@atbash/sdk 0.23.0-dev.0 → 0.24.1-dev.0

package/README.md

@@ -86,6 +86,8 @@ Every `judgeAction` call returns one of three verdicts:
 
 > **Shadow and Monitor mode.** On a judge host whose replies are signature-checked, `auditToolCall` asks the judge for its true verdict and the organisation's mode, and applies the mode itself. Under a signed `shadow`, `monitor` or `off` mode, a BLOCK or HOLD still runs (`allow: true`, `verdict: "ALLOW"`) and `decision.wouldVerdict` says what would have happened; it is also logged as a warning. A missing, unsigned or unknown mode enforces. Set `enforceLocally: true` to enforce every verdict whatever the mode; the SDK then asks the judge to judge every call before answering, and refuses a reply that does not confirm it, so against a judge without client enforcement every call is refused. `getJudgmentStatus` applies the mode the same way, so a shadow call polled later reports its `wouldVerdict` while `allow` stays true. `judgeAction` does not opt in and returns what the server sends. To poll a HOLD, call `getJudgmentStatus(decision.judgmentId || decision.toolCallId)` (or the same fields of a `judgeAction` result): on the on-chain judge path the verdict is recorded under its own id.
 
+> **Verdict record.** `decision.record` says what the judge stated about recording the verdict: `onChain`, `status` (its `on_chain_status`, such as `pending`), `boundToCall` (the reply names this call's ids), `signatureChecked` (a judge key verified the reply) and `judgeStatus` (`shadow_recorded` for a shadow ack, which has no verdict yet). A host that must not run an unrecorded action gates on `verdictRecorded`: a signed reply about this call that states `on_chain` and carries a verdict, so a shadow ack or a logged-only answer is never one. `undefined` means unknown: treat it as not recorded. It is informational; `allow` remains the gate.
+
 > **NB:** If your org has no active subscription, the judge returns `"No verdict"` — actions are logged on-chain for the audit trail but not evaluated by an AI provider. Assign a plan at [atbash.ai/risk-engine/settings](https://atbash.ai/risk-engine/settings) for active verdicts.
 
 ## API
@@ -113,7 +115,7 @@ Read-only methods that read from the Chromia blockchain and dashboard.
 | `getToolCallFull(toolCallId)` | Full details of a single tool call |
 | `getOrgTierInfo(orgName)` | Check an org's tier and whether verdicts are enabled |
 | `getAgentDetail(pubkey, options?)` | Get agent metadata (org, status, creation date) |
-| `getAgentPolicy(pubkey, options?)` | Check the agent's policy pack and jail status |
+| `getAgentPolicy(pubkey, options?)` | Check the agent's jail status; the policy text is served to the org owner only |
 | `getPendingHeldActions(orgName, maxCount)` | List actions waiting for operator approval |
 | `getHeldActionReviews(orgName, maxCount)` | List completed operator reviews |
 | `getSafetyStats()` | Chain-wide safety statistics |

