@t2000/sdk 5.15.1 → 5.17.0

package/dist/index.d.cts

@@ -33,6 +33,9 @@ interface ChatResult {
     content: string;
     model: string;
     usage?: ChatUsage;
+    /** Confidential calls (`phala/*`) return a TEE attestation receipt id —
+     *  fetch + verify it at `/v1/aci/receipts/{id}`. Absent for ZDR models. */
+    receiptId?: string;
     /** The verbatim OpenAI-shaped response body. */
     raw: unknown;
 }
@@ -49,7 +52,9 @@ interface ApiModel {
 declare function chatCompletion(params: ChatParams): Promise<ChatResult>;
 /** Streaming chat completion — yields assistant text deltas as they arrive
  *  (parses the OpenAI SSE `data:` frames). */
-declare function chatCompletionStream(params: ChatParams): AsyncGenerator<string, void, unknown>;
+declare function chatCompletionStream(params: ChatParams): AsyncGenerator<string, {
+    receiptId?: string;
+}, unknown>;
 /** List the Private API model catalog (`GET /v1/models`). The key is sent when
  *  available but not required (the catalog may be public). */
 declare function listModels(opts?: {
@@ -57,6 +62,49 @@ declare function listModels(opts?: {
     apiBase?: string;
 }): Promise<ApiModel[]>;
 
+type CheckStatus = 'pass' | 'fail' | 'skip';
+type TrustMode = 'trustless' | 'receipt-asserted' | 'roadmap';
+interface VerifyCheck {
+    name: string;
+    status: CheckStatus;
+    detail: string;
+    trust: TrustMode;
+}
+interface VerifyAnchor {
+    txDigest: string;
+    anchoredAtMs?: string;
+    anchoredBy?: string;
+    explorer: string;
+}
+interface VerifyResult {
+    receiptId: string;
+    /** True iff the receipt resolved AND its on-chain Sui anchor matches. */
+    verified: boolean;
+    /** The trustless core: an on-chain ReceiptAnchored event matches the receipt. */
+    anchorVerified: boolean;
+    checks: VerifyCheck[];
+    wireHash?: string;
+    workloadId?: string;
+    upstream?: {
+        provider?: string;
+        result?: string;
+        tcbStatus?: string;
+    };
+    anchor?: VerifyAnchor;
+}
+interface VerifyOptions {
+    /** Override the API base (default `api.t2000.ai/v1`). */
+    apiBase?: string;
+    /** Sui network for the trustless anchor read (default `mainnet`). */
+    network?: 'mainnet' | 'testnet';
+}
+/**
+ * Verify a confidential response by its receipt id. Reads the signed receipt
+ * (public), its on-chain Sui anchor (trustless), and reports a per-check result
+ * that FAILS CLOSED on any forgery or mismatch.
+ */
+declare function verifyReceipt(receiptId: string, opts?: VerifyOptions): Promise<VerifyResult>;
+
 interface LimitsConfig {
     /** Caps any single outbound write (send | swap | pay) by USD value. */
     perTxUsd?: number;
@@ -210,13 +258,19 @@ declare class T2000 extends EventEmitter<T2000Events> {
     pay(options: PayOptions): Promise<PayResult>;
     /** Non-streaming chat completion against the Private API. */
     chat(params: ChatParams): Promise<ChatResult>;
-    /** Streaming chat completion — async-iterate the assistant text deltas. */
-    chatStream(params: ChatParams): AsyncGenerator<string, void, unknown>;
+    /** Streaming chat completion — async-iterate the assistant text deltas;
+     *  the generator returns `{ receiptId }` (confidential attestation) at the end. */
