@elizaos/plugin-tee 1.0.0-beta.74 → 1.0.0-beta.76

package/README.md

@@ -8,9 +8,19 @@ For Eliza agents running in a TEE, it's crucial to demonstrate this secure execu
 
 ## Requirements
 
-- A TEE-enabled environment is required (e.g., Intel TDX).
+- A TEE-enabled environment is required (e.g., Intel TDX) use [Phala Cloud](https://cloud.phala.network) for easy deployment.
 - Configuration within Eliza to enable and utilize this plugin's features.
 
+The plugin requires the following environment variables:
+
+```env
+# For the environment you are running the TEE plugin. For local and container development, use `LOCAL` or `DOCKER`. For production deployments, use `PRODUCTION`.
+TEE_MODE=LOCAL|DOCKER|PRODUCTION
+# Secret salt for your default agent to generate a key from through the derive key provider
+WALLET_SECRET_SALT=your_secret_salt
+# TEE_VENDOR only supports Phala at this time, but adding a vendor is easy and can be done to support more TEE Vendors in the TEE Plugin
+TEE_VENDOR=phala
+
 ## Features
 
 This plugin offers the following core TEE functionalities:
@@ -34,6 +44,8 @@ Based on the source code (`src/`):
 - **Providers**:
   - `remoteAttestationProvider.ts`: Implements the logic for interacting with the underlying TEE platform or attestation service (like Phala) to generate the attestation report.
   - `deriveKeyProvider.ts`: Implements the logic for TEE-specific key derivation.
+- **Services**
+  - `service.ts`: TEE Service to allow agents to generate keys from `deriveKeyProvider` for EVM, Solana, and raw `DeriveKeyResponse` that will return the `key`, `certificate_chain` and the `Uint8Array` with `asUint8Array(max_length?: number)`.
 - **Vendors**:
   - `vendors/phala.ts`: Contains specific implementation details for interacting with the Phala Network's attestation services.
   - `vendors/index.ts`, `vendors/types.ts`: Support vendor integration.
@@ -55,6 +67,7 @@ To utilize the features of this plugin:
 Example (Conceptual):
 
 ```typescript
+import import { PhalaDeriveKeyProvider, PhalaRemoteAttestationProvider } from '@elizaos/tee-plugin';
 // Assuming access to the runtime and its services/actions
 
 // Requesting remote attestation
@@ -63,10 +76,12 @@ async function getAttestation(
   userData: string
 ): Promise<AttestationReport | null> {
   try {
-    // Potentially using an action defined by this plugin
-    const report = await runtime.invokeAction('tee/getRemoteAttestation', { userData });
-    console.log('Received attestation report:', report);
-    return report;
+    const provider = new PhalaRemoteAttestationProvider(teeMode);
+
+    const attestation = await provider.generateAttestation(userData);
+    const attestationData = hexToUint8Array(attestation.quote);
+    const raQuote = await uploadUint8Array(attestationData);
+    return attestation;
   } catch (error) {
     console.error('Failed to get remote attestation:', error);
     return null;
@@ -74,12 +89,36 @@ async function getAttestation(
 }
 
 // Deriving a key
-async function deriveAgentKey(runtime: IAgentRuntime, salt: string): Promise<CryptoKey | null> {
+async function deriveAgentKeys(
+  runtime: IAgentRuntime, salt: string
+  ): Promise<ProviderResult | null> {
   try {
     // Potentially using a service/provider interface
-    const keyProvider = runtime.getService<IDeriveKeyProvider>(/* ServiceType or ID */);
-    const key = await keyProvider.deriveKey(salt);
-    console.log('Derived key successfully.');
+    const provider = new PhalaDeriveKeyProvider(teeMode)
+    const secretSalt = runtime.getSetting('WALLET_SECRET_SALT') || 'secret_salt';
+    const solanaKeypair = await provider.deriveEd25519Keypair(secretSalt, 'solana', agentId);
+    const evmKeypair = await provider.deriveEcdsaKeypair(secretSalt, 'evm', agentId);
+
+    // Original data structure
+    const walletData = {
+      solana: solanaKeypair.keypair.publicKey,
+      evm: evmKeypair.keypair.address,
+    };
+
+    // Values for template injection
+    const values = {
+      solana_public_key: solanaKeypair.keypair.publicKey.toString(),
+      evm_address: evmKeypair.keypair.address,
+    };
+
+    // Text representation
+    const text = `Solana Public Key: ${values.solana_public_key}\nEVM Address: ${values.evm_address}`;
+
+    return {
+      data: walletData,
+      values: values,
+      text: text,
+    };
     return key;
   } catch (error) {
     console.error('Failed to derive key:', error);
@@ -87,5 +126,3 @@ async function deriveAgentKey(runtime: IAgentRuntime, salt: string): Promise<Cry
   }
 }
 ```
-
-**Note:** The exact method calls (`invokeAction`, `getService`, service types/IDs) are illustrative and depend on the final integration pattern within Eliza.

package/package.json

@@ -1,19 +1,21 @@
 {
   "name": "@elizaos/plugin-tee",
-  "version": "1.0.0-beta.74",
+  "version": "1.0.0-beta.76",
   "main": "dist/index.js",
   "type": "module",
   "types": "dist/index.d.ts",
   "dependencies": {
-    "@elizaos/core": "^1.0.0-beta.74",
+    "@elizaos/core": "^1.0.0-beta.76",
     "@phala/dstack-sdk": "0.1.11",
-    "@solana/web3.js": "1.98.0",
-    "viem": "2.23.11"
+    "@solana/web3.js": "1.98.2",
+    "viem": "2.29.4"
   },
   "devDependencies": {
     "@types/node": "^22.15.3",
     "prettier": "3.5.3",
-    "tsup": "8.4.0"
+    "tsup": "8.5.0",
+    "typescript": "5.8.3",
+    "vitest": "^3.1.3"
   },
   "scripts": {
     "build": "tsup",
@@ -26,5 +28,19 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "d5bd5c43bfebeb7ac02f9e029f924cb6cd5c2ec7"
+  "gitHead": "646c632924826e2b75c2304a75ee56959fe4a460",
+  "agentConfig": {
+    "pluginType": "elizaos:plugin:1.0.0",
+    "pluginParameters": {
+      "TEE_VENDOR": {
+        "type": "string"
+      },
+      "TEE_MODE": {
+        "type": "string"
+      },
+      "WALLET_SECRET_SALT": {
+        "type": "string"
+      }
+    }
+  }
 }

package/tsup.config.ts

@@ -6,7 +6,7 @@ export default defineConfig({
   tsconfig: './tsconfig.build.json', // Use build-specific tsconfig
   sourcemap: true,
   format: ['esm'], // Ensure you're targeting CommonJS
-  dts: true, // Skip DTS generation to avoid external import issues // Ensure you're targeting CommonJS
+  dts: true,
   external: [
     'dotenv', // Externalize dotenv to prevent bundling
     'fs', // Externalize fs to use Node.js built-in module

package/dist/index.d.ts

@@ -1,9 +0,0 @@
-import { Plugin } from '@elizaos/core';
-export { TeeVendorConfig } from '@elizaos/core';
-
-/**
- * TEE plugin for Trusted Execution Environment integration
- */
-declare const teePlugin: Plugin;
-
-export { teePlugin as default, teePlugin };

package/dist/index.js

@@ -1,500 +0,0 @@
-// src/index.ts
-import { logger as logger5 } from "@elizaos/core";
-
-// src/vendors/types.ts
-var TeeVendorNames = {
-  PHALA: "phala"
-};
-
-// src/actions/remoteAttestationAction.ts
-import { logger as logger2 } from "@elizaos/core";
-
-// src/providers/remoteAttestationProvider.ts
-import { logger } from "@elizaos/core";
-import { TEEMode } from "@elizaos/core";
-import { TappdClient } from "@phala/dstack-sdk";
-
-// src/providers/base.ts
-var DeriveKeyProvider = class {
-};
-var RemoteAttestationProvider = class {
-};
-
-// src/providers/remoteAttestationProvider.ts
-var PhalaRemoteAttestationProvider = class extends RemoteAttestationProvider {
-  client;
-  constructor(teeMode) {
-    super();
-    let endpoint;
-    switch (teeMode) {
-      case TEEMode.LOCAL:
-        endpoint = "http://localhost:8090";
-        logger.log("TEE: Connecting to local simulator at localhost:8090");
-        break;
-      case TEEMode.DOCKER:
-        endpoint = "http://host.docker.internal:8090";
-        logger.log("TEE: Connecting to simulator via Docker at host.docker.internal:8090");
-        break;
-      case TEEMode.PRODUCTION:
-        endpoint = void 0;
-        logger.log("TEE: Running in production mode without simulator");
-        break;
-      default:
-        throw new Error(`Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`);
-    }
-    this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();
