@t2000/cli 5.20.0 → 5.20.1

package/dist/{dist-OBNLH7CK.js → dist-O7YCMJB2.js}

@@ -96562,7 +96562,15 @@ async function verifyTdxQuote(base, model, receiptWorkloadId) {
     };
   }
   try {
-    const { getCollateralAndVerify } = await Promise.resolve().then(() => __toESM(require_src2(), 1));
+    const dcap = await Promise.resolve().then(() => __toESM(require_src2(), 1));
+    const getCollateralAndVerify = dcap.getCollateralAndVerify ?? dcap.default?.getCollateralAndVerify;
+    if (typeof getCollateralAndVerify !== "function") {
+      return {
+        status: "fail",
+        forged: false,
+        detail: "DCAP verifier unavailable in this build"
+      };
+    }
     const quoteBytes = hexToBytes2(quoteHex.replace(/^0x/, ""));
     const vr = await getCollateralAndVerify(quoteBytes);
     const td = vr.report.asTd10() ?? vr.report.asTd15()?.base ?? null;
@@ -96688,7 +96696,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       });
     }
   }
-  let signatureForged = false;
   let sigStatus = "skip";
   let sigDetail = "no signature on receipt";
   if (receipt.signature?.value) {
@@ -96705,7 +96712,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       } else {
         const ok = verifyReceiptSignature(receipt, att.signingKey);
         sigStatus = ok ? "pass" : "fail";
-        signatureForged = !ok;
         sigDetail = ok ? `signed by the attested receipt key (${receipt.signature.key_id ?? "key"})` : "signature does NOT recover the attested receipt key \u2014 forged/altered";
       }
     } catch {
@@ -96718,7 +96724,6 @@ async function verifyReceipt(receiptId, opts = {}) {
     detail: sigDetail,
     trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
-  let quoteForged = false;
   if (opts.skipQuote) {
     checks.push({
       name: "TDX quote (DCAP)",
@@ -96732,7 +96737,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       opts.model ?? "phala/glm-5.2",
       workloadId ?? ""
     );
-    quoteForged = q.forged;
     checks.push({
       name: "TDX quote (DCAP)",
       status: q.status,
@@ -96740,9 +96744,12 @@ async function verifyReceipt(receiptId, opts = {}) {
       trust: "trustless"
     });
   }
+  const trustlessFailed = checks.some(
+    (c) => c.trust === "trustless" && c.status === "fail"
+  );
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged && !quoteForged,
+    verified: Boolean(wireHash && workloadId) && !trustlessFailed,
     anchorVerified,
     checks,
     wireHash,
@@ -97855,7 +97862,7 @@ Through this wallet you can reach essentially any major external API, billed to
 CRITICAL: When the user asks to use any external or paid API, names a provider (e.g. "via fal.ai", "with ElevenLabs"), or requests a capability one of the services above provides, DO NOT say you cannot reach that service, that it isn't on an allowlist, or that there's no connector \u2014 and do NOT fall back to writing a script for the user to run. You CAN do it directly through this wallet. Use t2000_services to discover the endpoint and request shape, then t2000_pay to execute, then show the user the result (display image/audio URLs returned in the response).
 
 Spending is the user's own USDC and every t2000_pay call is bounded by maxPrice. For larger or multi-step spends, state the estimated cost first and proceed once the user is happy. Use t2000_balance to check funds. The v4 wallet is payments-only; savings / lending live on audric.ai.`;
-var PKG_VERSION = "5.20.0";
+var PKG_VERSION = "5.20.1";
 console.log = (...args) => console.error("[log]", ...args);
 console.warn = (...args) => console.error("[warn]", ...args);
 async function startMcpServer(opts) {
@@ -97929,4 +97936,4 @@ mime-types/index.js:
 @scure/bip39/index.js:
   (*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) *)
 */
-//# sourceMappingURL=dist-OBNLH7CK.js.map
+//# sourceMappingURL=dist-O7YCMJB2.js.map