@elizaos/plugin-tee 0.1.7 → 0.1.8

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { Plugin } from '@elizaos/core';
 import { Keypair } from '@solana/web3.js';
-import { DeriveKeyResponse } from '@phala/dstack-sdk';
+import { DeriveKeyResponse, TdxQuoteHashAlgorithms } from '@phala/dstack-sdk';
 import { PrivateKeyAccount } from 'viem';
 
 declare enum TEEMode {
@@ -33,7 +33,7 @@ declare class DeriveKeyProvider {
 declare class RemoteAttestationProvider {
     private client;
     constructor(teeMode?: string);
-    generateAttestation(reportData: string): Promise<RemoteAttestationQuote>;
+    generateAttestation(reportData: string, hashAlgorithm?: TdxQuoteHashAlgorithms): Promise<RemoteAttestationQuote>;
 }
 
 declare const teePlugin: Plugin;

package/dist/index.js

@@ -41,10 +41,13 @@ import {
   toHex,
   trim,
   wrapConstructor
-} from "./chunk-NTU6R7BC.js";
+} from "./chunk-KSHJJL6X.js";
 import "./chunk-PR4QN5HX.js";
 
 // src/providers/remoteAttestationProvider.ts
+import {
+  elizaLogger
+} from "@elizaos/core";
 import { TappdClient } from "@phala/dstack-sdk";
 
 // src/types/tee.ts
@@ -64,19 +67,19 @@ var RemoteAttestationProvider = class {
     switch (teeMode) {
       case "LOCAL" /* LOCAL */:
         endpoint = "http://localhost:8090";
-        console.log(
+        elizaLogger.log(
           "TEE: Connecting to local simulator at localhost:8090"
         );
         break;
       case "DOCKER" /* DOCKER */:
         endpoint = "http://host.docker.internal:8090";
-        console.log(
+        elizaLogger.log(
           "TEE: Connecting to simulator via Docker at host.docker.internal:8090"
         );
         break;
       case "PRODUCTION" /* PRODUCTION */:
         endpoint = void 0;
-        console.log(
+        elizaLogger.log(
           "TEE: Running in production mode without simulator"
         );
         break;
@@ -87,12 +90,12 @@ var RemoteAttestationProvider = class {
     }
     this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();
   }
-  async generateAttestation(reportData) {
+  async generateAttestation(reportData, hashAlgorithm) {
     try {
-      console.log("Generating attestation for: ", reportData);
-      const tdxQuote = await this.client.tdxQuote(reportData);
+      elizaLogger.log("Generating attestation for: ", reportData);
+      const tdxQuote = await this.client.tdxQuote(reportData, hashAlgorithm);
       const rtmrs = tdxQuote.replayRtmrs();
-      console.log(
+      elizaLogger.log(
         `rtmr0: ${rtmrs[0]}
 rtmr1: ${rtmrs[1]}
 rtmr2: ${rtmrs[2]}
@@ -102,7 +105,7 @@ rtmr3: ${rtmrs[3]}f`
         quote: tdxQuote.quote,
         timestamp: Date.now()
       };
-      console.log("Remote attestation quote: ", quote);
+      elizaLogger.log("Remote attestation quote: ", quote);
       return quote;
     } catch (error) {
       console.error("Error generating remote attestation:", error);
@@ -118,8 +121,8 @@ var remoteAttestationProvider = {
     const provider = new RemoteAttestationProvider(teeMode);
     const agentId = runtime.agentId;
     try {
-      console.log("Generating attestation for: ", agentId);
-      const attestation = await provider.generateAttestation(agentId);
+      elizaLogger.log("Generating attestation for: ", agentId);
+      const attestation = await provider.generateAttestation(agentId, "raw");
       return `Your Agent's remote attestation is: ${JSON.stringify(attestation)}`;
     } catch (error) {
       console.error("Error in remote attestation provider:", error);
@@ -131,6 +134,9 @@ var remoteAttestationProvider = {
 };
 
