@tangle-network/sandbox 0.60.31-develop.20261010071853.e377e11 → 0.60.31-develop.20261010073257.5e0a52f

package/dist/gpu-lease/index.d.ts

@@ -63,11 +63,13 @@ interface OperatorQuote {
   operatorAddress: `0x${string}`;
   /** EIP-191 personal_sign over the canonical quote payload (0x RSV). */
   signature?: `0x${string}`;
-  /** wei/second, from the operator's signed policy at request time. */
+  /** wei/second per device, from the operator's signed policy at request time. */
   pricePerSecond: string;
   durationSeconds: number;
   confidentiality: number;
-  /** wei — pricePerSecond × durationSeconds exactly. */
+  /** Devices rented. The signed v2 payload binds this count. */
+  deviceCount: number;
+  /** wei — pricePerSecond × durationSeconds × deviceCount exactly. */
   escrowTotal: string;
   /** Utilization the price was struck at (bps of 10_000) — the surge "why". */
   utilizationBps: number;
@@ -155,12 +157,14 @@ declare function decodeGpuLeaseOutput(encoded: `0x${string}`): GpuLeaseOutputDec
 //#endregion
 //#region src/gpu-lease/quotes.d.ts
 /** The exact string the operator signs — mirrors the blueprint's
- * `canonical_quote_payload` byte-for-byte. Every priced field is bound. */
+ * `canonical_quote_payload` (v2) byte-for-byte. Every priced field is bound,
+ * the device count included. */
 declare function canonicalQuotePayload(quote: {
   gpuClass: string;
   pricePerSecond: string;
   durationSeconds: number;
   confidentiality: number;
+  deviceCount: number;
   escrowTotal: string;
   intentHash: string;
   validUntil: number;
@@ -175,6 +179,14 @@ type QuoteRejection = {
   kind: "class-mismatch";
   requested: string;
   quoted: string;
+} | {
+  kind: "duration-mismatch";
+  requested: number;
+  quoted: number;
+} | {
+  kind: "count-mismatch";
+  requested: number;
+  quoted: number;
 } | {
   kind: "escrow-inconsistent";
   expected: bigint;
@@ -187,6 +199,10 @@ type QuoteRejection = {
   kind: "signature-mismatch";
   claimed: string;
   recovered: string;
+} | {
+  kind: "operator-not-pinned";
+  pinned: string;
+  recovered: string;
 } | {
   kind: "unsigned";
   operator: string;
@@ -195,11 +211,13 @@ interface QuoteFilterInput {
   requestedClass: string;
   requestedDurationSeconds: number;
   requestedConfidentiality: number;
+  requestedDeviceCount: number;
   now?: () => number;
 }
 /**
  * Validate one quote. Fail-closed on every field the RFQ binds:
- * class, duration-derived escrow, confidentiality, and expiry.
+ * class, duration, device count, the escrow derived from them,
+ * confidentiality, and expiry.
  */
 declare function validateQuote(quote: OperatorQuote, input: QuoteFilterInput): ValidatedQuote | QuoteRejection;
 /**
@@ -226,9 +244,13 @@ declare function selectQuotes(quotes: {
  *   invalid signature => reject (config-trust is dead on this path).
  * - no signature => the endpoint-config address is used (interim fallback);
  *   strict mode rejects unsigned quotes outright.
+ * - `pinnedOperator` set => the quote must be signed AND recover to that
+ *   address. A valid signature from any other key is rejected, so an
+ *   endpoint cannot substitute its own signer for the one the caller trusts.
  */
 declare function validateQuoteIdentity(quote: OperatorQuote, opts?: {
   strict?: boolean;
+  pinnedOperator?: `0x${string}`;
 }): Promise<ValidatedQuote | QuoteRejection>;
 //#endregion
 //#region src/gpu-lease/vault.d.ts

