@agentguard-run/spend 0.15.7 → 0.15.8

package/dist/index.js

@@ -21,9 +21,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.compressReceiptDag = exports.receiptSchemaVersion = exports.isReceiptV3 = exports.assertReceiptV3 = exports.isOpenRouterHost = exports.clearManagedOpenRouterKeyCache = exports.fetchManagedOpenRouterKey = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.NdjsonDecisionLogStore = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
-exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.defaultKey = exports.recommend = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.verifyConsentReceipt = exports.enforceCompliance = exports.AgentGuardConsentRequiredError = exports.AgentGuardComplianceError = exports.isForeignOriginModel = exports.inferCompliance = exports.inferHosting = exports.inferModelIdentity = exports.inferProviderRoute = exports.PROVIDER_REGISTRY = exports.captureProvenance = exports.verifyReceiptDag = exports.verifyInclusion = exports.signDagNode = exports.msgHashForDecision = exports.merkleRoot = exports.merkleInclusionProof = exports.gateCapability = exports.deriveTrustScore = exports.deriveCapability = exports.dagEnvelopeFromEntries = exports.computeDagEntryHash = void 0;
-exports.formatLineage = exports.workloadProvenance = exports.BONUS_THRESHOLD_PCT = exports.DEFAULT_FREE_LIMIT = exports.bonusMessage = exports.readFreeTierState = exports.maybeGrantFirstTimeBonus = exports.getMonthlyUsage = exports.centsToUsd = exports.decisionCents = exports.classifyOrigin = exports.aggregateLedger = exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = exports.formatBlockedTrace = void 0;
+exports.receiptSchemaVersion = exports.isReceiptV3 = exports.assertReceiptV3 = exports.isOpenRouterHost = exports.clearManagedOpenRouterKeyCache = exports.fetchManagedOpenRouterKey = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.NdjsonDecisionLogStore = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.detectSequenceGaps = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
+exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.defaultKey = exports.recommend = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.verifyConsentReceipt = exports.enforceCompliance = exports.AgentGuardConsentRequiredError = exports.AgentGuardComplianceError = exports.isForeignOriginModel = exports.inferCompliance = exports.inferHosting = exports.inferModelIdentity = exports.inferProviderRoute = exports.PROVIDER_REGISTRY = exports.captureProvenance = exports.verifyReceiptDag = exports.verifyInclusion = exports.signDagNode = exports.msgHashForDecision = exports.merkleRoot = exports.merkleInclusionProof = exports.gateCapability = exports.deriveTrustScore = exports.deriveCapability = exports.dagEnvelopeFromEntries = exports.computeDagEntryHash = exports.compressReceiptDag = void 0;
+exports.formatLineage = exports.workloadProvenance = exports.buildSampleVerifierHtml = exports.SAMPLE_FLOWS = exports.isSampleFlow = exports.buildSampleReceipt = exports.anchorDir = exports.anchorProofPath = exports.anchorIndexPath = exports.findAnchorForHead = exports.readAnchorIndexAt = exports.readAnchorIndex = exports.writeAnchorProof = exports.DEFAULT_OTS_CALENDARS = exports.OpenTimestampsAnchor = exports.merkleRootHex = exports.chainHeadDigestHex = exports.createAnchorFromEnv = exports.createAnchor = exports.BONUS_THRESHOLD_PCT = exports.DEFAULT_FREE_LIMIT = exports.bonusMessage = exports.readFreeTierState = exports.maybeGrantFirstTimeBonus = exports.getMonthlyUsage = exports.centsToUsd = exports.decisionCents = exports.classifyOrigin = exports.aggregateLedger = exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = exports.formatBlockedTrace = exports.t = void 0;
 const context_1 = require("./workflow/context");
 // Cost table
 var cost_table_1 = require("./cost-table");
@@ -53,6 +53,7 @@ Object.defineProperty(exports, "computeSignerFingerprint", { enumerable: true, g
 Object.defineProperty(exports, "signDecision", { enumerable: true, get: function () { return decision_log_1.signDecision; } });
 Object.defineProperty(exports, "verifyEntry", { enumerable: true, get: function () { return decision_log_1.verifyEntry; } });
 Object.defineProperty(exports, "verifyChain", { enumerable: true, get: function () { return decision_log_1.verifyChain; } });
+Object.defineProperty(exports, "detectSequenceGaps", { enumerable: true, get: function () { return decision_log_1.detectSequenceGaps; } });
 Object.defineProperty(exports, "GENESIS_PREVIOUS_HASH", { enumerable: true, get: function () { return decision_log_1.GENESIS_PREVIOUS_HASH; } });
 Object.defineProperty(exports, "InMemoryDecisionLogStore", { enumerable: true, get: function () { return decision_log_1.InMemoryDecisionLogStore; } });
 // In-memory spend store
@@ -163,7 +164,7 @@ Object.defineProperty(exports, "TRANSLATIONS", { enumerable: true, get: function
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return i18n_1.resolveLocale; } });
 Object.defineProperty(exports, "t", { enumerable: true, get: function () { return i18n_1.t; } });
 Object.defineProperty(exports, "formatBlockedTrace", { enumerable: true, get: function () { return i18n_1.formatBlockedTrace; } });
-exports.AGENTGUARD_SPEND_VERSION = '0.15.7';
+exports.AGENTGUARD_SPEND_VERSION = '0.15.8';
 exports.agentguard = {
     workflow: context_1.workflow,
 };
@@ -191,6 +192,28 @@ Object.defineProperty(exports, "readFreeTierState", { enumerable: true, get: fun
 Object.defineProperty(exports, "bonusMessage", { enumerable: true, get: function () { return usage_1.bonusMessage; } });
 Object.defineProperty(exports, "DEFAULT_FREE_LIMIT", { enumerable: true, get: function () { return usage_1.DEFAULT_FREE_LIMIT; } });
 Object.defineProperty(exports, "BONUS_THRESHOLD_PCT", { enumerable: true, get: function () { return usage_1.BONUS_THRESHOLD_PCT; } });
