@atbash/sdk 0.10.12-dev.0 → 0.12.0-dev.0

package/dist/browser.mjs

@@ -37,7 +37,7 @@ var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__
 var define_ATBASH_CHROMIA_NODE_URLS_default;
 var init_define_ATBASH_CHROMIA_NODE_URLS = __esm({
   "<define:__ATBASH_CHROMIA_NODE_URLS__>"() {
-    define_ATBASH_CHROMIA_NODE_URLS_default = ["https://node0.testnet.chromia.com:7740", "https://node1.testnet.chromia.com:7740", "https://node3.testnet.chromia.com:7740"];
+    define_ATBASH_CHROMIA_NODE_URLS_default = ["https://node0.testnet.chromia.com:7740", "https://node1.testnet.chromia.com:7740"];
   }
 });
 
@@ -45,7 +45,7 @@ var init_define_ATBASH_CHROMIA_NODE_URLS = __esm({
 var define_ATBASH_PRIVATE_NODE_URLS_default;
 var init_define_ATBASH_PRIVATE_NODE_URLS = __esm({
   "<define:__ATBASH_PRIVATE_NODE_URLS__>"() {
-    define_ATBASH_PRIVATE_NODE_URLS_default = ["https://node0-pvn-testnet.dynamic.chromia.dev"];
+    define_ATBASH_PRIVATE_NODE_URLS_default = ["https://node0-pvn-testnet.dynamic.chromia.dev:7740", "https://node1-pvn-testnet.dynamic.chromia.dev:7740", "https://node2-pvn-testnet.dynamic.chromia.dev:7740"];
   }
 });
 
@@ -43478,9 +43478,10 @@ var native = {
   validateMemoryId: stub("validateMemoryId"),
   validateRollbackReason: stub("validateRollbackReason"),
   validateMemoryNonce: stub("validateMemoryNonce"),
+  validateFilePath: stub("validateFilePath"),
   buildGetActiveMemoryIdQuery: stub("buildGetActiveMemoryIdQuery"),
-  buildGetAgentMemoryQuery: stub("buildGetAgentMemoryQuery"),
-  buildGetAllAgentMemoryQuery: stub("buildGetAllAgentMemoryQuery"),
+  buildGetRecentAgentMemoryQuery: stub("buildGetRecentAgentMemoryQuery"),
+  buildGetActiveAgentMemoryQuery: stub("buildGetActiveAgentMemoryQuery"),
   buildGetAgentMemoryHistoryQuery: stub("buildGetAgentMemoryHistoryQuery"),
   buildGetAgentMemoryRollbackHistoryQuery: stub("buildGetAgentMemoryRollbackHistoryQuery"),
   buildGetAgentMemoryByIdQuery: stub("buildGetAgentMemoryByIdQuery"),
@@ -43499,13 +43500,14 @@ var native = {
   OP_ROLLBACK_AGENT_MEMORY: "rollback_agent_memory",
   OP_LOG_ENCRYPTED_TOOL_CALL: "log_encrypted_tool_call",
   QUERY_GET_ACTIVE_MEMORY_ID: "get_active_memory_id",
-  QUERY_GET_AGENT_MEMORY: "get_agent_memory",
-  QUERY_GET_ALL_AGENT_MEMORY: "get_all_agent_memory",
+  QUERY_GET_RECENT_AGENT_MEMORY: "get_recent_agent_memory",
+  QUERY_GET_ACTIVE_AGENT_MEMORY: "get_active_agent_memory",
   QUERY_GET_AGENT_MEMORY_HISTORY: "get_agent_memory_history",
   QUERY_GET_AGENT_MEMORY_BY_ID: "get_agent_memory_by_id",
   QUERY_GET_AGENT_MEMORY_ROLLBACK_HISTORY: "get_agent_memory_rollback_history",
   ARG_AGENT_PUBKEY: "agent_pubkey",
-  ARG_ID: "id"
+  ARG_ID: "id",
+  ARG_FILE_PATH: "file_path"
 };
 
 // src-ts/client.ts
@@ -44653,16 +44655,27 @@ var Atbash = class _Atbash {
    * lazily as a signed `log_tool_call` tx and refreshed every 4 min so
    * server-side replay protection windows never expire it mid-session.
