@atbash/sdk 0.15.0-dev.0 → 0.15.2-dev.0

package/dist/browser.d.mts

@@ -1320,7 +1320,29 @@ declare class MemoryGuardManager {
     private readonly rollbackMinScore;
     private readonly enforce;
     private readonly agentPubkeyHex;
+    /**
+     * Memoized org→chain resolution. Reads have to hit the SAME chain
+     * writes did, so an org-scoped guard must resolve `orgName` to
+     * network exactly like `commitMemoryVersion` does. Without this
+     * cache the read path would either (a) hit the SDK-default chain
+     * every time — silently returning "no active memory on chain" when
+     * writes landed on the org's actual chain, or (b) hammer
+     * `/api/org-network` on every read. `undefined` means "not yet
+     * resolved"; a resolved `null` means "no org / use raw chainOpts".
+     */
+    private _resolvedChainOpts;
+    private _resolveChainInflight?;
     constructor(opts: MemoryGuardManagerOptions);
+    /**
+     * Resolve `orgName` → chain once, cache forever. `commitMemoryVersion`
+     * already does this for writes; without the same call on the read
+     * path, a client on the SDK's baked default chain reads from the wrong
+     * chain and reports "no active memory" for an agent whose writes did
+     * land — on the org's actual chain. An explicit `chainOpts.blockchainRid`
+     * still wins (caller vouched for it); everything else honors the
+     * dashboard's `org_networks` map.
+     */
+    private resolveChainOpts;
     /**
      * One-shot chain probe at plugin registration. Refreshes MEMORY.md
      * from chain when drifted and score passes threshold. Fire-and-forget

package/dist/browser.mjs

@@ -46452,4 +46452,3 @@ postchain-client/built/esm/index.js:
 @noble/ciphers/utils.js:
   (*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) *)
 */
-//# sourceMappingURL=browser.mjs.map

package/dist/index.d.mts

@@ -1320,7 +1320,29 @@ declare class MemoryGuardManager {
     private readonly rollbackMinScore;
     private readonly enforce;
     private readonly agentPubkeyHex;
+    /**
+     * Memoized org→chain resolution. Reads have to hit the SAME chain
+     * writes did, so an org-scoped guard must resolve `orgName` to
+     * network exactly like `commitMemoryVersion` does. Without this
+     * cache the read path would either (a) hit the SDK-default chain
+     * every time — silently returning "no active memory on chain" when
+     * writes landed on the org's actual chain, or (b) hammer
+     * `/api/org-network` on every read. `undefined` means "not yet
+     * resolved"; a resolved `null` means "no org / use raw chainOpts".
+     */
+    private _resolvedChainOpts;
+    private _resolveChainInflight?;
     constructor(opts: MemoryGuardManagerOptions);
+    /**
+     * Resolve `orgName` → chain once, cache forever. `commitMemoryVersion`
+     * already does this for writes; without the same call on the read
+     * path, a client on the SDK's baked default chain reads from the wrong
+     * chain and reports "no active memory" for an agent whose writes did
+     * land — on the org's actual chain. An explicit `chainOpts.blockchainRid`
+     * still wins (caller vouched for it); everything else honors the
+     * dashboard's `org_networks` map.
+     */
+    private resolveChainOpts;
     /**
      * One-shot chain probe at plugin registration. Refreshes MEMORY.md
      * from chain when drifted and score passes threshold. Fire-and-forget

package/dist/index.d.ts

@@ -1320,7 +1320,29 @@ declare class MemoryGuardManager {
     private readonly rollbackMinScore;
     private readonly enforce;
     private readonly agentPubkeyHex;
+    /**
+     * Memoized org→chain resolution. Reads have to hit the SAME chain
+     * writes did, so an org-scoped guard must resolve `orgName` to
+     * network exactly like `commitMemoryVersion` does. Without this
+     * cache the read path would either (a) hit the SDK-default chain
+     * every time — silently returning "no active memory on chain" when
+     * writes landed on the org's actual chain, or (b) hammer
+     * `/api/org-network` on every read. `undefined` means "not yet
+     * resolved"; a resolved `null` means "no org / use raw chainOpts".
+     */
+    private _resolvedChainOpts;
+    private _resolveChainInflight?;
     constructor(opts: MemoryGuardManagerOptions);
+    /**
+     * Resolve `orgName` → chain once, cache forever. `commitMemoryVersion`
+     * already does this for writes; without the same call on the read
+     * path, a client on the SDK's baked default chain reads from the wrong
+     * chain and reports "no active memory" for an agent whose writes did
+     * land — on the org's actual chain. An explicit `chainOpts.blockchainRid`
+     * still wins (caller vouched for it); everything else honors the
+     * dashboard's `org_networks` map.
+     */
+    private resolveChainOpts;
     /**
      * One-shot chain probe at plugin registration. Refreshes MEMORY.md
      * from chain when drifted and score passes threshold. Fire-and-forget

