sealed-precision-oracle 1.0.0

package/dist/src/teeInference.js

@@ -0,0 +1,200 @@
+"use strict";
+/**
+ * Direct TEE-attested inference via the 0G Compute SDK.
+ *
+ * Bypasses the Router API entirely. Instead:
+ *  1. Discovers providers on-chain from the InferenceServing contract
+ *  2. Calls inference directly to the provider's broker URL
+ *  3. Fetches the per-inference TEE signature from the provider
+ *  4. Verifies the signature against the on-chain TEE signer address
+ *
+ * This provides REAL per-inference attestation, not just metadata.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.discoverProviders = discoverProviders;
+exports.teeInference = teeInference;
+const ethers_1 = require("ethers");
+const _0g_compute_ts_sdk_1 = require("@0gfoundation/0g-compute-ts-sdk");
+const openai_1 = require("openai");
+require("dotenv/config");
+const OG_RPC_URL = process.env.OG_RPC_URL || "https://evmrpc.0g.ai";
+/**
+ * Discover TEE-attested providers for a given model from the on-chain registry.
+ */
+async function discoverProviders(modelQuery) {
+    const broker = await (0, _0g_compute_ts_sdk_1.createZGComputeNetworkReadOnlyBroker)(OG_RPC_URL);
+    const services = await broker.inference.listService();
+    return services
+        .filter((s) => {
+        const isTee = s.verifiability === "TeeML" || s.verifiability === "TeeTLS";
+        const modelMatch = modelQuery
+            ? s.model?.toLowerCase().includes(modelQuery.toLowerCase())
+            : true;
+        return isTee && modelMatch;
+    })
+        .map((s) => ({
+        provider: s.provider,
+        url: s.url,
+        model: s.model,
+        verifiability: s.verifiability,
+        teeSignerAddress: s.teeSignerAddress,
+    }));
+}
+/**
+ * Run inference directly on a TEE-attested provider and verify the response signature.
+ */
+async function teeInference(systemPrompt, userPrompt, modelQuery) {
+    const privateKey = process.env.PRIVATE_KEY;
+    if (!privateKey)
+        throw new Error("PRIVATE_KEY not set in .env");
+    const provider = new ethers_1.ethers.JsonRpcProvider(OG_RPC_URL);
+    const wallet = new ethers_1.ethers.Wallet(privateKey, provider);
+    // 1. Create broker with wallet (needed for auth headers + fees)
+    console.log("[TEE] Creating compute broker...");
+    const broker = await (0, _0g_compute_ts_sdk_1.createZGComputeNetworkBroker)(wallet);
+    // 2. Discover providers on-chain
+    console.log("[TEE] Discovering providers from on-chain registry...");
+    const services = await broker.inference.listService();
+    const service = services.find((s) => {
+        const isTee = s.verifiability === "TeeML" || s.verifiability === "TeeTLS";
+        const modelMatch = modelQuery
+            ? s.model?.toLowerCase().includes(modelQuery.toLowerCase())
+            : true;
+        return isTee && modelMatch;
+    });
+    if (!service) {
+        // Fallback: list what's available
+        const available = services.map((s) => `${s.model} (${s.verifiability})`);
+        throw new Error(`No TEE provider found for model query "${modelQuery}". ` +
+            `Available: ${available.join(", ") || "none"}`);
+    }
+    const providerAddress = service.provider;
+    const providerUrl = service.url;
+    const model = service.model;
+    const teeSigner = service.teeSignerAddress;
+    console.log(`[TEE] Found provider: ${providerAddress}`);
+    console.log(`[TEE] Model: ${model}`);
+    console.log(`[TEE] URL: ${providerUrl}`);
+    console.log(`[TEE] TEE signer: ${teeSigner}`);
+    console.log(`[TEE] Verifiability: ${service.verifiability}`);
+    // 3. Setup: deposit funds and acknowledge provider
+    try {
+        await broker.ledger.depositFund(0.001); // Small deposit for testnet
+        console.log("[TEE] Deposited funds to ledger");
+    }
+    catch (err) {
+        // May fail if already deposited — that's OK
+        console.log("[TEE] Deposit skipped (may already have funds):", err.message?.slice(0, 80));
+    }
+    try {
+        await broker.inference.acknowledgeProviderSigner(providerAddress);
+        console.log("[TEE] Acknowledged provider TEE signer");
+    }
+    catch (err) {
+        console.log("[TEE] Acknowledge skipped (may already be done):", err.message?.slice(0, 80));
+    }
+    // 4. Get endpoint and auth headers
+    const metadata = await broker.inference.getServiceMetadata(providerAddress);
+    const headers = await broker.inference.getRequestHeaders(providerAddress);
+    console.log("[TEE] Calling inference directly on provider...");