    */
-  _authBearer = null;
+  // Keyed by blockchainRid so bearers for the public and private chains can
+  // coexist. The dashboard derives `authNetwork` from the BRID inside the
+  // signed envelope, so a bearer signed for chain A cannot authenticate a
+  // request routed to chain B — every chain the client talks to needs its own.
+  _authBearers = /* @__PURE__ */ new Map();
   /** Guards `logEnvironmentOnce` — hosts construct several clients. */
   static environmentLogged = false;
   constructor(privkey, options = {}) {
     this.auth = native.loadAgent(privkey);
-    this.endpoint = (options.endpoint ?? DEFAULT_ENDPOINT).replace(/\/+$/, "") || DEFAULT_ENDPOINT;
+    const validated = validateJudgeEndpoint(
+      options.verifyPubKey ? {
+        policy: "self-hosted",
+        endpoint: options.endpoint ?? DEFAULT_ENDPOINT,
+        verifyPubKey: options.verifyPubKey
+      } : { endpoint: options.endpoint }
+    );
+    this.endpoint = validated.url;
     this.nodeUrls = options.nodeUrls ? [...options.nodeUrls] : DEFAULT_CHROMIA_NODE_URLS;
     this.blockchainRid = options.blockchainRid ?? native.DEFAULT_BLOCKCHAIN_RID;
     this.orgName = options.orgName;
-    this.verifyPubKey = options.verifyPubKey;
+    this.verifyPubKey = validated.verifyPubKey ?? void 0;
     this.orgEncryptionPubKey = options.orgEncryptionPubKey;
     this.failClosed = options.failClosed !== false;
     this.debug = options.debug === true;
@@ -44720,8 +44733,19 @@ var Atbash = class _Atbash {
    * self-hosted endpoint's `verifyPubKey` becomes the client default.
    */
   static fromConfig(options = {}) {
+    const configuredEndpoint = resolve("judgeEndpoint") || void 0;
+    const configuredVerifyPubKey = resolve("judgeVerifyPubKey") || void 0;
+    if (!options.judge && configuredVerifyPubKey && !configuredEndpoint) {
+      throw new Error(
+        "judgeVerifyPubKey / ATBASH_JUDGE_VERIFY_PUBKEY is set but no judge endpoint is configured: set judgeEndpoint / ATBASH_ENDPOINT to the self-hosted judge"
+      );
+    }
     const validated = validateJudgeEndpoint(
-      options.judge ?? { endpoint: resolve("judgeEndpoint") || void 0 }
+      options.judge ?? (configuredVerifyPubKey && configuredEndpoint ? {
+        policy: "self-hosted",
+        endpoint: configuredEndpoint,
+        verifyPubKey: configuredVerifyPubKey
+      } : { endpoint: configuredEndpoint })
     );
     const agentKey = resolve("agentKey", options.agentKey);
     const auth = agentKey ? native.loadAgent(agentKey) : loadAgentFromFile(options.keyPath);
@@ -44769,10 +44793,11 @@ var Atbash = class _Atbash {
     return this.track("checkAgentExists", pk, async () => {
       const query = { pubkey: pk };
       if (network) query.network = network;
+      const brid = this.bridFromChainOpts(network ? { network } : void 0);
       const resp = await this.http.get(
         "/api/ai/exists",
         query,
-        this.authHeaders()
+        this.authHeaders(brid)
       );
       await this.raiseIfError(resp);
       const data = await this.json(resp);
@@ -45127,15 +45152,15 @@ var Atbash = class _Atbash {
       () => this.riskEngineRecords("tool-calls", { limit: maxCount })
     );
   }
-  getOrgToolCalls(orgName, maxCount) {
-    return this.track(
-      "getOrgToolCalls",
-      void 0,
-      () => this.riskEngineRecords("org-tool-calls", {
-        org: orgName,
-        limit: maxCount
-      })
-    );
+  async getOrgToolCalls(orgName, maxCount) {
+    return this.track("getOrgToolCalls", void 0, async () => {
+      const brid = await this.bridForOrg(orgName);
