@atbash/sdk 0.10.10-dev.0 → 0.10.12-dev.0

package/README.md

@@ -111,8 +111,8 @@ Read-only methods that read from the Chromia blockchain and dashboard.
 | `getToolCallCount()` | Total number of tool calls on-chain |
 | `getToolCallFull(toolCallId)` | Full details of a single tool call |
 | `getOrgTierInfo(orgName)` | Check an org's tier and whether verdicts are enabled |
-| `getAgentDetail(pubkey)` | Get agent metadata (org, status, creation date) |
-| `getAgentPolicy(pubkey)` | Check the agent's policy pack and jail status |
+| `getAgentDetail(pubkey, options?)` | Get agent metadata (org, status, creation date) |
+| `getAgentPolicy(pubkey, options?)` | Check the agent's policy pack and jail status |
 | `getPendingHeldActions(orgName, maxCount)` | List actions waiting for operator approval |
 | `getHeldActionReviews(orgName, maxCount)` | List completed operator reviews |
 | `getSafetyStats()` | Chain-wide safety statistics |
@@ -148,6 +148,16 @@ const atbash = Atbash.fromConfig();   // reads env + config file
 
 Persistent config helpers: `saveUserConfig(config)`, `loadUserConfig()`, `resolve(key, flagValue?)`, `getConfigPath()`.
 
+Agent policy and detail reads can resolve the organization's active network, or
+accept an explicit network override:
+
+```ts
+await atbash.getAgentPolicy(atbash.pubkey, { orgName: "acme" });
+await atbash.getAgentDetail(atbash.pubkey, {
+  chainOpts: { network: "private" },
+});
+```
+
 ## Error handling
 
 The SDK throws standard `Error` objects. Known failure modes are enriched with a pointer to the dashboard page that fixes them:

package/dist/browser.d.mts

@@ -274,6 +274,13 @@ interface AgentPolicy {
     isCustom: boolean;
     defaultPolicy: string;
 }
+/** Options for agent metadata and policy lookups. */
+interface AgentLookupOptions {
+    /** Resolve the agent's network from this organization's active network. */
+    orgName?: string;
+    /** Explicit per-call chain override. `network` selects the dashboard chain. */
+    chainOpts?: ChainOpts;
+}
 /** Optional structured logger. */
 interface AtbashLogger {
     info?(...args: unknown[]): void;
@@ -521,8 +528,8 @@ declare class Atbash {
     getOrgTierInfo(orgName: string): Promise<TierInfo | null>;
     getPendingHeldActions(orgName: string, maxCount: number): Promise<HeldAction[]>;
     getHeldActionReviews(orgName: string, maxCount: number): Promise<HeldActionReview[]>;
-    getAgentDetail(agentPubkey: string): Promise<Record<string, unknown>>;
-    getAgentPolicy(agentPubkey: string): Promise<AgentPolicy>;
+    getAgentDetail(agentPubkey: string, options?: AgentLookupOptions): Promise<Record<string, unknown>>;
+    getAgentPolicy(agentPubkey: string, options?: AgentLookupOptions): Promise<AgentPolicy>;
     getSafetyStats(): Promise<Record<string, unknown>>;
     /**
      * Org's subscription on a specific chain. The `network` arg selects
@@ -573,6 +580,14 @@ declare class Atbash {
      * chains; otherwise the client's default.
      */
     private bridFromChainOpts;
+    /**
+     * Resolve the dashboard chain used by agent metadata/policy reads.
+     * Explicit per-call network overrides win; otherwise use the supplied org
+     * or the client's configured default org. A custom BRID is intentionally
+     * left untouched because it cannot be represented by the dashboard's
+     * public/private query selector.
+     */
+    private resolveAgentLookupNetwork;
     /**
      * Get-or-create a Bearer token for dashboard reads. The token is a
      * signed `log_tool_call` op (locally signed, never submitted) — the
@@ -1211,13 +1226,17 @@ declare function createMemoryGuardManager(opts: MemoryGuardManagerOptions): Memo
 /**
  * Atbash SDK Telemetry — OpenTelemetry metrics for usage tracking.
  *
- * Tracks: function call counts, latency, source (CLI/plugin/SDK),
- * and agent identity. ON by default.
+ * Metrics are POSTed to the Atbash-owned `/api/telemetry` proxy, which
+ * verifies the bearer, injects the Honeycomb ingest key server-side, and
+ * forwards to Honeycomb. The ingest credential never enters the SDK.
+ *
+ * Environment opt-out (recommended for air-gapped deployments):
+ * ATBASH_TELEMETRY_DISABLED=1
  *
  * Opt-out: create ~/.config/atbash/telemetry.json with { "enabled": false }
  * The file must be readable by the SDK process. If missing, corrupted, or
- * unreadable → telemetry stays ON. Environment variables cannot disable
- * telemetry (prevents agent bypass via env-var injection).
+ * unreadable, telemetry remains eligible to start unless the environment
+ * opt-out is set.
  */
 type ClientSource = "cli" | "sdk" | "plugin:openclaw" | "plugin:langchain" | "plugin:langgraph" | "plugin:hermes" | "plugin:eliza" | "plugin:crewai" | "plugin:mcp" | "plugin:autogen" | "plugin:jeenai" | (string & {});
 interface TelemetryConfig {
@@ -1227,6 +1246,13 @@ interface TelemetryConfig {
     source?: ClientSource;
     /** Flush interval in ms. Default: 60000 */
     exportIntervalMs?: number;
+    /** Atbash endpoint that hosts /api/telemetry. Required to actually export. */
+    endpoint?: string;
+    /**
+     * Called on every export to obtain fresh auth headers (typically
+     * `{ Authorization: "Bearer <hex>" }`). Required to actually export.
+     */
+    getAuthHeaders?: () => Record<string, string>;
 }
 declare function setupTelemetry(config: TelemetryConfig): void;
 /**
@@ -1346,4 +1372,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveMemory, getActiveMemoryId, getAllAgentMemory, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRollbackHistory, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveMemory, getActiveMemoryId, getAllAgentMemory, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRollbackHistory, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/browser.mjs

