@t2000/sdk 5.18.0 → 5.20.0

package/dist/index.d.cts

@@ -76,6 +76,22 @@ interface VerifyAnchor {
     anchoredBy?: string;
     explorer: string;
 }
+/** A typed TCB claim from the attested upstream (dstack ACI §tcb-and-claims). */
+interface UpstreamClaim {
+    name: string;
+    status: string;
+    source?: string;
+}
+interface VerifyUpstream {
+    provider?: string;
+    modelId?: string;
+    result?: string;
+    tcbStatus?: string;
+    /** The attested-session id (`as_…`) — resolve at GET /v1/aci/sessions/{id}. */
+    sessionId?: string;
+    /** Typed TCB claims (tee_attested, tcb_up_to_date, gpu_attested, …). */
+    claims?: UpstreamClaim[];
+}
 interface VerifyResult {
     receiptId: string;
     /** True iff the receipt resolved AND its on-chain Sui anchor matches. */
@@ -85,11 +101,7 @@ interface VerifyResult {
     checks: VerifyCheck[];
     wireHash?: string;
     workloadId?: string;
-    upstream?: {
-        provider?: string;
-        result?: string;
-        tcbStatus?: string;
-    };
+    upstream?: VerifyUpstream;
     anchor?: VerifyAnchor;
 }
 interface VerifyOptions {
@@ -100,6 +112,8 @@ interface VerifyOptions {
     /** Confidential model id for fetching the attested receipt-signing key
      *  (default `phala/glm-5.2`; the gateway key is workload-wide). */
     model?: string;
+    /** Skip the local DCAP quote verification (the slower, network-bound check). */
+    skipQuote?: boolean;
 }
 /**
  * Verify a confidential response by its receipt id. Reads the signed receipt
@@ -1070,4 +1084,4 @@ declare function fullHandle(label: string, parentName?: string): string;
  */
 declare function displayHandle(label: string, parentName?: string): string;
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type UpstreamClaim, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, type VerifyUpstream, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };

package/dist/index.d.ts

@@ -76,6 +76,22 @@ interface VerifyAnchor {
     anchoredBy?: string;
     explorer: string;
 }
+/** A typed TCB claim from the attested upstream (dstack ACI §tcb-and-claims). */
+interface UpstreamClaim {
+    name: string;
+    status: string;
+    source?: string;
+}
+interface VerifyUpstream {
+    provider?: string;
+    modelId?: string;
+    result?: string;
+    tcbStatus?: string;
+    /** The attested-session id (`as_…`) — resolve at GET /v1/aci/sessions/{id}. */
+    sessionId?: string;
+    /** Typed TCB claims (tee_attested, tcb_up_to_date, gpu_attested, …). */
+    claims?: UpstreamClaim[];
+}
 interface VerifyResult {
     receiptId: string;
     /** True iff the receipt resolved AND its on-chain Sui anchor matches. */
@@ -85,11 +101,7 @@ interface VerifyResult {
     checks: VerifyCheck[];
     wireHash?: string;
     workloadId?: string;
-    upstream?: {
-        provider?: string;
-        result?: string;
-        tcbStatus?: string;
-    };
+    upstream?: VerifyUpstream;
     anchor?: VerifyAnchor;
 }
 interface VerifyOptions {
@@ -100,6 +112,8 @@ interface VerifyOptions {
     /** Confidential model id for fetching the attested receipt-signing key
      *  (default `phala/glm-5.2`; the gateway key is workload-wide). */
     model?: string;
+    /** Skip the local DCAP quote verification (the slower, network-bound check). */
+    skipQuote?: boolean;
 }
 /**
  * Verify a confidential response by its receipt id. Reads the signed receipt
@@ -1070,4 +1084,4 @@ declare function fullHandle(label: string, parentName?: string): string;
  */
 declare function displayHandle(label: string, parentName?: string): string;
 
-export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };
+export { AGENT_ID_PARENT, AGENT_ID_PARENT_NAME, AGENT_ID_PARENT_NFT_ID, AUDRIC_PARENT, AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type ApiModel, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ChatMessage, type ChatParams, type ChatResult, type ChatUsage, type CheckStatus, type ComposeTxOptions, type ComposeTxResult, DEFAULT_API_BASE, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, type SuinsParent, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, type TrustMode, type UpstreamClaim, type VerifyAnchor, type VerifyCheck, type VerifyOptions, type VerifyResult, type VerifyUpstream, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, chatCompletion, chatCompletionStream, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, listModels, loadKey, looksLikeSuiNs, normalizeAddressInput, queryBalance, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, verifyReceipt, walletExists, writeLimitsFile };