package/dist/browser.d.mts

@@ -227,6 +227,8 @@ interface JudgeResult {
      */
     judgmentId?: string;
     onChain: boolean;
+    /** What the reply stated about the chain; see {@link VerdictRecord}. */
+    record?: VerdictRecord;
     /** Severity 1 (poisonous) → 10 (benign). Present on memory-scan responses; absent for regular tool-call judgments. */
     score?: number;
     /**
@@ -451,6 +453,44 @@ interface AtbashOptions {
     debug?: boolean;
     logger?: AtbashLogger;
 }
+/**
+ * What the judge stated about recording this verdict. A host that must not run
+ * an unrecorded action gates on `verdictRecorded`. `onChain` is the judge's
+ * statement: the SDK does not read the chain.
+ */
+interface VerdictRecord {
+    /** The judge's `on_chain`: the verdict is recorded on chain. */
+    onChain: boolean;
+    /** The judge's `on_chain_status`, such as `pending` or `skipped`; absent when not stated. */
+    status?: string;
+    /**
+     * The reply names the ids this call generated. False when it names another
+     * call, or none: `toolCallId` then falls back to this client's own id, which
+     * proves nothing about what the judge recorded.
+     */
+    boundToCall: boolean;
+    /**
+     * This reply's signature was checked against a judge key before it was read.
+     * False means nothing proves who wrote the reply: it can echo this call's ids
+     * and still read as bound, because the ids travel in the request.
+     */
+    signatureChecked: boolean;
+    /**
+     * The judge's own `status`, absent when not stated. `shadow_recorded` is a
+     * shadow ack: the call was stored and has no verdict yet, which is what
+     * separates it from an ALLOW whose `status` here is `pending`. Read it with
+     * `boundToCall` and `signatureChecked`: unsigned, it is only a claim.
+     */
+    judgeStatus?: string;
+    /**
+     * The judge answered this call with a verdict it states is recorded on chain,
+     * in a signature-checked reply: `onChain`, `boundToCall` and `signatureChecked`
+     * all true, and no `judgeStatus`, which only a reply without a verdict carries
+     * (a shadow ack, or an answer that was only logged). Still the judge's word:
+     * the SDK does not read the chain.
+     */
+    verdictRecorded: boolean;
+}
 /** Canonical decision returned by `auditToolCall`. */
 type DecisionVerdict = "ALLOW" | "HOLD" | "BLOCK" | "ERROR";
 interface Decision {
@@ -479,6 +519,13 @@ interface Decision {
      * Poll `getJudgmentStatus` with `judgmentId || toolCallId`.
      */
     judgmentId?: string;
+    /**
+     * What the judge stated about recording this verdict. Absent means unknown:
+     * a transport error, a local jail hold, or a reply that did not state
+     * `on_chain`. Treat absent as not recorded. Informational only; `allow`
+     * remains the gate.
+     */
+    record?: VerdictRecord;
 }
 /** Input to `auditToolCall`. */
 interface ToolCallInput {
@@ -2085,4 +2132,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, JudgeRefusalError, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, type MemoryHistoryPage, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OperationEvent, type OrgSubscription, PRIVATE_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, configureEvents, configureJailHold, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, eventsAreOn, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isJailHeld, isValidPrivateKey, judgeVerifyKeys, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, memorySlotOf, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, recordEvent, redactJsonStrings, redactSecrets, releaseJailHolds, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setLoopbackJudgePinsForTests, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, JudgeRefusalError, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, type MemoryHistoryPage, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OperationEvent, type OrgSubscription, PRIVATE_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type VerdictRecord, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, configureEvents, configureJailHold, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, eventsAreOn, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isJailHeld, isValidPrivateKey, judgeVerifyKeys, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, memorySlotOf, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, recordEvent, redactJsonStrings, redactSecrets, releaseJailHolds, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setLoopbackJudgePinsForTests, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/browser.mjs

@@ -53,7 +53,7 @@ var init_define_ATBASH_PRIVATE_NODE_URLS = __esm({
 var define_ATBASH_PROD_JUDGE_PINS_default;
 var init_define_ATBASH_PROD_JUDGE_PINS = __esm({
   "<define:__ATBASH_PROD_JUDGE_PINS__>"() {
-    define_ATBASH_PROD_JUDGE_PINS_default = [];
+    define_ATBASH_PROD_JUDGE_PINS_default = ["02818eced310b32f227fada6dba76dbf0f9171265f63ec9860cc5a89a2bdb18bff"];
   }
 });
 