+// External timestamp anchoring (opt-in; zero data plane — only a hash leaves the machine)
+var anchor_1 = require("./anchor");
+Object.defineProperty(exports, "createAnchor", { enumerable: true, get: function () { return anchor_1.createAnchor; } });
+Object.defineProperty(exports, "createAnchorFromEnv", { enumerable: true, get: function () { return anchor_1.createAnchorFromEnv; } });
+Object.defineProperty(exports, "chainHeadDigestHex", { enumerable: true, get: function () { return anchor_1.chainHeadDigestHex; } });
+Object.defineProperty(exports, "merkleRootHex", { enumerable: true, get: function () { return anchor_1.merkleRootHex; } });
+Object.defineProperty(exports, "OpenTimestampsAnchor", { enumerable: true, get: function () { return anchor_1.OpenTimestampsAnchor; } });
+Object.defineProperty(exports, "DEFAULT_OTS_CALENDARS", { enumerable: true, get: function () { return anchor_1.DEFAULT_OTS_CALENDARS; } });
+Object.defineProperty(exports, "writeAnchorProof", { enumerable: true, get: function () { return anchor_1.writeAnchorProof; } });
+Object.defineProperty(exports, "readAnchorIndex", { enumerable: true, get: function () { return anchor_1.readAnchorIndex; } });
+Object.defineProperty(exports, "readAnchorIndexAt", { enumerable: true, get: function () { return anchor_1.readAnchorIndexAt; } });
+Object.defineProperty(exports, "findAnchorForHead", { enumerable: true, get: function () { return anchor_1.findAnchorForHead; } });
+Object.defineProperty(exports, "anchorIndexPath", { enumerable: true, get: function () { return anchor_1.anchorIndexPath; } });
+Object.defineProperty(exports, "anchorProofPath", { enumerable: true, get: function () { return anchor_1.anchorProofPath; } });
+Object.defineProperty(exports, "anchorDir", { enumerable: true, get: function () { return anchor_1.anchorDir; } });
+// Sample receipt artifacts (self-verifying; outreach)
+var flows_1 = require("./samples/flows");
+Object.defineProperty(exports, "buildSampleReceipt", { enumerable: true, get: function () { return flows_1.buildSampleReceipt; } });
+Object.defineProperty(exports, "isSampleFlow", { enumerable: true, get: function () { return flows_1.isSampleFlow; } });
+Object.defineProperty(exports, "SAMPLE_FLOWS", { enumerable: true, get: function () { return flows_1.SAMPLE_FLOWS; } });
+var verifier_html_1 = require("./samples/verifier-html");
+Object.defineProperty(exports, "buildSampleVerifierHtml", { enumerable: true, get: function () { return verifier_html_1.buildSampleVerifierHtml; } });
 // Model-agnostic provenance that survives hot-swap
 var portability_1 = require("./receipts/portability");
 Object.defineProperty(exports, "workloadProvenance", { enumerable: true, get: function () { return portability_1.workloadProvenance; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;AAEH,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,+EAA+E;AAC/E,wDAA0F;AAAjF,sHAAA,sBAAsB,OAAA;AAE/B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAMzB,oDAMgC;AAL9B,sHAAA,yBAAyB,OAAA;AACzB,2HAAA,8BAA8B,OAAA;AAC9B,6GAAA,gBAAgB,OAAA;AAoBlB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sCAuBwB;AAtBtB,yGAAA,kBAAkB,OAAA;AAClB,0GAAA,mBAAmB,OAAA;AACnB,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AACd,2GAAA,oBAAoB,OAAA;AACpB,iGAAA,UAAU,OAAA;AACV,yGAAA,kBAAkB,OAAA;AAClB,kGAAA,WAAW,OAAA;AACX,sGAAA,eAAe,OAAA;AACf,uGAAA,gBAAgB,OAAA;AAYlB,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAC9B,mCAAuG;AAA9F,mGAAA,SAAS,OAAA;AAAE,oGAAA,UAAU,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAGpC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B;AAC7B,wCAAsB;AAEtB,+CAA6B;AAC7B,mDAAiC;AAEjC,iCAAiC;AACjC,mDAQ+B;AAP7B,4GAAA,eAAe,OAAA;AACf,2GAAA,cAAc,OAAA;AACd,0GAAA,aAAa,OAAA;AACb,uGAAA,UAAU,OAAA;AAMZ,uEAAuE;AACvE,2CAW2B;AAVzB,wGAAA,eAAe,OAAA;AACf,iHAAA,wBAAwB,OAAA;AACxB,0GAAA,iBAAiB,OAAA;AACjB,qGAAA,YAAY,OAAA;AACZ,2GAAA,kBAAkB,OAAA;AAClB,4GAAA,mBAAmB,OAAA;AAOrB,mDAAmD;AACnD,sDAOgC;AAN9B,iHAAA,kBAAkB,OAAA;AAClB,4GAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;AAEH,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAYwB;AAXtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,kHAAA,kBAAkB,OAAA;AAClB,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAI1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,+EAA+E;AAC/E,wDAA0F;AAAjF,sHAAA,sBAAsB,OAAA;AAE/B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAMzB,oDAMgC;AAL9B,sHAAA,yBAAyB,OAAA;AACzB,2HAAA,8BAA8B,OAAA;AAC9B,6GAAA,gBAAgB,OAAA;AAoBlB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sCAuBwB;AAtBtB,yGAAA,kBAAkB,OAAA;AAClB,0GAAA,mBAAmB,OAAA;AACnB,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AACd,2GAAA,oBAAoB,OAAA;AACpB,iGAAA,UAAU,OAAA;AACV,yGAAA,kBAAkB,OAAA;AAClB,kGAAA,WAAW,OAAA;AACX,sGAAA,eAAe,OAAA;AACf,uGAAA,gBAAgB,OAAA;AAYlB,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAC9B,mCAAuG;AAA9F,mGAAA,SAAS,OAAA;AAAE,oGAAA,UAAU,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAGpC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B;AAC7B,wCAAsB;AAEtB,+CAA6B;AAC7B,mDAAiC;AAEjC,iCAAiC;AACjC,mDAQ+B;AAP7B,4GAAA,eAAe,OAAA;AACf,2GAAA,cAAc,OAAA;AACd,0GAAA,aAAa,OAAA;AACb,uGAAA,UAAU,OAAA;AAMZ,uEAAuE;AACvE,2CAW2B;AAVzB,wGAAA,eAAe,OAAA;AACf,iHAAA,wBAAwB,OAAA;AACxB,0GAAA,iBAAiB,OAAA;AACjB,qGAAA,YAAY,OAAA;AACZ,2GAAA,kBAAkB,OAAA;AAClB,4GAAA,mBAAmB,OAAA;AAOrB,0FAA0F;AAC1F,mCAoBkB;AAnBhB,sGAAA,YAAY,OAAA;AACZ,6GAAA,mBAAmB,OAAA;AACnB,4GAAA,kBAAkB,OAAA;AAClB,uGAAA,aAAa,OAAA;AACb,8GAAA,oBAAoB,OAAA;AACpB,+GAAA,qBAAqB,OAAA;AACrB,0GAAA,gBAAgB,OAAA;AAChB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,2GAAA,iBAAiB,OAAA;AACjB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,mGAAA,SAAS,OAAA;AASX,sDAAsD;AACtD,yCAMyB;AALvB,2GAAA,kBAAkB,OAAA;AAClB,qGAAA,YAAY,OAAA;AACZ,qGAAA,YAAY,OAAA;AAId,yDAA2F;AAAlF,wHAAA,uBAAuB,OAAA;AAEhC,mDAAmD;AACnD,sDAOgC;AAN9B,iHAAA,kBAAkB,OAAA;AAClB,4GAAA,aAAa,OAAA"}