+      return this.riskEngineRecords(
+        "org-tool-calls",
+        { org: orgName, limit: maxCount },
+        brid
+      );
+    });
   }
   getAgentToolCalls(agentPubkey, maxCount) {
     return this.track(
@@ -45165,7 +45190,12 @@ var Atbash = class _Atbash {
   }
   async getOrgTierInfo(orgName) {
     return this.track("getOrgTierInfo", void 0, async () => {
-      const raw2 = await this.riskEngineGet("org-tier-info", { org: orgName });
+      const brid = await this.bridForOrg(orgName);
+      const raw2 = await this.riskEngineGet(
+        "org-tier-info",
+        { org: orgName },
+        brid
+      );
       if (!isRecord(raw2)) return null;
       return {
         orgName: String(raw2.org_name ?? ""),
@@ -45177,20 +45207,24 @@ var Atbash = class _Atbash {
   }
   async getPendingHeldActions(orgName, maxCount) {
     return this.track("getPendingHeldActions", void 0, async () => {
-      const raw2 = await this.riskEngineGet("pending-held-actions", {
-        org: orgName,
-        limit: maxCount
-      });
+      const brid = await this.bridForOrg(orgName);
+      const raw2 = await this.riskEngineGet(
+        "pending-held-actions",
+        { org: orgName, limit: maxCount },
+        brid
+      );
       if (!Array.isArray(raw2)) return [];
       return raw2.map((item) => toHeldAction(item));
     });
   }
   async getHeldActionReviews(orgName, maxCount) {
     return this.track("getHeldActionReviews", void 0, async () => {
-      const raw2 = await this.riskEngineGet("held-action-reviews", {
-        org: orgName,
-        limit: maxCount
-      });
+      const brid = await this.bridForOrg(orgName);
+      const raw2 = await this.riskEngineGet(
+        "held-action-reviews",
+        { org: orgName, limit: maxCount },
+        brid
+      );
       if (!Array.isArray(raw2)) return [];
       return raw2.map(
         (item) => toHeldActionReview(item)
@@ -45201,21 +45235,25 @@ var Atbash = class _Atbash {
   async getAgentDetail(agentPubkey, options = {}) {
     return this.track("getAgentDetail", agentPubkey, async () => {
       const network = await this.resolveAgentLookupNetwork(options);
+      const brid = network ? this.bridFromChainOpts({ network }) : void 0;
       return this.riskEnginePost(
         { action: "agent-detail-batch", agent: agentPubkey },
-        network
+        network,
+        brid
       );
     });
   }
   async getAgentPolicy(agentPubkey, options = {}) {
     return this.track("getAgentPolicy", agentPubkey, async () => {
       const network = await this.resolveAgentLookupNetwork(options);
+      const brid = network ? this.bridFromChainOpts({ network }) : void 0;
       const raw2 = await this.riskEnginePost(
         {
           action: "agent-policy-batch",
           agent: agentPubkey
         },
-        network
+        network,
+        brid
       );
       return {
         policy: String(raw2.policy ?? ""),
@@ -45249,7 +45287,8 @@ var Atbash = class _Atbash {
     return this.track("getOrgSubscription", void 0, async () => {
       const params = { org: orgName };
       if (network) params.network = network;
-      const raw2 = await this.riskEngineGet("org-subscription", params);
+      const brid = network ? this.bridFromChainOpts({ network }) : void 0;
+      const raw2 = await this.riskEngineGet("org-subscription", params, brid);
       if (!isRecord(raw2)) return null;
       return coerceOrgSubscription(raw2, orgName);
     });
@@ -45262,21 +45301,22 @@ var Atbash = class _Atbash {
    * entry (caller falls back to per-chain subscription resolution).
