@t2000/sdk 5.20.0 → 5.20.1

package/dist/index.js

@@ -2133,7 +2133,15 @@ async function verifyTdxQuote(base, model, receiptWorkloadId) {
     };
   }
   try {
-    const { getCollateralAndVerify } = await import('@phala/dcap-qvl');
+    const dcap = await import('@phala/dcap-qvl');
+    const getCollateralAndVerify = dcap.getCollateralAndVerify ?? dcap.default?.getCollateralAndVerify;
+    if (typeof getCollateralAndVerify !== "function") {
+      return {
+        status: "fail",
+        forged: false,
+        detail: "DCAP verifier unavailable in this build"
+      };
+    }
     const quoteBytes = hexToBytes(quoteHex.replace(/^0x/, ""));
     const vr = await getCollateralAndVerify(quoteBytes);
     const td = vr.report.asTd10() ?? vr.report.asTd15()?.base ?? null;
@@ -2259,7 +2267,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       });
     }
   }
-  let signatureForged = false;
   let sigStatus = "skip";
   let sigDetail = "no signature on receipt";
   if (receipt.signature?.value) {
@@ -2276,7 +2283,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       } else {
         const ok = verifyReceiptSignature(receipt, att.signingKey);
         sigStatus = ok ? "pass" : "fail";
-        signatureForged = !ok;
         sigDetail = ok ? `signed by the attested receipt key (${receipt.signature.key_id ?? "key"})` : "signature does NOT recover the attested receipt key \u2014 forged/altered";
       }
     } catch {
@@ -2289,7 +2295,6 @@ async function verifyReceipt(receiptId, opts = {}) {
     detail: sigDetail,
     trust: sigStatus === "skip" ? "roadmap" : "trustless"
   });
-  let quoteForged = false;
   if (opts.skipQuote) {
     checks.push({
       name: "TDX quote (DCAP)",
@@ -2303,7 +2308,6 @@ async function verifyReceipt(receiptId, opts = {}) {
       opts.model ?? "phala/glm-5.2",
       workloadId ?? ""
     );
-    quoteForged = q.forged;
     checks.push({
       name: "TDX quote (DCAP)",
       status: q.status,
@@ -2311,9 +2315,12 @@ async function verifyReceipt(receiptId, opts = {}) {
       trust: "trustless"
     });
   }
+  const trustlessFailed = checks.some(
+    (c) => c.trust === "trustless" && c.status === "fail"
+  );
   return {
     receiptId,
-    verified: Boolean(wireHash && workloadId) && anchorVerified && !signatureForged && !quoteForged,
+    verified: Boolean(wireHash && workloadId) && !trustlessFailed,
     anchorVerified,
     checks,
     wireHash,