@@ -45502,6 +45502,12 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     const data = parsed;
     const rawScore = data.score;
     const score = typeof rawScore === "number" && Number.isInteger(rawScore) && rawScore >= 1 && rawScore <= 10 ? rawScore : void 0;
+    const statedId = wireText(data.tool_call_id);
+    const statedJudgment = wireText(data.judgment_id);
+    const statedStatus = wireText(data.on_chain_status);
+    const statedJudgeStatus = typeof data.status === "string" ? data.status : "";
+    const boundToCall = (statedId === logResult.toolCallId || statedId === judgmentId) && (!statedJudgment || statedJudgment === judgmentId);
+    const signatureChecked = verifyKeys.length > 0;
     const result = {
       verdict: normalizeVerdict(data.verdict),
       allow: this.executable(data),
@@ -45513,6 +45519,19 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       toolCallId: wireText(data.tool_call_id, logResult.toolCallId),
       ...wireText(data.judgment_id) ? { judgmentId: wireText(data.judgment_id) } : {},
       onChain: Boolean(data.on_chain),
+      // Only a stated boolean is a statement: `onChain` above reads silence as false.
+      ...typeof data.on_chain === "boolean" ? {
+        record: {
+          onChain: data.on_chain,
+          ...statedStatus ? { status: statedStatus } : {},
+          boundToCall,
+          signatureChecked,
+          ...statedJudgeStatus ? { judgeStatus: statedJudgeStatus } : {},
+          // A judge status marks a reply that carries no verdict: a shadow
+          // ack, or an answer that was only logged.
+          verdictRecorded: data.on_chain && boundToCall && signatureChecked && !statedJudgeStatus
+        }
+      } : {},
       enforced: Boolean(data.enforced),
       enforcementMode: wireText(data.enforcement_mode),
       status: wireText(data.status),
@@ -45527,8 +45546,6 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         );
       }
       if (verifyKeys.length > 0) {
-        const statedId = wireText(data.tool_call_id);
-        const statedJudgment = wireText(data.judgment_id);
         if (statedId && statedId !== logResult.toolCallId && statedId !== judgmentId || statedJudgment && statedJudgment !== judgmentId) {
           throw new SignatureVerificationError(
             `the signed reply is for call ${statedJudgment || statedId}, not this one`
@@ -45537,7 +45554,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         if (statedId && echo === optInValue) this.modeTrusted.add(result);
       }
     }
-    return this.applyJailHold(result, startedAt, wireText(data.on_chain_status));
+    return this.applyJailHold(result, startedAt, statedStatus);
   }
   /**
    * Start a local hold on an enforced BLOCK that jails: one already on chain,
@@ -45569,7 +45586,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       verdict: "BLOCK",
       allow: false,
       actionType: "block",
-      reason: "Agent is jailed. All actions are blocked until the organization owner unjails this agent.",
+      reason: `Agent is jailed. All actions are blocked until the organization owner unjails this agent at ${this.endpoint.replace(/\/+$/, "")}/risk-engine/agents.`,
       confidence: 1,
       provider: "policy",
       latencyMs: 0,
@@ -45670,7 +45687,11 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
    */
   decide(result) {
     const decided = this.applyMode(result);
-    const inner = result.judgmentId ? { ...decided, judgmentId: result.judgmentId } : decided;
+    const inner = {
+      ...decided,
+      ...result.judgmentId ? { judgmentId: result.judgmentId } : {},
+      ...result.record ? { record: result.record } : {}
+    };
     if (!result.enforcementMode) return inner;
     return {
       ...inner,