 // src/providers/deriveKeyProvider.ts
+import {
+  elizaLogger as elizaLogger2
+} from "@elizaos/core";
 import { Keypair } from "@solana/web3.js";
 import crypto from "crypto";
 import { TappdClient as TappdClient2 } from "@phala/dstack-sdk";
@@ -1349,19 +1355,19 @@ var DeriveKeyProvider = class {
     switch (teeMode) {
       case "LOCAL" /* LOCAL */:
         endpoint = "http://localhost:8090";
-        console.log(
+        elizaLogger2.log(
           "TEE: Connecting to local simulator at localhost:8090"
         );
         break;
       case "DOCKER" /* DOCKER */:
         endpoint = "http://host.docker.internal:8090";
-        console.log(
+        elizaLogger2.log(
           "TEE: Connecting to simulator via Docker at host.docker.internal:8090"
         );
         break;
       case "PRODUCTION" /* PRODUCTION */:
         endpoint = void 0;
-        console.log(
+        elizaLogger2.log(
           "TEE: Running in production mode without simulator"
         );
         break;
@@ -1379,35 +1385,37 @@ var DeriveKeyProvider = class {
       publicKey
     };
     const reportdata = JSON.stringify(deriveKeyData);
-    console.log("Generating Remote Attestation Quote for Derive Key...");
+    elizaLogger2.log(
+      "Generating Remote Attestation Quote for Derive Key..."
+    );
     const quote = await this.raProvider.generateAttestation(reportdata);
-    console.log("Remote Attestation Quote generated successfully!");
+    elizaLogger2.log("Remote Attestation Quote generated successfully!");
     return quote;
   }
   async rawDeriveKey(path, subject) {
     try {
       if (!path || !subject) {
-        console.error(
+        elizaLogger2.error(
           "Path and Subject are required for key derivation"
         );
       }
-      console.log("Deriving Raw Key in TEE...");
+      elizaLogger2.log("Deriving Raw Key in TEE...");
       const derivedKey = await this.client.deriveKey(path, subject);
-      console.log("Raw Key Derived Successfully!");
+      elizaLogger2.log("Raw Key Derived Successfully!");
       return derivedKey;
     } catch (error) {
-      console.error("Error deriving raw key:", error);
+      elizaLogger2.error("Error deriving raw key:", error);
       throw error;
     }
   }
   async deriveEd25519Keypair(path, subject, agentId) {
     try {
       if (!path || !subject) {
-        console.error(
+        elizaLogger2.error(
           "Path and Subject are required for key derivation"
         );
       }
-      console.log("Deriving Key in TEE...");
+      elizaLogger2.log("Deriving Key in TEE...");
       const derivedKey = await this.client.deriveKey(path, subject);
       const uint8ArrayDerivedKey = derivedKey.asUint8Array();
       const hash = crypto.createHash("sha256");
@@ -1419,21 +1427,21 @@ var DeriveKeyProvider = class {
         agentId,
         keypair.publicKey.toBase58()
       );
-      console.log("Key Derived Successfully!");
+      elizaLogger2.log("Key Derived Successfully!");
       return { keypair, attestation };
     } catch (error) {
-      console.error("Error deriving key:", error);
+      elizaLogger2.error("Error deriving key:", error);
       throw error;
     }
   }
   async deriveEcdsaKeypair(path, subject, agentId) {
     try {
       if (!path || !subject) {
-        console.error(
+        elizaLogger2.error(
           "Path and Subject are required for key derivation"
         );
       }
-      console.log("Deriving ECDSA Key in TEE...");
+      elizaLogger2.log("Deriving ECDSA Key in TEE...");
       const deriveKeyResponse = await this.client.deriveKey(path, subject);
       const hex = keccak256(deriveKeyResponse.asUint8Array());
       const keypair = privateKeyToAccount(hex);
@@ -1441,10 +1449,10 @@ var DeriveKeyProvider = class {
         agentId,
         keypair.address
       );
-      console.log("ECDSA Key Derived Successfully!");
+      elizaLogger2.log("ECDSA Key Derived Successfully!");
       return { keypair, attestation };
     } catch (error) {
-      console.error("Error deriving ecdsa key:", error);
+      elizaLogger2.error("Error deriving ecdsa key:", error);
       throw error;
     }
   }
@@ -1456,7 +1464,7 @@ var deriveKeyProvider = {
     const agentId = runtime.agentId;
     try {
       if (!runtime.getSetting("WALLET_SECRET_SALT")) {
-        console.error(
+        elizaLogger2.error(
           "Wallet secret salt is not configured in settings"
         );
         return "";
@@ -1478,22 +1486,101 @@ var deriveKeyProvider = {
           evm: evmKeypair.keypair.address
         });
       } catch (error) {
-        console.error("Error creating PublicKey:", error);
+        elizaLogger2.error("Error creating PublicKey:", error);
         return "";
       }
     } catch (error) {
-      console.error("Error in derive key provider:", error.message);
+      elizaLogger2.error("Error in derive key provider:", error.message);
       return `Failed to fetch derive key information: ${error instanceof Error ? error.message : "Unknown error"}`;
     }
   }
 };
 