package/dist/samples/flows.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Sample receipt flows.
+ *
+ * Realistic, self-contained example receipts for the three flows a prospect's
+ * counterparty would actually be handed: an x402 machine payment, a refund, and
+ * an agent purchase. Each carries a policy version, a delegated scope, a
+ * decision, a transaction reference, a provider, and an amount.
+ *
+ * These are SAMPLE parameters (fixed, illustrative). The signature and hash are
+ * REAL when signed by the CLI. Metadata only — never any prompt/completion.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { SpendDecision, SpendScope } from '../types';
+export type SampleFlow = 'x402-payment' | 'refund' | 'agent-purchase';
+export declare const SAMPLE_FLOWS: SampleFlow[];
+export declare function isSampleFlow(value: string): value is SampleFlow;
+export interface SampleReceiptSpec {
+    flow: SampleFlow;
+    scope: SpendScope;
+    decision: SpendDecision;
+    /** Metadata-only context describing the flow (delegated scope, tx ref, etc.). */
+    context: Record<string, unknown>;
+}
+export declare function buildSampleReceipt(flow: SampleFlow): SampleReceiptSpec;
+//# sourceMappingURL=flows.d.ts.map

package/dist/samples/flows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flows.d.ts","sourceRoot":"","sources":["../../src/samples/flows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE1D,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAEtE,eAAO,MAAM,YAAY,EAAE,UAAU,EAAiD,CAAC;AAEvF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAKD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,iBAAiB,CA2HtE"}