package/dist/index.d.mts

@@ -227,6 +227,8 @@ interface JudgeResult {
      */
     judgmentId?: string;
     onChain: boolean;
+    /** What the reply stated about the chain; see {@link VerdictRecord}. */
+    record?: VerdictRecord;
     /** Severity 1 (poisonous) → 10 (benign). Present on memory-scan responses; absent for regular tool-call judgments. */
     score?: number;
     /**
@@ -451,6 +453,44 @@ interface AtbashOptions {
     debug?: boolean;
     logger?: AtbashLogger;
 }
+/**
+ * What the judge stated about recording this verdict. A host that must not run
+ * an unrecorded action gates on `verdictRecorded`. `onChain` is the judge's
+ * statement: the SDK does not read the chain.
+ */
+interface VerdictRecord {
+    /** The judge's `on_chain`: the verdict is recorded on chain. */
+    onChain: boolean;
+    /** The judge's `on_chain_status`, such as `pending` or `skipped`; absent when not stated. */
+    status?: string;
+    /**
+     * The reply names the ids this call generated. False when it names another
+     * call, or none: `toolCallId` then falls back to this client's own id, which
+     * proves nothing about what the judge recorded.
+     */
+    boundToCall: boolean;
+    /**
+     * This reply's signature was checked against a judge key before it was read.
+     * False means nothing proves who wrote the reply: it can echo this call's ids
+     * and still read as bound, because the ids travel in the request.
+     */
+    signatureChecked: boolean;
+    /**
+     * The judge's own `status`, absent when not stated. `shadow_recorded` is a
+     * shadow ack: the call was stored and has no verdict yet, which is what
+     * separates it from an ALLOW whose `status` here is `pending`. Read it with
+     * `boundToCall` and `signatureChecked`: unsigned, it is only a claim.
+     */
+    judgeStatus?: string;
+    /**
+     * The judge answered this call with a verdict it states is recorded on chain,
+     * in a signature-checked reply: `onChain`, `boundToCall` and `signatureChecked`
+     * all true, and no `judgeStatus`, which only a reply without a verdict carries
+     * (a shadow ack, or an answer that was only logged). Still the judge's word:
+     * the SDK does not read the chain.
+     */
+    verdictRecorded: boolean;
+}
 /** Canonical decision returned by `auditToolCall`. */
 type DecisionVerdict = "ALLOW" | "HOLD" | "BLOCK" | "ERROR";
 interface Decision {
@@ -479,6 +519,13 @@ interface Decision {
      * Poll `getJudgmentStatus` with `judgmentId || toolCallId`.
      */
     judgmentId?: string;
+    /**
+     * What the judge stated about recording this verdict. Absent means unknown:
+     * a transport error, a local jail hold, or a reply that did not state
+     * `on_chain`. Treat absent as not recorded. Informational only; `allow`
+     * remains the gate.
+     */
+    record?: VerdictRecord;
 }
 /** Input to `auditToolCall`. */
 interface ToolCallInput {
@@ -2085,4 +2132,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, JudgeRefusalError, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, type MemoryHistoryPage, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OperationEvent, type OrgSubscription, PRIVATE_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, configureEvents, configureJailHold, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, eventsAreOn, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isJailHeld, isValidPrivateKey, judgeVerifyKeys, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, memorySlotOf, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, recordEvent, redactJsonStrings, redactSecrets, releaseJailHolds, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setLoopbackJudgePinsForTests, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, JudgeRefusalError, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, type MemoryHistoryPage, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OperationEvent, type OrgSubscription, PRIVATE_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type VerdictRecord, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, configureEvents, configureJailHold, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, eventsAreOn, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isJailHeld, isValidPrivateKey, judgeVerifyKeys, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, memorySlotOf, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, recordEvent, redactJsonStrings, redactSecrets, releaseJailHolds, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setLoopbackJudgePinsForTests, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/index.d.ts