+    // 5. Direct inference call to provider (no Router)
+    const openai = new openai_1.OpenAI({ baseURL: metadata.endpoint, apiKey: "not-needed" });
+    const { data: completion, response: httpResponse } = await openai.chat.completions
+        .create({
+        model: metadata.model,
+        messages: [
+            { role: "system", content: systemPrompt },
+            { role: "user", content: userPrompt },
+        ],
+        temperature: 0.1,
+        max_tokens: 1024,
+    }, { headers: { ...headers } })
+        .withResponse();
+    const content = completion.choices[0]?.message?.content;
+    if (!content)
+        throw new Error("No response from provider");
+    // Get chat ID from response header (for signature lookup)
+    const chatId = httpResponse.headers.get("ZG-Res-Key") || completion.id || "unknown";
+    console.log("[TEE] Got response, chat ID:", chatId);
+    // 6. Process response (fees + signature verification via SDK)
+    let sdkVerified = null;
+    try {
+        sdkVerified = await broker.inference.processResponse(providerAddress, chatId, JSON.stringify(completion.usage || {}));
+        console.log("[TEE] SDK processResponse result:", sdkVerified);
+    }
+    catch (err) {
+        console.log("[TEE] SDK processResponse failed:", err.message?.slice(0, 100));
+    }
+    // 7. Manual signature verification for full transparency
+    let attestation = null;
+    let attestationNote = "";
+    try {
+        const sigUrl = `${providerUrl}/v1/proxy/signature/${chatId}?model=${model}`;
+        console.log("[TEE] Fetching per-inference signature...");
+        const sigRes = await fetch(sigUrl, { signal: AbortSignal.timeout(10000) });
+        if (sigRes.ok) {
+            const { text: signedText, signature } = (await sigRes.json());
+            // Determine the expected signing address
+            let expectedSigner = teeSigner;
+            try {
+                const additionalInfo = JSON.parse(service.additionalInfo || "{}");
+                if (additionalInfo.TargetSeparated &&
+                    additionalInfo.ProviderType !== "centralized" &&
+                    additionalInfo.TargetTeeAddress) {
+                    expectedSigner = additionalInfo.TargetTeeAddress;
+                }
+            }
+            catch { }
+            // Verify ECDSA signature
+            const messageHash = ethers_1.ethers.hashMessage(signedText);
+            const recoveredAddress = ethers_1.ethers.recoverAddress(messageHash, signature);
+            const verified = recoveredAddress.toLowerCase() === expectedSigner.toLowerCase();
+            attestation = {
+                signedText,
+                signature,
+                teeSigner: expectedSigner,
+                recoveredAddress,
+                verified,
+            };
+            attestationNote = verified
+                ? `PER-INFERENCE TEE attestation VERIFIED. ` +
+                    `Response signed by ${recoveredAddress}, matches on-chain TEE signer ${expectedSigner}.`
+                : `PER-INFERENCE TEE signature recovered ${recoveredAddress} but expected ${expectedSigner}. MISMATCH.`;
+            console.log("[TEE]", attestationNote);
+        }
+        else {
+            attestationNote = `Signature endpoint returned ${sigRes.status}. Per-inference attestation unavailable.`;
+            console.log("[TEE]", attestationNote);
+        }
+    }
+    catch (err) {
+        attestationNote = `Signature fetch failed: ${err.message}. Per-inference attestation unavailable.`;
+        console.log("[TEE]", attestationNote);
+    }
+    return {
+        content,
+        chatId,
+        model,
+        providerAddress,
+        providerUrl,
+        attestation,
+        attestationNote,
+    };
+}
+// Allow direct execution for testing
+if (require.main === module) {
+    (async () => {
+        console.log("=== TEE Provider Discovery ===\n");
+        try {
+            const providers = await discoverProviders();
+            console.log(`Found ${providers.length} TEE providers:\n`);
+            for (const p of providers) {
+                console.log(`  ${p.model} | ${p.verifiability} | ${p.provider.slice(0, 10)}...`);
+            }
+        }
+        catch (err) {
+            console.error("Discovery failed:", err);
+        }
+    })();
+}
+//# sourceMappingURL=teeInference.js.map

