Tinfoil Go Client

package main

import (
	"context"
	"fmt"
	"log"
	"os"

	"github.com/openai/openai-go/v3"
	"github.com/openai/openai-go/v3/option"
	"github.com/tinfoilsh/tinfoil-go"
)

func main() {
	client, err := tinfoil.NewClient(
		option.WithAPIKey(os.Getenv("TINFOIL_API_KEY")),
	)
	if err != nil {
		log.Fatalf("Failed to create client: %v", err)
	}

	// Enclave verification and encryption happen automatically.
	chatCompletion, err := client.Chat.Completions.New(context.TODO(), openai.ChatCompletionNewParams{
		Messages: []openai.ChatCompletionMessageParamUnion{
			openai.UserMessage("Say this is a test"),
		},
		Model: "llama3-3-70b", // see https://docs.tinfoil.sh/models/catalog
	})
	if err != nil {
		log.Fatalf("Chat completion error: %v", err)
	}

	fmt.Println(chatCompletion.Choices[0].Message.Content)
}

document := client.Verification()
fmt.Println(document.ConfigRepo, document.CodeTag, document.CodeDigest)
fmt.Println(document.Verifier.Name, document.Verifier.Version)
fmt.Println(document.VerifiedAt)

// Pin a stable, opaque secret for this client (or set TINFOIL_USER_CACHE_SECRET).
client, err := tinfoil.NewClientWithOptions(
	tinfoil.WithUserCacheSecret(secret),
)

// A per-request value wins over the client-level secret.
completion, err := client.Chat.Completions.New(ctx, params,
	option.WithJSONSet("user_cache_secret", perUserSecret))

// Target a specific enclave and repository
client, err := tinfoil.NewClientWithOptions(tinfoil.WithEnclave(enclave), tinfoil.WithRepo(repo))

// Make verified HTTP requests to the enclave directly
httpClient := client.HTTPClient()
resp, err := httpClient.Get(fmt.Sprintf("https://%s/health", enclave))

var config *tinfoil.ConfigurationError
var fetch *tinfoil.FetchError
var attestation *tinfoil.AttestationError
switch {
case errors.As(err, &config):
	// Invalid arguments or client configuration.
case errors.As(err, &fetch):
	// Attestation material could not be fetched; retry may help.
case errors.As(err, &attestation):
	// Verification or channel binding failed; do not trust this result.
}