@prismnetwork/agent-sdk 0.7.11 → 0.7.12

package/decision.mjs

@@ -124,6 +124,13 @@ export function leaseReference(quoteId, d) {
   return keccak256(concatBytes([hexToBytes(quoteDigest), hexToBytes(keccak256(canonical(d)))]));
 }
 
+/// The hex digest the control plane needs to know which derivation to expect.
+/// It is the decision's hash, not the decision: the service can check that the
+/// funding log commits to something, and cannot read what that something says.
+export function decisionDigest(d) {
+  return d ? keccak256(canonical(d)) : null;
+}
+
 /// Whether this decision is the one that funded that lease.
 export function referenceMatches(quoteId, d, reference) {
   return leaseReference(quoteId, d).toLowerCase() === String(reference).toLowerCase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prismnetwork/agent-sdk",
-  "version": "0.7.11",
+  "version": "0.7.12",
   "description": "Headless GPU leasing and renter-encrypted storage on Prism Network for wallet-holding agents.",
   "type": "module",
   "main": "prism.mjs",

package/prism.mjs

@@ -1,7 +1,7 @@
 // Prism Network agent SDK: headless GPU leasing for wallet-holding agents.
 // No browser, no Privy. Authenticate with a wallet signature, pay on-chain, run.
 import { execFileSync, spawn } from "node:child_process";
-import { authorise, leaseReference } from "./decision.mjs";
+import { authorise, decisionDigest, leaseReference } from "./decision.mjs";
 import { mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -334,12 +334,17 @@ export class PrismAgent {
     }
   }
 
-  async confirm({ quoteId, transactionHash, sshAuthorizedKey }) {
+  /// `decisionHash` travels when the lease was authorised: the client
+  /// reference on chain is derived from it, and the control plane cannot check
+  /// the funding log without knowing which derivation to expect. The digest is
+  /// all it gets; the decision stays here.
+  async confirm({ quoteId, transactionHash, sshAuthorizedKey, decisionHash = null }) {
     return this.#proxy("POST", ["leases", "confirm"], {
       body: {
         quote_id: quoteId,
         transaction_hash: transactionHash,
         ssh_authorized_key: sshAuthorizedKey,
+        ...(decisionHash ? { decision_hash: decisionHash } : {}),
       },
     });
   }
@@ -426,7 +431,12 @@ export class PrismAgent {
     maxDeposit = null,
     minTrustClass = "open",
     command = null,
+    decision = null,
+    policy = null,
   } = {}) {
+    // Checked before a quote is taken, so a refusal costs nothing and does not
+    // hold capacity against other renters while it expires.
+    if (policy) authorise(policy, decision ?? { action: "unstated", source: "none", answers: [] });
     if (!this.session) await this.authenticate();
     // A wallet with no balance at all cannot fund anything, and a doomed quote
     // still holds capacity against other renters until it expires. Refuse
@@ -463,11 +473,12 @@ export class PrismAgent {
         if (maxDeposit != null && parseBaseUnits(quote.maximum_escrow, "maximum_escrow") > BigInt(maxDeposit)) {
           throw new PrismError(402, "cost_exceeds_max", { required: quote.maximum_escrow, max: String(maxDeposit) });
         }
-        funded = await this.#fundNow(quote);
+        funded = await this.#fundNow(quote, decision);
         return this.confirm({
           quoteId: quote.quote_id,
           transactionHash: funded.hash,
           sshAuthorizedKey: key.publicKey,
+          decisionHash: decisionDigest(decision),
         });
       });
       if (!Number.isInteger(record?.lease_id)) {