+    chatStream(params: ChatParams): AsyncGenerator<string, {
+        receiptId?: string;
+    }, unknown>;
     /** The Private API model catalog (`GET /v1/models`). */
     models(opts?: {
         apiKey?: string;
         apiBase?: string;
     }): Promise<ApiModel[]>;
+    /** Verify a confidential response by receipt id — checks the signed receipt
+     *  + its trustless on-chain Sui anchor. Fails closed on any mismatch. */
+    verify(receiptId: string, opts?: VerifyOptions): Promise<VerifyResult>;
     swap(params: {
         from: string;
         to: string;
@@ -1013,4 +1067,4 @@ declare function fullHandle(label: string, parentName?: string): string;
  */
 declare function displayHandle(label: string, parentName?: string): string;
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };

package/dist/index.d.ts

@@ -33,6 +33,9 @@ interface ChatResult {
     content: string;
     model: string;
     usage?: ChatUsage;
+    /** Confidential calls (`phala/*`) return a TEE attestation receipt id —
+     *  fetch + verify it at `/v1/aci/receipts/{id}`. Absent for ZDR models. */
+    receiptId?: string;
     /** The verbatim OpenAI-shaped response body. */
     raw: unknown;
 }
@@ -49,7 +52,9 @@ interface ApiModel {
 declare function chatCompletion(params: ChatParams): Promise<ChatResult>;
 /** Streaming chat completion — yields assistant text deltas as they arrive
  *  (parses the OpenAI SSE `data:` frames). */
-declare function chatCompletionStream(params: ChatParams): AsyncGenerator<string, void, unknown>;
+declare function chatCompletionStream(params: ChatParams): AsyncGenerator<string, {
+    receiptId?: string;
+}, unknown>;
 /** List the Private API model catalog (`GET /v1/models`). The key is sent when
  *  available but not required (the catalog may be public). */
 declare function listModels(opts?: {
@@ -57,6 +62,49 @@ declare function listModels(opts?: {
     apiBase?: string;
 }): Promise<ApiModel[]>;
 
+type CheckStatus = 'pass' | 'fail' | 'skip';
+type TrustMode = 'trustless' | 'receipt-asserted' | 'roadmap';
+interface VerifyCheck {
+    name: string;
+    status: CheckStatus;
+    detail: string;
+    trust: TrustMode;
+}
+interface VerifyAnchor {
+    txDigest: string;
+    anchoredAtMs?: string;
+    anchoredBy?: string;
+    explorer: string;
+}
+interface VerifyResult {
+    receiptId: string;
+    /** True iff the receipt resolved AND its on-chain Sui anchor matches. */
+    verified: boolean;
+    /** The trustless core: an on-chain ReceiptAnchored event matches the receipt. */
+    anchorVerified: boolean;
+    checks: VerifyCheck[];
+    wireHash?: string;
+    workloadId?: string;
+    upstream?: {
+        provider?: string;
+        result?: string;
+        tcbStatus?: string;
+    };
+    anchor?: VerifyAnchor;
+}
+interface VerifyOptions {
+    /** Override the API base (default `api.t2000.ai/v1`). */
+    apiBase?: string;
+    /** Sui network for the trustless anchor read (default `mainnet`). */
+    network?: 'mainnet' | 'testnet';
+}
+/**
+ * Verify a confidential response by its receipt id. Reads the signed receipt
+ * (public), its on-chain Sui anchor (trustless), and reports a per-check result
+ * that FAILS CLOSED on any forgery or mismatch.