-  }
-  async generateAttestation(reportData, hashAlgorithm) {
-    try {
-      logger.log("Generating attestation for: ", reportData);
-      const tdxQuote = await this.client.tdxQuote(reportData, hashAlgorithm);
-      const rtmrs = tdxQuote.replayRtmrs();
-      logger.log(`rtmr0: ${rtmrs[0]}
-rtmr1: ${rtmrs[1]}
-rtmr2: ${rtmrs[2]}
-rtmr3: ${rtmrs[3]}f`);
-      const quote = {
-        quote: tdxQuote.quote,
-        timestamp: Date.now()
-      };
-      logger.log("Remote attestation quote: ", quote);
-      return quote;
-    } catch (error) {
-      console.error("Error generating remote attestation:", error);
-      throw new Error(
-        `Failed to generate TDX Quote: ${error instanceof Error ? error.message : "Unknown error"}`
-      );
-    }
-  }
-};
-var phalaRemoteAttestationProvider = {
-  name: "phala-remote-attestation",
-  get: async (runtime, message) => {
-    const teeMode = runtime.getSetting("TEE_MODE");
-    const provider = new PhalaRemoteAttestationProvider(teeMode);
-    const agentId = runtime.agentId;
-    try {
-      const attestationMessage = {
-        agentId,
-        timestamp: Date.now(),
-        message: {
-          entityId: message.entityId,
-          roomId: message.roomId,
-          content: message.content.text || ""
-        }
-      };
-      logger.log("Generating attestation for: ", JSON.stringify(attestationMessage));
-      const attestation = await provider.generateAttestation(JSON.stringify(attestationMessage));
-      return {
-        text: `Your Agent's remote attestation is: ${JSON.stringify(attestation)}`,
-        data: {
-          attestation
-        },
-        values: {
-          quote: attestation.quote,
-          timestamp: attestation.timestamp.toString()
-        }
-      };
-    } catch (error) {
-      console.error("Error in remote attestation provider:", error);
-      throw new Error(
-        `Failed to generate TDX Quote: ${error instanceof Error ? error.message : "Unknown error"}`
-      );
-    }
-  }
-};
-
-// src/utils.ts
-function hexToUint8Array(hex) {
-  const hexString = hex.trim().replace(/^0x/, "");
-  if (!hexString) {
-    throw new Error("Invalid hex string");
-  }
-  if (hexString.length % 2 !== 0) {
-    throw new Error("Invalid hex string");
-  }
-  const array = new Uint8Array(hexString.length / 2);
-  for (let i = 0; i < hexString.length; i += 2) {
-    const byte = Number.parseInt(hexString.slice(i, i + 2), 16);
-    if (Number.isNaN(byte)) {
-      throw new Error("Invalid hex string");
-    }
-    array[i / 2] = byte;
-  }
-  return array;
-}
-
-// src/actions/remoteAttestationAction.ts
-async function uploadUint8Array(data) {
-  const blob = new Blob([data], { type: "application/octet-stream" });
-  const formData = new FormData();
-  formData.append("file", blob, "quote.bin");
-  return await fetch("https://proof.t16z.com/api/upload", {
-    method: "POST",
-    body: formData
-  });
-}
-var phalaRemoteAttestationAction = {
-  name: "REMOTE_ATTESTATION",
-  similes: [
-    "REMOTE_ATTESTATION",
-    "TEE_REMOTE_ATTESTATION",
-    "TEE_ATTESTATION",
-    "TEE_QUOTE",
-    "ATTESTATION",
-    "TEE_ATTESTATION_QUOTE"
-  ],
-  description: "Generate a remote attestation to prove that the agent is running in a TEE",
-  handler: async (runtime, message, _state, _options, callback) => {
-    try {
-      const attestationMessage = {
-        agentId: runtime.agentId,
-        timestamp: Date.now(),
-        message: {
-          entityId: message.entityId,
-          roomId: message.roomId,
-          content: message.content.text || ""
-        }
-      };
-      const teeMode = runtime.getSetting("TEE_MODE");
-      logger2.debug(`Tee mode: ${teeMode}`);
-      logger2.debug(`Attestation message: ${JSON.stringify(attestationMessage)}`);
-      const provider = new PhalaRemoteAttestationProvider(teeMode);
-      const attestation = await provider.generateAttestation(JSON.stringify(attestationMessage));
-      const attestationData = hexToUint8Array(attestation.quote);
-      const response = await uploadUint8Array(attestationData);
-      const data = await response.json();
-      if (callback) {
-        callback({
-          text: `Here's my \u{1F9FE} RA Quote \u{1FAE1}
-https://proof.t16z.com/reports/${data.checksum}`,
-          actions: ["NONE"]
-        });
-      }
-      return true;
-    } catch (error) {
-      console.error("Failed to fetch remote attestation: ", error);
-      return false;
-    }
-  },
-  validate: async (_runtime) => {
-    return true;
-  },
-  examples: [
-    [
-      {
-        name: "{{name1}}",
-        content: {
-          text: "If you are running in a TEE, generate a remote attestation"
-        }
-      },
-      {
-        name: "{{agentName}}",
-        content: {
-          text: "Of course, one second...",
-          actions: ["REMOTE_ATTESTATION"]
-        }
-      }
-    ],
-    [
-      {
-        name: "{{name1}}",
-        content: {
-          text: "Yo I wanna attest to this message, yo! Can you generate an attestatin for me, please?"
-        }
-      },
-      {
-        name: "{{agentName}}",
-        content: {
-          text: "I got you, fam! Lemme hit the cloud and get you a quote in a jiffy!",
-          actions: ["REMOTE_ATTESTATION"]
-        }
-      }
-    ],
-    [
-      {
-        name: "{{name1}}",
-        content: {
-          text: "It was a long day, I got a lot done though. I went to the creek and skipped some rocks. Then I decided to take a walk off the natural path. I ended up in a forest I was unfamiliar with. Slowly, I lost the way back and it was dark. A whisper from deep inside said something I could barely make out. The hairs on my neck stood up and then a clear high pitched voice said, 'You are not ready to leave yet! SHOW ME YOUR REMOTE ATTESTATION!'"
-        }
-      },
-      {
-        name: "{{agentName}}",
-        content: {
-          text: "Oh, dear...lemme find that for you",
-          actions: ["REMOTE_ATTESTATION"]
-        }
-      }
-    ]
-  ]
-};
-
-// src/providers/deriveKeyProvider.ts
-import { logger as logger3 } from "@elizaos/core";
-import { TEEMode as TEEMode2 } from "@elizaos/core";
-import { TappdClient as TappdClient2 } from "@phala/dstack-sdk";
-import { toViemAccount } from "@phala/dstack-sdk/viem";
-import { toKeypair } from "@phala/dstack-sdk/solana";
-var PhalaDeriveKeyProvider = class extends DeriveKeyProvider {
-  client;
-  raProvider;
-  constructor(teeMode) {
-    super();
-    let endpoint;
-    switch (teeMode) {
-      case TEEMode2.LOCAL:
-        endpoint = "http://localhost:8090";
-        logger3.log("TEE: Connecting to local simulator at localhost:8090");
-        break;
-      case TEEMode2.DOCKER:
-        endpoint = "http://host.docker.internal:8090";
-        logger3.log("TEE: Connecting to simulator via Docker at host.docker.internal:8090");
-        break;
-      case TEEMode2.PRODUCTION:
-        endpoint = void 0;
-        logger3.log("TEE: Running in production mode without simulator");
-        break;
-      default:
-        throw new Error(`Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`);
-    }
-    this.client = endpoint ? new TappdClient2(endpoint) : new TappdClient2();
-    this.raProvider = new PhalaRemoteAttestationProvider(teeMode);
-  }
-  async generateDeriveKeyAttestation(agentId, publicKey, subject) {
-    const deriveKeyData = {
-      agentId,
-      publicKey,
-      subject
-    };
-    const reportdata = JSON.stringify(deriveKeyData);
-    logger3.log("Generating Remote Attestation Quote for Derive Key...");
-    const quote = await this.raProvider.generateAttestation(reportdata);
-    logger3.log("Remote Attestation Quote generated successfully!");
-    return quote;
-  }
-  /**
-   * Derives a raw key from the given path and subject.
-   * @param path - The path to derive the key from. This is used to derive the key from the root of trust.
-   * @param subject - The subject to derive the key from. This is used for the certificate chain.
-   * @returns The derived key.