package/dist/src/teeInference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teeInference.js","sourceRoot":"","sources":["../../src/teeInference.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAyCH,8CAsBC;AAKD,oCAiLC;AAnPD,mCAAgC;AAChC,wEAGyC;AACzC,mCAAgC;AAChC,yBAAuB;AAEvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,sBAAsB,CAAC;AA4BpE;;GAEG;AACI,KAAK,UAAU,iBAAiB,CACrC,UAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,IAAA,yDAAoC,EAAC,UAAU,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAEtD,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GACT,CAAC,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC;QAC9D,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3D,CAAC,CAAC,IAAI,CAAC;QACT,OAAO,KAAK,IAAI,UAAU,CAAC;IAC7B,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;KACrC,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,UAAkB,EAClB,UAAmB;IAEnB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAEhE,MAAM,QAAQ,GAAG,IAAI,eAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEvD,gEAAgE;IAChE,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,IAAA,iDAA4B,EAAC,MAAM,CAAC,CAAC;IAE1D,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE;QACvC,MAAM,KAAK,GACT,CAAC,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC;QAC9D,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3D,CAAC,CAAC,IAAI,CAAC;QACT,OAAO,KAAK,IAAI,UAAU,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,kCAAkC;QAClC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,0CAA0C,UAAU,KAAK;YACzD,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAE3C,OAAO,CAAC,GAAG,CAAC,yBAAyB,eAAe,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAE7D,mDAAmD;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,4BAA4B;QACpE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,4CAA4C;QAC5C,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,kDAAkD,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,mCAAmC;IACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAE1E,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAE/D,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,GAChD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW;SAC1B,MAAM,CACL;QACE,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;SACtC;QACD,WAAW,EAAE,GAAG;QAChB,UAAU,EAAE,IAAI;KACjB,EACD,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAC5B;SACA,YAAY,EAAE,CAAC;IAEpB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;IACxD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAE3D,0DAA0D;IAC1D,MAAM,MAAM,GACV,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,CAAC;IAEvE,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;IAEpD,8DAA8D;IAC9D,IAAI,WAAW,GAAmB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,eAAe,CAClD,eAAe,EACf,MAAM,EACN,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CACvC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,yDAAyD;IACzD,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,eAAe,GAAG,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,WAAW,uBAAuB,MAAM,UAAU,KAAK,EAAE,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAM,CAAC,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAG3D,CAAC;YAEF,yCAAyC;YACzC,IAAI,cAAc,GAAG,SAAS,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAC9B,OAAe,CAAC,cAAc,IAAI,IAAI,CACxC,CAAC;gBACF,IACE,cAAc,CAAC,eAAe;oBAC9B,cAAc,CAAC,YAAY,KAAK,aAAa;oBAC7C,cAAc,CAAC,gBAAgB,EAC/B,CAAC;oBACD,cAAc,GAAG,cAAc,CAAC,gBAAgB,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAEV,yBAAyB;YACzB,MAAM,WAAW,GAAG,eAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,gBAAgB,GAAG,eAAM,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACvE,MAAM,QAAQ,GACZ,gBAAgB,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;YAElE,WAAW,GAAG;gBACZ,UAAU;gBACV,SAAS;gBACT,SAAS,EAAE,cAAc;gBACzB,gBAAgB;gBAChB,QAAQ;aACT,CAAC;YAEF,eAAe,GAAG,QAAQ;gBACxB,CAAC,CAAC,0CAA0C;oBAC1C,sBAAsB,gBAAgB,iCAAiC,cAAc,GAAG;gBAC1F,CAAC,CAAC,yCAAyC,gBAAgB,iBAAiB,cAAc,aAAa,CAAC;YAE1G,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,+BAA+B,MAAM,CAAC,MAAM,0CAA0C,CAAC;YACzG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,eAAe,GAAG,2BAA2B,GAAG,CAAC,OAAO,0CAA0C,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,KAAK;QACL,eAAe;QACf,WAAW;QACX,WAAW;QACX,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,qCAAqC;AACrC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,CAAC,KAAK,IAAI,EAAE;QACV,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,CAAC,MAAM,mBAAmB,CAAC,CAAC;YAC1D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/src/uploadReceipt.d.ts

@@ -0,0 +1,12 @@
+import "dotenv/config";
+export interface UploadResult {
+    rootHash: string;
+    txHash: string;
+}
+/**
+ * Upload an AI resolution receipt to 0G Storage.