@@ -43452,9 +43452,6 @@ var native = {
   DEFAULT_BLOCKCHAIN_RID: ATBASH_BLOCKCHAIN_RID,
   DEFAULT_PRIVATE_BLOCKCHAIN_RID: ATBASH_PRIVATE_BLOCKCHAIN_RID,
   DEFAULT_ENDPOINT: ATBASH_ENDPOINT,
-  // Browser has no NAPI channel to Rust's HONEYCOMB_KEY — telemetry
-  // silently no-ops. `HONEYCOMB_API_KEY` env var still overrides at runtime.
-  HONEYCOMB_KEY: "",
   defaultChromiaNodeUrls: () => [...DEFAULT_CHROMIA_NODE_URLS_ARR],
   defaultPrivateNodeUrls: () => [...DEFAULT_PRIVATE_NODE_URLS_ARR],
   // Server-only surfaces — throw at runtime, keep types satisfied.
@@ -44678,6 +44675,16 @@ var Atbash = class _Atbash {
         verifying: this.verifyPubKey ? "with response-signature pubkey configured" : "without signature verification"
       });
     }
+    try {
+      setupTelemetry({
+        enabled: true,
+        source: "sdk",
+        endpoint: this.endpoint,
+        getAuthHeaders: () => this.authHeaders()
+      });
+    } catch (err) {
+      this.logger.warn?.("[atbash] telemetry setup failed \u2014 continuing without metrics", { error: String(err) });
+    }
   }
   /**
    * Say which environment this build talks to, once per process.
@@ -45191,19 +45198,25 @@ var Atbash = class _Atbash {
     });
   }
   /* ── risk-engine batched (action-dispatched POST) ──────────────────────── */
-  getAgentDetail(agentPubkey) {
-    return this.track(
-      "getAgentDetail",
-      agentPubkey,
-      () => this.riskEnginePost({ action: "agent-detail-batch", agent: agentPubkey })
-    );
+  async getAgentDetail(agentPubkey, options = {}) {
+    return this.track("getAgentDetail", agentPubkey, async () => {
+      const network = await this.resolveAgentLookupNetwork(options);
+      return this.riskEnginePost(
+        { action: "agent-detail-batch", agent: agentPubkey },
+        network
+      );
+    });
   }
-  async getAgentPolicy(agentPubkey) {
+  async getAgentPolicy(agentPubkey, options = {}) {
     return this.track("getAgentPolicy", agentPubkey, async () => {
-      const raw2 = await this.riskEnginePost({
-        action: "agent-policy-batch",
-        agent: agentPubkey
-      });
+      const network = await this.resolveAgentLookupNetwork(options);
+      const raw2 = await this.riskEnginePost(
+        {
+          action: "agent-policy-batch",
+          agent: agentPubkey
+        },
+        network
+      );
       return {
         policy: String(raw2.policy ?? ""),
         isJailed: Boolean(raw2.is_jailed),
@@ -45360,6 +45373,20 @@ var Atbash = class _Atbash {
     if (chainOpts?.network === "public") return PUBLIC_CHAIN.blockchainRid;
     return this.blockchainRid;
   }
+  /**
+   * Resolve the dashboard chain used by agent metadata/policy reads.
+   * Explicit per-call network overrides win; otherwise use the supplied org
+   * or the client's configured default org. A custom BRID is intentionally
+   * left untouched because it cannot be represented by the dashboard's
+   * public/private query selector.
+   */
+  async resolveAgentLookupNetwork(options) {
+    if (options.chainOpts?.network) return options.chainOpts.network;
+    if (options.chainOpts?.blockchainRid) return void 0;
+    const orgName = options.orgName ?? this.orgName;
+    if (!orgName) return void 0;
+    return (await this.resolveChainForOrg(orgName)).network;
+  }
   /**
    * Get-or-create a Bearer token for dashboard reads. The token is a
    * signed `log_tool_call` op (locally signed, never submitted) — the
@@ -45402,10 +45429,11 @@ var Atbash = class _Atbash {
     if (resp.status !== 200) throw await this.httpError(resp);
     return this.json(resp);
   }
-  async riskEnginePost(body) {
+  async riskEnginePost(body, network) {
     let resp;
     try {
-      resp = await this.http.post("/api/risk-engine", body, this.authHeaders());
+      const path4 = network ? `/api/risk-engine?network=${encodeURIComponent(network)}` : "/api/risk-engine";
+      resp = await this.http.post(path4, body, this.authHeaders());
     } catch (err) {
       throw this.transportError(err);
     }