-   */
-  async rawDeriveKey(path, subject) {
-    try {
-      if (!path || !subject) {
-        logger3.error("Path and Subject are required for key derivation");
-      }
-      logger3.log("Deriving Raw Key in TEE...");
-      const derivedKey = await this.client.deriveKey(path, subject);
-      logger3.log("Raw Key Derived Successfully!");
-      return derivedKey;
-    } catch (error) {
-      logger3.error("Error deriving raw key:", error);
-      throw error;
-    }
-  }
-  /**
-   * Derives an Ed25519 keypair from the given path and subject.
-   * @param path - The path to derive the key from. This is used to derive the key from the root of trust.
-   * @param subject - The subject to derive the key from. This is used for the certificate chain.
-   * @param agentId - The agent ID to generate an attestation for.
-   * @returns An object containing the derived keypair and attestation.
-   */
-  async deriveEd25519Keypair(path, subject, agentId) {
-    try {
-      if (!path || !subject) {
-        logger3.error("Path and Subject are required for key derivation");
-      }
-      logger3.log("Deriving Key in TEE...");
-      const derivedKey = await this.client.deriveKey(path, subject);
-      const keypair = toKeypair(derivedKey);
-      const attestation = await this.generateDeriveKeyAttestation(
-        agentId,
-        keypair.publicKey.toBase58()
-      );
-      logger3.log("Key Derived Successfully!");
-      return { keypair, attestation };
-    } catch (error) {
-      logger3.error("Error deriving key:", error);
-      throw error;
-    }
-  }
-  /**
-   * Derives an ECDSA keypair from the given path and subject.
-   * @param path - The path to derive the key from. This is used to derive the key from the root of trust.
-   * @param subject - The subject to derive the key from. This is used for the certificate chain.
-   * @param agentId - The agent ID to generate an attestation for. This is used for the certificate chain.
-   * @returns An object containing the derived keypair and attestation.
-   */
-  async deriveEcdsaKeypair(path, subject, agentId) {
-    try {
-      if (!path || !subject) {
-        logger3.error("Path and Subject are required for key derivation");
-      }
-      logger3.log("Deriving ECDSA Key in TEE...");
-      const deriveKeyResponse = await this.client.deriveKey(path, subject);
-      const keypair = toViemAccount(deriveKeyResponse);
-      const attestation = await this.generateDeriveKeyAttestation(agentId, keypair.address);
-      logger3.log("ECDSA Key Derived Successfully!");
-      return { keypair, attestation };
-    } catch (error) {
-      logger3.error("Error deriving ecdsa key:", error);
-      throw error;
-    }
-  }
-};
-var phalaDeriveKeyProvider = {
-  name: "phala-derive-key",
-  get: async (runtime, _message) => {
-    const teeMode = runtime.getSetting("TEE_MODE");
-    const provider = new PhalaDeriveKeyProvider(teeMode);
-    const agentId = runtime.agentId;
-    try {
-      if (!runtime.getSetting("WALLET_SECRET_SALT")) {
-        logger3.error("Wallet secret salt is not configured in settings");
-        return {
-          data: null,
-          values: {},
-          text: "Wallet secret salt is not configured in settings"
-        };
-      }
-      try {
-        const secretSalt = runtime.getSetting("WALLET_SECRET_SALT") || "secret_salt";
-        const solanaKeypair = await provider.deriveEd25519Keypair(secretSalt, "solana", agentId);
-        const evmKeypair = await provider.deriveEcdsaKeypair(secretSalt, "evm", agentId);
-        const walletData = {
-          solana: solanaKeypair.keypair.publicKey,
-          evm: evmKeypair.keypair.address
-        };
-        const values = {
-          solana_public_key: solanaKeypair.keypair.publicKey.toString(),
-          evm_address: evmKeypair.keypair.address
-        };
-        const text = `Solana Public Key: ${values.solana_public_key}
-EVM Address: ${values.evm_address}`;
-        return {
-          data: walletData,
-          values,
-          text
-        };
-      } catch (error) {
-        logger3.error("Error creating PublicKey:", error);
-        return {
-          data: null,
-          values: {},
-          text: `Error creating PublicKey: ${error instanceof Error ? error.message : "Unknown error"}`
-        };
-      }
-    } catch (error) {
-      logger3.error(
-        "Error in derive key provider:",
-        error instanceof Error ? error.message : "Unknown error"
-      );
-      return {
-        data: null,
-        values: {},
-        text: `Failed to fetch derive key information: ${error instanceof Error ? error.message : "Unknown error"}`
-      };
-    }
-  }
-};
-
-// src/vendors/phala.ts
-var PhalaVendor = class {
-  type = TeeVendorNames.PHALA;
-  /**
-   * Returns an array of actions.
-   *
-   * @returns {Array} An array containing the remote attestation action.
-   */
-  getActions() {
-    return [phalaRemoteAttestationAction];
-  }
-  /**
-   * Retrieve the list of providers.
-   *
-   * @returns {Array<Function>} An array containing two provider functions: deriveKeyProvider and remoteAttestationProvider.
-   */
-  getProviders() {
-    return [phalaDeriveKeyProvider, phalaRemoteAttestationProvider];
-  }
-  /**
-   * Returns the name of the plugin.
-   * @returns {string} The name of the plugin.
-   */
-  getName() {
-    return "phala-tee-plugin";
-  }
-  /**
-   * Get the description of the function
-   * @returns {string} The description of the function
-   */
-  getDescription() {
-    return "Phala TEE Cloud to Host Eliza Agents";
-  }
-};
-
-// src/vendors/index.ts
-var vendors = {
-  [TeeVendorNames.PHALA]: new PhalaVendor()
-};
-var getVendor = (type) => {
-  const vendor = vendors[type];
-  if (!vendor) {
-    throw new Error(`Unsupported TEE vendor type: ${type}`);
-  }
-  return vendor;
-};
-
-// src/service.ts
-import { Service, ServiceType, logger as logger4 } from "@elizaos/core";
-var TEEService = class _TEEService extends Service {
-  provider;
-  config;
-  static serviceType = ServiceType.TEE;
-  capabilityDescription = "Trusted Execution Environment for secure key management";
-  constructor(runtime, config = {}) {
-    super(runtime);
-    this.config = config;
-    const teeMode = config.teeMode || runtime.getSetting("TEE_MODE");
-    this.provider = new PhalaDeriveKeyProvider(teeMode);
-  }
-  static async start(runtime) {
-    const teeMode = runtime.getSetting("TEE_MODE");
-    logger4.log(`Starting TEE service with mode: ${teeMode}`);
-    const teeService = new _TEEService(runtime, { teeMode });
-    return teeService;
-  }
-  async stop() {
-    logger4.log("Stopping TEE service");
-  }
-  async deriveEcdsaKeypair(path, subject, agentId) {
-    logger4.log("TEE Service: Deriving ECDSA keypair");
-    return await this.provider.deriveEcdsaKeypair(path, subject, agentId);
-  }
-  async deriveEd25519Keypair(path, subject, agentId) {
-    logger4.log("TEE Service: Deriving Ed25519 keypair");
-    return await this.provider.deriveEd25519Keypair(path, subject, agentId);
-  }
-};
-
-// src/index.ts
-var defaultVendor = getVendor(TeeVendorNames.PHALA);
-var teePlugin = {
-  name: "tee-plugin",