@@ -227,6 +227,8 @@ interface JudgeResult {
      */
     judgmentId?: string;
     onChain: boolean;
+    /** What the reply stated about the chain; see {@link VerdictRecord}. */
+    record?: VerdictRecord;
     /** Severity 1 (poisonous) → 10 (benign). Present on memory-scan responses; absent for regular tool-call judgments. */
     score?: number;
     /**
@@ -451,6 +453,44 @@ interface AtbashOptions {
     debug?: boolean;
     logger?: AtbashLogger;
 }
+/**
+ * What the judge stated about recording this verdict. A host that must not run
+ * an unrecorded action gates on `verdictRecorded`. `onChain` is the judge's
+ * statement: the SDK does not read the chain.
+ */
+interface VerdictRecord {
+    /** The judge's `on_chain`: the verdict is recorded on chain. */
+    onChain: boolean;
+    /** The judge's `on_chain_status`, such as `pending` or `skipped`; absent when not stated. */
+    status?: string;
+    /**
+     * The reply names the ids this call generated. False when it names another
+     * call, or none: `toolCallId` then falls back to this client's own id, which
+     * proves nothing about what the judge recorded.
+     */
+    boundToCall: boolean;
+    /**
+     * This reply's signature was checked against a judge key before it was read.
+     * False means nothing proves who wrote the reply: it can echo this call's ids
+     * and still read as bound, because the ids travel in the request.
+     */
+    signatureChecked: boolean;
+    /**
+     * The judge's own `status`, absent when not stated. `shadow_recorded` is a
+     * shadow ack: the call was stored and has no verdict yet, which is what
+     * separates it from an ALLOW whose `status` here is `pending`. Read it with
+     * `boundToCall` and `signatureChecked`: unsigned, it is only a claim.
+     */
+    judgeStatus?: string;
+    /**
+     * The judge answered this call with a verdict it states is recorded on chain,
+     * in a signature-checked reply: `onChain`, `boundToCall` and `signatureChecked`
+     * all true, and no `judgeStatus`, which only a reply without a verdict carries
+     * (a shadow ack, or an answer that was only logged). Still the judge's word:
+     * the SDK does not read the chain.
+     */
+    verdictRecorded: boolean;
+}
 /** Canonical decision returned by `auditToolCall`. */
 type DecisionVerdict = "ALLOW" | "HOLD" | "BLOCK" | "ERROR";
 interface Decision {
@@ -479,6 +519,13 @@ interface Decision {
      * Poll `getJudgmentStatus` with `judgmentId || toolCallId`.
      */
     judgmentId?: string;
+    /**
+     * What the judge stated about recording this verdict. Absent means unknown:
+     * a transport error, a local jail hold, or a reply that did not state
+     * `on_chain`. Treat absent as not recorded. Informational only; `allow`
+     * remains the gate.
+     */
+    record?: VerdictRecord;
 }
 /** Input to `auditToolCall`. */
 interface ToolCallInput {
@@ -2085,4 +2132,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, JudgeRefusalError, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, type MemoryHistoryPage, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OperationEvent, type OrgSubscription, PRIVATE_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, configureEvents, configureJailHold, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, eventsAreOn, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isJailHeld, isValidPrivateKey, judgeVerifyKeys, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, memorySlotOf, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, recordEvent, redactJsonStrings, redactSecrets, releaseJailHolds, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setLoopbackJudgePinsForTests, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, JudgeRefusalError, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, type MemoryHistoryPage, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OperationEvent, type OrgSubscription, PRIVATE_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type VerdictRecord, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, configureEvents, configureJailHold, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, eventsAreOn, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isJailHeld, isValidPrivateKey, judgeVerifyKeys, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, memorySlotOf, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, recordEvent, redactJsonStrings, redactSecrets, releaseJailHolds, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setLoopbackJudgePinsForTests, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/index.js