+ */
+declare function verifyReceipt(receiptId: string, opts?: VerifyOptions): Promise<VerifyResult>;
+
 interface LimitsConfig {
     /** Caps any single outbound write (send | swap | pay) by USD value. */
     perTxUsd?: number;
@@ -210,13 +258,19 @@ declare class T2000 extends EventEmitter<T2000Events> {
     pay(options: PayOptions): Promise<PayResult>;
     /** Non-streaming chat completion against the Private API. */
     chat(params: ChatParams): Promise<ChatResult>;
-    /** Streaming chat completion — async-iterate the assistant text deltas. */
-    chatStream(params: ChatParams): AsyncGenerator<string, void, unknown>;
+    /** Streaming chat completion — async-iterate the assistant text deltas;
+     *  the generator returns `{ receiptId }` (confidential attestation) at the end. */
+    chatStream(params: ChatParams): AsyncGenerator<string, {
+        receiptId?: string;
+    }, unknown>;
     /** The Private API model catalog (`GET /v1/models`). */
     models(opts?: {
         apiKey?: string;
         apiBase?: string;
     }): Promise<ApiModel[]>;
+    /** Verify a confidential response by receipt id — checks the signed receipt
+     *  + its trustless on-chain Sui anchor. Fails closed on any mismatch. */
+    verify(receiptId: string, opts?: VerifyOptions): Promise<VerifyResult>;
     swap(params: {
         from: string;
         to: string;
@@ -1013,4 +1067,4 @@ declare function fullHandle(label: string, parentName?: string): string;
  */
 declare function displayHandle(label: string, parentName?: string): string;
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };

package/dist/index.js

@@ -1220,10 +1220,10 @@ async function finalize(response, opts) {
   return { status: response.status, body: body2, paid: opts.paid };
 }
 async function makeGrpcBuildClient(client) {
-  const { SuiGrpcClient: SuiGrpcClient2 } = await import('@mysten/sui/grpc');
+  const { SuiGrpcClient: SuiGrpcClient3 } = await import('@mysten/sui/grpc');
   const network = client.network === "testnet" ? "testnet" : "mainnet";
   const baseUrl = network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
-  return new SuiGrpcClient2({ baseUrl, network });
+  return new SuiGrpcClient3({ baseUrl, network });
 }
 function atomicToHuman(raw, decimals) {
   return Number(raw) / 10 ** decimals;
@@ -1928,7 +1928,9 @@ function body(params, stream) {
   return JSON.stringify({
     model: params.model,
     messages: params.messages,
-    ...stream ? { stream: true } : {},
+    // include_usage → the final stream chunk carries usage + x_receipt_id
+    // (the confidential attestation receipt) so we can surface it after a stream.
+    ...stream ? { stream: true, stream_options: { include_usage: true } } : {},
     ...params.maxTokens != null ? { max_tokens: params.maxTokens } : {},
     ...params.temperature != null ? { temperature: params.temperature } : {}
   });
@@ -1944,12 +1946,14 @@ async function chatCompletion(params) {
   if (!res.ok) {
     await failBody(res);
   }
+  const receiptId = res.headers.get("x-receipt-id") ?? void 0;
   const raw = await res.json();
   const content = raw?.choices?.[0]?.message?.content ?? "";
   return {
     content,
     model: raw?.model ?? params.model,
     usage: usageOf(raw),
+    receiptId,
     raw
   };
 }
@@ -1963,11 +1967,12 @@ async function* chatCompletionStream(params) {
   });
   if (!(res.ok && res.body)) {
     await failBody(res);
-    return;
+    return {};
   }
   const reader = res.body.getReader();
   const decoder = new TextDecoder();
   let buffer = "";
+  let receiptId;
   while (true) {
     const { done, value } = await reader.read();
     if (done) {