-  description: "Trusted Execution Environment (TEE) integration plugin",
-  init: async (config, runtime) => {
-    const vendorName = config.TEE_VENDOR || runtime.getSetting("TEE_VENDOR") || TeeVendorNames.PHALA;
-    logger5.info(`Initializing TEE with vendor: ${vendorName}`);
-    logger5.info(`TEE initialized with vendor: ${vendorName}`);
-  },
-  actions: defaultVendor.getActions(),
-  evaluators: [],
-  providers: defaultVendor.getProviders(),
-  services: [TEEService]
-};
-var index_default = teePlugin;
-export {
-  index_default as default,
-  teePlugin
-};
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts","../src/vendors/types.ts","../src/actions/remoteAttestationAction.ts","../src/providers/remoteAttestationProvider.ts","../src/providers/base.ts","../src/utils.ts","../src/providers/deriveKeyProvider.ts","../src/vendors/phala.ts","../src/vendors/index.ts","../src/service.ts"],"sourcesContent":["import { type IAgentRuntime, type Plugin, type TeeVendorConfig, logger } from '@elizaos/core';\nimport { TeeVendorNames } from './vendors/types';\nimport { getVendor } from './vendors/index';\nimport { TEEService } from './service';\n\nexport type { TeeVendorConfig };\n\n// Get the default Phala vendor\nconst defaultVendor = getVendor(TeeVendorNames.PHALA);\n\n/**\n * TEE plugin for Trusted Execution Environment integration\n */\nexport const teePlugin: Plugin = {\n  name: 'tee-plugin',\n  description: 'Trusted Execution Environment (TEE) integration plugin',\n  init: async (config: Record<string, string>, runtime: IAgentRuntime) => {\n    const vendorName =\n      config.TEE_VENDOR || runtime.getSetting('TEE_VENDOR') || TeeVendorNames.PHALA;\n    logger.info(`Initializing TEE with vendor: ${vendorName}`);\n\n    // Configure vendor-specific settings if needed\n    // This is where you'd handle any vendor-specific initialization\n\n    logger.info(`TEE initialized with vendor: ${vendorName}`);\n  },\n  actions: defaultVendor.getActions(),\n  evaluators: [],\n  providers: defaultVendor.getProviders(),\n  services: [TEEService],\n};\n\nexport default teePlugin;\n","import type { Action, Provider } from '@elizaos/core';\n\nexport const TeeVendorNames = {\n  PHALA: 'phala',\n} as const;\n\n/**\n * Type representing the name of a Tee vendor.\n * It can either be one of the keys of TeeVendorNames or a string.\n */\nexport type TeeVendorName = (typeof TeeVendorNames)[keyof typeof TeeVendorNames] | string;\n\n/**\n * Interface for a TeeVendor, representing a vendor that sells tees.\n * @interface\n */\n\nexport interface TeeVendor {\n  type: TeeVendorName;\n  getActions(): Action[];\n  getProviders(): Provider[];\n  getName(): string;\n  getDescription(): string;\n}\n","import type {\n  Action,\n  HandlerCallback,\n  IAgentRuntime,\n  Memory,\n  RemoteAttestationMessage,\n  State,\n} from '@elizaos/core';\nimport { logger } from '@elizaos/core';\nimport { PhalaRemoteAttestationProvider as RemoteAttestationProvider } from '../providers/remoteAttestationProvider';\nimport { hexToUint8Array } from '../utils';\n\n/**\n * Asynchronously uploads a Uint8Array as a binary file to a specified URL.\n *\n * @param {Uint8Array} data - The Uint8Array data to be uploaded as a binary file.\n * @returns {Promise<Response>} A Promise that resolves once the upload is complete, returning a Response object.\n */\nasync function uploadUint8Array(data: Uint8Array) {\n  const blob = new Blob([data], { type: 'application/octet-stream' });\n  const formData = new FormData();\n  formData.append('file', blob, 'quote.bin');\n\n  return await fetch('https://proof.t16z.com/api/upload', {\n    method: 'POST',\n    body: formData as BodyInit,\n  });\n}\n\n/**\n * Represents an action for remote attestation.\n *\n * This action is used to generate a remote attestation to prove that the agent is running in a Trusted Execution Environment (TEE).\n *\n * @type {{name: string, similes: string[], description: string, handler: Function, validate: Function, examples: Array<Array<Object>>}}\n */\nexport const phalaRemoteAttestationAction: Action = {\n  name: 'REMOTE_ATTESTATION',\n  similes: [\n    'REMOTE_ATTESTATION',\n    'TEE_REMOTE_ATTESTATION',\n    'TEE_ATTESTATION',\n    'TEE_QUOTE',\n    'ATTESTATION',\n    'TEE_ATTESTATION_QUOTE',\n  ],\n  description: 'Generate a remote attestation to prove that the agent is running in a TEE',\n  handler: async (\n    runtime: IAgentRuntime,\n    message: Memory,\n    _state: State | undefined,\n    _options: { [key: string]: unknown } | undefined,\n    callback: HandlerCallback | undefined\n  ) => {\n    try {\n      // Attestation will be generated based on the message info\n      const attestationMessage: RemoteAttestationMessage = {\n        agentId: runtime.agentId,\n        timestamp: Date.now(),\n        message: {\n          entityId: message.entityId,\n          roomId: message.roomId,\n          content: message.content.text || '',\n        },\n      };\n      // Get the remote attestation of the agentId\n      const teeMode = runtime.getSetting('TEE_MODE');\n      logger.debug(`Tee mode: ${teeMode}`);\n      logger.debug(`Attestation message: ${JSON.stringify(attestationMessage)}`);\n      const provider = new RemoteAttestationProvider(teeMode);\n\n      const attestation = await provider.generateAttestation(JSON.stringify(attestationMessage));\n      const attestationData = hexToUint8Array(attestation.quote);\n      const response = await uploadUint8Array(attestationData);\n      const data = await response.json();\n\n      if (callback) {\n        callback({\n          text: `Here's my 🧾 RA Quote 🫡\nhttps://proof.t16z.com/reports/${data.checksum}`,\n          actions: ['NONE'],\n        });\n      }\n      return true;\n    } catch (error) {\n      console.error('Failed to fetch remote attestation: ', error);\n      return false;\n    }\n  },\n  validate: async (_runtime: IAgentRuntime) => {\n    return true;\n  },\n  examples: [\n    [\n      {\n        name: '{{name1}}',\n        content: {\n          text: 'If you are running in a TEE, generate a remote attestation',\n        },\n      },\n      {\n        name: '{{agentName}}',\n        content: {\n          text: 'Of course, one second...',\n          actions: ['REMOTE_ATTESTATION'],\n        },\n      },\n    ],\n    [\n      {\n        name: '{{name1}}',\n        content: {\n          text: 'Yo I wanna attest to this message, yo! Can you generate an attestatin for me, please?',\n        },\n      },\n      {\n        name: '{{agentName}}',\n        content: {\n          text: 'I got you, fam! Lemme hit the cloud and get you a quote in a jiffy!',\n          actions: ['REMOTE_ATTESTATION'],\n        },\n      },\n    ],\n    [\n      {\n        name: '{{name1}}',\n        content: {\n          text: \"It was a long day, I got a lot done though. I went to the creek and skipped some rocks. Then I decided to take a walk off the natural path. I ended up in a forest I was unfamiliar with. Slowly, I lost the way back and it was dark. A whisper from deep inside said something I could barely make out. The hairs on my neck stood up and then a clear high pitched voice said, 'You are not ready to leave yet! SHOW ME YOUR REMOTE ATTESTATION!'