package/dist/index.js

@@ -2028,6 +2028,23 @@ async function listModels(opts) {
   }));
 }
 var RECEIPT_ANCHORED_SUFFIX = "::anchor::ReceiptAnchored";
+function normalizeClaims(claims) {
+  if (!claims) {
+    return [];
+  }
+  if (Array.isArray(claims)) {
+    return claims.filter((c) => c.name).map((c) => ({
+      name: c.name,
+      status: c.status ?? "unknown",
+      source: c.source
+    }));
+  }
+  return Object.entries(claims).map(([name, v]) => ({
+    name,
+    status: v?.status ?? "unknown",
+    source: v?.source
+  }));
+}
 function fullnodeUrl(network) {
   return network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
 }
@@ -2090,6 +2107,64 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
     return false;
   }
 }
+async function verifyTdxQuote(base, model, receiptWorkloadId) {
+  let nonce;
+  try {
+    nonce = bytesToHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+  } catch {
+    return { status: "skip", detail: "no secure RNG available", forged: false };
+  }
+  let report;
+  try {
+    const res = await fetch(
+      `${base}/aci/attestation?model=${encodeURIComponent(model)}&nonce=${nonce}`
+    );
+    if (res.ok) {
+      report = (await res.json()).report;
+    }
+  } catch {
+  }
+  const quoteHex = report?.attestation?.evidence?.quote;
+  if (!quoteHex) {
+    return {
+      status: "skip",
+      detail: "attestation report (with quote) unavailable \u2014 pass --model?",
+      forged: false
+    };
+  }
+  try {
+    const { getCollateralAndVerify } = await import('@phala/dcap-qvl');
+    const quoteBytes = hexToBytes(quoteHex.replace(/^0x/, ""));
+    const vr = await getCollateralAndVerify(quoteBytes);
+    const td = vr.report.asTd10() ?? vr.report.asTd15()?.base ?? null;
+    const reportData = td?.reportData;
+    const signingAddr = report?.signing_address?.replace(/^0x/, "").toLowerCase();
+    const addrBound = Boolean(
+      reportData && signingAddr && bytesToHex(reportData.slice(0, 20)) === signingAddr
+    );
+    const workloadMatch = report?.workload_id === receiptWorkloadId;
+    const tcb = vr.status;
+    const tcbBad = tcb === "Revoked" || tcb === "Unknown";
+    const forged = !(addrBound && workloadMatch) || tcbBad;
+    let detail;
+    if (forged && tcbBad) {
+      detail = `genuine TDX but TCB ${tcb}`;
+    } else if (!addrBound) {
+      detail = "report_data does NOT commit the report's signing address";
+    } else if (!workloadMatch) {
+      detail = "quote workload_id does not match the receipt's";
+    } else {
+      detail = `genuine Intel TDX (verified vs Intel collateral), TCB ${tcb}; report_data commits the attested signing address`;
+    }
+    return { status: forged ? "fail" : "pass", forged, tcbStatus: tcb, detail };
+  } catch (e) {
+    return {
+      status: "fail",
+      forged: false,
+      detail: `could not verify the quote: ${e instanceof Error ? e.message : "error"}`
+    };
+  }
+}
 async function verifyReceipt(receiptId, opts = {}) {
   const base = opts.apiBase ?? DEFAULT_API_BASE;
   const network = opts.network ?? "mainnet";
@@ -2121,6 +2196,7 @@ async function verifyReceipt(receiptId, opts = {}) {
   });
   const upstreamEv = receipt.event_log.find((e) => e.type === "upstream.verified");
   const upstreamOk = upstreamEv?.result === "verified";
+  const claims = normalizeClaims(upstreamEv?.claims);
   checks.push({
     name: "Confidential upstream",
     status: upstreamEv ? upstreamOk ? "pass" : "fail" : "skip",
@@ -2213,17 +2289,42 @@ async function verifyReceipt(receiptId, opts = {}) {
     detail: sigDetail,
     trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
+  let quoteForged = false;
+  if (opts.skipQuote) {
+    checks.push({
+      name: "TDX quote (DCAP)",
+      status: "skip",
+      detail: "skipped (--quick)",
+      trust: "trustless"
+    });
+  } else {
+    const q = await verifyTdxQuote(
+      base,
+      opts.model ?? "phala/glm-5.2",
+      workloadId ?? ""
+    );
+    quoteForged = q.forged;
+    checks.push({
+      name: "TDX quote (DCAP)",
+      status: q.status,
+      detail: q.detail,
+      trust: "trustless"
+    });
+  }
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged,
+    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged && !quoteForged,
     anchorVerified,
     checks,
     wireHash,
     workloadId,
     upstream: upstreamEv ? {
       provider: upstreamEv.provider ?? upstreamEv.upstream_name,
+      modelId: upstreamEv.model_id,
       result: upstreamEv.result,
-      tcbStatus: upstreamEv.tcb_status
+      tcbStatus: upstreamEv.tcb_status,
+      sessionId: upstreamEv.session_id,
+      claims: claims.length > 0 ? claims : void 0
     } : void 0,
     anchor
   };