    */
   async getActiveNetworkForOrg(orgName) {
+    let resp;
     try {
-      const resp = await this.http.get(
+      resp = await this.http.get(
         "/api/org-network",
-        { org: orgName },
+        { org: orgName.trim() },
         this.authHeaders()
       );
-      if (resp.status !== 200) return null;
-      const data = await this.json(resp);
-      if (data?.network === "public" || data?.network === "private") {
-        return data.network;
-      }
-      return null;
-    } catch {
-      return null;
+    } catch (err) {
+      throw this.transportError(err);
+    }
+    if (resp.status !== 200) throw await this.httpError(resp);
+    const data = await this.json(resp);
+    if (data?.network === "public" || data?.network === "private") {
+      return data.network;
     }
+    return null;
   }
   /**
    * Resolve which chain an org's actions should run against. Cached
@@ -45288,10 +45328,11 @@ var Atbash = class _Atbash {
    * Defaults to the public chain when nothing else resolves.
    */
   async resolveChainForOrg(orgName) {
-    const cached = this._chainCache.get(orgName);
+    const name2 = orgName.trim();
+    const cached = this._chainCache.get(name2);
     if (cached) return cached;
-    const mapNetwork = await this.getActiveNetworkForOrg(orgName);
-    return this.resolveChainFromMap(orgName, mapNetwork);
+    const mapNetwork = await this.getActiveNetworkForOrg(name2);
+    return this.resolveChainFromMap(name2, mapNetwork);
   }
   /**
    * Resolve a chain given an already-fetched `org_networks` map result.
@@ -45307,29 +45348,38 @@ var Atbash = class _Atbash {
       this._chainCache.set(orgName, chain);
       return chain;
     }
-    try {
-      const [pubSub, privSub] = await Promise.all([
-        this.getOrgSubscription(orgName, "public").catch(() => null),
-        this.getOrgSubscription(orgName, "private").catch(() => null)
-      ]);
-      if (pubSub?.is_private_blockchain) {
-        this._chainCache.set(orgName, PRIVATE_CHAIN);
-        return PRIVATE_CHAIN;
-      }
-      if (pubSub && privSub) {
-        const chain = privSub.assigned_at > pubSub.assigned_at ? PRIVATE_CHAIN : PUBLIC_CHAIN;
-        this._chainCache.set(orgName, chain);
-        return chain;
-      }
-      if (pubSub) {
-        this._chainCache.set(orgName, PUBLIC_CHAIN);
-        return PUBLIC_CHAIN;
-      }
-      if (privSub?.is_private_blockchain) {
-        this._chainCache.set(orgName, PRIVATE_CHAIN);
-        return PRIVATE_CHAIN;
-      }
-    } catch {
+    const [pubRes, privRes] = await Promise.allSettled([
+      this.getOrgSubscription(orgName, "public"),
+      this.getOrgSubscription(orgName, "private")
+    ]);
+    const pubSub = pubRes.status === "fulfilled" ? pubRes.value : null;
+    const privSub = privRes.status === "fulfilled" ? privRes.value : null;
+    const failure = pubRes.status === "rejected" ? pubRes.reason : privRes.status === "rejected" ? privRes.reason : null;
+    if (pubSub?.is_private_blockchain) {
+      this._chainCache.set(orgName, PRIVATE_CHAIN);
+      return PRIVATE_CHAIN;
+    }
+    if (pubSub && privSub) {
+      const chain = privSub.assigned_at > pubSub.assigned_at ? PRIVATE_CHAIN : PUBLIC_CHAIN;
+      this._chainCache.set(orgName, chain);
+      return chain;
+    }
+    if (pubSub) {
+      this._chainCache.set(orgName, PUBLIC_CHAIN);
+      return PUBLIC_CHAIN;
+    }
+    if (privSub?.is_private_blockchain) {
+      this._chainCache.set(orgName, PRIVATE_CHAIN);
+      return PRIVATE_CHAIN;
+    }
+    if (failure) {
+      const detail = failure instanceof Error ? failure.message : String(failure);
+      throw new AtbashAPIError(
+        failure instanceof AtbashAPIError ? failure.status : 0,
+        `could not resolve the chain for org "${orgName}": ${detail}`,
+        "",
+        this.endpoint
+      );
     }
     this._chainCache.set(orgName, PUBLIC_CHAIN);
     return PUBLIC_CHAIN;
@@ -45394,11 +45444,11 @@ var Atbash = class _Atbash {
    * for 4 minutes; refreshed after that so a long-lived client never
    * trips the server's replay window.