\",\n        },\n      },\n      {\n        name: '{{agentName}}',\n        content: {\n          text: 'Oh, dear...lemme find that for you',\n          actions: ['REMOTE_ATTESTATION'],\n        },\n      },\n    ],\n  ],\n};\n","import { type IAgentRuntime, type Memory, type Provider, logger } from '@elizaos/core';\nimport { type RemoteAttestationMessage, type RemoteAttestationQuote, TEEMode } from '@elizaos/core';\nimport { TappdClient, type TdxQuoteHashAlgorithms, type TdxQuoteResponse } from '@phala/dstack-sdk';\nimport { RemoteAttestationProvider } from './base';\n\n// Define the ProviderResult interface if not already imported\n/**\n * Interface for the result returned by a provider.\n * @typedef {Object} ProviderResult\n * @property {any} data - The data returned by the provider.\n * @property {Record<string, string>} values - The values returned by the provider.\n * @property {string} text - The text returned by the provider.\n */\ninterface ProviderResult {\n  data?: any;\n  values?: Record<string, string>;\n  text?: string;\n}\n\n/**\n * Phala TEE Cloud Provider\n * @example\n * ```ts\n * const provider = new PhalaRemoteAttestationProvider();\n * ```\n */\n/**\n * PhalaRemoteAttestationProvider class that extends RemoteAttestationProvider\n * @extends RemoteAttestationProvider\n */\nclass PhalaRemoteAttestationProvider extends RemoteAttestationProvider {\n  private client: TappdClient;\n\n  constructor(teeMode?: string) {\n    super();\n    let endpoint: string | undefined;\n\n    // Both LOCAL and DOCKER modes use the simulator, just with different endpoints\n    switch (teeMode) {\n      case TEEMode.LOCAL:\n        endpoint = 'http://localhost:8090';\n        logger.log('TEE: Connecting to local simulator at localhost:8090');\n        break;\n      case TEEMode.DOCKER:\n        endpoint = 'http://host.docker.internal:8090';\n        logger.log('TEE: Connecting to simulator via Docker at host.docker.internal:8090');\n        break;\n      case TEEMode.PRODUCTION:\n        endpoint = undefined;\n        logger.log('TEE: Running in production mode without simulator');\n        break;\n      default:\n        throw new Error(`Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`);\n    }\n\n    this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();\n  }\n\n  async generateAttestation(\n    reportData: string,\n    hashAlgorithm?: TdxQuoteHashAlgorithms\n  ): Promise<RemoteAttestationQuote> {\n    try {\n      logger.log('Generating attestation for: ', reportData);\n      const tdxQuote: TdxQuoteResponse = await this.client.tdxQuote(reportData, hashAlgorithm);\n      const rtmrs = tdxQuote.replayRtmrs();\n      logger.log(`rtmr0: ${rtmrs[0]}\\nrtmr1: ${rtmrs[1]}\\nrtmr2: ${rtmrs[2]}\\nrtmr3: ${rtmrs[3]}f`);\n      const quote: RemoteAttestationQuote = {\n        quote: tdxQuote.quote,\n        timestamp: Date.now(),\n      };\n      logger.log('Remote attestation quote: ', quote);\n      return quote;\n    } catch (error) {\n      console.error('Error generating remote attestation:', error);\n      throw new Error(\n        `Failed to generate TDX Quote: ${error instanceof Error ? error.message : 'Unknown error'}`\n      );\n    }\n  }\n}\n\n// Keep the original provider for backwards compatibility\nconst phalaRemoteAttestationProvider: Provider = {\n  name: 'phala-remote-attestation',\n  get: async (runtime: IAgentRuntime, message: Memory) => {\n    const teeMode = runtime.getSetting('TEE_MODE');\n    const provider = new PhalaRemoteAttestationProvider(teeMode);\n    const agentId = runtime.agentId;\n\n    try {\n      const attestationMessage: RemoteAttestationMessage = {\n        agentId: agentId,\n        timestamp: Date.now(),\n        message: {\n          entityId: message.entityId,\n          roomId: message.roomId,\n          content: message.content.text || '',\n        },\n      };\n      logger.log('Generating attestation for: ', JSON.stringify(attestationMessage));\n      const attestation = await provider.generateAttestation(JSON.stringify(attestationMessage));\n      return {\n        text: `Your Agent's remote attestation is: ${JSON.stringify(attestation)}`,\n        data: {\n          attestation,\n        },\n        values: {\n          quote: attestation.quote,\n          timestamp: attestation.timestamp.toString(),\n        },\n      };\n    } catch (error) {\n      console.error('Error in remote attestation provider:', error);\n      throw new Error(\n        `Failed to generate TDX Quote: ${error instanceof Error ? error.message : 'Unknown error'}`\n      );\n    }\n  },\n};\n\nexport { phalaRemoteAttestationProvider, PhalaRemoteAttestationProvider };\n","import type { RemoteAttestationQuote } from '@elizaos/core';\nimport type { TdxQuoteHashAlgorithms } from '@phala/dstack-sdk';\n\n/**\n * Abstract class for deriving keys from the TEE.\n * You can implement your own logic for deriving keys from the TEE.\n * @example\n * ```ts\n * class MyDeriveKeyProvider extends DeriveKeyProvider {\n *   private client: TappdClient;\n *\n *   constructor(endpoint: string) {\n *     super();\n *     this.client = new TappdClient();\n *   }\n *\n *   async rawDeriveKey(path: string, subject: string): Promise<any> {\n *     return this.client.deriveKey(path, subject);\n *   }\n * }\n * ```\n */\n/**\n * Abstract class representing a key provider for deriving keys.\n */\nexport abstract class DeriveKeyProvider {}\n\n/**\n * Abstract class for remote attestation provider.\n */\nexport abstract class RemoteAttestationProvider {\n  abstract generateAttestation(\n    reportData: string,\n    hashAlgorithm?: TdxQuoteHashAlgorithms\n  ): Promise<RemoteAttestationQuote>;\n}\n","import { createHash } from 'node:crypto';\n\n/**\n * Converts a hexadecimal string to a Uint8Array.\n *\n * @param {string} hex - The hexadecimal string to convert.\n * @returns {Uint8Array} - The resulting Uint8Array.\n * @throws {Error} - If the input hex string is invalid.\n */\nexport function hexToUint8Array(hex: string) {\n  const hexString = hex.trim().replace(/^0x/, '');\n  if (!hexString) {\n    throw new Error('Invalid hex string');\n  }\n  if (hexString.length % 2 !== 0) {\n    throw new Error('Invalid hex string');\n  }\n\n  const array = new Uint8Array(hexString.length / 2);\n  for (let i = 0; i < hexString.length; i += 2) {\n    const byte = Number.parseInt(hexString.slice(i, i + 2), 16);\n    if (Number.isNaN(byte)) {\n      throw new Error('Invalid hex string');\n    }\n    array[i / 2] = byte;\n  }\n  return array;\n}\n\n// Function to calculate SHA-256 and return a Buffer (32 bytes)\n/**\n * Calculates the SHA256 hash of the input string.\n *\n * @param {string} input - The input string to calculate the hash from.\n * @returns {Buffer} - The calculated SHA256 hash as a Buffer object.