package/dist/samples/flows.js

@@ -0,0 +1,151 @@
+"use strict";
+/**
+ * Sample receipt flows.
+ *
+ * Realistic, self-contained example receipts for the three flows a prospect's
+ * counterparty would actually be handed: an x402 machine payment, a refund, and
+ * an agent purchase. Each carries a policy version, a delegated scope, a
+ * decision, a transaction reference, a provider, and an amount.
+ *
+ * These are SAMPLE parameters (fixed, illustrative). The signature and hash are
+ * REAL when signed by the CLI. Metadata only — never any prompt/completion.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAMPLE_FLOWS = void 0;
+exports.isSampleFlow = isSampleFlow;
+exports.buildSampleReceipt = buildSampleReceipt;
+exports.SAMPLE_FLOWS = ['x402-payment', 'refund', 'agent-purchase'];
+function isSampleFlow(value) {
+    return exports.SAMPLE_FLOWS.includes(value);
+}
+/** Deterministic ISO timestamp so sample artifacts are reproducible. */
+const SAMPLE_TS = '2026-07-16T15:30:00.000Z';
+function buildSampleReceipt(flow) {
+    switch (flow) {
+        case 'x402-payment':
+            return {
+                flow,
+                scope: { tenantId: 'acme-agents', agentId: 'checkout-bot-v2', provider: 'openai' },
+                decision: {
+                    decisionId: 'sample-x402-payment-0001',
+                    timestamp: SAMPLE_TS,
+                    action: 'allow',
+                    triggeredCap: null,
+                    triggeredScopeKey: 'tenantId=acme-agents|agentId=checkout-bot-v2',
+                    projectedCents: 1299,
+                    windowSpendBefore: 0,
+                    windowSpendAfter: 1299,
+                    provider: 'openai',
+                    modelRequested: 'gpt-5',
+                    modelResolved: 'gpt-5',
+                    policyId: 'payments-x402-v3',
+                    policyVersion: 3,
+                    enforcementMode: 'enforce',
+                    reasons: ['Within per_day cap ($500.00)', 'capability=payment_execute satisfied'],
+                    entryType: 'outcome',
+                    outcomeReceipt: {
+                        flow: 'x402-payment',
+                        protocol: 'x402',
+                        transactionReference: '0x9f2c4a7b3e1d8c6f0a5b2e9d4c7f1a3b6e8d0c2f4a7b9e1d3c5f8a0b2e4d6c9f',
+                        settlementRail: 'USDC (base)',
+                        amountCents: 1299,
+                        currency: 'USD',
+                        delegatedScope: ['payment_execute', 'read_only'],
+                        capabilityTier: 'payment_execute',
+                        counterparty: 'api.example-merchant.com',
+                        outcome: 'settled',
+                    },
+                },
+                context: {
+                    summary: 'Autonomous agent paid $12.99 to an x402-gated API under a delegated payment scope.',
+                },
+            };
+        case 'refund':
+            return {
+                flow,
+                scope: { tenantId: 'acme-agents', agentId: 'support-bot-v4', provider: 'anthropic' },
+                decision: {
+                    decisionId: 'sample-refund-0001',
+                    timestamp: SAMPLE_TS,
+                    action: 'allow',
+                    triggeredCap: null,
+                    triggeredScopeKey: 'tenantId=acme-agents|agentId=support-bot-v4',
+                    projectedCents: 4500,
+                    windowSpendBefore: 12000,
+                    windowSpendAfter: 16500,
+                    provider: 'anthropic',
+                    modelRequested: 'claude-sonnet-4-6',
+                    modelResolved: 'claude-sonnet-4-6',
+                    policyId: 'refunds-support-v2',
+                    policyVersion: 2,
+                    enforcementMode: 'enforce',
+                    reasons: ['Refund under $50.00 auto-approval threshold', 'capability=payment_initiate satisfied'],
+                    entryType: 'outcome',
+                    outcomeReceipt: {
+                        flow: 'refund',
+                        transactionReference: 're_3PqL8k2eZvKYlo2C1a4b7c9d',
+                        originalChargeReference: 'ch_3PqK1j9dYuJXkn1B0z3a6b8c',
+                        provider: 'stripe',
+                        amountCents: 4500,
+                        currency: 'USD',
+                        delegatedScope: ['payment_initiate', 'read_only'],
+                        capabilityTier: 'payment_initiate',
+                        reasonCode: 'requested_by_customer',
+                        outcome: 'settled',
+                    },
+                },
+                context: {
+                    summary: 'Support agent issued a $45.00 refund within a delegated refund scope and auto-approval cap.',
+                },
+            };
+        case 'agent-purchase':
+            return {
+                flow,
+                scope: { tenantId: 'acme-agents', agentId: 'procurement-bot-v1', provider: 'bedrock' },
+                decision: {
+                    decisionId: 'sample-agent-purchase-0001',
+                    timestamp: SAMPLE_TS,
+                    action: 'downgrade',
+                    triggeredCap: {
+                        amountCents: 20000,
+                        window: 'per_day',
+                        action: 'downgrade',
+                        downgradeTo: 'amazon.nova-lite-v1:0',
+                        reason: 'Daily model budget reached; routing to fallback model',
+                    },
+                    triggeredScopeKey: 'tenantId=acme-agents|agentId=procurement-bot-v1',
+                    projectedCents: 8800,
+                    windowSpendBefore: 19500,
+                    windowSpendAfter: 19980,
+                    provider: 'bedrock',
+                    modelRequested: 'anthropic.claude-opus-4-v1:0',
+                    modelResolved: 'amazon.nova-lite-v1:0',
+                    policyId: 'procurement-agent-v5',
+                    policyVersion: 5,
+                    enforcementMode: 'enforce',
+                    reasons: ['Per_day model budget reached, routed to fallback model', 'capability=data_write satisfied'],
+                    entryType: 'outcome',
+                    actualCents: 480,
+                    outcomeReceipt: {
+                        flow: 'agent-purchase',
+                        transactionReference: 'po-2026-07-16-000482',
+                        provider: 'internal-procurement-api',
+                        amountCents: 480,
+                        currency: 'USD',
+                        delegatedScope: ['data_write', 'read_only'],
+                        capabilityTier: 'data_write',
+                        item: 'SKU-44821 (office supplies, qty 3)',
+                        outcome: 'settled',
+                    },
+                },
+                context: {
+                    summary: 'Procurement agent purchase was allowed but auto-downgraded to a cheaper model when the daily model budget was hit.',
+                },
+            };
+    }
+}
+//# sourceMappingURL=flows.js.map

