@t2000/sdk 5.17.0 → 5.19.0

package/dist/index.d.cts

@@ -76,6 +76,22 @@ interface VerifyAnchor {
     anchoredBy?: string;
     explorer: string;
 }
+/** A typed TCB claim from the attested upstream (dstack ACI §tcb-and-claims). */
+interface UpstreamClaim {
+    name: string;
+    status: string;
+    source?: string;
+}
+interface VerifyUpstream {
+    provider?: string;
+    modelId?: string;
+    result?: string;
+    tcbStatus?: string;
+    /** The attested-session id (`as_…`) — resolve at GET /v1/aci/sessions/{id}. */
+    sessionId?: string;
+    /** Typed TCB claims (tee_attested, tcb_up_to_date, gpu_attested, …). */
+    claims?: UpstreamClaim[];
+}
 interface VerifyResult {
     receiptId: string;
     /** True iff the receipt resolved AND its on-chain Sui anchor matches. */
@@ -85,11 +101,7 @@ interface VerifyResult {
     checks: VerifyCheck[];
     wireHash?: string;
     workloadId?: string;
-    upstream?: {
-        provider?: string;
-        result?: string;
-        tcbStatus?: string;
-    };
+    upstream?: VerifyUpstream;
     anchor?: VerifyAnchor;
 }
 interface VerifyOptions {
@@ -97,6 +109,9 @@ interface VerifyOptions {
     apiBase?: string;
     /** Sui network for the trustless anchor read (default `mainnet`). */
     network?: 'mainnet' | 'testnet';
+    /** Confidential model id for fetching the attested receipt-signing key
+     *  (default `phala/glm-5.2`; the gateway key is workload-wide). */
+    model?: string;
 }
 /**
  * Verify a confidential response by its receipt id. Reads the signed receipt
@@ -1067,4 +1082,4 @@ declare function fullHandle(label: string, parentName?: string): string;
  */
 declare function displayHandle(label: string, parentName?: string): string;
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type UpstreamClaim, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, type VerifyUpstream, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };

package/dist/index.d.ts

@@ -76,6 +76,22 @@ interface VerifyAnchor {
     anchoredBy?: string;
     explorer: string;
 }
+/** A typed TCB claim from the attested upstream (dstack ACI §tcb-and-claims). */
+interface UpstreamClaim {
+    name: string;
+    status: string;
+    source?: string;
+}
+interface VerifyUpstream {
+    provider?: string;
+    modelId?: string;
+    result?: string;
+    tcbStatus?: string;
+    /** The attested-session id (`as_…`) — resolve at GET /v1/aci/sessions/{id}. */
+    sessionId?: string;
+    /** Typed TCB claims (tee_attested, tcb_up_to_date, gpu_attested, …). */
+    claims?: UpstreamClaim[];
+}
 interface VerifyResult {
     receiptId: string;
     /** True iff the receipt resolved AND its on-chain Sui anchor matches. */
@@ -85,11 +101,7 @@ interface VerifyResult {
     checks: VerifyCheck[];
     wireHash?: string;
     workloadId?: string;
-    upstream?: {
-        provider?: string;
-        result?: string;
-        tcbStatus?: string;
-    };
+    upstream?: VerifyUpstream;
     anchor?: VerifyAnchor;
 }
 interface VerifyOptions {
@@ -97,6 +109,9 @@ interface VerifyOptions {
     apiBase?: string;
     /** Sui network for the trustless anchor read (default `mainnet`). */
     network?: 'mainnet' | 'testnet';
+    /** Confidential model id for fetching the attested receipt-signing key
+     *  (default `phala/glm-5.2`; the gateway key is workload-wide). */
+    model?: string;
 }
 /**
  * Verify a confidential response by its receipt id. Reads the signed receipt
@@ -1067,4 +1082,4 @@ declare function fullHandle(label: string, parentName?: string): string;
  */
 declare function displayHandle(label: string, parentName?: string): string;
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type UpstreamClaim, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, type VerifyUpstream, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };

package/dist/index.js

@@ -11,6 +11,9 @@ import { decodeSuiPrivateKey } from '@mysten/sui/cryptography';
 import { access, mkdir, writeFile, readFile } from 'fs/promises';
 import { join, dirname, resolve } from 'path';
 import { homedir } from 'os';
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { sha256 } from '@noble/hashes/sha256';
+import { hexToBytes, bytesToHex } from '@noble/hashes/utils';
 import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
 import { SuinsTransaction } from '@mysten/suins';
 
