@t2000/cli 5.20.0 → 5.20.1

package/dist/index.js

@@ -27898,7 +27898,15 @@ async function verifyTdxQuote(base, model, receiptWorkloadId) {
     };
   }
   try {
-    const { getCollateralAndVerify } = await import("./src-FIYSHJR4.js");
+    const dcap = await import("./src-FIYSHJR4.js");
+    const getCollateralAndVerify = dcap.getCollateralAndVerify ?? dcap.default?.getCollateralAndVerify;
+    if (typeof getCollateralAndVerify !== "function") {
+      return {
+        status: "fail",
+        forged: false,
+        detail: "DCAP verifier unavailable in this build"
+      };
+    }
     const quoteBytes = hexToBytes2(quoteHex.replace(/^0x/, ""));
     const vr = await getCollateralAndVerify(quoteBytes);
     const td = vr.report.asTd10() ?? vr.report.asTd15()?.base ?? null;
@@ -28024,7 +28032,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       });
     }
   }
-  let signatureForged = false;
   let sigStatus = "skip";
   let sigDetail = "no signature on receipt";
   if (receipt.signature?.value) {
@@ -28041,7 +28048,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       } else {
         const ok = verifyReceiptSignature(receipt, att.signingKey);
         sigStatus = ok ? "pass" : "fail";
-        signatureForged = !ok;
         sigDetail = ok ? `signed by the attested receipt key (${receipt.signature.key_id ?? "key"})` : "signature does NOT recover the attested receipt key \u2014 forged/altered";
       }
     } catch {
@@ -28054,7 +28060,6 @@ async function verifyReceipt(receiptId, opts = {}) {
     detail: sigDetail,
     trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
-  let quoteForged = false;
   if (opts.skipQuote) {
     checks.push({
       name: "TDX quote (DCAP)",
@@ -28068,7 +28073,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       opts.model ?? "phala/glm-5.2",
       workloadId ?? ""
     );
-    quoteForged = q.forged;
     checks.push({
       name: "TDX quote (DCAP)",
       status: q.status,
@@ -28076,9 +28080,12 @@ async function verifyReceipt(receiptId, opts = {}) {
       trust: "trustless"
     });
   }
+  const trustlessFailed = checks.some(
+    (c) => c.trust === "trustless" && c.status === "fail"
+  );
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged && !quoteForged,
+    verified: Boolean(wireHash && workloadId) && !trustlessFailed,
     anchorVerified,
     checks,
     wireHash,
@@ -32196,9 +32203,10 @@ function registerVerify(program3) {
           printLine(import_picocolors10.default.dim(`  anchor: ${result.anchor.explorer}`));
         }
         if (result.verified) {
+          const quoteSkipped = result.checks.find((c) => c.name === "TDX quote (DCAP)")?.status === "skip";
           printLine(
             import_picocolors10.default.green(
-              "  RESULT: \u2713 verified \u2014 genuine TDX quote + TEE-signed receipt + Sui anchor, all checked client-side."
+              quoteSkipped ? "  RESULT: \u2713 verified \u2014 TEE-signed receipt + trustless Sui anchor (DCAP quote check skipped)." : "  RESULT: \u2713 verified \u2014 genuine TDX quote + TEE-signed receipt + Sui anchor, all checked client-side."
             )
           );
         } else {
@@ -32567,7 +32575,7 @@ function registerMcpStart(parent) {
   parent.command("start", { isDefault: true }).description("Start MCP server (stdio transport \u2014 for AI client integration)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(async (opts) => {
     let mod3;
     try {
-      mod3 = await import("./dist-OBNLH7CK.js");
+      mod3 = await import("./dist-O7YCMJB2.js");
     } catch {
       console.error("MCP server not installed. Run:\n  npm install -g @t2000/mcp");
       process.exit(1);