@atbash/sdk 0.10.4-dev.0 → 0.10.6-dev.0

package/dist/browser.mjs

@@ -10,6 +10,9 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __commonJS = (cb, mod2) => function __require2() {
   return mod2 || (0, cb[__getOwnPropNames(cb)[0]])((mod2 = { exports: {} }).exports, mod2), mod2.exports;
 };
@@ -30,10 +33,28 @@ var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__
   mod2
 ));
 
+// <define:__ATBASH_CHROMIA_NODE_URLS__>
+var define_ATBASH_CHROMIA_NODE_URLS_default;
+var init_define_ATBASH_CHROMIA_NODE_URLS = __esm({
+  "<define:__ATBASH_CHROMIA_NODE_URLS__>"() {
+    define_ATBASH_CHROMIA_NODE_URLS_default = ["https://node0.testnet.chromia.com:7740", "https://node1.testnet.chromia.com:7740", "https://node3.testnet.chromia.com:7740"];
+  }
+});
+
+// <define:__ATBASH_PRIVATE_NODE_URLS__>
+var define_ATBASH_PRIVATE_NODE_URLS_default;
+var init_define_ATBASH_PRIVATE_NODE_URLS = __esm({
+  "<define:__ATBASH_PRIVATE_NODE_URLS__>"() {
+    define_ATBASH_PRIVATE_NODE_URLS_default = ["https://node0-pvn-testnet.dynamic.chromia.dev"];
+  }
+});
+
 // (disabled):node_modules/buffer/index.js
 var require_buffer = __commonJS({
   "(disabled):node_modules/buffer/index.js"() {
     "use strict";
+    init_define_ATBASH_CHROMIA_NODE_URLS();
+    init_define_ATBASH_PRIVATE_NODE_URLS();
   }
 });
 
@@ -41,6 +62,8 @@ var require_buffer = __commonJS({
 var require_bn = __commonJS({
   "node_modules/bn.js/lib/bn.js"(exports, module) {
     "use strict";
+    init_define_ATBASH_CHROMIA_NODE_URLS();
+    init_define_ATBASH_PRIVATE_NODE_URLS();
     (function(module2, exports2) {
       "use strict";
       function assert2(val, msg) {
@@ -2858,7 +2881,29 @@ var require_bn = __commonJS({
   }
 });
 
+// src-ts/index.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
+// src-ts/browser/native.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
+// node_modules/@noble/curves/secp256k1.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
+// node_modules/@noble/hashes/sha2.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
+// node_modules/@noble/hashes/_md.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // node_modules/@noble/hashes/utils.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function isBytes(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
 }
@@ -3279,7 +3324,13 @@ var sha256 = /* @__PURE__ */ createHasher(
   /* @__PURE__ */ oidNist(1)
 );
 
+// node_modules/@noble/curves/abstract/curve.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // node_modules/@noble/curves/utils.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var abytes2 = (value, length, title) => abytes(value, length, title);
 var anumber2 = anumber;
 var bytesToHex2 = bytesToHex;
@@ -3432,6 +3483,8 @@ function validateObject(object, fields = {}, optFields = {}) {
 }
 
 // node_modules/@noble/curves/abstract/modular.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var _0n2 = /* @__PURE__ */ BigInt(0);
 var _1n2 = /* @__PURE__ */ BigInt(1);
 var _2n = /* @__PURE__ */ BigInt(2);
@@ -4079,7 +4132,13 @@ function createKeygen(randomSecretKey, getPublicKey) {
   };
 }
 
+// node_modules/@noble/curves/abstract/weierstrass.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // node_modules/@noble/hashes/hmac.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var _HMAC = class {
   oHash;
   iHash;
@@ -5111,6 +5170,8 @@ var Pointk1 = /* @__PURE__ */ weierstrass(secp256k1_CURVE, {
 var secp256k1 = /* @__PURE__ */ ecdsa(Pointk1, sha256);
 
 // node_modules/postchain-client/built/esm/index.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var import_bn = __toESM(require_bn(), 1);
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
 function getDefaultExportFromCjs(x) {
@@ -43233,17 +43294,11 @@ var index = /* @__PURE__ */ getDefaultExportFromCjs(builtExports);
 
