@nanogpt/private-mode 0.1.0 → 0.1.2

package/README.md

@@ -1,6 +1,6 @@
 # NanoGPT Private Mode
 
-OpenAI-compatible localhost proxy for NanoGPT Private Mode with Tinfoil-backed models.
+OpenAI-compatible localhost proxy for NanoGPT Private Mode with supported TEE models.
 
 ```bash
 NANOGPT_API_KEY=sk-your-key npx @nanogpt/private-mode
@@ -28,17 +28,17 @@ const response = await client.chat.completions.create({
 });
 ```
 
-The local proxy verifies Tinfoil attestation, encrypts request bodies with EHBP, sends ciphertext through NanoGPT, decrypts encrypted responses locally, and returns normal OpenAI JSON to the calling app.
+The local proxy verifies TEE attestation, encrypts request bodies with EHBP, sends ciphertext through NanoGPT, decrypts encrypted responses locally, and returns normal OpenAI JSON to the calling app.
 
-NanoGPT can see account identity, selected private model, selected Tinfoil enclave metadata, timing, sizes, status, and usage metadata. NanoGPT cannot read the prompt or completion body for supported private models.
+NanoGPT can see account identity, selected private model, selected TEE target metadata, timing, sizes, status, and usage metadata. NanoGPT cannot read the prompt or completion body for supported private models.
 
-NanoGPT's web app can also use these models without running this local proxy. Select an eligible Tinfoil-backed `TEE/*` model and use the Private Mode control in the model picker. This package is for API clients, CLIs, agents, and other OpenAI-compatible tools.
+NanoGPT's web app can also use these models without running this local proxy. Select an eligible Private Mode model and use the Private Mode control in the model picker. This package is for API clients, CLIs, agents, and other OpenAI-compatible tools.
 
 The web-app toggle is narrower than the proxy path in v1. It supports text chat and model settings, and disables attachments, web search, URL-scraped content, project tools, multi-model chat, Context Memory injection, quick replies, and automatic title generation for private turns.
 
 In the hosted web app, decrypted Private Mode turns remain in local browser history. Cloud conversation sync is blocked for Private Mode chats unless password-based end-to-end sync is enabled; the recoverable default sync mode is not used for those chats.
 
-Private Mode also requires enough NanoGPT balance and API-key spend-limit headroom before dispatch. NanoGPT cannot read encrypted prompts to count tokens, so the reserve uses the encrypted request size when available and otherwise falls back to a conservative model estimate capped at 32,768 output tokens by default (`NANOGPT_PRIVATE_TINFOIL_RESERVE_MAX_OUTPUT_TOKENS`). The final charge is still based on Tinfoil usage metrics.
+Private Mode also requires enough NanoGPT balance and API-key spend-limit headroom before dispatch. For streaming calls, NanoGPT may precharge a conservative reserve before dispatch and refund unused balance after verified usage metadata is available.
 
 Useful local checks:
 

package/lib/server.js

@@ -9,7 +9,7 @@ import { applyPrivateModelRequestMutations } from './requestTransforms.js';
 import { buildPrivateModeStatusContract } from './statusContract.js';
 
 const MODELS = JSON.parse(
-  readFileSync(new URL('../models/tinfoil.json', import.meta.url), 'utf8'),
+  readFileSync(new URL('../models/private-tee.json', import.meta.url), 'utf8'),
 );
 
 function readMaxBodyBytes() {
@@ -66,7 +66,7 @@ function openAIModelList() {
 export function privateModeStatus(apiBase, secureState, localBase, originPolicy) {
   return {
     ok: true,
-    mode: 'tinfoil',
+    mode: 'private_tee',
     apiBase,
     local_base_url: localBase,
     models_path: '/v1/models',
@@ -484,7 +484,7 @@ Allowed browser origins: ${originPolicy.allowedOrigins.join(', ')}
 
 Request and response bodies are encrypted after they leave this local proxy.
 NanoGPT can see your account, private model header, timing, sizes, status, and usage metadata.
-The verified Tinfoil enclave and this local proxy can see plaintext.
+The verified TEE target and this local proxy can see plaintext.
 `);
   }
 

package/lib/statusContract.js

@@ -22,7 +22,7 @@ export const PRIVATE_MODE_FRONTEND_DISABLED_FEATURES = Object.freeze([
 export const PRIVATE_MODE_NANOGPT_VISIBLE = Object.freeze([
   'account',
   'selected_private_model',
-  'selected_tinfoil_enclave',
+  'selected_tee_target',
   'request_timing',
   'request_size',
   'response_size',
@@ -40,7 +40,7 @@ export const PRIVATE_MODE_ENCRYPTED_FROM_NANOGPT = Object.freeze([
 