package/dist/samples/flows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flows.js","sourceRoot":"","sources":["../../src/samples/flows.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAQH,oCAEC;AAaD,gDA2HC;AA5IY,QAAA,YAAY,GAAiB,CAAC,cAAc,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAEvF,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAQ,oBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAUD,wEAAwE;AACxE,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAE7C,SAAgB,kBAAkB,CAAC,IAAgB;IACjD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAClF,QAAQ,EAAE;oBACR,UAAU,EAAE,0BAA0B;oBACtC,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,OAAO;oBACf,YAAY,EAAE,IAAI;oBAClB,iBAAiB,EAAE,8CAA8C;oBACjE,cAAc,EAAE,IAAI;oBACpB,iBAAiB,EAAE,CAAC;oBACpB,gBAAgB,EAAE,IAAI;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,cAAc,EAAE,OAAO;oBACvB,aAAa,EAAE,OAAO;oBACtB,QAAQ,EAAE,kBAAkB;oBAC5B,aAAa,EAAE,CAAC;oBAChB,eAAe,EAAE,SAAS;oBAC1B,OAAO,EAAE,CAAC,8BAA8B,EAAE,sCAAsC,CAAC;oBACjF,SAAS,EAAE,SAAS;oBACpB,cAAc,EAAE;wBACd,IAAI,EAAE,cAAc;wBACpB,QAAQ,EAAE,MAAM;wBAChB,oBAAoB,EAAE,oEAAoE;wBAC1F,cAAc,EAAE,aAAa;wBAC7B,WAAW,EAAE,IAAI;wBACjB,QAAQ,EAAE,KAAK;wBACf,cAAc,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC;wBAChD,cAAc,EAAE,iBAAiB;wBACjC,YAAY,EAAE,0BAA0B;wBACxC,OAAO,EAAE,SAAS;qBACnB;iBACF;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,oFAAoF;iBAC9F;aACF,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACpF,QAAQ,EAAE;oBACR,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,OAAO;oBACf,YAAY,EAAE,IAAI;oBAClB,iBAAiB,EAAE,6CAA6C;oBAChE,cAAc,EAAE,IAAI;oBACpB,iBAAiB,EAAE,KAAK;oBACxB,gBAAgB,EAAE,KAAK;oBACvB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,mBAAmB;oBACnC,aAAa,EAAE,mBAAmB;oBAClC,QAAQ,EAAE,oBAAoB;oBAC9B,aAAa,EAAE,CAAC;oBAChB,eAAe,EAAE,SAAS;oBAC1B,OAAO,EAAE,CAAC,6CAA6C,EAAE,uCAAuC,CAAC;oBACjG,SAAS,EAAE,SAAS;oBACpB,cAAc,EAAE;wBACd,IAAI,EAAE,QAAQ;wBACd,oBAAoB,EAAE,6BAA6B;wBACnD,uBAAuB,EAAE,6BAA6B;wBACtD,QAAQ,EAAE,QAAQ;wBAClB,WAAW,EAAE,IAAI;wBACjB,QAAQ,EAAE,KAAK;wBACf,cAAc,EAAE,CAAC,kBAAkB,EAAE,WAAW,CAAC;wBACjD,cAAc,EAAE,kBAAkB;wBAClC,UAAU,EAAE,uBAAuB;wBACnC,OAAO,EAAE,SAAS;qBACnB;iBACF;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,6FAA6F;iBACvG;aACF,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE;gBACtF,QAAQ,EAAE;oBACR,UAAU,EAAE,4BAA4B;oBACxC,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,WAAW;oBACnB,YAAY,EAAE;wBACZ,WAAW,EAAE,KAAK;wBAClB,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,WAAW;wBACnB,WAAW,EAAE,uBAAuB;wBACpC,MAAM,EAAE,uDAAuD;qBAChE;oBACD,iBAAiB,EAAE,iDAAiD;oBACpE,cAAc,EAAE,IAAI;oBACpB,iBAAiB,EAAE,KAAK;oBACxB,gBAAgB,EAAE,KAAK;oBACvB,QAAQ,EAAE,SAAS;oBACnB,cAAc,EAAE,8BAA8B;oBAC9C,aAAa,EAAE,uBAAuB;oBACtC,QAAQ,EAAE,sBAAsB;oBAChC,aAAa,EAAE,CAAC;oBAChB,eAAe,EAAE,SAAS;oBAC1B,OAAO,EAAE,CAAC,wDAAwD,EAAE,iCAAiC,CAAC;oBACtG,SAAS,EAAE,SAAS;oBACpB,WAAW,EAAE,GAAG;oBAChB,cAAc,EAAE;wBACd,IAAI,EAAE,gBAAgB;wBACtB,oBAAoB,EAAE,sBAAsB;wBAC5C,QAAQ,EAAE,0BAA0B;wBACpC,WAAW,EAAE,GAAG;wBAChB,QAAQ,EAAE,KAAK;wBACf,cAAc,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;wBAC3C,cAAc,EAAE,YAAY;wBAC5B,IAAI,EAAE,oCAAoC;wBAC1C,OAAO,EAAE,SAAS;qBACnB;iBACF;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,oHAAoH;iBAC9H;aACF,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/samples/verifier-html.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Standalone, self-verifying HTML for a sample receipt.
+ *
+ * The generated page embeds the receipt and, on load, re-derives the entry hash
+ * from the receipt's canonical JSON (SubtleCrypto SHA-256) and verifies the
+ * Ed25519 signature (SubtleCrypto Ed25519, where supported) — entirely
+ * in-browser, no network. If the browser lacks WebCrypto Ed25519, the hash
+ * chain is still checked and the page links to agentguard.run/verify with the
+ * receipt prefilled for signature verification.
+ *
+ * The in-browser canonicalJson MUST match src/decision-log.ts canonicalJson so
+ * the recomputed hash equals the signed entryHash.
+ */
+export interface SampleVerifierData {
+    flow: string;
+    version: string;
+    entry: {
+        sequence: number;
+        decision: unknown;
+        previousHash: string;
+        entryHash: string;
+        signature: string;
+        signerFingerprint: string;
+    };
+    publicKeyHex: string;
+    context: Record<string, unknown>;
+}
+export declare function buildSampleVerifierHtml(data: SampleVerifierData): string;
+//# sourceMappingURL=verifier-html.d.ts.map