@@ -2025,9 +2028,85 @@ async function listModels(opts) {
   }));
 }
 var RECEIPT_ANCHORED_SUFFIX = "::anchor::ReceiptAnchored";
+function normalizeClaims(claims) {
+  if (!claims) {
+    return [];
+  }
+  if (Array.isArray(claims)) {
+    return claims.filter((c) => c.name).map((c) => ({
+      name: c.name,
+      status: c.status ?? "unknown",
+      source: c.source
+    }));
+  }
+  return Object.entries(claims).map(([name, v]) => ({
+    name,
+    status: v?.status ?? "unknown",
+    source: v?.source
+  }));
+}
 function fullnodeUrl(network) {
   return network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
 }
+function jcs(value) {
+  if (value === null) {
+    return "null";
+  }
+  if (typeof value === "boolean") {
+    return value ? "true" : "false";
+  }
+  if (typeof value === "number") {
+    if (!Number.isInteger(value)) {
+      throw new Error("JCS: non-integer number");
+    }
+    return String(value);
+  }
+  if (typeof value === "string") {
+    return JSON.stringify(value);
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map(jcs).join(",")}]`;
+  }
+  const keys = Object.keys(value).sort();
+  return `{${keys.map((k) => `${JSON.stringify(k)}:${jcs(value[k])}`).join(",")}}`;
+}
+function verifyReceiptSignature(receipt, signingKeyHex) {
+  try {
+    const sig = receipt.signature;
+    if (sig?.algo !== "ecdsa-secp256k1" || !sig.value) {
+      return false;
+    }
+    const canonical = {
+      api_version: receipt.api_version ?? "",
+      receipt_id: receipt.receipt_id ?? "",
+      chat_id: receipt.chat_id ?? null,
+      workload_id: receipt.workload_id ?? "",
+      workload_keyset_digest: receipt.workload_keyset_digest ?? "",
+      endpoint: receipt.endpoint ?? "",
+      method: receipt.method ?? "",
+      served_at: receipt.served_at ?? 0,
+      event_log: receipt.event_log ?? [],
+      signature: { algo: sig.algo, key_id: sig.key_id ?? "" }
+    };
+    const prehash = sha256(new TextEncoder().encode(jcs(canonical)));
+    const sigBytes = hexToBytes(sig.value);
+    if (sigBytes.length !== 65) {
+      return false;
+    }
+    let v = sigBytes[64];
+    if (v >= 27 && v <= 30) {
+      v -= 27;
+    }
+    if (v > 3) {
+      return false;
+    }
+    const recovered = secp256k1.Signature.fromCompact(sigBytes.slice(0, 64)).addRecoveryBit(v).recoverPublicKey(prehash).toHex(false);
+    const endorsed = bytesToHex(hexToBytes(signingKeyHex.replace(/^0x/, "")));
+    return recovered.toLowerCase() === endorsed.toLowerCase();
+  } catch {
+    return false;
+  }
+}
 async function verifyReceipt(receiptId, opts = {}) {
   const base = opts.apiBase ?? DEFAULT_API_BASE;
   const network = opts.network ?? "mainnet";
@@ -2059,6 +2138,7 @@ async function verifyReceipt(receiptId, opts = {}) {
   });
   const upstreamEv = receipt.event_log.find((e) => e.type === "upstream.verified");
   const upstreamOk = upstreamEv?.result === "verified";
+  const claims = normalizeClaims(upstreamEv?.claims);
   checks.push({
     name: "Confidential upstream",
     status: upstreamEv ? upstreamOk ? "pass" : "fail" : "skip",
@@ -2121,23 +2201,50 @@ async function verifyReceipt(receiptId, opts = {}) {
       });
     }
   }
+  let signatureForged = false;
+  let sigStatus = "skip";
+  let sigDetail = "no signature on receipt";
+  if (receipt.signature?.value) {
+    try {
+      const model = opts.model ?? "phala/glm-5.2";
+      const res = await fetch(
+        `${base}/aci/attestation?model=${encodeURIComponent(model)}`
+      );
+      const att = res.ok ? await res.json() : null;
+      if (!att?.signingKey) {
+        sigDetail = "could not fetch the attested keyset to check the signature";
+      } else if (att.workloadId && att.workloadId !== workloadId) {
+        sigDetail = `attested keyset is for a different workload \u2014 pass --model for ${workloadId}`;
+      } else {
+        const ok = verifyReceiptSignature(receipt, att.signingKey);
+        sigStatus = ok ? "pass" : "fail";
+        signatureForged = !ok;
+        sigDetail = ok ? `signed by the attested receipt key (${receipt.signature.key_id ?? "key"})` : "signature does NOT recover the attested receipt key \u2014 forged/altered";
+      }
+    } catch {
+      sigDetail = "signature check errored";
+    }
+  }
   checks.push({
     name: "Receipt signature",
-    status: "skip",
-    detail: receipt.signature ? "present (local recompute via RedPill keyset canonicalization = roadmap)" : "no signature on receipt",
-    trust: "roadmap"
+    status: sigStatus,
+    detail: sigDetail,
+    trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified,
+    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged,
     anchorVerified,
     checks,
     wireHash,
     workloadId,
     upstream: upstreamEv ? {
       provider: upstreamEv.provider ?? upstreamEv.upstream_name,
+      modelId: upstreamEv.model_id,
       result: upstreamEv.result,
-      tcbStatus: upstreamEv.tcb_status
+      tcbStatus: upstreamEv.tcb_status,
+      sessionId: upstreamEv.session_id,
+      claims: claims.length > 0 ? claims : void 0
     } : void 0,
     anchor
   };