 export const PRIVATE_MODE_PLAINTEXT_VISIBLE_TO = Object.freeze([
   'local_proxy',
-  'verified_tinfoil_enclave',
+  'verified_tee_target',
 ]);
 
 export function buildPrivateModeStatusContract() {

package/models/{tinfoil.json → private-tee.json}

@@ -4,9 +4,9 @@
     "name": "Kimi K2.6 Private",
     "upstreamModel": "kimi-k2-6",
     "billingModel": "TEE/kimi-k2-6",
-    "tinfoilEnclaveModel": "kimi-k2-6",
+    "teeTargetModel": "kimi-k2-6",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["private/kimi-k2.6", "TEE/kimi-k2-6", "TEE/kimi-k2.6"]
   },
   {
@@ -14,9 +14,9 @@
     "name": "GPT OSS 120B Private",
     "upstreamModel": "gpt-oss-120b",
     "billingModel": "TEE/gpt-oss-120b",
-    "tinfoilEnclaveModel": "gpt-oss-120b",
+    "teeTargetModel": "gpt-oss-120b",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["TEE/gpt-oss-120b", "phala/gpt-oss-120b"]
   },
   {
@@ -24,9 +24,9 @@
     "name": "Llama 3.3 70B Private",
     "upstreamModel": "llama3-3-70b",
     "billingModel": "TEE/llama3-3-70b",
-    "tinfoilEnclaveModel": "llama3-3-70b",
+    "teeTargetModel": "llama3-3-70b",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["private/llama-3.3-70b", "TEE/llama3-3-70b"]
   },
   {
@@ -34,9 +34,9 @@
     "name": "GLM 5.1 Private",
     "upstreamModel": "glm-5-1",
     "billingModel": "TEE/glm-5-1",
-    "tinfoilEnclaveModel": "glm-5-1",
+    "teeTargetModel": "glm-5-1",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["private/glm-5.1", "TEE/glm-5-1", "TEE/glm-5.1"]
   },
   {
@@ -44,9 +44,9 @@
     "name": "GLM 5.1 Thinking Private",
     "upstreamModel": "glm-5-1",
     "billingModel": "TEE/glm-5-1-thinking",
-    "tinfoilEnclaveModel": "glm-5-1",
+    "teeTargetModel": "glm-5-1",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["private/glm-5.1-thinking", "TEE/glm-5-1-thinking", "TEE/glm-5.1-thinking"]
   },
   {
@@ -54,10 +54,10 @@
     "name": "Gemma 4 31B Private",
     "upstreamModel": "gemma4-31b",
     "billingModel": "TEE/gemma4-31b",
-    "tinfoilEnclaveModel": "gemma4-31b",
+    "teeTargetModel": "gemma4-31b",
     "thinkingMode": "gemma",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["TEE/gemma4-31b", "gemma4-31b"]
   },
   {
@@ -65,10 +65,10 @@
     "name": "Gemma 4 31B Thinking Private",
     "upstreamModel": "gemma4-31b",
     "billingModel": "TEE/gemma4-31b:thinking",
-    "tinfoilEnclaveModel": "gemma4-31b",
+    "teeTargetModel": "gemma4-31b",
     "thinkingMode": "gemma",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["TEE/gemma4-31b:thinking", "gemma4-31b:thinking"]
   },
   {
@@ -76,10 +76,10 @@
     "name": "DeepSeek V4 Pro Private",
     "upstreamModel": "deepseek-v4-pro",
     "billingModel": "TEE/deepseek-v4-pro",
-    "tinfoilEnclaveModel": "deepseek-v4-pro",
+    "teeTargetModel": "deepseek-v4-pro",
     "thinkingMode": "deepseek-v4-pro",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["TEE/deepseek-v4-pro", "deepseek-v4-pro"]
   },
   {
@@ -87,10 +87,10 @@
     "name": "DeepSeek V4 Pro Thinking Private",
     "upstreamModel": "deepseek-v4-pro",
     "billingModel": "TEE/deepseek-v4-pro:thinking",
-    "tinfoilEnclaveModel": "deepseek-v4-pro",
+    "teeTargetModel": "deepseek-v4-pro",
     "thinkingMode": "deepseek-v4-pro",
     "created": 1764547200,
-    "ownedBy": "nanogpt-tinfoil",
+    "ownedBy": "nanogpt-private-mode",
     "aliases": ["TEE/deepseek-v4-pro:thinking", "deepseek-v4-pro:thinking"]
   }
 ]

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@nanogpt/private-mode",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "OpenAI-compatible localhost proxy for NanoGPT Private Mode.",
   "type": "module",
   "publishConfig": {
     "access": "public"
   },
   "bin": {
+    "private-mode": "bin/nanogpt-private-mode.js",
     "nanogpt-private-mode": "bin/nanogpt-private-mode.js"
   },
   "files": [