package/dist/samples/verifier-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier-html.d.ts","sourceRoot":"","sources":["../../src/samples/verifier-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAuKxE"}

package/dist/samples/verifier-html.js

@@ -0,0 +1,188 @@
+"use strict";
+/**
+ * Standalone, self-verifying HTML for a sample receipt.
+ *
+ * The generated page embeds the receipt and, on load, re-derives the entry hash
+ * from the receipt's canonical JSON (SubtleCrypto SHA-256) and verifies the
+ * Ed25519 signature (SubtleCrypto Ed25519, where supported) — entirely
+ * in-browser, no network. If the browser lacks WebCrypto Ed25519, the hash
+ * chain is still checked and the page links to agentguard.run/verify with the
+ * receipt prefilled for signature verification.
+ *
+ * The in-browser canonicalJson MUST match src/decision-log.ts canonicalJson so
+ * the recomputed hash equals the signed entryHash.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildSampleVerifierHtml = buildSampleVerifierHtml;
+function buildSampleVerifierHtml(data) {
+    // Embed as JSON in a script tag (safe against </script> injection).
+    const payload = JSON.stringify(data).replace(/</g, '\\u003c');
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8" />
+<title>AgentGuard Sample Receipt · ${escapeHtml(data.flow)}</title>
+<meta name="viewport" content="width=device-width,initial-scale=1" />
+<style>
+:root { --bg:#07101E; --surface:#0C1828; --border:rgba(42,188,180,0.22); --teal:#2abcb4; --text:#EAF2F6; --muted:#8AA0B3; --green:#4ade80; --red:#FF6B6B; --amber:#F1C40F; }
+* { box-sizing:border-box; margin:0; padding:0; }
+body { background:var(--bg); color:var(--text); font-family:-apple-system,system-ui,'DM Sans',sans-serif; line-height:1.5; padding:32px 16px; }
+.wrap { max-width:820px; margin:0 auto; }
+.brand { display:flex; align-items:center; gap:10px; margin-bottom:8px; }
+.hex { width:22px; height:22px; background:var(--teal); color:var(--bg); display:inline-flex; align-items:center; justify-content:center; font-weight:800; border-radius:4px; }
+h1 { font-size:20px; font-weight:800; }
+.sub { color:var(--muted); font-size:13px; margin-bottom:22px; }
+.card { background:var(--surface); border:1px solid var(--border); border-radius:10px; padding:20px 22px; margin-bottom:18px; }
+.card h2 { font-size:11px; letter-spacing:.14em; text-transform:uppercase; color:var(--teal); margin-bottom:14px; font-family:ui-monospace,monospace; }
+.row { display:flex; justify-content:space-between; gap:16px; padding:7px 0; border-bottom:1px solid rgba(255,255,255,.06); font-size:14px; }
+.row:last-child { border-bottom:none; }
+.row .k { color:var(--muted); }
+.row .v { font-family:ui-monospace,monospace; text-align:right; word-break:break-all; }
+.check { display:flex; align-items:flex-start; gap:10px; padding:9px 0; font-size:14px; }
+.check .dot { width:18px; flex:0 0 18px; }
+.ok { color:var(--green); } .bad { color:var(--red); } .warn { color:var(--amber); } .pending { color:var(--muted); }
+pre { background:#050b14; border:1px solid rgba(255,255,255,.08); border-radius:8px; padding:14px; overflow-x:auto; font-size:12px; color:#cfe; }
+a { color:var(--teal); }
+.foot { color:var(--muted); font-size:12px; text-align:center; margin-top:24px; }
+.badge { display:inline-block; font-family:ui-monospace,monospace; font-size:12px; padding:4px 10px; border-radius:4px; border:1px solid var(--border); }
+</style></head>
+<body><div class="wrap">
+  <div class="brand"><span class="hex">&#9187;</span><h1>AgentGuard&#174; Sample Receipt</h1></div>
+  <div class="sub">Flow: <b>${escapeHtml(data.flow)}</b> &middot; Self-verifying, offline. This is exactly what your counterparty would receive.</div>
+
+  <div class="card">
+    <h2>Verification</h2>
+    <div id="verdict" class="badge pending">verifying&hellip;</div>
+    <div id="checks" style="margin-top:12px"></div>
+    <div id="fallback" style="margin-top:12px; display:none" class="sub"></div>
+  </div>
+
+  <div class="card">
+    <h2>Receipt summary</h2>
+    <div id="summary"></div>
+  </div>
+
+  <div class="card">
+    <h2>Raw signed entry</h2>
+    <pre id="raw"></pre>
+  </div>
+
+  <div class="foot">
+    Signature scheme: Ed25519 over SHA-256 of canonical JSON. Zero data plane &mdash; no prompt or completion content is present.<br/>
+    <a href="https://agentguard.run/verify">agentguard.run/verify</a> &middot; <a href="https://www.npmjs.com/package/@agentguard-run/spend">npm: @agentguard-run/spend</a>
+  </div>
+</div>
+
+<script type="application/json" id="agentguard-receipt">${payload}</script>
+<script>
+(function () {
+  var DATA = JSON.parse(document.getElementById('agentguard-receipt').textContent);
+  var entry = DATA.entry;
+
+  // canonicalJson MUST match src/decision-log.ts exactly.
+  function canonicalJson(value) {
+    if (value === null || typeof value !== 'object') {
+      if (typeof value === 'number' && !isFinite(value)) throw new Error('non-finite');
+      return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) return '[' + value.map(canonicalJson).join(',') + ']';