package/dist/index.js

@@ -43434,6 +43434,66 @@ var MemoryGuardManager = class {
   rollbackMinScore;
   enforce;
   agentPubkeyHex;
+  /**
+   * Memoized org→chain resolution. Reads have to hit the SAME chain
+   * writes did, so an org-scoped guard must resolve `orgName` to
+   * network exactly like `commitMemoryVersion` does. Without this
+   * cache the read path would either (a) hit the SDK-default chain
+   * every time — silently returning "no active memory on chain" when
+   * writes landed on the org's actual chain, or (b) hammer
+   * `/api/org-network` on every read. `undefined` means "not yet
+   * resolved"; a resolved `null` means "no org / use raw chainOpts".
+   */
+  _resolvedChainOpts = void 0;
+  _resolveChainInflight;
+  /**
+   * Resolve `orgName` → chain once, cache forever. `commitMemoryVersion`
+   * already does this for writes; without the same call on the read
+   * path, a client on the SDK's baked default chain reads from the wrong
+   * chain and reports "no active memory" for an agent whose writes did
+   * land — on the org's actual chain. An explicit `chainOpts.blockchainRid`
+   * still wins (caller vouched for it); everything else honors the
+   * dashboard's `org_networks` map.
+   */
+  async resolveChainOpts() {
+    if (this._resolvedChainOpts !== void 0) {
+      return this._resolvedChainOpts ?? void 0;
+    }
+    if (this._resolveChainInflight) return this._resolveChainInflight;
+    this._resolveChainInflight = (async () => {
+      if (this.opts.chainOpts?.blockchainRid) {
+        this._resolvedChainOpts = this.opts.chainOpts;
+        return this.opts.chainOpts;
+      }
+      if (!this.opts.orgName) {
+        this._resolvedChainOpts = this.opts.chainOpts ?? null;
+        return this.opts.chainOpts;
+      }
+      try {
+        const atbash = new Atbash(this.opts.auth.privkey, {
+          endpoint: this.opts.judgeEndpoint,
+          verifyPubKey: this.opts.judgeVerifyPubKey,
+          orgName: this.opts.orgName
+        });
+        const resolved = await atbash.resolveChainForOrg(this.opts.orgName);
+        const chainOpts = { ...this.opts.chainOpts, network: resolved.network };
+        this._resolvedChainOpts = chainOpts;
+        this.logger.info(
+          `[atbash] resolved org \u2192 chain \u2014 org=${this.opts.orgName} network=${resolved.network}`
+        );
+        return chainOpts;
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        this.logger.warn(
+          `[atbash] org \u2192 chain resolution failed (falling back to SDK default): ${msg}`
+        );
+        return this.opts.chainOpts;
+      } finally {
+        this._resolveChainInflight = void 0;
+      }
+    })();
+    return this._resolveChainInflight;
+  }
   /**
    * One-shot chain probe at plugin registration. Refreshes MEMORY.md
    * from chain when drifted and score passes threshold. Fire-and-forget
@@ -43441,11 +43501,12 @@ var MemoryGuardManager = class {
    */
   async runBootProbe() {
     try {
+      const chainOpts = await this.resolveChainOpts();
       const seed = { activeId: null, checkedAt: 0 };
       const result = await syncLocalMemory(this.opts.auth, seed, {
         ttlMs: 0,
         force: true,
-        chainOpts: this.opts.chainOpts
+        chainOpts
       });
       if (!result.drifted && result.pointer.activeId == null) {
         this.logger.info(
@@ -43584,9 +43645,10 @@ var MemoryGuardManager = class {
     const pointer = await this.pointerStore.get(this.agentPubkeyHex);
     let result;
     try {
+      const chainOpts = await this.resolveChainOpts();
       result = await syncLocalMemory(this.opts.auth, pointer, {
         ttlMs: this.ttlMs,
-        chainOpts: this.opts.chainOpts
+        chainOpts
       });
     } catch (err) {
       if (err instanceof MemoryIntegrityError) {
@@ -43868,4 +43930,3 @@ postchain-client/built/esm/index.js:
    *)
   (*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
 */
-//# sourceMappingURL=index.js.map