 // src-ts/browser/native.ts
 var { Buffer: Buffer3, gtx: pcgtx } = index;
-var PROD_ENDPOINT = "https://atbash.ai";
-var PROD_BLOCKCHAIN_RID = "0163241D9AF137638E63E48EFCDE15510F38C2426F7AD5DC726AF60351BF4DFE";
-var PROD_PRIVATE_BLOCKCHAIN_RID = "39FFD3557D0296CB2C57FDC6A3B8C024E95639CF4964DA08141AC20C6344D408";
-var DEFAULT_CHROMIA_NODE_URLS_ARR = [
-  "https://node0.testnet.chromia.com:7740",
-  "https://node1.testnet.chromia.com:7740",
-  "https://node3.testnet.chromia.com:7740"
-];
-var DEFAULT_PRIVATE_NODE_URLS_ARR = [
-  "https://node0-pvn-testnet.dynamic.chromia.dev"
-];
+var ATBASH_ENDPOINT = "https://atbash.ai";
+var ATBASH_BLOCKCHAIN_RID = "0163241D9AF137638E63E48EFCDE15510F38C2426F7AD5DC726AF60351BF4DFE";
+var ATBASH_PRIVATE_BLOCKCHAIN_RID = "39FFD3557D0296CB2C57FDC6A3B8C024E95639CF4964DA08141AC20C6344D408";
+var DEFAULT_CHROMIA_NODE_URLS_ARR = define_ATBASH_CHROMIA_NODE_URLS_default;
+var DEFAULT_PRIVATE_NODE_URLS_ARR = define_ATBASH_PRIVATE_NODE_URLS_default;
 var MERKLE_HASH_VERSION = 2;
 function stripHex(s2) {
   return s2.trim().replace(/^0x/i, "").toLowerCase();
@@ -43394,9 +43449,9 @@ var native = {
   deriveMemoryKey,
   encryptMemoryContent,
   decryptMemoryContent,
-  DEFAULT_BLOCKCHAIN_RID: PROD_BLOCKCHAIN_RID,
-  DEFAULT_PRIVATE_BLOCKCHAIN_RID: PROD_PRIVATE_BLOCKCHAIN_RID,
-  DEFAULT_ENDPOINT: PROD_ENDPOINT,
+  DEFAULT_BLOCKCHAIN_RID: ATBASH_BLOCKCHAIN_RID,
+  DEFAULT_PRIVATE_BLOCKCHAIN_RID: ATBASH_PRIVATE_BLOCKCHAIN_RID,
+  DEFAULT_ENDPOINT: ATBASH_ENDPOINT,
   // Browser has no NAPI channel to Rust's HONEYCOMB_KEY — telemetry
   // silently no-ops. `HONEYCOMB_API_KEY` env var still overrides at runtime.
   HONEYCOMB_KEY: "",
@@ -43456,7 +43511,13 @@ var native = {
   ARG_ID: "id"
 };
 
+// src-ts/client.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // src-ts/random.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function randomBytes4(size) {
   const buf = new Uint8Array(size);
   globalThis.crypto.getRandomValues(buf);
@@ -43471,7 +43532,13 @@ function randomHex(size) {
   return hex;
 }
 
+// src-ts/chain-config.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // src-ts/constants.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var DEFAULT_ENDPOINT = native.DEFAULT_ENDPOINT;
 var DEFAULT_CHROMIA_NODE_URLS = Object.freeze(
   native.defaultChromiaNodeUrls()
@@ -43494,7 +43561,17 @@ var PRIVATE_CHAIN = {
   nodeUrls: DEFAULT_PRIVATE_NODE_URLS
 };
 
+// src-ts/browser/encrypted-toolcall.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
+// src-ts/browser/crypto-ecies.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // node_modules/@noble/hashes/hkdf.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function extract(hash3, ikm, salt) {
   ahash(hash3);
   if (salt === void 0)
@@ -43534,7 +43611,17 @@ function expand2(hash3, prk, info2, length = 32) {
 }
 var hkdf = (hash3, ikm, salt, info2, length) => expand2(hash3, extract(hash3, ikm, salt), info2, length);
 