+    var keys = Object.keys(value).sort();
+    return '{' + keys.map(function (k) { return JSON.stringify(k) + ':' + canonicalJson(value[k]); }).join(',') + '}';
+  }
+  function hexToBytes(hex) {
+    var out = new Uint8Array(hex.length / 2);
+    for (var i = 0; i < out.length; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);
+    return out;
+  }
+  function bytesToHex(buf) {
+    var b = new Uint8Array(buf), s = '';
+    for (var i = 0; i < b.length; i++) s += b[i].toString(16).padStart(2, '0');
+    return s;
+  }
+  function esc(s) { return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) { return ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]; }); }
+
+  var checksEl = document.getElementById('checks');
+  var results = [];
+  function addCheck(state, text) {
+    results.push(state);
+    var cls = state === true ? 'ok' : state === 'pending' ? 'pending' : state === 'warn' ? 'warn' : 'bad';
+    var mark = state === true ? '&#10003;' : state === 'pending' ? '&#8987;' : state === 'warn' ? '&#9888;' : '&#10007;';
+    checksEl.innerHTML += '<div class="check ' + cls + '"><span class="dot">' + mark + '</span><span>' + text + '</span></div>';
+  }
+
+  function renderSummary() {
+    var d = entry.decision || {};
+    var oc = d.outcomeReceipt || {};
+    var rows = [
+      ['Flow', DATA.flow],
+      ['Decision', d.action],
+      ['Provider', d.provider],
+      ['Model (requested)', d.modelRequested],
+      ['Model (resolved)', d.modelResolved],
+      ['Policy', d.policyId + ' v' + d.policyVersion],
+      ['Delegated scope', (oc.delegatedScope || []).join(', ')],
+      ['Capability tier', oc.capabilityTier],
+      ['Transaction reference', oc.transactionReference],
+      ['Amount', oc.amountCents != null ? ('$' + (oc.amountCents / 100).toFixed(2) + ' ' + (oc.currency || '')) : ''],
+      ['Signer fingerprint', entry.signerFingerprint]
+    ];
+    document.getElementById('summary').innerHTML = rows.filter(function (r) { return r[1]; }).map(function (r) {
+      return '<div class="row"><span class="k">' + esc(r[0]) + '</span><span class="v">' + esc(r[1]) + '</span></div>';
+    }).join('');
+    document.getElementById('raw').textContent = JSON.stringify(entry, null, 2);
+  }
+
+  function setVerdict() {
+    var el = document.getElementById('verdict');
+    var anyBad = results.indexOf(false) !== -1;
+    var anyPending = results.indexOf('pending') !== -1;
+    if (anyBad) { el.textContent = '✗ verification FAILED'; el.className = 'badge bad'; el.style.borderColor = 'var(--red)'; }
+    else if (anyPending) { el.textContent = '⚠ hash chain valid; signature not checked here'; el.className = 'badge warn'; el.style.borderColor = 'var(--amber)'; }
+    else { el.textContent = '✓ receipt verified'; el.className = 'badge ok'; el.style.borderColor = 'var(--green)'; }
+  }
+
+  function showFallback() {
+    var fb = document.getElementById('fallback');
+    fb.style.display = 'block';
+    fb.innerHTML = 'This browser lacks WebCrypto Ed25519, so the signature was not checked locally. ' +
+      'Verify the signature at <a href="https://agentguard.run/verify" target="_blank" rel="noopener">agentguard.run/verify</a> ' +
+      'or run <code>agentguard verify</code> on the receipt.json.';
+  }
+
+  (async function run() {
+    renderSummary();
+    // 1) Genesis linkage
+    var isGenesis = entry.previousHash === '0'.repeat(64);
+    addCheck(isGenesis ? true : 'warn', 'previousHash is ' + (isGenesis ? 'genesis (chain start)' : 'a prior entry hash'));
+
+    // 2) Entry hash recomputation
+    var payload = { sequence: entry.sequence, decision: entry.decision, previousHash: entry.previousHash, signerFingerprint: entry.signerFingerprint };
+    var enc = new TextEncoder().encode(canonicalJson(payload));
+    var digest = await crypto.subtle.digest('SHA-256', enc);
+    var recomputed = bytesToHex(digest);
+    var hashOk = recomputed === entry.entryHash;
+    addCheck(hashOk, 'entry hash matches canonical JSON (SHA-256)' + (hashOk ? '' : ' &mdash; MISMATCH'));
+
+    // 3) Ed25519 signature (WebCrypto where available)
+    var sigChecked = false;
+    try {
+      var pub = await crypto.subtle.importKey('raw', hexToBytes(DATA.publicKeyHex), { name: 'Ed25519' }, false, ['verify']);
+      var okSig = await crypto.subtle.verify('Ed25519', pub, hexToBytes(entry.signature), hexToBytes(entry.entryHash));
+      addCheck(okSig, 'Ed25519 signature ' + (okSig ? 'valid for the embedded public key' : 'INVALID'));
+      sigChecked = true;
+    } catch (e) {
+      addCheck('pending', 'Ed25519 signature not checked (browser lacks WebCrypto Ed25519)');
+    }
+    if (!sigChecked) showFallback();
+    setVerdict();
+  })().catch(function (e) {
+    addCheck(false, 'verifier error: ' + esc(e && e.message || e));
+    setVerdict();
+  });
+})();
+</script>
+</body></html>
+`;
+}
+function escapeHtml(value) {
+    return String(value == null ? '' : value).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+}
+//# sourceMappingURL=verifier-html.js.map

