@auctra/sdk 0.3.5 → 0.6.1

package/dist/cjs/index.js

@@ -1,336 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Auctra = exports.AuctraApiError = exports.AUCTRA_SDK_VERSION = void 0;
-exports.AUCTRA_SDK_VERSION = "0.3.5";
-class AuctraApiError extends Error {
-    status;
-    code;
-    details;
-    requestId;
-    constructor(message, options) {
-        super(message);
-        this.name = "AuctraApiError";
-        this.status = options.status;
-        this.code = options.code;
-        this.details = options.details;
-        this.requestId = options.requestId;
-    }
-}
-exports.AuctraApiError = AuctraApiError;
-function retryDelay(response, attempt) {
-    const retryAfter = response?.headers.get("retry-after");
-    if (retryAfter) {
-        const seconds = Number(retryAfter);
-        if (Number.isFinite(seconds))
-            return Math.min(30_000, Math.max(0, seconds * 1_000));
-        const dateDelay = Date.parse(retryAfter) - Date.now();
-        if (Number.isFinite(dateDelay))
-            return Math.min(30_000, Math.max(0, dateDelay));
-    }
-    return Math.min(5_000, 150 * 2 ** attempt);
-}
-function wait(ms, signal) {
-    if (signal?.aborted)
-        return Promise.reject(signal.reason);
-    return new Promise((resolve, reject) => {
-        const timeout = setTimeout(resolve, ms);
-        signal?.addEventListener("abort", () => {
-            clearTimeout(timeout);
-            reject(signal.reason);
-        }, { once: true });
-    });
-}
-class Auctra {
-    apiKey;
-    baseUrl;
-    timeoutMs;
-    maxRetries;
-    fetchImpl;
-    constructor(options) {
-        if (!options.apiKey.trim())
-            throw new Error("apiKey is required");
-        if (options.timeoutMs !== undefined && options.timeoutMs <= 0) {
-            throw new Error("timeoutMs must be greater than zero");
-        }
-        if (options.maxRetries !== undefined &&
-            (!Number.isInteger(options.maxRetries) || options.maxRetries < 0)) {
-            throw new Error("maxRetries must be a non-negative integer");
-        }
-        this.apiKey = options.apiKey;
-        this.baseUrl = (options.baseUrl ?? "https://console.auctra.tech").replace(/\/$/, "");
-        this.timeoutMs = options.timeoutMs ?? 10_000;
-        this.maxRetries = options.maxRetries ?? 2;
-        this.fetchImpl = options.fetch ?? globalThis.fetch;
-        if (!this.fetchImpl)
-            throw new Error("A fetch implementation is required");
-    }
-    async request(method, path, body, options = {}) {
-        const retryableRequest = method === "GET" || Boolean(options.idempotencyKey);
-        let lastError;
-        for (let attempt = 0; attempt <= this.maxRetries; attempt += 1) {
-            if (options.signal?.aborted)
-                throw options.signal.reason;
-            const timeoutSignal = AbortSignal.timeout(this.timeoutMs);
-            const signal = options.signal
-                ? AbortSignal.any([options.signal, timeoutSignal])
-                : timeoutSignal;
-            let response;
-            try {
-                response = await this.fetchImpl(`${this.baseUrl}${path}`, {
-                    method,
-                    signal,
-                    headers: {
-                        ...(body !== undefined ? { "content-type": "application/json" } : {}),
-                        ...(options.idempotencyKey ? { "idempotency-key": options.idempotencyKey } : {}),
-                        authorization: `Bearer ${this.apiKey}`,
-                        "x-auctra-sdk-version": exports.AUCTRA_SDK_VERSION,
-                    },
-                    ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
-                });
-                const data = (await response.json().catch(() => ({})));
-                if (response.ok)
-                    return data;
-                if (retryableRequest &&
-                    (response.status === 429 || response.status >= 500) &&
-                    attempt < this.maxRetries) {
-                    await wait(retryDelay(response, attempt), options.signal);
-                    continue;
-                }
-                throw new AuctraApiError(typeof data.error === "string" ? data.error : `Auctra API error (${response.status})`, {
-                    status: response.status,
-                    code: typeof data.code === "string" ? data.code : undefined,
-                    details: data.details,
-                    requestId: response.headers.get("x-request-id") ?? undefined,
-                });
-            }
-            catch (error) {
-                lastError = error;
-                if (options.signal?.aborted)
-                    throw options.signal.reason;
-                if (error instanceof AuctraApiError || !retryableRequest || attempt >= this.maxRetries) {
-                    throw error;
-                }
-                await wait(retryDelay(response, attempt), options.signal);
-            }
-        }
-        throw lastError;
-    }
-    async evaluateAction(input, options = {}) {
-        const idempotencyKey = options.idempotencyKey ?? crypto.randomUUID();