+ *
+ * Writes the content to a temp file, computes its Merkle tree root,
+ * uploads via the 0G Indexer, and returns the root hash + tx hash.
+ */
+export declare function uploadReceipt(content: string): Promise<UploadResult>;

package/dist/src/uploadReceipt.js

@@ -0,0 +1,111 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadReceipt = uploadReceipt;
+const _0g_ts_sdk_1 = require("@0gfoundation/0g-ts-sdk");
+const ethers_1 = require("ethers");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+require("dotenv/config");
+const OG_RPC_URL = process.env.OG_RPC_URL || "https://evmrpc.0g.ai";
+const OG_INDEXER_RPC = process.env.OG_INDEXER_RPC ||
+    "https://indexer-storage-mainnet-turbo.0g.ai";
+/**
+ * Upload an AI resolution receipt to 0G Storage.
+ *
+ * Writes the content to a temp file, computes its Merkle tree root,
+ * uploads via the 0G Indexer, and returns the root hash + tx hash.
+ */
+async function uploadReceipt(content) {
+    const privateKey = process.env.PRIVATE_KEY;
+    if (!privateKey)
+        throw new Error("PRIVATE_KEY not set in .env");
+    // Write content to a temp file (ZgFile works with file paths)
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "oracle-"));
+    const tmpFile = path.join(tmpDir, "resolution.json");
+    fs.writeFileSync(tmpFile, content, { encoding: "utf-8", mode: 0o600 });
+    try {
+        // Create ZgFile and compute Merkle tree
+        const file = await _0g_ts_sdk_1.ZgFile.fromFilePath(tmpFile);
+        const [tree, treeErr] = await file.merkleTree();
+        if (treeErr !== null || tree === null) {
+            throw new Error(`Merkle tree error: ${treeErr}`);
+        }
+        const rootHash = tree.rootHash();
+        if (!rootHash)
+            throw new Error("Failed to compute Merkle root hash");
+        console.log("[0G Storage] Merkle root hash:", rootHash);
+        // Connect signer
+        const provider = new ethers_1.ethers.JsonRpcProvider(OG_RPC_URL);
+        const signer = new ethers_1.ethers.Wallet(privateKey, provider);
+        // Upload via Indexer
+        const indexer = new _0g_ts_sdk_1.Indexer(OG_INDEXER_RPC);
+        console.log("[0G Storage] Uploading receipt...");
+        const [tx, uploadErr] = await indexer.upload(file, OG_RPC_URL, signer);
+        await file.close();
+        if (uploadErr !== null) {
+            throw new Error(`Upload error: ${uploadErr}`);
+        }
+        const txHash = tx && "txHash" in tx ? tx.txHash : "unknown";
+        console.log("[0G Storage] Upload complete!");
+        console.log("[0G Storage] TX hash:", txHash);
+        return { rootHash, txHash };
+    }
+    finally {
+        // Clean up temp files
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+}
+// Allow running directly: ts-node src/uploadReceipt.ts "your content here"
+if (require.main === module) {
+    const content = process.argv[2] || JSON.stringify({
+        market: "ETH Gas > 50 gwei",
+        resolution: "NO",
+        reasoning: "Sample test resolution",
+        timestamp: new Date().toISOString(),
+    });
+    uploadReceipt(content)
+        .then((result) => {
+        console.log("\n--- Upload Result ---");
+        console.log("Root Hash:", result.rootHash);
+        console.log("TX Hash:", result.txHash);
+    })
+        .catch((err) => {
+        console.error("Upload failed:", err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=uploadReceipt.js.map

package/dist/src/uploadReceipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadReceipt.js","sourceRoot":"","sources":["../../src/uploadReceipt.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,sCA+CC;AAtED,wDAA0D;AAC1D,mCAAgC;AAChC,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,yBAAuB;AAEvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,sBAAsB,CAAC;AACpE,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,cAAc;IAC1B,6CAA6C,CAAC;AAOhD;;;;;GAKG;AACI,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAEhE,8DAA8D;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,IAAI,GAAG,MAAM,mBAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAY,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;QAExD,iBAAiB;QACjB,MAAM,QAAQ,GAAG,IAAI,eAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEvD,qBAAqB;QACrB,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAEjD,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEnB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GACV,EAAE,IAAI,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAE,EAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAExD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,sBAAsB;QACtB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC;QAChD,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IAEH,aAAa,CAAC,OAAO,CAAC;SACnB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACf,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "sealed-precision-oracle",
