@t2000/sdk 8.0.0 → 8.0.2

package/dist/index.cjs

@@ -13,6 +13,7 @@ var cryptography = require('@mysten/sui/cryptography');
 var promises = require('fs/promises');
 var path = require('path');
 var os = require('os');
+var ed25519$1 = require('@noble/curves/ed25519');
 var secp256k1 = require('@noble/curves/secp256k1');
 var sha256 = require('@noble/hashes/sha256');
 var utils$1 = require('@noble/hashes/utils');
@@ -1902,7 +1903,7 @@ function resolveApiKey(apiKey) {
   if (!key) {
     throw new exports.T2000Error(
       "INVALID_KEY",
-      "No Private API key. Pass `apiKey` or set T2000_API_KEY. Generate one at agents.t2000.ai/manage (Pro/Max)."
+      "No Private Inference key. Pass `apiKey` or set T2000_API_KEY. Generate one at agents.t2000.ai/manage."
     );
   }
   return key;
@@ -2080,7 +2081,24 @@ function jcs(value) {
 function verifyReceiptSignature(receipt, signingKeyHex) {
   try {
     const sig = receipt.signature;
-    if (sig?.algo !== "ecdsa-secp256k1" || !sig.value) {
+    if (!sig?.value) {
+      return false;
+    }
+    const endorsed = utils$1.hexToBytes(signingKeyHex.replace(/^0x/, ""));
+    const sigBytes = utils$1.hexToBytes(sig.value);
+    if (sig.algo === "ed25519") {
+      if (sigBytes.length !== 64 || endorsed.length !== 32) {
+        return false;
+      }
+      const { value: _omitted, ...sigRest } = sig;
+      const canonical2 = {
+        ...receipt,
+        signature: sigRest
+      };
+      const msg = new TextEncoder().encode(jcs(canonical2));
+      return ed25519$1.ed25519.verify(sigBytes, msg, endorsed);
+    }
+    if (sig.algo !== "ecdsa-secp256k1") {
       return false;
     }
     const canonical = {
@@ -2096,7 +2114,6 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
       signature: { algo: sig.algo, key_id: sig.key_id ?? "" }
     };
     const prehash = sha256.sha256(new TextEncoder().encode(jcs(canonical)));
-    const sigBytes = utils$1.hexToBytes(sig.value);
     if (sigBytes.length !== 65) {
       return false;
     }
@@ -2108,8 +2125,7 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
       return false;
     }
     const recovered = secp256k1.secp256k1.Signature.fromCompact(sigBytes.slice(0, 64)).addRecoveryBit(v).recoverPublicKey(prehash).toHex(false);
-    const endorsed = utils$1.bytesToHex(utils$1.hexToBytes(signingKeyHex.replace(/^0x/, "")));
-    return recovered.toLowerCase() === endorsed.toLowerCase();
+    return recovered.toLowerCase() === utils$1.bytesToHex(endorsed).toLowerCase();
   } catch {
     return false;
   }
@@ -2613,9 +2629,9 @@ var T2000 = class _T2000 extends eventemitter3.EventEmitter {
   //
   // Inference as a wallet verb — the agent's brain + wallet in one package.
   // Key-based today (`apiKey` / `T2000_API_KEY`); the x402 no-key pay-per-call
-  // path is a later add. The model runs on the t2000 Private API (ZDR; a
+  // path is a later add. The model runs on t2000 Private Inference (ZDR; a
   // `phala/*` confidential tier runs in a GPU-TEE).
-  /** Non-streaming chat completion against the Private API. */
+  /** Non-streaming chat completion against Private Inference. */
   async chat(params) {
     return chatCompletion(params);
   }
@@ -2624,7 +2640,7 @@ var T2000 = class _T2000 extends eventemitter3.EventEmitter {
   chatStream(params) {
     return chatCompletionStream(params);
   }
-  /** The Private API model catalog (`GET /v1/models`). */
+  /** The Private Inference model catalog (`GET /v1/models`). */
   async models(opts) {
     return listModels(opts);
   }