+// node_modules/@noble/ciphers/aes.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
+// node_modules/@noble/ciphers/_polyval.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // node_modules/@noble/ciphers/utils.js
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function isBytes3(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
 }
@@ -44127,6 +44214,8 @@ function encryptedLength(plaintextByteLength) {
 }
 
 // src-ts/crypto/envelope.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var PREFIX = "atb1";
 var SEPARATOR = ".";
 function toBase64(bytes) {
@@ -44259,6 +44348,8 @@ function signEncryptedToolCall(toolCallId, action, context, toolName, toolArgsJs
 }
 
 // src-ts/endpoint.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function buildAllowedJudgeHosts() {
   return /* @__PURE__ */ new Set([
     "atbash.ai",
@@ -44309,6 +44400,8 @@ function validateJudgeEndpoint(judge) {
 }
 
 // src-ts/errors.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var AtbashAPIError = class extends Error {
   /** HTTP status code (or 0 if the request never completed). */
   status;
@@ -44351,6 +44444,8 @@ function enrich(status, body, statusText, endpoint) {
 }
 
 // src-ts/http/client.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var HttpClient = class {
   baseUrl;
   timeoutMs;
@@ -44388,6 +44483,8 @@ var HttpClient = class {
 };
 
 // src-ts/browser/keyLoader.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var NOT_AVAILABLE = "keyLoader is not available in the browser bundle \u2014 pass `agentKey` explicitly to Atbash.fromConfig or use `new Atbash(privkey, opts)`.";
 function resolveKeyPath(_input) {
   throw new Error(NOT_AVAILABLE);
@@ -44397,6 +44494,8 @@ function loadAgentFromFile(_keyPath) {
 }
 
 // src-ts/normalize.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function normalizeVerdict(raw2) {
   if (raw2 === null || raw2 === void 0) return "No verdict";
   const v = String(raw2).toUpperCase();
@@ -44422,6 +44521,8 @@ function pubkeyToHex(val) {
 }
 
 // src-ts/browser/opentel/telemetry.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function setupTelemetry(_config) {
 }
 function recordCall(_functionName, _source, _agentPubkey) {
@@ -44434,6 +44535,8 @@ async function shutdownTelemetry() {
 }
 
 // src-ts/browser/userConfig.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var NOT_AVAILABLE2 = "userConfig file I/O is not available in the browser bundle.";
 function getConfigDir() {
   throw new Error(NOT_AVAILABLE2);
@@ -44623,11 +44726,15 @@ var Atbash = class _Atbash {
    * response bytes via the Rust core's `verifySignature`.
    */
   async judgeAction(action, context = "", options = {}) {
-    return this.track(
-      "judgeAction",
-      this.auth.pubkey,
-      () => this._judgeAction(action, context, options)
-    );
+    return this.track("judgeAction", this.auth.pubkey, async () => {
+      try {
+        return await this._judgeAction(action, context, options);
+      } catch (err) {
+        if (!isEncryptionStateMismatch(err)) throw err;
+        this._orgKeyFromChain = null;
+        return await this._judgeAction(action, context, options);
+      }
+    });
   }
   async _judgeAction(action, context, options) {
     if (!action?.trim()) {
@@ -44674,6 +44781,7 @@ var Atbash = class _Atbash {
     if (context) body.context = context;
     if (options.provider) body.provider = options.provider;
     if (options.toolName) body.tool_name = options.toolName;
+    if (options.toolArgsJson) body.tool_args_json = options.toolArgsJson;
     if (options.model) body.model = options.model;
     if (options.resolved) body.resolved = options.resolved;
     if (options.mode) body.mode = options.mode;
@@ -45300,6 +45408,10 @@ async function safeText(resp) {
 function errorMessage(err) {
   return err instanceof Error ? err.message : String(err);
 }
+function isEncryptionStateMismatch(err) {
+  const msg = errorMessage(err);
+  return msg.includes("must be a valid encryption envelope") || msg.includes("must be plaintext");
+}
 function stringifyArgs(args) {
   if (args === null || args === void 0) return "";
   if (typeof args === "string") return args;
@@ -45316,6 +45428,8 @@ function truncate(text) {
 }
 