    */
-  getAuthBearer() {
+  getAuthBearer(brid) {
+    const chainBrid = brid ?? this.blockchainRid;
     const now = Date.now();
-    if (this._authBearer && now - this._authBearer.issuedAt < 4 * 60 * 1e3) {
-      return this._authBearer.hex;
-    }
+    const cached = this._authBearers.get(chainBrid);
+    if (cached && now - cached.issuedAt < 4 * 60 * 1e3) return cached.hex;
     const nonce = `auth-${now.toString(36)}-${randomHex(4)}`;
     const hex = native.signLogToolCall(
       nonce,
@@ -45407,21 +45457,21 @@ var Atbash = class _Atbash {
       "auth-bearer",
       "",
       this.auth.privkey,
-      this.blockchainRid
+      chainBrid
     );
-    this._authBearer = { hex, issuedAt: now };
+    this._authBearers.set(chainBrid, { hex, issuedAt: now });
     return hex;
   }
-  authHeaders() {
-    return { Authorization: `Bearer ${this.getAuthBearer()}` };
+  authHeaders(brid) {
+    return { Authorization: `Bearer ${this.getAuthBearer(brid)}` };
   }
-  async riskEngineGet(action, params) {
+  async riskEngineGet(action, params, brid) {
     let resp;
     try {
       resp = await this.http.get(
         "/api/risk-engine",
         { action, ...params },
-        this.authHeaders()
+        this.authHeaders(brid)
       );
     } catch (err) {
       throw this.transportError(err);
@@ -45429,11 +45479,11 @@ var Atbash = class _Atbash {
     if (resp.status !== 200) throw await this.httpError(resp);
     return this.json(resp);
   }
-  async riskEnginePost(body, network) {
+  async riskEnginePost(body, network, brid) {
     let resp;
     try {
       const path4 = network ? `/api/risk-engine?network=${encodeURIComponent(network)}` : "/api/risk-engine";
-      resp = await this.http.post(path4, body, this.authHeaders());
+      resp = await this.http.post(path4, body, this.authHeaders(brid));
     } catch (err) {
       throw this.transportError(err);
     }
@@ -45441,11 +45491,23 @@ var Atbash = class _Atbash {
     const data = await this.json(resp);
     return isRecord(data) ? data : {};
   }
-  async riskEngineRecords(action, params) {
-    const raw2 = await this.riskEngineGet(action, params);
+  async riskEngineRecords(action, params, brid) {
+    const raw2 = await this.riskEngineGet(action, params, brid);
     if (!Array.isArray(raw2)) return [];
     return raw2.map((item) => toToolCallRecord(item));
   }
+  /**
+   * BRID for an org — one round-trip to the map, honoring the client's chain
+   * cache. Returns undefined when the org is unknown, so the caller falls
+   * back to the client default (best-effort discovery).
+   */
+  async bridForOrg(orgName) {
+    try {
+      return (await this.resolveChainForOrg(orgName)).blockchainRid;
+    } catch {
+      return void 0;
+    }
+  }
   async raiseIfError(resp) {
     if (resp.ok) return;
     throw await this.httpError(resp);
@@ -45811,11 +45873,11 @@ async function commitMemoryVersion(_plaintext, _auth, _opts) {
 async function getActiveMemoryId(_auth, _chainOpts) {
   throw new Error(`getActiveMemoryId ${STUB_MSG3}`);
 }
-async function getActiveMemory(_auth, _chainOpts) {
-  throw new Error(`getActiveMemory ${STUB_MSG3}`);
+async function getRecentAgentMemory(_auth, _chainOpts) {
+  throw new Error(`getRecentAgentMemory ${STUB_MSG3}`);
 }
-async function getAllAgentMemory(_auth, _chainOpts) {
-  throw new Error(`getAllAgentMemory ${STUB_MSG3}`);
+async function getActiveAgentMemory(_auth, _chainOpts) {
+  throw new Error(`getActiveAgentMemory ${STUB_MSG3}`);
 }
 async function getMemoryHistory(_auth, _chainOpts) {
   throw new Error(`getMemoryHistory ${STUB_MSG3}`);
@@ -45894,8 +45956,7 @@ async function guardMemoryWrite(input) {
     toolNames,
     enforce = true,
     debug: debug2 = false,
-    logger: logger2,
-    memoryFilePath
+    logger: logger2
   } = input;
   const memEntry = classifyMemoryWrite(event, ctx, { patterns, toolNames });
   if (debug2) emitDebugProbe(event, ctx, memEntry, logger2);
@@ -45931,37 +45992,35 @@ async function guardMemoryWrite(input) {
       committed: false
     };
   }
-  const isManagedMemoryFile = memoryFilePath !== void 0 && path3.resolve(memEntry.key) === path3.resolve(memoryFilePath);
-  if (isManagedMemoryFile) {
-    commitMemoryVersion(memEntry.value, auth, {
-      score: scanResult.score,
-      orgName,
-      endpoint
-    }).catch((err) => {
-      const reason = err instanceof Error ? err.message : String(err);
-      logger2?.warn?.("[atbash] memory commit to chain failed", {
-        path: memEntry.key,
-        reason
-      });
+  const filePath = path3.basename(memEntry.key);
+  commitMemoryVersion(memEntry.value, auth, {
+    score: scanResult.score,
+    filePath,
+    orgName,
+    endpoint,
+    verifyPubKey
+  }).catch((err) => {
+    const reason = err instanceof Error ? err.message : String(err);
+    logger2?.warn?.("[atbash] memory commit to chain failed", {
+      path: memEntry.key,
+      filePath,
+      reason
     });
-  } else {
-    logger2?.info?.(
-      "[atbash] scanned but not committed \u2014 not the managed memory file",
-      {
-        path: memEntry.key,
-        memoryFilePath: memoryFilePath ?? "(not configured)"
-      }
-    );
-  }
+  });
   logger2?.info?.(
     scanResult.verdict === "yellow" ? "[atbash] memory HOLD" : "[atbash] memory ALLOW",
-    { path: memEntry.key, score: scanResult.score, reason: scanResult.reason }
+    {
+      path: memEntry.key,
+      filePath,
+      score: scanResult.score,
+      reason: scanResult.reason
+    }
   );
   return {
     handled: true,
     decision: { allow: true },
     scanResult,
-    committed: isManagedMemoryFile
+    committed: true
   };
 }
 
@@ -46168,13 +46227,13 @@ export {
   encryptedLength,
   flushTelemetry,
   generateKeypair2 as generateKeypair,
-  getActiveMemory,
+  getActiveAgentMemory,
   getActiveMemoryId,
-  getAllAgentMemory,
   getConfigDir,
   getConfigPath,
   getMemoryById,
   getMemoryHistory,
+  getRecentAgentMemory,
   getRollbackHistory,
   guardMemoryWrite,
   isEnvelope,