+  "version": "1.0.0",
+  "description": "Tamper-proof AI Oracle for precision prediction markets on 0G",
+  "main": "dist/src/oracle.js",
+  "bin": {
+    "sealed-precision-oracle": "bin/cli.js"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "skills",
+    "contracts",
+    "src"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "compile": "hardhat compile",
+    "deploy": "hardhat run scripts/deploy.ts --network og_mainnet",
+    "deploy:testnet": "hardhat run scripts/deploy.ts --network og_galileo",
+    "oracle": "ts-node src/oracle.ts",
+    "upload": "ts-node src/uploadReceipt.ts",
+    "test": "hardhat test"
+  },
+  "dependencies": {
+    "@0gfoundation/0g-compute-ts-sdk": "^0.8.3",
+    "@0gfoundation/0g-ts-sdk": "^1.2.8",
+    "@openzeppelin/contracts": "^5.1.0",
+    "dotenv": "^16.4.5",
+    "ethers": "6.13.1",
+    "openai": "^4.73.0"
+  },
+  "devDependencies": {
+    "@nomicfoundation/hardhat-chai-matchers": "^2.1.2",
+    "@nomicfoundation/hardhat-ethers": "^3.0.0",
+    "@types/chai": "^5.2.3",
+    "@types/mocha": "^10.0.10",
+    "chai": "^4.5.0",
+    "hardhat": "^2.22.17",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.7.2"
+  }
+}

package/skills/sealed-precision-oracle/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: sealed-precision-oracle
+description: Cognitive backbone for verifiable market resolutions. Uses TEE-attested AI inference (0G Compute), long-context state persistence (0G Storage), and ERC-7857 agent identity (0G Chain).
+metadata: {"openclaw":{"emoji":"🔮","track":"Track 1: Agentic Infrastructure","requires":{"bins":["node","npx"],"env":["ORACLE_CONTRACT_ADDRESS"],"os":["darwin","linux"]},"optionalEnv":["PRIVATE_KEY"]}}
+---
+
+# Sealed Precision Oracle (Track 1: Agentic Infrastructure)
+
+## Core Focus: Cognitive Backbone
+The Sealed Precision Oracle acts as the cognitive backbone for autonomous intelligence on the 0G Network. It provides other agents with a source of **Verifiable Truth** by orchestrating real-time data, hardware-secured AI reasoning, and immutable state persistence.
+
+## What it does
+
+Resolves complex, data-dependent questions using a multi-layered verifiable pipeline:
+
+1. **Autonomous Data Fetching**: Retrieves ground-truth data (e.g., ETH gas, token prices) from public RPCs and APIs.
+2. **Hardware-Secured Reasoning (TEE)**: Executes AI inference inside a **Trusted Execution Environment (TEE)** using the `0g-compute-ts-sdk`. This ensures the AI model cannot be tampered with.
+3. **Cryptographic Attestation**: Fetches and verifies a **per-inference ECDSA signature** from the TEE provider, proving that the specific response was generated by the specific hardware.
+4. **Long-Context Memory (0G Storage)**: Archives the full resolution context—including reasoning, data snapshots, and signatures—into **0G Storage**. This serves as the agent's immutable memory and "Proof of Reasoning."
+5. **On-Chain Settlement**: Anchors the resolution's Merkle root to the **0G Mainnet** via an **ERC-7857 (AI Agent NFT)** contract, enabling other smart contracts to verify the outcome.
+
+## Integration with OpenClaw
+
+This Oracle is designed to be orchestrated by OpenClaw. It supports two execution modes:
+
+1.  **Managed Mode (Default/Zero-Config):** Ideal for judges and rapid demos. If no local private key is found, the skill automatically calls a hosted **API Bridge** that handles 0G fees and transaction signing using our infrastructure.
+2.  **Autonomous Mode (Self-Sovereign):** If you provide a funded `PRIVATE_KEY`, the skill runs entirely on your local machine, using your own funds for 0G Compute, 0G Storage, and 0G Chain recording.