-        return this.request("POST", "/v1/action-requests/evaluate", {
-            agent_id: input.agentId,
-            action_type: input.actionType,
-            payload: input.payload ?? {},
-            claimed_intent_id: input.claimedIntentId,
-            intent_anchor_token: input.intentAnchorToken,
-            parent_action_id: input.parentActionId,
-            actor: input.actor
-                ? {
-                    id: input.actor.id,
-                    type: input.actor.type,
-                    name: input.actor.name,
-                }
-                : undefined,
-            action: input.action
-                ? {
-                    target: input.action.target,
-                    description: input.action.description,
-                    risk_level: input.action.riskLevel,
-                    metadata: input.action.metadata,
-                }
-                : undefined,
-        }, { ...options, idempotencyKey });
-    }
-    async listIntents() {
-        return this.request("GET", "/v1/intents");
-    }
-    async createIntent(input) {
-        return this.request("POST", "/v1/intents", {
-            title: input.title,
-            description: input.description,
-            intent_type: input.intentType,
-            risk_level: input.riskLevel,
-            max_risk_level: input.maxRiskLevel,
-            expires_at: input.expiresAt,
-            allowed_action_types: input.allowedActionTypes,
-            target_pattern: input.targetPattern,
-            resource_allowlist: input.resourceAllowlist,
-        });
-    }
-    async getIntent(intentId) {
-        return this.request("GET", `/v1/intents/${encodeURIComponent(intentId)}`);
-    }
-    async updateIntentStatus(intentId, status) {
-        return this.updateIntent(intentId, { status });
-    }
-    async updateIntent(intentId, input) {
-        return this.request("PATCH", `/v1/intents/${encodeURIComponent(intentId)}`, {
-            status: input.status,
-            title: input.title,
-            description: input.description,
-            intent_type: input.intentType,
-            risk_level: input.riskLevel,
-            max_risk_level: input.maxRiskLevel,
-            expires_at: input.expiresAt,
-        });
-    }
-    async getAuthorityGraph() {
-        return this.request("GET", "/v1/authority/graph");
-    }
-    async createAuthorityEdge(input) {
-        return this.request("POST", "/v1/authority/edges", {
-            from_actor_id: input.fromActorId,
-            from_actor_type: input.fromActorType,
-            to_actor_id: input.toActorId,
-            to_actor_type: input.toActorType,
-            authority_scope: input.authorityScope,
-            conditions: input.conditions,
-            max_risk_level: input.maxRiskLevel,
-            expires_at: input.expiresAt,
-        });
-    }
-    async getActionEvaluation(actionRequestId) {
-        return this.request("GET", `/v1/action-requests/${encodeURIComponent(actionRequestId)}/evaluation`);
-    }
-    async getRootIntentChain(actionRequestId) {
-        return this.request("GET", `/v1/action-requests/${encodeURIComponent(actionRequestId)}/root-intent`);
-    }
-    async listAgents() {
-        return this.request("GET", "/v1/agents");
-    }
-    async getAgent(agentId) {
-        return this.request("GET", `/v1/agents/${encodeURIComponent(agentId)}`);
-    }
-    async createAgent(input) {
-        return this.request("POST", "/v1/agents", {
-            name: input.name,
-            model_provider: input.modelProvider,
-            model_name: input.modelName,
-            description: input.description,
-            environment: input.environment,
-            authority_level: input.authorityLevel,
-            sponsor_user_id: input.sponsorUserId,
-        });
-    }
-    async updateAgentStatus(agentId, input) {
-        return this.request("PATCH", `/v1/agents/${encodeURIComponent(agentId)}`, {
-            status: input.status,
-            reason: input.reason,
-            revoke_delegations: input.revokeDelegations,
-            restore_delegations: input.restoreDelegations,
-        });
-    }
-    async deleteAgent(agentId) {
-        return this.request("DELETE", `/v1/agents/${encodeURIComponent(agentId)}`);
-    }
-    async listDelegations() {
-        return this.request("GET", "/v1/delegations");
-    }
-    async getDelegation(delegationId) {
-        return this.request("GET", `/v1/delegations/${encodeURIComponent(delegationId)}`);
-    }
-    async createDelegation(input) {
-        return this.request("POST", "/v1/delegations", {
-            agent_id: input.agentId,
-            action_types: input.actionTypes,
-            valid_until: input.validUntil,
-            max_amount: input.maxAmount,
-            max_count: input.maxCount,
-            environment: input.environment,
-            currency: input.currency,
-            delegator_user_id: input.delegatorUserId,
-            max_actions_per_window: input.maxActionsPerWindow
-                ? {
-                    count: input.maxActionsPerWindow.count,