package/dist/index.mjs

@@ -43348,6 +43348,66 @@ var MemoryGuardManager = class {
   rollbackMinScore;
   enforce;
   agentPubkeyHex;
+  /**
+   * Memoized org→chain resolution. Reads have to hit the SAME chain
+   * writes did, so an org-scoped guard must resolve `orgName` to
+   * network exactly like `commitMemoryVersion` does. Without this
+   * cache the read path would either (a) hit the SDK-default chain
+   * every time — silently returning "no active memory on chain" when
+   * writes landed on the org's actual chain, or (b) hammer
+   * `/api/org-network` on every read. `undefined` means "not yet
+   * resolved"; a resolved `null` means "no org / use raw chainOpts".
+   */
+  _resolvedChainOpts = void 0;
+  _resolveChainInflight;
+  /**
+   * Resolve `orgName` → chain once, cache forever. `commitMemoryVersion`
+   * already does this for writes; without the same call on the read
+   * path, a client on the SDK's baked default chain reads from the wrong
+   * chain and reports "no active memory" for an agent whose writes did
+   * land — on the org's actual chain. An explicit `chainOpts.blockchainRid`
+   * still wins (caller vouched for it); everything else honors the
+   * dashboard's `org_networks` map.
+   */
+  async resolveChainOpts() {
+    if (this._resolvedChainOpts !== void 0) {
+      return this._resolvedChainOpts ?? void 0;
+    }
+    if (this._resolveChainInflight) return this._resolveChainInflight;
+    this._resolveChainInflight = (async () => {
+      if (this.opts.chainOpts?.blockchainRid) {
+        this._resolvedChainOpts = this.opts.chainOpts;
+        return this.opts.chainOpts;
+      }
+      if (!this.opts.orgName) {
+        this._resolvedChainOpts = this.opts.chainOpts ?? null;
+        return this.opts.chainOpts;
+      }
+      try {
+        const atbash = new Atbash(this.opts.auth.privkey, {
+          endpoint: this.opts.judgeEndpoint,
+          verifyPubKey: this.opts.judgeVerifyPubKey,
+          orgName: this.opts.orgName
+        });
+        const resolved = await atbash.resolveChainForOrg(this.opts.orgName);
+        const chainOpts = { ...this.opts.chainOpts, network: resolved.network };
+        this._resolvedChainOpts = chainOpts;
+        this.logger.info(
+          `[atbash] resolved org \u2192 chain \u2014 org=${this.opts.orgName} network=${resolved.network}`
+        );
+        return chainOpts;
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        this.logger.warn(
+          `[atbash] org \u2192 chain resolution failed (falling back to SDK default): ${msg}`
+        );
+        return this.opts.chainOpts;
+      } finally {
+        this._resolveChainInflight = void 0;
+      }
+    })();
+    return this._resolveChainInflight;
+  }
   /**
    * One-shot chain probe at plugin registration. Refreshes MEMORY.md
    * from chain when drifted and score passes threshold. Fire-and-forget
@@ -43355,11 +43415,12 @@ var MemoryGuardManager = class {
    */
   async runBootProbe() {
     try {
+      const chainOpts = await this.resolveChainOpts();
       const seed = { activeId: null, checkedAt: 0 };
       const result = await syncLocalMemory(this.opts.auth, seed, {
         ttlMs: 0,
         force: true,
-        chainOpts: this.opts.chainOpts
+        chainOpts
       });
       if (!result.drifted && result.pointer.activeId == null) {
         this.logger.info(
@@ -43498,9 +43559,10 @@ var MemoryGuardManager = class {
     const pointer = await this.pointerStore.get(this.agentPubkeyHex);
     let result;
     try {
+      const chainOpts = await this.resolveChainOpts();
       result = await syncLocalMemory(this.opts.auth, pointer, {
         ttlMs: this.ttlMs,
-        chainOpts: this.opts.chainOpts
+        chainOpts
       });
     } catch (err) {
       if (err instanceof MemoryIntegrityError) {
@@ -43781,4 +43843,3 @@ postchain-client/built/esm/index.js:
    *)
   (*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
 */
-//# sourceMappingURL=index.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/sdk",
-  "version": "0.15.0-dev.0",
+  "version": "0.15.2-dev.0",
   "description": "TypeScript SDK for Atbash — the safety layer that evaluates AI agent actions against operator-defined policies before execution.",
   "keywords": [
     "atbash",
@@ -89,10 +89,10 @@
     "typescript-eslint": "^8.62.1"
   },
   "optionalDependencies": {
-    "@atbash/sdk-linux-x64-gnu": "0.15.0-dev.0",
-    "@atbash/sdk-linux-arm64-gnu": "0.15.0-dev.0",
-    "@atbash/sdk-linux-x64-musl": "0.15.0-dev.0",
-    "@atbash/sdk-darwin-arm64": "0.15.0-dev.0",
-    "@atbash/sdk-win32-x64-msvc": "0.15.0-dev.0"
+    "@atbash/sdk-linux-x64-gnu": "0.15.2-dev.0",
+    "@atbash/sdk-linux-arm64-gnu": "0.15.2-dev.0",
+    "@atbash/sdk-linux-x64-musl": "0.15.2-dev.0",
+    "@atbash/sdk-darwin-arm64": "0.15.2-dev.0",
+    "@atbash/sdk-win32-x64-msvc": "0.15.2-dev.0"
   }
 }