 // src-ts/redact.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function redactJsonStrings(value) {
   if (typeof value === "string") {
     return native.redactSecrets(value).redacted;
@@ -45334,6 +45448,8 @@ function redactJsonStrings(value) {
 }
 
 // src-ts/signature.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function verifyJudgeResponseSignature(bodyBytes, signatureHex, pubKeyHex) {
   if (!signatureHex) {
     return { ok: false, reason: "missing X-Atbash-Signature header" };
@@ -45355,7 +45471,13 @@ function verifyJudgeResponseSignature(bodyBytes, signatureHex, pubKeyHex) {
   };
 }
 
+// src-ts/memory/index.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+
 // src-ts/browser/memory-crypto.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var { Buffer: Buffer4 } = index;
 var HKDF_INFO = new TextEncoder().encode("atbash:memory-encryption");
 var KEY_LEN = 32;
@@ -45430,6 +45552,8 @@ async function decryptMemoryContent2(ciphertext, nonce, key3) {
 }
 
 // src-ts/browser/memory-scan.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG2 = "not available in @atbash/sdk browser bundle \u2014 scan memory server-side";
 async function scanMemory(_entry, _auth, _opts) {
   throw new Error(`scanMemory ${STUB_MSG2}`);
@@ -45439,6 +45563,8 @@ async function scanMemoryBatch(_entries, _auth, _opts) {
 }
 
 // src-ts/browser/memory-chain.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG3 = "not available in @atbash/sdk browser bundle \u2014 commit/rollback memory server-side";
 async function commitMemoryVersion(_plaintext, _auth, _opts) {
   throw new Error(`commitMemoryVersion ${STUB_MSG3}`);
@@ -45466,6 +45592,8 @@ async function rollbackMemory(_toId, _reason, _auth, _opts) {
 }
 
 // src-ts/browser/memory-classifier.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG4 = "not available in @atbash/sdk browser bundle \u2014 classify memory writes server-side";
 var DEFAULT_MEMORY_WRITE_TOOL_NAMES = [
   "write",
@@ -45488,6 +45616,8 @@ function classifyMemoryWrite(_event, _ctx, _opts = {}) {
 }
 
 // src-ts/memory/guard.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 function emitDebugProbe(event, ctx, memEntry, logger2) {
   if (!logger2?.info) return;
   const ev = event ?? {};
@@ -45584,6 +45714,8 @@ async function guardMemoryWrite(input) {
 }
 
 // src-ts/memory/sync.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var MemoryIntegrityError = class extends Error {
   constructor(id, reason) {
     super(`memory integrity check failed on id ${id}: ${reason}`);
@@ -45616,6 +45748,8 @@ async function syncLocalMemory(auth, pointer, opts = {}) {
 }
 
 // src-ts/browser/memory-pointer-store.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var unavailable = (name2) => {
   throw new Error(`${name2} is not available in the browser bundle`);
 };
@@ -45634,6 +45768,8 @@ function defaultPointerPath(_workspaceDir) {
 }
 
 // src-ts/browser/memory-file-logger.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var unavailable2 = (name2) => {
   throw new Error(`${name2} is not available in the browser bundle`);
 };
@@ -45645,6 +45781,8 @@ function defaultPluginLogPath(_workspaceDir) {
 }
 
 // src-ts/browser/memory-read-classifier.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG5 = "not available in @atbash/sdk browser bundle \u2014 classify memory reads server-side";
 var DEFAULT_MEMORY_READ_TOOL_NAMES = [
   "memory_search",
@@ -45655,6 +45793,8 @@ function classifyMemoryRead(_event, _ctx, _opts = {}) {
 }
 
 // src-ts/browser/memory-guard-manager.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
 var unavailable3 = (name2) => {
   throw new Error(`${name2} is not available in the browser bundle`);
 };