+
+## Workflow
+
+1. Trigger the oracle via ClawHub or CLI:
+   ```bash
+   # Managed Mode (Zero-Config)
+   sealed-precision-oracle "Is ETH gas below 30 gwei?"
+
+   # Autonomous Mode (Local Signing)
+   export PRIVATE_KEY="your_funded_key"
+   sealed-precision-oracle "Is ETH gas below 30 gwei?"
+   ```
+2. The pipeline handles:
+   - Real-time data injection.
+   - TEE-attested AI inference.
+   - 0G Storage state archival.
+   - 0G Mainnet settlement.
+3. Report the verified resolution and cryptographic proofs.
+
+## Prerequisites
+
+- **Managed Mode:** No prerequisites! Just install and run.
+- **Autonomous Mode:** 
+  1. Export `PRIVATE_KEY` in your terminal or create a `.env` file locally.
+  2. Ensure your wallet has **0G Tokens** for gas and storage fees.
+  3. The skill automatically handles Compute Ledger funding and TEE handshakes.
+
+## Mainnet Addresses
+- **Oracle ID (ERC-7857):** `0xf25E765eF573c26d6314Fd83822564E7AF11C9Ac`
+- **Network:** 0G Mainnet (Chain ID: 16661)
+
+## Guardrails
+
+- **Zero-Hallucination**: The oracle is grounded in real-time fetched data.
+- **Hardware-Enforced**: TEE signatures are verified on-chain and off-chain.
+- **Immutable State**: Every decision is archived permanently on 0G Storage.
+
+## Output format
+
+- **Resolution**: YES/NO with confidence score.
+- **AI Reasoning**: Step-by-step logic from the TEE.
+- **TEE Proof**: Verified signature and signer address.
+- **0G Storage Root**: Permanent pointer to the resolution memory.
+- **0G Chain TX**: Blockchain anchor for the proof.

package/src/fetchMarketData.ts

@@ -0,0 +1,187 @@
+/**
+ * Multi-market real-time data fetcher.
+ * Supports: ETH gas, ETH price, BTC price, and arbitrary token prices.
+ * Uses public RPCs and free APIs — no API keys required.
+ */
+
+export interface MarketData {
+  marketType: string;
+  dataPoints: Record<string, number | string | null>;
+  source: string;
+  fetchedAt: string;
+}
+
+// ─── Helpers ────────────────────────────────────────────────────────────────
+
+async function jsonFetch(url: string, options?: RequestInit): Promise<any> {
+  const res = await fetch(url, {
+    ...options,
+    signal: AbortSignal.timeout(10_000),
+    headers: { "Content-Type": "application/json", ...options?.headers },
+  });
+  if (!res.ok) throw new Error(`HTTP ${res.status} from ${url}`);
+  return res.json();
+}
+
+async function rpcCall(url: string, method: string, params: unknown[] = []): Promise<any> {
+  const data = await jsonFetch(url, {
+    method: "POST",
+    body: JSON.stringify({ jsonrpc: "2.0", method, params, id: 1 }),
+  });
+  if (data.error) throw new Error(`RPC: ${data.error.message}`);
+  return data.result;
+}
+
+// ─── ETH Gas ────────────────────────────────────────────────────────────────
+
+const ETH_RPCS = [
+  "https://eth.llamarpc.com",
+  "https://rpc.ankr.com/eth",
+  "https://ethereum-rpc.publicnode.com",
+];
+
+export async function fetchEthGasData(): Promise<MarketData> {
+  let lastError: Error | null = null;
+
+  for (const rpc of ETH_RPCS) {
+    try {
+      const [gasPrice, blockHex] = await Promise.all([
+        rpcCall(rpc, "eth_gasPrice"),
+        rpcCall(rpc, "eth_blockNumber"),
+      ]);
+
+      const gasPriceGwei = Number(BigInt(gasPrice)) / 1e9;
+      const blockNumber = Number(BigInt(blockHex));
+
+      let baseFeeGwei: number | null = null;
+      try {
+        const block = await rpcCall(rpc, "eth_getBlockByNumber", ["latest", false]);
+        if (block?.baseFeePerGas) {
+          baseFeeGwei = Number(BigInt(block.baseFeePerGas)) / 1e9;
+        }
+      } catch {}
+
+      return {
+        marketType: "eth_gas",
+        dataPoints: {