-                    window_seconds: input.maxActionsPerWindow.windowSeconds,
-                    action_type: input.maxActionsPerWindow.actionType,
-                }
-                : undefined,
-            max_amount_per_window: input.maxAmountPerWindow
-                ? {
-                    amount: input.maxAmountPerWindow.amount,
-                    window_seconds: input.maxAmountPerWindow.windowSeconds,
-                }
-                : undefined,
-        });
-    }
-    async revokeDelegation(delegationId) {
-        return this.request("POST", `/v1/delegations/${encodeURIComponent(delegationId)}/revoke`, {});
-    }
-    async listActionRequests() {
-        return this.request("GET", "/v1/action-requests");
-    }
-    async approveActionRequest(actionRequestId, approverUserId, reason) {
-        return this.resolveActionRequest(actionRequestId, "approve", approverUserId, reason);
-    }
-    async rejectActionRequest(actionRequestId, approverUserId, reason) {
-        return this.resolveActionRequest(actionRequestId, "reject", approverUserId, reason);
-    }
-    async escalateActionRequest(actionRequestId, approverUserId, reason) {
-        return this.resolveActionRequest(actionRequestId, "escalate", approverUserId, reason);
-    }
-    async resolveActionRequest(actionRequestId, action, approverUserId, reason) {
-        return this.request("POST", `/v1/action-requests/${encodeURIComponent(actionRequestId)}/${action}`, { reason, approver_user_id: approverUserId });
-    }
-    async listPolicies() {
-        return this.request("GET", "/v1/policies");
-    }
-    async createPolicy(input) {
-        return this.request("POST", "/v1/policies", {
-            name: input.name,
-            description: input.description,
-            policy_type: input.policyType,
-            status: input.status,
-            priority: input.priority,
-            action_type: input.actionType,
-            amount_greater_than: input.amountGreaterThan,
-            resource_sensitivity: input.resourceSensitivity,
-            external_recipient: input.externalRecipient,
-            environment: input.environment,
-            decision: input.decision,
-            approver_role: input.approverRole,
-            max_actions_per_window: input.maxActionsPerWindow
-                ? {
-                    count: input.maxActionsPerWindow.count,
-                    window_seconds: input.maxActionsPerWindow.windowSeconds,
-                    action_type: input.maxActionsPerWindow.actionType,
-                }
-                : undefined,
-            max_amount_per_window: input.maxAmountPerWindow
-                ? {
-                    amount: input.maxAmountPerWindow.amount,
-                    window_seconds: input.maxAmountPerWindow.windowSeconds,
-                }
-                : undefined,
-        });
-    }
-    async simulatePolicy(policyId, input = {}) {
-        return this.request("POST", `/v1/policies/${encodeURIComponent(policyId)}/simulate`, input);
-    }
-    async publishPolicy(policyId, input = {}) {
-        return this.request("POST", `/v1/policies/${encodeURIComponent(policyId)}/publish`, input);
-    }
-    async listActionTypes() {
-        return this.listCustomActionTypes();
-    }
-    async listCustomActionTypes() {
-        return this.request("GET", "/v1/action-types");
-    }
-    async createCustomActionType(input) {
-        return this.request("POST", "/v1/action-types", {
-            id: input.id,
-            label: input.label,
-            description: input.description,
-            category: input.category,
-            policy_type: input.policyType,
-            payload_schema: input.payloadSchema ?? {},
-        });
-    }
-    async listAuditEvents() {
-        return this.request("GET", "/v1/audit-events");
-    }
-    async listApiKeys() {
-        return this.request("GET", "/v1/api-keys");
-    }
-}
-exports.Auctra = Auctra;
+exports.Auctra = exports.verifyDecisionArtifact = exports.verifyMandateArtifact = exports.AuctraApiError = exports.AUCTRA_SDK_VERSION = void 0;
+/**
+ * @auctra/sdk — Stage 1.0 public surface.
+ *
+ * Modular layout under src/{types,artifacts,client,authority,action,evidence}.ts.
+ * Canonical API: authority.* / action.* / evidence.* — no createDelegation / evaluateAction.
+ */
+var types_js_1 = require("./types.js");
+Object.defineProperty(exports, "AUCTRA_SDK_VERSION", { enumerable: true, get: function () { return types_js_1.AUCTRA_SDK_VERSION; } });
+var artifacts_js_1 = require("./artifacts.js");
+Object.defineProperty(exports, "AuctraApiError", { enumerable: true, get: function () { return artifacts_js_1.AuctraApiError; } });
+Object.defineProperty(exports, "verifyMandateArtifact", { enumerable: true, get: function () { return artifacts_js_1.verifyMandateArtifact; } });
+Object.defineProperty(exports, "verifyDecisionArtifact", { enumerable: true, get: function () { return artifacts_js_1.verifyDecisionArtifact; } });
+var client_js_1 = require("./client.js");
+Object.defineProperty(exports, "Auctra", { enumerable: true, get: function () { return client_js_1.Auctra; } });

package/dist/cjs/types.js

@@ -0,0 +1,5 @@
+"use strict";
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUCTRA_SDK_VERSION = void 0;
+exports.AUCTRA_SDK_VERSION = "0.6.1";

package/dist/esm/action.d.ts

@@ -0,0 +1,3 @@
+/** Action Protocol client surface — evaluate (dry-run) / execute (enforce + evidence). */
+export type { ActionEvaluation, EvaluateActionInput, EvaluateActionResponse } from "./types.js";
+//# sourceMappingURL=action.d.ts.map

package/dist/esm/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/action.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC"}

package/dist/esm/action.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/artifacts.d.ts

@@ -0,0 +1,28 @@
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+import { type KeyObject } from "node:crypto";
+import type { ArtifactVerification, DecisionEvidence, DecisionEvidencePayload, MandateEvidence, MandatePayload } from "./types.js";
+export declare class AuctraApiError extends Error {
+    readonly status: number;
+    readonly code?: string;
+    readonly details?: unknown;
+    readonly requestId?: string;
+    constructor(message: string, options: {
+        status: number;
+        code?: string;
+        details?: unknown;
+        requestId?: string;
+    });
+}
+export declare function retryDelay(response: Response | undefined, attempt: number): number;
+export declare function wait(ms: number, signal?: AbortSignal): Promise<void>;
+export declare function verifyMandateArtifact(input: {
+    payload: MandatePayload;
+    evidence: MandateEvidence;
+    publicKeyPem?: string | KeyObject;
+}): ArtifactVerification;
+export declare function verifyDecisionArtifact(input: {
+    payload: DecisionEvidencePayload;
+    evidence: DecisionEvidence;
+    publicKeyPem?: string | KeyObject;
+}): ArtifactVerification;
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/esm/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../src/artifacts.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAuD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAElG,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;gBAG1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;CASpF;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,UASzE;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,iBAapD;AAuCD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,oBAAoB,CAkBvB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,uBAAuB,CAAC;IACjC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,oBAAoB,CAkBvB"}

package/dist/esm/artifacts.js

@@ -0,0 +1,102 @@
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+import { createHash, createPublicKey, verify as cryptoVerify } from "node:crypto";
+export class AuctraApiError extends Error {
+    status;
+    code;
+    details;
+    requestId;
+    constructor(message, options) {
+        super(message);
+        this.name = "AuctraApiError";
+        this.status = options.status;
+        this.code = options.code;
+        this.details = options.details;
+        this.requestId = options.requestId;
+    }
+}
+export function retryDelay(response, attempt) {
+    const retryAfter = response?.headers.get("retry-after");
+    if (retryAfter) {
+        const seconds = Number(retryAfter);
+        if (Number.isFinite(seconds))
+            return Math.min(30_000, Math.max(0, seconds * 1_000));
+        const dateDelay = Date.parse(retryAfter) - Date.now();
+        if (Number.isFinite(dateDelay))
+            return Math.min(30_000, Math.max(0, dateDelay));
+    }
+    return Math.min(5_000, 150 * 2 ** attempt);
+}
+export function wait(ms, signal) {
+    if (signal?.aborted)
+        return Promise.reject(signal.reason);
+    return new Promise((resolve, reject) => {
+        const timeout = setTimeout(resolve, ms);
+        signal?.addEventListener("abort", () => {
+            clearTimeout(timeout);
+            reject(signal.reason);
+        }, { once: true });
+    });
+}
+function canonicalizeJson(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalizeJson);
+    if (value && typeof value === "object" && !(value instanceof Date)) {
+        return Object.fromEntries(Object.entries(value)
+            .filter(([, child]) => child !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, child]) => [key, canonicalizeJson(child)]));
+    }
+    if (value instanceof Date)
+        return value.toISOString();
+    return value;
+}
+function hashJson(value) {
+    return createHash("sha256")
+        .update(JSON.stringify(canonicalizeJson(value)))
+        .digest("hex");
+}
+function verifyEd25519(input) {
+    if (!input.publicKeyPem)
+        return false;
+    if (input.signature.alg !== "Ed25519")
+        return false;
+    return cryptoVerify(null, Buffer.from(JSON.stringify(canonicalizeJson(input.payload))), typeof input.publicKeyPem === "string"
+        ? createPublicKey(input.publicKeyPem)
+        : input.publicKeyPem, Buffer.from(input.signature.value, "base64url"));
+}
+export function verifyMandateArtifact(input) {
+    const expectedHash = hashJson(input.payload);
+    if (input.evidence.format !== "auctra-mandate.v0.1") {
+        return { valid: false, hashValid: false, signatureValid: false };
+    }
+    if (!input.evidence.signed) {
+        const hashValid = input.evidence.payload_hash === expectedHash;
+        return { valid: hashValid, hashValid, signatureValid: false };
+    }
+    const hashValid = input.evidence.payload_hash === expectedHash;
+    const signatureValid = hashValid &&
+        verifyEd25519({
+            payload: input.payload,
+            signature: input.evidence.signature,
+            publicKeyPem: input.publicKeyPem,
+        });
+    return { valid: hashValid && signatureValid, hashValid, signatureValid };
+}
+export function verifyDecisionArtifact(input) {
+    const expectedHash = hashJson(input.payload);
+    if (input.evidence.format !== "auctra-evidence.v0.1") {
+        return { valid: false, hashValid: false, signatureValid: false };
+    }
+    if (!input.evidence.signed) {
+        const hashValid = input.evidence.payload_hash === expectedHash;
+        return { valid: hashValid, hashValid, signatureValid: false };
+    }
+    const hashValid = input.evidence.payload_hash === expectedHash;
+    const signatureValid = hashValid &&
+        verifyEd25519({
+            payload: input.payload,
+            signature: input.evidence.signature,
+            publicKeyPem: input.publicKeyPem,
+        });
+    return { valid: hashValid && signatureValid, hashValid, signatureValid };
+}

package/dist/esm/authority.d.ts

@@ -0,0 +1,3 @@
+/** Authority Protocol client surface — issue / verify / delegate / revoke. */
+export type { AuthoritySummary, DelegateAuthorityInput, IssueAuthorityInput } from "./types.js";
+//# sourceMappingURL=authority.d.ts.map

package/dist/esm/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/authority.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}

package/dist/esm/authority.js

@@ -0,0 +1 @@
+export {};