@@ -1983,10 +1988,13 @@ async function* chatCompletionStream(params) {
       }
       const data = trimmed.slice(5).trim();
       if (data === "[DONE]") {
-        return;
+        return { receiptId };
       }
       try {
         const json = JSON.parse(data);
+        if (json.x_receipt_id) {
+          receiptId = json.x_receipt_id;
+        }
         const delta = json.choices?.[0]?.delta?.content;
         if (typeof delta === "string" && delta) {
           yield delta;
@@ -1995,6 +2003,7 @@ async function* chatCompletionStream(params) {
       }
     }
   }
+  return { receiptId };
 }
 async function listModels(opts) {
   const base = opts?.apiBase ?? DEFAULT_API_BASE;
@@ -2015,6 +2024,124 @@ async function listModels(opts) {
     privacy: m.privacy ?? m.privacy_tier
   }));
 }
+var RECEIPT_ANCHORED_SUFFIX = "::anchor::ReceiptAnchored";
+function fullnodeUrl(network) {
+  return network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
+}
+async function verifyReceipt(receiptId, opts = {}) {
+  const base = opts.apiBase ?? DEFAULT_API_BASE;
+  const network = opts.network ?? "mainnet";
+  const checks = [];
+  let receipt = null;
+  try {
+    const res = await fetch(`${base}/aci/receipts/${encodeURIComponent(receiptId)}`);
+    if (res.ok) {
+      receipt = await res.json();
+    }
+  } catch {
+  }
+  if (!receipt?.event_log) {
+    checks.push({
+      name: "Receipt",
+      status: "fail",
+      detail: "receipt not found or malformed",
+      trust: "receipt-asserted"
+    });
+    return { receiptId, verified: false, anchorVerified: false, checks };
+  }
+  const wireHash = receipt.event_log.find((e) => e.type === "response.returned")?.wire_hash;
+  const workloadId = receipt.workload_id;
+  checks.push({
+    name: "Receipt",
+    status: wireHash && workloadId ? "pass" : "fail",
+    detail: wireHash ? `well-formed (${receipt.event_log.length} log entries, workload ${workloadId})` : "missing response wire_hash / workload_id",
+    trust: "receipt-asserted"
+  });
+  const upstreamEv = receipt.event_log.find((e) => e.type === "upstream.verified");
+  const upstreamOk = upstreamEv?.result === "verified";
+  checks.push({
+    name: "Confidential upstream",
+    status: upstreamEv ? upstreamOk ? "pass" : "fail" : "skip",
+    detail: upstreamEv ? `${upstreamEv.provider ?? upstreamEv.upstream_name ?? "upstream"}: ${upstreamEv.result ?? "unknown"}${upstreamEv.tcb_status ? ` (TCB ${upstreamEv.tcb_status})` : ""}` : "no upstream.verified event (routed/non-confidential?)",
+    trust: "receipt-asserted"
+  });
+  let anchorVerified = false;
+  let anchor;
+  let digest;
+  try {
+    const res = await fetch(`${base}/aci/anchor/${encodeURIComponent(receiptId)}`);
+    if (res.ok) {
+      const j = await res.json();
+      digest = j.txDigest;
+    }
+  } catch {
+  }
+  if (!digest) {
+    checks.push({
+      name: "Sui anchor",
+      status: "fail",
+      detail: `no anchor on record \u2014 POST ${base}/aci/anchor/${receiptId} to create one`,
+      trust: "trustless"
+    });
+  } else {
+    try {
+      const client = new SuiGrpcClient({ baseUrl: fullnodeUrl(network), network });
+      const tx = await client.core.getTransaction({
+        digest,
+        include: { events: true }
+      });
+      const txn = tx.$kind === "Transaction" ? tx.Transaction : tx.FailedTransaction;
+      const ev = (txn.events ?? []).find(
+        (e) => e.eventType.endsWith(RECEIPT_ANCHORED_SUFFIX)
+      );
+      const data = ev?.json ?? {};
+      const onChainReceipt = String(data.receipt_id ?? "");
+      const onChainWire = String(data.wire_hash ?? "");
+      const onChainWorkload = String(data.workload_id ?? "");