+// src/actions/remoteAttestation.ts
+import { fetch } from "undici";
+function hexToUint8Array(hex) {
+  hex = hex.trim();
+  if (!hex) {
+    throw new Error("Invalid hex string");
+  }
+  if (hex.startsWith("0x")) {
+    hex = hex.substring(2);
+  }
+  if (hex.length % 2 !== 0) {
+    throw new Error("Invalid hex string");
+  }
+  const array = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < hex.length; i += 2) {
+    const byte = parseInt(hex.slice(i, i + 2), 16);
+    if (isNaN(byte)) {
+      throw new Error("Invalid hex string");
+    }
+    array[i / 2] = byte;
+  }
+  return array;
+}
+async function uploadUint8Array(data) {
+  const blob = new Blob([data], { type: "application/octet-stream" });
+  const formData = new FormData();
+  formData.append("file", blob, "quote.bin");
+  return await fetch("https://proof.t16z.com/api/upload", {
+    method: "POST",
+    body: formData
+  });
+}
+var remoteAttestationAction = {
+  name: "REMOTE_ATTESTATION",
+  similes: ["REMOTE_ATTESTATION", "TEE_REMOTE_ATTESTATION", "TEE_ATTESTATION"],
+  description: "Generate a remote attestation to prove that the agent is running in a TEE",
+  handler: async (runtime, _message, _state, _options, callback) => {
+    try {
+      const agentId = runtime.agentId;
+      const teeMode = runtime.getSetting("TEE_MODE");
+      const provider = new RemoteAttestationProvider(teeMode);
+      const attestation = await provider.generateAttestation(agentId, "raw");
+      const attestationData = hexToUint8Array(attestation.quote);
+      const response = await uploadUint8Array(attestationData);
+      const data = await response.json();
+      callback({
+        text: `Here's my \u{1F9FE} RA Quote \u{1FAE1}
+                https://proof.t16z.com/reports/${data.checksum}`,
+        action: "NONE"
+      });
+      return true;
+    } catch (error) {
+      console.error("Failed to fetch remote attestation: ", error);
+      return false;
+    }
+  },
+  validate: async (_runtime) => {
+    return true;
+  },
+  examples: [
+    [
+      {
+        user: "{{user1}}",
+        content: {
+          text: "If you are running in a TEE, generate a remote attestation"
+        }
+      },
+      {
+        user: "{{user2}}",
+        content: {
+          text: "Of course, one second...",
+          action: "REMOTE_ATTESTATION"
+        }
+      }
+    ]
+  ]
+};
+
 // src/index.ts
 var teePlugin = {
   name: "tee",
   description: "TEE plugin with actions to generate remote attestations and derive keys",
   actions: [
     /* custom actions */
+    remoteAttestationAction
   ],
   evaluators: [
     /* custom evaluators */