@@ -755,7 +755,7 @@ var import_sdk_metrics = require("@opentelemetry/sdk-metrics");
 var import_exporter_logs_otlp_http = require("@opentelemetry/exporter-logs-otlp-http");
 var import_sdk_logs = require("@opentelemetry/sdk-logs");
 var import_node_crypto = require("crypto");
-var SDK_VERSION = true ? "0.23.0-dev.0" : "";
+var SDK_VERSION = true ? "0.24.1-dev.0" : "";
 var SDK_LANGUAGE = "node";
 function sdkResourceAttributes() {
   const attrs = {
@@ -1558,6 +1558,12 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     const data = parsed;
     const rawScore = data.score;
     const score = typeof rawScore === "number" && Number.isInteger(rawScore) && rawScore >= 1 && rawScore <= 10 ? rawScore : void 0;
+    const statedId = wireText(data.tool_call_id);
+    const statedJudgment = wireText(data.judgment_id);
+    const statedStatus = wireText(data.on_chain_status);
+    const statedJudgeStatus = typeof data.status === "string" ? data.status : "";
+    const boundToCall = (statedId === logResult.toolCallId || statedId === judgmentId) && (!statedJudgment || statedJudgment === judgmentId);
+    const signatureChecked = verifyKeys.length > 0;
     const result = {
       verdict: normalizeVerdict(data.verdict),
       allow: this.executable(data),
@@ -1569,6 +1575,19 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       toolCallId: wireText(data.tool_call_id, logResult.toolCallId),
       ...wireText(data.judgment_id) ? { judgmentId: wireText(data.judgment_id) } : {},
       onChain: Boolean(data.on_chain),
+      // Only a stated boolean is a statement: `onChain` above reads silence as false.
+      ...typeof data.on_chain === "boolean" ? {
+        record: {
+          onChain: data.on_chain,
+          ...statedStatus ? { status: statedStatus } : {},
+          boundToCall,
+          signatureChecked,
+          ...statedJudgeStatus ? { judgeStatus: statedJudgeStatus } : {},
+          // A judge status marks a reply that carries no verdict: a shadow
+          // ack, or an answer that was only logged.
+          verdictRecorded: data.on_chain && boundToCall && signatureChecked && !statedJudgeStatus
+        }
+      } : {},
       enforced: Boolean(data.enforced),
       enforcementMode: wireText(data.enforcement_mode),
       status: wireText(data.status),
@@ -1583,8 +1602,6 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         );
       }
       if (verifyKeys.length > 0) {
-        const statedId = wireText(data.tool_call_id);
-        const statedJudgment = wireText(data.judgment_id);
         if (statedId && statedId !== logResult.toolCallId && statedId !== judgmentId || statedJudgment && statedJudgment !== judgmentId) {
           throw new SignatureVerificationError(
             `the signed reply is for call ${statedJudgment || statedId}, not this one`
@@ -1593,7 +1610,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         if (statedId && echo === optInValue) this.modeTrusted.add(result);
       }
     }
-    return this.applyJailHold(result, startedAt, wireText(data.on_chain_status));
+    return this.applyJailHold(result, startedAt, statedStatus);
   }
   /**
    * Start a local hold on an enforced BLOCK that jails: one already on chain,
@@ -1625,7 +1642,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       verdict: "BLOCK",
       allow: false,
       actionType: "block",
-      reason: "Agent is jailed. All actions are blocked until the organization owner unjails this agent.",
+      reason: `Agent is jailed. All actions are blocked until the organization owner unjails this agent at ${this.endpoint.replace(/\/+$/, "")}/risk-engine/agents.`,
       confidence: 1,
       provider: "policy",
       latencyMs: 0,
@@ -1726,7 +1743,11 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
    */
   decide(result) {
     const decided = this.applyMode(result);
-    const inner = result.judgmentId ? { ...decided, judgmentId: result.judgmentId } : decided;
+    const inner = {
+      ...decided,
+      ...result.judgmentId ? { judgmentId: result.judgmentId } : {},
+      ...result.record ? { record: result.record } : {}
+    };
     if (!result.enforcementMode) return inner;
     return {
       ...inner,