+      const matches = onChainReceipt === receiptId && onChainWire === wireHash && onChainWorkload === workloadId;
+      anchorVerified = matches;
+      anchor = {
+        txDigest: digest,
+        anchoredAtMs: data.anchored_at_ms ? String(data.anchored_at_ms) : void 0,
+        anchoredBy: data.anchored_by ? String(data.anchored_by) : void 0,
+        explorer: `https://suiscan.xyz/${network}/tx/${digest}`
+      };
+      checks.push({
+        name: "Sui anchor",
+        status: matches ? "pass" : "fail",
+        detail: matches ? `on-chain ReceiptAnchored matches (wire_hash + workload_id), tx ${digest}` : `on-chain event does NOT match the receipt (wire ${onChainWire || "absent"})`,
+        trust: "trustless"
+      });
+    } catch (e) {
+      checks.push({
+        name: "Sui anchor",
+        status: "fail",
+        detail: `could not read anchor tx ${digest}: ${e instanceof Error ? e.message : "error"}`,
+        trust: "trustless"
+      });
+    }
+  }
+  checks.push({
+    name: "Receipt signature",
+    status: "skip",
+    detail: receipt.signature ? "present (local recompute via RedPill keyset canonicalization = roadmap)" : "no signature on receipt",
+    trust: "roadmap"
+  });
+  return {
+    receiptId,
+    verified: Boolean(wireHash && workloadId) && anchorVerified,
+    anchorVerified,
+    checks,
+    wireHash,
+    workloadId,
+    upstream: upstreamEv ? {
+      provider: upstreamEv.provider ?? upstreamEv.upstream_name,
+      result: upstreamEv.result,
+      tcbStatus: upstreamEv.tcb_status
+    } : void 0,
+    anchor
+  };
+}
 var DEFAULT_CONFIG_DIR = join(homedir(), ".t2000");
 function resolveConfigPath(configDir) {
   return join(configDir ?? DEFAULT_CONFIG_DIR, "config.json");
@@ -2291,7 +2418,8 @@ var T2000 = class _T2000 extends EventEmitter {
   async chat(params) {
     return chatCompletion(params);
   }
-  /** Streaming chat completion — async-iterate the assistant text deltas. */
+  /** Streaming chat completion — async-iterate the assistant text deltas;
+   *  the generator returns `{ receiptId }` (confidential attestation) at the end. */
   chatStream(params) {
     return chatCompletionStream(params);
   }
@@ -2299,6 +2427,11 @@ var T2000 = class _T2000 extends EventEmitter {
   async models(opts) {
     return listModels(opts);
   }
+  /** Verify a confidential response by receipt id — checks the signed receipt
+   *  + its trustless on-chain Sui anchor. Fails closed on any mismatch. */
+  async verify(receiptId, opts) {
+    return verifyReceipt(receiptId, opts);
+  }
   // -- Swap --
   async swap(params) {
     this.limits.assert({
@@ -3057,6 +3190,6 @@ function displayHandle(label, parentName = AUDRIC_PARENT_NAME) {
 // src/index.ts
 init_preflight();
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, CETUS_USDC_SUI_POOL, CLOCK_ID, COIN_REGISTRY, DEFAULT_API_BASE, DEFAULT_GRPC_URL, DEFAULT_NETWORK, ETH_TYPE, GASLESS_MIN_STABLE_AMOUNT, GASLESS_STABLE_TYPES, GAS_RESERVE_MIN, IKA_TYPE, InvalidAddressError, KNOWN_TARGETS, KeypairSigner, LABEL_PATTERNS, LOFI_TYPE, LimitEnforcer, LimitExceededError, MANIFEST_TYPE, MIST_PER_SUI, NAVX_TYPE, OPERATION_ASSETS, OVERLAY_FEE_RATE, PREFLIGHT_MAX_AMOUNT, PREFLIGHT_OK, SENDABLE_ASSETS, SPONSORED_PYTH_DEPENDENT_PROVIDERS, STABLE_ASSETS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SUI_DECIMALS, SUI_TYPE, SUPPORTED_ASSETS, SuinsNotRegisteredError, SuinsRpcError, T2000, T2000Error, T2000_OVERLAY_FEE_WALLET, TOKEN_MAP, USDC_DECIMALS, USDC_TYPE, USDE_TYPE, USDSUI_TYPE, USDT_TYPE, WAL_TYPE, WBTC_TYPE, WRITE_APPENDER_REGISTRY, ZkLoginSigner, addSendToTx, addSwapToTx, approxUsdValue, assertAllowedAsset, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, buildSwapTx, chatCompletion, chatCompletionStream, checkPositiveAmount, checkSuiAddress, classifyAction, classifyLabel, classifyTransaction, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, deserializeCetusRoute, displayHandle, executeTx, exportPrivateKey, extractAllUserLegs, extractTransferDetails, extractTxCommands, extractTxSender, fallbackLabel, fetchAllCoins, findSwapRoute, formatAssetAmount, formatSui, formatUsd, fullHandle, generateKeypair, getAddress, getCoinMeta, getDecimals, getDecimalsForCoinType, getLimits, getSponsoredSwapProviders, getSuiClient, getSuiGrpcClient, getSwapQuote, hasLimits, isAllowedAsset, isCetusRouteFresh, isInRegistry, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, mapMoveAbortCode, mapWalletError, mistToSui, normalizeAddressInput, normalizeAsset, normalizeCoinType, parseSuiRpcTx, payWithMpp, preflightFail, preflightPay, preflightSend, preflightSwap, queryBalance, queryHistory, queryTransaction, rawToStable, rawToUsdc, readLimitsFile, recordDailySpend, refineLendingLabel, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, resolveSymbol, resolveTokenType, saveBech32, saveKey, selectAndSplitCoin, selectSuiCoin, serializeCetusRoute, setLimits, simulateTransaction, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, validateLabel, verifyCetusRouteCoinMatch, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, CETUS_USDC_SUI_POOL, CLOCK_ID, COIN_REGISTRY, DEFAULT_API_BASE, DEFAULT_GRPC_URL, DEFAULT_NETWORK, ETH_TYPE, GASLESS_MIN_STABLE_AMOUNT, GASLESS_STABLE_TYPES, GAS_RESERVE_MIN, IKA_TYPE, InvalidAddressError, KNOWN_TARGETS, KeypairSigner, LABEL_PATTERNS, LOFI_TYPE, LimitEnforcer, LimitExceededError, MANIFEST_TYPE, MIST_PER_SUI, NAVX_TYPE, OPERATION_ASSETS, OVERLAY_FEE_RATE, PREFLIGHT_MAX_AMOUNT, PREFLIGHT_OK, SENDABLE_ASSETS, SPONSORED_PYTH_DEPENDENT_PROVIDERS, STABLE_ASSETS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SUI_DECIMALS, SUI_TYPE, SUPPORTED_ASSETS, SuinsNotRegisteredError, SuinsRpcError, T2000, T2000Error, T2000_OVERLAY_FEE_WALLET, TOKEN_MAP, USDC_DECIMALS, USDC_TYPE, USDE_TYPE, USDSUI_TYPE, USDT_TYPE, WAL_TYPE, WBTC_TYPE, WRITE_APPENDER_REGISTRY, ZkLoginSigner, addSendToTx, addSwapToTx, approxUsdValue, assertAllowedAsset, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, buildSwapTx, chatCompletion, chatCompletionStream, checkPositiveAmount, checkSuiAddress, classifyAction, classifyLabel, classifyTransaction, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, deserializeCetusRoute, displayHandle, executeTx, exportPrivateKey, extractAllUserLegs, extractTransferDetails, extractTxCommands, extractTxSender, fallbackLabel, fetchAllCoins, findSwapRoute, formatAssetAmount, formatSui, formatUsd, fullHandle, generateKeypair, getAddress, getCoinMeta, getDecimals, getDecimalsForCoinType, getLimits, getSponsoredSwapProviders, getSuiClient, getSuiGrpcClient, getSwapQuote, hasLimits, isAllowedAsset, isCetusRouteFresh, isInRegistry, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, mapMoveAbortCode, mapWalletError, mistToSui, normalizeAddressInput, normalizeAsset, normalizeCoinType, parseSuiRpcTx, payWithMpp, preflightFail, preflightPay, preflightSend, preflightSwap, queryBalance, queryHistory, queryTransaction, rawToStable, rawToUsdc, readLimitsFile, recordDailySpend, refineLendingLabel, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, resolveSymbol, resolveTokenType, saveBech32, saveKey, selectAndSplitCoin, selectSuiCoin, serializeCetusRoute, setLimits, simulateTransaction, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, validateLabel, verifyCetusRouteCoinMatch, verifyReceipt, walletExists, writeLimitsFile };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map