@t2000/sdk 5.19.0 → 5.20.1

package/dist/index.d.cts

@@ -112,6 +112,8 @@ interface VerifyOptions {
     /** Confidential model id for fetching the attested receipt-signing key
      *  (default `phala/glm-5.2`; the gateway key is workload-wide). */
     model?: string;
+    /** Skip the local DCAP quote verification (the slower, network-bound check). */
+    skipQuote?: boolean;
 }
 /**
  * Verify a confidential response by its receipt id. Reads the signed receipt

package/dist/index.d.ts

@@ -112,6 +112,8 @@ interface VerifyOptions {
     /** Confidential model id for fetching the attested receipt-signing key
      *  (default `phala/glm-5.2`; the gateway key is workload-wide). */
     model?: string;
+    /** Skip the local DCAP quote verification (the slower, network-bound check). */
+    skipQuote?: boolean;
 }
 /**
  * Verify a confidential response by its receipt id. Reads the signed receipt

package/dist/index.js

@@ -2107,6 +2107,72 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
     return false;
   }
 }
+async function verifyTdxQuote(base, model, receiptWorkloadId) {
+  let nonce;
+  try {
+    nonce = bytesToHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+  } catch {
+    return { status: "skip", detail: "no secure RNG available", forged: false };
+  }
+  let report;
+  try {
+    const res = await fetch(
+      `${base}/aci/attestation?model=${encodeURIComponent(model)}&nonce=${nonce}`
+    );
+    if (res.ok) {
+      report = (await res.json()).report;
+    }
+  } catch {
+  }
+  const quoteHex = report?.attestation?.evidence?.quote;
+  if (!quoteHex) {
+    return {
+      status: "skip",
+      detail: "attestation report (with quote) unavailable \u2014 pass --model?",
+      forged: false
+    };
+  }
+  try {
+    const dcap = await import('@phala/dcap-qvl');
+    const getCollateralAndVerify = dcap.getCollateralAndVerify ?? dcap.default?.getCollateralAndVerify;
+    if (typeof getCollateralAndVerify !== "function") {
+      return {
+        status: "fail",
+        forged: false,
+        detail: "DCAP verifier unavailable in this build"
+      };
+    }
+    const quoteBytes = hexToBytes(quoteHex.replace(/^0x/, ""));
+    const vr = await getCollateralAndVerify(quoteBytes);
+    const td = vr.report.asTd10() ?? vr.report.asTd15()?.base ?? null;
+    const reportData = td?.reportData;
+    const signingAddr = report?.signing_address?.replace(/^0x/, "").toLowerCase();
+    const addrBound = Boolean(
+      reportData && signingAddr && bytesToHex(reportData.slice(0, 20)) === signingAddr
+    );
+    const workloadMatch = report?.workload_id === receiptWorkloadId;
+    const tcb = vr.status;
+    const tcbBad = tcb === "Revoked" || tcb === "Unknown";
+    const forged = !(addrBound && workloadMatch) || tcbBad;
+    let detail;
+    if (forged && tcbBad) {
+      detail = `genuine TDX but TCB ${tcb}`;
+    } else if (!addrBound) {
+      detail = "report_data does NOT commit the report's signing address";
+    } else if (!workloadMatch) {
+      detail = "quote workload_id does not match the receipt's";
+    } else {
+      detail = `genuine Intel TDX (verified vs Intel collateral), TCB ${tcb}; report_data commits the attested signing address`;
+    }
+    return { status: forged ? "fail" : "pass", forged, tcbStatus: tcb, detail };
+  } catch (e) {
+    return {
+      status: "fail",
+      forged: false,
+      detail: `could not verify the quote: ${e instanceof Error ? e.message : "error"}`
+    };
+  }
+}
 async function verifyReceipt(receiptId, opts = {}) {
   const base = opts.apiBase ?? DEFAULT_API_BASE;
   const network = opts.network ?? "mainnet";
@@ -2201,7 +2267,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       });
     }
   }
-  let signatureForged = false;
   let sigStatus = "skip";
   let sigDetail = "no signature on receipt";
   if (receipt.signature?.value) {
@@ -2218,7 +2283,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       } else {
         const ok = verifyReceiptSignature(receipt, att.signingKey);
         sigStatus = ok ? "pass" : "fail";
-        signatureForged = !ok;
         sigDetail = ok ? `signed by the attested receipt key (${receipt.signature.key_id ?? "key"})` : "signature does NOT recover the attested receipt key \u2014 forged/altered";
       }
     } catch {
@@ -2231,9 +2295,32 @@ async function verifyReceipt(receiptId, opts = {}) {
     detail: sigDetail,
     trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
+  if (opts.skipQuote) {
+    checks.push({
+      name: "TDX quote (DCAP)",
+      status: "skip",
+      detail: "skipped (--quick)",
+      trust: "trustless"
+    });
+  } else {
+    const q = await verifyTdxQuote(
+      base,
+      opts.model ?? "phala/glm-5.2",
+      workloadId ?? ""
+    );
+    checks.push({
+      name: "TDX quote (DCAP)",
+      status: q.status,
+      detail: q.detail,
+      trust: "trustless"
+    });
+  }
+  const trustlessFailed = checks.some(
+    (c) => c.trust === "trustless" && c.status === "fail"
+  );
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged,
+    verified: Boolean(wireHash && workloadId) && !trustlessFailed,
     anchorVerified,
     checks,
     wireHash,