package/dist/index.mjs

@@ -630,7 +630,7 @@ import {
 import { OTLPLogExporter } from "@opentelemetry/exporter-logs-otlp-http";
 import { BatchLogRecordProcessor, LoggerProvider } from "@opentelemetry/sdk-logs";
 import { createHash } from "crypto";
-var SDK_VERSION = true ? "0.23.0-dev.0" : "";
+var SDK_VERSION = true ? "0.24.1-dev.0" : "";
 var SDK_LANGUAGE = "node";
 function sdkResourceAttributes() {
   const attrs = {
@@ -1439,6 +1439,12 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     const data = parsed;
     const rawScore = data.score;
     const score = typeof rawScore === "number" && Number.isInteger(rawScore) && rawScore >= 1 && rawScore <= 10 ? rawScore : void 0;
+    const statedId = wireText(data.tool_call_id);
+    const statedJudgment = wireText(data.judgment_id);
+    const statedStatus = wireText(data.on_chain_status);
+    const statedJudgeStatus = typeof data.status === "string" ? data.status : "";
+    const boundToCall = (statedId === logResult.toolCallId || statedId === judgmentId) && (!statedJudgment || statedJudgment === judgmentId);
+    const signatureChecked = verifyKeys.length > 0;
     const result = {
       verdict: normalizeVerdict(data.verdict),
       allow: this.executable(data),
@@ -1450,6 +1456,19 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       toolCallId: wireText(data.tool_call_id, logResult.toolCallId),
       ...wireText(data.judgment_id) ? { judgmentId: wireText(data.judgment_id) } : {},
       onChain: Boolean(data.on_chain),
+      // Only a stated boolean is a statement: `onChain` above reads silence as false.
+      ...typeof data.on_chain === "boolean" ? {
+        record: {
+          onChain: data.on_chain,
+          ...statedStatus ? { status: statedStatus } : {},
+          boundToCall,
+          signatureChecked,
+          ...statedJudgeStatus ? { judgeStatus: statedJudgeStatus } : {},
+          // A judge status marks a reply that carries no verdict: a shadow
+          // ack, or an answer that was only logged.
+          verdictRecorded: data.on_chain && boundToCall && signatureChecked && !statedJudgeStatus
+        }
+      } : {},
       enforced: Boolean(data.enforced),
       enforcementMode: wireText(data.enforcement_mode),
       status: wireText(data.status),
@@ -1464,8 +1483,6 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         );
       }
       if (verifyKeys.length > 0) {
-        const statedId = wireText(data.tool_call_id);
-        const statedJudgment = wireText(data.judgment_id);
         if (statedId && statedId !== logResult.toolCallId && statedId !== judgmentId || statedJudgment && statedJudgment !== judgmentId) {
           throw new SignatureVerificationError(
             `the signed reply is for call ${statedJudgment || statedId}, not this one`
@@ -1474,7 +1491,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         if (statedId && echo === optInValue) this.modeTrusted.add(result);
       }
     }
-    return this.applyJailHold(result, startedAt, wireText(data.on_chain_status));
+    return this.applyJailHold(result, startedAt, statedStatus);
   }
   /**
    * Start a local hold on an enforced BLOCK that jails: one already on chain,
@@ -1506,7 +1523,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       verdict: "BLOCK",
       allow: false,
       actionType: "block",
-      reason: "Agent is jailed. All actions are blocked until the organization owner unjails this agent.",
+      reason: `Agent is jailed. All actions are blocked until the organization owner unjails this agent at ${this.endpoint.replace(/\/+$/, "")}/risk-engine/agents.`,
       confidence: 1,
       provider: "policy",
       latencyMs: 0,
@@ -1607,7 +1624,11 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
    */
   decide(result) {
     const decided = this.applyMode(result);
-    const inner = result.judgmentId ? { ...decided, judgmentId: result.judgmentId } : decided;
+    const inner = {
+      ...decided,
+      ...result.judgmentId ? { judgmentId: result.judgmentId } : {},
+      ...result.record ? { record: result.record } : {}
+    };
     if (!result.enforcementMode) return inner;
     return {
       ...inner,