package/dist/gpu-lease/index.js

@@ -130,9 +130,10 @@ function decodeGpuLeaseOutput(encoded) {
 * proven in blueprint #1568 and the operator policy's ceiling semantics.
 */
 /** The exact string the operator signs — mirrors the blueprint's
-* `canonical_quote_payload` byte-for-byte. Every priced field is bound. */
+* `canonical_quote_payload` (v2) byte-for-byte. Every priced field is bound,
+* the device count included. */
 function canonicalQuotePayload(quote) {
-	return `gpu-lease-quote|v1|${quote.gpuClass}|${quote.pricePerSecond}|${quote.durationSeconds}|${quote.confidentiality}|${quote.escrowTotal}|${quote.intentHash}|${quote.validUntil}`;
+	return `gpu-lease-quote|v2|${quote.gpuClass}|${quote.pricePerSecond}|${quote.durationSeconds}|${quote.confidentiality}|${quote.deviceCount}|${quote.escrowTotal}|${quote.intentHash}|${quote.validUntil}`;
 }
 /** Offline EIP-191 recovery over the canonical payload. */
 async function verifyOperatorQuote(quote) {
@@ -143,7 +144,8 @@ async function verifyOperatorQuote(quote) {
 }
 /**
 * Validate one quote. Fail-closed on every field the RFQ binds:
-* class, duration-derived escrow, confidentiality, and expiry.
+* class, duration, device count, the escrow derived from them,
+* confidentiality, and expiry.
 */
 function validateQuote(quote, input) {
 	const now = (input.now ?? Date.now)() / 1e3;
@@ -152,13 +154,23 @@ function validateQuote(quote, input) {
 		requested: input.requestedClass,
 		quoted: quote.gpuClass
 	};
+	if (quote.durationSeconds !== input.requestedDurationSeconds) return {
+		kind: "duration-mismatch",
+		requested: input.requestedDurationSeconds,
+		quoted: quote.durationSeconds
+	};
+	if (quote.deviceCount !== input.requestedDeviceCount) return {
+		kind: "count-mismatch",
+		requested: input.requestedDeviceCount,
+		quoted: quote.deviceCount
+	};
 	if (quote.confidentiality !== input.requestedConfidentiality) return {
 		kind: "confidentiality-mismatch",
 		requested: input.requestedConfidentiality,
 		quoted: quote.confidentiality
 	};
 	const price = BigInt(quote.pricePerSecond);
-	const expectedEscrow = price * BigInt(quote.durationSeconds);
+	const expectedEscrow = price * BigInt(quote.durationSeconds) * BigInt(quote.deviceCount);
 	const actualEscrow = BigInt(quote.escrowTotal);
 	if (expectedEscrow !== actualEscrow) return {
 		kind: "escrow-inconsistent",
@@ -210,6 +222,9 @@ function selectQuotes(quotes, input) {
 *   invalid signature => reject (config-trust is dead on this path).
 * - no signature => the endpoint-config address is used (interim fallback);
 *   strict mode rejects unsigned quotes outright.
+* - `pinnedOperator` set => the quote must be signed AND recover to that
+*   address. A valid signature from any other key is rejected, so an
+*   endpoint cannot substitute its own signer for the one the caller trusts.
 */
 async function validateQuoteIdentity(quote, opts = {}) {
 	const base = {
@@ -225,9 +240,14 @@ async function validateQuoteIdentity(quote, opts = {}) {
 			claimed,
 			recovered: recovered ?? "unrecoverable"
 		};
+		if (opts.pinnedOperator !== void 0 && recovered !== opts.pinnedOperator.toLowerCase()) return {
+			kind: "operator-not-pinned",
+			pinned: opts.pinnedOperator.toLowerCase(),
+			recovered
+		};
 		return base;
 	}
-	if (opts.strict) return {
+	if (opts.strict || opts.pinnedOperator !== void 0) return {
 		kind: "unsigned",
 		operator: quote.operatorAddress
 	};
@@ -312,6 +332,7 @@ async function gpuLease(options) {
 		requestedClass: gpuClass,
 		requestedDurationSeconds: durationSeconds,
 		requestedConfidentiality: confidentiality,
+		requestedDeviceCount: 1,
 		now: options.now
 	});
 	if (ranked.length === 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.31-develop.20261010071853.e377e11",
+  "version": "0.60.31-develop.20261010073257.5e0a52f",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -149,12 +149,12 @@
     "vitest": "^4.1.11",
     "ws": "^8.20.0",
     "yjs": "13.6.30",
-    "@products/sandbox-test-utils": "0.0.0",
     "@repo/shared": "0.0.0",
-    "@tangle-network/cli-agent-registry": "0.6.2",
+    "@products/sandbox-test-utils": "0.0.0",
     "@tangle-network/agent-profile-materialize": "0.22.2",
-    "@tangle-network/runtime-contracts": "0.16.0",
+    "@tangle-network/cli-agent-registry": "0.6.2",
     "@tangle-network/sdk": "4.0.3",
+    "@tangle-network/runtime-contracts": "0.16.0",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {