@atbash/sdk 0.8.0 → 0.9.0

package/README.md

@@ -144,8 +144,6 @@ const atbash = Atbash.fromConfig();   // reads env + config file
 | `judgeEndpoint` | `ATBASH_ENDPOINT` |
 | `judgeVerifyPubKey` | `ATBASH_JUDGE_VERIFY_PUBKEY` (self-hosted judge response-signing key; selects the self-hosted policy) |
 | `blockchainRid` | `ATBASH_BLOCKCHAIN_RID` |
-| `provider` | `ATBASH_PROVIDER` |
-| `providerModel` | `ATBASH_PROVIDER_MODEL` |
 
 Persistent config helpers: `saveUserConfig(config)`, `loadUserConfig()`, `resolve(key, flagValue?)`, `getConfigPath()`.
 

package/dist/browser.d.mts

@@ -408,8 +408,6 @@ interface FromConfigOptions {
 interface JudgeOptions {
     toolName?: string;
     toolArgsJson?: string;
-    provider?: string;
-    model?: string;
     verifyPubKey?: string;
     /** Per-call override of {@link AtbashOptions.orgEncryptionPubKey}. */
     orgEncryptionPubKey?: string;
@@ -807,8 +805,6 @@ interface AtbashUserConfig {
      * at construction instead.
      */
     defaultChainNetwork?: Network;
-    provider?: string;
-    providerModel?: string;
     /** "1" / "true" turns on verbose diagnostics. See AtbashOptions.debug. */
     debug?: string;
 }
@@ -879,6 +875,22 @@ declare const BOOT_SYNC_HINT = "check the chain endpoint and orgName if the caus
  */
 declare function bootSyncFailureLine(cause: unknown): string;
 
+/**
+ * Make a chain query result crossable at the NAPI boundary.
+ *
+ * `postchain-client` decodes a Rell `byte_array` into a Node `Buffer`. The
+ * core's `parse*` functions take `serde_json::Value`, and NAPI-RS cannot
+ * convert a `Buffer` into one — it reaches the methods every `Uint8Array`
+ * inherits and fails with "JS functions cannot be represented as a
+ * serde_json::Value", which names functions for what is a plain Buffer.
+ *
+ * The conversion has to happen here because the failure is in the argument
+ * conversion, before any core code runs. Of the shapes the core accepts —
+ * hex string, `[u8]`, `{ data: [...] }` — hex is the cheapest to produce.
+ */
+/** Recursively rewrite byte containers to hex, leaving everything else as-is. */
+declare function gtvToFfiSafe(value: unknown): unknown;
+
 /** Derive the 32-byte AES key from an agent's secp256k1 privkey (hex). Deterministic — same privkey always yields the same key. */
 declare function deriveMemoryKey(privkey: string): Promise<Buffer>;
 /** Encrypt UTF-8 plaintext. `ciphertext` has the 16-byte GCM auth tag appended, matching the SDK's on-chain byte layout. */
@@ -1531,4 +1543,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PRIVATE_CHAIN, PUBLIC_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PRIVATE_CHAIN, PUBLIC_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, gtvToFfiSafe, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/browser.mjs

@@ -44656,8 +44656,6 @@ function resolve(_key, flagValue) {
 function forcedChainNetwork(flagValue) {
   return flagValue === "public" || flagValue === "private" ? flagValue : void 0;
 }
-function warnDeprecatedEnvVarsOnce(_log) {
-}
 
 // src-ts/client.ts
 function generateToolCallId() {
@@ -44765,14 +44763,13 @@ var Atbash = class _Atbash {
     this._defaultChain = resolvedChain;
     this._explicitChain = options.chain !== void 0 || options.network !== void 0 || options.blockchainRid !== void 0 && options.nodeUrls !== void 0;
     this._forcedNetwork = forcedChainNetwork();
-    warnDeprecatedEnvVarsOnce((msg) => options.logger?.warn?.(msg));
     this.orgName = options.orgName;
     this.verifyPubKey = validated.verifyPubKey ?? void 0;
     this.orgEncryptionPubKey = options.orgEncryptionPubKey;
     this.failClosed = options.failClosed !== false;
     this.debug = options.debug === true;
     this.logger = options.logger ?? {};
-    this.http = new HttpClient(this.endpoint, options.timeoutMs ?? 6e4);
+    this.http = new HttpClient(this.endpoint, options.timeoutMs ?? 12e4);
     this.logEnvironmentOnce();
     if (this.endpoint !== DEFAULT_ENDPOINT) {
       this.logger.warn?.("[atbash] running on non-default judge endpoint", {
@@ -45023,18 +45020,15 @@ var Atbash = class _Atbash {
     if (!logResult.success || !logResult.toolCallId || !logResult.signedHex) {
       throw new Error(logResult.error || "Failed to sign log_tool_call");
     }
-    let signedJudgeAction;
-    if (!options.provider) {
-      const judgmentId = generateToolCallId();
-      signedJudgeAction = native.signJudgeAction(
-        judgmentId,
-        action,
-        context || "",
-        "",
-        this.auth.privkey,
-        brid
-      );
-    }
+    const judgmentId = generateToolCallId();
+    const signedJudgeAction = native.signJudgeAction(
+      judgmentId,
+      action,
+      context || "",
+      "",
+      this.auth.privkey,
+      brid
+    );
     const body = {
       tool_call_id: logResult.toolCallId,
       agent_pubkey: this.auth.pubkey,
@@ -45043,10 +45037,8 @@ var Atbash = class _Atbash {
     };
     if (signedJudgeAction) body.signed_judge_action = signedJudgeAction;
     if (context) body.context = context;
-    if (options.provider) body.provider = options.provider;
     if (options.toolName) body.tool_name = options.toolName;
     if (options.toolArgsJson) body.tool_args_json = options.toolArgsJson;
-    if (options.model) body.model = options.model;
     if (options.resolved) body.resolved = options.resolved;
     if (options.mode) body.mode = options.mode;
     let resp;
@@ -45927,6 +45919,22 @@ function bootSyncFailureLine(cause) {
   );
 }
 
+// src-ts/memory/_gtv_bytes.ts
+init_define_ATBASH_CHROMIA_NODE_URLS();
+init_define_ATBASH_PRIVATE_NODE_URLS();
+function gtvToFfiSafe(value) {
+  if (value instanceof Uint8Array) return Buffer.from(value).toString("hex");
+  if (Array.isArray(value)) return value.map(gtvToFfiSafe);
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [key3, val] of Object.entries(value)) {
+      out[key3] = gtvToFfiSafe(val);
+    }
+    return out;
+  }
+  return value;
+}
+
 // src-ts/memory/index.ts
 init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
@@ -46394,6 +46402,7 @@ export {
   getMemoryHistory,
   getRecentAgentMemory,
   getRollbackHistory,
+  gtvToFfiSafe,
   guardMemoryWrite,
   isEnvelope,
   isValidPrivateKey2 as isValidPrivateKey,

package/dist/index.d.mts

@@ -408,8 +408,6 @@ interface FromConfigOptions {
 interface JudgeOptions {
     toolName?: string;
     toolArgsJson?: string;
-    provider?: string;
-    model?: string;
     verifyPubKey?: string;
     /** Per-call override of {@link AtbashOptions.orgEncryptionPubKey}. */
     orgEncryptionPubKey?: string;
@@ -807,8 +805,6 @@ interface AtbashUserConfig {
      * at construction instead.
      */
     defaultChainNetwork?: Network;
-    provider?: string;
-    providerModel?: string;
     /** "1" / "true" turns on verbose diagnostics. See AtbashOptions.debug. */
     debug?: string;
 }
@@ -879,6 +875,22 @@ declare const BOOT_SYNC_HINT = "check the chain endpoint and orgName if the caus
  */
 declare function bootSyncFailureLine(cause: unknown): string;
 
+/**
+ * Make a chain query result crossable at the NAPI boundary.
+ *
+ * `postchain-client` decodes a Rell `byte_array` into a Node `Buffer`. The
+ * core's `parse*` functions take `serde_json::Value`, and NAPI-RS cannot
+ * convert a `Buffer` into one — it reaches the methods every `Uint8Array`
+ * inherits and fails with "JS functions cannot be represented as a
+ * serde_json::Value", which names functions for what is a plain Buffer.
+ *
+ * The conversion has to happen here because the failure is in the argument
+ * conversion, before any core code runs. Of the shapes the core accepts —
+ * hex string, `[u8]`, `{ data: [...] }` — hex is the cheapest to produce.
+ */
+/** Recursively rewrite byte containers to hex, leaving everything else as-is. */
+declare function gtvToFfiSafe(value: unknown): unknown;
+
 /** Derive the 32-byte AES key from an agent's secp256k1 privkey (hex). Deterministic — same privkey always yields the same key. */
 declare function deriveMemoryKey(privkey: string): Promise<Buffer>;
 /** Encrypt UTF-8 plaintext. `ciphertext` has the 16-byte GCM auth tag appended, matching the SDK's on-chain byte layout. */
@@ -1531,4 +1543,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PRIVATE_CHAIN, PUBLIC_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PRIVATE_CHAIN, PUBLIC_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, gtvToFfiSafe, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/index.d.ts

@@ -408,8 +408,6 @@ interface FromConfigOptions {
 interface JudgeOptions {
     toolName?: string;
     toolArgsJson?: string;
-    provider?: string;
-    model?: string;
     verifyPubKey?: string;
     /** Per-call override of {@link AtbashOptions.orgEncryptionPubKey}. */
     orgEncryptionPubKey?: string;
@@ -807,8 +805,6 @@ interface AtbashUserConfig {
      * at construction instead.
      */
     defaultChainNetwork?: Network;
-    provider?: string;
-    providerModel?: string;
     /** "1" / "true" turns on verbose diagnostics. See AtbashOptions.debug. */
     debug?: string;
 }
@@ -879,6 +875,22 @@ declare const BOOT_SYNC_HINT = "check the chain endpoint and orgName if the caus
  */
 declare function bootSyncFailureLine(cause: unknown): string;
 
+/**
+ * Make a chain query result crossable at the NAPI boundary.
+ *
+ * `postchain-client` decodes a Rell `byte_array` into a Node `Buffer`. The
+ * core's `parse*` functions take `serde_json::Value`, and NAPI-RS cannot
+ * convert a `Buffer` into one — it reaches the methods every `Uint8Array`
+ * inherits and fails with "JS functions cannot be represented as a
+ * serde_json::Value", which names functions for what is a plain Buffer.
+ *
+ * The conversion has to happen here because the failure is in the argument
+ * conversion, before any core code runs. Of the shapes the core accepts —
+ * hex string, `[u8]`, `{ data: [...] }` — hex is the cheapest to produce.
+ */
+/** Recursively rewrite byte containers to hex, leaving everything else as-is. */
+declare function gtvToFfiSafe(value: unknown): unknown;
+
 /** Derive the 32-byte AES key from an agent's secp256k1 privkey (hex). Deterministic — same privkey always yields the same key. */
 declare function deriveMemoryKey(privkey: string): Promise<Buffer>;
 /** Encrypt UTF-8 plaintext. `ciphertext` has the 16-byte GCM auth tag appended, matching the SDK's on-chain byte layout. */
@@ -1531,4 +1543,4 @@ declare function containsSecret(text: string): boolean;
 declare function createMemorySnapshot(entries: MemoryEntry[], takenAt: number): MemorySnapshot;
 declare function diffMemorySnapshots(before: MemorySnapshot, after: MemorySnapshot): MemoryDiffResult;
 
-export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PRIVATE_CHAIN, PUBLIC_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };
+export { type ActionType, type AgentAuth, type AgentLookupOptions, type AgentMemoryEntry, type AgentPolicy, type AnomalySeverity, type AnomalyType, Atbash, AtbashAPIError, type AtbashLogger, type AtbashOptions, type AtbashUserConfig, BOOT_SYNC_HINT, type ChainConfig, type ChainOpts, type ClassifierToolContext, type ClassifierToolEvent, type ClassifyMemoryReadOptions, type ClassifyMemoryWriteOptions, type ClientSource, type CommitMemoryOptions, DEFAULT_BLOCKCHAIN_RID, DEFAULT_CHROMIA_NODE_URLS, DEFAULT_ENDPOINT, DEFAULT_MEMORY_PATH_PATTERNS, DEFAULT_MEMORY_READ_TOOL_NAMES, DEFAULT_MEMORY_WRITE_TOOL_NAMES, type Decision, type DecisionVerdict, EciesDomain, type EncryptedMemory, type Envelope, type FromConfigOptions, type GuardLogger, type GuardMemoryDecision, type GuardMemoryWriteInput, type GuardMemoryWriteResult, type HeldAction, type HeldActionReview, type HookDecision, HttpClient, HttpTransportError, type JudgeEndpointConfig, type JudgeOptions, type JudgeResult, type JudgmentState, type JudgmentStatus, KEY_FILENAMES, type KeyPair, type LogToolCallOptions, type LogToolCallResult, type MemoryAnomaly, type MemoryDiffResult, type MemoryEntry, MemoryGuardManager, type MemoryGuardManagerOptions, MemoryIntegrityError, type MemoryPointer, type MemoryRollbackEvent, type MemoryScanOptions, type MemoryScanResult, type MemoryScanVerdict, type MemorySnapshot, type ModifiedEntry, type Network, type OrgSubscription, PRIVATE_CHAIN, PUBLIC_CHAIN, PointerStore, type Provider, type PubkeyValue, type RedactResult, type RollbackMemoryOptions, type SecretKind, type SecretMatch, SignatureVerificationError, type Subscription, type SyncMemoryOptions, type SyncMemoryResult, type TelemetryConfig, type TierInfo, type ToolCallFull, type ToolCallInput, type ToolCallRecord, type ValidatedEndpoint, type Verdict, type WrappedLogger, bootSyncFailureLine, buildAllowedJudgeHosts, canonicalAllow, chainForNetwork, chooseKeyPath, claimHashHex, classifyMemoryRead, classifyMemoryWrite, columnAad, commitMemoryVersion, containsEvasionCharacters, containsSecret, createFileLogger, createMemoryGuardManager, createMemorySnapshot, decryptForOrg, decryptMemoryContent, defaultPluginLogPath, defaultPointerPath, deriveMemoryKey, derivePublicKey, diffMemorySnapshots, encryptForOrg, encryptMemoryContent, encryptedLength, flushTelemetry, generateKeypair, getActiveAgentMemory, getActiveMemoryId, getConfigDir, getConfigPath, getMemoryById, getMemoryHistory, getRecentAgentMemory, getRollbackHistory, gtvToFfiSafe, guardMemoryWrite, isEnvelope, isValidPrivateKey, keyFingerprintOf, keyPathCandidates, loadAgent, loadAgentFromFile, loadUserConfig, normalizeActionForHash, normalizeActionType, normalizeForMatching, normalizeStatus, normalizeVerdict, packEnvelope, parseEnvelope, pubkeyToHex, recordCall, recordDuration, redactJsonStrings, redactSecrets, resolve, resolveKeyPath, rollbackMemory, saveUserConfig, scanMemory, scanMemoryBatch, setupTelemetry, shutdownTelemetry, signEncryptedToolCall, signJudgeAction, signLogToolCall, syncLocalMemory, validateJudgeEndpoint, verifyJudgeResponseSignature, verifySignature };

package/dist/index.js

@@ -2908,6 +2908,7 @@ __export(src_ts_exports, {
   getMemoryHistory: () => getMemoryHistory,
   getRecentAgentMemory: () => getRecentAgentMemory,
   getRollbackHistory: () => getRollbackHistory,
+  gtvToFfiSafe: () => gtvToFfiSafe,
   guardMemoryWrite: () => guardMemoryWrite,
   isEnvelope: () => isEnvelope,
   isValidPrivateKey: () => isValidPrivateKey,
@@ -3434,33 +3435,8 @@ var ENV_MAP = {
   // Same variable name the Hermes plugin already documents.
   judgeVerifyPubKey: "ATBASH_JUDGE_VERIFY_PUBKEY",
   defaultChainNetwork: "ATBASH_DEFAULT_CHAIN_NETWORK",
-  provider: "ATBASH_PROVIDER",
-  providerModel: "ATBASH_PROVIDER_MODEL",
   debug: "ATBASH_DEBUG"
 };
-var DEPRECATED_ENV_VARS = ["ATBASH_BLOCKCHAIN_RID"];
-var DEPRECATED_CONFIG_FIELDS = ["blockchainRid"];
-var deprecatedWarned = false;
-function warnDeprecatedEnvVarsOnce(log = console.warn) {
-  if (deprecatedWarned) return;
-  for (const name2 of DEPRECATED_ENV_VARS) {
-    if (process.env[name2]) {
-      deprecatedWarned = true;
-      log(
-        `[atbash] ${name2} is ignored \u2014 each org's chain is resolved from the dashboard; set ATBASH_DEFAULT_CHAIN_NETWORK=private only to pin everything to private`
-      );
-    }
-  }
-  const fileConfig = loadUserConfig();
-  for (const field of DEPRECATED_CONFIG_FIELDS) {
-    if (fileConfig[field]) {
-      deprecatedWarned = true;
-      log(
-        `[atbash] "${field}" in ${getConfigPath()} is ignored \u2014 pass \`chain\` or \`network\` at construction instead`
-      );
-    }
-  }
-}
 function getConfigDir() {
   const home2 = process.env.HOME || (0, import_node_os3.homedir)() || "";
   return (0, import_node_path3.join)(home2, ".config", "atbash");
@@ -3619,14 +3595,13 @@ var Atbash = class _Atbash {
     this._defaultChain = resolvedChain;
     this._explicitChain = options.chain !== void 0 || options.network !== void 0 || options.blockchainRid !== void 0 && options.nodeUrls !== void 0;
     this._forcedNetwork = forcedChainNetwork();
-    warnDeprecatedEnvVarsOnce((msg) => options.logger?.warn?.(msg));
     this.orgName = options.orgName;
     this.verifyPubKey = validated.verifyPubKey ?? void 0;
     this.orgEncryptionPubKey = options.orgEncryptionPubKey;
     this.failClosed = options.failClosed !== false;
     this.debug = options.debug === true;
     this.logger = options.logger ?? {};
-    this.http = new HttpClient(this.endpoint, options.timeoutMs ?? 6e4);
+    this.http = new HttpClient(this.endpoint, options.timeoutMs ?? 12e4);
     this.logEnvironmentOnce();
     if (this.endpoint !== DEFAULT_ENDPOINT) {
       this.logger.warn?.("[atbash] running on non-default judge endpoint", {
@@ -3877,18 +3852,15 @@ var Atbash = class _Atbash {
     if (!logResult.success || !logResult.toolCallId || !logResult.signedHex) {
       throw new Error(logResult.error || "Failed to sign log_tool_call");
     }
-    let signedJudgeAction;
-    if (!options.provider) {
-      const judgmentId = generateToolCallId();
-      signedJudgeAction = native.signJudgeAction(
-        judgmentId,
-        action,
-        context || "",
-        "",
-        this.auth.privkey,
-        brid
-      );
-    }
+    const judgmentId = generateToolCallId();
+    const signedJudgeAction = native.signJudgeAction(
+      judgmentId,
+      action,
+      context || "",
+      "",
+      this.auth.privkey,
+      brid
+    );
     const body = {
       tool_call_id: logResult.toolCallId,
       agent_pubkey: this.auth.pubkey,
@@ -3897,10 +3869,8 @@ var Atbash = class _Atbash {
     };
     if (signedJudgeAction) body.signed_judge_action = signedJudgeAction;
     if (context) body.context = context;
-    if (options.provider) body.provider = options.provider;
     if (options.toolName) body.tool_name = options.toolName;
     if (options.toolArgsJson) body.tool_args_json = options.toolArgsJson;
-    if (options.model) body.model = options.model;
     if (options.resolved) body.resolved = options.resolved;
     if (options.mode) body.mode = options.mode;
     let resp;
@@ -4752,6 +4722,20 @@ function bootSyncFailureLine(cause) {
   );
 }
 
+// src-ts/memory/_gtv_bytes.ts
+function gtvToFfiSafe(value) {
+  if (value instanceof Uint8Array) return Buffer.from(value).toString("hex");
+  if (Array.isArray(value)) return value.map(gtvToFfiSafe);
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [key3, val] of Object.entries(value)) {
+      out[key3] = gtvToFfiSafe(val);
+    }
+    return out;
+  }
+  return value;
+}
+
 // src-ts/memory/crypto.ts
 async function deriveMemoryKey(privkey) {
   return native.deriveMemoryKey(privkey);
@@ -43039,7 +43023,7 @@ async function commitMemoryVersion(plaintext, auth, opts) {
   );
 }
 async function decryptRow(row, key3) {
-  const parsed = native.parseMemoryRow(row);
+  const parsed = native.parseMemoryRow(gtvToFfiSafe(row));
   let content;
   let decryptError;
   try {
@@ -43079,7 +43063,7 @@ async function getActiveMemoryId(auth, chainOpts, filePath) {
     native.QUERY_GET_ACTIVE_MEMORY_ID,
     paramsWithOptionalFilePath(q.agent_pubkey_hex, q.file_path)
   );
-  return native.parseActiveMemoryId(raw2);
+  return native.parseActiveMemoryId(gtvToFfiSafe(raw2));
 }
 async function getRecentAgentMemory(auth, chainOpts, filePath) {
   const client = await buildChainClient(chainOpts);
@@ -43131,7 +43115,7 @@ async function getRollbackHistory(auth, chainOpts, filePath) {
     native.QUERY_GET_AGENT_MEMORY_ROLLBACK_HISTORY,
     paramsWithOptionalFilePath(q.agent_pubkey_hex, q.file_path)
   );
-  const parsed = native.parseRollbackRows(raw2 ?? []);
+  const parsed = native.parseRollbackRows(gtvToFfiSafe(raw2 ?? []));
   return parsed.map((r2) => ({
     fromId: r2.from_id,
     toId: r2.to_id,
@@ -43891,6 +43875,7 @@ function diffMemorySnapshots(before, after) {
   getMemoryHistory,
   getRecentAgentMemory,
   getRollbackHistory,
+  gtvToFfiSafe,
   guardMemoryWrite,
   isEnvelope,
   isValidPrivateKey,

package/dist/index.mjs

@@ -3348,33 +3348,8 @@ var ENV_MAP = {
   // Same variable name the Hermes plugin already documents.
   judgeVerifyPubKey: "ATBASH_JUDGE_VERIFY_PUBKEY",
   defaultChainNetwork: "ATBASH_DEFAULT_CHAIN_NETWORK",
-  provider: "ATBASH_PROVIDER",
-  providerModel: "ATBASH_PROVIDER_MODEL",
   debug: "ATBASH_DEBUG"
 };
-var DEPRECATED_ENV_VARS = ["ATBASH_BLOCKCHAIN_RID"];
-var DEPRECATED_CONFIG_FIELDS = ["blockchainRid"];
-var deprecatedWarned = false;
-function warnDeprecatedEnvVarsOnce(log = console.warn) {
-  if (deprecatedWarned) return;
-  for (const name2 of DEPRECATED_ENV_VARS) {
-    if (process.env[name2]) {
-      deprecatedWarned = true;
-      log(
-        `[atbash] ${name2} is ignored \u2014 each org's chain is resolved from the dashboard; set ATBASH_DEFAULT_CHAIN_NETWORK=private only to pin everything to private`
-      );
-    }
-  }
-  const fileConfig = loadUserConfig();
-  for (const field of DEPRECATED_CONFIG_FIELDS) {
-    if (fileConfig[field]) {
-      deprecatedWarned = true;
-      log(
-        `[atbash] "${field}" in ${getConfigPath()} is ignored \u2014 pass \`chain\` or \`network\` at construction instead`
-      );
-    }
-  }
-}
 function getConfigDir() {
   const home2 = process.env.HOME || homedir3() || "";
   return join3(home2, ".config", "atbash");
@@ -3533,14 +3508,13 @@ var Atbash = class _Atbash {
     this._defaultChain = resolvedChain;
     this._explicitChain = options.chain !== void 0 || options.network !== void 0 || options.blockchainRid !== void 0 && options.nodeUrls !== void 0;
     this._forcedNetwork = forcedChainNetwork();
-    warnDeprecatedEnvVarsOnce((msg) => options.logger?.warn?.(msg));
     this.orgName = options.orgName;
     this.verifyPubKey = validated.verifyPubKey ?? void 0;
     this.orgEncryptionPubKey = options.orgEncryptionPubKey;
     this.failClosed = options.failClosed !== false;
     this.debug = options.debug === true;
     this.logger = options.logger ?? {};
-    this.http = new HttpClient(this.endpoint, options.timeoutMs ?? 6e4);
+    this.http = new HttpClient(this.endpoint, options.timeoutMs ?? 12e4);
     this.logEnvironmentOnce();
     if (this.endpoint !== DEFAULT_ENDPOINT) {
       this.logger.warn?.("[atbash] running on non-default judge endpoint", {
@@ -3791,18 +3765,15 @@ var Atbash = class _Atbash {
     if (!logResult.success || !logResult.toolCallId || !logResult.signedHex) {
       throw new Error(logResult.error || "Failed to sign log_tool_call");
     }
-    let signedJudgeAction;
-    if (!options.provider) {
-      const judgmentId = generateToolCallId();
-      signedJudgeAction = native.signJudgeAction(
-        judgmentId,
-        action,
-        context || "",
-        "",
-        this.auth.privkey,
-        brid
-      );
-    }
+    const judgmentId = generateToolCallId();
+    const signedJudgeAction = native.signJudgeAction(
+      judgmentId,
+      action,
+      context || "",
+      "",
+      this.auth.privkey,
+      brid
+    );
     const body = {
       tool_call_id: logResult.toolCallId,
       agent_pubkey: this.auth.pubkey,
@@ -3811,10 +3782,8 @@ var Atbash = class _Atbash {
     };
     if (signedJudgeAction) body.signed_judge_action = signedJudgeAction;
     if (context) body.context = context;
-    if (options.provider) body.provider = options.provider;
     if (options.toolName) body.tool_name = options.toolName;
     if (options.toolArgsJson) body.tool_args_json = options.toolArgsJson;
-    if (options.model) body.model = options.model;
     if (options.resolved) body.resolved = options.resolved;
     if (options.mode) body.mode = options.mode;
     let resp;
@@ -4666,6 +4635,20 @@ function bootSyncFailureLine(cause) {
   );
 }
 
+// src-ts/memory/_gtv_bytes.ts
+function gtvToFfiSafe(value) {
+  if (value instanceof Uint8Array) return Buffer.from(value).toString("hex");
+  if (Array.isArray(value)) return value.map(gtvToFfiSafe);
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [key3, val] of Object.entries(value)) {
+      out[key3] = gtvToFfiSafe(val);
+    }
+    return out;
+  }
+  return value;
+}
+
 // src-ts/memory/crypto.ts
 async function deriveMemoryKey(privkey) {
   return native.deriveMemoryKey(privkey);
@@ -42953,7 +42936,7 @@ async function commitMemoryVersion(plaintext, auth, opts) {
   );
 }
 async function decryptRow(row, key3) {
-  const parsed = native.parseMemoryRow(row);
+  const parsed = native.parseMemoryRow(gtvToFfiSafe(row));
   let content;
   let decryptError;
   try {
@@ -42993,7 +42976,7 @@ async function getActiveMemoryId(auth, chainOpts, filePath) {
     native.QUERY_GET_ACTIVE_MEMORY_ID,
     paramsWithOptionalFilePath(q.agent_pubkey_hex, q.file_path)
   );
-  return native.parseActiveMemoryId(raw2);
+  return native.parseActiveMemoryId(gtvToFfiSafe(raw2));
 }
 async function getRecentAgentMemory(auth, chainOpts, filePath) {
   const client = await buildChainClient(chainOpts);
@@ -43045,7 +43028,7 @@ async function getRollbackHistory(auth, chainOpts, filePath) {
     native.QUERY_GET_AGENT_MEMORY_ROLLBACK_HISTORY,
     paramsWithOptionalFilePath(q.agent_pubkey_hex, q.file_path)
   );
-  const parsed = native.parseRollbackRows(raw2 ?? []);
+  const parsed = native.parseRollbackRows(gtvToFfiSafe(raw2 ?? []));
   return parsed.map((r2) => ({
     fromId: r2.from_id,
     toId: r2.to_id,
@@ -43804,6 +43787,7 @@ export {
   getMemoryHistory,
   getRecentAgentMemory,
   getRollbackHistory,
+  gtvToFfiSafe,
   guardMemoryWrite,
   isEnvelope,
   isValidPrivateKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/sdk",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "TypeScript SDK for Atbash — the safety layer that evaluates AI agent actions against operator-defined policies before execution.",
   "keywords": [
     "atbash",
@@ -89,10 +89,10 @@
     "typescript-eslint": "^8.62.1"
   },
   "optionalDependencies": {
-    "@atbash/sdk-linux-x64-gnu": "0.8.0",
-    "@atbash/sdk-linux-arm64-gnu": "0.8.0",
-    "@atbash/sdk-linux-x64-musl": "0.8.0",
-    "@atbash/sdk-darwin-arm64": "0.8.0",
-    "@atbash/sdk-win32-x64-msvc": "0.8.0"
+    "@atbash/sdk-linux-x64-gnu": "0.9.0",
+    "@atbash/sdk-linux-arm64-gnu": "0.9.0",
+    "@atbash/sdk-linux-x64-musl": "0.9.0",
+    "@atbash/sdk-darwin-arm64": "0.9.0",
+    "@atbash/sdk-win32-x64-msvc": "0.9.0"
   }
 }