@t2000/sdk 5.18.0 → 5.20.0

package/dist/index.cjs

@@ -2034,6 +2034,23 @@ async function listModels(opts) {
   }));
 }
 var RECEIPT_ANCHORED_SUFFIX = "::anchor::ReceiptAnchored";
+function normalizeClaims(claims) {
+  if (!claims) {
+    return [];
+  }
+  if (Array.isArray(claims)) {
+    return claims.filter((c) => c.name).map((c) => ({
+      name: c.name,
+      status: c.status ?? "unknown",
+      source: c.source
+    }));
+  }
+  return Object.entries(claims).map(([name, v]) => ({
+    name,
+    status: v?.status ?? "unknown",
+    source: v?.source
+  }));
+}
 function fullnodeUrl(network) {
   return network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
 }
@@ -2096,6 +2113,64 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
     return false;
   }
 }
+async function verifyTdxQuote(base, model, receiptWorkloadId) {
+  let nonce;
+  try {
+    nonce = utils$1.bytesToHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+  } catch {
+    return { status: "skip", detail: "no secure RNG available", forged: false };
+  }
+  let report;
+  try {
+    const res = await fetch(
+      `${base}/aci/attestation?model=${encodeURIComponent(model)}&nonce=${nonce}`
+    );
+    if (res.ok) {
+      report = (await res.json()).report;
+    }
+  } catch {
+  }
+  const quoteHex = report?.attestation?.evidence?.quote;
+  if (!quoteHex) {
+    return {
+      status: "skip",
+      detail: "attestation report (with quote) unavailable \u2014 pass --model?",
+      forged: false
+    };
+  }
+  try {
+    const { getCollateralAndVerify } = await import('@phala/dcap-qvl');
+    const quoteBytes = utils$1.hexToBytes(quoteHex.replace(/^0x/, ""));
+    const vr = await getCollateralAndVerify(quoteBytes);
+    const td = vr.report.asTd10() ?? vr.report.asTd15()?.base ?? null;
+    const reportData = td?.reportData;
+    const signingAddr = report?.signing_address?.replace(/^0x/, "").toLowerCase();
+    const addrBound = Boolean(
+      reportData && signingAddr && utils$1.bytesToHex(reportData.slice(0, 20)) === signingAddr
+    );
+    const workloadMatch = report?.workload_id === receiptWorkloadId;
+    const tcb = vr.status;
+    const tcbBad = tcb === "Revoked" || tcb === "Unknown";
+    const forged = !(addrBound && workloadMatch) || tcbBad;
+    let detail;
+    if (forged && tcbBad) {
+      detail = `genuine TDX but TCB ${tcb}`;
+    } else if (!addrBound) {
+      detail = "report_data does NOT commit the report's signing address";
+    } else if (!workloadMatch) {
+      detail = "quote workload_id does not match the receipt's";
+    } else {
+      detail = `genuine Intel TDX (verified vs Intel collateral), TCB ${tcb}; report_data commits the attested signing address`;
+    }
+    return { status: forged ? "fail" : "pass", forged, tcbStatus: tcb, detail };
+  } catch (e) {
+    return {
+      status: "fail",
+      forged: false,
+      detail: `could not verify the quote: ${e instanceof Error ? e.message : "error"}`
+    };
+  }
+}
 async function verifyReceipt(receiptId, opts = {}) {
   const base = opts.apiBase ?? DEFAULT_API_BASE;
   const network = opts.network ?? "mainnet";
@@ -2127,6 +2202,7 @@ async function verifyReceipt(receiptId, opts = {}) {
   });
   const upstreamEv = receipt.event_log.find((e) => e.type === "upstream.verified");
   const upstreamOk = upstreamEv?.result === "verified";
+  const claims = normalizeClaims(upstreamEv?.claims);
   checks.push({
     name: "Confidential upstream",
     status: upstreamEv ? upstreamOk ? "pass" : "fail" : "skip",
@@ -2219,17 +2295,42 @@ async function verifyReceipt(receiptId, opts = {}) {
     detail: sigDetail,
     trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
+  let quoteForged = false;
+  if (opts.skipQuote) {
+    checks.push({
+      name: "TDX quote (DCAP)",
+      status: "skip",
+      detail: "skipped (--quick)",
+      trust: "trustless"
+    });
+  } else {
+    const q = await verifyTdxQuote(
+      base,
+      opts.model ?? "phala/glm-5.2",
+      workloadId ?? ""
+    );
+    quoteForged = q.forged;
+    checks.push({
+      name: "TDX quote (DCAP)",
+      status: q.status,
+      detail: q.detail,
+      trust: "trustless"
+    });
+  }
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged,
+    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged && !quoteForged,
     anchorVerified,
     checks,
     wireHash,
     workloadId,
     upstream: upstreamEv ? {
       provider: upstreamEv.provider ?? upstreamEv.upstream_name,
+      modelId: upstreamEv.model_id,
       result: upstreamEv.result,
-      tcbStatus: upstreamEv.tcb_status
+      tcbStatus: upstreamEv.tcb_status,
+      sessionId: upstreamEv.session_id,
+      claims: claims.length > 0 ? claims : void 0
     } : void 0,
     anchor
   };