
+  "version": "0.1.7-alpha.1",
+  "main": "dist/index.js",
+  "type": "module",
+  "types": "dist/index.d.ts",
+  "dependencies": {
+    "@elizaos/core": "workspace:*",
+    "@phala/dstack-sdk": "0.1.6",
+    "@solana/spl-token": "0.4.9",
+    "@solana/web3.js": "1.95.8",
+    "bignumber": "1.1.0",
+    "bignumber.js": "9.1.2",
+    "bs58": "6.0.0",
+    "node-cache": "5.1.2",
+    "pumpdotfun-sdk": "1.3.2",
+    "tsup": "8.3.5",
+    "viem": "2.21.53"
+  },
+  "scripts": {
+    "build": "tsup --format esm --dts",
+    "dev": "tsup --format esm --dts --watch",
+    "lint": "eslint --fix  --cache ."
+  },
+  "peerDependencies": {
+    "whatwg-url": "7.1.0"
+  }
+}

package/tsup.config.ts

@@ -0,0 +1,28 @@
+import { defineConfig } from "tsup";
+
+export default defineConfig({
+    entry: ["src/index.ts"],
+    outDir: "dist",
+    sourcemap: true,
+    clean: true,
+    format: ["esm"], // Ensure you're targeting CommonJS
+    external: [
+        "dotenv", // Externalize dotenv to prevent bundling
+        "fs", // Externalize fs to use Node.js built-in module
+        "path", // Externalize other built-ins if necessary
+        "@reflink/reflink",
+        "@node-llama-cpp",
+        "https",
+        "http",
+        "agentkeepalive",
+        // Add other modules you want to externalize
+        "@phala/dstack-sdk",
+        "safe-buffer",
+        "base-x",
+        "bs58",
+        "borsh",
+        "@solana/buffer-layout",
+        "stream",
+        "buffer",
+    ],
+});