package/dist/samples/verifier-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier-html.js","sourceRoot":"","sources":["../../src/samples/verifier-html.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAiBH,0DAuKC;AAvKD,SAAgB,uBAAuB,CAAC,IAAwB;IAC9D,oEAAoE;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9D,OAAO;;qCAE4B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;8BA2B5B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;0DAyBO,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6GhE,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAClE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAY,CAAA,CACvF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.15.7",
+  "version": "0.15.8",
   "description": "All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographically-signed records produced by the software. Full functional-use disclaimer in README.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/bindings/bindings-enforce.test.ts

@@ -0,0 +1,97 @@
+import test from 'node:test';
+import { strict as assert } from 'assert';
+import { withSpendGuard, AgentGuardBlockedError } from '../spend-guard';
+import { withSpendGuardAnthropic } from './anthropic';
+import { withSpendGuardBedrock } from './bedrock';
+import { InMemorySpendStore } from '../store-memory';
+import { InMemoryDecisionLogStore } from '../decision-log';
+import { clearCostOverrides, setCostOverride } from '../cost-table';
+import type { SpendPolicy } from '../types';
+
+const scope = { tenantId: 'enforce-test' };
+
+// A per_call cap of 1c that blocks: any priced call (>1c) is denied. Enforcement
+// is a hard deterministic limit — identical semantics across every binding.
+function blockPolicy(): SpendPolicy {
+  return {
+    id: 'enforce-block',
+    name: 'enforce block',
+    scope,
+    caps: [{ window: 'per_call', amountCents: 1, action: 'block' }],
+    mode: 'enforce',
+    version: 1,
+    effectiveFrom: '2026-07-16T00:00:00.000Z',
+  };
+}
+
+function harness() {
+  clearCostOverrides();
+  // Deterministic priced models per provider family.
+  setCostOverride('gpt-price-test', { inputCentsPerKtok: 100, outputCentsPerKtok: 100 });
+  setCostOverride('claude-price-test', { inputCentsPerKtok: 100, outputCentsPerKtok: 100 });
+  setCostOverride('amazon.price-test', { inputCentsPerKtok: 100, outputCentsPerKtok: 100 });
+  return {
+    spendStore: new InMemorySpendStore(),
+    logStore: new InMemoryDecisionLogStore(),
+    tokenEstimator: () => 1000,
+  };
+}
+
+test('OpenAI binding: priced call over the cap is BLOCKED and provider never called', async () => {
+  const cfg = harness();
+  let providerCalled = false;
+  const client = withSpendGuard(
+    { chat: { completions: { create: async () => { providerCalled = true; return {}; } } } },
+    { policy: blockPolicy(), scope, config: cfg },
+  );
+  await assert.rejects(
+    () => client.chat.completions.create({ model: 'gpt-price-test', messages: [{ content: 'x' }], max_tokens: 1000 }),
+    (e) => e instanceof AgentGuardBlockedError && e.decision.action === 'block' && e.decision.projectedCents === 200,
+  );
+  assert.equal(providerCalled, false, 'block prevents the provider dispatch');
+});
+
+test('Anthropic binding: priced call over the cap is BLOCKED', async () => {
+  const cfg = harness();
+  let providerCalled = false;
+  const client = withSpendGuardAnthropic(
+    { messages: { create: async () => { providerCalled = true; return {}; } } },
+    { policy: blockPolicy(), scope, config: cfg },
+  );
+  await assert.rejects(
+    () => client.messages.create({ model: 'claude-price-test', messages: [{ role: 'user', content: 'x' }], max_tokens: 1000 }),
+    (e) => e instanceof AgentGuardBlockedError && e.decision.projectedCents === 200,
+  );
+  assert.equal(providerCalled, false);
+});
+
+test('Bedrock binding: priced InvokeModel call over the cap is BLOCKED', async () => {
+  const cfg = harness();
+  let providerCalled = false;
+  class InvokeModelCommand { constructor(public input: Record<string, unknown>) {} }
+  const client = withSpendGuardBedrock(
+    { send: async () => { providerCalled = true; return {}; } },
+    { policy: blockPolicy(), scope, config: cfg },
+  );
+  await assert.rejects(
+    () => client.send(new InvokeModelCommand({
+      modelId: 'amazon.price-test',
+      body: JSON.stringify({ max_tokens: 1000, messages: [{ role: 'user', content: [{ type: 'text', text: 'x' }] }] }),
+    })),
+    (e) => e instanceof AgentGuardBlockedError && e.decision.projectedCents === 200,
+  );
+  assert.equal(providerCalled, false);
+});
+
+test('non-InvokeModel Bedrock commands pass through ungated (cost/enforce only on inference)', async () => {
+  const cfg = harness();
+  let passed = false;
+  class ListFoundationModelsCommand { constructor(public input: Record<string, unknown>) {} }
+  const client = withSpendGuardBedrock(
+    { send: async () => { passed = true; return { models: [] }; } },
+    { policy: blockPolicy(), scope, config: cfg },
+  );
+  const res = await client.send(new ListFoundationModelsCommand({}));
+  assert.deepEqual(res, { models: [] });
+  assert.equal(passed, true);
+});

package/src/dashboard/aggregate.ts

@@ -99,7 +99,14 @@ export interface CfoDashboard {
   byProvider: BucketSpend[];
   byBuilderCode: BucketSpend[];
   scopeKeyBreakdown: BucketSpend[];  // best-effort from triggeredScopeKey (may be sparse)
-  integrity: { verified: boolean; entries: number; reason?: string; sequence?: number };
+  integrity: {
+    verified: boolean;
+    entries: number;
+    reason?: string;
+    sequence?: number;
+    /** Completeness signal: missing per-signer sequence numbers (possible omitted actions). */
+    sequenceGaps?: number[];
+  };
 }
 
 function topBuckets(map: Map<string, BucketSpend>, limit = 50): BucketSpend[] {