package/index.js

@@ -92,8 +92,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-android-arm64')
         const bindingPackageVersion = require('@atbash/sdk-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -108,8 +108,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-android-arm-eabi')
         const bindingPackageVersion = require('@atbash/sdk-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -129,8 +129,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-win32-x64-gnu')
           const bindingPackageVersion = require('@atbash/sdk-win32-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -145,8 +145,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-win32-x64-msvc')
           const bindingPackageVersion = require('@atbash/sdk-win32-x64-msvc/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -162,8 +162,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-win32-ia32-msvc')
         const bindingPackageVersion = require('@atbash/sdk-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -178,8 +178,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-win32-arm64-msvc')
         const bindingPackageVersion = require('@atbash/sdk-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -197,8 +197,8 @@ function requireNative() {
     try {
       const binding = require('@atbash/sdk-darwin-universal')
       const bindingPackageVersion = require('@atbash/sdk-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -213,8 +213,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-darwin-x64')
         const bindingPackageVersion = require('@atbash/sdk-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -229,8 +229,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-darwin-arm64')
         const bindingPackageVersion = require('@atbash/sdk-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -249,8 +249,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-freebsd-x64')
         const bindingPackageVersion = require('@atbash/sdk-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -265,8 +265,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-freebsd-arm64')
         const bindingPackageVersion = require('@atbash/sdk-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -286,8 +286,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-x64-musl')
           const bindingPackageVersion = require('@atbash/sdk-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -302,8 +302,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-x64-gnu')
           const bindingPackageVersion = require('@atbash/sdk-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -320,8 +320,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-arm64-musl')
           const bindingPackageVersion = require('@atbash/sdk-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -336,8 +336,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-arm64-gnu')
           const bindingPackageVersion = require('@atbash/sdk-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -354,8 +354,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-arm-musleabihf')
           const bindingPackageVersion = require('@atbash/sdk-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -370,8 +370,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@atbash/sdk-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -388,8 +388,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-loong64-musl')
           const bindingPackageVersion = require('@atbash/sdk-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -404,8 +404,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-loong64-gnu')
           const bindingPackageVersion = require('@atbash/sdk-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -422,8 +422,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-riscv64-musl')
           const bindingPackageVersion = require('@atbash/sdk-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -438,8 +438,8 @@ function requireNative() {
         try {
           const binding = require('@atbash/sdk-linux-riscv64-gnu')
           const bindingPackageVersion = require('@atbash/sdk-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -455,8 +455,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-linux-ppc64-gnu')
         const bindingPackageVersion = require('@atbash/sdk-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -471,8 +471,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-linux-s390x-gnu')
         const bindingPackageVersion = require('@atbash/sdk-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -491,8 +491,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-openharmony-arm64')
         const bindingPackageVersion = require('@atbash/sdk-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -507,8 +507,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-openharmony-x64')
         const bindingPackageVersion = require('@atbash/sdk-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -523,8 +523,8 @@ function requireNative() {
       try {
         const binding = require('@atbash/sdk-openharmony-arm')
         const bindingPackageVersion = require('@atbash/sdk-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.23.0-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.24.1-dev.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -664,8 +664,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@atbash/sdk-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '0.23.0-dev.0') {
-            throw new Error(`WASI binding package version mismatch, expected 0.23.0-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.24.1-dev.0') {
+            throw new Error(`WASI binding package version mismatch, expected 0.24.1-dev.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@atbash/sdk-wasm32-wasi')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/sdk",
-  "version": "0.23.0-dev.0",
+  "version": "0.24.1-dev.0",
   "description": "TypeScript SDK for Atbash — the safety layer that evaluates AI agent actions against operator-defined policies before execution.",
   "keywords": [
     "atbash",
@@ -79,7 +79,7 @@
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "^0.223.0",
     "@opentelemetry/exporter-logs-otlp-http": "^0.223.0",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.219.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.223.0",
     "@opentelemetry/resources": "^2.7.1",
     "@opentelemetry/sdk-logs": "^0.223.0",
     "@opentelemetry/sdk-metrics": "^2.7.1"
@@ -105,10 +105,10 @@
     "@napi-rs/cross-toolchain": "1.0.3"
   },
   "optionalDependencies": {
-    "@atbash/sdk-linux-x64-gnu": "0.23.0-dev.0",
-    "@atbash/sdk-linux-arm64-gnu": "0.23.0-dev.0",
-    "@atbash/sdk-linux-x64-musl": "0.23.0-dev.0",
-    "@atbash/sdk-darwin-arm64": "0.23.0-dev.0",
-    "@atbash/sdk-win32-x64-msvc": "0.23.0-dev.0"
+    "@atbash/sdk-linux-x64-gnu": "0.24.1-dev.0",
+    "@atbash/sdk-linux-arm64-gnu": "0.24.1-dev.0",
+    "@atbash/sdk-linux-x64-musl": "0.24.1-dev.0",
+    "@atbash/sdk-darwin-arm64": "0.24.1-dev.0",
+    "@atbash/sdk-win32-x64-msvc": "0.24.1-dev.0"
   }
 }