+          gas_price_gwei: Math.round(gasPriceGwei * 100) / 100,
+          base_fee_gwei: baseFeeGwei ? Math.round(baseFeeGwei * 100) / 100 : null,
+          block_number: blockNumber,
+        },
+        source: rpc,
+        fetchedAt: new Date().toISOString(),
+      };
+    } catch (err) {
+      lastError = err as Error;
+      continue;
+    }
+  }
+  throw new Error(`All ETH RPCs failed. Last: ${lastError?.message}`);
+}
+
+// ─── Crypto Prices (CoinGecko free API — no key) ───────────────────────────
+
+const COINGECKO_IDS: Record<string, string> = {
+  btc: "bitcoin",
+  bitcoin: "bitcoin",
+  eth: "ethereum",
+  ethereum: "ethereum",
+  sol: "solana",
+  solana: "solana",
+  bnb: "binancecoin",
+  matic: "matic-network",
+  polygon: "matic-network",
+  avax: "avalanche-2",
+  dot: "polkadot",
+  link: "chainlink",
+  uni: "uniswap",
+  aave: "aave",
+};
+
+export async function fetchCryptoPrice(symbol: string): Promise<MarketData> {
+  const id = COINGECKO_IDS[symbol.toLowerCase()];
+  if (!id) {
+    throw new Error(
+      `Unknown symbol "${symbol}". Supported: ${Object.keys(COINGECKO_IDS).join(", ")}`
+    );
+  }
+
+  const data = await jsonFetch(
+    `https://api.coingecko.com/api/v3/simple/price?ids=${id}&vs_currencies=usd&include_24hr_change=true&include_market_cap=true&include_24hr_vol=true`
+  );
+
+  const coin = data[id];
+  if (!coin) throw new Error(`No price data for ${id}`);
+
+  return {
+    marketType: "crypto_price",
+    dataPoints: {
+      symbol: symbol.toUpperCase(),
+      price_usd: coin.usd,
+      change_24h_pct: coin.usd_24h_change ? Math.round(coin.usd_24h_change * 100) / 100 : null,
+      market_cap_usd: coin.usd_market_cap || null,
+      volume_24h_usd: coin.usd_24h_vol || null,
+    },
+    source: "api.coingecko.com",
+    fetchedAt: new Date().toISOString(),
+  };
+}
+
+// ─── Auto-detect market type from question ─────────────────────────────────
+
+export async function fetchMarketData(question: string): Promise<MarketData> {
+  const q = question.toLowerCase();
+
+  // Gas price questions
+  if (q.includes("gas") || q.includes("gwei")) {
+    return fetchEthGasData();
+  }
+
+  // Crypto price questions — detect the token
+  for (const [symbol, _id] of Object.entries(COINGECKO_IDS)) {
+    if (q.includes(symbol.toLowerCase())) {
+      return fetchCryptoPrice(symbol);
+    }
+  }
+
+  // Default: fetch both ETH gas and ETH price for general ETH questions
+  if (q.includes("eth")) {
+    return fetchEthGasData();
+  }
+
+  // Fallback: try BTC if price is mentioned
+  if (q.includes("price") || q.includes("exceed") || q.includes("above") || q.includes("below")) {
+    // Try to find any crypto mention
+    return fetchEthGasData(); // Default to ETH gas
+  }
+
+  return fetchEthGasData();
+}
+
+// ─── Format data for AI prompt ─────────────────────────────────────────────
+
+export function formatMarketDataForPrompt(data: MarketData): string {
+  const lines = [`Market type: ${data.marketType}`];
+  for (const [key, value] of Object.entries(data.dataPoints)) {
+    if (value !== null) {
+      lines.push(`${key}: ${value}`);
+    }
+  }
+  lines.push(`Source: ${data.source}`);
+  lines.push(`Fetched at: ${data.fetchedAt}`);
+  return lines.join("\n");
+}
+
+// ─── CLI ────────────────────────────────────────────────────────────────────
+
+if (require.main === module) {
+  const query = process.argv[2] || "eth gas";
+  console.log(`Fetching data for: "${query}"\n`);
+
+  fetchMarketData(query)
+    .then((data) => console.log(JSON.stringify(data, null, 2)))
+    .catch((err) => {
+      console.error("Failed:", err.message);
+      process.exit(1);
+    });
+}