\n */\nexport function calculateSHA256(input: string): Buffer {\n  const hash = createHash('sha256');\n  hash.update(input);\n  return hash.digest();\n}\n","import { type IAgentRuntime, type Memory, type Provider, type State, logger } from '@elizaos/core';\nimport { type DeriveKeyAttestationData, type RemoteAttestationQuote, TEEMode } from '@elizaos/core';\nimport { type DeriveKeyResponse, TappdClient } from '@phala/dstack-sdk';\nimport { Keypair } from '@solana/web3.js';\nimport { toViemAccount } from '@phala/dstack-sdk/viem';\nimport { toKeypair } from '@phala/dstack-sdk/solana';\nimport { DeriveKeyProvider } from './base';\nimport { PhalaRemoteAttestationProvider as RemoteAttestationProvider } from './remoteAttestationProvider';\nimport { PrivateKeyAccount } from 'viem';\n\n/**\n * Phala TEE Cloud Provider\n * @example\n * ```ts\n * const provider = new PhalaDeriveKeyProvider(runtime.getSetting('TEE_MODE'));\n * ```\n */\n/**\n * A class representing a key provider for deriving keys in the Phala TEE environment.\n * Extends the DeriveKeyProvider class.\n */\nclass PhalaDeriveKeyProvider extends DeriveKeyProvider {\n  private client: TappdClient;\n  private raProvider: RemoteAttestationProvider;\n\n  constructor(teeMode?: string) {\n    super();\n    let endpoint: string | undefined;\n\n    // Both LOCAL and DOCKER modes use the simulator, just with different endpoints\n    switch (teeMode) {\n      case TEEMode.LOCAL:\n        endpoint = 'http://localhost:8090';\n        logger.log('TEE: Connecting to local simulator at localhost:8090');\n        break;\n      case TEEMode.DOCKER:\n        endpoint = 'http://host.docker.internal:8090';\n        logger.log('TEE: Connecting to simulator via Docker at host.docker.internal:8090');\n        break;\n      case TEEMode.PRODUCTION:\n        endpoint = undefined;\n        logger.log('TEE: Running in production mode without simulator');\n        break;\n      default:\n        throw new Error(`Invalid TEE_MODE: ${teeMode}. Must be one of: LOCAL, DOCKER, PRODUCTION`);\n    }\n\n    this.client = endpoint ? new TappdClient(endpoint) : new TappdClient();\n    this.raProvider = new RemoteAttestationProvider(teeMode);\n  }\n\n  private async generateDeriveKeyAttestation(\n    agentId: string,\n    publicKey: string,\n    subject?: string\n  ): Promise<RemoteAttestationQuote> {\n    const deriveKeyData: DeriveKeyAttestationData = {\n      agentId,\n      publicKey,\n      subject,\n    };\n    const reportdata = JSON.stringify(deriveKeyData);\n    logger.log('Generating Remote Attestation Quote for Derive Key...');\n    const quote = await this.raProvider.generateAttestation(reportdata);\n    logger.log('Remote Attestation Quote generated successfully!');\n    return quote;\n  }\n\n  /**\n   * Derives a raw key from the given path and subject.\n   * @param path - The path to derive the key from. This is used to derive the key from the root of trust.\n   * @param subject - The subject to derive the key from. This is used for the certificate chain.\n   * @returns The derived key.\n   */\n  async rawDeriveKey(path: string, subject: string): Promise<DeriveKeyResponse> {\n    try {\n      if (!path || !subject) {\n        logger.error('Path and Subject are required for key derivation');\n      }\n\n      logger.log('Deriving Raw Key in TEE...');\n      const derivedKey = await this.client.deriveKey(path, subject);\n\n      logger.log('Raw Key Derived Successfully!');\n      return derivedKey;\n    } catch (error) {\n      logger.error('Error deriving raw key:', error);\n      throw error;\n    }\n  }\n\n  /**\n   * Derives an Ed25519 keypair from the given path and subject.\n   * @param path - The path to derive the key from. This is used to derive the key from the root of trust.\n   * @param subject - The subject to derive the key from. This is used for the certificate chain.\n   * @param agentId - The agent ID to generate an attestation for.\n   * @returns An object containing the derived keypair and attestation.\n   */\n  async deriveEd25519Keypair(\n    path: string,\n    subject: string,\n    agentId: string\n  ): Promise<{ keypair: Keypair; attestation: RemoteAttestationQuote }> {\n    try {\n      if (!path || !subject) {\n        logger.error('Path and Subject are required for key derivation');\n      }\n\n      logger.log('Deriving Key in TEE...');\n      const derivedKey = await this.client.deriveKey(path, subject);\n      const keypair = toKeypair(derivedKey);\n\n      // Generate an attestation for the derived key data for public to verify\n      const attestation = await this.generateDeriveKeyAttestation(\n        agentId,\n        keypair.publicKey.toBase58()\n      );\n      logger.log('Key Derived Successfully!');\n\n      return { keypair, attestation };\n    } catch (error) {\n      logger.error('Error deriving key:', error);\n      throw error;\n    }\n  }\n\n  /**\n   * Derives an ECDSA keypair from the given path and subject.\n   * @param path - The path to derive the key from. This is used to derive the key from the root of trust.\n   * @param subject - The subject to derive the key from. This is used for the certificate chain.\n   * @param agentId - The agent ID to generate an attestation for. This is used for the certificate chain.\n   * @returns An object containing the derived keypair and attestation.\n   */\n  async deriveEcdsaKeypair(\n    path: string,\n    subject: string,\n    agentId: string\n  ): Promise<{\n    keypair: PrivateKeyAccount;\n    attestation: RemoteAttestationQuote;\n  }> {\n    try {\n      if (!path || !subject) {\n        logger.error('Path and Subject are required for key derivation');\n      }\n\n      logger.log('Deriving ECDSA Key in TEE...');\n      const deriveKeyResponse: DeriveKeyResponse = await this.client.deriveKey(path, subject);\n      const keypair = toViemAccount(deriveKeyResponse);\n\n      // Generate an attestation for the derived key data for public to verify\n      const attestation = await this.generateDeriveKeyAttestation(agentId, keypair.address);\n      logger.log('ECDSA Key Derived Successfully!');\n\n      return { keypair, attestation };\n    } catch (error) {\n      logger.error('Error deriving ecdsa key:', error);\n      throw error;\n    }\n  }\n}\n\n// Define the ProviderResult interface if not already imported\ninterface ProviderResult {\n  data?: any;\n  values?: Record<string, string>;\n  text?: string;\n}\n\nconst phalaDeriveKeyProvider: Provider = {\n  name: 'phala-derive-key',\n  get: async (runtime: IAgentRuntime, _message?: Memory): Promise<ProviderResult> => {\n    const teeMode = runtime.getSetting('TEE_MODE');\n    const provider = new PhalaDeriveKeyProvider(teeMode);\n    const agentId = runtime.agentId;\n    try {\n      // Validate wallet configuration\n      if (!runtime.getSetting('WALLET_SECRET_SALT')) {\n        logger.error('Wallet secret salt is not configured in settings');\n        return {\n          data: null,\n          values: {},\n          text: 'Wallet secret salt is not configured in settings',\n        };\n      }\n\n      try {\n        const secretSalt = runtime.getSetting('WALLET_SECRET_SALT') || 'secret_salt';\n        const solanaKeypair = await provider.deriveEd25519Keypair(secretSalt, 'solana', agentId);\n        const evmKeypair = await provider.deriveEcdsaKeypair(secretSalt, 'evm', agentId);\n\n        // Original data structure\n        const walletData = {\n          solana: solanaKeypair.keypair.publicKey,\n          evm: evmKeypair.keypair.address,\n        };\n\n        // Values for template injection\n        const values = {\n          solana_public_key: solanaKeypair.keypair.publicKey.toString(),\n          evm_address: evmKeypair.keypair.address,\n        };\n\n        // Text representation\n        const text = `Solana Public Key: ${values.solana_public_key}\\nEVM Address: ${values.evm_address}`;\n\n        return {\n          data: walletData,\n          values: values,\n          text: text,\n        };\n      } catch (error) {\n        logger.error('Error creating PublicKey:', error);\n        return {\n          data: null,\n          values: {},\n          text: `Error creating PublicKey: ${\n            error instanceof Error ? error.message : 'Unknown error'\n          }`,\n        };\n      }\n    } catch (error) {\n      logger.error(\n        'Error in derive key provider:',\n        error instanceof Error ? error.message : 'Unknown error'\n      );\n      return {\n        data: null,\n        values: {},\n        text: `Failed to fetch derive key information: ${\n          error instanceof Error ? error.message : 'Unknown error'\n        }`,\n      };\n    }\n  },\n};\n\nexport { phalaDeriveKeyProvider, PhalaDeriveKeyProvider };\n","import { type Action } from '@elizaos/core';\nimport { phalaRemoteAttestationAction as remoteAttestationAction } from '../actions/remoteAttestationAction';\nimport { phalaDeriveKeyProvider as deriveKeyProvider } from '../providers/deriveKeyProvider';\nimport { phalaRemoteAttestationProvider as remoteAttestationProvider } from '../providers/remoteAttestationProvider';\nimport { type TeeVendor, TeeVendorNames } from './types';\n\n/**\n * A class representing a vendor for Phala TEE.\n * * @implements { TeeVendor }\n * @type {TeeVendorNames.PHALA}\n *//**\n * Get the actions for the PhalaVendor.\n * * @returns { Array } An array of actions.\n *//**\n * Get the providers for the PhalaVendor.\n * * @returns { Array } An array of providers.\n *//**\n * Get the name of the PhalaVendor.\n * * @returns { string } The name of the vendor.\n *//**\n * Get the description of the PhalaVendor.\n * * @returns { string } The description of the vendor.\n */\nexport class PhalaVendor implements TeeVendor {\n  type = TeeVendorNames.PHALA;\n\n  /**\n   * Returns an array of actions.\n   *\n   * @returns {Array} An array containing the remote attestation action.\n   */\n  getActions(): Action[] {\n    return [remoteAttestationAction];\n  }\n  /**\n   * Retrieve the list of providers.\n   *\n   * @returns {Array<Function>} An array containing two provider functions: deriveKeyProvider and remoteAttestationProvider.\n   */\n  getProviders() {\n    return [deriveKeyProvider, remoteAttestationProvider];\n  }\n\n  /**\n   * Returns the name of the plugin.\n   * @returns {string} The name of the plugin.\n   */\n  getName() {\n    return 'phala-tee-plugin';\n  }\n\n  /**\n   * Get the description of the function\n   * @returns {string} The description of the function\n   */\n  getDescription() {\n    return 'Phala TEE Cloud to Host Eliza Agents';\n  }\n}\n","import { PhalaVendor } from './phala';\nimport type { TeeVendor } from './types';\nimport { type TeeVendorName, TeeVendorNames } from './types';\n\nconst vendors: Record<TeeVendorName, TeeVendor> = {\n  [TeeVendorNames.PHALA]: new PhalaVendor(),\n};\n\nexport const getVendor = (type: TeeVendorName): TeeVendor => {\n  const vendor = vendors[type];\n  if (!vendor) {\n    throw new Error(`Unsupported TEE vendor type: ${type}`);\n  }\n  return vendor;\n};\n\nexport * from './types';\n","import { type IAgentRuntime, Service, ServiceType, type UUID, logger } from '@elizaos/core';\nimport { PrivateKeyAccount } from 'viem';\nimport { Keypair } from '@solana/web3.js';\nimport { type RemoteAttestationQuote } from '@elizaos/core';\nimport { PhalaDeriveKeyProvider } from './providers/deriveKeyProvider';\n\ninterface TEEServiceConfig {\n  teeMode?: string;\n}\n\nexport class TEEService extends Service {\n  private provider: PhalaDeriveKeyProvider;\n  public config: TEEServiceConfig;\n  static serviceType = ServiceType.TEE;\n  public capabilityDescription = 'Trusted Execution Environment for secure key management';\n\n  constructor(runtime: IAgentRuntime, config: TEEServiceConfig = {}) {\n    super(runtime);\n    this.config = config;\n    const teeMode = config.teeMode || runtime.getSetting('TEE_MODE');\n    this.provider = new PhalaDeriveKeyProvider(teeMode);\n  }\n\n  static async start(runtime: IAgentRuntime): Promise<TEEService> {\n    const teeMode = runtime.getSetting('TEE_MODE');\n    logger.log(`Starting TEE service with mode: ${teeMode}`);\n    const teeService = new TEEService(runtime, { teeMode });\n    return teeService;\n  }\n\n  async stop(): Promise<void> {\n    logger.log('Stopping TEE service');\n    // No cleanup needed for now\n  }\n\n  async deriveEcdsaKeypair(\n    path: string,\n    subject: string,\n    agentId: UUID\n  ): Promise<{\n    keypair: PrivateKeyAccount;\n    attestation: RemoteAttestationQuote;\n  }> {\n    logger.log('TEE Service: Deriving ECDSA keypair');\n    return await this.provider.deriveEcdsaKeypair(path, subject, agentId);\n  }\n\n  async deriveEd25519Keypair(\n    path: string,\n    subject: string,\n    agentId: UUID\n  ): Promise<{\n    keypair: Keypair;\n    attestation: RemoteAttestationQuote;\n  }> {\n    logger.log('TEE Service: Deriving Ed25519 keypair');\n    return await this.provider.deriveEd25519Keypair(path, subject, agentId);\n  }\n}\n"],"mappings":";AAAA,SAAgE,UAAAA,eAAc;;;ACEvE,IAAM,iBAAiB;AAAA,EAC5B,OAAO;AACT;;;ACIA,SAAS,UAAAC,eAAc;;;ACRvB,SAAyD,cAAc;AACvE,SAAqE,eAAe;AACpF,SAAS,mBAAuE;;;ACuBzE,IAAe,oBAAf,MAAiC;AAAC;AAKlC,IAAe,4BAAf,MAAyC;AAKhD;;;ADLA,IAAM,iCAAN,cAA6C,0BAA0B;AAAA,EAC7D;AAAA,EAER,YAAY,SAAkB;AAC5B,UAAM;AACN,QAAI;AAGJ,YAAQ,SAAS;AAAA,MACf,KAAK,QAAQ;AACX,mBAAW;AACX,eAAO,IAAI,sDAAsD;AACjE;AAAA,MACF,KAAK,QAAQ;AACX,mBAAW;AACX,eAAO,IAAI,sEAAsE;AACjF;AAAA,MACF,KAAK,QAAQ;AACX,mBAAW;AACX,eAAO,IAAI,mDAAmD;AAC9D;AAAA,MACF;AACE,cAAM,IAAI,MAAM,qBAAqB,OAAO,6CAA6C;AAAA,IAC7F;AAEA,SAAK,SAAS,WAAW,IAAI,YAAY,QAAQ,IAAI,IAAI,YAAY;AAAA,EACvE;AAAA,EAEA,MAAM,oBACJ,YACA,eACiC;AACjC,QAAI;AACF,aAAO,IAAI,gCAAgC,UAAU;AACrD,YAAM,WAA6B,MAAM,KAAK,OAAO,SAAS,YAAY,aAAa;AACvF,YAAM,QAAQ,SAAS,YAAY;AACnC,aAAO,IAAI,UAAU,MAAM,CAAC,CAAC;AAAA,SAAY,MAAM,CAAC,CAAC;AAAA,SAAY,MAAM,CAAC,CAAC;AAAA,SAAY,MAAM,CAAC,CAAC,GAAG;AAC5F,YAAM,QAAgC;AAAA,QACpC,OAAO,SAAS;AAAA,QAChB,WAAW,KAAK,IAAI;AAAA,MACtB;AACA,aAAO,IAAI,8BAA8B,KAAK;AAC9C,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,wCAAwC,KAAK;AAC3D,YAAM,IAAI;AAAA,QACR,iCAAiC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;AAGA,IAAM,iCAA2C;AAAA,EAC/C,MAAM;AAAA,EACN,KAAK,OAAO,SAAwB,YAAoB;AACtD,UAAM,UAAU,QAAQ,WAAW,UAAU;AAC7C,UAAM,WAAW,IAAI,+BAA+B,OAAO;AAC3D,UAAM,UAAU,QAAQ;AAExB,QAAI;AACF,YAAM,qBAA+C;AAAA,QACnD;AAAA,QACA,WAAW,KAAK,IAAI;AAAA,QACpB,SAAS;AAAA,UACP,UAAU,QAAQ;AAAA,UAClB,QAAQ,QAAQ;AAAA,UAChB,SAAS,QAAQ,QAAQ,QAAQ;AAAA,QACnC;AAAA,MACF;AACA,aAAO,IAAI,gCAAgC,KAAK,UAAU,kBAAkB,CAAC;AAC7E,YAAM,cAAc,MAAM,SAAS,oBAAoB,KAAK,UAAU,kBAAkB,CAAC;AACzF,aAAO;AAAA,QACL,MAAM,uCAAuC,KAAK,UAAU,WAAW,CAAC;AAAA,QACxE,MAAM;AAAA,UACJ;AAAA,QACF;AAAA,QACA,QAAQ;AAAA,UACN,OAAO,YAAY;AAAA,UACnB,WAAW,YAAY,UAAU,SAAS;AAAA,QAC5C;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,yCAAyC,KAAK;AAC5D,YAAM,IAAI;AAAA,QACR,iCAAiC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;;;AE9GO,SAAS,gBAAgB,KAAa;AAC3C,QAAM,YAAY,IAAI,KAAK,EAAE,QAAQ,OAAO,EAAE;AAC9C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AACA,MAAI,UAAU,SAAS,MAAM,GAAG;AAC9B,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,QAAQ,IAAI,WAAW,UAAU,SAAS,CAAC;AACjD,WAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK,GAAG;AAC5C,UAAM,OAAO,OAAO,SAAS,UAAU,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE;AAC1D,QAAI,OAAO,MAAM,IAAI,GAAG;AACtB,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AACA,UAAM,IAAI,CAAC,IAAI;AAAA,EACjB;AACA,SAAO;AACT;;;AHTA,eAAe,iBAAiB,MAAkB;AAChD,QAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAClE,QAAM,WAAW,IAAI,SAAS;AAC9B,WAAS,OAAO,QAAQ,MAAM,WAAW;AAEzC,SAAO,MAAM,MAAM,qCAAqC;AAAA,IACtD,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AASO,IAAM,+BAAuC;AAAA,EAClD,MAAM;AAAA,EACN,SAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,aAAa;AAAA,EACb,SAAS,OACP,SACA,SACA,QACA,UACA,aACG;AACH,QAAI;AAEF,YAAM,qBAA+C;AAAA,QACnD,SAAS,QAAQ;AAAA,QACjB,WAAW,KAAK,IAAI;AAAA,QACpB,SAAS;AAAA,UACP,UAAU,QAAQ;AAAA,UAClB,QAAQ,QAAQ;AAAA,UAChB,SAAS,QAAQ,QAAQ,QAAQ;AAAA,QACnC;AAAA,MACF;AAEA,YAAM,UAAU,QAAQ,WAAW,UAAU;AAC7C,MAAAC,QAAO,MAAM,aAAa,OAAO,EAAE;AACnC,MAAAA,QAAO,MAAM,wBAAwB,KAAK,UAAU,kBAAkB,CAAC,EAAE;AACzE,YAAM,WAAW,IAAI,+BAA0B,OAAO;AAEtD,YAAM,cAAc,MAAM,SAAS,oBAAoB,KAAK,UAAU,kBAAkB,CAAC;AACzF,YAAM,kBAAkB,gBAAgB,YAAY,KAAK;AACzD,YAAM,WAAW,MAAM,iBAAiB,eAAe;AACvD,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,UAAU;AACZ,iBAAS;AAAA,UACP,MAAM;AAAA,iCACiB,KAAK,QAAQ;AAAA,UACpC,SAAS,CAAC,MAAM;AAAA,QAClB,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,wCAAwC,KAAK;AAC3D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,UAAU,OAAO,aAA4B;AAC3C,WAAO;AAAA,EACT;AAAA,EACA,UAAU;AAAA,IACR;AAAA,MACE;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,SAAS,CAAC,oBAAoB;AAAA,QAChC;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,SAAS,CAAC,oBAAoB;AAAA,QAChC;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,SAAS,CAAC,oBAAoB;AAAA,QAChC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AI3IA,SAAqE,UAAAC,eAAc;AACnF,SAAqE,WAAAC,gBAAe;AACpF,SAAiC,eAAAC,oBAAmB;AAEpD,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;AAgB1B,IAAM,yBAAN,cAAqC,kBAAkB;AAAA,EAC7C;AAAA,EACA;AAAA,EAER,YAAY,SAAkB;AAC5B,UAAM;AACN,QAAI;AAGJ,YAAQ,SAAS;AAAA,MACf,KAAKC,SAAQ;AACX,mBAAW;AACX,QAAAC,QAAO,IAAI,sDAAsD;AACjE;AAAA,MACF,KAAKD,SAAQ;AACX,mBAAW;AACX,QAAAC,QAAO,IAAI,sEAAsE;AACjF;AAAA,MACF,KAAKD,SAAQ;AACX,mBAAW;AACX,QAAAC,QAAO,IAAI,mDAAmD;AAC9D;AAAA,MACF;AACE,cAAM,IAAI,MAAM,qBAAqB,OAAO,6CAA6C;AAAA,IAC7F;AAEA,SAAK,SAAS,WAAW,IAAIC,aAAY,QAAQ,IAAI,IAAIA,aAAY;AACrE,SAAK,aAAa,IAAI,+BAA0B,OAAO;AAAA,EACzD;AAAA,EAEA,MAAc,6BACZ,SACA,WACA,SACiC;AACjC,UAAM,gBAA0C;AAAA,MAC9C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,aAAa,KAAK,UAAU,aAAa;AAC/C,IAAAD,QAAO,IAAI,uDAAuD;AAClE,UAAM,QAAQ,MAAM,KAAK,WAAW,oBAAoB,UAAU;AAClE,IAAAA,QAAO,IAAI,kDAAkD;AAC7D,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,aAAa,MAAc,SAA6C;AAC5E,QAAI;AACF,UAAI,CAAC,QAAQ,CAAC,SAAS;AACrB,QAAAA,QAAO,MAAM,kDAAkD;AAAA,MACjE;AAEA,MAAAA,QAAO,IAAI,4BAA4B;AACvC,YAAM,aAAa,MAAM,KAAK,OAAO,UAAU,MAAM,OAAO;AAE5D,MAAAA,QAAO,IAAI,+BAA+B;AAC1C,aAAO;AAAA,IACT,SAAS,OAAO;AACd,MAAAA,QAAO,MAAM,2BAA2B,KAAK;AAC7C,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,qBACJ,MACA,SACA,SACoE;AACpE,QAAI;AACF,UAAI,CAAC,QAAQ,CAAC,SAAS;AACrB,QAAAA,QAAO,MAAM,kDAAkD;AAAA,MACjE;AAEA,MAAAA,QAAO,IAAI,wBAAwB;AACnC,YAAM,aAAa,MAAM,KAAK,OAAO,UAAU,MAAM,OAAO;AAC5D,YAAM,UAAU,UAAU,UAAU;AAGpC,YAAM,cAAc,MAAM,KAAK;AAAA,QAC7B;AAAA,QACA,QAAQ,UAAU,SAAS;AAAA,MAC7B;AACA,MAAAA,QAAO,IAAI,2BAA2B;AAEtC,aAAO,EAAE,SAAS,YAAY;AAAA,IAChC,SAAS,OAAO;AACd,MAAAA,QAAO,MAAM,uBAAuB,KAAK;AACzC,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,mBACJ,MACA,SACA,SAIC;AACD,QAAI;AACF,UAAI,CAAC,QAAQ,CAAC,SAAS;AACrB,QAAAA,QAAO,MAAM,kDAAkD;AAAA,MACjE;AAEA,MAAAA,QAAO,IAAI,8BAA8B;AACzC,YAAM,oBAAuC,MAAM,KAAK,OAAO,UAAU,MAAM,OAAO;AACtF,YAAM,UAAU,cAAc,iBAAiB;AAG/C,YAAM,cAAc,MAAM,KAAK,6BAA6B,SAAS,QAAQ,OAAO;AACpF,MAAAA,QAAO,IAAI,iCAAiC;AAE5C,aAAO,EAAE,SAAS,YAAY;AAAA,IAChC,SAAS,OAAO;AACd,MAAAA,QAAO,MAAM,6BAA6B,KAAK;AAC/C,YAAM;AAAA,IACR;AAAA,EACF;AACF;AASA,IAAM,yBAAmC;AAAA,EACvC,MAAM;AAAA,EACN,KAAK,OAAO,SAAwB,aAA+C;AACjF,UAAM,UAAU,QAAQ,WAAW,UAAU;AAC7C,UAAM,WAAW,IAAI,uBAAuB,OAAO;AACnD,UAAM,UAAU,QAAQ;AACxB,QAAI;AAEF,UAAI,CAAC,QAAQ,WAAW,oBAAoB,GAAG;AAC7C,QAAAA,QAAO,MAAM,kDAAkD;AAC/D,eAAO;AAAA,UACL,MAAM;AAAA,UACN,QAAQ,CAAC;AAAA,UACT,MAAM;AAAA,QACR;AAAA,MACF;AAEA,UAAI;AACF,cAAM,aAAa,QAAQ,WAAW,oBAAoB,KAAK;AAC/D,cAAM,gBAAgB,MAAM,SAAS,qBAAqB,YAAY,UAAU,OAAO;AACvF,cAAM,aAAa,MAAM,SAAS,mBAAmB,YAAY,OAAO,OAAO;AAG/E,cAAM,aAAa;AAAA,UACjB,QAAQ,cAAc,QAAQ;AAAA,UAC9B,KAAK,WAAW,QAAQ;AAAA,QAC1B;AAGA,cAAM,SAAS;AAAA,UACb,mBAAmB,cAAc,QAAQ,UAAU,SAAS;AAAA,UAC5D,aAAa,WAAW,QAAQ;AAAA,QAClC;AAGA,cAAM,OAAO,sBAAsB,OAAO,iBAAiB;AAAA,eAAkB,OAAO,WAAW;AAE/F,eAAO;AAAA,UACL,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,QAAAA,QAAO,MAAM,6BAA6B,KAAK;AAC/C,eAAO;AAAA,UACL,MAAM;AAAA,UACN,QAAQ,CAAC;AAAA,UACT,MAAM,6BACJ,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,MAAAA,QAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AACA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,CAAC;AAAA,QACT,MAAM,2CACJ,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACpNO,IAAM,cAAN,MAAuC;AAAA,EAC5C,OAAO,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOtB,aAAuB;AACrB,WAAO,CAAC,4BAAuB;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,eAAe;AACb,WAAO,CAAC,wBAAmB,8BAAyB;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAU;AACR,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAiB;AACf,WAAO;AAAA,EACT;AACF;;;ACtDA,IAAM,UAA4C;AAAA,EAChD,CAAC,eAAe,KAAK,GAAG,IAAI,YAAY;AAC1C;AAEO,IAAM,YAAY,CAAC,SAAmC;AAC3D,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,gCAAgC,IAAI,EAAE;AAAA,EACxD;AACA,SAAO;AACT;;;ACdA,SAA6B,SAAS,aAAwB,UAAAE,eAAc;AAUrE,IAAM,aAAN,MAAM,oBAAmB,QAAQ;AAAA,EAC9B;AAAA,EACD;AAAA,EACP,OAAO,cAAc,YAAY;AAAA,EAC1B,wBAAwB;AAAA,EAE/B,YAAY,SAAwB,SAA2B,CAAC,GAAG;AACjE,UAAM,OAAO;AACb,SAAK,SAAS;AACd,UAAM,UAAU,OAAO,WAAW,QAAQ,WAAW,UAAU;AAC/D,SAAK,WAAW,IAAI,uBAAuB,OAAO;AAAA,EACpD;AAAA,EAEA,aAAa,MAAM,SAA6C;AAC9D,UAAM,UAAU,QAAQ,WAAW,UAAU;AAC7C,IAAAC,QAAO,IAAI,mCAAmC,OAAO,EAAE;AACvD,UAAM,aAAa,IAAI,YAAW,SAAS,EAAE,QAAQ,CAAC;AACtD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAsB;AAC1B,IAAAA,QAAO,IAAI,sBAAsB;AAAA,EAEnC;AAAA,EAEA,MAAM,mBACJ,MACA,SACA,SAIC;AACD,IAAAA,QAAO,IAAI,qCAAqC;AAChD,WAAO,MAAM,KAAK,SAAS,mBAAmB,MAAM,SAAS,OAAO;AAAA,EACtE;AAAA,EAEA,MAAM,qBACJ,MACA,SACA,SAIC;AACD,IAAAA,QAAO,IAAI,uCAAuC;AAClD,WAAO,MAAM,KAAK,SAAS,qBAAqB,MAAM,SAAS,OAAO;AAAA,EACxE;AACF;;;ATlDA,IAAM,gBAAgB,UAAU,eAAe,KAAK;AAK7C,IAAM,YAAoB;AAAA,EAC/B,MAAM;AAAA,EACN,aAAa;AAAA,EACb,MAAM,OAAO,QAAgC,YAA2B;AACtE,UAAM,aACJ,OAAO,cAAc,QAAQ,WAAW,YAAY,KAAK,eAAe;AAC1E,IAAAC,QAAO,KAAK,iCAAiC,UAAU,EAAE;AAKzD,IAAAA,QAAO,KAAK,gCAAgC,UAAU,EAAE;AAAA,EAC1D;AAAA,EACA,SAAS,cAAc,WAAW;AAAA,EAClC,YAAY,CAAC;AAAA,EACb,WAAW,cAAc,aAAa;AAAA,EACtC,UAAU,CAAC,UAAU;AACvB;AAEA,IAAO,gBAAQ;","names":["logger","logger","logger","logger","TEEMode","TappdClient","TEEMode","logger","TappdClient","logger","logger","logger"]}